Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11.11.2018
Ran by Ondra (14-11-2018 08:25:35)
Running from C:\Users\Ondra\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-12-16 16:31:49)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3001894681-2676971518-1704727488-500 - Administrator - Disabled)
Guest (S-1-5-21-3001894681-2676971518-1704727488-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3001894681-2676971518-1704727488-1003 - Limited - Enabled)
Ondra (S-1-5-21-3001894681-2676971518-1704727488-1002 - Administrator - Enabled) => C:\Users\Ondra
winpostgr (S-1-5-21-3001894681-2676971518-1704727488-1004 - Limited - Enabled) => C:\Users\winpostgr

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 18.01 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1801-000001000000}) (Version: 18.01.00.0 - Igor Pavlov)
ABRA FlexiBee (HKLM-x32\...\WinStrom 10) (Version:  - FlexiBee Systems s.r.o.)
AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
Active Directory Authentication Library for SQL Server (HKLM\...\{32C0D7B2-1046-43AC-98AD-B748E1910916}) (Version: 13.0.1601.5 - Microsoft Corporation)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.008.20080 - Adobe Systems Incorporated)
Adobe Flash Player 28 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 28.0.0.161 - Adobe Systems Incorporated)
AdWords Editor (HKLM-x32\...\{0584D7C0-AAFD-11E8-BC5D-DC4A3E998CF6}) (Version: 12.5.3.0 - Google)
Alcor Micro Smart Card Reader Driver (HKLM-x32\...\{F24F876B-7D71-4BD6-88E9-614D3BB84242}) (Version: 1.7.42.0 - Alcor Micro Corp.) Hidden
Alcor Micro Smart Card Reader Driver (HKLM-x32\...\SZCCID) (Version: 1.7.42.0 - Alcor Micro Corp.)
ANT Drivers Installer x64 (HKLM\...\{7664AF65-7B0D-4171-9F0F-50455278B428}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 18.2.5964 - AVAST Software)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.7.2354 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 69.1.867.100 - AVAST Software)
Backup and Sync from Google (HKLM\...\{608EBDC6-D18A-4CF6-AD54-EE6B71D29065}) (Version: 3.43.1584.4446 - Google, Inc.)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
BitX (HKLM-x32\...\BitX) (Version: 2.1.5 - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brave (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\Brave) (Version: 0.18.29 - Brave Software)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version:  - Broadcom Corporation)
Broadcom Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.3700 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version:  - Broadcom Corporation)
CamStudio 2.7.4 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.4 - CamStudio Open Source)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Composer - Php Dependency Manager (HKLM-x32\...\{7315AF68-E777-496A-A6A2-4763A98ED35A}_is1) (Version:  - getcomposer.org)
CoolUtils Mail Viewer (HKLM-x32\...\CoolUtils Mail Viewer_is1) (Version: 2.5 - Softplicity, Inc.)
CSE HTML Validator Lite v14.03 (HKLM-x32\...\CSEHTMLVALIDATORLITE140_is1) (Version: 14.3.0.1 - AI Internet Solutions LLC)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.3.3207 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2.3318 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.2.1.4225 - CyberLink Corp.)
Docker Toolbox version 18.02.0-ce (HKLM\...\{FC4417F0-D7F3-48DB-BCE1-F5ED5BAFFD91}_is1) (Version: 18.02.0-ce - Docker)
Dropbox (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\Dropbox) (Version: 43.4.50 - Dropbox, Inc.)
Ekonomický systém Money S3 (HKLM-x32\...\Money S3) (Version: 16.601 (20160704_16) - CÍGLER SOFTWARE, a.s.)
Elevated Installer (HKLM-x32\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
Evernote v. 6.11.2 (HKLM-x32\...\{FC67AAF6-3477-11E8-B094-005056951CAD}) (Version: 6.11.2.7027 - Evernote Corp.)
Exodus (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\exodus) (Version: 1.35.0 - Exodus Movement Inc)
FileZilla Client 3.35.1 (HKLM-x32\...\FileZilla Client) (Version: 3.35.1 - Tim Kosse)
Garmin Express (HKLM-x32\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM-x32\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Git version 1.9.4-preview20140929 (HKLM-x32\...\Git_is1) (Version: 1.9.4-preview20140929 - The Git Development Community)
Git version 2.9.0 (HKLM\...\Git_is1) (Version: 2.9.0 - The Git Development Community)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.31.5290 - GOM & Company)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.77 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.1 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{07F6DC37-0857-4B68-A675-4E35989E85E3}) (Version: 6.0.15.1 - Hewlett-Packard Company)
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 8.3.0.1696 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{F0809EF3-DE1B-4A3C-9825-D4ABD1BA06BC}) (Version: 4.8.10.1 - Hewlett-Packard Company)
HP Device Access Manager (HKLM\...\{D7BC5D88-FC93-46D6-B7B0-145C2E168A95}) (Version: 8.2.1.0 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{1F9551BA-A9D4-4F9D-8526-F8CEB8C10C3E}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Drive Encryption (HKLM\...\HPDriveEncryption) (Version: 8.6.2.59 - Hewlett-Packard Company)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{240B2BF7-E7E6-425C-A2A4-A3149189BF7F}) (Version: 2.3.1 - Hewlett-Packard Company)
HP File Sanitizer (HKLM-x32\...\{547607B0-3294-4ECA-8F5E-921404676CBB}) (Version: 8.4.11.1 - Hewlett-Packard Company)
HP HD Webcam Driver (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10251 - Realtek Semiconductor Corp.)
HP Hotkey Support (HKLM-x32\...\{57FA60DA-585F-456A-B80E-17D1CDD22A30}) (Version: 5.0.27.1 - Hewlett-Packard Company)
HP PageLift (HKLM-x32\...\{708ABF62-5D7A-4550-823A-1F9EFA63645A}) (Version: 1.0.11.1 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{49524B48-4FE9-4A62-A9FD-1F2258DF5489}) (Version: 3.4.12.0 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{B1AFAD6F-9192-421F-9DFF-60A59571366B}) (Version: 8.7.3 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.6.18.11 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\...\{579A990C-3855-4838-AF23-354CE2264BC0}) (Version: 12.9.24.3 - HP)
HP System Default Settings (HKLM-x32\...\{3A61A282-4F08-4D43-920C-DC30ECE528E8}) (Version: 2.6.1 - Hewlett-Packard Company)
HP Theft Recovery (HKLM-x32\...\InstallShield_{BAC712C6-4061-4C9F-AB58-A5C53E76704A}) (Version: 8.2.0.11 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6491.0 - IDT)
ImageMagick 7.0.8-14 Q16 (32-bit) (2018-10-24) (HKLM-x32\...\ImageMagick 7.0.8 Q16 (32-bit)_is1) (Version: 7.0.8 - ImageMagick Studio LLC)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 20.4 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4432 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Java 8 Update 191 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180191F0}) (Version: 8.0.1910.12 - Oracle Corporation)
Java 8 Update 191 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180191F0}) (Version: 8.0.1910.12 - Oracle Corporation)
JetBrains PhpStorm 2016.2.1 (HKLM-x32\...\PhpStorm 2016.2.1) (Version: 162.1889.1 - JetBrains s.r.o.)
KC Softwares RAMExpert (HKLM-x32\...\KC Softwares RAMExpert_is1) (Version: 1.10.0.23 - KC Softwares)
KeePass Password Safe 1.33 (HKLM-x32\...\KeePass Password Safe_is1) (Version: 1.33 - Dominik Reichl)
Kingsoft PDF to Word SDK (2.0.1) (HKLM\...\{F0915BBA-A86F-4672-807D-30F38DFC2B44}) (Version: 2.0.1 - Zhuhai Kingsoft Office Software Co.,Ltd)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.6.9 - Hermann Schinagl)
Malwarebytes verze 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Mi PC Suite (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\MiPhoneManager) (Version:  - Xiaomi Inc.)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft ODBC Driver 11 for SQL Server (HKLM\...\{0A1391C9-AD99-4622-9A4D-973A99AFBEA2}) (Version: 12.1.4219.0 - Microsoft Corporation)
Microsoft ODBC Driver 13 for SQL Server (HKLM\...\{DB7B2107-C3C9-439E-BDA8-823CCC152977}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (English) (HKLM-x32\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Report Viewer for SQL Server 2016 (HKLM-x32\...\{6ECB5D2E-AF2E-4E1B-A311-3CD800DF2A5F}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{1385D3DB-8E80-427B-91D2-B7535862B8E4}) (Version: 11.3.6518.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2016 (HKLM-x32\...\Microsoft SQL Server SQLServer2016) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2016 Policies  (HKLM-x32\...\{0BA40265-9FDA-41FF-8111-E22AE2508F60}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL Language Service  (HKLM\...\{FE3BF1DD-677E-4793-9770-C07AECC88882}) (Version: 13.0.14500.10 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL ScriptDom  (HKLM\...\{D091DE8C-EA0F-49AF-8DE3-BD6C79737C6E}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft SQL Server Data-Tier Application Framework (x86) (HKLM-x32\...\{8DE37F8F-64F7-493A-B479-BB8BB9D1E3B9}) (Version: 13.0.3366.2 - Microsoft Corporation)
Microsoft SQL Server Management Studio - August 2016 (HKLM-x32\...\{9266fcad-f11b-4667-ab94-b9481218e7d8}) (Version: 13.0.15600.2 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2016 (HKLM\...\{96EB5054-C775-4BEF-B7B9-AA96A295EDCD}) (Version: 13.0.1601.5 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2015 Shell (Isolated) (HKLM-x32\...\{d2981c27-a434-4c9a-96c7-0209e97c4eac}) (Version: 14.0.23107.10 - Microsoft Corporation)
Mozilla Firefox 57.0 (x64 cs) (HKLM\...\Mozilla Firefox 57.0 (x64 cs)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.0.6525 - Mozilla)
Mozilla Thunderbird 52.2.1 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 52.2.1 (x86 cs)) (Version: 52.2.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MySQL Connector/C 6.1 (HKLM\...\{ABC3A516-54E3-414B-B501-762E7FB2F9D5}) (Version: 6.1.6 - Oracle Corporation)
MySQL Workbench 6.3 CE (HKLM\...\{CD8C5EC0-56A3-4F6E-BB22-E230059DF1F2}) (Version: 6.3.9 - Oracle Corporation)
NAPS2 5.5.0 (HKLM-x32\...\NAPS2 (Not Another PDF Scanner 2)_is1) (Version:  - Ben Olden-Cooligan)
Neon 0.2.4 (only current user) (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\211a501f-25dd-501b-8c98-509ac17aedfa) (Version: 0.2.4 - Ethan Fast)
Node.js (HKLM\...\{A4B476B6-6807-4F68-8731-5AC4DD55AE6E}) (Version: 0.10.35 - Joyent, Inc. and other Node contributors)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.1 - Notepad++ Team)
NuSphere PhpED version 17.0 (HKLM\...\NuSphere PhpED_is1) (Version: 17.0 - NuSphere Corp.)
OpenOffice 4.1.1 (HKLM-x32\...\{C560D6E7-E40A-435D-8B71-62CBCF1701B2}) (Version: 4.11.9775 - Apache Software Foundation)
opensource (HKLM-x32\...\{3677D4D8-E5E0-49FC-B86E-06541CF00BBE}) (Version: 1.0.14960.3876 - Your Company Name) Hidden
Opera Stable 56.0.3051.99 (HKLM-x32\...\Opera 56.0.3051.99) (Version: 56.0.3051.99 - Opera Software)
Oracle VM VirtualBox 5.2.6 (HKLM\...\{EA9602E3-0184-45B9-9E15-028776CD7A6E}) (Version: 5.2.6 - Oracle Corporation)
pCloud Drive (HKLM-x32\...\{0b82ec81-4f0f-4cfa-9812-aa3b81dad4ad}) (Version: 3.6.4.0 - pCloud AG)
pCloud Drive (HKLM-x32\...\{263DC965-B177-4317-8FEF-C42104D02421}) (Version: 3.6.4 - pCloud AG) Hidden
Php Documentor version 2.0 for NuSphere PhpED (HKLM-x32\...\PHP Documentor_is1) (Version: 17.0 - NuSphere Corp.)
php-5.2.17 for NuSphere PhpED (HKLM-x32\...\PHP5_is1) (Version: 17.0 - NuSphere Corp.)
php-5.5.18 x64 for NuSphere PhpED (HKLM\...\PHP55x64_is1) (Version: 15.0 - NuSphere Corp.)
php-5.6.24 x64 for NuSphere PhpED (HKLM\...\PHP56x64_is1) (Version: 17.0 - NuSphere Corp.)
php-7.0.9 x64 for NuSphere PhpED (HKLM\...\PHP70x64_is1) (Version: 17.0 - NuSphere Corp.)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
Postman-win64-4.9.3 (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\Postman) (Version: 4.9.3 - Postman)
PremiumSoft Navicat 11.1 for MySQL (HKLM\...\PremiumSoft Navicat for MySQL_is1) (Version: 11.1.8 - PremiumSoft CyberTech Ltd.)
PSD Viewer (HKLM-x32\...\{D8EEDC94-EE82-46A0-A7DB-812E3C6A0A6E}_is1) (Version:  - IdeaMK)
PuTTY release 0.70 (64-bit) (HKLM\...\{45B3032F-22CC-40CD-9E97-4DA7095FA5A2}) (Version: 0.70.0.0 - Simon Tatham)
Python 3.6.4 (64-bit) (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\{035e803e-bcc1-4b95-ab44-d33a027f963d}) (Version: 3.6.4150.0 - Python Software Foundation)
Python 3.6.4 Add to Path (64-bit) (HKLM\...\{2DCB9307-E939-4A96-B931-6162B19DB666}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Core Interpreter (64-bit) (HKLM\...\{B3411348-B653-4D70-9A09-28901FB91143}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Development Libraries (64-bit) (HKLM\...\{910DACA6-6A2B-467F-94AE-2DA40A29C0A5}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Documentation (64-bit) (HKLM\...\{732F63FB-D1EA-4D7B-844D-69AB27FB6A1E}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Executables (64-bit) (HKLM\...\{06C8E684-F68F-4AEF-B41E-768E2BDF5FA5}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 pip Bootstrap (64-bit) (HKLM\...\{5DFE0CAA-8EE6-40F7-B940-7FF9E4FB812F}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Standard Library (64-bit) (HKLM\...\{C4D98953-C1E2-4273-929A-BC489AD42FAF}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Tcl/Tk Support (64-bit) (HKLM\...\{F8F7EF2B-246C-4085-B0DD-E3EBCD52D585}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Test Suite (64-bit) (HKLM\...\{7D68AD0E-805E-47EA-B3AF-AD449353EDC9}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Utility Scripts (64-bit) (HKLM\...\{871F9D05-4AF7-40E5-9DBD-1BD29D1ACA6D}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{B42FF40A-60D4-4096-AC47-C86153D72797}) (Version: 3.6.6196.0 - Python Software Foundation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.273.43 - Realtek Semiconductor Corp.)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
SafeZone Stable 1.48.2066.101 (HKLM-x32\...\SafeZone 1.48.2066.101) (Version: 1.48.2066.101 - Avast Software) Hidden
Samsung AllShare (HKLM-x32\...\{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung AllShare (HKLM-x32\...\InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Skype Meetings App (HKLM-x32\...\{56FC471B-6B4E-4CEF-AA29-D3F5D9387731}) (Version: 16.2.0.282 - Microsoft Corporation)
Skype verze 8.33 (HKLM-x32\...\Skype_is1) (Version: 8.33 - Skype Technologies S.A.)
Smart View 2.0 (HKLM-x32\...\{FBAAAFAE-08A8-4C63-87EA-4AEA9DEE53E1}) (Version: 1.0.0.0 - Samsung)
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
Spotify (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\Spotify) (Version: 1.0.92.390.g2ce5ec7d - Spotify AB)
SQL Server 2016 Batch Parser (HKLM\...\{D7A905DB-9A1E-4670-9488-F979F8A77A58}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Client Tools (HKLM-x32\...\{E8230B5A-9A17-45A5-9F2F-B19DC5E3E7B4}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Client Tools (HKLM-x32\...\{F5FA61F2-DB8D-4290-B076-97E267F681B5}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Client Tools Extensions (HKLM\...\{7E94713F-EF30-46EB-B809-BBA8603FBF9E}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Client Tools Extensions (HKLM\...\{AB765DC7-7642-4D1C-BEDC-035516CCD224}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Client Tools Extensions (HKLM-x32\...\{DE5995C3-4C4F-457F-9DB6-224EAB49D322}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Client Tools Extensions (HKLM-x32\...\{EC234B43-728E-4CA9-8AE6-7815325D6AAD}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Common Files (HKLM-x32\...\{80E77F09-0045-4094-AF83-A8525CF1C393}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Common Files (HKLM-x32\...\{B9EED901-157A-4AB8-BFD1-2C6FBF5CF802}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Connection Info (HKLM\...\{74940EE5-66DB-42E3-AC30-295D13B461A7}) (Version: 13.0.14500.10 - Microsoft Corporation) Hidden
SQL Server 2016 Connection Info (HKLM\...\{8A3AE1F0-0752-435D-A01C-033BDD629C8B}) (Version: 13.0.14500.10 - Microsoft Corporation) Hidden
SQL Server 2016 DMF (HKLM\...\{2FFF0757-4360-42F5-8814-16BB5CF0145F}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 DMF (HKLM\...\{34A20DEE-6AD4-44A6-95FF-DFF95CD22B8C}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio (HKLM\...\{735C4E6F-2B66-4C5E-AA70-02F1D52B36B1}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio (HKLM\...\{9B047913-2520-415D-B05F-18C25ACDDAA7}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio (HKLM-x32\...\{264F5132-9818-4334-ADFC-03CA499B7394}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio (HKLM-x32\...\{AEB04BA6-A42E-4897-87F8-60F9C4F1C384}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio Extensions (HKLM-x32\...\{1D792861-C84B-4BD0-8347-34AF40F5ACD1}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio Extensions (HKLM-x32\...\{4BB5BBDE-CA7D-4A12-BD25-FBA18D799A2A}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio for Analysis Services (HKLM\...\{771B4216-D2F4-4310-B6B0-F418582168A8}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio for Analysis Services (HKLM-x32\...\{F50B5189-9B41-45D6-A52D-1341410AF742}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio for Analysis Services Localization (HKLM-x32\...\{680F9845-7630-4DCB-AE27-9952C9093C43}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio for Reporting Services (HKLM-x32\...\{B7F689B3-D017-475F-B0CB-1AD6B96EEB7B}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Management Studio for Reporting Services Localization (HKLM-x32\...\{EAE6509D-D995-489A-BBA3-80FD872DD80A}) (Version: 13.0.15600.2 - Microsoft Corporation) Hidden
SQL Server 2016 Shared Management Objects (HKLM\...\{D3FC7A31-F127-4E2A-96F6-B24FA7D3FFAF}) (Version: 13.0.14500.10 - Microsoft Corporation) Hidden
SQL Server 2016 Shared Management Objects (HKLM\...\{F8001E21-CFCC-47AD-A3B1-6B3EB6D35E48}) (Version: 13.0.14500.10 - Microsoft Corporation) Hidden
SQL Server 2016 Shared Management Objects Extensions (HKLM\...\{B6E1A5EB-1C58-4A04-B76B-E5FE1BE22CA1}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 Shared Management Objects Extensions (HKLM\...\{FA548BCB-5732-40F8-85B0-61515D18D9C1}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 SQL Diagnostics (HKLM\...\{766BE25E-D2B5-4E76-BCB0-29B801BADB3F}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 XEvent (HKLM\...\{8CF2CA8E-3984-46B9-B493-F844F3774FA1}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
SQL Server 2016 XEvent (HKLM\...\{E6FFAAAF-D8B5-4D46-8514-26E96D9F3D8D}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
STORMWARE PDF Printer 10.1.0.1871 (HKLM\...\STORMWARE PDF Printer_is1) (Version: 10.1.0.1871 - STORMWARE)
STORMWARE POHODA Start CZ  (HKLM-x32\...\{149CB128-BA0D-466E-AB83-AA79026502A0}) (Version: 11901.14 - STORMWARE)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.68 - Synaptics Incorporated)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: 6.1-15163 - Synology)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.1.3629 - TeamViewer)
Telegram Desktop version 1.2.6 (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.2.6 - Telegram Messenger LLP)
Test Mail Server Tool (HKLM-x32\...\{5781A356-8BC3-4AD1-8214-DDD0CCA85B2A}) (Version: 2.54 - Toolheap)
TortoiseGit 1.8.12.0 (64 bit) (HKLM\...\{8E3CA370-C7AD-48FD-8907-0535749DBF42}) (Version: 1.8.12.0 - TortoiseGit)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Validity Fingerprint Sensor Driver (HKLM\...\{F5850B80-27F9-406E-91D3-1329F813BA63}) (Version: 4.5.130.0 - Validity Sensors, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.4 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.7.6.0 - Azureus Software, Inc.)
Windscribe version 1.61 build 9 (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.61 build 9 - Windscribe)
WinSCP 5.13 (HKLM-x32\...\winscp3_is1) (Version: 5.13 - Martin Prikryl)
wkhtmltox 0.12.3.2 (HKLM\...\wkhtmltopdf) (Version:  - )
WPS Office (10.2.0.7549) (HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\Kingsoft Office) (Version: 10.2.0.7549 - Kingsoft Corp.)
XAMPP (HKLM-x32\...\xampp) (Version: 7.0.9-1 - Bitnami)
Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr)
XML Explorer (HKLM-x32\...\{13CD7D45-69DA-4C83-A8EA-488A396B6920}) (Version: 4.0.5 - XML Explorer)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{3E3AD4BD-346A-460A-80E8-90699B75C00B}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.282\GatewayActiveX-x64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{70239788-4DAE-49B8-9270-5D8614384B49}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll (Zhuhai Kingsoft Office Software Co.,Ltd)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll ()
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Ondra\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [    pCloudINPROGRESS] -> {D8BFAFBD-B670-4252-9C17-9CF1C64C2BAF} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2017-10-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [    pCloudINSYNC] -> {8D0C0582-552A-4A6B-9455-DA63E1F329C0} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2017-10-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [    pCloudNOSYNC] -> {3858ED1B-8F1C-42ED-A8A9-FDBF591E3C6B} => C:\Program Files (x86)\pCloud Drive\OverlayIcon64.dll [2017-10-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-10-04] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-10-04] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-10-04] (Google)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-30] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-30] (AVAST Software)
ShellIconOverlayIdentifiers: [1aCopyShExtError] -> {83BEA36E-7680-4598-A4DF-994426F6E78D} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2aCopyShExtSynced] -> {845B7388-6F85-4F32-9FD5-F02DC7882B89} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3aCopyShExtSyncing] -> {F6378A7A-F753-449B-AE1B-997A96132E61} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4aCopyShExtSyncingProg1] -> {3A511828-777D-46F8-82F4-5B530C1B3D9E} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5aCopyShExtSyncingProg2] -> {C8C88204-5B14-40EC-BA72-8AEBC762047E} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6aCopyShExtSyncingProg3] -> {ACFF45C3-3EEB-4351-86C2-6696BA264239} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7aCopyShExtSyncingProg4] -> {29AF997F-488B-46F0-AE78-7146F1B89CC3} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8aCopyShExtSyncingProg5] -> {03F9AD29-1C78-4B66-8890-B177B5430C53} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {F22D96AD-3B28-4505-AF9B-94B2DF67ED86} => C:\Windows\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {F22D96AD-3B28-4505-AF9B-94B2DF67ED86} => C:\Windows\system32\cbfsMntNtf6.dll [2016-09-09] (/n software, Inc.)
ShellIconOverlayIdentifiers-x32: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2016-10-16] ()
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-30] (AVAST Software)
ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-08-07] (Cyberlink)
ContextMenuHandlers1: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
ContextMenuHandlers1: [CopyShExt] -> {D8CAB8C2-9E58-471C-BD75-2ED1BA091CE8} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-10-04] (Google)
ContextMenuHandlers1: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ContextMenuHandlers1: [ShredContextMenu] -> {85EFA470-665A-4322-AB1E-1EB9C70F61C8} => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\ShredContextMenu.dll [2013-08-07] ()
ContextMenuHandlers1: [TortoiseGit] -> {10A0FDD2-B0C0-4cd4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub.dll [2014-11-25] (hxxp://tortoisegit.org/)
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-08-07] (Cyberlink)
ContextMenuHandlers2: [TortoiseGit] -> {10A0FDD2-B0C0-4cd4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub.dll [2014-11-25] (hxxp://tortoisegit.org/)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-30] (AVAST Software)
ContextMenuHandlers3: [ComposerSetup] -> {9DF9AD0B-5D99-485A-840E-858003F87478} => C:\Program Files (x86)\ComposerSetup\shellext64.dll [2013-11-22] ()
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers4: [ContextMenuExtension] -> {a0b73fac-351f-3948-9d8a-1dad9d870193} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-10-04] (Google)
ContextMenuHandlers4: [ShredContextMenu] -> {85EFA470-665A-4322-AB1E-1EB9C70F61C8} => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\ShredContextMenu.dll [2013-08-07] ()
ContextMenuHandlers4: [TortoiseGit] -> {10A0FDD2-B0C0-4cd4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub.dll [2014-11-25] (hxxp://tortoisegit.org/)
ContextMenuHandlers5: [ComposerSetup] -> {9DF9AD0B-5D99-485A-840E-858003F87478} => C:\Program Files (x86)\ComposerSetup\shellext64.dll [2013-11-22] ()
ContextMenuHandlers5: [CopyShExt] -> {D8CAB8C2-9E58-471C-BD75-2ED1BA091CE8} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ContextMenuHandlers5: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2016-10-06] (Intel Corporation)
ContextMenuHandlers5: [TortoiseGit] -> {10A0FDD2-B0C0-4cd4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub.dll [2014-11-25] (hxxp://tortoisegit.org/)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-30] (AVAST Software)
ContextMenuHandlers6: [CopyShExt] -> {D8CAB8C2-9E58-471C-BD75-2ED1BA091CE8} => C:\Users\Ondra\AppData\Roaming\Copy\overlay\CopyShExt.dll -> No File
ContextMenuHandlers6: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files\LinkShellExtension\HardlinkShellExt.dll [2018-03-03] (Hermann Schinagl)
ContextMenuHandlers6: [TortoiseGit] -> {10A0FDD2-B0C0-4cd4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub.dll [2014-11-25] (hxxp://tortoisegit.org/)
ContextMenuHandlers1_S-1-5-21-3001894681-2676971518-1704727488-1002: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ContextMenuHandlers1_S-1-5-21-3001894681-2676971518-1704727488-1002: [Git-Cheetah] -> {ca586c80-7c84-4b88-8537-726724df6929} => C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll [2014-09-30] ()
ContextMenuHandlers1_S-1-5-21-3001894681-2676971518-1704727488-1002: [kpdf2wordshellext] -> {70239788-4DAE-49B8-9270-5D8614384B49} => C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll [2018-11-02] (Zhuhai Kingsoft Office Software Co.,Ltd)
ContextMenuHandlers2_S-1-5-21-3001894681-2676971518-1704727488-1002: [Git-Cheetah] -> {ca586c80-7c84-4b88-8537-726724df6929} => C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll [2014-09-30] ()
ContextMenuHandlers4_S-1-5-21-3001894681-2676971518-1704727488-1002: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-3001894681-2676971518-1704727488-1002: [Git-Cheetah] -> {ca586c80-7c84-4b88-8537-726724df6929} => C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll [2014-09-30] ()
ContextMenuHandlers5_S-1-5-21-3001894681-2676971518-1704727488-1002: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Ondra\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2018-02-08] (Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-3001894681-2676971518-1704727488-1002: [Git-Cheetah] -> {ca586c80-7c84-4b88-8537-726724df6929} => C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll [2014-09-30] ()
ContextMenuHandlers6_S-1-5-21-3001894681-2676971518-1704727488-1002: [Git-Cheetah] -> {ca586c80-7c84-4b88-8537-726724df6929} => C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll [2014-09-30] ()

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {063BC8B4-A39C-4B72-AB63-BD9F84502008} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-17] (AVAST Software)
Task: {0A6B3312-E3F0-4A66-BBA2-EC5F95C7F7DD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {0FA86CD1-01B6-4AE6-8462-1BA6925B8FEF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-08-21] (HP Inc.)
Task: {16F6E83D-F460-409A-81AF-2C7FACACD456} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {1745019C-ACBD-4C34-B2F8-6D608D3D6264} - System32\Tasks\{0D598640-22F6-4172-A974-A1465BC85C0D} => C:\Users\Ondra\Downloads\Croc-Legend-of-the-Gobbos-plná-hra.exe
Task: {1C4B80C0-7CEE-4149-8809-5D3A842CF70A} - System32\Tasks\{28F46105-5900-451D-8EFF-46309ED0CC96} => C:\Users\Ondra\Downloads\Croc-Legend-of-the-Gobbos-plná-hra.exe
Task: {1C9BC7C3-49C4-4E73-A58D-F88E9288E075} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {3087A45E-39D5-4473-B90C-962EC17E6DDE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {31BD4005-224C-4919-A25E-F025CFF5D7A2} - System32\Tasks\{CCFF13F8-536E-4288-9304-1CD003F5BEE5} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\HP\HP Touchpoint Analytics Client\TAInstaller.exe" -c --uninstall --ignore-deployers --show-ui
Task: {31C95640-3164-4513-9A82-58E96FA54DB9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {38A05E88-B23F-4DFA-9C03-3579829B0EA6} - System32\Tasks\Avast Cleanup Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [2018-10-24] (AVAST Software)
Task: {3A5B9B0E-CFA0-44B3-9DFA-5D99379ACAE3} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {510EA3E0-9268-4E08-9472-7B2C581D834A} - System32\Tasks\BitX => C:\Program Files (x86)\BitX\BitXSplash.exe [2016-08-10] ()
Task: {56844C16-FEAF-44AF-93F0-F5079FB5010B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {59572F1C-0B93-497A-8BD1-D2337659786F} - System32\Tasks\WpsExternal_Ondra_20181102163233 => C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\ksolaunch.exe [2018-11-02] (Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {5BE5D991-5432-4897-AD26-BD0317775349} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {5D6CFF7C-9CC4-4286-8A42-97F23C563EEF} - System32\Tasks\Opera scheduled Autoupdate 1422516814 => C:\Program Files (x86)\Opera\launcher.exe [2018-11-06] (Opera Software)
Task: {7230974C-F59A-4405-BF84-987D8CF87FF5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3001894681-2676971518-1704727488-1002Core => C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2016-10-05] (Google Inc.)
Task: {788EB146-4AB3-4B52-922F-F62C5A5FBB03} - System32\Tasks\HPCeeScheduleForOndra => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {7B1EAAE8-6631-4937-88FA-1728C7441E0D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3001894681-2676971518-1704727488-1002UA => C:\Users\Ondra\AppData\Local\Google\Update\GoogleUpdate.exe [2016-10-05] (Google Inc.)
Task: {7BBB5E1C-5622-42AB-9D1C-ECDD88A79CC0} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-10-11] (AVAST Software)
Task: {7CB31DB2-FF94-4C12-B070-E1832D7F0BF2} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] ()
Task: {88A93A09-0238-47EC-A49D-9B3340012FB1} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-04-17] (AVAST Software)
Task: {8ACC5BCB-7276-4E2B-AB5D-00DE2E717309} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3001894681-2676971518-1704727488-1002Core => C:\Users\Ondra\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {900624E6-D221-4232-809C-73917F9173B4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {968207EF-EC63-4BB4-AB4A-9F70B6B5384A} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-10-22] (AVAST Software)
Task: {9742F802-71EF-46C3-BC74-BD4302518293} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-02-28] (Adobe Systems Incorporated)
Task: {AC187502-91D7-418F-A6FC-E3569392E5B0} - System32\Tasks\BitX Updater Service => C:\Program Files (x86)\BitX\BitXUpdaterService.exe [2016-08-10] ()
Task: {B4732942-BA1A-4BC8-AF8F-7D8C813611F8} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3001894681-2676971518-1704727488-1002UA => C:\Users\Ondra\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {DE6AD872-C31B-4185-95AA-C9D302BC8FCE} - System32\Tasks\GridinSoft Anti-Malware => C:\Program Files\GridinSoft Anti-Malware\gsam.exe
Task: {FAA5B348-2766-4A3D-B9E2-F6654E494574} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-22] ()
Task: {FBFC878E-D9B4-42C9-8C7E-0EB00A09729D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2018-08-30] (HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3001894681-2676971518-1704727488-1002Core.job => C:\Users\Ondra\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3001894681-2676971518-1704727488-1002UA.job => C:\Users\Ondra\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForOndra.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_hgmloofddffdnphfgcellkdfbfbjeloo\Advanced REST client.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --user-data-dir="C:\Users\Ondra\AppData\Local\Google\Chrome\User Data" --profile-directory=Default --app-id=hgmloofddffdnphfgcellkdfbfbjeloo
ShortcutWithArgument: C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js command prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files\nodejs\nodevars.bat"
ShortcutWithArgument: C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Boomerang - SOAP & REST Client.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --user-data-dir="C:\Users\Ondra\AppData\Local\Google\Chrome\User Data" --profile-directory=Default --app-id=eipdnjedkpcnlmmdfdkgfpljanehloah
ShortcutWithArgument: C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Google Sheets.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --user-data-dir="C:\Users\Ondra\AppData\Local\Google\Chrome\User Data" --profile-directory=Default --app-id=lcahnhkcfaikkapifpaenbabamhfnecc
ShortcutWithArgument: C:\Users\Ondra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Advanced REST client.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --user-data-dir="C:\Users\Ondra\AppData\Local\Google\Chrome\User Data" --profile-directory=Default --app-id=hgmloofddffdnphfgcellkdfbfbjeloo
ShortcutWithArgument: C:\Users\Public\Desktop\Box offer for HP.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=en_*&pf=cmnb&s=Box_50GB&tp=dticon

==================== Loaded Modules (Whitelisted) ==============

2013-05-22 21:21 - 2013-05-22 21:21 - 000299832 _____ () c:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2011-04-14 02:41 - 2011-04-14 02:41 - 000034304 _____ () C:\Windows\System32\ssb3ml6.dll
2016-08-10 13:57 - 2016-08-10 13:57 - 001886208 _____ () C:\Program Files (x86)\BitX\bitxsvc.exe
2013-08-14 21:06 - 2013-08-14 21:06 - 000007168 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
2017-08-08 10:04 - 2017-08-08 10:04 - 000248856 _____ () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
2017-04-10 08:46 - 2016-12-08 00:15 - 000053352 _____ () C:\Program Files (x86)\Windscribe\WindscribeService.exe
2018-08-30 20:41 - 2018-08-30 20:41 - 000703192 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2016-10-06 20:53 - 2016-10-06 20:53 - 000382072 _____ () C:\Windows\system32\igfxTray.exe
2018-07-23 12:42 - 2018-07-23 12:42 - 000054440 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2004-09-30 19:15 - 2004-09-30 19:15 - 000192000 _____ () C:\Program Files\LinkShellExtension\RockallDLL.dll
2014-11-25 19:00 - 2014-11-25 19:00 - 000830392 _____ () C:\Program Files\TortoiseGit\bin\libgit2_tgit.dll
2014-11-25 19:00 - 2014-11-25 19:00 - 000087480 _____ () C:\Program Files\TortoiseGit\bin\zlib1_tgit.dll
2015-01-08 10:41 - 2013-11-22 16:10 - 000103880 _____ () C:\Program Files (x86)\ComposerSetup\shellext64.dll
2013-08-07 22:01 - 2013-08-07 22:01 - 002654936 _____ () C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\ShredContextMenu.dll
2014-12-16 22:27 - 2014-09-30 00:15 - 000737986 _____ () C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll
2016-10-16 02:19 - 2016-10-16 02:19 - 000230064 _____ () C:\Program Files\Notepad++\NppShell_06.dll
2018-10-04 19:44 - 2018-10-04 19:44 - 046459080 _____ () C:\Program Files\Google\Drive\googledrivesync.exe
2018-11-07 12:01 - 2018-11-07 12:01 - 000113664 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_ctypes.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000080896 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\bz2.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 001792512 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_hashlib.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000128512 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32api.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000137728 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\pywintypes27.dll
2018-11-07 12:01 - 2018-11-07 12:01 - 000548864 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\pythoncom27.dll
2018-11-07 12:01 - 2018-11-07 12:01 - 000689664 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\unicodedata.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000438784 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32com.shell.shell.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 001489408 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\wx._core_.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 001007104 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\wx._gdi_.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 001039872 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\wx._windows_.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 001325056 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\wx._controls_.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000916992 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\wx._misc_.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 001084416 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\pysqlite2._sqlite.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000149504 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32file.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000136192 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32security.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000007680 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\hashobjs_ext.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000020992 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\thumbnails_ext.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000118784 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\usb_ext.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000047616 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_socket.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 002224640 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_ssl.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000014848 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\common.time34.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000023040 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32event.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000034304 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\windows.conditional.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000020480 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\windows.winwrap.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000110080 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\windows.volumes.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000223232 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32gui.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000173568 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_elementtree.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000169472 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\pyexpat.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000048128 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32inet.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000103424 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\wx._html2.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000046080 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_psutil_windows.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000633272 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\windows._cacheinvalidation.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000011776 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32crypt.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000301568 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\PIL._imaging.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000032256 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_multiprocessing.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 005752320 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\cello.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000026112 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\_yappi.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000044032 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32process.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000027648 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32pipe.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000010752 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\select.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000029696 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32pdh.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000038400 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\windows.connectivity.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000073216 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\windows.device_monitor.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000020480 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32profile.pyd
2018-11-07 12:01 - 2018-11-07 12:01 - 000026624 _____ () C:\Users\Ondra\AppData\Local\Temp\_MEI124162\win32ts.pyd
2016-09-29 10:13 - 2015-11-30 18:02 - 003368960 _____ () C:\xampp\xampp-control.exe
2018-09-21 07:15 - 2013-09-10 08:54 - 010956800 _____ () c:\xampp\mysql\bin\mysqld.exe
2018-10-25 07:13 - 2018-10-23 22:24 - 005020504 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libglesv2.dll
2018-10-25 07:13 - 2018-10-23 22:24 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.77\libegl.dll
2014-08-18 07:52 - 2018-07-11 09:18 - 000013824 _____ () C:\Users\Ondra\Disk Google\Prace\Projekty\Freshlabels\Altus\AVIS_sada_priloh_pro_vyvojare\AVIS eBrana test\AVIS_ebrana.exe
2017-08-08 10:04 - 2017-08-08 10:04 - 004175384 _____ () C:\Program Files (x86)\Synology\Assistant\DSAssistant.exe
2016-09-30 09:24 - 2016-08-14 17:25 - 000076288 _____ () C:\Program Files\NuSphere\PhpED\zlib-1.2.8.dll
2016-09-30 09:24 - 2016-08-14 17:25 - 000231936 _____ () C:\Program Files\NuSphere\PhpED\libpcre.dll
2016-09-30 09:24 - 2016-08-14 17:25 - 000136704 _____ () C:\Program Files\NuSphere\PhpED\libexpat.dll
2016-09-30 09:24 - 2016-08-14 17:25 - 000281088 _____ () C:\Program Files\NuSphere\PhpED\libtidy.dll
2018-10-10 07:26 - 2018-10-10 07:26 - 031308288 _____ () C:\Users\Ondra\AppData\Local\Google\Chrome\User Data\PepperFlash\31.0.0.122\pepflashplayer.dll
2011-04-14 02:40 - 2011-04-14 02:40 - 000968192 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ssb3mdu.dll
2014-06-30 08:31 - 2014-06-10 13:19 - 000622080 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\JobCapsA.dll
2018-08-30 20:41 - 2018-08-30 20:41 - 000575704 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-08-30 20:41 - 2018-08-30 20:41 - 000896216 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-08-30 20:41 - 2018-08-30 20:41 - 000541400 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-08-30 20:41 - 2018-08-30 20:41 - 000151768 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2018-08-30 20:41 - 2018-08-30 20:41 - 000986840 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2018-11-14 08:13 - 2018-11-14 08:13 - 005702288 _____ () C:\Program Files\AVAST Software\Avast\defs\18111400\algo.dll
2014-03-18 07:04 - 2014-03-18 07:04 - 000138752 _____ () C:\Program Files (x86)\WinStrom\pgsql\9.3\bin\LIBPQ.dll
2014-03-18 07:04 - 2014-03-18 07:04 - 001036800 _____ () C:\Program Files (x86)\WinStrom\pgsql\9.3\bin\libxml2.dll
2014-06-30 07:45 - 2013-09-16 23:19 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 001135616 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMSWrap.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000656896 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ContentDirectoryPresenter.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000105472 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000098816 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\FolderCDP.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000077312 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MetadataFramework.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000520234 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\sqlite3.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000450560 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\MoodExtractor.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 005717504 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\DCMImgExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000029184 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AutoChaptering.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000147456 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexpat.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoThumb.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 004671488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avcodec-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000070656 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avutil-50.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000686080 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\avformat-52.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000152064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\swscale-0.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000027648 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AudioExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000063488 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ID3Driver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000366592 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\tag.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000289792 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libThumbnail.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000023040 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RichInfoDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000017920 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ThumbnailMaker.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000133120 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\VideoMetadataDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000290304 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libKeyFrame.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\SECMetaDriver.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000012288 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\ImageExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000024064 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\photoDriver.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000399826 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\libexif-12.dll.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000013824 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\TextExtractor.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000031232 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\Autobackup.dll
2012-02-22 16:46 - 2012-02-22 16:46 - 000054784 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\RosettaAllShare.dll
2012-01-05 22:40 - 2012-01-05 22:40 - 000044032 _____ () C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\us.dll
2010-06-14 17:41 - 2010-06-14 17:41 - 000514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2018-03-13 11:46 - 2018-03-13 11:46 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-25 18:49 - 2014-11-25 18:49 - 000617920 _____ () C:\Program Files\TortoiseGit\bin\libgit232_tgit.dll
2014-11-25 18:49 - 2014-11-25 18:49 - 000076728 _____ () C:\Program Files\TortoiseGit\bin\zlib132_tgit.dll
2004-09-30 18:09 - 2004-09-30 18:09 - 000155648 _____ () C:\Program Files\LinkShellExtension\32\RockallDLL.dll
2018-03-30 17:32 - 2018-03-30 17:32 - 067929312 _____ () C:\Program Files (x86)\Evernote\Evernote\libcef.dll
2018-03-30 17:34 - 2018-03-30 17:34 - 000218848 _____ () C:\Program Files (x86)\Evernote\Evernote\websockets.dll
2018-03-30 17:35 - 2018-03-30 17:35 - 000154848 _____ () C:\Program Files (x86)\Evernote\Evernote\zlibwapi.dll
2018-03-30 17:34 - 2018-03-30 17:34 - 000668384 _____ () C:\Program Files (x86)\Evernote\Evernote\tidy.dll
2018-03-30 17:33 - 2018-03-30 17:33 - 003188448 _____ () C:\Program Files (x86)\Evernote\Evernote\libglesv2.dll
2018-03-30 17:33 - 2018-03-30 17:33 - 000091872 _____ () C:\Program Files (x86)\Evernote\Evernote\libegl.dll
2016-09-29 10:13 - 2016-06-15 11:26 - 000419328 _____ () c:\xampp\apache\bin\pcre.dll
2016-09-29 10:13 - 2016-07-20 19:44 - 000149504 _____ () C:\xampp\php\libpq.dll
2016-03-27 17:10 - 2018-10-25 13:01 - 000071168 _____ () c:\xampp\apache\bin\CORE_RL_zlib_.dll
2018-08-26 08:03 - 2018-10-26 17:10 - 001790592 _____ () C:\Program Files (x86)\Microsoft\Skype for Desktop\ffmpeg.dll
2018-11-07 12:05 - 2018-10-26 17:10 - 002363960 _____ () \\?\C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\slimcore\bin\skypert.dll
2018-11-07 12:05 - 2018-10-26 17:10 - 000097224 _____ () \\?\C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node
2018-11-07 12:05 - 2018-10-26 17:10 - 000219080 _____ () \\?\C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\electron-ssid\build\Release\electron-ssid.node
2018-11-07 12:05 - 2018-10-26 17:10 - 000081864 _____ () \\?\C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\desktop-idle\build\Release\desktopIdle.node
2018-08-26 08:03 - 2018-10-26 17:10 - 002723872 _____ () C:\Program Files (x86)\Microsoft\Skype for Desktop\libglesv2.dll
2018-08-26 08:03 - 2018-10-26 17:10 - 000031776 _____ () C:\Program Files (x86)\Microsoft\Skype for Desktop\libegl.dll
2018-11-07 12:05 - 2018-10-26 17:10 - 000409544 _____ () \\?\C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\@paulcbetts\spellchecker\build\Release\spellchecker.node
2018-11-07 12:05 - 2018-10-26 17:10 - 000138696 _____ () \\?\C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\keyboard-layout\build\Release\keyboard-layout-manager.node
2018-11-07 12:05 - 2018-10-26 17:10 - 003213872 _____ () \\?\C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar.unpacked\node_modules\slimcore\bin\Processing.NDI.Lib.x86.dll
2018-11-08 09:49 - 2018-11-08 09:49 - 000049152 _____ () C:\Users\Ondra\AppData\Local\Temp\Test Client Projects\5c0f111f-1b58-4215-94f9-408d9fdc9a3e\Client.dll
2013-03-06 11:13 - 2013-03-06 11:13 - 000611328 _____ () C:\Program Files (x86)\Synology\Assistant\qwt5.dll
2018-11-13 10:35 - 2016-09-12 14:53 - 048936448 _____ () C:\Program Files (x86)\AVAST Software\Avast Cleanup\libcef.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000068264 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\krpt.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 009273000 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\QtCore4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000200360 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\wpscloudsvrimp.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000894632 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\QtNetwork4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000277160 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\curls.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 011410088 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\QtWebKit4.DLL
2018-11-02 16:32 - 2018-11-02 16:32 - 000247976 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\phonon4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000189608 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\addons\kpluginrunner\kpluginrunner.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000054440 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\rubyenv.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 002253992 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\ruby.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 000251560 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\qtruby4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000031912 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\smokebase.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 003614848 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\smokeqtcore.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 001018024 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\smokekso.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 000046760 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\win32api.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 000082088 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\win32ole.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 000028840 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\qtwebkitruby.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 000277160 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\smokeqtwebkit.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 001048744 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\QtScript4.dll
2018-11-03 08:18 - 2018-11-03 08:18 - 000030376 _____ () C:\Users\Ondra\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.20181019.0\strscan.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000037544 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\qt\plugins\imageformats\qgif4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000039080 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\qt\plugins\imageformats\qico4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000174760 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\qt\plugins\imageformats\qjpeg4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000288936 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\qt\plugins\imageformats\qtiff4.dll
2018-11-02 16:32 - 2018-11-02 16:32 - 000135848 _____ () C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\qt\plugins\imageformats\qwdp4.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2018-11-11 13:31 - 000001514 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1		test.localhost.cz
127.0.0.1		www.localhost.cz
127.0.0.1		www.localhost.sk
127.0.0.1		www.localhost.at
127.0.0.1		www.localhost.info
127.0.0.1   www.radotin-cyklistika.cz
127.0.0.1   www.radotin-lyzovani.cz
127.0.0.1   www.radotin-kids.cz
127.0.0.1   www.radotin-skiby.cz
127.0.0.1   www.radotin-spot.cz
127.0.0.1   localhost.cz
127.0.0.1   shop.local
91.239.201.15 www.auto-auto.cz

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3001894681-2676971518-1704727488-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\startupfolder: C:^Users^Ondra^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EvernoteClipper.lnk => C:\Windows\pss\EvernoteClipper.lnk.Startup
MSCONFIG\startupreg: AllShareAgent => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 6\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Ondra\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: Google Update => C:\Users\Ondra\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: MiPhoneManager => "C:\Users\Ondra\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe"
MSCONFIG\startupreg: Spotify => "C:\Users\Ondra\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => C:\Users\Ondra\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
MSCONFIG\startupreg: Vuze Leap => "C:\Users\Ondra\AppData\Roaming\Vuze Leap\VuzeLeap.exe" /autorun

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{C276B2F0-D8DF-43B4-BB58-63D32E5F9E60}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{E8E2264F-9986-4DFD-AD8F-B246527F31A1}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{44DAEE41-CC45-4F87-AD01-5C1FBB591BA1}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{86D2AE51-F799-4FD9-8A50-EF7C342182FA}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{0BAF41E9-18F6-4268-8D05-C6812AA6B378}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{34B7C6E0-AA60-478C-A74A-E8C653FE4B34}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{74621F1E-DFF3-4863-96B6-C5CE5CE1ED7B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B501E00B-56C0-4F26-9196-B03CC2D4A5B5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0789AB71-F7F5-4334-A3E4-E2D968756FF8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{CADD25F0-4AA1-437F-9F21-CA3DE8D70083}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D0E5CE83-D190-4AF7-BA44-47DDE5763882}] => (Allow) C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8C0D19C9-AFDE-4BE9-9A06-80F218592B47}] => (Allow) C:\Users\Ondra\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{B964BEB5-A066-4368-A5EF-B171E64FABE9}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{C902264C-381E-468A-B47A-4E1CAA27DA14}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{73A1C4B9-4836-44DB-81F0-5564722AE372}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{864E951C-426D-4D15-AF8D-96A49DEF2931}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{94C00168-1007-47C9-9CF3-B9FEE87AE167}C:\users\ondra\appdata\roaming\copy\copyagent.exe] => (Allow) C:\users\ondra\appdata\roaming\copy\copyagent.exe
FirewallRules: [UDP Query User{6FD02D32-E1A9-477F-8177-C8C1CE5906D7}C:\users\ondra\appdata\roaming\copy\copyagent.exe] => (Allow) C:\users\ondra\appdata\roaming\copy\copyagent.exe
FirewallRules: [{C941F6BA-8444-4A8A-B1BB-9482302FCA62}] => (Allow) C:\Program Files (x86)\NuSphere\PhpED\php5\php-cgi.exe
FirewallRules: [{5519D62F-03B9-44DF-BD16-3424DFB12EA2}] => (Allow) C:\Program Files (x86)\NuSphere\PhpED\php5\php.exe
FirewallRules: [{D7EB44E1-DEAF-443E-AB48-C4FF0F471AD5}] => (Allow) C:\Program Files\NuSphere\PhpED\php55\php-cgi.exe
FirewallRules: [{BF18499D-80EB-47FE-807E-67301BCB1687}] => (Allow) C:\Program Files\NuSphere\PhpED\php55\php.exe
FirewallRules: [{777C246A-A5DF-4BDE-A6E1-5D5EDD5C5A17}] => (Allow) C:\Program Files\NuSphere\PhpED\srv.exe
FirewallRules: [{DF0A638F-D876-4F30-8FCA-B539ED10FAB1}] => (Allow) C:\Program Files\NuSphere\PhpED\dbglistener.exe
FirewallRules: [{B456E40E-E56D-42DD-8230-EFA7B3C6033F}] => (Allow) C:\Program Files\NuSphere\PhpED\PhpED.exe
FirewallRules: [TCP Query User{AABC39CC-6B90-4D33-83D5-B753F4C12B38}C:\users\ondra\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\ondra\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{70E755D4-4B8F-478D-81B0-E4CC702AB385}C:\users\ondra\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\ondra\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{1363E281-A70D-4A55-9949-3225CB3808CA}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [UDP Query User{670C5FCC-F809-4695-962E-3CE6F98E90E8}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [TCP Query User{4B396FD8-ACCF-4506-B77D-F1FDCA325433}C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe] => (Allow) C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe
FirewallRules: [UDP Query User{0ECD74FE-8394-4540-B9B9-8F6C0672DCCD}C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe] => (Allow) C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe
FirewallRules: [TCP Query User{8B84A75B-CDB9-48AD-8949-1AE927AC47AF}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [UDP Query User{B716277D-28DF-4E4E-8236-094ACD231119}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [{D77D285C-7C8F-4E85-AF90-4BBAA5C8B178}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe
FirewallRules: [{72756F6D-077B-4D4C-B8D7-BF12D3B8FA2D}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe
FirewallRules: [{1427AA3A-ACF4-4DD2-B177-7F2C9652177D}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe
FirewallRules: [{5EFD6DB4-0BDE-46C2-9BCA-DE6E494D97CD}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe
FirewallRules: [TCP Query User{1CF77964-7E4F-4933-AE43-3CAEED2F2F74}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
FirewallRules: [UDP Query User{1694B2D5-017E-41AB-9E8B-1C451E888723}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
FirewallRules: [TCP Query User{F5503113-4340-4BA7-A084-8D666B66E6FF}C:\users\ondra\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondra\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{EE9CC295-7BAD-47CF-B946-B2D8B574F05D}C:\users\ondra\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondra\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F7D5E5E5-96CC-44FC-96EC-948738C2AEEE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4B8CD91C-DF9F-493D-B204-C8A8A995DC0E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{8F3E53C7-91BA-4DEF-AF15-77F01E235C0D}C:\users\ondra\appdata\roaming\vuze leap\vuzeleap.exe] => (Allow) C:\users\ondra\appdata\roaming\vuze leap\vuzeleap.exe
FirewallRules: [UDP Query User{EB45808A-FC08-4C4D-B430-AFD5207F3D7D}C:\users\ondra\appdata\roaming\vuze leap\vuzeleap.exe] => (Allow) C:\users\ondra\appdata\roaming\vuze leap\vuzeleap.exe
FirewallRules: [TCP Query User{F888749A-1F0C-4AE4-AC99-FB6EB8B656DB}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe
FirewallRules: [UDP Query User{AE5C7EAE-A13C-40BF-8250-26A30C7678F1}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe
FirewallRules: [TCP Query User{3F745479-C9DA-4AE8-B716-300F44ED5BD2}C:\xampp\php\php.exe] => (Allow) C:\xampp\php\php.exe
FirewallRules: [UDP Query User{2834096B-425E-493D-8333-B85273B309B9}C:\xampp\php\php.exe] => (Allow) C:\xampp\php\php.exe
FirewallRules: [TCP Query User{DE66115C-07B8-4DE2-AF57-741315085328}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe
FirewallRules: [UDP Query User{D996FA17-FF93-4C4A-A5F0-E6030ED9AEE3}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe
FirewallRules: [TCP Query User{36A77920-0F86-4E0E-8607-2F9DAB8AE9A5}C:\users\ondra\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondra\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{ADC3DBB4-9181-47E4-B2E2-7766DE96D86F}C:\users\ondra\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondra\appdata\roaming\spotify\spotify.exe
FirewallRules: [{D9779BD1-D1C5-45CE-BF97-C1C948D3D778}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4E2DF979-607F-46E4-A613-788A63CC8A4C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{87C2118D-4624-47D6-961A-6AED90D6A001}C:\program files\java\jre1.8.0_66\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [UDP Query User{90E54ED8-64DF-49A2-AF90-3FD911475F49}C:\program files\java\jre1.8.0_66\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [TCP Query User{EA34E104-82EA-44A7-B7AC-816BD3502197}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [UDP Query User{EE818DE1-9984-428C-83CB-0E6F7F54BA48}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [TCP Query User{497FB604-0C18-4E2D-A766-D117936421F8}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [UDP Query User{836DA164-EE4F-4F08-A18F-A06133EF50EA}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [TCP Query User{3F9EEA72-0558-4C5B-8DAB-28663133914E}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{1AAAD8E2-3BFF-4F10-8D5C-36B8B3C618D2}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{90043DB7-C919-48BE-B4A7-A3CD72D1C888}C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe] => (Block) C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe
FirewallRules: [UDP Query User{29975B19-7F28-4FA2-B942-5435DA423E42}C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe] => (Block) C:\program files (x86)\toolheap\test mail server tool\testmailservertool.exe
FirewallRules: [TCP Query User{385A163D-6D09-4B7B-AEAF-31779E7A351B}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{DCEF7934-1782-4BD9-9DEE-A424C2BC5EF6}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{8CD3B7F3-074F-4A57-ACB1-ED877B9B73AB}] => (Allow) C:\Users\Ondra\AppData\Local\MiPhoneManager\main\MiPCSuite.exe
FirewallRules: [TCP Query User{F3462A85-C578-4752-B5EC-224872A6B463}C:\program files\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [UDP Query User{8142FDDC-355E-4BBA-A253-79DBAEF5E4C6}C:\program files\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [TCP Query User{85EB5202-1690-4F74-95C8-7626B26EBDBF}C:\program files\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [UDP Query User{96674A3E-6527-40D8-8F7A-E55F835C6C80}C:\program files\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_77\bin\java.exe
FirewallRules: [TCP Query User{8384D328-027E-4523-BC42-10DE2B91FC38}C:\program files (x86)\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\bin\java.exe
FirewallRules: [UDP Query User{009189BF-E478-484D-AA28-67A8441CCCAB}C:\program files (x86)\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\bin\java.exe
FirewallRules: [TCP Query User{93EE5076-A3DD-4CF2-8F19-6C33A03369BA}C:\program files (x86)\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\bin\java.exe
FirewallRules: [UDP Query User{9112363E-E705-47B4-9FA1-80DA03CAEF3D}C:\program files (x86)\java\jre1.8.0_77\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\bin\java.exe
FirewallRules: [TCP Query User{00E7DEE7-C9E8-46BF-90BB-98D840CB5C13}C:\program files (x86)\java\jre1.8.0_91\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\java.exe
FirewallRules: [UDP Query User{7B0D1B28-32D8-4B9D-8E31-F61DEAEC18C0}C:\program files (x86)\java\jre1.8.0_91\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_91\bin\java.exe
FirewallRules: [TCP Query User{282A7CA7-93BF-44D1-90D0-9509763FDFF8}C:\program files (x86)\filezilla ftp client\filezilla.exe] => (Allow) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [UDP Query User{421913F2-D372-4054-B9B5-FFA8E4396FAB}C:\program files (x86)\filezilla ftp client\filezilla.exe] => (Allow) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [{E091E998-F9B9-4346-BF49-54CFBEE8767F}] => (Allow) C:\Program Files (x86)\BitX\BitX.exe
FirewallRules: [{8E50F7B0-58EF-43A7-9A8A-3DF52F41EC56}] => (Allow) C:\Program Files (x86)\BitX\BitX.exe
FirewallRules: [{FD113655-3087-43D5-9DE5-C2AFAC026D15}] => (Allow) C:\Program Files (x86)\BitX\BitX.exe
FirewallRules: [{11FCD65B-2129-4FDD-8A61-C8C3F36C19BF}] => (Allow) C:\Program Files (x86)\BitX\BitX.exe
FirewallRules: [TCP Query User{93904694-1178-4406-B604-E8190950667B}C:\xampp-php7\apache\bin\httpd.exe] => (Allow) C:\xampp-php7\apache\bin\httpd.exe
FirewallRules: [UDP Query User{5E69B93C-B083-4F00-B578-1A789F7A7147}C:\xampp-php7\apache\bin\httpd.exe] => (Allow) C:\xampp-php7\apache\bin\httpd.exe
FirewallRules: [{27999C9E-62C5-4721-881C-0167AB64B4B8}] => (Allow) C:\Program Files (x86)\NuSphere\PhpED\php5\php-cgi.exe
FirewallRules: [{F02B9A9C-29DE-4974-9C06-86E89D08BBD9}] => (Allow) C:\Program Files (x86)\NuSphere\PhpED\php5\php.exe
FirewallRules: [{B9598EA8-15B6-485D-B81A-AC51F9B455F8}] => (Allow) C:\Program Files\NuSphere\PhpED\php56\php-cgi.exe
FirewallRules: [{342A715A-F80A-4E5B-A124-AB42F4CC33AE}] => (Allow) C:\Program Files\NuSphere\PhpED\php56\php.exe
FirewallRules: [{9BBBCF4E-9D44-4EA6-9168-9E7B4A8ADD83}] => (Allow) C:\Program Files\NuSphere\PhpED\php7\php-cgi.exe
FirewallRules: [{7B60587C-BD61-470C-91D6-EC263115DB83}] => (Allow) C:\Program Files\NuSphere\PhpED\php7\php.exe
FirewallRules: [{04E092E7-E4AB-4F50-9F07-35A34C826276}] => (Allow) C:\Program Files (x86)\NuSphere\PhpED\php5\php-cgi.exe
FirewallRules: [{DE128E24-0895-4B30-8EA6-1F9A82011D32}] => (Allow) C:\Program Files (x86)\NuSphere\PhpED\php5\php.exe
FirewallRules: [{945DF2F8-A43D-4263-AF49-5ECFFBA2DC40}] => (Allow) C:\Program Files\NuSphere\PhpED\php56\php-cgi.exe
FirewallRules: [{BFCEFB04-E74F-4187-AF41-81BC1A4553BB}] => (Allow) C:\Program Files\NuSphere\PhpED\php56\php.exe
FirewallRules: [{77B56CC6-C850-4D62-A492-962A5825B5B7}] => (Allow) C:\Program Files\NuSphere\PhpED\php7\php-cgi.exe
FirewallRules: [{41982083-41DC-4AA8-89FD-6FD841C847F8}] => (Allow) C:\Program Files\NuSphere\PhpED\php7\php.exe
FirewallRules: [{EA44598D-39E9-422A-BCE7-333810D994BE}] => (Allow) C:\Program Files\NuSphere\PhpED\srv.exe
FirewallRules: [{45B124D6-273A-4181-9133-85BE3C13072A}] => (Allow) C:\Program Files\NuSphere\PhpED\dbglistener.exe
FirewallRules: [{F971C654-1CA3-4C6D-A107-03CF69DCC378}] => (Allow) C:\Program Files\NuSphere\PhpED\PhpED.exe
FirewallRules: [TCP Query User{2CD8361B-D7D6-448A-A96E-22ED51ABBA8D}C:\program files (x86)\java\jre1.8.0_111\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\java.exe
FirewallRules: [UDP Query User{C8AEEC8E-04A6-4476-9100-0D307C0B3FD4}C:\program files (x86)\java\jre1.8.0_111\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\java.exe
FirewallRules: [{635D95EB-FB81-443E-AC16-E26DD61424FD}] => (Allow) C:\Users\Ondra\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [{DBDDCA32-FE11-4C79-84E1-283A39FACD9B}] => (Allow) C:\Users\Ondra\AppData\Roaming\Vuze Leap\VuzeLeap.exe
FirewallRules: [TCP Query User{676F7F37-4BF5-4B9F-B219-2B5F87544230}C:\users\ondra\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\ondra\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [UDP Query User{8AE893F9-C7F2-457B-9077-B70FDEF3087C}C:\users\ondra\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe] => (Allow) C:\users\ondra\appdata\roaming\ethereum wallet\binaries\geth\unpacked\geth.exe
FirewallRules: [TCP Query User{EE250EFE-01FB-4164-8919-7BE93074BF00}C:\program files (x86)\java\jre1.8.0_131\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_131\bin\java.exe
FirewallRules: [UDP Query User{0D893844-6792-4B38-AD50-65BCFFA1476F}C:\program files (x86)\java\jre1.8.0_131\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_131\bin\java.exe
FirewallRules: [{492B779D-E306-4192-9610-479CE119DD9E}] => (Allow) C:\Users\Ondra\AppData\Local\Kingsoft\WPS Office\10.2.0.7549\office6\wpscloudsvr.exe
FirewallRules: [TCP Query User{C3D7F496-2023-47D9-B41E-DD4C0CB19B63}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe
FirewallRules: [UDP Query User{42F48B46-D06A-4A2F-8D64-23D05D036995}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe
FirewallRules: [TCP Query User{E837E3AA-60C9-4610-BF17-F3DA8749D473}C:\wallets\neo\neo-gui.exe] => (Allow) C:\wallets\neo\neo-gui.exe
FirewallRules: [UDP Query User{ED9A0F81-8308-4B8D-8B9D-900A9929ED5F}C:\wallets\neo\neo-gui.exe] => (Allow) C:\wallets\neo\neo-gui.exe
FirewallRules: [{E3F9CEB6-BFDB-4C5B-BE54-DF2CEB9D4262}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
FirewallRules: [{4BCECB98-3CC8-4249-9CE3-69866513D2C6}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShare.exe
FirewallRules: [{16FBA05E-F3F1-4564-8B10-10EE915E1DD5}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
FirewallRules: [TCP Query User{A5C034A4-C402-417C-8CE3-B5B06444E561}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{99424435-14C4-4CB0-83A0-03CFA512596F}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [TCP Query User{151C562D-C2B4-4F50-A295-074DB6C5FCD5}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{42D35B6D-B621-463F-A82A-00F21B35C674}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [TCP Query User{50EDDD3A-EB21-44A9-A21A-D395DEE43F73}C:\users\ondra\documents\crypto\electroneum\win-x64-0.11.0.0\electroneumd.exe] => (Allow) C:\users\ondra\documents\crypto\electroneum\win-x64-0.11.0.0\electroneumd.exe
FirewallRules: [UDP Query User{D25CA2D5-FDFB-4819-84B6-257465D64704}C:\users\ondra\documents\crypto\electroneum\win-x64-0.11.0.0\electroneumd.exe] => (Allow) C:\users\ondra\documents\crypto\electroneum\win-x64-0.11.0.0\electroneumd.exe
FirewallRules: [TCP Query User{17806C8C-A279-4EAA-B106-324B66C326FF}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [UDP Query User{A60EBD84-4059-4856-BDE8-58EF469E367C}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [{BFD6526A-EAA8-48E2-B151-DB40CBF0C7D3}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{1EB74364-E91A-4AEF-9EDD-E8C4F7EECE05}] => (Allow) C:\Program Files\Vuze\Azureus.exe
FirewallRules: [{48636EF9-0672-44CB-A810-7137858DD713}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{BACE8116-A322-4245-9139-A1645BBFB0BC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{0D3BB457-5939-4612-8E7E-9BFE15857FF6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{7F886ABC-8335-4DD5-9366-64D118E720EF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{A3E29B48-66C5-457C-9A26-C407BFD0854B}C:\users\ondra\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Allow) C:\users\ondra\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe
FirewallRules: [UDP Query User{46877CC2-1037-432B-858C-25DB792821D0}C:\users\ondra\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Allow) C:\users\ondra\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe
FirewallRules: [{15588066-A777-47EB-BAA2-3DB574F0D3AC}] => (Allow) C:\Program Files (x86)\pCloud Drive\pCloud.exe
FirewallRules: [TCP Query User{46870798-C17E-4289-A5D4-38A98BCC43B1}C:\program files (x86)\stormware\pohoda\pohoda.exe] => (Allow) C:\program files (x86)\stormware\pohoda\pohoda.exe
FirewallRules: [UDP Query User{F3432E1F-FA06-4259-8A09-91616B340D30}C:\program files (x86)\stormware\pohoda\pohoda.exe] => (Allow) C:\program files (x86)\stormware\pohoda\pohoda.exe
FirewallRules: [{E38F2D06-88FA-4B5B-8A5E-C0C52DF87312}] => (Allow) C:\Program Files (x86)\Opera\56.0.3051.52\opera.exe
FirewallRules: [{58504A53-133B-4FF6-90A9-E98DDCFC725B}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{B1D3812F-32BE-46B1-B453-2239CD4C6375}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{0A7AECD6-54A4-41F4-8B24-C56F8D404421}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D1574A68-DAA4-4268-9073-94A2B99A9F46}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
FirewallRules: [{2918F2B5-04B2-4DC2-88C4-47572E0258BF}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
FirewallRules: [{502A0DC6-CDFB-4919-AB13-2E752A5D32A3}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
FirewallRules: [{C783CA50-D726-4535-B5CF-05F2EC863567}] => (Allow) C:\Program Files (x86)\Opera\56.0.3051.99\opera.exe
FirewallRules: [TCP Query User{1B240923-827A-4922-AE7C-7DEB1D23663F}C:\users\ondra\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.282\pluginhost.exe] => (Allow) C:\users\ondra\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.282\pluginhost.exe
FirewallRules: [UDP Query User{D6425C36-79A4-4CC0-AC30-D88F22DC5620}C:\users\ondra\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.282\pluginhost.exe] => (Allow) C:\users\ondra\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.282\pluginhost.exe
FirewallRules: [{FF3B123F-DADC-4A01-8445-262B8AFFD5B2}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe
FirewallRules: [{7DBB6BC3-5DAF-47B6-B774-7F657E7B976B}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: Adaptér tunelového režimu Microsoft Teredo
Description: Adaptér tunelového režimu Microsoft Teredo
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/14/2018 08:23:17 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (11/14/2018 08:22:05 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (11/13/2018 05:12:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3276

Error: (11/13/2018 05:12:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3276

Error: (11/13/2018 05:12:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/13/2018 04:22:05 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (11/13/2018 03:22:05 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (11/13/2018 02:22:05 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. Zadaný účet již existuje.


System errors:
=============
Error: (11/13/2018 05:12:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CyberLink PowerDVD 12 Media Server Service byla neočekávaně ukončena. Tento stav nastal již 52krát.

Error: (11/12/2018 08:33:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CyberLink PowerDVD 12 Media Server Service byla neočekávaně ukončena. Tento stav nastal již 51krát.

Error: (11/12/2018 05:21:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CyberLink PowerDVD 12 Media Server Service byla neočekávaně ukončena. Tento stav nastal již 50krát.

Error: (11/12/2018 08:08:55 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby hpHotkeyMonitor bylo dosaženo časového limitu (30000 ms).

Error: (11/12/2018 08:08:25 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby hpHotkeyMonitor bylo dosaženo časového limitu (30000 ms).

Error: (11/11/2018 05:31:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CyberLink PowerDVD 12 Media Server Service byla neočekávaně ukončena. Tento stav nastal již 49krát.

Error: (11/11/2018 01:31:21 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby hpHotkeyMonitor bylo dosaženo časového limitu (30000 ms).

Error: (11/11/2018 01:30:51 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby hpHotkeyMonitor bylo dosaženo časového limitu (30000 ms).


Windows Defender:
===================================
Date: 2016-10-03 08:48:18.296
Description: 
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{5B4A571B-55D6-4708-B131-E74076AA73E1}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:NT AUTHORITY\NETWORK SERVICE

Date: 2017-01-01 09:29:43.319
Description: 
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x8050800d
Popis chyby:Některé položky historie nelze zobrazit. Počkejte několik minut a akci opakujte. Pokud tento postup nefunguje, vymažte historii a opakujte pokus. 
Verze podpisu:1.233.3603.0
Verze modulu:1.1.13303.0

Date: 2016-04-29 10:58:43.993
Description: 
Modul programu %1 byl ukončen v důsledku neočekávané chyby.
Typ chyby:%5
Kód výjimky:%6
Zdroj:%3

Date: 2016-01-27 09:35:19.474
Description: 
Prohledávání Windows Defender zjistilo chybu při pokusu o načtení podpisů a pokusí se o obnovení sady podpisů, jejichž správnost je potvrzena.
Podpisy, které se měly načíst:Aktuální
Kód chyby:0x80070002
Popis chyby:Systém nemůže nalézt uvedený soubor. 
Verze podpisu:0.0.0.0
Verze modulu:0.0.0.0

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz
Percentage of memory in use: 88%
Total physical RAM: 16297.11 MB
Available physical RAM: 1835.47 MB
Total Virtual: 32592.36 MB
Available Virtual: 15348.38 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:223.16 GB) (Free:23.13 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:12.31 GB) (Free:1.35 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.97 GB) FAT32

\\?\Volume{ab61dbf7-8584-11e4-bfb3-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:1 GB) (Free:0.61 GB) NTFS
\\?\Volume{743cc938-5f8c-11e8-ac66-acb57d090d06}\ () () (Total:0 GB) (Free:0 GB) 

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: D49D271F)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12.3 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

==================== End of Addition.txt ============================