Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-10-2020
Ran by fk777 (07-10-2020 09:53:40)
Running from C:\Users\fk777\Desktop
Windows 10 Home Version 2004 19041.508 (X64) (2020-07-27 11:45:33)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-265643958-173676066-1965578650-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-265643958-173676066-1965578650-503 - Limited - Disabled)
fk777 (S-1-5-21-265643958-173676066-1965578650-1001 - Administrator - Enabled) => C:\Users\fk777
Guest (S-1-5-21-265643958-173676066-1965578650-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-265643958-173676066-1965578650-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 20.00 alpha (x64) (HKLM\...\7-Zip) (Version: 20.00 alpha - Igor Pavlov)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.433 - Adobe)
Apple Application Support (HKLM-x32\...\{853A4763-6643-4604-8D64-28BDD8925F4C}) (Version: 1.5.1 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.8.2429 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 85.0.5815.103 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1065.0 - AVAST Software) Hidden
BlueStacks (64-bit) (HKLM\...\BlueStacks_bgp64) (Version: 4.220.0.4001 - BlueStack Systems, Inc.)
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.230.10.1008 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.72 - Piriform)
Facebook Gameroom 1.23.7426.18586 (HKLM-x32\...\{58E3FB73-8B88-4807-A803-79B5ADA0136F}) (Version: 1.23.7426.18586 - Facebook)
GIMP 2.10.20 (HKLM\...\GIMP-2_is1) (Version: 2.10.20 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 85.0.4183.121 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)
IrfanView 4.54 (64-bit) (HKLM\...\IrfanView64) (Version: 4.54 - Irfan Skiljan)
LibreOffice 6.4.4.2 (HKLM\...\{F00C391B-6092-40E7-9ECD-144933865571}) (Version: 6.4.4.2 - The Document Foundation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 85.0.564.68 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.135.37 - )
Microsoft Office 2013 pre študentov a domácnosti - sk-sk (HKLM\...\HomeStudentRetail - sk-sk) (Version: 15.0.5267.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\OneDriveSetup.exe) (Version: 20.143.0716.0003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.23.27820 (HKLM-x32\...\{852adda4-4c78-4a38-b583-c0b360a329d6}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.7 - Notepad++ Team)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5267.1000 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5267.1000 - Microsoft Corporation) Hidden
Opera Stable 71.0.3770.198 (HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\Opera 71.0.3770.198) (Version: 71.0.3770.198 - Opera Software)
PDF-XChange Editor (HKLM\...\{3BB66258-EB01-4052-9558-D9353DC5AC89}) (Version: 8.0.336.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{9de0c0b9-ea77-45b5-90d0-869386acfc73}) (Version: 8.0.336.0 - Tracker Software Products (Canada) Ltd.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7841 - Realtek Semiconductor Corp.)
Smart Defrag 6 (HKLM-x32\...\Smart Defrag_is1) (Version: 6.6.0 - IObit)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.51 - Ghisler Software GmbH)
Tropico (HKLM-x32\...\{818FB39B-1A57-4F1B-A54D-391C33D6C596}) (Version:  - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
WinDirStat 1.1.2 (HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\WinDirStat) (Version:  - )

Packages:
=========
(a9t9) Free OCR Software -> C:\Program Files\WindowsApps\47971A9T9AutonomousTechno.a9t9FreeOCRSoftware_1.2.0.3_x64__b5ssw9yxzk0ey [2020-06-22] (A9T9  (Autonomous Technology))
Express Burn CD and DVD Burner Free -> C:\Program Files\WindowsApps\NCHSoftware.ExpressBurnFree_9.0.2.0_x86__7kedsbyvzns34 [2020-06-22] (NCH Software)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-06-22] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-06-22] (Microsoft Corporation) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-10-04] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2020-02-06] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2020-01-30] (Notepad++ -> )
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-10-04] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\WINDOWS\System32\IObitSmartDefragExtension.dll [2019-09-12] (IObit Information Technology -> IObit)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-10-04] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2020-02-06] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-11-01] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2020-02-06] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-10-04] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\WINDOWS\System32\IObitSmartDefragExtension.dll [2019-09-12] (IObit Information Technology -> IObit)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-10-07 09:47 - 2020-10-07 09:47 - 000033936 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2020-07-27 14:55 - 2020-02-06 15:00 - 000076800 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2020-06-27] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2020-06-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2020-06-27] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2020-08-30 20:44 - 000001688 _____ C:\WINDOWS\system32\drivers\etc\hosts
109.94.209.70      fitgirlrepacks.co               # Fake FitGirl site
109.94.209.70      fitgirl-repacks.cc              # Fake FitGirl site
109.94.209.70      fitgirl-repacks.website         # Fake FitGirl site
109.94.209.70      www.fitgirlrepacks.co           # Fake FitGirl site
109.94.209.70      www.fitgirl-repacks.cc          # Fake FitGirl site
109.94.209.70      www.fitgirl-repack.com          # Fake FitGirl site
109.94.209.70      www.fitgirl-repacks.website     # Fake FitGirl site
109.94.209.70      ww9.fitgirl-repacks.xyz         # Fake FitGirl site
109.94.209.70      *.fitgirl-repacks.xyz           # Fake FitGirl site
109.94.209.70      fitgirl-repacks.xyz             # Fake FitGirl site
109.94.209.70      fitgirl-repack.net              # Fake FitGirl site
109.94.209.70      www.fitgirl-repack.net          # Fake FitGirl site

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-265643958-173676066-1965578650-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\fk777\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\StartupApproved\StartupFolder: => "Facebook Gameroom.lnk"
HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\StartupApproved\Run: => "Vivaldi Update Notifier"
HKU\S-1-5-21-265643958-173676066-1965578650-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CDF83DD8-9FC5-45F7-B74D-4E1A84FAF244}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F2AA7F63-2574-42B2-B718-28ED4A6901CB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9FC36969-0397-455D-B73B-36141507006B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3B195105-FFB0-4EC8-9366-4921B96392C3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3967D2D-9CD9-4566-B14B-41EAD4A97D06}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [TCP Query User{AC836213-5D41-4B6A-9A47-32970F73A322}D:\web_disk_81_mb\mysql\bin\mysqld_usbwv8.exe] => (Allow) D:\web_disk_81_mb\mysql\bin\mysqld_usbwv8.exe () [File not signed]
FirewallRules: [UDP Query User{498CCD7C-1082-4461-B9E9-8F91649DA8FA}D:\web_disk_81_mb\mysql\bin\mysqld_usbwv8.exe] => (Allow) D:\web_disk_81_mb\mysql\bin\mysqld_usbwv8.exe () [File not signed]
FirewallRules: [TCP Query User{B4DFDB9C-53BB-4CD3-8A0A-25B71E4320F1}D:\web_disk_81_mb\apache2\bin\httpd_usbwv8.exe] => (Allow) D:\web_disk_81_mb\apache2\bin\httpd_usbwv8.exe (Apache Software Foundation) [File not signed]
FirewallRules: [UDP Query User{00E730C2-225A-4AFB-83F8-C7F03651FC52}D:\web_disk_81_mb\apache2\bin\httpd_usbwv8.exe] => (Allow) D:\web_disk_81_mb\apache2\bin\httpd_usbwv8.exe (Apache Software Foundation) [File not signed]
FirewallRules: [TCP Query User{11479B9F-02D7-4768-BDC5-B1DF98EDB7C3}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [UDP Query User{DD6B47E1-A052-46C9-99D4-32B2C612547D}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [{A5FC5B5D-734C-4369-8996-3344739B473B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{D931DA3E-6CAD-43A7-8E3D-71C2197E8482}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (10/06/2020 02:17:28 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiska nemohol dokončiť opätovné vystrihnutie v Nový zväzok (D:), pretože: Hardvér, ktorý podporuje tento zväzok, nepodporuje požadovanú operáciu. (0x8900002A)

Error: (10/06/2020 02:17:01 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiska nemohol dokončiť opätovné vystrihnutie v (C:), pretože: Hardvér, ktorý podporuje tento zväzok, nepodporuje požadovanú operáciu. (0x8900002A)

Error: (10/06/2020 02:12:28 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiska nemohol dokončiť opätovné vystrihnutie v Vyhradené systémom, pretože: Hardvér, ktorý podporuje tento zväzok, nepodporuje požadovanú operáciu. (0x8900002A)

Error: (10/04/2020 12:51:36 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "D:\Kôš_95_GB\exe\Autoruns.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.

Error: (10/04/2020 12:51:36 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "D:\Kôš_95_GB\exe\autorunsc.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21.manifest.

Error: (10/02/2020 01:25:21 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostw (2940,R,98) WebCacheLocal: Error -1811 (0xfffff8ed) occurred while opening logfile C:\Users\fk777\AppData\Local\Microsoft\Windows\WebCache\V010000C.log.

Error: (10/02/2020 11:16:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Explorer.EXE, verzia: 10.0.19041.488, časová značka: 0xb1a44bf9
Názov chybujúceho modulu: unknown, verzia: 0.0.0.0, časová značka: 0x00000000
Kód výnimky: 0xc0000005
Odstup chyby: 0x0000000000000000
Identifikácia chybujúceho procesu: 0x13fc
Čas spustenia chybujúcej aplikácie: 0x01d69895683a5f7e
Cesta chybujúcej aplikácie: C:\WINDOWS\Explorer.EXE
Cesta chybujúceho modulu: unknown
Identifikácia hlásenia: 66a95c9b-18f0-4e85-ac93-4d074d69e59b
Celé meno chybujúceho balíka: 
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (10/01/2020 01:40:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: (a9t9)OCRApp.exe, verzia: 1.0.5.0, časová značka: 0x563a1b3a
Názov chybujúceho modulu: KERNELBASE.dll, verzia: 10.0.19041.488, časová značka: 0x5b4a3325
Kód výnimky: 0xc000027b
Odstup chyby: 0x000000000010b3cc
Identifikácia chybujúceho procesu: 0x15c4
Čas spustenia chybujúcej aplikácie: 0x01d697e7829ab2a3
Cesta chybujúcej aplikácie: C:\Program Files\WindowsApps\47971A9T9AutonomousTechno.a9t9FreeOCRSoftware_1.2.0.3_x64__b5ssw9yxzk0ey\(a9t9)OCRApp.exe
Cesta chybujúceho modulu: C:\WINDOWS\System32\KERNELBASE.dll
Identifikácia hlásenia: ea66fc87-1951-49d6-a584-3adf4afc80f9
Celé meno chybujúceho balíka: 47971A9T9AutonomousTechno.a9t9FreeOCRSoftware_1.2.0.3_x64__b5ssw9yxzk0ey
Identifikácia chybujúcej aplikácie vzhľadom na balík: App


System errors:
=============
Error: (10/07/2020 09:47:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby AdvancedSystemCareService13 zlyhalo kvôli nasledujúcej chybe: 
The system cannot find the file specified.

Error: (10/07/2020 09:43:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba AMD External Events Utility sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/07/2020 09:43:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 0 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (10/07/2020 09:43:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Klikni a spusti balíka Microsoft Office sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 0 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (10/07/2020 09:43:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba ASUS Com Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/07/2020 09:43:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) HD Graphics Control Panel Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (10/05/2020 03:27:19 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (10/05/2020 09:51:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby AdvancedSystemCareService13 zlyhalo kvôli nasledujúcej chybe: 
The system cannot find the file specified.


Windows Defender:
===================================
Date: 2020-10-04 09:16:21.1080000Z
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {A4BECA86-A499-437A-BBA3-192EDE3A1638}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2020-10-03 23:37:03.3000000Z
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan ID: {990BF7EE-635B-4508-A2BD-2F27324E7B99}
Scan Type: Antimalware
Scan Parameters: Full Scan

Date: 2020-10-03 23:37:03.2960000Z
Description: 
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/InstallCore&threatid=213927&enterprise=0
Name: PUA:Win32/InstallCore
ID: 213927
Severity: Nízka
Category: Potenciálne nežiaduci softvér
Path: file:_F:\Kôš_95_GB\exe\Jurassic-Park-Builder_Setup_1017792416.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: User
Process Name: Unknown
Security intelligence Version: AV: 1.325.98.0, AS: 1.325.98.0, NIS: 1.325.98.0
Engine Version: AM: 1.1.17500.4, NIS: 1.1.17500.4

Date: 2020-10-03 23:37:03.2400000Z
Description: 
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Seznam&threatid=227299&enterprise=0
Name: PUA:Win32/Seznam
ID: 227299
Severity: Nízka
Category: Potenciálne nežiaduci softvér
Path: file:_F:\dTvorba\Software_28-0_GB\instspeedfan452.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: User
Process Name: Unknown
Security intelligence Version: AV: 1.325.98.0, AS: 1.325.98.0, NIS: 1.325.98.0
Engine Version: AM: 1.1.17500.4, NIS: 1.1.17500.4

Date: 2020-10-03 23:37:03.2260000Z
Description: 
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Tsingsoft&threatid=233650&enterprise=0
Name: PUA:Win32/Tsingsoft
ID: 233650
Severity: Nízka
Category: Potenciálne nežiaduci softvér
Path: file:_F:\Kôš_95_GB\exe\FreeOCRtoWord.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: User
Process Name: Unknown
Security intelligence Version: AV: 1.325.98.0, AS: 1.325.98.0, NIS: 1.325.98.0
Engine Version: AM: 1.1.17500.4, NIS: 1.1.17500.4

CodeIntegrity:
===================================

Date: 2020-10-07 09:51:30.0710000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-10-07 09:51:18.4060000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 09:50:24.0460000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 09:50:15.5870000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 09:50:06.0050000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 09:49:46.9020000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 09:49:46.1970000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-10-07 09:49:45.1830000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

==================== Memory info =========================== 

BIOS: American Megatrends Inc. 1402 11/05/2014
Motherboard: ASUSTeK COMPUTER INC. Z87-K
Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 30%
Total physical RAM: 8063.98 MB
Available physical RAM: 5633.64 MB
Total Virtual: 11263.98 MB
Available Virtual: 8853.05 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:96.64 GB) (Free:11.37 GB) NTFS
Drive d: (Nový zväzok) (Fixed) (Total:833.85 GB) (Free:216.15 GB) NTFS

\\?\Volume{22a29eff-0000-0000-0000-100000000000}\ (Vyhradené systémom) (Fixed) (Total:0.49 GB) (Free:0.45 GB) NTFS
\\?\Volume{22a29eff-0000-0000-0000-304818000000}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 22A29EFF)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=96.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=541 MB) - (Type=27)
Partition 4: (Not Active) - (Size=833.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================