Js miner? prosim kontrolu logu

Zpráva

Krkovicka74 · #1 Příspěvek od **Krkovicka74** » 27 kvě 2018 21:18

Dobry den, dnes me synator asi natahl minera do pocitace pres online konverzy you tube vide na mp3. Pocitac po chvilce odpoji monitor, ten hlasi ze nema signal pricemz pc bezi vesele dal. Ukazal me 2 mp3 soubory, ktere ulozil nicmene v pruzkumnikovi zmizela moznost DELETE. Prosim o kontrolu logu pripadne o radu. Dekuji predem.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Vojta at 2018-05-27 21:11:41
Microsoft Windows 10 Home
System drive C: has 1029 GB (54%) free of 1907 GB
Total RAM: 16337 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:11:53, on 27/05/2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Users\Vojta\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Windows\syswow64\MsiExec.exe
C:\Users\Vojta\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Vojta.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://go.microsoft.com/fwlink/p/?Link ... id=UE01DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [KeePass 2 PreLoad] "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Vojta\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [iCloudServices] "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [iCloudPhotos] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Razer Chroma SDK Server - Razer Inc. - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
O23 - Service: Razer Chroma SDK Service - Razer Inc. - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: OpenSSH Authentication Agent (ssh-agent) - Unknown owner - C:\WINDOWS\System32\OpenSSH\ssh-agent.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 11926 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\16ewcldi.default

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Razer Synapse"=C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [2018-04-05 596664]
"ControlCenter3"=C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [2008-12-24 114688]
"BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2012-09-25 2629632]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"KeePass 2 PreLoad"=C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2017-06-09 3191728]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Vojta\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-04-26 1624224]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-10-10 27832264]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2018-03-18 67384]
"iCloudDrive"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2018-03-18 110392]
"iCloudPhotos"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [2018-03-18 356664]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2018-05-19 3200800]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-05-24 18364648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=lvcodec2.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"vidc.mjpg"=bdmjpeg.dll
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-05-27 21:11:42 ----D---- C:\Program Files (x86)\trend micro
2018-05-27 21:11:41 ----D---- C:\rsit
2018-05-27 16:58:28 ----D---- C:\ProgramData\Malwarebytes
2018-05-27 16:56:31 ----HD---- C:\OneDriveTemp
2018-05-27 16:12:47 ----SHD---- C:\Config.Msi
2018-05-27 15:28:15 ----D---- C:\Program Files (x86)\Bonjour
2018-05-17 18:31:29 ----D---- C:\Users\Vojta\AppData\Roaming\AVAST Software
2018-05-17 18:18:59 ----D---- C:\ProgramData\AVAST Software
2018-05-17 15:44:49 ----D---- C:\ProgramData\Microsoft OneDrive
2018-05-17 14:32:23 ----D---- C:\Windows.old
2018-05-17 13:42:09 ----ASH---- C:\hiberfil.sys
2018-05-17 13:38:38 ----SD---- C:\Users\Vojta\AppData\Roaming\Microsoft
2018-05-17 13:37:17 ----A---- C:\WINDOWS\SysWOW64\vulkaninfo.exe
2018-05-17 13:37:17 ----A---- C:\WINDOWS\SysWOW64\vulkan-1.dll
2018-05-17 13:37:17 ----A---- C:\WINDOWS\SysWOW64\nvStreaming.exe
2018-05-17 13:37:16 ----D---- C:\Program Files (x86)\VulkanRT
2018-05-17 13:37:06 ----D---- C:\ProgramData\USOShared
2018-05-17 13:36:59 ----A---- C:\WINDOWS\SysWOW64\OpenCL.dll
2018-05-17 13:36:26 ----A---- C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-05-17 13:34:46 ----D---- C:\WINDOWS\Prefetch
2018-05-16 10:53:38 ----AS---- C:\WINDOWS\bootstat.dat
2018-05-16 10:52:21 ----D---- C:\WINDOWS\ServiceProfiles
2018-05-16 10:47:26 ----A---- C:\WINDOWS\SysWOW64\wmp.dll
2018-05-16 10:46:54 ----A---- C:\WINDOWS\SysWOW64\jscript.dll
2018-05-16 10:46:53 ----A---- C:\WINDOWS\SysWOW64\mshtml.dll
2018-05-16 10:46:53 ----A---- C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-05-16 10:46:53 ----A---- C:\WINDOWS\SysWOW64\jscript9.dll
2018-05-16 10:46:53 ----A---- C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-05-16 10:46:53 ----A---- C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-05-16 10:46:52 ----A---- C:\WINDOWS\SysWOW64\edgehtml.dll
2018-05-16 10:46:51 ----A---- C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-05-16 10:46:51 ----A---- C:\WINDOWS\SysWOW64\msfeeds.dll
2018-05-16 10:46:51 ----A---- C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-05-16 10:46:51 ----A---- C:\WINDOWS\SysWOW64\Chakra.dll
2018-05-16 10:46:50 ----A---- C:\WINDOWS\SysWOW64\ieframe.dll
2018-05-16 10:46:40 ----A---- C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-05-16 10:46:40 ----A---- C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-05-16 10:46:40 ----A---- C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-05-16 10:46:39 ----A---- C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-05-16 10:46:39 ----A---- C:\WINDOWS\SysWOW64\mstscax.dll
2018-05-16 10:46:38 ----A---- C:\WINDOWS\SysWOW64\shell32.dll
2018-05-16 10:46:37 ----A---- C:\WINDOWS\SysWOW64\vbscript.dll
2018-05-16 10:46:37 ----A---- C:\WINDOWS\SysWOW64\rasapi32.dll
2018-05-16 10:46:36 ----A---- C:\WINDOWS\SysWOW64\wininet.dll
2018-05-16 10:46:36 ----A---- C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-16 10:46:36 ----A---- C:\WINDOWS\SysWOW64\urlmon.dll
2018-05-16 10:46:36 ----A---- C:\WINDOWS\SysWOW64\iertutil.dll
2018-05-16 10:46:35 ----A---- C:\WINDOWS\SysWOW64\itss.dll
2018-05-16 10:46:35 ----A---- C:\WINDOWS\SysWOW64\gdi32full.dll
2018-05-16 10:46:33 ----A---- C:\WINDOWS\SysWOW64\comsvcs.dll
2018-05-16 10:46:32 ----A---- C:\WINDOWS\SysWOW64\dwmcore.dll
2018-05-16 10:46:27 ----A---- C:\WINDOWS\SysWOW64\windows.storage.dll
2018-05-16 10:46:27 ----A---- C:\WINDOWS\SysWOW64\rdpbase.dll
2018-05-16 10:46:27 ----A---- C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-05-16 10:46:26 ----A---- C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-05-16 10:46:14 ----A---- C:\WINDOWS\SysWOW64\cdp.dll
2018-05-16 10:46:13 ----A---- C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-05-16 10:46:13 ----A---- C:\WINDOWS\SysWOW64\tquery.dll
2018-05-16 10:46:13 ----A---- C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-05-16 10:45:52 ----A---- C:\WINDOWS\SysWOW64\dbgeng.dll
2018-05-16 10:45:51 ----A---- C:\WINDOWS\SysWOW64\WerFault.exe
2018-05-16 10:45:51 ----A---- C:\WINDOWS\SysWOW64\wer.dll
2018-05-16 10:45:50 ----A---- C:\WINDOWS\SysWOW64\tzres.dll
2018-05-16 10:45:50 ----A---- C:\WINDOWS\SysWOW64\oleaut32.dll
2018-05-16 10:45:48 ----A---- C:\WINDOWS\SysWOW64\wuapi.dll
2018-05-16 10:45:48 ----A---- C:\WINDOWS\SysWOW64\win32kfull.sys
2018-05-16 10:45:48 ----A---- C:\WINDOWS\SysWOW64\TSpkg.dll
2018-05-16 10:45:48 ----A---- C:\WINDOWS\SysWOW64\credssp.dll
2018-05-16 10:45:47 ----A---- C:\WINDOWS\SysWOW64\msxml3.dll
2018-05-16 10:45:46 ----A---- C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-05-16 10:28:06 ----A---- C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-05-16 10:28:05 ----A---- C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-05-16 10:28:03 ----A---- C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-05-16 10:27:21 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-05-16 10:27:21 ----D---- C:\Program Files (x86)\MSBuild
2018-05-16 10:26:20 ----A---- C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-05-16 10:26:19 ----A---- C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-05-16 10:26:19 ----A---- C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-16 09:18:15 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2018-05-27 21:11:42 ----RD---- C:\Program Files (x86)
2018-05-27 21:11:29 ----SHDC---- C:\WINDOWS\Installer
2018-05-27 21:11:25 ----D---- C:\WINDOWS\System32
2018-05-27 21:11:24 ----D---- C:\WINDOWS\INF
2018-05-27 21:11:22 ----D---- C:\WINDOWS\Temp
2018-05-27 21:09:38 ----SHD---- C:\System Volume Information
2018-05-27 21:07:59 ----D---- C:\Program Files (x86)\Steam
2018-05-27 21:06:07 ----D---- C:\WINDOWS\AppReadiness
2018-05-27 21:06:07 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-05-27 21:05:57 ----D---- C:\ProgramData\NVIDIA
2018-05-27 16:58:28 ----RD---- C:\Program Files
2018-05-27 16:58:28 ----HD---- C:\ProgramData
2018-05-27 16:41:53 ----D---- C:\Users\Vojta\AppData\Roaming\TS3Client
2018-05-27 16:38:11 ----D---- C:\Users\Vojta\AppData\Roaming\Apple Computer
2018-05-27 16:17:56 ----D---- C:\Program Files (x86)\Common Files\Steam
2018-05-27 15:29:30 ----D---- C:\ProgramData\Apple Computer
2018-05-27 15:28:27 ----D---- C:\ProgramData\Apple
2018-05-27 15:28:20 ----D---- C:\Program Files (x86)\Common Files\Apple
2018-05-27 15:28:15 ----D---- C:\WINDOWS\SysWOW64
2018-05-27 14:27:29 ----D---- C:\Users\Vojta\AppData\Roaming\Skype
2018-05-26 21:10:48 ----D---- C:\WINDOWS\Logs
2018-05-26 21:10:24 ----RD---- C:\WINDOWS\Microsoft.NET
2018-05-25 14:44:30 ----D---- C:\Program Files (x86)\NoSimplerAccounting 8.1
2018-05-24 16:56:12 ----D---- C:\WINDOWS\CbsTemp
2018-05-24 16:55:24 ----D---- C:\WINDOWS\WinSxS
2018-05-24 01:24:30 ----AD---- C:\Program Files (x86)\TeamViewer
2018-05-23 12:41:01 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-23 12:41:01 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2018-05-20 15:52:05 ----D---- C:\Windows
2018-05-18 15:58:38 ----RD---- C:\WINDOWS\assembly
2018-05-18 10:06:36 ----D---- C:\WINDOWS\SoftwareDistribution
2018-05-18 04:13:51 ----D---- C:\WINDOWS\appcompat
2018-05-17 22:53:11 ----D---- C:\WINDOWS\LiveKernelReports
2018-05-17 22:53:11 ----D---- C:\WINDOWS\debug
2018-05-17 15:46:03 ----RD---- C:\WINDOWS\PrintDialog
2018-05-17 14:32:38 ----RSD---- C:\WINDOWS\Fonts
2018-05-17 14:32:37 ----D---- C:\WINDOWS\SysWOW64\Macromed
2018-05-17 14:32:34 ----D---- C:\WINDOWS\SHELLNEW
2018-05-17 14:32:32 ----D---- C:\WINDOWS\Help
2018-05-17 14:32:31 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2018-05-17 14:32:31 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-17 14:32:31 ----AD---- C:\Program Files (x86)\Razer
2018-05-17 14:32:30 ----D---- C:\Program Files (x86)\Common Files\system
2018-05-17 14:32:30 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2018-05-17 14:32:30 ----D---- C:\Program Files (x86)\Common Files
2018-05-17 14:32:20 ----D---- C:\WINDOWS\Setup
2018-05-17 14:17:31 ----SD---- C:\ProgramData\Microsoft
2018-05-17 13:55:09 ----D---- C:\WINDOWS\Tasks
2018-05-17 13:54:02 ----D---- C:\WINDOWS\Registration
2018-05-17 13:48:48 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-05-17 13:38:38 ----RD---- C:\Users
2018-05-17 13:37:35 ----D---- C:\ProgramData\NVIDIA Corporation
2018-05-17 13:37:06 ----D---- C:\ProgramData\USOPrivate
2018-05-17 13:35:52 ----D---- C:\Program Files (x86)\Common Files\logishrd
2018-05-17 13:34:26 ----SHD---- C:\Recovery
2018-05-16 10:59:07 ----D---- C:\WINDOWS\twain_32
2018-05-16 10:55:12 ----D---- C:\Program Files (x86)\Windows Mail
2018-05-16 10:49:29 ----D---- C:\WINDOWS\TextInput
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\zu-ZA
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\yo-NG
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\xh-ZA
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\wo-SN
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\vi-VN
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\ur-PK
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\ug-CN
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\tt-RU
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\tn-ZA
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\tk-TM
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\ti-ET
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\te-IN
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\ta-IN
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\sw-KE
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\sq-AL
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\si-LK
2018-05-16 10:49:29 ----D---- C:\WINDOWS\SysWOW64\setup
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\rw-RW
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\quz-PE
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\prs-AF
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\pa-IN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\or-IN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\nso-ZA
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\nn-NO
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ne-NP
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\mt-MT
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ms-MY
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\mr-IN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\mn-MN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ml-IN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\mk-MK
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\mi-NZ
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\lo-LA
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\lb-LU
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ky-KG
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\kok-IN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\kn-IN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\km-KH
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\kk-KZ
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ka-GE
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\is-IS
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ig-NG
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\id-ID
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\hy-AM
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\gu-IN
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\gd-GB
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\ga-IE
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\fil-PH
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\fa-IR
2018-05-16 10:49:28 ----D---- C:\WINDOWS\SysWOW64\en-GB
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\cy-GB
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\chr-CHER-US
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\bn-IN
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\bn-BD
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\be-BY
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\as-IN
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\am-ET
2018-05-16 10:49:27 ----D---- C:\WINDOWS\SysWOW64\af-ZA
2018-05-16 10:49:25 ----D---- C:\WINDOWS\Provisioning
2018-05-16 10:49:24 ----D---- C:\WINDOWS\bcastdvr
2018-05-16 10:49:24 ----D---- C:\WINDOWS\apppatch
2018-05-16 10:49:24 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-05-16 10:28:18 ----D---- C:\WINDOWS\SysWOW64\zh-TW
2018-05-16 10:28:18 ----D---- C:\WINDOWS\SysWOW64\zh-CN
2018-05-16 10:28:18 ----D---- C:\WINDOWS\SysWOW64\uk-UA
2018-05-16 10:28:18 ----D---- C:\WINDOWS\SysWOW64\tr-TR
2018-05-16 10:28:18 ----D---- C:\WINDOWS\SysWOW64\th-TH
2018-05-16 10:28:18 ----D---- C:\WINDOWS\SysWOW64\sv-SE
2018-05-16 10:28:18 ----D---- C:\WINDOWS\SysWOW64\sr-Latn-RS
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\sl-SI
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\sk-SK
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\ru-RU
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\ro-RO
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\pt-PT
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\pt-BR
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\pl-PL
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\nl-NL
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\nb-NO
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\lv-LV
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\lt-LT
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\ko-KR
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\ja-JP
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\it-IT
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\hu-HU
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\hr-HR
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\he-IL
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\fr-FR
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\fr-CA
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\fi-FI
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\et-EE
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\es-MX
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\es-ES
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\en-US
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\el-GR
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\de-DE
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\da-DK
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\cs-CZ
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\bg-BG
2018-05-16 10:28:17 ----D---- C:\WINDOWS\SysWOW64\ar-SA
2018-05-16 10:23:34 ----D---- C:\WINDOWS\OCR
2018-05-01 22:22:36 ----A---- C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-04-30 15:27:14 ----SHD---- C:\$Recycle.Bin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys []
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys []
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys []
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys []
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys []
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys []
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys []
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys []
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 29696]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys []
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys []
R1 aswHdsKe;aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys []
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys []
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys []
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys []
R1 ESProtectionDriver;Malwarebytes Anti-Exploit; \??\C:\WINDOWS\system32\drivers\mbae64.sys []
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys []
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys []
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys []
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys []
R2 MBAMChameleon;MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys []
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys []
R2 rzpmgrk;rzpmgrk; \??\C:\WINDOWS\system32\drivers\rzpmgrk.sys []
R2 rzpnk;rzpnk; \??\C:\WINDOWS\system32\drivers\rzpnk.sys []
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athw8x.sys []
R3 lvrs64;@oem84.inf,%lvrs.SrvDesc%;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs64.sys []
R3 LVUVC64;@oem60.inf,%PID_082D_DD%(UVC);Logitech HD Pro Webcam C920(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc64.sys []
R3 MBAMFarflt;MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys []
R3 MBAMProtection;MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys []
R3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys []
R3 MBAMWebProtection;MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys []
R3 MEIx64;@oem93.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys []
R3 NVHDA;@oem72.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys []
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdc.inf_amd64_2707c70d42c54b4e\nvlddmkm.sys [2018-02-01 17036560]
R3 nvvad_WaveExtensible;@oem21.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys []
R3 nvvhci;@oem40.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\WINDOWS\System32\drivers\nvvhci.sys []
R3 rt640x64;@oem17.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys []
R3 rzendpt;@oem34.inf,%rzendpt.SvcDesc%;rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys []
R3 rzmpos;@oem6.inf,%rzmpos.SvcDesc%;rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys []
R3 rzudd;@oem7.inf,%Razer.SvcDesc%;Razer Keyboard Driver; C:\WINDOWS\System32\drivers\rzudd.sys []
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys []
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys []
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys []
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys []
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys []
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys []
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys []
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys []
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys []
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys []
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys []
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys []
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys []
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys []
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys []
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys []
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys []
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys []
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys []
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys []
S3 CorsairVBusDriver;Corsair Bus; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys []
S3 CorsairVHidDriver;Corsair virtual device; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\System32\drivers\ssudbus.sys []
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys []
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys []
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys []
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys []
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys []
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys []
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys []
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys []
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys []
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys []
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys []
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys []
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys []
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys []
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys []
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys []
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys []
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys []
S3 Netaapl;@oem75.inf,%Netaapl.Service.DispName%;Apple Mobile Device Ethernet Service; C:\WINDOWS\System32\drivers\netaapl64.sys []
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys []
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys []
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-10-11 30144]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver; C:\WINDOWS\System32\drivers\nvstusb.sys []
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys []
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys []
S3 ReFSv1;ReFSv1; C:\WINDOWS\SysWOW64\drivers\ReFSv1.sys []
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys []
S3 rzbtendpt;Razer Bluetooth End Point; C:\WINDOWS\System32\drivers\rzbtendpt.sys []
S3 rzdaendpt;Razer DeathAdder end point; C:\WINDOWS\System32\drivers\rzdaendpt.sys []
S3 rzhnet;Razer Inc. External Display Driver; C:\WINDOWS\System32\Drivers\rzhnet.sys []
S3 rzjstk;Razer Virtual Joystick Driver; C:\WINDOWS\System32\drivers\rzjstk.sys []
S3 rzkeypadendpt;Razer Keypad Endpoint; C:\WINDOWS\System32\drivers\rzkeypadendpt.sys []
S3 rzp1endpt;Razer platform 1 end point; C:\WINDOWS\System32\drivers\rzp1endpt.sys []
S3 rzvkeyboard;Razer Virtual Keyboard Driver; C:\WINDOWS\System32\drivers\rzvkeyboard.sys []
S3 rzvmouse;Razer Virtual Mouse; C:\WINDOWS\System32\drivers\rzvmouse.sys []
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys []
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2018-03-29 83768]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-05-17 317280]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
R2 CDPUserSvc_6e777;Connected Devices Platform User Service_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2018-05-09 6541008]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518080]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-12-19 463856]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-10-11 460736]
R2 OneSyncSvc_6e777;Sync Host_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
R2 Razer Chroma SDK Server;Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2018-01-10 439936]
R2 Razer Chroma SDK Service;Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [2018-01-10 943232]
R2 Razer Game Scanner Service;Razer Game Scanner; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [2018-03-14 189776]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe []
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe []
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2018-05-17 7620096]
R3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2010-01-25 245760]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
R3 PimIndexMaintenanceSvc_6e777;Contact Data_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-02 153168]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-08 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 BcastDVRUserService_6e777;GameDVR and Broadcast User Service_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 BluetoothUserService_6e777;Bluetooth User Support Service_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 DevicePickerUserSvc_6e777;DevicePicker_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 DevicesFlowUserSvc_6e777;DevicesFlow_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe []
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-16 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-02 153168]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 MessagingService_6e777;MessagingService_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-05-20 194512]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11 518080]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 PrintWorkflowUserSvc_6e777;PrintWorkflow_6e777; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe []
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 44520]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 44520]

-----------------EOF-----------------

#2 Příspěvek od **Conder** » 27 kvě 2018 21:49

Ahoj

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

Uloz na plochu a ukonci vsetky programy
Spusti AdwCleaner ako spravca
Odsuhlas licencne podmienky
Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
Otvori sa log, jeho obsah sem skopiruj

Krkovicka74 · #3 Příspěvek od **Krkovicka74** » 28 kvě 2018 00:19

Dik za ochotu, jinak tesne predtim, nez me to zaclo zlobit jsem nainstaloval Itunes , po odinstalaci uz se monitor nevypina, nahoda? netusim. Kazdopadne rad bych mel jistotu.

# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build: 04-27-2018
# Database: 2018-05-22.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 05-28-2018
# Duration: 00:00:04
# OS: Windows 10 Home
# Cleaned: 1
# Failed: 0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted Ask Jeeves

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build: 04-27-2018
# Database: 2018-05-22.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 05-28-2018
# Duration: 00:00:08
# OS: Windows 10 Home
# Scanned: 40907
# Detected: 1

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

PUP.Optional.Legacy Ask Jeeves

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

#4 Příspěvek od **Conder** » 28 kvě 2018 13:25

Poprosim o obidva logy z FRST podla tohto navodu (FRST.txt a Addition.txt): https://forum.viry.cz/viewtopic.php?f=13&t=152707

V pripade, ze sa FRSTLauncher nebude dat stiahnut alebo spustit, pouzi iba samotny FRST.

Ak sa logy nezmestia do jedneho prispevku, zabal ich do archivu RAR alebo ZIP a posli ako prilohu.

Krkovicka74 · #5 Příspěvek od **Krkovicka74** » 29 kvě 2018 08:35

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01
Ran by Vojta (administrator) on DESKTOP-U0OP3R8 (29-05-2018 08:29:53)
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Platform: Windows 10 Home Version 1803 17134.48 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9226.21755.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1805.1201.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9226.21755.0_x64__8wekyb3d8bbwe\HxOutlook.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-17] (AVAST Software)
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596664 2018-04-05] (Razer Inc.)
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2012-09-25] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3191728 2017-06-09] (Dominik Reichl)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.)
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-03-18] (Apple Inc.)
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-03-18] (Apple Inc.)
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2018-03-18] (Apple Inc.)
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3200800 2018-05-19] (Valve Corporation)
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18364648 2018-05-24] (Piriform Ltd)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100
Tcpip\..\Interfaces\{12738d95-92de-493c-8ef0-6aec3a6c8f3c}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{c941b0b7-39ed-45d4-a7ce-67f761943e46}: [DhcpNameServer] 194.168.4.100 194.168.8.100

Internet Explorer:
==================
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-544496811-3946357240-1027464502-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 16ewcldi.default
FF ProfilePath: C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\16ewcldi.default [2018-05-29]
FF Extension: (Flash and Video Download) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\16ewcldi.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}.xpi [2018-05-28]
FF Extension: (TLS 1.3 gradual roll-out fallback-limit) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\16ewcldi.default\features\{4d3cef8d-6f50-41ff-9b2e-f180813ee493}\tls13-version-fallback-rollout-bug1462099@mozilla.org.xpi [2018-05-27] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll [2018-05-08] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll [2018-05-08] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)

Chrome:
=======
CHR Profile: C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default [2018-05-28]
CHR Extension: (Slides) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (Docs) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Google Drive) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-02]
CHR Extension: (YouTube) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-02]
CHR Extension: (Sheets) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (Google Docs Offline) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-02]
CHR Extension: (Chrome Media Router) - C:\Users\Vojta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-29]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-03-29] (Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-17] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-17] (AVAST Software)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [439936 2018-01-10] (Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [943232 2018-01-10] (Razer Inc.)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189776 2018-03-14] ()
S3 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2018-03-01] (TeamViewer GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\NisSrv.exe [4632736 2018-04-25] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MsMpEng.exe [104680 2018-04-25] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [196640 2018-05-17] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [227504 2018-05-17] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199440 2018-05-17] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343752 2018-05-17] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57680 2018-05-17] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [234560 2018-05-17] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46968 2018-05-17] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [159120 2018-05-17] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111360 2018-05-17] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [85968 2018-05-17] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1027720 2018-05-17] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460520 2018-05-17] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [205976 2018-05-17] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [381552 2018-05-17] (AVAST Software)
S3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47840 2016-01-20] (Corsair)
S3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21728 2016-01-20] (Corsair)
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdc.inf_amd64_2707c70d42c54b4e\nvlddmkm.sys [17036560 2018-02-01] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-10-06] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [896752 2015-08-07] (Realtek )
S3 rzbtendpt; C:\WINDOWS\System32\drivers\rzbtendpt.sys [52240 2016-10-30] (Razer Inc)
S3 rzdaendpt; C:\WINDOWS\System32\drivers\rzdaendpt.sys [42000 2016-10-30] (Razer Inc)
R3 rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [52240 2016-10-30] (Razer Inc)
S3 rzhnet; C:\WINDOWS\System32\Drivers\rzhnet.sys [29712 2016-10-30] (Razer Inc)
S3 rzjstk; C:\WINDOWS\System32\drivers\rzjstk.sys [36376 2016-10-30] (Razer Inc)
S3 rzkeypadendpt; C:\WINDOWS\System32\drivers\rzkeypadendpt.sys [45592 2016-10-30] (Razer Inc)
R3 rzmpos; C:\WINDOWS\System32\drivers\rzmpos.sys [48144 2016-10-30] (Razer Inc)
S3 rzp1endpt; C:\WINDOWS\System32\drivers\rzp1endpt.sys [52240 2016-10-30] (Razer Inc)
R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [44160 2018-03-14] (Razer, Inc.)
R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [140040 2018-03-20] (Razer, Inc.)
S3 rzvkeyboard; C:\WINDOWS\System32\drivers\rzvkeyboard.sys [44048 2016-10-30] (Razer Inc)
S3 rzvmouse; C:\WINDOWS\System32\drivers\rzvmouse.sys [44048 2016-10-30] (Razer Inc)
S3 ssudcdf; C:\WINDOWS\System32\drivers\ssudcdf.sys [36608 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssuddmgr; C:\WINDOWS\System32\drivers\ssuddmgr.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudobex; C:\WINDOWS\System32\drivers\ssudobex.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64640 2016-07-22] (QUALCOMM Incorporated)
S3 ssudrmnet; C:\WINDOWS\System32\drivers\ssudrmnet.sys [70400 2014-01-22] (DEVGURU Co., LTD.)
S3 ssudserd; C:\WINDOWS\System32\drivers\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ss_conn_usb_driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [26368 2014-01-22] (DEVGURU Co., LTD.)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [467368 2017-05-28] (IDRIX)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2018-04-25] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [313888 2018-04-25] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61472 2018-04-25] (Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-06] (Intel Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-29 08:29 - 2018-05-29 08:31 - 000018730 _____ C:\Users\Vojta\Desktop\FRST.txt
2018-05-29 08:29 - 2018-05-29 08:29 - 000000000 ____D C:\FRST
2018-05-28 14:37 - 2018-05-28 14:37 - 002413056 _____ (Farbar) C:\Users\Vojta\Desktop\FRST64.exe
2018-05-28 11:14 - 2018-05-28 11:14 - 001777331 _____ C:\Users\Vojta\Downloads\MA_jaro_2018_DT.pdf
2018-05-28 11:06 - 2018-05-28 11:06 - 000000000 ___HD C:\OneDriveTemp
2018-05-28 00:10 - 2018-05-28 00:11 - 000000000 ____D C:\AdwCleaner
2018-05-27 22:24 - 2018-05-27 22:24 - 000001870 _____ C:\Users\Vojta\Documents\Hesla.kdbx
2018-05-27 22:00 - 2018-05-27 22:00 - 007271632 _____ (Malwarebytes) C:\Users\Vojta\Desktop\adwcleaner_7.1.1.exe
2018-05-27 21:11 - 2018-05-27 21:11 - 000000000 ____D C:\rsit
2018-05-27 21:11 - 2018-05-27 21:11 - 000000000 ____D C:\Program Files (x86)\trend micro
2018-05-27 21:10 - 2018-05-27 21:10 - 001107968 _____ C:\Users\Vojta\Downloads\RSIT.exe
2018-05-27 16:49 - 2018-05-27 16:49 - 075629776 _____ (Malwarebytes ) C:\Users\Vojta\Downloads\mb3-setup-consumer-3.5.1.2522-1.0.365-1.0.5188.exe
2018-05-27 15:35 - 2018-05-27 15:47 - 037777760 _____ C:\Users\Vojta\Downloads\Pop Latino 2017 - Lo Mas Nuevo! Pitbull, Enrique Iglesias, Nicky Jam, Sebastian Yatra [144p].3gp
2018-05-27 15:28 - 2018-05-27 15:28 - 000000000 ____D C:\Program Files\Bonjour
2018-05-27 15:28 - 2018-05-27 15:28 - 000000000 ____D C:\Program Files (x86)\Bonjour
2018-05-27 15:21 - 2018-05-27 15:21 - 272046408 _____ (Apple Inc.) C:\Users\Vojta\Downloads\iTunes64Setup.exe
2018-05-25 17:21 - 2018-05-25 17:21 - 000042893 _____ C:\Users\Vojta\Downloads\a4menunew2015colour.pdf
2018-05-25 15:34 - 2018-05-25 15:34 - 001157787 _____ C:\Users\Vojta\Downloads\Statement_3548_May-18.pdf
2018-05-24 00:14 - 2018-05-24 00:14 - 000771061 _____ C:\Users\Vojta\Downloads\late-entry-with addendum-030518.pdf
2018-05-24 00:12 - 2018-05-24 00:12 - 008093848 _____ C:\Users\Vojta\Downloads\AH_West_Yorkshire_Medium_Res.pdf
2018-05-22 22:14 - 2018-05-22 22:14 - 000012981 _____ C:\Users\Vojta\Downloads\Remittance(53444)-Vojtech Vojtech(1).pdf
2018-05-21 16:18 - 2018-05-21 16:18 - 004036088 _____ C:\Users\Vojta\Downloads\zpravodaj_05-18.pdf
2018-05-17 23:15 - 2018-05-17 23:15 - 000121236 _____ C:\WINDOWS\system32\cc_20180517_231512.reg
2018-05-17 18:31 - 2018-05-17 18:31 - 000000000 ____D C:\Users\Vojta\AppData\Roaming\AVAST Software
2018-05-17 18:22 - 2018-05-17 18:22 - 000001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2018-05-17 18:22 - 2018-05-17 18:22 - 000001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-05-17 18:21 - 2018-05-29 08:29 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2018-05-17 18:21 - 2018-05-17 18:21 - 000003990 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-05-17 18:21 - 2018-05-17 18:20 - 000460520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2018-05-17 18:21 - 2018-05-17 18:20 - 000381552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-05-17 18:21 - 2018-05-17 18:20 - 000205976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2018-05-17 18:21 - 2018-05-17 18:20 - 000196640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-05-17 18:21 - 2018-05-17 18:20 - 000159120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2018-05-17 18:21 - 2018-05-17 18:20 - 000111360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2018-05-17 18:21 - 2018-05-17 18:20 - 000085968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-05-17 18:21 - 2018-05-17 18:20 - 000046968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-05-17 18:21 - 2018-05-17 18:19 - 001027720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2018-05-17 18:21 - 2018-05-17 18:19 - 000343752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2018-05-17 18:21 - 2018-05-17 18:19 - 000234560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2018-05-17 18:21 - 2018-05-17 18:19 - 000227504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2018-05-17 18:21 - 2018-05-17 18:19 - 000199440 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2018-05-17 18:21 - 2018-05-17 18:19 - 000057680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2018-05-17 18:20 - 2018-05-17 18:20 - 000376536 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2018-05-17 18:20 - 2018-05-17 18:20 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2018-05-17 18:19 - 2018-05-17 18:19 - 000000000 ____D C:\Program Files\AVAST Software
2018-05-17 18:18 - 2018-05-29 08:29 - 000002988 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-05-17 18:18 - 2018-05-29 08:29 - 000002218 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-05-17 18:18 - 2018-05-27 16:12 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-05-17 18:18 - 2018-05-17 20:04 - 000000000 ____D C:\ProgramData\AVAST Software
2018-05-17 18:18 - 2018-05-17 18:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-05-17 18:18 - 2018-05-17 18:18 - 000000000 ____D C:\Program Files\CCleaner
2018-05-17 18:17 - 2018-05-17 18:17 - 015813432 _____ (Piriform Ltd) C:\Users\Vojta\Downloads\ccsetup542.exe
2018-05-17 18:17 - 2018-05-17 18:17 - 015813432 _____ (Piriform Ltd) C:\Users\Vojta\Downloads\ccsetup542(1).exe
2018-05-17 15:56 - 2018-05-17 21:53 - 000000000 ____D C:\Users\Vojta\AppData\Local\PlaceholderTileLogoFolder
2018-05-17 15:47 - 2018-05-17 21:46 - 000000000 ____D C:\Users\Vojta\AppData\Local\D3DSCache
2018-05-17 15:44 - 2018-05-17 15:44 - 000001417 _____ C:\Users\Vojta\Desktop\Microsoft Edge.lnk
2018-05-17 15:44 - 2018-05-17 15:44 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-05-17 14:32 - 2018-05-28 15:31 - 000000000 ____D C:\Windows.old
2018-05-17 13:56 - 2018-05-17 13:56 - 000000020 ___SH C:\Users\Vojta\ntuser.ini
2018-05-17 13:55 - 2018-05-29 08:29 - 000003750 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-05-17 13:55 - 2018-05-29 08:29 - 000003446 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-05-17 13:55 - 2018-05-29 08:29 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-29 08:29 - 000003346 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-17 13:55 - 2018-05-29 08:29 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-29 08:29 - 000003122 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-17 13:55 - 2018-05-29 08:29 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-29 08:29 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-29 08:29 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-29 08:29 - 000002856 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-544496811-3946357240-1027464502-1001
2018-05-17 13:55 - 2018-05-29 08:29 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-29 08:29 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-29 08:29 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-05-17 13:55 - 2018-05-28 00:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-05-17 13:55 - 2018-05-17 13:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2018-05-17 13:55 - 2018-05-17 13:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2018-05-17 13:54 - 2018-05-17 13:55 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2018-05-17 13:54 - 2018-05-17 13:55 - 000007623 _____ C:\WINDOWS\diagerr.xml
2018-05-17 13:48 - 2018-05-28 00:19 - 000838560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-05-17 13:40 - 2018-05-17 13:40 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-05-17 13:38 - 2018-05-28 00:11 - 000000000 ____D C:\Users\Vojta
2018-05-17 13:38 - 2018-04-12 00:34 - 000001105 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-05-17 13:37 - 2018-05-17 13:37 - 000000000 ____D C:\ProgramData\USOShared
2018-05-17 13:37 - 2018-05-17 13:37 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-05-17 13:37 - 2017-12-19 03:51 - 000137200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2018-05-17 13:37 - 2017-09-14 00:20 - 000798008 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2018-05-17 13:37 - 2017-09-14 00:20 - 000490296 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2018-05-17 13:37 - 2017-09-14 00:19 - 000927544 _____ C:\WINDOWS\system32\vulkan-1.dll
2018-05-17 13:37 - 2017-09-14 00:19 - 000591160 _____ C:\WINDOWS\system32\vulkaninfo.exe
2018-05-17 13:36 - 2018-04-12 00:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-05-17 13:36 - 2018-02-01 14:16 - 000541456 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2018-05-17 13:36 - 2018-02-01 14:16 - 000447248 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2018-05-17 13:33 - 2018-05-29 08:21 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-05-17 13:33 - 2018-05-17 13:42 - 000413312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-16 10:55 - 2018-05-17 14:32 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-05-16 10:52 - 2018-05-16 10:55 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-05-16 10:47 - 2018-05-16 10:47 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-05-16 10:47 - 2018-05-16 10:47 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 025848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 022707712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 022002688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 019399168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 012712960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 009159064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-05-16 10:46 - 2018-05-16 10:46 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 007583232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 006569952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 005782528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 003732800 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 003440640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 003389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002700800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002486976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002422168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-05-16 10:46 - 2018-05-16 10:46 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 002170368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001664512 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001636352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001634800 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001456616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-05-16 10:46 - 2018-05-16 10:46 - 001454016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-05-16 10:46 - 2018-05-16 10:46 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001191168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 001034624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-05-16 10:46 - 2018-05-16 10:46 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-05-16 10:46 - 2018-05-16 10:46 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000786168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2018-05-16 10:46 - 2018-05-16 10:46 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2018-05-16 10:46 - 2018-05-16 10:46 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000559968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-05-16 10:46 - 2018-05-16 10:46 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 007436624 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 003655168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 003283400 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 002897408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 002835864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 001174424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-05-16 10:45 - 2018-05-16 10:45 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 001063320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-05-16 10:45 - 2018-05-16 10:45 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-05-16 10:45 - 2018-05-16 10:45 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000885848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000733992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000709816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-05-16 10:45 - 2018-05-16 10:45 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000567136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2018-05-16 10:45 - 2018-05-16 10:45 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2018-05-16 10:45 - 2018-05-16 10:45 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000272288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000269216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-05-16 10:45 - 2018-05-16 10:45 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-05-16 10:45 - 2018-05-16 10:45 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2018-05-16 10:28 - 2018-05-16 10:28 - 006472704 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0005.dll
2018-05-16 10:28 - 2018-05-16 10:28 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-05-16 10:28 - 2018-05-16 10:28 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-05-16 10:28 - 2018-05-16 10:28 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2018-05-16 10:28 - 2018-05-16 10:28 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-05-16 10:28 - 2018-05-16 10:28 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2018-05-16 10:28 - 2018-05-16 10:28 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-05-16 10:28 - 2018-05-16 10:28 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2018-05-16 10:28 - 2018-05-16 10:28 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2018-05-16 10:27 - 2018-05-17 14:32 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-05-16 10:27 - 2018-05-16 10:27 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-05-16 10:27 - 2018-05-16 10:27 - 000000000 ____D C:\Program Files\MSBuild
2018-05-16 10:27 - 2018-05-16 10:27 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-05-16 10:26 - 2018-05-16 10:26 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-16 10:26 - 2018-05-16 10:26 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-05-16 10:26 - 2018-05-16 10:26 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-16 10:26 - 2018-05-16 10:26 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-16 10:26 - 2018-05-16 10:26 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-05-16 10:26 - 2018-05-16 10:26 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-16 10:10 - 2018-05-16 10:10 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-05-16 09:18 - 2018-05-17 22:53 - 000000000 ___DC C:\WINDOWS\Panther
2018-05-08 16:04 - 2018-03-14 20:12 - 000044160 _____ (Razer, Inc.) C:\WINDOWS\system32\Drivers\rzpmgrk.sys
2018-05-04 20:23 - 2018-05-25 22:00 - 000111104 _____ C:\Users\Vojta\Desktop\Mirek Invoice.pub
2018-05-04 20:23 - 2018-05-04 20:23 - 000056775 _____ C:\Users\Vojta\Downloads\Scan_20180424.pdf
2018-05-04 20:02 - 2018-05-04 20:02 - 000007868 _____ C:\Users\Vojta\Downloads\Proof of invoice 4.ods
2018-05-03 18:49 - 2018-05-03 18:49 - 000053494 _____ C:\Users\Vojta\Downloads\PaymentReceipt(2).pdf
2018-05-03 18:31 - 2018-05-03 18:31 - 000053492 _____ C:\Users\Vojta\Downloads\PaymentReceipt(1).pdf
2018-05-03 18:27 - 2018-05-03 18:27 - 000053498 _____ C:\Users\Vojta\Downloads\PaymentReceipt.pdf
2018-05-03 17:34 - 2018-05-03 17:34 - 000137385 _____ C:\Users\Vojta\Downloads\pearl_noticeofgeneraluse_20180430.pdf
2018-05-03 17:29 - 2018-05-03 17:29 - 000380824 _____ C:\Users\Vojta\Downloads\pearl_report_20180430.pdf
2018-05-03 17:29 - 2018-05-03 17:29 - 000350739 _____ C:\Users\Vojta\Downloads\pearl_First report to creditors.pdf
2018-05-03 17:29 - 2018-05-03 17:29 - 000020339 _____ C:\Users\Vojta\Downloads\pearl_gm resolutions.pdf
2018-05-03 17:22 - 2018-05-03 17:22 - 001093828 _____ C:\Users\Vojta\Downloads\pearl_soa.pdf
2018-05-03 08:20 - 2018-05-03 08:20 - 000012981 _____ C:\Users\Vojta\Downloads\Remittance(53444)-Vojtech Vojtech.pdf
2018-05-02 17:24 - 2018-05-02 18:25 - 1121767330 _____ C:\Users\Vojta\Downloads\Metanol 2.díl.avi
2018-04-30 19:31 - 2018-04-30 19:31 - 000494240 _____ C:\Users\Vojta\Downloads\PZK_vysledky_ELE.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-05-29 08:31 - 2017-05-28 12:05 - 000000000 ____D C:\Users\Vojta\AppData\LocalLow\Mozilla
2018-05-29 08:30 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-05-29 08:29 - 2017-05-28 13:26 - 000000000 ____D C:\Users\Vojta\AppData\Roaming\TS3Client
2018-05-29 08:24 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-05-28 12:25 - 2017-05-27 03:21 - 000000000 ____D C:\ProgramData\NVIDIA
2018-05-28 11:08 - 2017-10-21 02:16 - 000000000 ____D C:\Program Files (x86)\Steam
2018-05-28 11:07 - 2017-08-05 17:00 - 000000000 ___RD C:\Users\Vojta\iCloudDrive
2018-05-28 11:06 - 2017-05-27 11:02 - 000000000 ___RD C:\Users\Vojta\OneDrive
2018-05-28 11:05 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-05-28 11:05 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-05-28 00:11 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-05-27 22:25 - 2017-08-05 14:21 - 000001174 _____ C:\Users\Vojta\Desktop\KeePass 2.lnk
2018-05-27 22:24 - 2017-08-05 14:22 - 000000000 ____D C:\Users\Vojta\AppData\Roaming\KeePass
2018-05-27 21:56 - 2017-08-05 14:21 - 000001186 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2018-05-27 21:56 - 2017-08-05 14:21 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2018-05-27 16:38 - 2017-08-05 14:18 - 000000000 ____D C:\Users\Vojta\AppData\Roaming\Apple Computer
2018-05-27 16:13 - 2017-07-14 22:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2018-05-27 16:13 - 2017-07-14 22:32 - 000000000 ____D C:\Program Files\7-Zip
2018-05-27 15:30 - 2017-08-05 16:57 - 000000000 ____D C:\Users\Vojta\AppData\Local\Apple Computer
2018-05-27 15:29 - 2017-08-05 16:57 - 000000000 ____D C:\ProgramData\Apple Computer
2018-05-27 15:28 - 2017-08-05 14:17 - 000000000 ____D C:\Program Files\Common Files\Apple
2018-05-27 15:28 - 2017-08-05 14:16 - 000000000 ____D C:\ProgramData\Apple
2018-05-27 14:27 - 2017-06-13 19:33 - 000000000 ____D C:\Users\Vojta\AppData\Roaming\Skype
2018-05-27 14:01 - 2017-05-28 18:09 - 000000000 ____D C:\Users\Vojta\Documents\Bandicam
2018-05-25 14:44 - 2017-05-28 19:12 - 000000000 ____D C:\Program Files (x86)\NoSimplerAccounting 8.1
2018-05-24 16:56 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-05-24 16:56 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-05-24 01:24 - 2017-05-28 21:32 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-05-23 12:41 - 2017-05-28 12:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-23 12:41 - 2017-05-28 12:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-05-21 13:42 - 2018-04-15 19:21 - 000000000 ____D C:\Users\Vojta\Downloads\facebook-vojtavojtech9
2018-05-20 16:01 - 2017-05-28 22:17 - 000000000 ____D C:\Users\Vojta\.Synkron
2018-05-20 01:38 - 2017-05-28 12:05 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-05-18 04:13 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\appcompat
2018-05-18 00:09 - 2017-08-02 15:36 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-18 00:09 - 2017-08-02 15:36 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-05-17 22:53 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-05-17 22:53 - 2017-06-01 21:13 - 000000000 ____D C:\Users\Vojta\AppData\Local\CrashDumps
2018-05-17 15:56 - 2017-12-08 04:23 - 000000000 ____D C:\Users\Vojta\AppData\Local\Packages
2018-05-17 15:46 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\PrintDialog
2018-05-17 14:33 - 2018-04-12 00:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-05-17 14:32 - 2018-04-12 00:41 - 000000000 ____D C:\WINDOWS\Setup
2018-05-17 14:32 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-05-17 14:32 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-05-17 14:32 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\spool
2018-05-17 14:32 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-05-17 14:32 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Help
2018-05-17 14:32 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-05-17 14:32 - 2018-04-04 17:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2018-05-17 14:32 - 2017-11-11 01:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syberia [GOG.com]
2018-05-17 14:32 - 2017-10-21 02:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2018-05-17 14:32 - 2017-10-13 01:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Second Life Viewer
2018-05-17 14:32 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-05-17 14:32 - 2017-09-16 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD
2018-05-17 14:32 - 2017-08-05 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YokoInjection
2018-05-17 14:32 - 2017-08-02 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Erebor
2018-05-17 14:32 - 2017-06-13 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-05-17 14:32 - 2017-06-02 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2018-05-17 14:32 - 2017-06-02 13:40 - 000000000 ____D C:\WINDOWS\SHELLNEW
2018-05-17 14:32 - 2017-05-31 14:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\webium's modpack
2018-05-17 14:32 - 2017-05-28 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synkron
2018-05-17 14:32 - 2017-05-28 19:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NoSimplerAccounting 8.1
2018-05-17 14:32 - 2017-05-28 17:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2018-05-17 14:32 - 2017-05-28 14:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-05-17 14:32 - 2017-05-28 14:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2018-05-17 14:32 - 2017-05-28 12:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt
2018-05-17 14:32 - 2017-05-27 03:20 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2018-05-17 14:32 - 2017-05-27 03:20 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-05-17 14:32 - 2017-05-26 23:59 - 000000000 ____D C:\Program Files (x86)\Razer
2018-05-17 13:56 - 2017-12-08 12:09 - 000000000 ___RD C:\Users\Vojta\3D Objects
2018-05-17 13:56 - 2017-05-27 10:59 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-05-17 13:55 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Defender
2018-05-17 13:55 - 2018-04-11 22:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-05-17 13:54 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Registration
2018-05-17 13:48 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-05-17 13:48 - 2017-12-08 04:37 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-05-17 13:41 - 2017-08-05 17:00 - 000000000 ____D C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud
2018-05-17 13:41 - 2017-05-28 12:08 - 000000000 ____D C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks
2018-05-17 13:37 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\USOPrivate
2018-05-17 13:37 - 2017-05-27 03:21 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-05-17 13:36 - 2017-05-27 03:20 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-05-17 13:35 - 2017-12-04 18:04 - 000000000 ____D C:\Program Files\Common Files\logishrd
2018-05-16 11:03 - 2018-04-12 00:38 - 000000000 __RHD C:\Users\Public\Libraries
2018-05-16 10:55 - 2017-05-28 12:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-05-16 10:49 - 2018-04-12 17:17 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ta-in
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\si-lk
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\am-et
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Provisioning
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-05-16 10:49 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\et-EE
2018-05-16 10:28 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\es-MX
2018-05-16 10:23 - 2018-04-12 17:16 - 000000000 ____D C:\WINDOWS\OCR
2018-05-15 09:11 - 2017-05-28 13:17 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
2018-05-10 18:52 - 2017-05-28 14:53 - 000000000 ____D C:\Users\Vojta\AppData\Local\ElevatedDiagnostics
2018-05-09 17:24 - 2017-10-11 12:04 - 141696960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-05-09 17:24 - 2017-05-27 13:50 - 141696960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-05-09 17:24 - 2017-05-27 13:50 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-05-07 20:58 - 2017-11-08 00:05 - 000000000 ____D C:\Users\Vojta\Downloads\Anella Alena Kučerová
2018-05-01 22:22 - 2018-04-12 00:41 - 000835064 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-05-01 22:22 - 2018-04-12 00:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

Some files in TEMP:
====================
2018-05-27 13:55 - 2018-05-27 13:56 - 058834376 _____ (Skype Technologies S.A.) C:\Users\Vojta\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-17 13:33

==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by Vojta (29-05-2018 08:31:46)
Running from C:\Users\Vojta\Desktop
Windows 10 Home Version 1803 17134.48 (X64) (2018-05-17 12:56:08)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-544496811-3946357240-1027464502-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-544496811-3946357240-1027464502-503 - Limited - Disabled)
Guest (S-1-5-21-544496811-3946357240-1027464502-501 - Limited - Disabled)
Vojta (S-1-5-21-544496811-3946357240-1027464502-1001 - Administrator - Enabled) => C:\Users\Vojta
WDAGUtilityAccount (S-1-5-21-544496811-3946357240-1027464502-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
7-Zip 18.05 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1805-000001000000}) (Version: 18.05.00.0 - Igor Pavlov)
Adobe Flash Player 29 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 29.0.0.171 - Adobe Systems Incorporated)
Apple Application Support (32-bit) (HKLM-x32\...\{543F829B-4591-4B2F-AF63-6E6E6AE59EB2}) (Version: 6.4 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0ECA3BB5-4410-414B-B226-241FF1C12CD0}) (Version: 6.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{9E005AAA-81A3-478E-8944-532D350952EE}) (Version: 11.3.1.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.4.2338 - AVAST Software)
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.4.2.1258 - Bandicam.com)
Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite DCP-J315W (HKLM-x32\...\{FB83EAC4-E3F6-4666-B45B-44522F2344B6}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 5.43 - Piriform)
Erebor (HKLM-x32\...\Erebor) (Version: 02.00.00.00 - Erebor Team)
Free Scan to PDF (HKLM-x32\...\{11586A4D-F255-4D52-A612-7D2DAADC1773}) (Version: 1.0.0 - freepdfsolutions.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 66.0.3359.181 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
iCloud (HKLM\...\{5BD11939-D2C2-4F1B-AAAF-5ECE19A801F7}) (Version: 7.4.0.111 - Apple Inc.)
KeePass Password Safe 2.36 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.36 - Dominik Reichl)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\OneDriveSetup.exe) (Version: 18.065.0329.0002 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Mozilla Firefox 60.0.1 (x64 en-GB) (HKLM\...\Mozilla Firefox 60.0.1 (x64 en-GB)) (Version: 60.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.3 - Mozilla)
NoSimplerAccounting 8.1 (HKLM-x32\...\NoSimplerAccount_0) (Version: 8.1 - Farshadoo.com)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.73 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
NVIDIA Graphics Driver 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.73 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OpenTTD 1.7.1 (HKLM-x32\...\OpenTTD) (Version: 1.7.1 - OpenTTD)
PhotoPad Image Editor (HKLM-x32\...\PhotoPad) (Version: 3.12 - NCH Software)
Razer Chroma SDK Core Components (HKLM-x32\...\Razer Chroma SDK) (Version: 2.10.0 - Razer Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.21.18.433 - Razer Inc.)
SecondLifeViewer (HKLM-x32\...\SecondLifeViewer) (Version: 5.0.8.329115 - Linden Research, Inc.)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Syberia (HKLM-x32\...\1207658848_is1) (Version: 2.1.0.23 - GOG.com)
Synkron 1.6.2 (HKLM-x32\...\Tomlein.Synkron_is1) (Version: 1.6.2 - Matúš Tomlein)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.4 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.95388 - TeamViewer)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.19 - IDRIX)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
webiums modpack 0.9.21.0.2 v01 (HKLM-x32\...\{B64D8CE9-11B2-469D-A347-9A13C2BCA423}_is1) (Version: 01 - myWOTmods.com)
World of Tanks (HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net)
YokoInjection 702.11 PaWn (HKLM-x32\...\YokoInjection_is1) (Version: 702.11 Pawn - Yoko)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-03-18] (Apple Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0C6471D5-E420-4A93-9312-230E93E3E856} - System32\Tasks\Avast Software\Overseer => C:\Program Files\AVAST Software\Avast\setup\overseer.exe [2018-05-17] (AVAST Software)
Task: {0DC28B81-3298-43DA-8789-EE7504A49D4E} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
Task: {11DD209F-6EDB-4BBC-80FE-35B294C695C5} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-05-24] (Piriform Ltd)
Task: {40D719E8-2EB6-42A1-B2C1-4D3F1D349BEA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_171_Plugin.exe [2018-05-08] (Adobe Systems Incorporated)
Task: {4CEC1BD7-E09C-468A-871D-64311DF45248} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-05-24] (Piriform Ltd)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {78E3C82F-2D49-4EE2-AFCC-67195D264CE4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-02] (Google Inc.)
Task: {7B6433B5-6E6B-4A4F-8F3D-4E234E4779B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-02] (Google Inc.)
Task: {82A2591A-E4EF-41B0-831E-95824DD87802} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
Task: {88CEE3AE-2AA8-4D03-AA45-5BDC3FB878DE} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-05-17] (AVAST Software)
Task: {A4E6DA5A-0F98-4A91-A2E1-9A6EF45E0E67} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {C5AAEAAA-CC14-4FCF-943D-013646A035FA} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-08] (Adobe Systems Incorporated)
Task: {CD209D3E-E597-4A05-83CB-9A6890FE3200} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
Task: {D1ECDBDA-A6E8-4CCF-878A-3E26C49200E5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
Task: {D5205FE3-4C33-4F13-964D-3EADCDDBB132} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {DD069298-4A8D-4B38-9CC2-A4236886324D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2018-01-08] (Apple Inc.)
Task: {DD2DBBC4-1EAF-4183-BC44-30AD8C32187C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {F22D629E-9B69-4DE6-84FE-B5A9C9497FBD} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Vojta\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm

==================== Loaded Modules (Whitelisted) ==============

2017-12-08 02:48 - 2017-12-08 02:48 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2018-03-16 15:19 - 2018-03-16 15:19 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-05-28 14:57 - 2017-10-11 02:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-05-28 14:33 - 2005-04-22 05:36 - 000143360 _____ () C:\WINDOWS\system32\BrSNMP64.dll
2018-03-14 20:13 - 2018-03-14 20:13 - 000189776 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-04-12 00:35 - 2018-04-12 17:17 - 002184704 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-05-17 14:19 - 2018-05-17 14:19 - 004193792 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1805.1201.0_x64__8wekyb3d8bbwe\Calculator.exe
2018-05-02 17:04 - 2018-05-02 17:04 - 000634880 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1805.1201.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-05-24 16:54 - 2018-05-24 16:55 - 001227952 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9226.21755.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll
2018-02-21 08:43 - 2018-02-21 08:43 - 027139072 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\Video.UI.exe
2018-02-21 08:43 - 2018-02-21 08:43 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\SharedUI.dll
2018-02-21 08:43 - 2018-02-21 08:43 - 006687744 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 12:29 - 2017-09-26 12:29 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-02-21 08:43 - 2018-02-21 08:43 - 009283072 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17122.16211.1000_x64__8wekyb3d8bbwe\EntPlat.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2018-05-04 16:28 - 2018-05-04 16:28 - 066466304 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-10-04 08:53 - 2017-10-04 08:54 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 004173312 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll
2018-04-04 17:30 - 2018-04-04 17:31 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 015563776 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 004018176 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 003281920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 001386496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2018-02-01 19:37 - 2018-02-01 19:37 - 004601048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 000878080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-05-04 16:28 - 2018-05-04 16:28 - 000165888 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\SKU.dll
2017-05-28 14:33 - 2009-02-27 16:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2017-05-28 14:57 - 2017-10-11 02:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-03-16 15:20 - 2018-03-16 15:20 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2018-03-16 15:19 - 2018-03-16 15:19 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2017-12-08 02:49 - 2017-12-08 02:49 - 000076088 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2017-10-21 02:18 - 2018-05-01 08:32 - 000788256 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-10-21 02:18 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-10-21 02:18 - 2018-05-19 00:01 - 002632480 _____ () C:\Program Files (x86)\Steam\video.dll
2017-10-21 02:18 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-10-21 02:18 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2018-01-06 21:57 - 2017-12-20 02:43 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
2018-01-06 21:57 - 2017-12-20 02:43 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
2018-01-06 21:57 - 2017-12-20 02:43 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
2018-01-06 21:57 - 2017-12-20 02:43 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
2018-01-06 21:57 - 2017-12-20 02:43 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
2017-10-21 02:18 - 2018-05-19 00:01 - 000979232 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-10-21 02:18 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2018-02-06 04:52 - 2018-02-06 04:52 - 000143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2018-05-17 18:22 - 2018-05-17 18:22 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2018-05-17 18:20 - 2018-05-17 18:20 - 000482520 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-05-17 18:19 - 2018-05-17 18:19 - 000293592 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-10-21 02:19 - 2018-05-01 08:32 - 000788256 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-10-21 02:19 - 2018-05-14 20:39 - 083524384 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-10-21 02:18 - 2015-09-25 00:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2017-10-21 02:19 - 2018-05-14 20:39 - 002253600 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\swiftshader\libglesv2.dll
2017-10-21 02:19 - 2018-05-14 20:39 - 000109856 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\swiftshader\libegl.dll
2017-05-28 14:57 - 2017-10-11 02:05 - 070805952 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-05-26 23:51 - 2017-05-26 23:49 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-544496811-3946357240-1027464502-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 194.168.4.100 - 194.168.8.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKU\S-1-5-21-544496811-3946357240-1027464502-1001\...\StartupApproved\Run: => "Skype"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{2449C756-BCA8-4330-887E-BE95787FF78B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SatelliteReign\SatelliteReignWindows.exe
FirewallRules: [{C073CF93-39DB-4FA1-8EDE-4727D470FDE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SatelliteReign\SatelliteReignWindows.exe
FirewallRules: [{39F508A1-E734-422E-B080-76D670D25485}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1B664C31-C454-4304-ACA5-3A91557BA792}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{2BADC3CB-384E-4990-A2C1-3129BEB3014D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{42AB6CAE-AF5C-430B-818B-EA9F1143E0E1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{2DEF1E54-8588-4941-98D2-4A59B1A8C256}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Blameless\Blameless.exe
FirewallRules: [{C01ACF3F-EF23-40F5-86B0-980345F1E2D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Blameless\Blameless.exe
FirewallRules: [UDP Query User{3F5400FB-C2B7-42DC-9C0B-09A3F9452BF3}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{ED3653EC-EF70-453E-BED4-6C8CC0B026D6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{8F5A225D-21DE-42AA-BA5F-12A9A16A8BFB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Layers of Fear\Layers of Fear.exe
FirewallRules: [{21B0EC2E-3DAA-489E-A97D-8AB7E5124B83}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Layers of Fear\Layers of Fear.exe
FirewallRules: [{8F14976B-562F-4A63-8C59-9E5246445DE5}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{2B95BB0F-27F6-41B8-BDA6-228C398FAB96}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HOMEFRONT\Binaries\HOMEFRONT.exe
FirewallRules: [{3ED63FB1-7313-418C-B9D8-042707B0620F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HOMEFRONT\Binaries\HOMEFRONT.exe
FirewallRules: [{C64D1057-422C-4EE1-908F-2CA00A43529F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3A1483A6-7AF8-46D4-8911-0B30BE365078}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F3B44F7C-0776-4B90-8AD8-597F409EC106}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{5C0E11C9-50B0-4A37-AF5C-2AD63A81EAF3}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{B2A84CEA-9D85-4960-9F09-741C633A8724}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{5D0BFD37-D8F6-4588-AE75-BA6A09D0BC58}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{199ED5B0-4AE5-43A9-8011-D21B1604859D}] => (Allow) LPort=54925
FirewallRules: [{33D3239B-81C8-49A2-B8B9-60C13FF5832B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{96BBEFA7-D0AD-4BF6-BB99-989BFE17F0B8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{AB44FF37-6613-4450-BB19-0A094BD29A96}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B8413CA1-9914-4305-ACB8-E107094C24E0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{3A958440-E477-4308-B4A5-065A90E6170A}C:\program files (x86)\synkron\synkron.exe] => (Allow) C:\program files (x86)\synkron\synkron.exe
FirewallRules: [UDP Query User{35876058-8FFD-405C-9D8C-F0465711EE25}C:\program files (x86)\synkron\synkron.exe] => (Allow) C:\program files (x86)\synkron\synkron.exe
FirewallRules: [{EA1496A3-D0B5-4080-9B54-D6C4EB2A19BB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{A1CAEECF-CC29-44AF-AFCB-71DF289E2361}C:\program files (x86)\erebor\client.exe] => (Allow) C:\program files (x86)\erebor\client.exe
FirewallRules: [UDP Query User{4F01990A-4E73-48C1-AA7B-427524DE28D5}C:\program files (x86)\erebor\client.exe] => (Allow) C:\program files (x86)\erebor\client.exe
FirewallRules: [TCP Query User{7599AD37-25BA-4B7B-BAC1-EDBC6E0DFE8C}C:\program files (x86)\erebor\uoam\uoam.exe] => (Allow) C:\program files (x86)\erebor\uoam\uoam.exe
FirewallRules: [UDP Query User{02DC6EBA-EEB2-4DDC-88A9-78892ED78E31}C:\program files (x86)\erebor\uoam\uoam.exe] => (Allow) C:\program files (x86)\erebor\uoam\uoam.exe
FirewallRules: [TCP Query User{0D5D43D3-8F9F-468C-9235-F152C4161BDC}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{E9A80A2B-8202-4B5C-AAD8-7147A74B94F9}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [{CC28D328-3860-463C-94E0-12083C234671}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{3DD802D1-872C-42C6-A8A8-C9152D917B85}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{A4202017-8CA6-4E9E-BF7C-AF18E5E0C5C7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{58C87246-6808-4B13-AD44-973185658E70}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2B6DF364-DF77-423C-9C79-5261815B76B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{71FD695E-055F-45FF-9676-B6FA25CDD181}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CE413660-AE68-4B99-A96C-7A42C0118EFC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FC9E8DB1-8D5A-43B3-BB0C-B0C0B14EF4A7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{74D1E6F1-BD86-4ED9-93E0-EFC9A412A342}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{01CB3871-A23C-4218-9197-9C83F6180A6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization III Complete\Conquests\Civ3Conquests.exe
FirewallRules: [{2E01190A-30A7-444D-9BB8-3274EAB1CCC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization III Complete\Conquests\Civ3Conquests.exe
FirewallRules: [{9FB93062-CCE0-48CB-925C-0064FEDDC7BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe
FirewallRules: [{A43F73F7-691B-476A-A3F8-24A55540DA26}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe
FirewallRules: [{4A3D383E-1D62-43A8-B89F-BA4060ACBBF2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{B96A9DA7-E7A3-4514-8124-C0B0659B5D70}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{D483C618-E3D5-4A02-AEB7-D9761FE73A2F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{E5B7FE8E-E247-4370-93A4-F02A08B1772E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe
FirewallRules: [{54954B7E-1ECC-45AA-B5DF-F0209FFAC14B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe
FirewallRules: [{57F637EC-4750-4426-9B2E-47323C1F95D5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0CE6D47A-3A8A-4979-AFF1-6C2281256793}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F9C257E6-3800-4E42-A22B-35034B602F58}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E3B0521C-5E84-457A-9556-A50647F2382B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{321C0849-2396-4BBF-A1E0-6685F26847A5}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{4E37CF5E-5F4D-4E0E-B155-B9FDEE1AD09F}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe

==================== Restore Points =========================

17-05-2018 16:01:21 Windows Update
26-05-2018 18:44:26 Scheduled Checkpoint
27-05-2018 21:08:37 Removed iTunes

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (05/28/2018 09:59:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1641

Error: (05/28/2018 09:59:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1641

Error: (05/28/2018 09:59:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/28/2018 03:36:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Microsoft.Photos.exe version 2018.18031.15820.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 39c8

Start Time: 01d3f68b1b0db904

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

Report Id: c85c88ca-ca3e-4b82-b974-8788010b751e

Faulting package full name: Microsoft.Windows.Photos_2018.18031.15820.0_x64__8wekyb3d8bbwe

Faulting package-relative application ID: App

Error: (05/27/2018 05:06:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.17134.1, time stamp: 0xf5178e97
Faulting module name: dwmcore.dll, version: 10.0.17134.48, time stamp: 0xa33e2376
Exception code: 0xc00001ad
Fault offset: 0x00000000001ce062
Faulting process ID: 0x778
Faulting application start time: 0x01d3f5d4b22b1863
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report ID: d25c24c3-7466-4dc8-bd33-fe2d07d48089
Faulting package full name:
Faulting package-relative application ID:

Error: (05/27/2018 05:06:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.17134.1, time stamp: 0xf5178e97
Faulting module name: dwmcore.dll, version: 10.0.17134.48, time stamp: 0xa33e2376
Exception code: 0xc00001ad
Fault offset: 0x00000000001ce062
Faulting process ID: 0x1d0c
Faulting application start time: 0x01d3f5d4b1900736
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report ID: 7ffe2cd2-5e11-42ec-acdb-d8f65726c1de
Faulting package full name:
Faulting package-relative application ID:

Error: (05/27/2018 05:06:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.17134.1, time stamp: 0xf5178e97
Faulting module name: dwmcore.dll, version: 10.0.17134.48, time stamp: 0xa33e2376
Exception code: 0xc00001ad
Fault offset: 0x00000000001ce062
Faulting process ID: 0x2f14
Faulting application start time: 0x01d3f5d4b1062ed1
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report ID: 37c76410-1848-4cd7-a7db-1bef0dec6254
Faulting package full name:
Faulting package-relative application ID:

Error: (05/27/2018 05:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.17134.1, time stamp: 0xf5178e97
Faulting module name: dwmcore.dll, version: 10.0.17134.48, time stamp: 0xa33e2376
Exception code: 0xc00001ad
Fault offset: 0x00000000001ce062
Faulting process ID: 0x3254
Faulting application start time: 0x01d3f5d4b0739263
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report ID: fe6d6bc4-b290-4cd4-a895-b21e443811c1
Faulting package full name:
Faulting package-relative application ID:

System errors:
=============
Error: (05/29/2018 08:32:07 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-U0OP3R8)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user DESKTOP-U0OP3R8\Vojta SID (S-1-5-21-544496811-3946357240-1027464502-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/28/2018 11:08:39 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-U0OP3R8)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
and APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
to the user DESKTOP-U0OP3R8\Vojta SID (S-1-5-21-544496811-3946357240-1027464502-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). This security permission can be modified using the Component Services administrative tool.

Error: (05/28/2018 11:07:55 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-U0OP3R8)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user DESKTOP-U0OP3R8\Vojta SID (S-1-5-21-544496811-3946357240-1027464502-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/28/2018 11:07:48 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-U0OP3R8)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
and APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
to the user DESKTOP-U0OP3R8\Vojta SID (S-1-5-21-544496811-3946357240-1027464502-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). This security permission can be modified using the Component Services administrative tool.

Error: (05/28/2018 11:05:49 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-U0OP3R8)
Description: Unable to start a DCOM Server: Microsoft.Windows.Cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca as Unavailable/Unavailable. The error:
"298"
Happened while starting this command:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

Error: (05/28/2018 11:05:43 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (05/28/2018 11:04:57 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Razer Chroma SDK Service service.

Error: (05/28/2018 12:39:23 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-U0OP3R8)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user DESKTOP-U0OP3R8\Vojta SID (S-1-5-21-544496811-3946357240-1027464502-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Windows Defender:
===================================
Date: 2018-05-17 14:01:28.450
Description:
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: TrojanDownloader:Win32/Nistio.A
ID: 2147647734
Severity: Severe
Category: Trojan Downloader
Path: containerfile:_C:\Users\Vojta\Documents\BACKUP- VARIOUS\SOFTWARE\Adobe.Illustrator.CS5.v15.0\Adobe.Illustrator.CS5.v15.0\Adobe Illustrator CS5\payloads\AdobeAIR1.5.3-mul\AdobeAIRInstaller.exe;file:_C:\Users\Vojta\Documents\BACKUP- VARIOUS\SOFTWARE\Adobe.Illustrator.CS5.v15.0\Adobe.Illustrator.CS5.v15.0\Adobe Illustrator CS5\payloads\AdobeAIR1.5.3-mul\AdobeAIRInstaller.exe;file:_C:\Users\Vojta\Documents\BACKUP- VARIOUS\SOFTWARE\Adobe.Illustrator.CS5.v15.0\Adobe.Illustrator.CS5.v15.0\Adobe Illustrator CS5\payloads\AdobeAIR1.5.3-mul\AdobeAIRInstaller.exe->(nsis-5-$(ENVVAR)\pnsetup.exe)
Detection Origin: Local machine
Detection Type: FastPath
Detection Source: System
Process Name: Unknown
Signature Version: AV: 1.267.1477.0, AS: 1.267.1477.0, NIS: 1.267.1477.0
Engine Version: AM: 1.1.14800.3, NIS: 1.1.14800.3

CodeIntegrity:
===================================

Date: 2018-05-29 08:24:57.260
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-29 08:24:57.258
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-29 08:24:50.607
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-29 08:24:50.606
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-29 08:24:48.893
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-29 08:24:48.892
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-29 08:24:46.825
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-05-29 08:24:46.823
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Percentage of memory in use: 20%
Total physical RAM: 16337.12 MB
Available physical RAM: 12930.4 MB
Total Virtual: 18769.12 MB
Available Virtual: 14603.09 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:1862.46 GB) (Free:1025.68 GB) NTFS
Drive i: () (Fixed) (Total:0.44 GB) (Free:0.03 GB) NTFS

\\?\Volume{2c08249b-6cfb-4062-b23f-26f62376d5d8}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 441B6B9F)

Partition: GPT.

==================== End of Addition.txt ============================

#6 Příspěvek od **Conder** » 29 kvě 2018 17:30

Podla FRST logov to vyzera ciste.. Z toho online konvertora sa stiahol aj nejaky program (.exe)? V akom umiestneni sa nachadzaju tie 2 subory, ktore nejdu zmazat? Aka je v PC graficka karta (presny typ)? Ako sa chova PC teraz? Ak sa na PC nic nerobi, byva vytazeny procesor (teplota, hluk ventilatorov...)?

Otvor poznamkovy blok (Win+R -> notepad -> enter)

Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

Folder: C:\Users\Vojta\AppData\Local\CrashDumps
File: C:\Program Files (x86)\Browny02\BrYNSvc.exe
File: C:\Users\Vojta\Documents\BACKUP- VARIOUS\SOFTWARE\Adobe.Illustrator.CS5.v15.0\Adobe.Illustrator.CS5.v15.0\Adobe Illustrator CS5\payloads\AdobeAIR1.5.3-mul\AdobeAIRInstaller.exe
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Erebor
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{11586A4D-F255-4D52-A612-7D2DAADC1773}
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B64D8CE9-11B2-469D-A347-9A13C2BCA423}_is1
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YokoInjection_is1

2018-05-27 21:11 - 2018-05-27 21:11 - 000000000 ____D C:\rsit
2018-05-27 21:11 - 2018-05-27 21:11 - 000000000 ____D C:\Program Files (x86)\trend micro
2018-05-27 21:10 - 2018-05-27 21:10 - 001107968 _____ C:\Users\Vojta\Downloads\RSIT.exe

Hosts:
EmptyTemp:
End

Uloz na plochu s nazvom fixlist.txt
Spusti znovu FRST a klikni na Fix
Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Krkovicka74 · #7 Příspěvek od **Krkovicka74** » 31 kvě 2018 23:48

No konvertnul you tube video na mp3 online a okamzite zacal pry avast hlasil JS Minera a presto to ulozil, ja pak instalovla itunes a zacal ten problem s monitorem ze se vypinal a hlasil ze nema signal, po odinstalaci itunes to nedela, coz nechapu.

zde je fixlog:
Fix result of Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01
Ran by Vojta (31-05-2018 23:35:53) Run:1
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

Folder: C:\Users\Vojta\AppData\Local\CrashDumps
File: C:\Program Files (x86)\Browny02\BrYNSvc.exe
File: C:\Users\Vojta\Documents\BACKUP- VARIOUS\SOFTWARE\Adobe.Illustrator.CS5.v15.0\Adobe.Illustrator.CS5.v15.0\Adobe Illustrator CS5\payloads\AdobeAIR1.5.3-mul\AdobeAIRInstaller.exe
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Erebor
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{11586A4D-F255-4D52-A612-7D2DAADC1773}
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B64D8CE9-11B2-469D-A347-9A13C2BCA423}_is1
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YokoInjection_is1

2018-05-27 21:11 - 2018-05-27 21:11 - 000000000 ____D C:\rsit
2018-05-27 21:11 - 2018-05-27 21:11 - 000000000 ____D C:\Program Files (x86)\trend micro
2018-05-27 21:10 - 2018-05-27 21:10 - 001107968 _____ C:\Users\Vojta\Downloads\RSIT.exe

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========================= Folder: C:\Users\Vojta\AppData\Local\CrashDumps ========================

====== End of Folder: ======

========================= File: C:\Program Files (x86)\Browny02\BrYNSvc.exe ========================

C:\Program Files (x86)\Browny02\BrYNSvc.exe
File not signed
MD5: EA7E57F87D6FEE5FD6C5F813C04E8CD2
Creation and modification date: 2017-05-28 14:33 - 2010-01-25 08:22
Size: 000245760
Attributes: ----N
Company Name: Brother Industries, Ltd.
Internal Name: BrYNSvc.exe
Original Name: BrYNSvc.exe
Product: BrYNCSvc
Description: BrYNCSvc
File Version: 1.0.0.10
Product Version: 1.0.0.10
Copyright: Copyright (C) 2009-2010 Brother Industries, Ltd.
VirusTotal: https://www.virustotal.com/file/1eb84f4 ... 525972346/

====== End of File: ======

========================= File: C:\Users\Vojta\Documents\BACKUP- VARIOUS\SOFTWARE\Adobe.Illustrator.CS5.v15.0\Adobe.Illustrator.CS5.v15.0\Adobe Illustrator CS5\payloads\AdobeAIR1.5.3-mul\AdobeAIRInstaller.exe ========================

"C:\Users\Vojta\Documents\BACKUP- VARIOUS\SOFTWARE\Adobe.Illustrator.CS5.v15.0\Adobe.Illustrator.CS5.v15.0\Adobe Illustrator CS5\payloads\AdobeAIR1.5.3-mul\AdobeAIRInstaller.exe" => not found
====== End of File: ======

================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Erebor]
"Start Menu Folder"="Erebor"
"DisplayName"="Erebor"
"UninstallString"="C:\Program Files (x86)\Erebor\uninstall.exe"
"DisplayIcon"="C:\Program Files (x86)\Erebor\Client.exe"
"DisplayVersion"="02.00.00.00"
"Publisher"="Erebor Team"
"URLInfoAbout"="http://www.uoerebor.cz"

=== End of ExportKey ===
================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{11586A4D-F255-4D52-A612-7D2DAADC1773}]
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"="Saiber Consultants, Chennai India"
"DisplayVersion"="1.0.0"
"HelpLink"="http://www.freepdfsolutions.com"
"HelpTelephone"=""
"InstallDate"="20180216"
"InstallLocation"=""
"InstallSource"="C:\Users\Vojta\Downloads\"
"ModifyPath"="MsiExec.exe /I{11586A4D-F255-4D52-A612-7D2DAADC1773}"
"Publisher"="freepdfsolutions.com"
"Readme"=""
"Size"=""
"EstimatedSize"="4612"
"UninstallString"="MsiExec.exe /I{11586A4D-F255-4D52-A612-7D2DAADC1773}"
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"="1"
"VersionMinor"="0"
"WindowsInstaller"="1"
"Version"="16777216"
"Language"="1033"
"DisplayName"="Free Scan to PDF"

=== End of ExportKey ===
================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B64D8CE9-11B2-469D-A347-9A13C2BCA423}_is1]
"Inno Setup: Setup Version"="5.5.1.ee2 (u)"
"Inno Setup: App Path"="C:\Games\World_of_Tanks"
"InstallLocation"="C:\Games\World_of_Tanks\"
"Inno Setup: Icon Group"="webium's modpack"
"Inno Setup: User"="Vojta"
"Inno Setup: Setup Type"="custom"
"Inno Setup: Selected Components"="clean,xvm,xvm\cs,xvm\cs\xvm,ci,ci\webicon,ssi,ssi\trap,sss,sss\trap,cross,cross\jimbo,circle,circle\jimbo2circles,gunconst,dp,dp\gdp,dp\sdp,adi,aim,aim\aai,aim\aai\block,aim\aai\block\dead,aim\aai\blo (the data entry has 399 more characters)."
"Inno Setup: Deselected Components"="noxvm,xvm\nostats,xvm\hpinears,xvm\cs\noob,xvm\cs\wotl,ci\contour,ci\names,ci\custom,ci\nomirror,ssi\old,ssi\mwm,ssi\skull,ssi\sauronskull,ssi\sauroneye,ssi\custom,sss\old,sss\short,sss\sauron,sss\lon (the data entry has 2498 more characters)."
"Inno Setup: Selected Tasks"="autologin,carousel,carousel\rows3,carousel\scale085,carousel\wr,carousel\dmg,carousel\marks,allyname,enemyname,mm,mm\spotted,mm\spotted\vehicle,mm\spotted\nick,mm\lost,mm\lost\vehicle,mm\lost\nick,mma (the data entry has 283 more characters)."
"Inno Setup: Deselected Tasks"="colorblind,clock,autoequip,battletier,chance,carousel\rows1,carousel\rows2,carousel\battles,carousel\marksicon,mm\spotted\hp,mm\spotted\name,mm\lost\hp,mm\lost\name,mm\dead,mm\dead\vtype,mmalt\spotted (the data entry has 344 more characters)."
"Inno Setup: Language"="en"
"DisplayName"="webiums modpack 0.9.21.0.2 v01"
"UninstallString"=""C:\Games\World_of_Tanks\unins001.exe""
"UninstallDataFile"="C:\Games\World_of_Tanks\unins001.dat"
"QuietUninstallString"=""C:\Games\World_of_Tanks\unins001.exe" /SILENT"
"DisplayVersion"="01"
"Publisher"="myWOTmods.com"
"URLInfoAbout"="https://www.mywotmods.com"
"HelpLink"="https://www.mywotmods.com"
"URLUpdateInfo"="https://www.mywotmods.com"
"ModifyPath"=""C:\Games\World_of_Tanks\unins001.exe" /MODIFY"
"NoRepair"="1"
"InstallDate"="20171223"
"MajorVersion"="1"
"MinorVersion"="0"
"EstimatedSize"="158404"
"Inno Setup CodeFile: Disable Environment"="1"
"Inno Setup CodeFile: Max Farplane"="1"
"Inno Setup CodeFile: Disable Fog"="1"
"Inno Setup CodeFile: Disable Interior"="1"
"Inno Setup CodeFile: Disable Shell Explosions effect"="1"
"Inno Setup CodeFile: Disable Clouds"="1"
"Inno Setup CodeFile: Disable Tank Destroy effect"="1"
"Inno Setup CodeFile: Disable Smoke from destroyed Tanks"="1"
"Inno Setup CodeFile: Disable Tank Hit effect"="1"
"Inno Setup CodeFile: Disable Tank Occlusion effect"="1"
"Inno Setup CodeFile: Disable Smoke and Flames when firing"="1"
"Inno Setup CodeFile: Disable Smoke from exhaust pipes"="1"
"Inno Setup CodeFile: Disable Tree shaking effect"="1"
"Inno Setup CodeFile: Models"="1"
"Inno Setup CodeFile: U.S.S.R."="1"
"Inno Setup CodeFile: KV-220-2"="1"
"Inno Setup CodeFile: Use New translated file (all your settings will be lost)"="0"
"Inno Setup CodeFile: Use Backup (current file will be used and all your settings will be untouched)"="0"
"Inno Setup CodeFile: Use Default (let the mods to generate new file)"="1"

=== End of ExportKey ===
================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YokoInjection_is1]
"Inno Setup: Setup Version"="5.1.9"
"Inno Setup: App Path"="C:\Program Files (x86)\Erebor\YokoInjection"
"InstallLocation"="C:\Program Files (x86)\Erebor\YokoInjection\"
"Inno Setup: Icon Group"="YokoInjection"
"Inno Setup: User"="Vojta"
"DisplayName"="YokoInjection 702.11 PaWn"
"DisplayIcon"="C:\Program Files (x86)\Erebor\YokoInjection\ilaunch.exe"
"UninstallString"=""C:\Program Files (x86)\Erebor\YokoInjection\unins000.exe""
"QuietUninstallString"=""C:\Program Files (x86)\Erebor\YokoInjection\unins000.exe" /SILENT"
"DisplayVersion"="702.11 Pawn"
"Publisher"="Yoko"
"URLInfoAbout"="http://forum.yoko.com.ua"
"NoModify"="1"
"NoRepair"="1"
"InstallDate"="20170805"
"sEstimatedSize2"="0"
"EstimatedSize"="2835"

=== End of ExportKey ===
C:\rsit => moved successfully
C:\Program Files (x86)\trend micro => moved successfully
C:\Users\Vojta\Downloads\RSIT.exe => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 119489165 B
Java, Flash, Steam htmlcache => 21894601 B
Windows/system/drivers => 17967218 B
Edge => 2264858 B
Chrome => 35903585 B
Firefox => 492942098 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 1814 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
Vojta => 290725452 B

RecycleBin => 72936 B
EmptyTemp: => 943.3 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 23:39:15 ====

#8 Příspěvek od **Conder** » 01 čer 2018 13:14

Byva PC vytazeny (teplota, hluk ventilatorov...) aj ked sa na nom nic nerobi?

V sucasnosti sa uz teda nevyskytuju ziadne problemy?

Aktualizuj ovladace na NVIDIA grafiku. Stiahni aktualnu verziu z https://www.geforce.com/drivers a nainstaluj. Pri instalacii zaskrtni "Vykonat uplnu instalaciu".

Krkovicka74 · #9 Příspěvek od **Krkovicka74** » 01 čer 2018 14:11

1. ne je tichej
2. od te doby jen jednou
3. dobre + koukam ze potrebuje vycistit dost prachu

#10 Příspěvek od **Conder** » 01 čer 2018 16:17

Vyzera to ciste. Mozes to este par dni pozorovat a ak bude problem napis. Odporucam este tento krok:

Spusti kontrolu integrity systemovych suborov:

Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca

Skopiruj a spusti prikaz:

Kód: Vybrat vše

DISM.exe /Online /Cleanup-image /Restorehealth

Po dokonceni skopiruj a spusti druhy prikaz:
Kód: Vybrat vše
```
sfc /scannow
```

Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:

Kód: Vybrat vše

findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt

Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
Restartuj PC a napis ako sa chova PC

VIRY.CZ

Js miner? prosim kontrolu logu

Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu

Re: Js miner? prosim kontrolu logu