Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-04-2020
Ran by Ondrej Chladek (17-04-2020 19:05:00)
Running from C:\Users\OndrejChladek\Downloads
Windows 10 Education Version 1903 18362.720 (X64) (2019-08-29 02:03:42)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-83661414-2985840491-4141075080-500 - Administrator - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-83661414-2985840491-4141075080-503 - Limited - Disabled)
Guest (S-1-5-21-83661414-2985840491-4141075080-501 - Limited - Disabled)
Ondrej Chladek (S-1-5-21-83661414-2985840491-4141075080-1001 - Administrator - Enabled) => C:\Users\OndrejChladek
WDAGUtilityAccount (S-1-5-21-83661414-2985840491-4141075080-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\uTorrent) (Version: 3.5.4.44632 - BitTorrent Inc.)
7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated)
Anaconda3 2019.10 (Python 3.7.4 64-bit) (HKLM\...\Anaconda3 2019.10 (Python 3.7.4 64-bit)) (Version: 2019.10 - Anaconda, Inc.)
Aplikace Intel® PROSet/Wireless (HKLM-x32\...\{2f5f8f8e-11d9-4c64-b002-b60607ac3a29}) (Version: 20.10.1 - Intel Corporation)
Backup and Sync from Google (HKLM\...\{0CF77D5B-BD7A-489C-A5D5-881E6C15073D}) (Version: 3.49.9760.2421 - Google, Inc.)
Core Temp 1.15.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.15.1 - ALCPU)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.9.0.0603 - Disc Soft Ltd)
Dell ControlVault Host Components Installer 64 bit (HKLM\...\{97308CC9-FAED-4A1C-9593-64B2F1FD852D}) (Version: 2.3.309.1625 - Broadcom Corporation)
Dell SupportAssist (HKLM\...\{17F0E5C2-638A-4645-A341-03E9C2FDCFF4}) (Version: 3.4.5.366 - Dell Inc.)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 10.2207.101.108 - ALPS ELECTRIC CO., LTD.)
Digital Deluxe Edition Upgrade Pack (HKLM-x32\...\1507812678_is1) (Version: DaVinci RC1 - GOG.com)
Discord (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{DCE27B29-200D-491A-BBC5-98ECEFEC0843}) (Version: 1.1.257.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FAHClient (HKLM-x32\...\FAHClient) (Version: 7.5.1 - Folding@home.org)
GameRanger (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\GameRanger) (Version:  - GameRanger Technologies)
Git version 2.24.0.2 (HKLM\...\Git_is1) (Version: 2.24.0.2 - The Git Development Community)
GlassFish Server Open Source Edition 4.1.1 (HKLM\...\nbi-glassfish-mod-4.1.1.0.1) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.113 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Gummi version w32 unstable-5 (HKLM-x32\...\{D50B8348-D00C-4208-94D2-76A0E0CD5776}_is1) (Version: w32 unstable-5 - Alexander van der Mey)
Intel Driver && Support Assistant (HKLM-x32\...\{4DF3098D-2A9A-46DF-8B8C-9DD31D319739}) (Version: 20.2.9.6 - Intel) Hidden
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 22.3 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000060-0200-1033-84C8-B8D95FA3C8C3}) (Version: 20.60.0 - Intel Corporation)
Intel® Chipset Device Software (HKLM-x32\...\{4e75a24b-6cc4-4a46-accf-525f8a08c533}) (Version: 10.1.1.18 - Intel(R) Corporation) Hidden
Intel® Driver & Support Assistant (HKLM-x32\...\{a2f234ef-6c54-4ad2-a401-107bcbdfdef2}) (Version: 20.2.9.6 - Intel)
Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Java 8 Update 181 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180181F0}) (Version: 8.0.1810.13 - Oracle Corporation)
JetBrains CLion 2018.3.2 (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\CLion 2018.3.2) (Version: 183.4886.39 - JetBrains s.r.o.)
JetBrains PyCharm 2019.2.4 (HKLM-x32\...\PyCharm 2019.2.4) (Version: 192.7142.42 - JetBrains s.r.o.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.6.6005.4 - Waves Audio Ltd.) Hidden
Meld (HKLM-x32\...\{3C74AE1F-2CCF-4969-9B98-000B637EC9A0}) (Version: 3.18.2 - The Meld project)
Microsoft Office 365 ProPlus - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.11929.20648 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Mozilla Firefox 57.0.4 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 57.0.4 (x86 en-US)) (Version: 57.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 57.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0 - Mozilla)
MuseScore 2 (HKLM-x32\...\{7D01160E-D30F-4E88-8872-4A0A0A782E2E}) (Version: 2.3.2 - Werner Schweer and Others)
MuseScore 3 (HKLM\...\{E98C4AA7-F94B-4541-9B16-F7877CF5AF35}) (Version: 3.4.1.9660 - Werner Schweer and Others)
NetBeans IDE 8.2 (HKLM\...\nbi-nb-base-8.2.0.0.201609300101) (Version: 8.2 - NetBeans.org)
NVIDIA GeForce NOW 2.0.18.79 (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GeforceNOW) (Version: 2.0.18.79 - NVIDIA Corporation)
NVIDIA Install Application (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer) (Version: 2.1002.344.0 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20648 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20648 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.11929.20648 - Microsoft Corporation) Hidden
OpenRCT2 0.2.4 (HKLM-x32\...\OpenRCT2) (Version: 0.2.4 - OpenRCT2)
OpenTTD 1.8.0 (HKLM-x32\...\OpenTTD) (Version: 1.8.0 - OpenTTD)
Oracle VM VirtualBox 5.2.10 (HKLM\...\{DA347D3B-067A-42F2-A0BE-B6B0DA7C0EDF}) (Version: 5.2.10 - Oracle Corporation)
Pandoc 2.0.4 (HKLM-x32\...\{47F423DC-5FA1-4148-974A-7C48D807C438}) (Version: 2.0.4 - John MacFarlane)
PokerStars.cz (HKLM-x32\...\PokerStars.cz) (Version:  - PokerStars.cz)
Postman-win64-7.0.9 (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\Postman) (Version: 7.0.9 - Postman)
Python 3.7.0 (64-bit) (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\{f684de81-73c2-4924-ad43-e7ae400d47b5}) (Version: 3.7.150.0 - Python Software Foundation)
Python 3.7.0 Add to Path (64-bit) (HKLM\...\{A03DCA8A-AAD0-4A25-8CE0-D50D73797233}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Core Interpreter (64-bit) (HKLM\...\{F046BD5A-33F4-4ABA-BD2D-0227F6291EC9}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Development Libraries (64-bit) (HKLM\...\{61246987-8D99-44A9-8FF5-E2E3F503B72D}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Documentation (64-bit) (HKLM\...\{E7C56E72-C80E-453B-9345-FAEAE5DB51A4}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Executables (64-bit) (HKLM\...\{84B7971A-F59F-4247-AD34-BEC02CF85FBD}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 pip Bootstrap (64-bit) (HKLM\...\{8A6F7991-1955-4C46-8C0C-8D7C6F7042FA}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Standard Library (64-bit) (HKLM\...\{18D93BBC-06F6-449D-96FB-CD473CFC6A6D}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Tcl/Tk Support (64-bit) (HKLM\...\{A2FC01E0-059E-4D21-AFD2-B63A7E1EF3CD}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Test Suite (64-bit) (HKLM\...\{E4266358-1C9B-4AF0-ABF7-72BE136904CF}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Utility Scripts (64-bit) (HKLM\...\{9E24E01B-CBD8-4558-A56D-6188F1A3C822}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{D6BDDB48-938A-4384-A7BE-2B4E4931B111}) (Version: 3.7.6386.0 - Python Software Foundation)
Realtek Audio COM Components (HKLM-x32\...\{2355B503-9B11-4449-861D-1C1748B26320}) (Version: 1.0.2 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6070 - Realtek Semiconductor Corp.)
RollerCoaster Tycoon 2 (HKLM-x32\...\{72DF62BD-FF36-424E-AA5F-D89BAFF2C249}) (Version:  - )
RollerCoaster Tycoon 2: Time Twister (HKLM-x32\...\{BA1E1AFD-D1F2-4C52-88C3-186FC5E61604}) (Version: 1.00.000 - )
RollerCoaster Tycoon 2: Wacky Worlds (HKLM-x32\...\{B1AD83A0-DC92-41E3-B111-E9472349768C}) (Version:  - )
Slack (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\slack) (Version: 4.4.2 - Slack Technologies Inc.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\Spotify) (Version: 1.1.30.658.gf13cde74 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Surviving Mars - Mysteries Resupply Pack (HKLM-x32\...\1990927897_is1) (Version: DaVinci RC1 - GOG.com)
Surviving Mars - Stellaris Dome Set (Pre-Order DLC) (HKLM-x32\...\1424717003_is1) (Version: DaVinci RC1 - GOG.com)
Surviving Mars (HKLM-x32\...\2129244347_is1) (Version: DaVinci RC1 - GOG.com)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.2.0.24753 - Microsoft Corporation)
Texmaker 5.0.3 (64-bit) (HKLM-x32\...\{7209FF10-D27D-432F-A705-84F02D136C7E}) (Version: 5.0.3.0 - Texmaker)
Texts (HKLM-x32\...\{0B8E4015-5FC6-450F-8BB1-F617D2A0C262}) (Version: 1.5.0.0 - Text Software Limited)
Twitch (HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
WolframScript (A-WIN32-WolframScript 11.2.0 2017091001) (HKLM-x32\...\{90D12C2B-666B-422D-91CF-531112BA0823}) (Version: 11.2.44 - Wolfram Research, Inc.)
XAMPP (HKLM-x32\...\xampp) (Version: 7.3.3-1 - Bitnami)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.5.4.0_x64__htrsf667h5kn2 [2020-03-17] (Dell Inc)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.1.4081.0_x64__rz1tebttyb220 [2020-01-31] (Dolby Laboratories)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-09-30] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-19] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.4030.0_x64__8wekyb3d8bbwe [2020-04-16] (Microsoft Studios) [MS Ad]
Microsoft Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
Python 3.7 -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.7_3.7.2032.0_x64__qbz5n2kfra8p0 [2020-03-13] (Python Software Foundation)
Ubuntu -> C:\Program Files\WindowsApps\CanonicalGroupLimited.UbuntuonWindows_1804.2020.5.0_x64__79rhkp1fndgsc [2020-03-09] (Canonical Group Limited)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-83661414-2985840491-4141075080-1001_Classes\CLSID\{233525e0-5434-46ef-b464-fd7e45e2e145}\localserver32 -> C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe (IDSA Production signing key -> Intel)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-02-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-02-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-02-27] (Google LLC -> Google)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-02-27] (Google LLC -> Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-08-27] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-08-27] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-02-27] (Google LLC -> Google)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-11-07] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\OndrejChladek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2019\Uninstall TeX Live.lnk -> C:\texlive\2019\tlpkg\installer\uninst.bat (No File)
ShortcutWithArgument: C:\Users\OndrejChladek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda3 (64-bit)\Anaconda Prompt (Anaconda3).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /K ""C:\Users\Ondrej Chladek\Anaconda3\Scripts\activate.bat" "C:\Users\Ondrej Chladek\Anaconda3""
ShortcutWithArgument: C:\Users\OndrejChladek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) =============

2020-04-14 09:00 - 2020-04-14 09:00 - 000114176 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_ctypes.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000173056 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_elementtree.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 002133504 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_hashlib.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000032256 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_multiprocessing.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000046080 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_psutil_windows.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000047616 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_socket.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 002701824 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_ssl.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000026112 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\_yappi.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000080896 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\bz2.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000016384 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\common.time34.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000007680 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\hashobjs_ext.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000301568 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\PIL._imaging.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000169472 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\pyexpat.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 001084416 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\pysqlite2._sqlite.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000548864 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\pythoncom27.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 000137728 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\pywintypes27.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 000010752 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\select.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000020992 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\thumbnails_ext.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000689664 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\unicodedata.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000119808 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\usb_ext.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000128512 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32api.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000438784 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32com.shell.shell.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000011776 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32crypt.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000023040 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32event.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000149504 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32file.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000223232 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32gui.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000048128 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32inet.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000029696 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32pdh.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000027648 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32pipe.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000044032 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32process.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000020480 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32profile.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000136192 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32security.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000026624 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\win32ts.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000034816 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\windows.conditional.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000038400 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\windows.connectivity.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000071680 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\windows.device_monitor.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000109056 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\windows.volumes.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000020480 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\windows.winwrap.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 001325056 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wx._controls_.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 001489408 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wx._core_.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 001007104 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wx._gdi_.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000103424 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wx._html2.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 000916992 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wx._misc_.pyd
2020-04-14 09:00 - 2020-04-14 09:00 - 001039872 _____ () [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wx._windows_.pyd
2018-06-22 18:31 - 2018-04-30 14:00 - 000075776 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\python27.dll
2020-01-13 08:04 - 2020-01-13 08:04 - 001899008 _____ (SQLite Development Team) [File not signed] C:\Program Files\Dell\SupportAssistAgent\bin\x64\sqlite3.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wxbase30u_net_vc90_x64.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wxbase30u_vc90_x64.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wxmsw30u_adv_vc90_x64.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wxmsw30u_core_vc90_x64.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wxmsw30u_html_vc90_x64.dll
2020-04-14 09:00 - 2020-04-14 09:00 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\OndrejChladek\AppData\Local\Temp\_MEI131482\wxmsw30u_webview_vc90_x64.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\sharepoint.com -> hxxps://campuscvut-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-11-18 19:00 - 2019-12-12 00:12 - 000000483 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       localhost
192.168.31.6 host.docker.internal
192.168.31.6 gateway.docker.internal
192.168.1.133 host.docker.internal
192.168.1.133 gateway.docker.internal
172.16.210.177 host.docker.internal
172.16.210.177 gateway.docker.internal
147.32.114.30 host.docker.internal
147.32.114.30 gateway.docker.internal
127.0.0.1 kubernetes.docker.internal

2018-11-13 14:23 - 2020-04-17 09:38 - 000000586 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.124.1 ntb-chladek.mshome.net # 2025 4 3 16 7 38 57 890
466
192.168.137.1 ntb-chladek.mshome.net # 2025 3 2 25 8 24 35 42
168.137.100 RedmiNote4-Redmi.mshome.net # 2019 3 6 2 15 35 42 228
54 261

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Users\Ondrej Chladek\AppData\Local\Programs\Python\Python37\Scripts\;C:\Users\Ondrej Chladek\AppData\Local\Programs\Python\Python37\;%USERPROFILE%\AppData\Local\Microsoft\WindowsApps;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Wolfram Research\WolframScript\;C:\Windows\System32\;"%SystemRoot%\system32;";%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Git\cmd;C:\Program Files (x86)\Pandoc\
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName0 -> C:\Windows\System32\\unimdm.tsp (Microsoft Windows -> Microsoft Corporation)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName1 -> C:\Windows\System32\\kmddsp.tsp (Microsoft Windows -> Microsoft Corporation)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> C:\Windows\System32\\hidphone.tsp (Microsoft Windows -> Microsoft Corporation)
HKLM\software\wow6432node\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName0 -> C:\Windows\SysWOW64\\unimdm.tsp (Microsoft Windows -> Microsoft Corporation)
HKLM\software\wow6432node\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName1 -> C:\Windows\SysWOW64\\kmddsp.tsp (Microsoft Windows -> Microsoft Corporation)
HKLM\software\wow6432node\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> C:\Windows\SysWOW64\\hidphone.tsp (Microsoft Windows -> Microsoft Corporation)
Windows Firewall is enabled.

Network Binding:
=============
vEthernet (Default Switch): Hyper-V Extensible Virtual Switch -> vms_pp (disabled) 
vEthernet (Default Switch): VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
vEthernet (Default Switch): Ovladač přemostění -> ms_l2bridge (enabled) 
Síťové připojení Bluetooth: Hyper-V Extensible Virtual Switch -> vms_pp (disabled) 
Ethernet: Hyper-V Extensible Virtual Switch -> vms_pp (disabled) 
Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
Ethernet: Ovladač přemostění -> ms_l2bridge (enabled) 
Wi-Fi: Hyper-V Extensible Virtual Switch -> vms_pp (disabled) 
Wi-Fi: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
Wi-Fi: Ovladač přemostění -> ms_l2bridge (enabled) 

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_9EF4AF914E0217208E99BFB0502FDF80"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-83661414-2985840491-4141075080-1001\...\StartupApproved\Run: => "TortoiseSVN Monitor"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{5FFFEFF8-A03B-4090-98B4-81A4B3B5E1D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe () [File not signed]
FirewallRules: [{54A3A2A9-06AB-460F-844A-DF2CAE5997C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe () [File not signed]
FirewallRules: [{50521A6D-B3FB-476C-8939-9D1F57F18072}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Beat Hazard\runme.exe () [File not signed]
FirewallRules: [{4BB3EADA-27CB-4C96-9187-9461D580B0C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Beat Hazard\runme.exe () [File not signed]
FirewallRules: [{B1B7AE19-2752-4162-AC98-DB6E2C7ADFCE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Beat Hazard\BeatHazard.exe () [File not signed]
FirewallRules: [{8E7F06A1-5B32-4B51-9FC3-C139ADF39311}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Beat Hazard\BeatHazard.exe () [File not signed]
FirewallRules: [{C39F834E-E7ED-48C8-8BE5-81C3C06A21AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe () [File not signed]
FirewallRules: [{A21BC2C9-BFE8-4BFD-90BC-1AB4AB73CCE3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe () [File not signed]
FirewallRules: [{93F354DE-6666-44C1-BDEE-CDA012F75413}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect64.exe () [File not signed]
FirewallRules: [{17DE4CD1-1E81-4985-84C1-241B6734383B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect64.exe () [File not signed]
FirewallRules: [{7E3EE59F-0801-4185-B12F-B3244F1C1F36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Luftrausers\bin\Luftrausers.exe No File
FirewallRules: [{FD04228D-C335-4826-B871-12F2041A4670}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Luftrausers\bin\Luftrausers.exe No File
FirewallRules: [{3765F823-94B9-4A93-BBB7-24603777EEF9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SovietRepublic\SOVIET.exe No File
FirewallRules: [{CFB3A8A6-D176-4693-A4A4-439468506350}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SovietRepublic\SOVIET.exe No File
FirewallRules: [{AE204DF5-AD7A-4394-AAA2-9E47097747BE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RimWorld\RimWorldWin64.exe () [File not signed]
FirewallRules: [{4ED626B1-F27F-44A9-999D-6631912CCC50}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RimWorld\RimWorldWin64.exe () [File not signed]
FirewallRules: [{A2892EB9-49CB-42D2-9177-C4DF61CF6EED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Surviving Mars\MarsSteam.exe (Haemimont Games AD -> Haemimont Games)
FirewallRules: [{5313326F-ED7F-408A-86CD-D9E3AF9779C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Surviving Mars\MarsSteam.exe (Haemimont Games AD -> Haemimont Games)
FirewallRules: [{4D96E910-D37A-412E-8E67-27B3278FBCC4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{3A4F397B-0CE9-4935-A88E-05989F26BF93}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4EC16A19-8A14-42D1-8DD0-00FEBE19BF1F}] => (Allow) C:\Users\Ondrej Chladek\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{7F0B28A7-4B95-45F1-8909-079CB41F579B}] => (Allow) C:\Users\Ondrej Chladek\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{2B6D730E-D256-45C0-A97A-F9B45000BFF5}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe No File
FirewallRules: [{279E8B19-EECA-40BE-9DDF-D7B7C52D91C4}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe No File
FirewallRules: [{21A35D8D-13B5-4D8C-BCFA-F8EE54373EA5}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [UDP Query User{1AAC0793-B01B-4999-8B95-AEF2094177A1}C:\users\ondrej chladek\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\ondrej chladek\appdata\roaming\gameranger\gameranger\gameranger.exe No File
FirewallRules: [TCP Query User{B680AE32-7B1F-4BFB-B175-4102C9C1E0C7}C:\users\ondrej chladek\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\ondrej chladek\appdata\roaming\gameranger\gameranger\gameranger.exe No File
FirewallRules: [{D659AE2D-540C-4B9D-8364-A231DC0F5F89}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [File not signed]
FirewallRules: [{0744DCFD-0687-455B-9A0E-D661C9E06A32}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [File not signed]
FirewallRules: [{284D797E-7A85-44D0-869E-F004F0E99B8A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{5D8AC712-34D9-4FBF-A943-3165E8758609}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{29140EE1-0266-4AF4-A6C3-CC44AB29EF06}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{47C8A90F-15EB-40A1-8F14-F3F10256AE69}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{78749DB2-D804-4B8A-AD98-F92354CF21DB}C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe No File
FirewallRules: [TCP Query User{84A7BDA9-CC56-4E56-BE30-34CDEEBD5BE0}C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe No File
FirewallRules: [UDP Query User{61F943B6-1807-46D9-8769-64205BC3F421}C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe No File
FirewallRules: [TCP Query User{34176505-5381-4F31-B525-E9E92F9F69CF}C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe] => (Allow) C:\program files\jetbrains\pycharm 2018.1.4\bin\pycharm64.exe No File
FirewallRules: [UDP Query User{944ABC43-2A89-4ED7-93FA-09C8CA4D116E}C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [TCP Query User{E50EDD59-C88C-47CC-B26E-B3E8B957AE81}C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [{A2CB4814-4AE7-4712-BE4B-97D5DDD1F254}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe No File
FirewallRules: [UDP Query User{6189F046-01FF-4A20-B014-10324BCC3DB7}C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [TCP Query User{3AE6FAC2-C087-4311-8B0D-AE3079A27737}C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ondrej chladek\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [{FA6527EC-981F-4D7A-99B4-312DFB27DB06}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5286E9CA-C9FA-4A2B-BAE9-82E75FA67229}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F34A546E-C9FD-4991-9081-8890D678D576}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel(R) Wireless Connectivity Solutions -> )
FirewallRules: [{13D3C514-68C6-406A-94CD-A45001FA5199}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Launcher\dowser.exe (Paradox Interactive Ab (Publ) -> )
FirewallRules: [{C95DD2AE-4F29-407D-9D32-02BC4057A784}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Launcher\dowser.exe (Paradox Interactive Ab (Publ) -> )
FirewallRules: [VIRT-MIGL-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe No File
FirewallRules: [VIRT-REMOTEDESKTOP-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe No File
FirewallRules: [{D822E258-C609-4951-A69B-2023D779C88D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{24B66107-206E-473B-9BDB-A3ABFD94E957}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{80AC44F2-E35C-44BA-A8A0-A239EBDC1DC1}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7A170D3C-6B14-4C14-8D78-4377DD705B03}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CE639967-C867-4D00-A546-7068805E4CAC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{919087DC-FA8A-4A64-B134-9DCC9D40A151}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe () [File not signed]
FirewallRules: [{B1FCD74A-5E54-4750-81FA-7E98B57D8F91}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe () [File not signed]
FirewallRules: [{FCDA1FF8-FB21-4E23-A30B-AB23A85D3CD3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{D375E695-7674-45EC-979E-2903BF57E523}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Graveyard Keeper\Graveyard Keeper.exe () [File not signed]
FirewallRules: [{9169F045-4605-455F-9EFB-16FEE9295270}] => (Allow) %systemroot%\system32\alg.exe No File
FirewallRules: [HNS Container Networking - DNS (UDP-In) - BC836632-5E5D-4CE6-8BFC-199DCF2F731A - 0] => (Allow) LPort=53
FirewallRules: [{6C4B1321-1F71-4AE0-91F3-692C80B67769}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{E7021BEA-4EBE-48D8-815D-789ACDEB2FA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Banished\Application-steam-x64.exe () [File not signed]
FirewallRules: [{F434C999-5E02-4E25-8082-0A1A4C44B314}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Banished\Application-steam-x64.exe () [File not signed]

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:118.64 GB) (Free:14.07 GB) (12%)

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (04/17/2020 06:35:50 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (22836,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/17/2020 06:03:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: pycharm64.exe, version: 2019.2.4.0, time stamp: 0x5d46fe9d
Faulting module name: ucrtbase.dll, version: 10.0.18362.387, time stamp: 0x4361b720
Exception code: 0xc0000409
Fault offset: 0x000000000006db8e
Faulting process id: 0x3f04
Faulting application start time: 0x01d614c82fb9783e
Faulting application path: C:\Program Files\JetBrains\PyCharm 2019.2.4\bin\pycharm64.exe
Faulting module path: C:\WINDOWS\System32\ucrtbase.dll
Report Id: a86676a7-c530-4946-ba80-70a660eacd03
Faulting package full name: 
Faulting package-relative application ID:

Error: (04/17/2020 05:26:25 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (15900,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/17/2020 05:15:42 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (20752,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/17/2020 04:27:10 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (20800,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/17/2020 03:36:48 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (2940,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/17/2020 12:32:36 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (20772,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/17/2020 12:00:19 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (23640,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.


System errors:
=============
Error: (04/12/2020 12:52:59 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: The driver detected an internal driver error on \Device\VBoxNetLwf.

Error: (04/12/2020 12:51:12 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: The driver detected an internal driver error on \Device\VBoxNetLwf.

Error: (04/12/2020 12:51:12 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: The driver detected an internal driver error on \Device\VBoxNetLwf.

Error: (04/12/2020 12:51:08 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: The driver detected an internal driver error on \Device\VBoxNetLwf.

Error: (04/12/2020 12:50:32 AM) (Source: DCOM) (EventID: 10010) (User: NTB-CHLADEK)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (04/12/2020 12:50:32 AM) (Source: DCOM) (EventID: 10010) (User: NTB-CHLADEK)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (04/12/2020 12:50:32 AM) (Source: DCOM) (EventID: 10010) (User: NTB-CHLADEK)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (04/12/2020 12:50:32 AM) (Source: DCOM) (EventID: 10010) (User: NTB-CHLADEK)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.


Windows Defender:
===================================
Date: 2020-04-08 20:15:37.726
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {056A8605-770F-4BC1-B0E0-43AE5CA384DD}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2020-04-06 13:15:27.257
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {DF5E74F5-A6AF-4EDD-99E6-1FAE75ED3BCC}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2020-04-06 13:05:21.400
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {C439528F-B602-4C0E-A929-4FB9119B6130}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2020-03-30 10:33:56.805
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {DEBB0B78-6771-45E5-B1DB-98A919BC9CF8}
Scan Type: Antimalware
Scan Parameters: Quick Scan

==================== Memory info =========================== 

BIOS: Dell Inc. A25 02/01/2018
Motherboard: Dell Inc. 0J9N58
Processor: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz
Percentage of memory in use: 92%
Total physical RAM: 8113.39 MB
Available physical RAM: 609.78 MB
Total Virtual: 16210.87 MB
Available Virtual: 2542.38 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:118.64 GB) (Free:14.07 GB) NTFS
Drive d: (HDD-1TB) (Fixed) (Total:931.01 GB) (Free:887.01 GB) NTFS

\\?\Volume{7ed92120-d8f7-4f79-8e4d-6aabad177869}\ (Obnovení) (Fixed) (Total:0.49 GB) (Free:0.06 GB) NTFS
\\?\Volume{2f885346-746f-4eb7-a3c0-50ad4d94108a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
\\?\Volume{6dc8cc6c-5978-4841-9bb0-308be8ddf67b}\ () (Fixed) (Total:0.48 GB) (Free:0.46 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: CD8466AC)

Partition: GPT.

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2983D402)

Partition: GPT.

==================== End of Addition.txt =======================