Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-02-2023
Ran by xXx (23-02-2023 04:52:01)
Running from C:\Users\xXx\Desktop
Microsoft® Windows Vista™ Business  Service Pack 2 (X86) (2012-10-12 12:53:08)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3926274421-1707633955-194683952-500 - Administrator - Disabled)
daniELF (S-1-5-21-3926274421-1707633955-194683952-1004 - Limited - Enabled) => C:\Users\daniELF
Guest (S-1-5-21-3926274421-1707633955-194683952-501 - Limited - Enabled)
Nintendo (S-1-5-21-3926274421-1707633955-194683952-1003 - Limited - Enabled) => C:\Users\Nintendo
Verka (S-1-5-21-3926274421-1707633955-194683952-1001 - Limited - Enabled) => C:\Users\Verka
xXx (S-1-5-21-3926274421-1707633955-194683952-1000 - Administrator - Enabled) => C:\Users\xXx
_ DADA _ (S-1-5-21-3926274421-1707633955-194683952-1002 - Limited - Enabled) => C:\Users\_ DADA _

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (HKLM\...\{86924253-1BCC-4BF5-B995-33C1DB7EECAE}) (Version: 13.1.1 - Hewlett-Packard) Hidden
7-Zip 19.00 (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
7-Zip 22.01 (HKLM\...\{23170F69-40C1-2701-2201-000001000000}) (Version: 22.01.00.0 - Igor Pavlov)
Adobe Flash Player 20 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_STANDARDR_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version:  - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_STANDARDR_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version:  - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_STANDARDR_{E68DD413-B834-4923-8181-0A03B7555187}) (Version:  - Microsoft)
Angry IP Scanner (HKLM\...\Angry IP Scanner) (Version: 3.7.2 - Angry IP Scanner)
Apple Application Support (HKLM\...\{853A4763-6643-4604-8D64-28BDD8925F4C}) (Version: 1.5.1 - Apple Inc.)
Apple Software Update (HKLM\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.)
ArcSoft PhotoImpression 5 (HKLM\...\{E629851A-1B1A-4671-961A-A9AF549E03A2}) (Version:  - ArcSoft)
Ashampoo Burning Studio 2013 v.11.0.5 (HKLM\...\Ashampoo Burning Studio 2013_is1) (Version: 11.0.5 - Ashampoo GmbH & Co. KG)
ATK Generic Function Service (HKLM\...\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}) (Version: 1.00.0008 - ATK)
ATK Hotkey (HKLM\...\{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}) (Version: 1.00.0027 - ATK)
ATKOSD2 (HKLM\...\{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}) (Version: 6.64.1.6 - ATK)
Balíček ovladače systému Windows - ITE Tech.Inc. (itecir) HIDClass  (06/20/2007 5.0.0004.2) (HKLM\...\2EFF310ED3BF3BFB24E6CC25AEB5491813E56803) (Version: 06/20/2007 5.0.0004.2 - ITE Tech.Inc.)
Balíček ovladače systému Windows - Polar Electro Oy (usbser) Ports  (03/12/2015 6.0.2600.5) (HKLM\...\4C9F407EFEE71D7ED12BA7F50C69857CD776B651) (Version: 03/12/2015 6.0.2600.5 - Polar Electro Oy)
Bejeweled® 3 (HKLM\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.)
Camtasia Studio 7 (HKLM\...\{C0E8FE43-C35B-451D-B35F-D4BD056D70E7}) (Version: 7.1.1 - TechSmith Corporation)
CanoScan Toolbox Ver4.1 (HKLM\...\{BCE46757-7674-4416-BEDB-68205A60409E}) (Version:  - )
ccc-Branding (HKLM\...\{6E32B134-CA8D-49DD-B94C-0DB155CE70B5}) (Version: 1.00.0000 - ATI)
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform) <==== ATTENTION
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
Cisco Connect (HKLM\...\Cisco Connect) (Version: 1.4.12263.1 - Cisco Consumer Products LLC)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Corel Uninstaller (HKLM\...\Corel Uninstaller) (Version:  - )
DVD Shrink 3.2 (HKLM\...\DVD Shrink_is1) (Version:  - DVD Shrink)
Ekonomický systém Money S3 (HKLM\...\Money S3) (Version: 15.401 (20150416_10) - CÍGLER SOFTWARE, a.s.)
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.5.129.617 - Foxit Corporation)
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.2.3.815 - Foxit Corporation)
Freemake Video Converter verze 3.1.2 (HKLM\...\Freemake Video Converter_is1) (Version: 3.1.2 - Ellora Assets Corporation)
Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)
Chronograph Lite 3.1 (HKLM\...\Chronograph Lite_is1) (Version:  - AltrixSoft)
Inkscape 0.48.4 (HKLM\...\Inkscape) (Version: 0.48.4 - )
IrfanView (remove only) (HKLM\...\IrfanView) (Version:  - )
ITECIR Driver (HKLM\...\{FCED9B62-34FF-4C15-8A23-F65221F7874D}) (Version: 1.00.000 - ITE)
Java 8 Update 144 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
jbead (HKLM\...\jbead) (Version:  - )
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JMB36X Raid Configurer (HKLM\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMICRON Technology Corp.)
KMPlayer Toolbar (HKLM\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.17.9.0 - Ask.com)
KMPlayer Toolbar Updater (HKU\S-1-5-21-3926274421-1707633955-194683952-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.4.4.52828 - Ask.com)
KMPlayer Toolbar Updater (HKU\S-1-5-21-3926274421-1707633955-194683952-1001\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.4.4.52828 - Ask.com)
KMPlayer Toolbar Updater (HKU\S-1-5-21-3926274421-1707633955-194683952-1002\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.4.4.52828 - Ask.com)
LG PC Suite (HKLM\...\LG PC Suite) (Version: 5.2.17.20121218 - LG Electronics)
LG United Mobile Drivers (HKLM\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
Magical Jelly Bean KeyFinder (HKLM\...\KeyFinder_is1) (Version: 2.0.10.13 - Magical Jelly Bean)
MainConcept MCE Encoder (HKLM\...\{DA9EBAAE-57E5-44D2-B496-8771CD924C68}) (Version: 1.4.9345.2 - MainConcept AG)
Microcular (HKLM\...\InstallShield_{C679F9B9-C65D-4C65-BD6C-BF90B859E281}) (Version: 1.0.4.9 - Microcular)
Microsoft .NET Framework 3.5 Language Pack SP1 - csy (HKLM\...\{DD73CA82-EA82-38AA-863D-9A24A018DC96}) (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - csy) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}) (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (CSY) (HKLM\...\{69EDC871-8A8A-34A8-B511-FF7CE3C4B0B7}) (Version: 4.5.51209 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{3911CF56-9EF2-39BA-846A-C27BD3CD0685}) (Version: 4.5.51209 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version:  - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version:  - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-001A-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version:  - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_STANDARDR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version:  - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-006E-0405-0000-0000000FF1CE}_STANDARDR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}) (Version:  - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Excel MUI (Czech) 2007 (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook MUI (Czech) 2007 (HKLM\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (Czech) (HKLM\...\{95120000-00AF-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (Czech) 2007 (HKLM\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-001F-0405-0000-0000000FF1CE}_STANDARDR_{0B7A4B67-2A38-42B1-9857-662FAB361E08}) (Version:  - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-001F-0407-0000-0000000FF1CE}_STANDARDR_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version:  - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-001F-0409-0000-0000000FF1CE}_STANDARDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version:  - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-001F-041B-0000-0000000FF1CE}_STANDARDR_{FDF9A959-241A-4662-A8DE-7DED9C22D160}) (Version:  - Microsoft) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Standard 2007 (HKLM\...\{91120000-0012-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Standard 2007 (HKLM\...\STANDARDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word MUI (Czech) 2007 (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215 (HKLM\...\{69BCE4AC-9572-3271-A2FB-9423BDA36A43}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215 (HKLM\...\{BBF2AC74-720C-3CB3-8291-5E34039232FA}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Works (HKLM\...\{99D7DE4C-2775-4B16-B155-7F09AE939E8E}) (Version: 9.7.0621 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version:  - )
Mozilla Firefox 52.9.0 ESR (x86 cs) (HKLM\...\Mozilla Firefox 52.9.0 ESR (x86 cs)) (Version: 52.9.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 52.9.0.6746 - Mozilla)
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Origin (HKLM\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.)
osu! (HKLM\...\{f8d81267-699f-463c-9c55-482e22c49b67}) (Version: latest - ppy Pty Ltd)
Pandora Service (HKLM\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version:  - Pandora.TV) <==== ATTENTION
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 0.9.6 - Frank Heindörfer, Philip Chinery)
PlayDance verze 1.0.980 (HKLM\...\{EC8642E4-7CE3-4379-9114-6E34DEF98D58}_is1) (Version: 1.0.980 - VISO SPORT s.r.o.)
Polar FlowSync verze 3.0.0.1337 (HKLM\...\{A1538F5C-7B65-4DB6-9FFB-FFC0DF2E85D8}_is1) (Version: 3.0.0.1337 - Polar Electro Oy)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5548 - Realtek Semiconductor Corp.)
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.52.02 - )
Roblox Player for Verka (HKU\S-1-5-21-3926274421-1707633955-194683952-1001\...\roblox-player) (Version:  - Roblox Corporation)
Roblox Studio for Verka (HKU\S-1-5-21-3926274421-1707633955-194683952-1001\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version:  - Roblox Corporation)
Search App by Ask (HKLM\...\{4F524A2D-5350-4500-76A7-A758B70C2700}) (Version: 12.39.0.412 - APN, LLC)
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.13.13771 - Skype Technologies S.A.)
StepMania 3.9 (remove only) (HKLM\...\StepMania) (Version:  - )
Sticky Password 8.2.3.43 (HKLM\...\Sticky Password_is1) (Version: 8.2 - Lamantine Software)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.1.6.0 - Synaptics)
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.43331 - TeamViewer)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 7.57a - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
USB 2.0 1.3M UVC WebCam (HKLM\...\USB 2.0 1.3M UVC WebCam) (Version:  - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
Webshare klient (HKLM\...\Webshare klient) (Version:  - )
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 5.50 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wireless Console 2 (HKLM\...\{83F73CB1-7705-49D1-9852-84D839CA2A45}) (Version: 2.0.8 - ATK)
World of Warships (HKU\S-1-5-21-3926274421-1707633955-194683952-1002\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
YTD (pepak) (HKLM\...\YTD_Pepak) (Version:  - )
Zoner Photo Studio 10 (HKLM\...\ZonerPhotoStudio10_CZ_is1) (Version:  - ZONER software)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{0000002F-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{0006F045-0000-0000-C000-000000000046}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{00EEBF57-477D-4084-9921-7AB3C2C9459D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{48C6BE7C-3871-43CC-B46F-1449A1BB2FF3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{4E77131D-3629-431C-9818-C5679DC83E81}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{640167B4-59B0-47A6-B335-A6B3C0695AEA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{EFB23A09-A867-4BE8-83A6-86969A7D0856}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3926274421-1707633955-194683952-1000_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> no filepath
SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll (Microsoft Windows -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x86.dll [2014-04-15] (Foxit Corporation -> Foxit Corporation)
ContextMenuHandlers1: [VersionsMenu] -> {03170921-4754-11cf-AB9A-00C0F00683EB} => C:\COREL\Versions\CVersion.dll [1998-02-10] () [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files\Zoner\Photo Studio 10\Program\SHELLEXT.DLL [2007-10-19] (ZONER software) [File not signed]
ContextMenuHandlers2: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files\Zoner\Photo Studio 10\Program\SHELLEXT.DLL [2007-10-19] (ZONER software) [File not signed]
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files\Zoner\Photo Studio 10\Program\SHELLEXT.DLL [2007-10-19] (ZONER software) [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll [2007-03-02] () [File not signed]
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [VersionsMenu] -> {03170921-4754-11cf-AB9A-00C0F00683EB} => C:\COREL\Versions\CVersion.dll [1998-02-10] () [File not signed]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files\Zoner\Photo Studio 10\Program\SHELLEXT.DLL [2007-10-19] (ZONER software) [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.tscc] => C:\Windows\system32\tsccvid.dll [594944 2010-07-19] (TechSmith Corporation) [File not signed]
HKLM\...\Drivers32: [wave2] => C:\Windows\system32\serwvdrv.dll [18432 2006-11-02] (Microsoft Windows -> Microsoft Corporation)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

==================== Loaded Modules (Whitelisted) =============

2013-03-28 07:36 - 1998-02-10 16:04 - 000094720 ____N () [File not signed] C:\COREL\Versions\CVersion.dll
2013-03-28 07:34 - 1997-08-08 23:20 - 000017920 ____N () [File not signed] C:\COREL\Versions\IMPLODE.DLL
2013-03-28 07:33 - 1997-08-08 23:20 - 000121344 ____N () [File not signed] C:\COREL\Versions\VERS232.dll
2021-05-23 15:49 - 2005-06-28 12:59 - 000053248 _____ () [File not signed] C:\Program Files\ArcSoft\PhotoImpression 5\share\pihook.dll
2007-03-02 10:44 - 2007-03-02 10:44 - 000073728 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
2012-10-12 16:34 - 2004-05-27 17:13 - 000057344 _____ () [File not signed] C:\Program Files\ATK Hotkey\CMSSC.dll
2013-01-02 13:05 - 2012-07-09 17:57 - 002090496 _____ () [File not signed] C:\Program Files\PANDORA.TV\PanService\avcodec-53.dll
2013-01-02 13:05 - 2012-10-22 11:15 - 001277952 _____ () [File not signed] C:\Program Files\PANDORA.TV\PanService\avformat-53.dll
2013-01-02 13:05 - 2011-12-06 16:19 - 000133632 _____ () [File not signed] C:\Program Files\PANDORA.TV\PanService\avutil-51.dll
2013-01-02 13:05 - 2012-03-23 10:07 - 000224768 _____ () [File not signed] C:\Program Files\PANDORA.TV\PanService\libupnp.dll
2020-06-15 09:04 - 2018-09-17 02:26 - 001348096 _____ () [File not signed] C:\Program Files\Polar\Polar FlowSync\polar20.dll
2020-06-15 09:04 - 2018-05-29 00:27 - 000071168 _____ () [File not signed] C:\Program Files\Polar\Polar FlowSync\zlib.dll
2013-01-18 05:52 - 2001-10-28 17:42 - 000116224 _____ () [File not signed] C:\Windows\System32\pdfcmnnt.dll
2012-10-12 16:34 - 2004-05-27 17:13 - 000080384 _____ (ACTIONTEC Electronics,Inc) [File not signed] C:\Program Files\ATK Hotkey\ATKWLIOC.DLL
2012-10-12 16:34 - 2005-09-21 16:30 - 000036864 _____ (ATK) [File not signed] C:\Program Files\ATK Hotkey\inter_f2.dll
2013-03-28 07:34 - 1998-01-12 16:58 - 000069120 ____N (Corel Corporation) [File not signed] C:\Corel\Graphics8\PROGRAMS\CDRICO80.DLL
2012-02-10 18:15 - 2012-02-10 18:15 - 000046080 _____ (Hewlett-Packard Company) [File not signed] C:\Windows\system32\HPBMIAPI.DLL
2013-01-22 06:42 - 2011-12-13 17:42 - 000087552 _____ (Hewlett-Packard Company) [File not signed] C:\Windows\System32\hpmlm121.dll
2013-01-22 06:43 - 2012-04-24 06:45 - 000428032 _____ (Hewlett-Packard Corporation) [File not signed] C:\Windows\system32\spool\PRTPROCS\W32X86\hpcpp130.dll
2013-01-22 06:42 - 2012-04-24 06:41 - 000151040 _____ (Hewlett-Packard) [File not signed] C:\Windows\System32\HPMPM081.DLL
2013-01-22 06:42 - 2012-04-24 06:41 - 000056320 _____ (Hewlett-Packard) [File not signed] C:\Windows\System32\HPMPW081.DLL
2012-02-08 18:53 - 2012-02-08 18:53 - 000045568 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2012-02-08 18:53 - 2012-02-08 18:53 - 000055808 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
2022-07-15 19:00 - 2022-07-15 19:00 - 000062976 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2013-01-02 13:05 - 2011-09-14 16:33 - 000086070 _____ (Open Source Software community project) [File not signed] C:\Program Files\PANDORA.TV\PanService\pthreadVC2.dll
2013-01-02 13:05 - 2016-03-16 07:45 - 000408064 _____ (Pandora TV Inc.) [File not signed] C:\Program Files\PANDORA.TV\PanService\PanStreamer.dll
2013-01-02 13:05 - 2016-03-16 07:45 - 000295424 _____ (PANDORA.TV) [File not signed] C:\Program Files\PANDORA.TV\PanService\proxy.dll
2020-06-15 09:04 - 2018-09-17 02:27 - 000381440 _____ (Polar Electro Oy) [File not signed] C:\Program Files\Polar\Polar FlowSync\wslib.dll
2012-10-12 16:34 - 2005-01-12 23:36 - 000303104 _____ (Silicon Integrated Systems Corp.) [File not signed] C:\Program Files\ATK Hotkey\SiSPkt.dll
2020-06-15 09:04 - 2015-04-30 01:20 - 025338368 _____ (The ICU Project) [File not signed] C:\Program Files\Polar\Polar FlowSync\icudt54.dll
2020-06-15 09:04 - 2015-04-30 01:20 - 002056704 _____ (The ICU Project) [File not signed] C:\Program Files\Polar\Polar FlowSync\icuin54.dll
2020-06-15 09:04 - 2015-04-30 01:20 - 001425408 _____ (The ICU Project) [File not signed] C:\Program Files\Polar\Polar FlowSync\icuuc54.dll
2020-06-15 09:04 - 2015-10-12 11:20 - 000991232 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\platforms\qwindows.dll
2020-06-15 09:04 - 2018-05-29 07:46 - 004621312 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Core.dll
2020-06-15 09:04 - 2015-10-12 11:15 - 004860928 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Gui.dll
2020-06-15 09:04 - 2015-10-12 11:32 - 000563712 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Multimedia.dll
2020-06-15 09:04 - 2015-10-12 11:34 - 000082432 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5MultimediaWidgets.dll
2020-06-15 09:04 - 2015-10-12 11:14 - 000845312 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Network.dll
2020-06-15 09:04 - 2015-10-12 11:19 - 000272896 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5OpenGL.dll
2020-06-15 09:04 - 2015-10-12 11:34 - 000166400 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Positioning.dll
2020-06-15 09:04 - 2015-10-12 11:19 - 000267264 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5PrintSupport.dll
2020-06-15 09:04 - 2015-10-12 11:24 - 002588672 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Qml.dll
2020-06-15 09:04 - 2015-10-12 11:26 - 002430976 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Quick.dll
2020-06-15 09:04 - 2015-10-12 15:03 - 001144832 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Script.dll
2020-06-15 09:04 - 2015-10-12 11:31 - 000148480 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Sensors.dll
2020-06-15 09:04 - 2015-10-12 11:13 - 000154112 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Sql.dll
2020-06-15 09:04 - 2015-10-12 11:39 - 000080384 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5WebChannel.dll
2020-06-15 09:04 - 2015-10-12 12:55 - 017406464 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5WebKit.dll
2020-06-15 09:04 - 2015-10-12 13:10 - 000198656 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5WebKitWidgets.dll
2020-06-15 09:04 - 2015-10-12 11:17 - 004420096 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Widgets.dll
2020-06-15 09:04 - 2015-10-12 11:13 - 000150016 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Polar\Polar FlowSync\Qt5Xml.dll
2012-12-16 15:23 - 2007-10-19 14:18 - 000036864 _____ (ZONER software) [File not signed] C:\Program Files\Zoner\Photo Studio 10\Program\SHELLEXT.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-3926274421-1707633955-194683952-1000\Software\Classes\.exe:  =>  <==== ATTENTION
HKU\S-1-5-21-3926274421-1707633955-194683952-1000\Software\Classes\.reg:  =>  <==== ATTENTION
HKU\S-1-5-21-3926274421-1707633955-194683952-1000\Software\Classes\.bat:  =>  <==== ATTENTION
HKU\S-1-5-21-3926274421-1707633955-194683952-1000\Software\Classes\.cmd:  =>  <==== ATTENTION
HKU\S-1-5-21-3926274421-1707633955-194683952-1000\Software\Classes\.com:  =>  <==== ATTENTION
HKU\S-1-5-21-3926274421-1707633955-194683952-1000\Software\Classes\.scr:  =>  <==== ATTENTION

==================== Internet Explorer (Version 9) (Whitelisted) ==========

SearchScopes: HKU\S-1-5-21-3926274421-1707633955-194683952-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-09-07] (Oracle America, Inc. -> Oracle Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies SA -> Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-07] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKU\S-1-5-21-3926274421-1707633955-194683952-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKU\S-1-5-21-3926274421-1707633955-194683952-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies SA -> Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  No File

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 11:23 - 2023-02-12 10:37 - 000000000 _____ C:\Windows\system32\drivers\etc\hosts

2021-07-02 14:19 - 2021-07-02 14:19 - 000000375 _____ C:\Windows\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
HKU\S-1-5-21-3926274421-1707633955-194683952-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\img24.jpg
HKU\S-1-5-21-3926274421-1707633955-194683952-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\img24.jpg
HKU\S-1-5-21-3926274421-1707633955-194683952-1002\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\img24.jpg
HKU\S-1-5-21-3926274421-1707633955-194683952-1003\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\img24.jpg
HKU\S-1-5-21-3926274421-1707633955-194683952-1004\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\img24.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Avast Cleanup Premium.lnk => C:\Windows\pss\Avast Cleanup Premium.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^xXx^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CCC.lnk => C:\Windows\pss\CCC.lnk.Startup
MSCONFIG\startupreg: ApnTBMon => "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: ATKOSD2 => "C:\Program Files\ATKOSD2\ATKOSD2.exe"
MSCONFIG\startupreg: BingSvc => C:\Users\xXx\AppData\Local\Microsoft\BingSvc\BingSvc.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Skytel => Skytel.exe
MSCONFIG\startupreg: SMSERIAL => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
MSCONFIG\startupreg: StickyPassword => C:\Program Files\Sticky Password\stpass.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide
MSCONFIG\startupreg: WMPNSCFG => C:\Program Files\Windows Media Player\WMPNSCFG.exe
MSCONFIG\startupreg: Zoner Photo Studio Autoupdate => "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
MSCONFIG\startupreg: Zoner Photo Studio Service 16 => "C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXEC:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [WinCollab-Out-UDP] => (Allow) C:\Program Files\Windows Collaboration\WinCollab.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [WinCollab-In-UDP] => (Allow) C:\Program Files\Windows Collaboration\WinCollab.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [WinCollab-Out-TCP] => (Allow) C:\Program Files\Windows Collaboration\WinCollab.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [WinCollab-In-TCP] => (Allow) C:\Program Files\Windows Collaboration\WinCollab.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) C:\Windows\system32\dfsr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) C:\Windows\system32\dfsr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SLSVC-In-TCP-NoScope] => (Allow) C:\Windows\system32\slsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SLSVC-In-TCP] => (Allow) C:\Windows\system32\slsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{6DA568C6-13D4-46AA-89DA-06C54F8F4303}] => (Allow) LPort=80
FirewallRules: [{58C813AB-6F61-4ECC-82B2-12A525F2F88B}] => (Allow) LPort=80
FirewallRules: [{3C4A7B6C-3E11-436A-8FF5-C28E2AA71718}] => (Allow) LPort=80
FirewallRules: [TCP Query User{6829744B-429A-4EB5-8ED0-DC7F2EE6195F}D:\_ _ aplikace _ _\totalcmd\totalcmd.exe] => (Allow) D:\_ _ aplikace _ _\totalcmd\totalcmd.exe => No File
FirewallRules: [UDP Query User{11ECD6B9-C66D-4449-8C8C-F9B24FE225E1}D:\_ _ aplikace _ _\totalcmd\totalcmd.exe] => (Allow) D:\_ _ aplikace _ _\totalcmd\totalcmd.exe => No File
FirewallRules: [TCP Query User{F873DD00-AE85-4663-BA49-BF00FB7EB1FE}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe => No File
FirewallRules: [UDP Query User{B86DD68A-20E0-4B0C-8437-37926A56143A}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe => No File
FirewallRules: [{3F9A3655-C0DB-45CE-A6CD-4120636905DC}] => (Allow) C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe => No File
FirewallRules: [{44CD8A03-324D-4AD3-9B87-E4F8EDB07623}] => (Allow) C:\Program Files\Samsung\AllShare\AllShare.exe => No File
FirewallRules: [{AFD6452C-621D-4155-B6DD-1CF84148C5A9}] => (Allow) C:\Program Files\Samsung\AllShare\AllShareAgent.exe => No File
FirewallRules: [TCP Query User{1C07635E-FB10-4DEF-BDD2-C96A296667F1}C:\program files\lg electronics\lg pc suite\smartshare.exe] => (Allow) C:\program files\lg electronics\lg pc suite\smartshare.exe (LG Electronics Inc. -> )
FirewallRules: [UDP Query User{629E4212-7545-4599-8315-8C6240769C0C}C:\program files\lg electronics\lg pc suite\smartshare.exe] => (Allow) C:\program files\lg electronics\lg pc suite\smartshare.exe (LG Electronics Inc. -> )
FirewallRules: [TCP Query User{790A050E-2473-4B87-BA4B-4D70D9A6483C}C:\users\verka\appdata\local\facebook\video\skype\facebookvideocalling.exe] => (Block) C:\users\verka\appdata\local\facebook\video\skype\facebookvideocalling.exe (Skype Software Sarl -> Skype Limited)
FirewallRules: [UDP Query User{0B22B841-C718-4734-8E2B-45F99B5896CC}C:\users\verka\appdata\local\facebook\video\skype\facebookvideocalling.exe] => (Block) C:\users\verka\appdata\local\facebook\video\skype\facebookvideocalling.exe (Skype Software Sarl -> Skype Limited)
FirewallRules: [{A92627FD-E01D-4C4D-BAFB-9A63805AA9D0}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0C28B2B6-1561-4B1D-8284-070FE8E08B98}] => (Allow) C:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe (PopCap Games -> )
FirewallRules: [{30A87A8C-EBB1-483E-8DE2-C017B4FAB62A}] => (Allow) C:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe (PopCap Games -> )
FirewallRules: [{DBBC7D7E-BFD6-4C22-B367-0A25AF552B92}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{758E2F3F-8252-4BF3-A325-14BBA0EE41F9}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{8A928121-BC76-42C8-A934-072A85AE098F}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{6A2ABDAA-A4A4-4111-900A-51E5F4A46569}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{1C1866A2-F0C9-43F9-98C8-C5359EEC69C1}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{30D285DA-B911-45DC-8110-E950EE157C0D}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{445A57B4-67DA-405A-89A5-8605D2D997B4}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{14D7DBB6-9EAA-46C7-84BF-BE2EBAEA0F69}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{6D0CF8BC-A74E-4019-8C85-0CFA6F233FA9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3705DCC5-984C-48DC-B374-1F8C37A118FD}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{D1D2036A-FA0E-463B-BBAD-1B361ECD8E2B}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [UDP Query User{DB41E7C0-6305-4951-8180-DF5011BFFC1B}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [TCP Query User{39969406-9AD4-490C-B6AF-A40491BDA8B4}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [UDP Query User{3C235E2D-89F0-4A50-99C9-5C12C8D3DC59}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [TCP Query User{C15C4155-E4A1-477F-AC43-1A172A6F162B}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [UDP Query User{20E625A1-99D4-40E8-A25C-2FF5469E5CD3}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [{C7AD8B7F-9487-49BB-83A1-6B5FBB6EA220}] => (Allow) C:\Games\World_of_Warships\WoWSLauncher.exe => No File
FirewallRules: [{CAB53932-B04A-4498-BDA4-B526FB7AEB0A}] => (Allow) C:\Games\World_of_Warships\WoWSLauncher.exe => No File
FirewallRules: [{75745179-9F30-4285-80A5-708032F5876C}] => (Allow) C:\Games\World_of_Warships\worldofwarships.exe => No File
FirewallRules: [{534773F5-ED55-4F00-B079-1241D0A948C9}] => (Allow) C:\Games\World_of_Warships\worldofwarships.exe => No File
FirewallRules: [{4AABB775-2DCE-4E46-A7C0-F62612D19FD3}] => (Allow) C:\Program Files\Steam\Steam.exe => No File
FirewallRules: [{86298BD1-14E9-4163-B033-B5EA7CCD6ED2}] => (Allow) C:\Program Files\Steam\Steam.exe => No File
FirewallRules: [{AF59D390-CF8F-45DD-A099-CA2EBEBE1720}] => (Allow) C:\Program Files\Steam\bin\cef\cef.winxp\steamwebhelper.exe => No File
FirewallRules: [{EC7197F2-3374-4319-B7C4-95E8EFC7EA75}] => (Allow) C:\Program Files\Steam\bin\cef\cef.winxp\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{E387D02B-EEDC-48BC-AEF8-49F381C76D33}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [UDP Query User{484C6CA0-E7C9-468F-9A2D-EBCF00580317}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [{D9B4BD33-5E59-4326-9537-FC6BE301BAD3}] => (Allow) C:\Program Files\Steam\steamapps\common\Mimpi Dreams\MimpiDreams.exe => No File
FirewallRules: [{BF91E0B1-EDEE-4560-96DA-3DA50666E270}] => (Allow) C:\Program Files\Steam\steamapps\common\Mimpi Dreams\MimpiDreams.exe => No File
FirewallRules: [{C15B163E-2BCD-4762-AD9B-B82799663ADC}] => (Allow) C:\Program Files\Steam\steamapps\common\The Cat Games\The Cat Games.exe => No File
FirewallRules: [{FF99B6FC-522E-494E-87CD-4DC6F04816AE}] => (Allow) C:\Program Files\Steam\steamapps\common\The Cat Games\The Cat Games.exe => No File
FirewallRules: [{4AA1FC3F-71A4-4D11-9BE1-DF265465D471}] => (Allow) C:\Program Files\Steam\steamapps\common\Spooky Cats\spookycats.exe => No File
FirewallRules: [{3738A4FB-5079-40A4-AF4F-4DAA31E7AE0E}] => (Allow) C:\Program Files\Steam\steamapps\common\Spooky Cats\spookycats.exe => No File
FirewallRules: [{217858C1-FECD-45DA-A002-E659CCF55636}] => (Allow) C:\Program Files\Steam\steamapps\common\Train Valley\train-valley.exe => No File
FirewallRules: [{779293B3-4E6C-4289-94EE-E5350AF1731F}] => (Allow) C:\Program Files\Steam\steamapps\common\Train Valley\train-valley.exe => No File
FirewallRules: [TCP Query User{71F30048-F0A7-4F59-B3E6-7092DC3237DD}C:\users\nintendo\downloads\meriel.exe] => (Allow) C:\users\nintendo\downloads\meriel.exe (Petr Licman) [File not signed]
FirewallRules: [UDP Query User{8174F8B2-D8D7-4AE1-8DED-98D3EBFC0423}C:\users\nintendo\downloads\meriel.exe] => (Allow) C:\users\nintendo\downloads\meriel.exe (Petr Licman) [File not signed]
FirewallRules: [TCP Query User{CBF97333-C92F-4990-AAF4-D70DAF4E7F89}C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe] => (Allow) C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe () [File not signed]
FirewallRules: [UDP Query User{9A15D6F4-797D-4EBB-89C7-F83F7FFC6788}C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe] => (Allow) C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe () [File not signed]
FirewallRules: [TCP Query User{2808263A-7E30-4644-8C25-60ECA4F83272}C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe] => (Allow) C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe () [File not signed]
FirewallRules: [UDP Query User{FAE4B76A-8614-4EB6-A61B-242106BE7692}C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe] => (Allow) C:\users\nintendo\desktop\wii u usb helper 0.6.1.616 rozchodeny\usbhelperlauncher.exe () [File not signed]
FirewallRules: [TCP Query User{1BF6263E-D596-41D5-A468-00D7D3A146AD}C:\program files\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [UDP Query User{83FF9124-D10F-43E9-A5F4-9BFFEABF07A2}C:\program files\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [TCP Query User{A50CC0D0-E723-4F56-9638-38A2DB541E53}C:\program files\qnap\qfinder\qfinderpro.exe] => (Block) C:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [UDP Query User{DF40B048-DD51-46C9-B085-7D9EB077EFE0}C:\program files\qnap\qfinder\qfinderpro.exe] => (Block) C:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [TCP Query User{3ABC42AC-F60B-4D0F-B07A-2CB5EDBDDA5B}D:\program files\qnap\qfinder\qfinderpro.exe] => (Allow) D:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [UDP Query User{B624B899-84C0-46C0-94FD-2CA815502BB4}D:\program files\qnap\qfinder\qfinderpro.exe] => (Allow) D:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [TCP Query User{5627B7CC-4CBB-40F4-B4A1-BCC0E7712C4F}D:\program files\qnap\qfinder\qfinderpro.exe] => (Block) D:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [UDP Query User{672004BD-A0E0-4A44-816B-E54514C82121}D:\program files\qnap\qfinder\qfinderpro.exe] => (Block) D:\program files\qnap\qfinder\qfinderpro.exe => No File
FirewallRules: [TCP Query User{28C79524-8D9B-4386-808A-5E1D65122B60}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{8F3DFEA6-E368-4663-8D18-E705F4C2AEBB}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{A31C65ED-2276-4FBF-8023-5580156DD493}] => (Allow) LPort=5354
FirewallRules: [{EE818312-1472-4C05-A11E-C9CB7E8BEDDB}] => (Allow) LPort=5354
FirewallRules: [{7833C532-5E2E-4F47-A094-4BC3F45D1D0F}] => (Allow) LPort=5354
FirewallRules: [{8919E3B2-D1E3-46AE-A825-255FEE334963}] => (Allow) LPort=5354
FirewallRules: [TCP Query User{6EB5AEDB-FE83-44F9-A544-0FC0E6E4F6FF}C:\program files\java\jre1.8.0_144\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_144\bin\javaw.exe
FirewallRules: [UDP Query User{34FB19BF-155A-45B9-A891-07DD5521F0F5}C:\program files\java\jre1.8.0_144\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_144\bin\javaw.exe
FirewallRules: [{0A845F03-D01E-43BB-8961-52224B7674C4}] => (Allow) C:\Program Files\Sticky Password\stpass.exe (Lamantine Software a.s. -> Lamantine Software a.s.)
FirewallRules: [{5EC9DBAA-686A-4EEF-8BFE-E93CE9F665E9}] => (Allow) C:\Program Files\Sticky Password\stpass.exe (Lamantine Software a.s. -> Lamantine Software a.s.)
FirewallRules: [{CA7463FE-5B0D-4287-88A7-F20542EF7342}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc -> Google Inc.)
FirewallRules: [{2AE752EB-028D-485F-B603-5ECB105548BF}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe => No File
FirewallRules: [{94034491-CEDC-442B-9FDC-CD0FAF6E1EC3}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe => No File
FirewallRules: [{58CFD567-16AB-4884-B6A2-6F5F9CF32EA1}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe (PandoraTV -> PandoraTV)
FirewallRules: [{8E8F3C03-25D9-4509-A8EA-852091FB876E}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe (PandoraTV -> PandoraTV)
FirewallRules: [{4C9017C1-68A3-4461-A154-4DDC5F01BB58}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe (PandoraTV -> Pandora.TV)
FirewallRules: [{65592793-CDFE-404E-900F-7420FBB5F760}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe (PandoraTV -> Pandora.TV)
FirewallRules: [{47F85940-D590-40BE-B602-00E01552FEAF}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe (PandoraTV -> PandoraTV)
FirewallRules: [{EF376F18-7B73-42FD-A340-C4B29D3559CA}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe (PandoraTV -> PandoraTV)
FirewallRules: [{208AABC5-7B15-48F8-B902-3CCDB6C95309}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe (PandoraTV -> Pandora.TV)
FirewallRules: [{F2D93123-B908-45CA-8504-5B28031B8C7A}] => (Allow) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe (PandoraTV -> Pandora.TV)

==================== Restore Points =========================

28-10-2021 13:31:44 Naplánovaný kontrolní bod
27-09-2022 18:25:31 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

Name: Fingerprint Sensor
Description: Fingerprint Sensor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (02/23/2023 04:51:12 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.

Error: (02/23/2023 04:51:05 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.

Error: (02/23/2023 04:51:05 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.

Error: (02/23/2023 04:51:05 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.

Error: (02/23/2023 04:51:05 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.

Error: (02/23/2023 04:50:55 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.

Error: (02/23/2023 04:50:47 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.

Error: (02/23/2023 04:50:46 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 11) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> se nezdařila. Došlo k chybě Certifikační řetěz byl zpracován, ale byl ukončen v kořenovém certifikátu, který nemá důvěru zprostředkovatele důvěryhodnosti.
.


System errors:
=============
Error: (02/22/2023 07:29:42 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/15/2023 07:24:45 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/15/2023 06:12:49 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Avast Cleanup Premium přestala během spouštění reagovat.

Error: (02/15/2023 06:08:15 PM) (Source: Microsoft-Windows-ResourcePublication) (EventID: 1002) (User: NT AUTHORITY)
Description: Event-ID 1002

Error: (02/15/2023 06:06:38 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/15/2023 06:06:29 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Avast Cleanup Premium přestala během spouštění reagovat.

Error: (02/15/2023 06:01:56 PM) (Source: Microsoft-Windows-ResourcePublication) (EventID: 1002) (User: NT AUTHORITY)
Description: Event-ID 1002

Error: (02/14/2023 10:03:03 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Systém zjistil konflikt adresy IP 192.168.0.133 se systémem,
jehož síťová hardwarová adresa je E4-84-D3-19-FE-81. Síťové operace v systému mohou 
být přerušeny.


==================== Memory info =========================== 

BIOS: American Megatrends Inc. 204 03/21/2008
Motherboard: ASUSTeK Computer Inc. M70SR
Processor: Intel(R) Core(TM)2 Duo CPU T8100 @ 2.10GHz
Percentage of memory in use: 69%
Total physical RAM: 3070.29 MB
Available physical RAM: 943.71 MB
Total Virtual: 6345.58 MB
Available Virtual: 3784.05 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:294.09 GB) (Free:146.13 GB) (Model: WDC WD3200BEVT-22ZCT0) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (HDD500GB) (Fixed) (Total:465.76 GB) (Free:402.79 GB) (Model: WDC WD5000BEVT-22ZAT0) NTFS


==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 00016F1E)
Partition 1: (Active) - (Size=294.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=4 GB) - (Type=05)

==========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: A32B7196)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================