Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2021 01
Ran by Jan (28-07-2021 15:35:31)
Running from I:\Download
Windows 10 Home Version 20H2 19042.1110 (X64) (2021-05-12 00:27:47)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-108142814-3075653775-322374491-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-108142814-3075653775-322374491-503 - Limited - Disabled)
Guest (S-1-5-21-108142814-3075653775-322374491-501 - Limited - Disabled)
Jan (S-1-5-21-108142814-3075653775-322374491-1001 - Administrator - Enabled) => C:\Users\Jan
WDAGUtilityAccount (S-1-5-21-108142814-3075653775-322374491-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Enabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS (HKLM-x32\...\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 4.21.0414.1 - GIGABYTE) Hidden
@BIOS (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 4.21.0414.1 - GIGABYTE)
µTorrent (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\uTorrent) (Version: 3.5.5.46038 - BitTorrent Inc.)
Ableton Live 11 Suite (HKLM\...\{5719DDAE-2EEE-49EF-B0F4-1FA7EA511B0F}) (Version: 11.0.0.0 - Ableton) Hidden
Ableton Live 11 Suite (HKLM-x32\...\{3725d57d-1572-47e0-8de5-73dee53be407}) (Version: 11.0.0.0 - Ableton)
Ableton Live 11 Suite (HKLM-x32\...\{9e5dd62f-66cf-419f-b257-10a0ee798399}) (Version: 11.0.0.0 - Ableton)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_10_2) (Version: 10.2 - Adobe Inc.)
Adobe Master Collection CC 2018 (HKLM-x32\...\{BF46E397-5E5C-31BC-E1AC-136BD69B9FE5}) (Version: 11.0 - Adobe Systems Incorporated)
Affinity Designer (HKLM\...\{97E38C19-DA5D-448B-9840-38646582331F}) (Version: 1.9.2.1035 - Serif (Europe) Ltd)
Affinity Photo (HKLM\...\{2E709DB7-017E-49F4-99DA-52D77837C722}) (Version: 1.9.2.1035 - Serif (Europe) Ltd)
Affinity Publisher (HKLM\...\{A19AD199-53D0-44E2-9AF4-94CDCE8A2DCB}) (Version: 1.9.2.1035 - Serif (Europe) Ltd)
Allusion 1.0.0-rc5.3 (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\9b7b1c10-21d7-57c9-894b-24a0e038ea3d) (Version: 1.0.0-rc5.3 - Allusion-App)
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.09.28.509 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{ad7f5f31-0d6f-40f2-83b1-5556e0d0f9b1}) (Version: 2.09.28.509 - Advanced Micro Devices, Inc.) Hidden
AORUS ENGINE (HKLM-x32\...\AORUS ENGINE_is1) (Version: 2.0.1.0 - GIGABYTE Technology Co.,Inc.)
APP Center (HKLM-x32\...\{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.21.0426.1 - GIGABYTE) Hidden
APP Center (HKLM-x32\...\InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.21.0426.1 - GIGABYTE)
Arturia USB MIDI Driver v4.66.0 (HKLM-x32\...\Software_Arturia_arturiausbmidi_Setup) (Version: 4.66.0 - Arturia)
Audacity 3.0.2 (HKLM-x32\...\Audacity_is1) (Version: 3.0.2 - Audacity Team)
AVG AntiVirus FREE (HKLM-x32\...\AVG Antivirus) (Version: 21.5.3185 - AVG Technologies)
Backup and Sync from Google (HKLM\...\{A0397FA8-34ED-4A41-A8C9-30EE0B89C464}) (Version: 3.56.3802.7766 - Google, Inc.)
Backup Thunderbird (HKLM-x32\...\{FA212C5D-FE18-4A8B-9A45-B2E62A20D4CA}_is1) (Version:  - backupthunderbird.com)
BEHRINGER UMC Series USB Audio Driver v5.0.0 (HKLM-x32\...\Software_BEHRINGER_umc_audio_Setup) (Version: 5.0.0 - BEHRINGER)
Blackmagic RAW Common Components (HKLM\...\{E81CA048-974E-45FB-8262-44295193C43C}) (Version: 2.1 - Blackmagic Design)
Blender (HKLM\...\{D6E38255-FB12-4724-A6FF-075B43272C66}) (Version: 2.92.0 - Blender Foundation)
Brusherator version 1.4.1 (HKLM-x32\...\{8d2e232d-c892-4d0c-a3de-042dab9b6fc7}_is1) (Version: 1.4.1 - Sergey Kritskiy)
CCleaner (HKLM\...\CCleaner) (Version: 5.82 - Piriform)
Cloud Seed version 1.0.1 (HKLM\...\{E0EC7045-27E4-489C-AA0D-25727920E96F}_is1) (Version: 1.0.1 - Valdemar Erlingsson)
CrystalDiskInfo 8.12.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.12.2 - Crystal Dew World)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.14.0.1747 - Disc Soft Ltd)
Dashboard (HKLM-x32\...\Western Digital SSD Dashboard) (Version: 3.2.2.9 - Western Digital Corporation)
DaVinci Resolve (HKLM\...\{7CBBBF93-A827-4138-BAD5-E60834D73B1E}) (Version: 17.2.00011 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{0489EBBD-5C2B-447E-9FF8-E08FA3D117F6}) (Version: 1.6.0.0 - Blackmagic Design)
Decent Sampler version 1.0.12 (HKLM\...\Decent Sampler_is1) (Version: 1.0.12 - )
Documentation Manager (HKLM\...\{0203C24C-452D-4344-871F-DE3C7B49C328}) (Version: 22.40.0.7 - Intel Corporation) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 127.4.4265 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.485.1 - Dropbox, Inc.) Hidden
EasyTune (HKLM-x32\...\{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.20.1030.1 - GIGABYTE) Hidden
EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.20.1030.1 - GIGABYTE)
ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_DRAM_RGB_AIO (HKLM\...\{1745D314-9077-46C9-8562-1C62BAE189B7}) (Version: 1.0.0.10 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{52d1d7de-19c3-4f83-97bb-f9435dc84c5b}) (Version: 1.0.0.10 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.8.4 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{0f607f07-7957-4887-9d5e-be8efe9595a9}) (Version: 1.0.8.4 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{bf256b46-8ff7-48be-ab7f-5661e9a0651f}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden
ENE_QSI_Loki_HAL (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden
ENE_QSI_Loki_HAL (HKLM-x32\...\{205ef3a8-937b-43cb-90fc-2f58f71408d8}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.3.1 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{33f042cf-0ae3-4241-b8c8-7f544533ea8e}) (Version: 1.0.3.1 - ENE TECHNOLOGY INC.) Hidden
ENE_X-JMI_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.5.1 - ENE Tech) Hidden
ENE_X-JMI_HAL (HKLM-x32\...\{50ec3a07-291b-463e-be86-487eb8cbb71c}) (Version: 1.0.5.1 - ENE Tech) Hidden
Epic Games Launcher (HKLM-x32\...\{A7BBC0A6-3DB0-41CC-BCED-DDFC5D4F3060}) (Version: 1.2.17.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{0B736177-814A-4ADE-81D1-66A0FDD55BB4}) (Version: 1.1.11.0 - Epic Games, Inc.)
Fast Boot (HKLM-x32\...\{FA8FB4F2-F524-48E1-A06C-45602FBF26CD}) (Version: 1.20.0420.1 - GIGABYTE) Hidden
Fast Boot (HKLM-x32\...\InstallShield_{FA8FB4F2-F524-48E1-A06C-45602FBF26CD}) (Version: 1.20.0420.1 - GIGABYTE)
FastStone Capture 9.4 (HKLM-x32\...\FastStone Capture) (Version: 9.4 - FastStone Soft)
FastStone Image Viewer 7.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 7.5 - FastStone Soft)
FastStone Photo Resizer 4.3 (HKLM-x32\...\FastStone Photo Resizer) (Version: 4.3 - FastStone Soft.)
FileZilla Client 3.54.1 (HKLM-x32\...\FileZilla Client) (Version: 3.54.1 - Tim Kosse)
FormatFactory 5.7.1.0 (HKLM-x32\...\FormatFactory) (Version: 5.7.1.0 - Free Time)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 10.1.4.37651 - Foxit Software Inc.)
Gaea (remove only) (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\Gaea) (Version:  - )
Game Boost (HKLM-x32\...\{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}) (Version: 1.00.0007 - Gigabyte) Hidden
Game Boost (HKLM-x32\...\InstallShield_{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}) (Version: 1.00.0007 - Gigabyte)
GigabyteFirmwareUpdateUtility (HKLM-x32\...\{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}) (Version: 1.20.0720.1 - GIGABYTE) Hidden
GigabyteFirmwareUpdateUtility (HKLM-x32\...\InstallShield_{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}) (Version: 1.20.0720.1 - GIGABYTE)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 92.0.4515.107 - Google LLC)
GService (HKLM-x32\...\{D9CB4282-7B2A-4840-AD1D-9DA72B973DD9}) (Version: 1.19.0624.1 - GIGABYTE)
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version:  - )
Chia Blockchain (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\chia-blockchain) (Version: 1.2.0 - Chia Network)
Chrome Remote Desktop Host (HKLM-x32\...\{DCB455E3-2BE8-477C-A006-AE83446EED46}) (Version: 92.0.4515.41 - Google LLC)
Inertia Sound Systems Granulizer 2 (HKLM\...\Granulizer 2_is1) (Version: 2.1.0 - Inertia Sound Systems)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Network Connections 25.6.0.4 (HKLM\...\PROSetDX) (Version: 25.6.0.4 - Intel)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000020-0220-1029-84C8-B8D95FA3C8C3}) (Version: 22.20.0.3 - Intel Corporation)
Intel® Software Installer (HKLM-x32\...\{cc2553fe-0c12-40bb-8d08-969eacd8c686}) (Version: 22.40.0.7 - Intel Corporation) Hidden
IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.2.0.1 - IObit)
kiloHearts Toolbox Ultimate Slate Digital bundle (HKLM\...\Toolbox Ultimate | Slate Digital_is1) (Version: 1.8.8 - kiloHearts & Team V.R)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LibreOffice 7.1.3.2 (HKLM\...\{76B2DBF3-5773-4463-9EEB-D4A099EB6265}) (Version: 7.1.3.2 - The Document Foundation)
Logitech Capture (HKLM\...\Capture) (Version: 2.06.12 - Logitech)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2021.7.91 - Logitech)
Malwarebytes version 4.4.3.125 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.4.3.125 - Malwarebytes)
MediaMonkey 5 (HKLM-x32\...\MediaMonkey 5_is1) (Version: 5 - Ventis Media Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 92.0.902.55 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (English) (HKLM-x32\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\OneDriveSetup.exe) (Version: 21.129.0627.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E5A95BC5-81DF-4F0C-B910-B59DD012F037}) (Version: 2.81.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3994d355-238a-4612-af93-26d13deddef1}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29914 (HKLM-x32\...\{43d1ce82-6f55-4860-a938-20e5deb28b98}) (Version: 14.28.29914.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29913 (HKLM-x32\...\{03d1453c-7d5c-479c-afea-8482f406e036}) (Version: 14.28.29913.0 - Microsoft Corporation)
MIDI Control Center 1.13.1 (HKLM\...\MIDI Control Center_is1) (Version: 1.13.1 - Arturia)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 78.10.2 - Mozilla)
Mozilla Thunderbird 78.12.0 (x64 cs) (HKLM\...\Mozilla Thunderbird 78.12.0 (x64 cs)) (Version: 78.12.0 - Mozilla)
MyMonero 1.1.21 (HKLM\...\8b526942-c25b-5a90-b515-e6b3530b2c2b) (Version: 1.1.21 - MyMonero)
nexusfont (ver 2.7.0.1912) (HKLM-x32\...\{EFEDD205-43FE-4208-B682-0937E803E19E}_is1) (Version:  - xiles)
Novation Components (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\Components) (Version: 1.24.2 - Focusrite Audio Engineering Ltd.)
NVIDIA Canvas 1.000.000.215 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Canvas) (Version: 1.000.000.215 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 461.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 461.72 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NZXT CAM 4.23.0 (HKLM\...\ac0666ae-ee66-5310-ac01-9d6348133b2d) (Version: 4.23.0 - NZXT, Inc.)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.0.0 - OBS Project)
Odin2 VST3 Synthesizer version 2.2.0 (HKLM\...\Odin2 VST3 Synthesizer_is1) (Version: 2.2.0 - )
ON_OFF Charge 2 B19.1119.1 (HKLM-x32\...\{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.19.1119.1 - GIGABYTE) Hidden
ON_OFF Charge 2 B19.1119.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.19.1119.1 - GIGABYTE)
Overload (HKLM-x32\...\1309632191_is1) (Version: 1.0.1882t - GOG.com)
Overload Anniversary Level Pack (HKLM-x32\...\2021740278_is1) (Version: 1.0.1882t - GOG.com)
Overload Community Level Pack (HKLM-x32\...\1743567631_is1) (Version: 1.0.1882t - GOG.com)
Paintstorm Studio (HKLM\...\{CEECEB3A-7F06-BDC5-A1DB-CAB49C4FB362}) (Version: 2.47 - Paintstorm Studio developers team)
Patriot Viper M2 SSD RGB (HKLM\...\{0886A906-0625-4A43-930D-AA92F6665AF4}) (Version: 1.00.04 - Patriot Memory) Hidden
Patriot Viper M2 SSD RGB (HKLM-x32\...\{ebb7013c-0b03-497c-bed1-1e48e806a593}) (Version: 1.00.04 - Patriot Memory)
PhotoPad Image Editor (HKLM-x32\...\PhotoPad) (Version: 5.45 - NCH Software)
Project Reality: BF2 (HKLM\...\Project Reality: BF2 (pr)_is1) (Version: v1.6 - Project Reality)
PureRef (HKLM-x32\...\PureRef) (Version: 1.11.1 - Idyllic Pixel)
Pushbullet version 338 (HKLM-x32\...\{7578F204-49E7-4830-B051-14C23F408BFE}_is1) (Version: 338 - Pushbullet Inc)
QNAP Qsync Client (HKLM-x32\...\Qsync) (Version: 5.0.1.0319 - QNAP Systems, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.4 beta r3452 - Rainmeter)
Resonic Player Beta (HKLM-x32\...\{E92483C7-34E3-49B5-BE12-4CC923A018E6}) (Version: 0.9.3.1806 - Liqube Audio)
RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.21.0420.1 - GIGABYTE)
SageThumbs 2.0.0.23 (HKLM\...\SageThumbs) (Version: 2.0.0.23 - Cherubic Software)
ScreenManager Pro for LCD (HKLM-x32\...\{DAB265AD-27B2-4651-B8D8-F4F3A8ECC705}) (Version: 2.9.0.1 - EIZO NANAO CORPORATION)
Signal 5.3.0 (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 5.3.0 - Open Whisper Systems)
SIV (HKLM-x32\...\{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.21.0426.1 - GIGABYTE) Hidden
SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.21.0426.1 - GIGABYTE)
SketchUp 2019 (HKLM\...\{0FB756F3-A84B-E5F8-387F-B9F186E6D497}) (Version: 19.0.685.20289 - Trimble, Inc.)
Smart Backup (x64) (HKLM-x32\...\{BC1FA5CF-A36F-4C61-9638-09D0B431B006}) (Version: 3.18.0911.1 - GIGABYTE)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{6C7F773B-F1B2-4E94-8FC6-884922E7BAD7}) (Version: 7.0.27.13 - Mad Catz)
Smart Technology Programming Software 7.0.45.2 (HKLM\...\{F08D23FD-46CA-4D51-A263-AE533CFAC286}) (Version: 7.0.45.2 - Mad Catz)
Spark (HKLM\...\Spark_is1) (Version: 2.4.0.106 - Arturia & Team V.R)
Spark Dubstep Essentials (HKLM-x32\...\Spark Dubstep Essentials_is1) (Version:  - Arturia)
Spark EDM Expansion (HKLM-x32\...\Spark EDM Expansion_is1) (Version:  - Arturia)
Spark Hip Hop Essentials (HKLM-x32\...\Spark Hip Hop Essentials_is1) (Version:  - Arturia)
Spark Hollywood Expansion (HKLM-x32\...\Spark Hollywood Expansion_is1) (Version:  - Arturia)
Spark Techno Essentials 1.0.0 (HKLM-x32\...\Spark Techno Essentials_is1) (Version: 1.0.0 - Arturia)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
SST Surge (HKLM\...\650E559A-2F44-44FE-861F-4108AE4BC30E_is1) (Version: 1.9.0 - Surge Synth Team)
Stardock ObjectDock (HKLM-x32\...\Stardock ObjectDock) (Version: 2.20 - Stardock Software, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stochas version 1.3.3. (HKLM-x32\...\{18D03379-6956-4365-BDA3-33D3CBBA991E}_is1) (Version: 1.3.3. - Open Source Software)
STORMWARE POHODA CZ Mini (HKLM-x32\...\{299446F2-9B0A-4898-8EF3-18030C867B27}) (Version: 12600.161 - STORMWARE)
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 9.5.12.0 - 2BrightSparks)
Telegram Desktop version 2.8.11 (HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.8.11 - Telegram FZ-LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.1.0 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.3.0 - Topaz Labs, LLC)
Topaz Impression 2 (HKLM-x32\...\Topaz Impression 2) (Version: 2.0.5 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.1.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.3.0 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.2.0 - Topaz Labs, LLC)
Valhalla DSP bundle 2020.11 (HKLM\...\ValhallaDSP bundle_is1) (Version: 2020.11 - Valhalla DSP, LLC & Team V.R)
VCV Rack (HKLM\...\VCV Rack) (Version: 1.1.6 - VCV)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.29-4 - Wacom Technology Corp.)
WinRAR 6.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.01.0 - win.rar GmbH)
XLN Audio Addictive Keys (HKLM\...\Addictive Keys_is1) (Version: 1.1.8 - XLN Audio)
XnViewMP 0.98.3 (HKLM\...\XnViewMP_is1) (Version: 0.98.3 - Gougelet Pierre-e)

Packages:
=========
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-07-21] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_129.1.234.0_x64__v10z8vjag6ke6 [2021-07-26] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-05-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-05-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.6151.0_x64__8wekyb3d8bbwe [2021-06-22] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-05-28] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.20.238.0_x64__dt26b99r8h8gj [2021-05-11] (Realtek Semiconductor Corp)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0 [2021-07-22] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{4323C321-97A6-43DE-B423-A8BAC7A54FF3} -> [QNAP Qsync Client: mousek-NAS (Qsync)] => C:\Users\Jan\Qsync [2021-07-14 11:51]
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{57D0E8CF-2552-4B76-A5C4-B1E9D413FD14} -> [Qsync] => C:\Users\Jan\AppData\Local\QNAP\Qsync\Quick Access [2021-07-14 09:25]
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{76BC2997-1E56-49DE-AB96-28EE563848F8}\InprocServer32 -> C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll (QNAP Systems, Inc. -> )
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{7736E60C-7C6C-4653-8D53-62C64289E21D} -> [QNAP Qsync Client:  (Zizola4)] => V:\_Projekty\Zizola4 [2021-07-04 22:53]
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{7A9D6039-26D8-4C24-88EE-7E35D50DF293}\InprocServer32 -> C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll (QNAP Systems, Inc. -> )
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{7AC7D11E-4A45-45F8-B5FC-BDA80EAB0FBB}\InprocServer32 -> C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll (QNAP Systems, Inc. -> )
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{AC456064-B5B6-437E-A541-1604DE3A59DA}\InprocServer32 -> C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll (QNAP Systems, Inc. -> )
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => I:\Cloud\Dropbox [2021-06-02 23:37]
CustomCLSID: HKU\S-1-5-21-108142814-3075653775-322374491-1001_Classes\CLSID\{F4F030E2-AB3D-4379-8257-CBB30D9587E7} -> [QNAP Qsync Client: mousek-NAS (Zizola4)] => V:\_Projekty\Zizola4 [2021-07-04 22:53]
ShellIconOverlayIdentifiers: [      QsyncEx_Icon1] -> {17affcaf-2e65-4b1b-98a1-a7b3b4d8ad36} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ShellIconOverlayIdentifiers: [      QsyncEx_Icon2] -> {435A6566-4C6F-46AC-84B8-18250A97C259} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ShellIconOverlayIdentifiers: [      QsyncEx_Icon3] -> {49CF975F-3937-4BD1-8858-5E177F293217} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ShellIconOverlayIdentifiers: [      QsyncEx_Icon4] -> {014004F0-B024-46A5-A184-7CCB86F6A1F9} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2021-06-18] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2021-06-18] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2021-06-18] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-06-27] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-06-27] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-06-27] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2021-06-18] (Google LLC -> Google)
ContextMenuHandlers1: [QsyncExt] -> {17affcaf-2e65-4b1b-98a1-a7b3b4d8ad36} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ContextMenuHandlers1: [SageThumbs] -> {4A34B3E3-F50E-4FF6-8979-7E4176466FF2} => C:\Program Files (x86)\SageThumbs\64\SageThumbs.dll [2017-05-09] (CherubicSoft) [File not signed]
ContextMenuHandlers1: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlockerExtension.dll [2020-10-10] (IObit Information Technology -> IObit Information Technology)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-05-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-06-27] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-05-15] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-05-21] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2021-06-18] (Google LLC -> Google)
ContextMenuHandlers4: [QsyncExt] -> {17affcaf-2e65-4b1b-98a1-a7b3b4d8ad36} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ContextMenuHandlers4: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlockerExtension.dll [2020-10-10] (IObit Information Technology -> IObit Information Technology)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_272b5c540127d6d2\nvshext.dll [2021-02-24] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [QsyncExt] -> {17affcaf-2e65-4b1b-98a1-a7b3b4d8ad36} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-06-27] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-05-21] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [QsyncExt] -> {17affcaf-2e65-4b1b-98a1-a7b3b4d8ad36} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll [2021-03-19] (QNAP Systems, Inc. -> )
ContextMenuHandlers6: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlockerExtension.dll [2020-10-10] (IObit Information Technology -> IObit Information Technology)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-04-07] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Chrome Remote Desktop.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=efmjfjelnicpmdcmfikempdhlmainjcb
ShortcutWithArgument: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Edom Onkyo Remote.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=jhcfeodahaajnfoifcmejindamjlbadp
ShortcutWithArgument: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\vGet Cast (DLNA Controller).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=ekdjofnchpbfmnfbedalmbdlhbabiapi

==================== Loaded Modules (Whitelisted) =============

2021-04-22 15:48 - 2021-04-22 15:48 - 001867264 _____ () [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\BDR_info.dll
2021-03-15 04:22 - 2021-03-15 04:22 - 000175616 _____ () [File not signed] C:\Program Files (x86)\QNAP\Qsync\IOTCAPIs.dll
2021-03-15 04:22 - 2021-03-15 04:22 - 000037376 _____ () [File not signed] C:\Program Files (x86)\QNAP\Qsync\json-c.dll
2021-03-15 04:22 - 2021-03-15 04:22 - 000036352 _____ () [File not signed] C:\Program Files (x86)\QNAP\Qsync\P2PTunnelAPIs.dll
2021-03-15 04:22 - 2021-03-15 04:22 - 000166400 _____ () [File not signed] C:\Program Files (x86)\QNAP\Qsync\RdiffDll.dll
2021-03-15 04:22 - 2021-03-15 04:22 - 000028160 _____ () [File not signed] C:\Program Files (x86)\QNAP\Qsync\RDTAPIs.dll
2021-07-09 11:17 - 2021-07-09 11:17 - 000182784 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\_cffi_backend.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000064512 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\aiohttp\_frozenlist.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000048128 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\aiohttp\_helpers.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000235520 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\aiohttp\_http_parser.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000041984 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\aiohttp\_http_writer.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000027648 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\aiohttp\_websocket.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000509952 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\blspy.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000710656 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\clvm_rs.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 003116544 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\cryptography\hazmat\bindings\_openssl.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000013824 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\cryptography\hazmat\bindings\_padding.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000176128 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\chiabip158.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000512000 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\chiapos.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000152576 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\chiavdf.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000020992 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\miniupnpc.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000044544 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\multidict\_multidict.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000013824 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\setproctitle.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000011776 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\websockets\speedups.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000134656 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\win32api.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000157184 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\win32file.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000260608 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\yaml\_yaml.cp39-win_amd64.pyd
2021-07-09 11:17 - 2021-07-09 11:17 - 000080384 _____ () [File not signed] C:\Users\Jan\AppData\Local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\yarl\_quoting_c.cp39-win_amd64.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000114176 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_ctypes.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000172544 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_elementtree.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 002255872 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_hashlib.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000032256 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_multiprocessing.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000046080 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_psutil_windows.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000047616 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_socket.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 002825216 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_ssl.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000026112 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\_yappi.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000080896 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\bz2.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000015872 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\common.time34.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000007680 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\hashobjs_ext.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000301568 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\PIL._imaging.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000168448 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\pyexpat.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 001084416 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\pysqlite2._sqlite.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000548864 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\pythoncom27.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 000137728 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\pywintypes27.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 000010752 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\select.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000020992 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\thumbnails_ext.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000689664 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\unicodedata.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000119808 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\usb_ext.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000128512 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32api.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000438784 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32com.shell.shell.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000011776 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32crypt.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000023040 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32event.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000149504 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32file.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000223232 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32gui.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000048128 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32inet.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000029696 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32pdh.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000027648 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32pipe.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000044032 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32process.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000020480 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32profile.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000136192 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32security.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000026624 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\win32ts.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000034304 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\windows.conditional.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000037888 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\windows.connectivity.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000071680 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\windows.device_monitor.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000103936 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\windows.volumes.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000019968 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\windows.winwrap.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 001325056 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wx._controls_.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 001489408 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wx._core_.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 001007104 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wx._gdi_.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000103424 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wx._html2.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 000916992 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wx._misc_.pyd
2021-07-28 14:40 - 2021-07-28 14:40 - 001039872 _____ () [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wx._windows_.pyd
2021-03-09 14:00 - 2021-03-09 14:00 - 000205824 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\yccV3.dll
2021-03-09 14:00 - 2021-03-09 14:00 - 000205824 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files (x86)\GIGABYTE\SIV\yccV3.dll
2017-05-09 09:40 - 2017-05-09 09:40 - 000402944 _____ (CherubicSoft) [File not signed] C:\Program Files (x86)\SageThumbs\32\SageThumbs.dll
2017-05-09 09:40 - 2017-05-09 09:40 - 000587776 _____ (CherubicSoft) [File not signed] C:\Program Files (x86)\SageThumbs\32\sqlite3.dll
2017-05-09 09:40 - 2017-05-09 09:40 - 000475648 _____ (CherubicSoft) [File not signed] C:\Program Files (x86)\SageThumbs\64\SageThumbs.dll
2017-05-09 09:40 - 2017-05-09 09:40 - 000716288 _____ (CherubicSoft) [File not signed] C:\Program Files (x86)\SageThumbs\64\sqlite3.dll
2009-06-25 09:27 - 2009-06-25 09:27 - 000541184 _____ (Marvell Semiconductor, Inc.) [File not signed] C:\Windows\System32\mvtcpmon.dll
2009-06-25 09:25 - 2009-06-25 09:25 - 000144896 _____ (OpenSLP) [File not signed] C:\Windows\System32\slp64.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 003043328 _____ (Python Software Foundation) [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\python27.dll
2021-03-19 05:06 - 2021-03-19 05:06 - 083277824 _____ (QNAP Systems, Inc.) [File not signed] C:\Program Files (x86)\QNAP\Qsync\Lang\QsyncCSY.dll
2015-10-01 10:25 - 2015-10-01 10:25 - 000099840 _____ (Saitek) [File not signed] C:\Program Files\SmartTechnology\Software\ManuExtensionDLLs\AppLaunchEventDll.dll
2014-06-19 21:21 - 2014-06-19 21:21 - 000731648 _____ (Stardock) [File not signed] C:\Program Files (x86)\Stardock\ObjectDock\Dock64.dll
2014-03-17 20:00 - 2014-03-17 20:00 - 000627200 _____ (Stardock) [File not signed] C:\Program Files (x86)\Stardock\ObjectDock\DockShellHook.dll
2021-03-15 04:22 - 2021-03-15 04:22 - 002115584 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\QNAP\Qsync\libcrypto-1_1.dll
2021-03-15 04:22 - 2021-03-15 04:22 - 000371200 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\QNAP\Qsync\libssl-1_1.dll
2015-10-14 01:15 - 2015-10-14 01:15 - 002042368 _____ (TODO: <Company name>) [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\osvi.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wxbase30u_net_vc90_x64.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wxbase30u_vc90_x64.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wxmsw30u_adv_vc90_x64.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wxmsw30u_core_vc90_x64.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wxmsw30u_html_vc90_x64.dll
2021-07-28 14:40 - 2021-07-28 14:40 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\Jan\AppData\Local\Temp\_MEI115642\wxmsw30u_webview_vc90_x64.dll
2014-02-07 18:47 - 2014-02-07 18:47 - 001171456 _____ (XnView) [File not signed] C:\Program Files (x86)\SageThumbs\32\libgfl340.dll
2014-02-07 18:47 - 2014-02-07 18:47 - 000196608 _____ (XnView) [File not signed] C:\Program Files (x86)\SageThumbs\32\libgfle340.dll
2014-02-07 18:47 - 2014-02-07 18:47 - 001519104 _____ (XnView) [File not signed] C:\Program Files (x86)\SageThumbs\64\libgfl340.dll
2014-02-07 18:47 - 2014-02-07 18:47 - 000256000 _____ (XnView) [File not signed] C:\Program Files (x86)\SageThumbs\64\libgfle340.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\Users\Jan\AppData\Local\Temp:com.affinity.designer.2 [240]
AlternateDataStreams: C:\Users\Jan\AppData\Local\Temp:com.affinity.designer.3 [197]
AlternateDataStreams: C:\Users\Jan\AppData\Local\Temp:com.affinity.photo.2 [240]
AlternateDataStreams: C:\Users\Jan\AppData\Local\Temp:com.affinity.photo.3 [197]
AlternateDataStreams: C:\Users\Jan\AppData\Local\Temp:com.affinity.publisher.2 [240]
AlternateDataStreams: C:\Users\Jan\AppData\Local\Temp:com.affinity.publisher.3 [197]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avgSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avgSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKLM\...\.scr: SageThumbsImage.scr => "%1" /S <==== ATTENTION
HKU\S-1-5-21-108142814-3075653775-322374491-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scr\UserChoice => scrfile

==================== Internet Explorer (Whitelisted) ==========

BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-11-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-11-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-11-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-11-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Smart Backup - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-11-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-11-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64\compiler;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common
HKU\S-1-5-21-108142814-3075653775-322374491-1001\Control Panel\Desktop\\Wallpaper -> c:\customization\wallpapers\sand_black_grains_130940_3840x2400.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\StartupApproved\Run: => "Pushbullet"
HKU\S-1-5-21-108142814-3075653775-322374491-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{34B2669E-EB38-40B1-AFEF-FB706011B977}] => (Allow) LPort=9009
FirewallRules: [{79A7782B-D690-47D9-B141-0B80B4C2DFF0}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{EE8C1449-2441-46FE-A7E2-B3A2BA446B01}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{FE920C2F-75AC-4CFC-BAB9-285531F4A4F2}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{73509DB6-7561-42BB-8D1B-6BEF2E5467E5}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{5FBE9764-8B06-43DE-896D-3856A190C2C0}] => (Allow) LPort=9009
FirewallRules: [{159110DA-257A-459F-935C-198ADE2DF693}] => (Allow) LPort=9009
FirewallRules: [{894F96A6-6331-4AB2-9E3D-D429A632658E}] => (Allow) C:\Program Files (x86)\MediaMonkey 5\MediaMonkeyEngine.exe (Ventis Media, Inc. -> Ventis Media Inc.)
FirewallRules: [{B5D6304C-A17F-4D90-88C7-5CD1BBDD2CF1}] => (Allow) C:\Program Files (x86)\MediaMonkey 5\MediaMonkeyEngine.exe (Ventis Media, Inc. -> Ventis Media Inc.)
FirewallRules: [{ECE87B67-8DE7-48CC-96B0-2F5CFEF7DB59}] => (Allow) C:\Program Files (x86)\MediaMonkey 5\MediaMonkeyEngine.exe (Ventis Media, Inc. -> Ventis Media Inc.)
FirewallRules: [{B811A2D7-E7E3-4B5F-AFC3-171F31A6888D}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{50C27A6F-B7B4-4C18-B4A4-B654E80D7712}C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_full_node.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_full_node.exe => No File
FirewallRules: [UDP Query User{FB329FCC-77CE-4B86-9155-221E1DA4AD82}C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_full_node.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_full_node.exe => No File
FirewallRules: [TCP Query User{ACB8718E-8C40-4016-B871-FF5B34F4E190}C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_farmer.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_farmer.exe => No File
FirewallRules: [UDP Query User{A6CEE827-13C2-447B-A33A-2BEAD466B91C}C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_farmer.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.5\resources\app.asar.unpacked\daemon\start_farmer.exe => No File
FirewallRules: [{3E2B8C4B-CCCD-4454-849C-122A30FB65D0}] => (Allow) LPort=9009
FirewallRules: [{15230E34-47F5-4500-8B8A-68F4EDCEE97E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{0AC8C616-57F5-44B1-A369-D3FC5CBF8E35}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{41B04E0F-7711-4FB3-AA39-693CBEAC3FBB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{CF2374C8-99F3-4541-8BA6-4D11429508E7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{2152ED18-F5EB-451A-8008-070D3C79058D}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{DB139CE6-B44C-4C3C-84A6-374D4003FDD8}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{B2C1E878-D549-46A4-865F-F98CCABA0BD5}] => (Allow) LPort=9009
FirewallRules: [{965E8626-EF83-48B3-98F7-4A7C267DA47E}] => (Allow) LPort=9009
FirewallRules: [{30163316-F4FE-4961-AEC4-D2ED229B3E81}] => (Allow) C:\Program Files\QuadSpinner\Gaea\Gaea.exe (Daksh Pandhi -> QuadSpinner)
FirewallRules: [{3EFC6D86-9474-4464-8F70-3ACF95AAA987}] => (Allow) C:\Program Files\QuadSpinner\Gaea\Gaea.exe (Daksh Pandhi -> QuadSpinner)
FirewallRules: [{4EE3DF4F-2B7B-4A23-A57B-2B85E670E112}] => (Allow) C:\Program Files\QuadSpinner\Gaea\Archon.exe () [File not signed]
FirewallRules: [{2ED222A9-0C81-4EFC-93CC-D92264061609}] => (Allow) C:\Program Files\QuadSpinner\Gaea\Archon.exe () [File not signed]
FirewallRules: [{E0D6AFC0-F0C7-4771-9EEB-51266118E230}] => (Allow) C:\Program Files\QuadSpinner\Gaea\Watson.exe (Daksh Pandhi -> )
FirewallRules: [{5FCF4524-62EB-4909-A03C-4099C9A0F681}] => (Allow) C:\Program Files\QuadSpinner\Gaea\Watson.exe (Daksh Pandhi -> )
FirewallRules: [{61EE540E-0DB4-43B9-A0AB-D1CABA212009}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{1A3C44F5-72D3-4EE8-AB44-ACDE595A2EDB}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{58C04E17-E804-43E4-92E2-D4ADFC08E0EB}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{06A057A8-C881-4BB7-91AA-4D21F877E1E7}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{3FAED65C-B8A2-49CC-A615-77747A4B74AD}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{F0A9F3E7-7D2F-44CF-93BC-F75F014AADED}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{F371933A-DF43-44D2-8217-B1F7A3158A47}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => No File
FirewallRules: [{9B94DA29-0421-44EC-8830-1778610C0138}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{8DFE0B30-64BD-4DFF-A2CD-9188A71A63E2}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{7CE64CC1-51FC-4F2E-84ED-2E6FDD0886ED}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{5A610EAA-E5D0-4F27-B88E-C578D4B79A3A}] => (Allow) LPort=9009
FirewallRules: [{F6ACABC6-F057-484F-BC0F-D8634712144D}] => (Allow) LPort=9009
FirewallRules: [{8450D436-BF2A-482F-9D70-563D6F12D159}] => (Allow) LPort=9009
FirewallRules: [{5DBFD0C7-C0E2-40BC-9CFE-8EEAB722C91B}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{459773B7-242E-4BA5-BB67-181F5ED0D8B8}C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_farmer.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_farmer.exe => No File
FirewallRules: [UDP Query User{A3FBD55E-98C7-4E6C-A94A-1D0E36575636}C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_farmer.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_farmer.exe => No File
FirewallRules: [TCP Query User{4A4D9823-0A1A-4DE6-B358-13CA3C815DA5}C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_full_node.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_full_node.exe => No File
FirewallRules: [UDP Query User{1A17F416-14E8-4B1D-8668-63EAFDD7B9C3}C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_full_node.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.1.6\resources\app.asar.unpacked\daemon\start_full_node.exe => No File
FirewallRules: [{346B6A1D-E443-46BA-BE6D-0788950422B8}] => (Allow) LPort=9009
FirewallRules: [{485B3E06-47BB-42C7-8AF6-5F31FDE2F621}] => (Allow) LPort=9009
FirewallRules: [{B8244C4E-DD1A-47C6-859E-710D666DD61E}] => (Allow) LPort=9009
FirewallRules: [{6CAD23C9-1BBA-4DD0-80FF-8E08B628253D}] => (Allow) LPort=9009
FirewallRules: [{6B1F169F-6C3A-48EE-AF6A-396D583E0885}] => (Allow) LPort=9009
FirewallRules: [{F5FBDB29-6000-4037-8062-B0F89CA09589}] => (Allow) LPort=9009
FirewallRules: [{46891C3B-B276-4583-88F6-8DFC3ECEAF25}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{ED7505AE-4537-45EA-9E68-E1DFBF17FE4C}C:\program files\rainmeter\rainmeter.exe] => (Allow) C:\program files\rainmeter\rainmeter.exe (Firebit OU -> Rainmeter)
FirewallRules: [UDP Query User{1EBA5873-5AD6-430A-88A9-26FBDDED0941}C:\program files\rainmeter\rainmeter.exe] => (Allow) C:\program files\rainmeter\rainmeter.exe (Firebit OU -> Rainmeter)
FirewallRules: [{7718B808-4C28-4A9F-B3DA-57D7807E235E}] => (Allow) LPort=9009
FirewallRules: [{F80D6FFC-C272-434F-8A2D-33823F336E42}] => (Allow) LPort=9009
FirewallRules: [{4E659F09-1FAA-4178-A80D-1BE7838D6BF0}] => (Allow) LPort=9009
FirewallRules: [{C4A1A08C-57E9-4ADF-801D-F0B7D437E898}] => (Allow) C:\Users\Jan\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{FBC316FC-3FCD-4D7E-9E7E-34F4556AB37B}] => (Allow) C:\Users\Jan\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{54ECF1BC-3D9B-4F0B-8DA8-9B464F56F102}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{AD013EAB-C757-49F2-A00D-5F97B7EDFBED}G:\games\overload\overload.exe] => (Block) G:\games\overload\overload.exe () [File not signed]
FirewallRules: [UDP Query User{53480F5C-16FD-40A2-9B80-AB839D88DF57}G:\games\overload\overload.exe] => (Block) G:\games\overload\overload.exe () [File not signed]
FirewallRules: [{837C38F2-69DB-4C7A-8429-81B40E9790FC}] => (Allow) LPort=9009
FirewallRules: [{BA6BB918-2DCB-4862-ADCC-E16702A3AA2E}] => (Allow) LPort=9009
FirewallRules: [{7FB1714D-EDA9-43A8-BFD0-F30E18C200E1}] => (Allow) G:\Games\Project Reality BF2\prbf2.exe (Wouter Jansen -> )
FirewallRules: [{334DF353-ECEC-4D47-AF8B-B2F9A0AADAF8}] => (Allow) G:\Games\Project Reality BF2\mods\pr\bin\PRLauncher.exe (Wouter Jansen -> Project Reality)
FirewallRules: [{F9F8942F-843F-422A-92F9-FE549D346C8C}] => (Allow) G:\Games\Project Reality BF2\mods\pr\bin\PRUpdater.exe (Wouter Jansen -> Project Reality)
FirewallRules: [{BE84C57B-2651-45C3-B2A5-BD1560103763}] => (Allow) G:\Games\Project Reality BF2\mods\pr\bin\PRMumble\PRMumble.exe (Wouter Jansen -> Project Reality)
FirewallRules: [{DA59C9EA-AB39-4B27-8DB5-58F299EA565F}] => (Allow) LPort=9009
FirewallRules: [{E7BF0009-830F-4257-A78F-45D8C76E1BB6}] => (Allow) LPort=9009
FirewallRules: [{706D689C-E52A-4614-B4CF-A45C4840E4DF}] => (Allow) LPort=9009
FirewallRules: [{4402143B-542C-4500-B24D-9FD665F84EA4}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{F3B0C68C-1941-40B1-9281-B8B4BB00BFB7}C:\users\jan\appdata\local\temp\1shbgfprjtaxbdoimxyc2u48b54\resources\miners\win32\xmrig-6.12.1\xmrig.exe] => (Allow) C:\users\jan\appdata\local\temp\1shbgfprjtaxbdoimxyc2u48b54\resources\miners\win32\xmrig-6.12.1\xmrig.exe => No File
FirewallRules: [UDP Query User{E510806D-9788-4F4F-BE70-2F3C13444D29}C:\users\jan\appdata\local\temp\1shbgfprjtaxbdoimxyc2u48b54\resources\miners\win32\xmrig-6.12.1\xmrig.exe] => (Allow) C:\users\jan\appdata\local\temp\1shbgfprjtaxbdoimxyc2u48b54\resources\miners\win32\xmrig-6.12.1\xmrig.exe => No File
FirewallRules: [{FEA8197C-E0F8-4FEE-983E-F7B21832A2E0}] => (Allow) LPort=9009
FirewallRules: [{644687F3-7F0F-47C5-9E1A-5D49EDF30E80}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\92.0.4515.41\remoting_host.exe (Google LLC -> Google LLC)
FirewallRules: [{7799ADBE-DB99-4D84-85EE-0A0674246D06}] => (Allow) LPort=9009
FirewallRules: [{9914A97D-89DF-4984-B568-123FE960B36A}] => (Allow) LPort=9009
FirewallRules: [{26D8C4F0-A983-4671-B3C3-31AEBC12C96D}] => (Allow) LPort=9009
FirewallRules: [{8CDD0151-56D4-42D1-A809-11EE49A501C7}] => (Allow) LPort=9009
FirewallRules: [{2FC77EDB-241E-4D9E-96AD-BBF480993C1F}] => (Allow) LPort=9009
FirewallRules: [{852175A3-3D75-479F-88A0-A55239EFC06E}] => (Allow) LPort=9009
FirewallRules: [{11044C59-55B6-45CC-8D85-45AF9A9ECE03}] => (Allow) LPort=9009
FirewallRules: [{21616379-8285-4749-A7CD-6DEDF3456F11}] => (Allow) LPort=9009
FirewallRules: [{5E65AE84-1D60-4B89-9251-0BFE585FD986}] => (Allow) LPort=9009
FirewallRules: [{FFA00289-7EBF-4AC6-AD87-EF320FA91F0F}] => (Allow) LPort=9009
FirewallRules: [{7A8EEF43-50D7-41BE-8384-393219972924}] => (Allow) LPort=9009
FirewallRules: [{C39238CE-4013-4636-B5B3-8383446DE84F}] => (Allow) LPort=9009
FirewallRules: [{F6F40D21-89AF-4A5B-AE05-B44938ADB0AF}] => (Allow) LPort=9009
FirewallRules: [{8AD31582-80F2-4D88-9EBF-4478B9FD878D}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{A4354719-FA22-453E-AE44-57BE6081891D}C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_farmer.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_farmer.exe (CHIA NETWORK INC. -> )
FirewallRules: [UDP Query User{9034112E-0AAC-40A2-BAB7-9140E3EA5D60}C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_farmer.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_farmer.exe (CHIA NETWORK INC. -> )
FirewallRules: [TCP Query User{38FC0329-48AC-4065-B23C-1899230F1E69}C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_full_node.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_full_node.exe (CHIA NETWORK INC. -> )
FirewallRules: [UDP Query User{C2EA2768-F6F9-4647-B808-4B4109E8B5C7}C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_full_node.exe] => (Allow) C:\users\jan\appdata\local\chia-blockchain\app-1.2.0\resources\app.asar.unpacked\daemon\start_full_node.exe (CHIA NETWORK INC. -> )
FirewallRules: [{8A0999D0-7CF9-4611-B64A-7AE1AF8D8C45}] => (Allow) LPort=9009
FirewallRules: [{01C0B2C6-4E4B-4FE3-A81C-0F861D0DDEB3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C830C193-319A-4FA8-B4F7-8B77A65F4F3D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3B3AAEF7-84FE-414C-8ABF-64FA362FD12E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7B6A0861-8F3D-4755-8568-70E6095D89AD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{B8073F0B-1C94-47BE-A2B4-C94F39548D86}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{22EF573F-8A68-4C62-86D8-1A1F68558193}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{D88E049E-2DD3-4DA2-B9C1-D10705283A36}] => (Allow) I:\Download\LJP1100_P1560_P1600_Full_Solution\ProductInst64.exe => No File
FirewallRules: [{640DD13F-AF62-4945-8E13-0E28259E6638}] => (Allow) I:\Download\LJP1100_P1560_P1600_Full_Solution\ProductInst64.exe => No File
FirewallRules: [{C64795BC-1049-4170-9471-2DE40324AFED}] => (Allow) LPort=9100
FirewallRules: [{A2291A1F-A087-4898-B1DE-E446F55B1125}] => (Allow) LPort=427
FirewallRules: [{7E629997-38B0-4363-8A3E-C0D69E29D9F0}] => (Allow) LPort=161
FirewallRules: [{C86A723E-D63F-4C9D-A997-DDE6ED64DFB4}] => (Allow) LPort=427
FirewallRules: [{72348BB5-BF53-4C30-BB94-C1436FB1A2B6}] => (Allow) LPort=9009
FirewallRules: [{0FB5FF83-DA24-4B98-8210-86F455D46C98}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{CA02334C-7630-43C5-A91F-01F6B23DAB8D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{45320B82-92C6-41C3-849D-D4FCBC6F875C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0D5630B0-4EA9-4BD2-A02A-38391116D6F4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{86D1E7D5-2CBB-4169-9051-5C8B77E49579}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F5CB65E6-CE42-4674-94C6-AC86AE7BBA2C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{990D4E66-4D70-4731-8520-026A35E3B8C9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3EFA984F-ADA3-4AA3-8BD8-C9D27BB369B5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C6CC6B48-7B9C-4860-A336-FA75E3CDEEFC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.164.561.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B4598F93-A22C-4642-B443-4A75D9718DA7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{D7789CED-09FF-4648-99BF-0B1B76A1C881}] => (Allow) LPort=9009

==================== Restore Points =========================

17-07-2021 07:53:19 Instalační služba modulů systému Windows
20-07-2021 18:16:07 Ableton Live 11 Suite
20-07-2021 18:17:15 Removed Ableton Live 11 Suite
25-07-2021 22:16:51 Nainstalováno: ScreenManager Pro for LCD
28-07-2021 00:14:30 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (07/28/2021 02:40:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: etocfile.exe, verze: 8.0.0.16, časové razítko: 0x5e4663a1
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1110, časové razítko: 0xc830c52d
Kód výjimky: 0xe0434352
Posun chyby: 0x0012b4b2
ID chybujícího procesu: 0x252c
Čas spuštění chybující aplikace: 0x01d783adbfc22f07
Cesta k chybující aplikaci: C:\Program Files (x86)\GIGABYTE\EasyTune\etocfile.exe
Cesta k chybujícímu modulu: C:\Windows\System32\KERNELBASE.dll
ID zprávy: 86b92a0b-926b-4acb-a7b3-eeba26b912eb
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem:

Error: (07/28/2021 02:40:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: etinit.exe, verze: 8.0.0.10, časové razítko: 0x5c6e5df7
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1110, časové razítko: 0xc830c52d
Kód výjimky: 0xe0434352
Posun chyby: 0x0012b4b2
ID chybujícího procesu: 0x2900
Čas spuštění chybující aplikace: 0x01d783adbfc231e7
Cesta k chybující aplikaci: C:\Program Files (x86)\GIGABYTE\EasyTune\etinit.exe
Cesta k chybujícímu modulu: C:\Windows\System32\KERNELBASE.dll
ID zprávy: 68c5dfb0-7aff-499e-8a23-265bc01f2708
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem:

Error: (07/28/2021 02:40:30 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: etinit.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.IO.FileLoadException
   na etinit.Program.Main(System.String[])

Error: (07/28/2021 02:40:30 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: etocfile.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.IO.FileLoadException
   na etocfile.Program.Main(System.String[])

Error: (07/25/2021 10:32:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CRWindowsClientService.exe, verze: 1.6.1.0, časové razítko: 0x59b6762b
Název chybujícího modulu: CRWindowsClientService.exe, verze: 1.6.1.0, časové razítko: 0x59b6762b
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000014c2b
ID chybujícího procesu: 0x6520
Čas spuštění chybující aplikace: 0x01d7819427429e89
Cesta k chybující aplikaci: C:\Program Files\Adobe\Adobe Photoshop CC 2018\CRWindowsClientService.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Adobe Photoshop CC 2018\CRWindowsClientService.exe
ID zprávy: c4877573-9d4e-4287-9470-f61be707333d
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem:

Error: (07/25/2021 10:29:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CRWindowsClientService.exe, verze: 1.6.1.0, časové razítko: 0x59b6762b
Název chybujícího modulu: CRWindowsClientService.exe, verze: 1.6.1.0, časové razítko: 0x59b6762b
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000014c2b
ID chybujícího procesu: 0x4518
Čas spuštění chybující aplikace: 0x01d78193c803d2ca
Cesta k chybující aplikaci: C:\Program Files\Adobe\Adobe Photoshop CC 2018\CRWindowsClientService.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Adobe Photoshop CC 2018\CRWindowsClientService.exe
ID zprávy: 277118d4-79cf-4500-adf5-008edf478de8
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem:

Error: (07/25/2021 10:25:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CRWindowsClientService.exe, verze: 1.6.1.0, časové razítko: 0x59b6762b
Název chybujícího modulu: CRWindowsClientService.exe, verze: 1.6.1.0, časové razítko: 0x59b6762b
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000014c2b
ID chybujícího procesu: 0x1b90
Čas spuštění chybující aplikace: 0x01d781932d2fd88c
Cesta k chybující aplikaci: C:\Program Files\Adobe\Adobe Photoshop CC 2018\CRWindowsClientService.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Adobe Photoshop CC 2018\CRWindowsClientService.exe
ID zprávy: 0cfbd8c2-09e2-4ab1-afa5-14c6f4ff81f6
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem:

Error: (07/25/2021 01:42:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: mbamtray.exe, verze: 4.0.0.1055, časové razítko: 0x60e6f01b
Název chybujícího modulu: Qt5Core.dll, verze: 5.14.1.0, časové razítko: 0x603971ce
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000219dc5
ID chybujícího procesu: 0xe58
Čas spuštění chybující aplikace: 0x01d77db20f3e4508
Cesta k chybující aplikaci: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Cesta k chybujícímu modulu: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
ID zprávy: 6851298e-642a-4b39-8752-1c73edf0d2a2
Úplný název chybujícího balíčku: 
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (07/28/2021 02:39:29 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\system32\IntelIHVRouter08.dll

Error: (07/28/2021 02:39:29 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\system32\IntelIHVRouter08.dll

Error: (07/28/2021 02:39:16 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\system32\IntelIHVRouter08.dll

Error: (07/28/2021 02:38:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba DbxSvc byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (07/28/2021 02:38:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (07/28/2021 02:38:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Disc Soft Lite Bus Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/28/2021 02:38:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Gservice byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/28/2021 02:38:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Logi Facecam Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 2000 milisekund: Restartovat službu.


Windows Defender:
================
Date: 2021-07-28 00:14:38
Description: 
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {ED5F85D3-47C7-4128-ACAA-57C9BB4D00FC}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-05-11 21:51:36
Description: 
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {B27CF238-AD07-415B-8F8B-F3C0D76EE43A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
﻿
CodeIntegrity:
===============
Date: 2021-07-28 14:42:21
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-07-28 14:41:24
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Microsoft signing level requirements.


==================== Memory info =========================== 

BIOS: American Megatrends Inc. F30 09/15/2020
Motherboard: Gigabyte Technology Co., Ltd. X570 AORUS ULTRA
Processor: AMD Ryzen 9 5950X 16-Core Processor 
Percentage of memory in use: 19%
Total physical RAM: 65478 MB
Available physical RAM: 52540.9 MB
Total Virtual: 131014 MB
Available Virtual: 113823.3 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.91 GB) (Free:695.86 GB) NTFS
Drive d: (Media) (Fixed) (Total:3726.01 GB) (Free:72.03 GB) NTFS
Drive e: (Disk) (Fixed) (Total:5589.01 GB) (Free:109.56 GB) NTFS
Drive g: (Viper) (Fixed) (Total:931.5 GB) (Free:893.22 GB) NTFS
Drive i: (Disk gold) (Fixed) (Total:5589.01 GB) (Free:1631.57 GB) NTFS
Drive m: (MOVIES) (Fixed) (Total:3725.9 GB) (Free:1456.26 GB) NTFS
Drive v: (Zvuk) (Fixed) (Total:2794.5 GB) (Free:2653.18 GB) NTFS

\\?\Volume{37de40ca-6687-4d49-8c85-81d44c1cd6d6}\ () (Fixed) (Total:0.49 GB) (Free:0.06 GB) NTFS
\\?\Volume{e9db014d-35ae-4369-9824-f9914629e4ec}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: BC895498)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 5589 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 2 (Protective MBR) (Size: 5589 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 3 (Size: 3726 GB) (Disk ID: 0C12FE20)

Partition: GPT.

==========================================================
Disk: 4 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 5 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 6 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================