Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2021
Ran by kmacl (06-02-2021 16:36:26)
Running from C:\Users\kmacl\OneDrive\Plocha
Windows 10 Home Version 20H2 19042.746 (X64) (2021-01-18 01:16:48)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-735461652-1845876884-2699252238-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-735461652-1845876884-2699252238-503 - Limited - Disabled)
Guest (S-1-5-21-735461652-1845876884-2699252238-501 - Limited - Disabled)
kmacl (S-1-5-21-735461652-1845876884-2699252238-1004 - Administrator - Enabled) => C:\Users\kmacl
WDAGUtilityAccount (S-1-5-21-735461652-1845876884-2699252238-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Advertising Center (HKLM-x32\...\{b2ec4a38-b545-4a00-8214-13fe0e915e6d}) (Version: 0.0.0.1 - Nero AG) Hidden
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_PROR_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version:  - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_PROR_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version:  - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_PROR_{E68DD413-B834-4923-8181-0A03B7555187}) (Version:  - Microsoft)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Ashampoo Burning Studio 2021 (HKLM-x32\...\{91B33C97-87D2-CBDB-6C78-9844D71F4195}_is1) (Version: 1.22.0 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.21.3 - Ashampoo GmbH & Co. KG)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.10.2442 - Avast Software)
Avidemux VC++ 64bits (HKU\S-1-5-21-735461652-1845876884-2699252238-1004\...\{a4285450-f48a-460f-a341-d49120aa137a}) (Version: 2.7.6 - Mean)
BIOSAgentPlus by eSupport.com (HKLM-x32\...\BIOSAgentPlus_is1) (Version:  - Copyright © 2018 eSupport.com, Inc • All Rights Reserved)
Canon iP7200 series On-screen Manual (HKLM-x32\...\Canon iP7200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant)
Conexant SmartAudio (HKLM\...\SAII) (Version: 6.0.224.0 - Conexant Systems)
Connection Meter (HKLM-x32\...\ConMet) (Version:  - )
CPUID HWMonitor 1.43 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.43 - CPUID, Inc.)
DivxToDVD 0.5.2 (HKLM-x32\...\VSO DivxToDVD_is1) (Version: 0.5.2 - VSO-Software SARL)
DVDStyler v3.1 (HKLM\...\DVDStyler_is1) (Version:  - Thüring IT-Consulting)
ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.)
Free Blu-ray Player 1.1.18 (HKLM-x32\...\{FFF6624F-BB23-479d-B99E-0394EAD7BC74}_is1) (Version: 1.1.18 - Blu-ray Master)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 88.0.4324.146 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
HP Dropbox Plugin (HKLM-x32\...\{5EF4704F-DE13-45E8-B92A-EB8BDD61ED47}) (Version: 36.0.175.0 - HP)
HP EmailSMTP Plugin (HKLM-x32\...\{B5E7B43A-B632-4CA8-8761-9D572BB0C377}) (Version: 43.0.175.0 - HP)
HP FTP Plugin (HKLM-x32\...\{F420F4B3-A616-4058-8054-CD4F8AE2F11C}) (Version: 43.0.175.0 - HP)
HP Google Drive Plugin (HKLM-x32\...\{AC78E347-F30A-4B81-873D-841886ADEF7A}) (Version: 36.0.175.0 - HP)
HP Ink Tank Wireless 410 series Nápověda (HKLM-x32\...\{08D8BCBD-7BD2-4EC7-8805-D5A2C24E5E85}) (Version: 44.0.0 - HP)
HP OneDrive Plugin (HKLM-x32\...\{085F8621-800B-4C14-98CC-ABA8AA64BDD2}) (Version: 36.0.175.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP SFTP Plugin (HKLM-x32\...\{6E9B2B7C-1701-4DD3-80F7-B45ECA565DF9}) (Version: 43.0.175.0 - HP)
HP SharePoint Plugin (HKLM-x32\...\{60DFD588-0A30-4FA2-9B00-6210B85268B6}) (Version: 43.0.175.0 - HP)
ICQ New (verze 10.0.42540) (HKU\S-1-5-21-735461652-1845876884-2699252238-1004\...\icq.desktop) (Version: 10.0.42540 - Mail.ru LLC)
Jízdní řád ČD 2021 (HKLM-x32\...\{2FFA4F8E-8D11-4A0C-9C58-4BD03B51DDDA}_is1) (Version:  - České dráhy a.s.)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.2.2.47 - PandoraTV)
LibreOffice 6.3 Help Pack (Czech) (HKLM\...\{489A1202-0F90-4D67-B42F-9A12252AC852}) (Version: 6.3.6.2 - The Document Foundation)
LibreOffice 6.3.6.2 (HKLM\...\{6664E413-D143-48B3-823F-50084561A0B6}) (Version: 6.3.6.2 - The Document Foundation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 88.0.705.56 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.71 - )
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional 2007 (HKLM-x32\...\PROR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\ProPlus2019Retail - cs-cz) (Version: 16.0.13628.20274 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-735461652-1845876884-2699252238-1004\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{0BCA8FBE-0C1C-4C65-98A3-5D34AAF41737}) (Version: 2.70.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Mozilla Firefox 85.0.1 (x64 cs) (HKLM\...\Mozilla Firefox 85.0.1 (x64 cs)) (Version: 85.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 76.0.1 - Mozilla)
Nero 9 Essentials (HKLM-x32\...\{e055c315-10d3-451e-aad4-cffa72867891}) (Version:  - Nero AG)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.13628.20274 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.13628.20274 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.13628.20274 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.13628.20274 - Microsoft Corporation) Hidden
Opera Stable 73.0.3856.344 (HKLM-x32\...\Opera 73.0.3856.344) (Version: 73.0.3856.344 - Opera Software)
Opti Drive Control 1.80 (HKLM-x32\...\{80157B54-DB3E-4EE9-8AD8-63A905765FF4}_is1) (Version:  - Erik Deppe)
Opti Drive Speed 1.00 (HKLM-x32\...\{6B031D65-AFF7-470D-832E-0874EB0EA4BE}_is1) (Version:  - Erik Deppe)
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.23258 - Microsoft Corporation)
PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 201209 - Kakao Corp.)
Prohlížeč Seznam.cz (HKU\S-1-5-21-735461652-1845876884-2699252238-1004\...\Seznam Browser) (Version: 6.11.0 - Seznam.cz a.s.)
Puran Utilities 3.1 (HKLM\...\Puran Utilities_is1) (Version:  - Puran Software)
Recover Files 3.33 (HKLM-x32\...\Recover Files_is1) (Version:  - Undelete & Unerase, Inc.)
RegRun Reanimator (HKLM-x32\...\UnHackMe Update - Reanimator_is1) (Version:  - Greatis Software, LLC.)
Rezistor (HKLM-x32\...\Rezistor) (Version:  - )
SiSoftware Sandra Lite 2016.SP1 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2596}_is1) (Version: 22.20.2016.3 - SiSoftware)
Studie vylepšování produktu HP Ink Tank Wireless 410 series (HKLM\...\{CF0E89FE-5BA0-4BD4-BA89-7F0CEE62880F}) (Version: 45.3.2597.18208 - HP Inc.)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.22 - Ghisler Software GmbH)
UnHackMe 12.0 (HKLM-x32\...\UnHackMe_is1) (Version:  - Greatis Software, LLC.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.12 - VideoLAN)
VueScan x64 (HKLM\...\VueScan x64) (Version: 9.7.30 - Hamrick Software)
Wargaming.net Game Center (HKU\S-1-5-21-735461652-1845876884-2699252238-1004\...\Wargaming.net Game Center) (Version: 20.7.2.2851 - Wargaming.net)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.194 - McAfee, LLC)
WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
Youtube-DLG version 0.4 (HKLM-x32\...\{3C455028-FC99-4846-8E04-4FCD87D85613}_is1) (Version: 0.4 - Sotiris Papadopoulos)
Základní software zařízení HP Ink Tank Wireless 410 series (HKLM\...\{36DA5F84-8F50-4B12-A19B-7C66C1F7B040}) (Version: 45.3.2597.18208 - HP Inc.)

Packages:
=========
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_7.1.17.0_x86__kgqvnymyfvs32 [2020-12-16] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.51.4.0_x86__kgqvnymyfvs32 [2021-01-27] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-07-08] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.2.830.0_x64__v10z8vjag6ke6 [2021-02-05] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.1252.0_x64__8wekyb3d8bbwe [2021-02-02] (Microsoft Studios) [MS Ad]
ROBLOX -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.464.24199.0_x86__55nm5eh3cm0pr [2021-02-05] (ROBLOX Corporation)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2021-01-24] (Microsoft Corporation)
Speedtest by Ookla -> C:\Program Files\WindowsApps\Ookla.SpeedtestbyOokla_1.13.154.0_x64__43tkc6nmykmb6 [2021-01-23] (Ookla)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0 [2021-02-05] (Spotify AB) [Startup Task]
Windows Terminal -> C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.5.10271.0_x64__8wekyb3d8bbwe [2021-01-28] (Microsoft Corporation) [Startup Task]
World of Tanks Blitz -> C:\Program Files\WindowsApps\7458BE2C.WorldofTanksBlitz_7.6.341.0_x64__x4tje2y229k00 [2021-01-30] (Wargaming Group Limited)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-12-31] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-12-31] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-12-31] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-12-31] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2015-11-04 16:43 - 2015-11-04 16:43 - 000127488 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-11-04 16:43 - 2015-11-04 16:43 - 000102400 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2021-01-20 13:54 - 2021-01-20 13:54 - 000031232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\299bf2e4e23af02175445e6a26f183b3\A4.Foundation.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\a24c26eba4ea3ddce65e74fa4668e293\AEM.Actions.CCAA.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\b1c480fea6a1f23d52c3e56efa0e3568\AEM.Plugin.EEU.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\ab84ec371d67664b2b3835984aa2dce2\AEM.Plugin.Hotkeys.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.4adf1574#\aaa1680291a15bbc23a2c6f1087a06f3\AEM.Plugin.Audio.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000016384 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.54d8abe3#\067d1b4cc2a05184c6e0a89aaee60af6\AEM.Plugin.DPPE.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000281600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\f535d9aad773e6d356547f8e5efc5a55\AEM.Plugin.Source.Kit.Server.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000014848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\20e43f89b55b6c6d58c04b22890cbbc3\AEM.Plugin.WinMessages.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\2cb21aaa54b1116e4ceda042a9d4ce1e\AEM.Plugin.REG.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\a0c3b8ce9c35481a6521f517227bbbe2\AEM.Plugin.GD.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\6cfd22563e0e2c727f094a3de46cf569\AEM.Server.Shared.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000267776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\8e824043be59343847600763c50d6229\AEM.Server.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000055808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\8b0dfc591b480594610bbaa94430d4db\APM.Foundation.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000122880 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ATICCCom\4f9523253033d141734969c0866c932c\ATICCCom.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000204288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\af1df7a28635d8dc2019da4ad419ebaa\CCC.Implementation.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.2042675f#\6f1608b28aeeb155feb89fcecac1a59a\CLI.Aspect.CPUPStates.Fuel.Dashboard.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000154112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.21d2ac78#\cd69cd6c682b5af8e5d39cf83d69e86b\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000128000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\c473afacd64a10cb325e6c9ac524f824\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\1de0b258089f746ad04d1233cf969b29\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000045568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\dd5cc863637abdfb436e9ceaee87b61a\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000107008 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\119e8f5a6e9313af4844f1cb23d04601\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000209920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4542c692#\0e5c459121818a922cc13b6ebbf1be89\CLI.Aspect.DeviceCRT.Graphics.Shared.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.46819220#\bf72cdb8017728ac2915993a05842fee\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\7d0c76fec9fac2df51435a2a0f823cde\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000152576 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4ede500c#\020f683ae437e4c3f3abdd90de77d4b3\CLI.Aspect.DPPE.Fuel.Dashboard.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\7ee8d68f2500cbf06d0e1339d0509d76\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.59a12d95#\ea99ad5efa6b77f631f17f3f6514113d\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000111616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.5a772e69#\17d291858e0d8e54dd0e5b6ca838a52a\CLI.Aspect.Fets.Fuel.Dashboard.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000070656 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.648b65fc#\f4f537ca108fa07cf69a8e90e333c290\CLI.Aspect.WiFi.Fuel.Dashboard.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000263168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.73911eb5#\b25d1017d66178bbb77c5038da1e5327\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000365056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\e51ade072914adc16c9cc1a4eb929b0b\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000534016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ed14a2a#\0b5b7f6eab7e453fdbcc415195e4c9d7\CLI.Aspect.MultiVPU2.Graphics.Dashboard.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\d8be2b25b0caf7f3d2433074ff98e9bb\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000678912 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.846fa813#\5c996f5c11ac17ef06f84931ef195935\CLI.Aspect.MMVideo.Graphics.Dashboard.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000745472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\528e8766b99ec47ea476e036a210492b\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000449536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\65cd434862baef10fc07bd43d6d2167e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\7f049fbbcaafea4d4220a3b532b5c57b\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000158208 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a0ae52bc#\56e1a1871d241ddc41ee2c934d5ddd0b\CLI.Aspect.DeviceLCD.Graphics.Shared.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\ebccb64be88b1b07b48f2652531555a7\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\d52f956e96982557fc647f907c8b6ba8\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000150528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.abe74207#\bfefe6dfe3acf243f345e070179cf31f\CLI.Aspect.MultiVPU2.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000462336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\59f37443a686efbf0c52772f1db24e0e\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000086528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ae5e117c#\6f241f49aca8683b7bfacde95e1a6901\CLI.Aspect.DisplaysColour2.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000067072 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\7b74f226074a5fac1e09e0def576b8c4\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000023552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c2a2b491#\20cac7aff64c1dfa5503b8903bb8726d\CLI.Aspect.WiFi.Fuel.Shared.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000340992 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\3e009bed5e4d5046f36f132a1b75aa95\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\e62039c5f426da0d2aa0415ba6806c9e\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000081408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.caa5cc64#\deae5ce40584b047b9e5f5d06706e532\CLI.Aspect.Fets.Fuel.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000096256 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4f2f79c#\44975e3ee24433a1e9af1a654e25d48e\CLI.Aspect.CrossFireX.Graphics.Dashboard.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 001315840 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d7e090dc#\82f5dfeb0bebadf9fbeb7b6c6a848246\CLI.Aspect.User.Fuel.Dashboard.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000276480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\24a2cc20fd43f0a9ca86f44040cb1067\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 003312640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\711a19b2cdab61f725d7b781b2b2978e\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000240640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.eda8935e#\44b63310c195cfc86fdc7b385b24d1af\CLI.Aspect.MMVideo.Graphics.Shared.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000047616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\2597fa5cfc6bbd186558dd3ddb3875f3\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000070656 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.efd83192#\3fbdc71c1fa5eb9c59400deeeacd3dcb\CLI.Aspect.CPUPStates.Fuel.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f45bd021#\0cd656e78e2efb07c745406be4f541ca\CLI.Aspect.DPPE.Fuel.Shared.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\0e5e46fe8262765fc01f531393cea826\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000051200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\1b793612380f60d287e5c5f86122e89c\CLI.Caste.A4.Runtime.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\0f047cf9e2239851a811b935d7b109d0\CLI.Caste.A4.Shared.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\1ac15d58e991bba3119174c4cacbd430\CLI.Caste.A4.Dashboard.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\756be47d421c14309af0c8d9dddc6a29\CLI.Caste.Fuel.Shared.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000311296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\237f6779fe63e0a2c1d282dcaae5138d\CLI.Caste.Fuel.Runtime.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\0b593db358de3dccf526e300e41ec80b\CLI.Caste.Fuel.Dashboard.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\a5e2e36025e5e42aeff913bbda1aa6d6\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 001555456 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\90403123119c49c266bf1258a7b5a427\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000587776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\c3db145be9238bed851ff93311846c1e\CLI.Caste.Graphics.Dashboard.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\67666baee565c9b0f6a67df38462c2f3\CLI.Caste.HydraVision.Runtime.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\be62787dd2bab6bbe758bb473b72c8e4\CLI.Caste.HydraVision.Shared.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\afe6578340859949a1f8c04b3ec1a950\CLI.Caste.HydraVision.Dashboard.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\0552c276520bab46992e3d931c858708\CLI.Caste.Platform.Shared.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000044032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\753c0337e60bbef84ae2e4d415b423f7\CLI.Caste.Platform.Runtime.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\2b493f8b9b0a19c02d3185fd55a06479\CLI.Caste.Platform.Dashboard.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000350720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combinee84f0351#\7d89daa31998cd9ca4c20cfe7ae829c7\CLI.Combined.Fusion.Aspects.Runtime.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\0619ae2c3e8cc53377fbecef51f243ed\CLI.Component.Runtime.Shared.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000901632 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone26c9c557#\c518078f056b4bfe362824a0c2eb6a1d\CLI.Component.Systemtray.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000173568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\a5d4f7bc274570e961d31ef54ab7a5b6\CLI.Component.Dashboard.ProfileManager2.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\780c8bd8339ff2def14b0207cd808a3b\CLI.Component.Runtime.Shared.Private.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\c2b5ee81f835f248ac92e192a11b37f2\CLI.Component.Runtime.Extension.EEU.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 001609728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\af1109fbe4d7fc6179633ab8d88da5e7\CLI.Component.Dashboard.Shared.Private.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000018432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\6b3ed4c60de00ed811251fa44d4ba20d\CLI.Component.Client.Shared.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\007e57a69242e84ff334564a788165c0\CLI.Component.Dashboard.Shared.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000495104 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Component.Eeu\bd601c8af027275ad0aa1623c49e12bf\CLI.Component.Eeu.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000089600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\a0a2b615cdc294c7d3af29f42d6f3369\CLI.Foundation.Private.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000061440 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\4e50f43f222133081bca51d4ec374497\CLI.Foundation.XManifest.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000091136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\bcdee5c6fe25466f8c29767f6b2b1294\CLI.Foundation.CoreAudioAPI.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 001079808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\7ae69decea6a4aa96956ffd2f2a3c7c7\CLI.Foundation.Client.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000301568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\0d8463856ff1e00efd68259f58d6728c\CLI.Foundation.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\5d12a5ba7cfcf92e2bdedb9c65064c74\DEM.Foundation.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000115200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\5658790b6d8ee4f840d1ca57866316ce\DEM.Graphics.I0601.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\dfa1099aca23fc47444238db01432d1e\DEM.Graphics.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\7224c4f48b25b446a37e68bf70496628\Fuel.Foundation.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000296960 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\a78770c1aa6c2dab44748ff83862ffd8\LOG.Foundation.Implementation.ni.dll
2021-01-20 13:54 - 2021-01-20 13:54 - 000150016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\bb140c3f749aad3e194c37b732486584\LOG.Foundation.Private.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\941a6700366b94ec64b62cc506f95d74\LOG.Foundation.Implementation.Private.ni.dll
2021-01-20 13:54 - 2021-01-20 13:54 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\8bffc8512084e42bddfb1d3d77870062\LOG.Foundation.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\c718fcd8c25b703ccad4cb802f9c7dca\MOM.Foundation.ni.dll
2021-01-20 14:04 - 2021-01-20 14:04 - 000402944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\942416935b21cacc907f56d100506704\MOM.Implementation.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\ae9a13269043d55e4140d5868270661d\NEWAEM.Foundation.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000897024 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\79c00831b1c30bf18fb586d85535361d\ADL.Foundation.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 000256000 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\11725f354a5e8c6ce052906bd4a8e5e8\APM.Server.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000783872 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.79734f7a#\afe147c6208bc23f2a925029af109475\CLI.Aspect.PowerXpress.Graphics.Runtime.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000298496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9b707b25#\48dd362b26d28098668419409039f27f\CLI.Aspect.DeviceProperty.Graphics.Runtime.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 001654272 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.aa59351a#\8e6fcb4268daba9a2e19b19cbce0c2b1\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000357888 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b3da5a8f#\37acbd45f67c3cc7e678f66a363091f5\CLI.Aspect.PowerXpress.Graphics.Shared.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000595456 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4846ba2#\56881ab2c6fcc6c32f4e6ff58191142a\CLI.Aspect.PowerXpress.Graphics.Dashboard.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 006336512 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e6d9f3a8#\a63595359d896809b63d24e20ca638c0\CLI.Aspect.DeviceDFP.Graphics.Dashboard.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 008027648 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\e186c12376d44c5b6a15c283351ab6dd\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 001159680 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine7332395e#\2cd594d8b45666b2a078a08e345cc6f6\CLI.Combined.Graphics.Aspects2.Runtime.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000136704 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\fbe1091865f44020e04b0a581e5b965c\CLI.Component.Client.Shared.Private.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000234496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\e6ebbe99ad169505a7b1614029784799\CLI.Component.Runtime.ni.dll
2021-01-20 14:01 - 2021-01-20 14:01 - 000929280 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\9f85e53cf5df5a8956d5924c1641875a\CLI.Component.Dashboard.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000011264 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0702\b412bf450c79457c9c6e02719fef3a99\DEM.Graphics.I0702.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0706\2f82716422db76c02d80a09cadd0e2c9\DEM.Graphics.I0706.ni.dll
2021-01-20 13:58 - 2021-01-20 13:58 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\5252f14189e3677767b454164fb541cf\DEM.Graphics.I0709.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0710\8eeed39b8e461125c3b64ec004190ba5\DEM.Graphics.I0710.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000012288 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\5e93aedbce33eb9d7f84de52de38623c\DEM.Graphics.I0712.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000018432 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\aa9984e9a16523bb1fd71b855c687aa6\DEM.Graphics.I0804.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0805\1ca7fd2b1057ca4e12a1cd836e848208\DEM.Graphics.I0805.ni.dll
2021-01-20 14:02 - 2021-01-20 14:02 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0812\9b33826512e547a457c6a3825a9680fb\DEM.Graphics.I0812.ni.dll
2021-01-20 13:59 - 2021-01-20 13:59 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0901\2fe32ec8719bc5e139d20434f117fd6f\DEM.Graphics.I0901.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0906\58c6e0a82fa1629f5583fd56b7323d3c\DEM.Graphics.I0906.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0912\0dd9b8509fc9665be9dca03ff6d2cccd\DEM.Graphics.I0912.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 000035840 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\4fe945ea0f126bb4dccba474e3ee74dd\DEM.Graphics.I1010.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 001139200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\850f9ba397907bdd65f8b39b38d30802\Localization.Foundation.Private.ni.dll
2021-01-20 14:04 - 2021-01-20 14:04 - 000244736 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\df9086090f8f6de10c94d705341b97b2\ResourceManagement.Foundation.Implementation.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\efe86db00af2e0b19c8260888e88ed76\ResourceManagement.Foundation.Private.ni.dll
2021-01-20 13:57 - 2021-01-20 13:57 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\a802237af3bb77d74574a5a45b0f1093\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2021-01-20 13:55 - 2021-01-20 13:55 - 002845696 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\4a7c17df5f87f28d7f3bf2f2aee0ca6c\CLI.Caste.Graphics.Shared.ni.dll
2021-01-20 14:00 - 2021-01-20 14:00 - 003268096 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\38fb846f3a344f93b10dfd7394da66e1\CLI.Caste.Graphics.Runtime.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 000335360 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\4f0fd874313da401477c46c3cec85dc9\Microsoft.WindowsAPICodePack.ni.dll
2021-01-20 13:56 - 2021-01-20 13:56 - 002546688 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\afcccd3abf9b676c4caf03c205a9fc45\Microsoft.WindowsAPICodePack.Shell.ni.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2021-02-05] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2021-02-05] (McAfee, LLC -> McAfee, LLC)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2021-02-06 14:38 - 000030145 _____ C:\WINDOWS\system32\drivers\etc\hosts
0.0.0.0 0x1f4b0.com
0.0.0.0 1q2w3.fun
0.0.0.0 1q2w3.life
0.0.0.0 1q2w3.website
0.0.0.0 2giga.dowload
0.0.0.0 2giga.link
0.0.0.0 8jd2lfsq.me
0.0.0.0 aalbbh84.info
0.0.0.0 acbp0020171456.page.tl
0.0.0.0 adless.io
0.0.0.0 ad-miner.com
0.0.0.0 adplusplus.fr
0.0.0.0 adrenali.gq
0.0.0.0 afflow.18-plus.net
0.0.0.0 afminer.com
0.0.0.0 ajcryptominer.com
0.0.0.0 ajplugins.com
0.0.0.0 akvideo.stream
0.0.0.0 allfontshere.press
0.0.0.0 altavista.ovh
0.0.0.0 amhixwqagiz.ru
0.0.0.0 analytics.blue
0.0.0.0 andlache.com
0.0.0.0 anime.reactor.cc
0.0.0.0 a-o.ninja
0.0.0.0 apdrive.win
0.0.0.0 api.inwemo.com
0.0.0.0 appelamule.com
0.0.0.0 arizona-miner.tk
0.0.0.0 aservices.party

There are 1149 more lines.


==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-735461652-1845876884-2699252238-1004\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "Opera Browser Assistant"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{46091B4B-0CE2-4CA3-8AEB-5B5002243152}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BE0C7406-FE7A-40D1-9650-A6D10BD94EF8}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\WNt600x64\RpcSandraSrv.exe (SiSoftware SPC -> SiSoftware) [File not signed]
FirewallRules: [{C3E6E343-728F-47B0-B730-093100290CD0}] => (Allow) C:\Program Files (x86)\Opera\73.0.3856.329\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{A2D32C10-FF45-4FF5-9E47-DB0DB4761A6E}] => (Allow) C:\Users\kmacl\AppData\Local\Temp\7zS2AED\hppiw.exe => No File
FirewallRules: [{EC71714F-DBE8-4CE3-9D7F-CF2EB0319136}] => (Allow) C:\Users\kmacl\AppData\Local\Temp\7zS2AED\hppiw.exe => No File
FirewallRules: [{F535A79A-99C4-455A-B2F8-081752850A1F}] => (Allow) C:\Windows.old\Users\Karel\Documents\DriverPack\bin\tools\aria2c.exe => No File
FirewallRules: [{D6CFD1EF-E317-4054-8ED8-38FEA5BA7F2A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1D4FA7BB-4200-427F-BA02-8D7D4295B96C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7A981CF3-70D8-4DE6-8C6D-4315B672DF13}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{75A4810D-A224-4926-8088-8B5E99697174}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2DA554AD-3D73-4F07-9960-5A90E12431D2}] => (Allow) C:\Program Files\VueScan\vuescan.exe (Hamrick Software -> Hamrick Software) [File not signed]
FirewallRules: [{7EFF039D-4D4B-4D37-9D3A-C653109A77DB}] => (Allow) C:\Program Files\VueScan\vuescan.exe (Hamrick Software -> Hamrick Software) [File not signed]
FirewallRules: [UDP Query User{669FF2F3-1B99-4182-B45B-9500CDA38152}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net)
FirewallRules: [TCP Query User{9C4619DE-F151-4313-AC3A-65A92D67FC81}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net)
FirewallRules: [{517500D0-855E-4EC8-9702-17989C086F17}] => (Allow) C:\Program Files (x86)\UnHackMe\RegRunInfo.exe (Greatis Software LLC -> Greatis Software)
FirewallRules: [{6764BA3E-C9CC-40C7-B26A-B589DD18704B}] => (Allow) C:\Program Files (x86)\UnHackMe\wu.exe (Greatis Software LLC -> Greais Software)
FirewallRules: [{0139408E-55C3-4870-8CE7-AF3407198BDA}] => (Allow) C:\Program Files (x86)\UnHackMe\RegRunInfo.exe (Greatis Software LLC -> Greatis Software)
FirewallRules: [{A1DDB78E-28A4-4E3C-B065-B5F250D1A906}] => (Allow) C:\Program Files (x86)\UnHackMe\wu.exe (Greatis Software LLC -> Greais Software)
FirewallRules: [UDP Query User{62A9CCB4-FA2A-4AE7-B7CE-2A466E268F51}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{CA65D60F-55D0-4F76-8C03-1686A3D76C14}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{C100BD98-F2E3-473F-8F8A-DFD12E55AC0C}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\RpcAgentSrv.exe (SiSoftware SPC -> SiSoftware) [File not signed]
FirewallRules: [{7BC93BBD-159B-4212-A552-08E5F5F8270E}] => (Allow) C:\Users\kmacl\AppData\Local\Temp\7zS67E9\hppiw.exe => No File
FirewallRules: [{8F7B00E9-67CE-4E31-A495-AC5962FEC5EC}] => (Allow) C:\Users\kmacl\AppData\Local\Temp\7zS67E9\hppiw.exe => No File
FirewallRules: [{9187CF69-6824-487d-A9F0-AFF5C2C29BA8}}] => (Allow) C:\Program Files (x86)\UnHackMe\regruninfo.exe (Greatis Software LLC -> Greatis Software)
FirewallRules: [{85B34758-97A3-4a63-832A-9825D8777934}}] => (Allow) C:\Program Files (x86)\UnHackMe\regruninfo.exe (Greatis Software LLC -> Greatis Software)
FirewallRules: [{9187CF69-6824-487d-A9F0-AFF5C2C29BA9}}] => (Allow) C:\Program Files (x86)\UnHackMe\wu.exe (Greatis Software LLC -> Greais Software)
FirewallRules: [{85B34758-97A3-4a63-832A-9825D8777935}}] => (Allow) C:\Program Files (x86)\UnHackMe\wu.exe (Greatis Software LLC -> Greais Software)
FirewallRules: [{AB32843A-3AEB-4619-83C1-E3E77BBBBAFA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3AB0D7FA-8ADD-4335-9C61-187FABF5D00D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{15EC9E65-C65B-4575-9E60-122BACB9D885}] => (Allow) C:\Program Files (x86)\Opera\73.0.3856.344\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{F119EB74-8E22-434E-93DF-A2F2A93962E5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2FDB16D1-BA7A-4101-85F5-B7EC7A1BC7B6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F39451EF-B8F0-4969-9996-782631F8F4F2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{75920D35-0710-42EA-99C2-95882C50BAF3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B489E97D-4D47-4036-82C8-42024461E840}] => (Allow) C:\Program Files\HP\HP Ink Tank Wireless 410 series\bin\DigitalWizards.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{519D41DE-2ACD-42AB-AC18-44CD68B24AD9}] => (Allow) C:\Program Files\HP\HP Ink Tank Wireless 410 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{82289E75-24D4-4657-ACA6-5641BFF0AA8C}] => (Allow) LPort=5357
FirewallRules: [{8486F62B-0363-467B-A747-26C70A5E1548}] => (Allow) C:\Program Files\HP\HP Ink Tank Wireless 410 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{9D1EF01F-51B5-41F2-A072-F6D7FF59B4DD}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{4ED16B5C-2657-43C2-BA52-3E63F73CA7A0}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{029F4A5E-1C43-4D27-BF00-30FFE99D4761}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{C9918124-D873-4EF7-9375-7F60D83065A9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A3F9D65A-F887-428D-99D7-EA09465A0112}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E9BDBD34-8507-418E-9FF7-767AE080BEE5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DDE93344-E4FD-4F8E-9D8E-DF3A37AFF85C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2551F951-479A-4C71-96A3-09F78B058A84}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B05497F8-D43F-4DE6-90E3-A49748B4FD1E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9A8A0BB6-A5B7-4AD8-9AEC-72B89775C021}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A8F66FBC-D968-488B-A320-AFE0D702BE87}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.152.687.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

==================== Restore Points =========================

26-01-2021 10:50:46 Naplánovaný kontrolní bod
04-02-2021 09:51:51 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (02/05/2021 08:05:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program OUTLOOK.EXE verze 16.0.13628.20274 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: a0c

Čas spuštění: 01d6fbef80a821cc

Čas ukončení: 60

Cesta k aplikaci: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

ID hlášení: 6dc36e69-3065-4ca0-a17d-c4b7094c61ca

Úplný název balíčku s chybou: 

ID aplikace relativní podle balíčku s chybou: 

Typ zablokování: Cross-thread

Error: (02/05/2021 07:11:25 PM) (Source: W3SVC-WP) (EventID: 2307) (User: )
Description: Pracovní proces pro fond aplikací DefaultAppPool zjistil chybu Nelze načíst konfigurační soubor.
 při pokusu o čtení konfiguračních dat ze souboru \\?\<EMPTY> (číslo řádku: 0). Datové pole obsahuje kód chyby.

Error: (02/05/2021 07:11:24 PM) (Source: W3SVC-WP) (EventID: 2307) (User: )
Description: Pracovní proces pro fond aplikací DefaultAppPool zjistil chybu Nelze načíst konfigurační soubor.
 při pokusu o čtení konfiguračních dat ze souboru \\?\<EMPTY> (číslo řádku: 0). Datové pole obsahuje kód chyby.

Error: (02/05/2021 07:11:24 PM) (Source: W3SVC-WP) (EventID: 2307) (User: )
Description: Pracovní proces pro fond aplikací DefaultAppPool zjistil chybu Nelze načíst konfigurační soubor.
 při pokusu o čtení konfiguračních dat ze souboru \\?\<EMPTY> (číslo řádku: 0). Datové pole obsahuje kód chyby.

Error: (02/05/2021 07:11:23 PM) (Source: W3SVC-WP) (EventID: 2307) (User: )
Description: Pracovní proces pro fond aplikací DefaultAppPool zjistil chybu Nelze načíst konfigurační soubor.
 při pokusu o čtení konfiguračních dat ze souboru \\?\<EMPTY> (číslo řádku: 0). Datové pole obsahuje kód chyby.

Error: (02/05/2021 07:11:22 PM) (Source: W3SVC-WP) (EventID: 2307) (User: )
Description: Pracovní proces pro fond aplikací DefaultAppPool zjistil chybu Nelze načíst konfigurační soubor.
 při pokusu o čtení konfiguračních dat ze souboru \\?\<EMPTY> (číslo řádku: 0). Datové pole obsahuje kód chyby.

Error: (02/04/2021 09:27:29 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Aktualizaci Update for Microsoft Office Outlook 2007 (KB2596598) 32-Bit Edition produktu Microsoft Office Professional 2007 nebylo možné nainstalovat. Kód chyby: 1603. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (02/04/2021 09:27:29 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT AUTHORITY)
Description: Produkt: Microsoft Office Professional 2007 – Chyba 2902Došlo k vnitřní chybě.  (ixfAssemblyCopy                  ) S žádostí o pomoc se obraťte na službu technické podpory Microsoft Product Support Services (PSS). Informace o kontaktování podpory najdete zde:PSS10R.CHM.


System errors:
=============
Error: (02/05/2021 07:11:25 PM) (Source: WAS) (EventID: 5002) (User: )
Description: Fond aplikací DefaultAppPool bude automaticky zakázán z důvodu řady chyb v procesech obsluhujících daný fond aplikací.

Error: (02/05/2021 07:11:25 PM) (Source: WAS) (EventID: 5203) (User: )
Description: Proces obsluhující fond aplikací DefaultAppPool ohlásil selhání během čtení konfigurace při spuštění. ID procesu: 10284. Zkontrolujte v protokolu událostí aplikací další zprávy událostí zaznamenané pracovním procesem pro konkrétní chybu. Datové pole obsahuje číslo chyby.

Error: (02/05/2021 07:11:25 PM) (Source: WAS) (EventID: 5189) (User: )
Description: Službě WAS (WINDOWS PROCESS ACTIVATION SERVICE) se nepodařilo vytvořit konfigurační soubor fondu aplikací pro fond aplikací DefaultAppPool. Typ chyby: 5 Chcete-li tento problém vyřešit, zkontrolujte, zda je soubor applicationhost.config správný a znovu potvrďte naposledy provedené změny konfigurace. Datové pole obsahuje číslo chyby.

Error: (02/05/2021 07:11:25 PM) (Source: WAS) (EventID: 5189) (User: )
Description: Službě WAS (WINDOWS PROCESS ACTIVATION SERVICE) se nepodařilo vytvořit konfigurační soubor fondu aplikací pro fond aplikací DefaultAppPool. Typ chyby: 5 Chcete-li tento problém vyřešit, zkontrolujte, zda je soubor applicationhost.config správný a znovu potvrďte naposledy provedené změny konfigurace. Datové pole obsahuje číslo chyby.

Error: (02/05/2021 07:11:24 PM) (Source: WAS) (EventID: 5203) (User: )
Description: Proces obsluhující fond aplikací DefaultAppPool ohlásil selhání během čtení konfigurace při spuštění. ID procesu: 14096. Zkontrolujte v protokolu událostí aplikací další zprávy událostí zaznamenané pracovním procesem pro konkrétní chybu. Datové pole obsahuje číslo chyby.

Error: (02/05/2021 07:11:24 PM) (Source: WAS) (EventID: 5189) (User: )
Description: Službě WAS (WINDOWS PROCESS ACTIVATION SERVICE) se nepodařilo vytvořit konfigurační soubor fondu aplikací pro fond aplikací DefaultAppPool. Typ chyby: 5 Chcete-li tento problém vyřešit, zkontrolujte, zda je soubor applicationhost.config správný a znovu potvrďte naposledy provedené změny konfigurace. Datové pole obsahuje číslo chyby.

Error: (02/05/2021 07:11:24 PM) (Source: WAS) (EventID: 5189) (User: )
Description: Službě WAS (WINDOWS PROCESS ACTIVATION SERVICE) se nepodařilo vytvořit konfigurační soubor fondu aplikací pro fond aplikací DefaultAppPool. Typ chyby: 5 Chcete-li tento problém vyřešit, zkontrolujte, zda je soubor applicationhost.config správný a znovu potvrďte naposledy provedené změny konfigurace. Datové pole obsahuje číslo chyby.

Error: (02/05/2021 07:11:24 PM) (Source: WAS) (EventID: 5203) (User: )
Description: Proces obsluhující fond aplikací DefaultAppPool ohlásil selhání během čtení konfigurace při spuštění. ID procesu: 10400. Zkontrolujte v protokolu událostí aplikací další zprávy událostí zaznamenané pracovním procesem pro konkrétní chybu. Datové pole obsahuje číslo chyby.


CodeIntegrity:
===================================

Date: 2021-02-06 14:19:56.8080000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-02-06 14:19:56.4070000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-02-06 10:16:57.1600000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-02-06 10:16:57.1310000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-02-06 10:16:57.0940000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-02-06 10:16:57.0650000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-02-06 10:16:57.0120000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-02-06 10:16:52.3180000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

==================== Memory info =========================== 

BIOS: Insyde Corp. V2.10 11/02/2012
Motherboard: Acer Havok
Processor: AMD A8-4555M APU with Radeon(tm) HD Graphics 
Percentage of memory in use: 67%
Total physical RAM: 5578.27 MB
Available physical RAM: 1826.95 MB
Total Virtual: 9674.27 MB
Available Virtual: 5180.24 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:913.23 GB) (Free:701.25 GB) NTFS
Drive d: (SAMSUNG USB) (Removable) (Total:59.73 GB) (Free:1.23 GB) FAT32
Drive e: (One Touch) (Fixed) (Total:4657.24 GB) (Free:4324.47 GB) exFAT

\\?\Volume{714a14d8-63df-4da2-a8e9-8634c6cd86df}\ (Recovery) (Fixed) (Total:0.39 GB) (Free:0.13 GB) NTFS
\\?\Volume{33c9a95d-3018-49d4-81d2-9e9e0eb46e86}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{a6d0b39b-852b-4a67-b40b-31ad0dbc4170}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS
\\?\Volume{96cf77a9-b0bb-472f-ba52-568cff8c8df2}\ () (Fixed) (Total:0.44 GB) (Free:0.09 GB) NTFS
\\?\Volume{4b34d1d2-482a-4b2b-b611-8ed789295200}\ (Push Button Reset) (Fixed) (Total:16 GB) (Free:1.99 GB) NTFS
\\?\Volume{403f6b20-2c4d-4c37-8b88-6e83803f8927}\ (ESP) (Fixed) (Total:0.29 GB) (Free:0.24 GB) FAT32
\\?\Volume{a6dbf2fc-e9e0-4fd4-a45f-0c353a0cb2f5}\ (EFI) (Fixed) (Total:0.19 GB) (Free:0.19 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: E7853243)

Partition: GPT.

==========================================================
Disk: 1 (Size: 59.8 GB) (Disk ID: 4EAE3FAE)
Partition 1: (Active) - (Size=59.7 GB) - (Type=0C)

==========================================================
Disk: 2 (Size: 4657.5 GB) (Disk ID: A9F3FA64)

Partition: GPT.

==================== End of Addition.txt =======================