Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Samovoľné vypínanie PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
hepyk
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 16 čer 2018 10:01

Samovoľné vypínanie PC

#1 Příspěvek od hepyk »

Dobrý deň, už týždeň sa mi každý deň (raz za deň) samovoľne vypne PC a znova sa zapne (ako keby na 2sec vypol prúd) Nemôže to byť virus? Vďaka

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21.07.2018
Ran by Rudolf Badžgoň (administrator) on RUDO (30-07-2018 16:55:09)
Running from C:\Users\Rudolf Badžgoň\Desktop
Loaded Profiles: Rudolf Badžgoň (Available Profiles: Rudolf Badžgoň & rudo)
Platform: Windows 8.1 (Update) (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Realtek Semiconductor) C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Micro-Star INT'L CO.,LTD.) C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star International) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Micro-Star International) C:\MSI\Smart Utilities\SuperRAIDSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575256 2014-05-12] (Realtek Semiconductor)
HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2138272 2016-10-08] (AimerSoft)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-07-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [64096 2018-07-09] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-04-02] (ZONER software)
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\MountPoints2: {c36a74c9-790b-11e8-8323-d8cb8a122dba} - "E:\Lenovo_Suite.exe"
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\Users\Rudolf Badžgoň\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk [2017-06-14]
ShortcutTarget: Twitch.lnk -> C:\Users\Rudolf Badžgoň\AppData\Roaming\Curse Client\Bin\Twitch.exe (Twitch Interactive, Inc.)
Startup: C:\Users\Rudolf Badžgoň\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wallpaper64 - odkaz.lnk [2017-10-12]
ShortcutTarget: wallpaper64 - odkaz.lnk -> C:\Users\Rudolf Badžgoň\Downloads\Wallpaper Engine\Wallpaper Engine\wallpaper64.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{B4056F32-CDE9-436E-A2AA-59611EAC9348}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)

FireFox:
========
FF DefaultProfile: pqsz01li.default
FF ProfilePath: C:\Users\Rudolf Badžgoň\AppData\Roaming\Mozilla\Firefox\Profiles\pqsz01li.default [2018-07-30]
FF Extension: (Avira Browser Safety) - C:\Users\Rudolf Badžgoň\AppData\Roaming\Mozilla\Firefox\Profiles\pqsz01li.default\Extensions\abs@avira.com [2018-06-25]
FF Extension: (Avira Password Manager) - C:\Users\Rudolf Badžgoň\AppData\Roaming\Mozilla\Firefox\Profiles\pqsz01li.default\Extensions\passwordmanager@avira.com.xpi [2018-07-03]
FF Extension: (Avira SafeSearch Plus) - C:\Users\Rudolf Badžgoň\AppData\Roaming\Mozilla\Firefox\Profiles\pqsz01li.default\Extensions\safesearchplus2@avira.com.xpi [2018-07-19]
FF Extension: (Adblock Plus) - C:\Users\Rudolf Badžgoň\AppData\Roaming\Mozilla\Firefox\Profiles\pqsz01li.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-07-18]
FF ProfilePath: C:\Users\Rudolf Badžgoň\AppData\Roaming\Mozilla\Firefox\Profiles\6d9ckf32.default-1484498399634 [2018-07-19]
FF Extension: (WebCompat Reporter) - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2018-07-07] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_134.dll [2018-07-11] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_134.dll [2018-07-11] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2249863331-521022342-2866738468-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR crx: C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.59\default_apps\search.crx [2013-11-14]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [880040 2018-07-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [225384 2018-07-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [225384 2018-07-06] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1164808 2018-07-06] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [428072 2018-07-04] (Avira Operations GmbH & Co. KG)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2980848 2018-06-28] (Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [103328 2018-06-20] (Avira Operations GmbH & Co. KG)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [20512 2014-03-13] (Micro-Star Int'l Co., Ltd.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2014-03-27] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-04-24] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2100736 2014-06-04] (MSI) [File not signed]
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4023296 2014-06-03] (MSI) [File not signed]
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2118144 2014-06-03] () [File not signed]
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-06-04] () [File not signed]
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1990144 2014-06-03] () [File not signed]
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2250240 2014-06-06] () [File not signed]
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-06-04] () [File not signed]
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [544256 2014-06-06] () [File not signed]
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [83952 2014-03-27] (Micro-Star International)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123240 2017-03-19] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184688 2017-03-19] (Electronic Arts)
R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [27632 2014-04-30] (Micro-Star International)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
S2 Wallpaper Engine Service; C:\Users\Rudolf Badžgoň\Downloads\Wallpaper Engine\Wallpaper Engine\bin\wallpaperservice32_c.exe [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [118848 2016-08-09] (Advanced Micro Devices)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2018-06-12] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [179376 2018-07-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [169864 2018-07-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2018-06-12] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2018-06-12] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [38048 2018-06-12] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-01-12] (Disc Soft Ltd)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [55232 2018-06-16] ()
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-04-03] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-04-03] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security, S.L.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-30 16:55 - 2018-07-30 16:55 - 000016588 _____ C:\Users\Rudolf Badžgoň\Desktop\FRST.txt
2018-07-30 16:53 - 2018-07-30 16:53 - 000000000 _____ C:\Users\Rudolf Badžgoň\Desktop\FRSTLauncher.exe
2018-07-30 16:52 - 2018-07-30 16:52 - 002412544 _____ (Farbar) C:\Users\Rudolf Badžgoň\Desktop\FRST64.exe
2018-07-30 16:33 - 2018-07-30 16:33 - 000000946 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2018-07-30 16:32 - 2018-07-30 16:32 - 001250832 _____ (CPUID, Inc. ) C:\Users\Rudolf Badžgoň\Downloads\hwmonitor_1.35.exe
2018-07-30 16:28 - 2018-07-30 16:28 - 000000000 ____D C:\Windows\System32\Tasks\Event Viewer Tasks
2018-07-27 14:21 - 2018-07-30 16:16 - 000000000 ____D C:\Users\Public\Speedup Sessions
2018-07-27 11:41 - 2018-03-27 01:24 - 000029352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2018-07-27 11:41 - 2018-03-27 01:24 - 000019088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2018-07-27 11:41 - 2018-03-27 01:17 - 000030888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2018-07-27 11:41 - 2018-03-27 01:17 - 000019088 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2018-07-23 14:26 - 2018-07-23 14:27 - 000000000 ____D C:\Users\Rudolf Badžgoň\Desktop\games
2018-07-19 12:30 - 2018-06-20 22:01 - 007398232 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-07-19 12:30 - 2018-06-20 21:44 - 001676064 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-07-19 12:30 - 2018-06-20 21:44 - 001536120 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-07-19 12:30 - 2018-06-20 20:48 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2018-07-19 12:30 - 2018-06-20 20:48 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fxppm.sys
2018-07-19 12:30 - 2018-06-20 18:58 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2018-07-19 12:30 - 2018-06-20 18:58 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2018-07-19 12:30 - 2018-06-20 18:58 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2018-07-19 12:30 - 2018-06-15 05:01 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-07-19 12:30 - 2018-06-12 10:00 - 022374248 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-07-19 12:30 - 2018-06-12 09:57 - 019790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-07-19 12:30 - 2018-06-11 18:55 - 025744896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-07-19 12:30 - 2018-06-11 18:36 - 003119616 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-07-19 12:30 - 2018-06-11 18:14 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-07-19 12:30 - 2018-06-11 18:06 - 005779968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-07-19 12:30 - 2018-06-11 18:04 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-07-19 12:30 - 2018-06-11 17:39 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-07-19 12:30 - 2018-06-11 17:36 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-07-19 12:30 - 2018-06-11 17:31 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-07-19 12:30 - 2018-06-11 17:22 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-07-19 12:30 - 2018-06-11 17:11 - 001545216 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-07-19 12:30 - 2018-06-11 16:59 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-07-19 12:30 - 2018-06-09 18:40 - 020286976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-07-19 12:30 - 2018-06-09 18:26 - 002712064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-07-19 12:30 - 2018-06-09 18:09 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-07-19 12:30 - 2018-06-09 17:59 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-07-19 12:30 - 2018-06-09 17:37 - 004496384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-07-19 12:30 - 2018-06-09 17:37 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-07-19 12:30 - 2018-06-09 17:36 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-07-19 12:30 - 2018-06-09 17:32 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-07-19 12:30 - 2018-06-09 17:11 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-07-19 12:30 - 2018-06-09 17:08 - 001313792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-07-19 12:30 - 2018-06-09 17:06 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-07-19 12:30 - 2018-06-09 04:47 - 002176072 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2018-07-19 12:30 - 2018-06-09 03:44 - 001565528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2018-07-19 12:30 - 2018-06-08 20:26 - 000440832 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2018-07-19 12:30 - 2018-06-08 19:54 - 000656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2018-07-19 12:30 - 2018-06-08 19:53 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2018-07-19 12:30 - 2018-06-08 19:07 - 000404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2018-07-19 12:30 - 2018-06-08 18:44 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2018-07-19 12:30 - 2018-06-07 20:51 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-07-19 12:30 - 2018-05-24 23:29 - 002449752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-07-19 12:30 - 2018-05-24 23:29 - 000428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-07-19 12:30 - 2018-05-15 10:42 - 000590680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2018-07-19 12:30 - 2018-05-04 01:02 - 000439640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2018-07-19 12:30 - 2018-05-04 01:02 - 000325456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2018-07-19 12:30 - 2018-05-04 01:02 - 000187728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2018-07-19 12:30 - 2018-04-26 15:43 - 000918296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000065880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000021848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000018776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000017240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000017240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000015704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000015192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000013656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000013152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000012120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:43 - 000011608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000998912 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000063832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000020824 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000019288 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000017752 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000016216 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000015704 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000014168 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000013656 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000012632 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-07-19 12:30 - 2018-04-26 15:19 - 000012120 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-07-19 12:30 - 2018-04-25 19:38 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-07-19 12:17 - 2018-06-12 21:01 - 000149632 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-07-19 12:17 - 2018-06-08 15:15 - 002860032 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-07-19 12:17 - 2018-06-08 15:15 - 001602048 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-07-19 12:17 - 2018-06-08 15:15 - 000783872 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-07-19 12:17 - 2018-06-08 15:15 - 000680960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-07-19 12:17 - 2018-06-08 15:15 - 000612352 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-07-19 12:17 - 2018-06-08 15:15 - 000470016 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-07-19 12:17 - 2018-06-08 15:15 - 000443392 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-07-19 12:17 - 2018-06-08 15:15 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-07-19 12:17 - 2018-06-08 15:15 - 000246272 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-07-18 11:58 - 2018-07-18 11:58 - 000338546 _____ C:\Users\Rudolf Badžgoň\Downloads\Quartz-3.4.0.zip
2018-07-18 11:17 - 2018-07-18 11:17 - 000003160 _____ C:\Windows\System32\Tasks\StartCN
2018-07-18 11:17 - 2018-07-18 11:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2018-07-18 11:06 - 2018-07-18 11:06 - 000000060 _____ C:\ProgramData\SoftwareUpdateTemp.xml
2018-07-18 11:05 - 2018-07-18 11:06 - 041315000 _____ (AMD Inc.) C:\Users\Rudolf Badžgoň\Downloads\radeon-crimson-relive-17.7.1-minimalsetup-170714_64bit.exe
2018-07-15 10:57 - 2018-07-15 10:57 - 000000000 ____D C:\Users\Rudolf Badžgoň\Downloads\2013 - Combichrist - No Redemption (Official DMC Devil May Cry Soundtrack)
2018-07-12 07:45 - 2018-07-12 07:49 - 060906427 _____ C:\Users\Rudolf Badžgoň\Downloads\2013 - Combichrist - No Redemption (Official DMC Devil May Cry Soundtrack).zip
2018-07-04 20:49 - 2018-07-04 20:49 - 001008781 _____ C:\Users\Rudolf Badžgoň\Downloads\Chbosky, Stephen - Charlieho malé tajomstvá.epub
2018-07-04 20:49 - 2018-07-04 20:49 - 000550380 _____ C:\Users\Rudolf Badžgoň\Downloads\Simon vs The Homo Sapiens Agenda - Becky Albertalli.epub
2018-07-02 18:44 - 2018-07-02 18:44 - 000000000 ____D C:\Users\Rudolf Badžgoň\Downloads\DragonForce - Valley Of The Damned 2003
2018-07-02 18:39 - 2018-07-02 18:43 - 082609980 _____ C:\Users\Rudolf Badžgoň\Downloads\DragonForce - Valley Of The Damned 2003.rar
2018-07-02 18:27 - 2018-07-02 18:27 - 000318166 _____ C:\Users\Rudolf Badžgoň\Downloads\order_181620010880677.pdf
2018-07-02 11:53 - 2018-07-02 11:53 - 000165119 _____ C:\Users\Rudolf Badžgoň\Downloads\Internetovy-doklad-ZSSK.pdf
2018-07-02 09:17 - 2018-07-02 09:17 - 000001177 _____ C:\Users\Rudolf Badžgoň\Desktop\World of Warcraft Launcher.exe - odkaz.lnk
2018-07-02 09:05 - 2018-07-02 11:38 - 2516260045 _____ C:\Users\Rudolf Badžgoň\Downloads\Jádro - Katastrofický - V.Brit, USA - 2003 - cz dabing.mkv
2018-07-01 19:39 - 2018-07-01 19:39 - 000159360 _____ C:\Users\Rudolf Badžgoň\Downloads\vrstvy_zeme_-_papierový_model.pdf
2018-07-01 17:31 - 2018-07-01 17:31 - 004866782 _____ C:\Users\Rudolf Badžgoň\Downloads\prezentacia.pptx

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-30 16:55 - 2018-06-16 11:03 - 000000000 ____D C:\FRST
2018-07-30 16:43 - 2018-06-29 08:31 - 000000000 ____D C:\Users\Rudolf Badžgoň\Downloads\Sonata Arctica - Winterheart's Guild 2003
2018-07-30 16:38 - 2015-01-05 21:17 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2249863331-521022342-2866738468-1001
2018-07-30 16:33 - 2018-06-28 14:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2018-07-30 16:33 - 2018-06-28 14:46 - 000000000 ____D C:\Program Files\CPUID
2018-07-30 16:16 - 2016-11-25 08:07 - 000000000 ____D C:\Users\Rudolf Badžgoň\AppData\LocalLow\Mozilla
2018-07-30 16:15 - 2015-01-05 23:44 - 000000304 _____ C:\Windows\Tasks\RtlNetworkGenieVistaStart.job
2018-07-30 16:15 - 2015-01-05 21:12 - 000000000 ____D C:\Users\Rudolf Badžgoň
2018-07-30 16:15 - 2015-01-05 20:51 - 000000000 ____D C:\Users\Rudolf Badžgoň\AppData\Local\CrashDumps
2018-07-30 16:14 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-07-30 12:06 - 2016-09-04 20:23 - 000000000 ____D C:\Users\Rudolf Badžgoň\AppData\Local\Battle.net
2018-07-30 09:30 - 2016-09-04 20:21 - 000000000 ____D C:\Program Files (x86)\Battle.net
2018-07-29 09:57 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2018-07-27 14:21 - 2018-06-25 14:50 - 000003662 _____ C:\Windows\System32\Tasks\AviraSystemSpeedupUpdate
2018-07-27 14:21 - 2018-06-25 14:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2018-07-27 14:18 - 2015-01-05 20:14 - 000051136 _____ C:\Windows\system32\perfh01B.dat
2018-07-27 14:18 - 2015-01-05 20:14 - 000013706 _____ C:\Windows\system32\perfc01B.dat
2018-07-27 14:18 - 2014-03-18 12:08 - 000914312 _____ C:\Windows\system32\PerfStringBackup.INI
2018-07-27 14:18 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2018-07-27 11:54 - 2018-06-25 14:05 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2018-07-27 11:44 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2018-07-27 11:18 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2018-07-26 19:59 - 2013-08-22 16:44 - 000512752 _____ C:\Windows\system32\FNTCACHE.DAT
2018-07-26 19:55 - 2015-04-17 21:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-07-26 19:55 - 2013-08-22 17:36 - 000000000 ___RD C:\Windows\ToastData
2018-07-23 16:32 - 2018-06-18 11:29 - 000000073 _____ C:\Users\Rudolf Badžgoň\Desktop\Nový textový dokument.txt
2018-07-22 21:47 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2018-07-19 18:06 - 2015-04-03 15:12 - 000000000 ____D C:\Users\Rudolf Badžgoň\Desktop\skola
2018-07-19 13:10 - 2015-04-18 10:52 - 000000000 ____D C:\Users\rudo\AppData\Roaming\Raptr
2018-07-19 13:10 - 2015-01-05 19:12 - 000000000 ____D C:\AMD
2018-07-19 13:07 - 2018-06-28 21:01 - 000017606 _____ C:\Windows\SysWOW64\Defrag.debuglog
2018-07-19 12:16 - 2018-05-11 13:21 - 000685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-07-18 09:19 - 2016-10-27 20:09 - 000000000 ____D C:\Users\Rudolf Badžgoň\AppData\Roaming\Curse Client
2018-07-18 08:47 - 2017-12-22 18:53 - 000000000 ____D C:\Users\Rudolf Badžgoň\Desktop\Sk
2018-07-16 09:41 - 2015-01-05 20:36 - 000000000 ____D C:\Windows\system32\MRT
2018-07-16 09:38 - 2015-01-05 20:36 - 134675576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-07-15 10:04 - 2015-01-27 12:54 - 005703168 ___SH C:\Users\Rudolf Badžgoň\Desktop\Thumbs.db
2018-07-14 10:31 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\tracing
2018-07-13 11:40 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2018-07-11 07:58 - 2018-04-12 17:47 - 000004472 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-07-11 07:58 - 2015-01-05 21:05 - 000004288 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-07-11 07:58 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-07-11 07:58 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2018-07-09 18:00 - 2015-01-05 21:15 - 000000000 ____D C:\ProgramData\Package Cache
2018-07-07 08:25 - 2017-01-15 18:57 - 000001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-07-07 08:25 - 2017-01-15 18:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-07-07 08:25 - 2016-11-24 22:32 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-07-06 15:10 - 2018-06-25 14:57 - 000179376 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2018-07-06 15:10 - 2018-06-25 14:57 - 000169864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2018-07-02 15:03 - 2015-01-06 21:06 - 000000000 ____D C:\Users\Rudolf Badžgoň\AppData\Roaming\vlc
2018-07-02 13:55 - 2017-11-11 12:12 - 000006144 _____ C:\Users\Rudolf Badžgoň\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Files in the root of some directories =======

2017-10-22 09:04 - 2003-03-21 12:45 - 000250544 _____ (KeyWorks Software) C:\Program Files (x86)\Common Files\keyhelp.ocx
2017-11-11 12:12 - 2018-07-02 13:55 - 000006144 _____ () C:\Users\Rudolf Badžgoň\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-03 15:20 - 2015-12-16 09:37 - 000007620 _____ () C:\Users\Rudolf Badžgoň\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-07-23 09:18

==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21.07.2018
Ran by Rudolf Badžgoň (30-07-2018 16:55:42)
Running from C:\Users\Rudolf Badžgoň\Desktop
Windows 8.1 (Update) (X64) (2015-01-05 19:12:34)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2249863331-521022342-2866738468-500 - Administrator - Disabled)
Guest (S-1-5-21-2249863331-521022342-2866738468-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2249863331-521022342-2866738468-1005 - Limited - Enabled)
rudo (S-1-5-21-2249863331-521022342-2866738468-1007 - Limited - Enabled) => C:\Users\rudo
Rudolf Badžgoň (S-1-5-21-2249863331-521022342-2866738468-1001 - Administrator - Enabled) => C:\Users\Rudolf Badžgoň

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{7F8ACF50-8902-490D-A364-2047AA204016}) (Version: 1.5 - Eyeo GmbH)
Adobe Flash Player 30 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 30.0.0.134 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Ashampoo Burning Studio 6 FREE v.6.83 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.3 - Ashampoo GmbH & Co. KG)
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version: - Ubisoft)
Avira (HKLM-x32\...\{0bb4751a-1ff2-4c79-80df-5bab5da63823}) (Version: 1.2.116.18787 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{218C5045-A3A1-486C-91F5-A1B4D4772F8D}) (Version: 1.2.116.18787 - Avira Operations GmbH & Co. KG) Hidden
Avira (HKLM-x32\...\{b883705a-0784-4d1e-9766-601e8d66945a}) (Version: 1.2.115.14232 - Avira Operations GmbH & Co. KG)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.36.211 - Avira Operations GmbH & Co. KG)
Avira Software Updater (HKLM-x32\...\{E33A25C6-105A-4E00-AA80-0525F8CBDE09}) (Version: 2.0.5.51890 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 4.12.0.7662 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Catalyst Control Center Next Localization BR (HKLM\...\{AA6F7B8A-64C1-C3B8-D1E9-9D4506F7839E}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{4FFB703F-DA14-282C-00B8-2077728F8C51}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{9271214E-CA3A-CB4C-CBE8-0837D42E045F}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{CC45B2E1-3656-A28B-6893-C83B8EA4B075}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{E87B2B22-8537-1BF0-8F90-B8BD975EF8C0}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{73859017-7296-076D-1FA8-E8F03EC76D8E}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{D8DF0E67-3219-7780-9EA6-70D6645577AA}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{4B93DFA4-2484-EABC-F66B-A2ACD6FF6763}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{7D76E4B6-04AC-CA12-5598-52C0D9605A38}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{7F40BDF1-4722-3D7C-163B-FC7258C4A957}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{2955F53C-4BBF-92E9-73BD-3406950F182D}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{063C1F20-E362-67B9-F3CC-2055AD5E793D}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{7F46DD0A-DDEB-F42D-54D3-C73D98FF0D15}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{05FF29CB-76BB-B80E-0625-3B5F256DCC71}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{03565BED-2B0D-EF07-C618-54EF20DEE342}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{51896E55-4CDE-75FF-5345-92A53B27D75F}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{6B3D45BE-8B28-D35A-8AFD-2697A4DB401D}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4D780E47-1603-2276-1624-01E42AA063D4}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{019DF301-4F07-B0B7-69D6-D6E02A21EC66}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{8D2A7E10-CB64-F842-C11B-677CDA6E7181}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{46215A7F-73E6-BA1B-2DFF-76DD475F5C74}) (Version: 2017.0704.1721.31196 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
ClearSkinFX for Digital Cameras (HKLM-x32\...\ClearSkinFX for Digital Cameras_is1) (Version: - )
CPUID CPU-Z 1.85 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.85 - CPUID, Inc.)
CPUID HWMonitor 1.35 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.35 - CPUID, Inc.)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Disk Investigator 1.61 (HKLM-x32\...\Disk Investigator) (Version: 1.61 - Kevin Solway)
Google Drive (HKLM-x32\...\{A8DC81F2-D365-4248-892A-FA3B5951F731}) (Version: 2.34.9392.7803 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 31.0.1650.59 - Spoločnosť Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
HotPotatoes v 6.3.0.5 (HKLM-x32\...\hotpot_is1) (Version: - HalfBaked)
Imagine (HKLM-x32\...\Imagine) (Version: Version 2.0.0.420 - )
Imagine Plugin (HKLM-x32\...\ImaginePlugin) (Version: Version 2.0.0.420 - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.51.8439 - Intel(R) Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{4FEC5775-3E19-4791-9786-F6EB1B25D327}) (Version: 5.0.10.2832 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{608E1B9B-A2E8-4A1F-8BAB-874EB0DD25E3}) (Version: 1.0.0.36888 - Intel Corporation) Hidden
Intel® Chipset Device Software (HKLM-x32\...\{4a87bd28-a855-4a8d-b133-60ca8ccffd30}) (Version: 10.0.17 - Intel(R) Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - ENU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 (HKLM-x32\...\{206898cc-4b41-4d98-ac28-9f9ae57f91fe}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 61.0.1 (x64 sk) (HKLM\...\Mozilla Firefox 61.0.1 (x64 sk)) (Version: 61.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 61.0.1.6759 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 1.0.0.67 - MSI)
MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.3 - MSI)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 2.0.0.9 - MSI)
MSI Smart Utilities (HKLM-x32\...\{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1) (Version: 2.0.0.06 - MSI)
MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.025 - MSI)
Need for Speed™ (HKLM-x32\...\{F8643E83-A868-4EE8-A0B9-389386830453}) (Version: 1.3.0.0 - Electronic Arts)
NetworkGenie (HKLM-x32\...\{B416A23D-C2BD-4956-8BAE-5C3BAFF1AC1E}) (Version: 1.0.0.8 - MSI)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{C560D6E7-E40A-435D-8B71-62CBCF1701B2}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.30491 - Electronic Arts, Inc.)
paint.net (HKLM\...\{E8FA8815-3817-4128-A814-E2EAC456ADF0}) (Version: 4.0.21 - dotPDN LLC)
PhotoFiltre 7 (HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\PhotoFiltre 7) (Version: - )
Python 3.6.4 (32-bit) (HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\{9218130b-5ad0-4cf7-82be-6993cfd6cb84}) (Version: 3.6.4150.0 - Python Software Foundation)
Python 3.6.4 Core Interpreter (32-bit) (HKLM-x32\...\{D188614B-E656-4EF1-9F5A-23559EBE8F5A}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Development Libraries (32-bit) (HKLM-x32\...\{C3797E33-967D-4687-8F1A-9DE771A00125}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Documentation (32-bit) (HKLM-x32\...\{E09874D3-E898-4AB6-B043-EE24DF786088}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Executables (32-bit) (HKLM-x32\...\{47A75DB9-F3F5-4697-9261-DBA5162DBB9E}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 pip Bootstrap (32-bit) (HKLM-x32\...\{54142B43-2FA5-4BBA-BF03-27C10EB50C1E}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Standard Library (32-bit) (HKLM-x32\...\{2832768E-9BCA-4421-950C-7186B3BDFC45}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Tcl/Tk Support (32-bit) (HKLM-x32\...\{20888FA1-8127-42E3-969F-9BF93245AC83}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Test Suite (32-bit) (HKLM-x32\...\{D14FB2FA-51B2-415C-93BF-5053102235EE}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python 3.6.4 Utility Scripts (32-bit) (HKLM-x32\...\{D0730E44-E519-4F39-B926-E2FC0449D67C}) (Version: 3.6.4150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{B42FF40A-60D4-4096-AC47-C86153D72797}) (Version: 3.6.6196.0 - Python Software Foundation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.23.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7245 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1) (Version: 1.0.3.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1-2) (Version: 1.0.39.1 - LunarG, Inc.)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_SK_is1) (Version: 17.0.1.9 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-07-06] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {ef263503-8f0e-3e6a-ae2e-fe0b4b441d52} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google)
ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {3d52b24d-33bb-3895-99ea-a0156f24a3f9} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-07-04] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {cefaf456-bc17-3f4b-b7d9-75070925911b} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-07-06] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {13D09AD6-A114-453D-9139-E35BA3CB8B5D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2018-07-16] (Microsoft Corporation)
Task: {14496212-CDF5-490B-9286-0CC42E791F02} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\5 => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [2014-04-24] (Intel Corporation)
Task: {2343C237-0FA8-4EC9-9C1D-E520ED0ED3ED} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\2 => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [2014-04-08] (MSI)
Task: {26194471-5454-4E8E-B776-30C35102997E} - System32\Tasks\RtlNetworkGenieVistaStart => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe [2014-04-23] (Realtek Semiconductor)
Task: {26F325CE-5BEA-42B8-8DD7-7245E26F692B} - System32\Tasks\{B73AE33C-6654-4EA8-8694-C7DFFB8C3577} => C:\Windows\system32\pcalua.exe -a D:\start.exe -d D:\ -c ar
Task: {592B50E7-DE0D-4098-BB20-BD0EA20B9AE4} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\1 => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2014-04-03] (Intel Corporation)
Task: {70CD1CA0-35A9-4ADB-A2E2-54D1073A65CE} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [2018-07-27] (Avira Operations GmbH & Co. KG )
Task: {7B896EAC-8753-4257-808F-986211E31A79} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2018-07-06] (Avira Operations GmbH & Co. KG)
Task: {8A89188A-3D64-45F7-97D4-F55E748614A9} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\3 => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [2012-09-19] ()
Task: {8B9704DD-AF33-49D8-B8FF-716B3504078E} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-07-04] (Advanced Micro Devices, Inc.)
Task: {90B86634-B6A4-4EB8-B45E-41B28C02B80C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {939A0F8C-206F-4D43-BC07-09CEE12CBC45} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {B35D6E09-1C6D-400E-982F-44D70009AE18} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_134_Plugin.exe [2018-07-11] (Adobe Systems Incorporated)
Task: {BDBCBFFA-17C8-4074-BF15-7D18F160BEDE} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {C6E90CCB-DF5C-4F3E-ACDF-6C4EEE98199E} - System32\Tasks\Avira\System Speedup\TestScheduler => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [2018-07-09] (Avira Operations GmbH & Co. KG)
Task: {E7188499-A17E-40CE-9C2B-4B14DC51DB0E} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\4 => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [2014-06-06] ()
Task: {E8C77B90-A930-4E13-8156-8BA53185A21A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-07-11] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> C:\ProgramData\Ashampoo\YourDeals.exe () -> hxxp://linktarget.ashampoo.com/linktarget/?target=marketplace&edition=eid=4311&utm_medium=desktop&x-pos=Metro

==================== Loaded Modules (Whitelisted) ==============

2017-05-25 18:04 - 2017-05-25 18:04 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2017-05-25 18:04 - 2017-05-25 18:04 - 000739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2017-05-25 18:04 - 2017-05-25 18:04 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2017-05-25 18:04 - 2017-05-25 18:04 - 000071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2017-05-25 18:04 - 2017-05-25 18:04 - 000011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2017-05-25 18:04 - 2017-05-25 18:04 - 002013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2017-05-25 18:04 - 2017-05-25 18:04 - 000191488 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2014-04-24 13:24 - 2014-04-24 13:24 - 000209712 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2014-04-24 13:24 - 2014-04-24 13:24 - 000057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2014-04-24 13:24 - 2014-04-24 13:24 - 000057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTEncryptionCheck.dll
2014-04-24 13:24 - 2014-04-24 13:24 - 000037168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2015-01-05 23:43 - 2014-06-03 18:37 - 001990144 _____ () C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
2015-01-05 23:43 - 2014-04-21 09:09 - 000150528 ____R () C:\Program Files (x86)\MSI\NetworkGenie\gep.dll
2014-04-03 17:48 - 2014-04-03 17:48 - 001241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-01-05 23:43 - 2014-04-30 11:15 - 001723888 _____ () C:\MSI\Smart Utilities\SuperRAIDExt.DLL

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2018-06-25 14:41 - 000000901 _____ C:\Windows\system32\Drivers\etc\hosts

0.0.0.1 mssplus.mcafee.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2249863331-521022342-2866738468-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Rudolf Badžgoň\AppData\Roaming\Mozilla\Firefox\Pozadie plochy.bmp
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run32: => "Aimersoft Helper Compact.exe"
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\StartupApproved\StartupFolder: => "Curse.lnk"
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\StartupApproved\StartupFolder: => "wallpaper64 - odkaz.lnk"
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-2249863331-521022342-2866738468-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{594E6B74-DDE2-46E6-AE0E-398B8EE155E0}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{D1887B78-19D1-46C4-9720-9329869240DF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{5F9AAAA2-0F02-49F6-856C-EA1E3842A55B}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe
FirewallRules: [{315CB238-603A-4C10-AD71-D6D463FE5165}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed\NFS16.exe
FirewallRules: [{3EE8DFC5-53E4-44E9-BF7F-68B5D70AA9B3}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed\NFS16.exe
FirewallRules: [{998206F5-2574-490F-9C06-DE8DDFE15EC2}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed\NFS16_trial.exe
FirewallRules: [{48998C4D-6DDF-4B27-AE8E-11094F5F5249}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed\NFS16_trial.exe
FirewallRules: [{85109F17-9381-4F08-AFEF-1773C2AC1169}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5541F4FB-F072-4C16-811C-C7C313FC330D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{E928D9F6-CF8C-4686-8D58-ABC3A3DD367C}C:\programdata\battle.net\agent\agent.6082\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.6082\agent.exe
FirewallRules: [UDP Query User{9C6B82C1-EF4F-4044-AEE0-A372563CE4AF}C:\programdata\battle.net\agent\agent.6082\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.6082\agent.exe
FirewallRules: [TCP Query User{7EF2F78E-BC79-42F6-B7D4-971898EF5955}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.6160\agent.exe
FirewallRules: [UDP Query User{4980CABA-A15F-493D-B311-B4C92032E5E4}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.6160\agent.exe
FirewallRules: [{D8EF72FE-F6A5-4F6D-9DC0-4B95CFE77CF0}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe
FirewallRules: [{225933D3-69CE-40AD-90AC-BFF83F5AC785}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe
FirewallRules: [TCP Query User{F06F37BA-42AD-4688-9B00-4F6B7782CFCC}C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe] => (Allow) C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe
FirewallRules: [UDP Query User{9E9C9A4D-6403-4C44-A45B-A7C3B74C6FC5}C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe] => (Allow) C:\program files (x86)\avira\softwareupdater\avirasoftwareupdatertoastnotificationsbridge.exe
FirewallRules: [TCP Query User{E1FE6285-3546-44F5-97BF-BA077AFB4CC6}Y:\world of warcraft\utils\wowvoiceproxy.exe] => (Block) Y:\world of warcraft\utils\wowvoiceproxy.exe
FirewallRules: [UDP Query User{ABA74594-D060-476B-B0E5-3435834F6649}Y:\world of warcraft\utils\wowvoiceproxy.exe] => (Block) Y:\world of warcraft\utils\wowvoiceproxy.exe

==================== Restore Points =========================

28-06-2018 21:41:30 Avira System Speedup Optimization
14-07-2018 10:30:52 Avira System Speedup Optimization
18-07-2018 11:07:35 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123
19-07-2018 13:09:54 Avira System Speedup Optimization
26-07-2018 19:51:57 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/30/2018 04:15:59 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (07/30/2018 04:15:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Explorer.EXE, verzia: 6.3.9600.18460, časová značka: 0x57c1b8c1
Názov chybujúceho modulu: atidxx64.dll, verzia: 22.19.171.1024, časová značka: 0x595c0e57
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000069bdb2
Identifikácia chybujúceho procesu: 0xe74
Čas spustenia chybujúcej aplikácie: 0x01d4280fc77a5571
Cesta chybujúcej aplikácie: C:\Windows\Explorer.EXE
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\atidxx64.dll
Identifikácia hlásenia: 0a93e38b-9403-11e8-8332-d8cb8a122dba
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (07/30/2018 04:05:42 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code.

Error: (07/30/2018 04:05:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Explorer.EXE, verzia: 6.3.9600.18460, časová značka: 0x57c1b8c1
Názov chybujúceho modulu: atidxx64.dll, verzia: 22.19.171.1024, časová značka: 0x595c0e57
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000069bdb2
Identifikácia chybujúceho procesu: 0x374
Čas spustenia chybujúcej aplikácie: 0x01d4280e649d7a2c
Cesta chybujúcej aplikácie: C:\Windows\Explorer.EXE
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\atidxx64.dll
Identifikácia hlásenia: a407e6c9-9401-11e8-8331-d8cb8a122dba
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (07/30/2018 09:19:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Explorer.EXE, verzia: 6.3.9600.18460, časová značka: 0x57c1b8c1
Názov chybujúceho modulu: atidxx64.dll, verzia: 22.19.171.1024, časová značka: 0x595c0e57
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000069bdb2
Identifikácia chybujúceho procesu: 0xd04
Čas spustenia chybujúcej aplikácie: 0x01d427d595a593f7
Cesta chybujúcej aplikácie: C:\Windows\Explorer.EXE
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\atidxx64.dll
Identifikácia hlásenia: d3e39243-93c8-11e8-8331-d8cb8a122dba
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (07/29/2018 10:35:32 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code.

Error: (07/29/2018 10:35:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Explorer.EXE, verzia: 6.3.9600.18460, časová značka: 0x57c1b8c1
Názov chybujúceho modulu: atidxx64.dll, verzia: 22.19.171.1024, časová značka: 0x595c0e57
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000069bdb2
Identifikácia chybujúceho procesu: 0x754
Čas spustenia chybujúcej aplikácie: 0x01d427171529115c
Cesta chybujúcej aplikácie: C:\Windows\Explorer.EXE
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\atidxx64.dll
Identifikácia hlásenia: 5602b056-930a-11e8-8331-d8cb8a122dba
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (07/29/2018 08:50:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: Explorer.EXE, verzia: 6.3.9600.18460, časová značka: 0x57c1b8c1
Názov chybujúceho modulu: atidxx64.dll, verzia: 22.19.171.1024, časová značka: 0x595c0e57
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000069bdb2
Identifikácia chybujúceho procesu: 0xe90
Čas spustenia chybujúcej aplikácie: 0x01d4270862f94d98
Cesta chybujúcej aplikácie: C:\Windows\Explorer.EXE
Cesta chybujúceho modulu: C:\Windows\SYSTEM32\atidxx64.dll
Identifikácia hlásenia: a30f58dd-92fb-11e8-8330-d8cb8a122dba
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:


System errors:
=============
Error: (07/30/2018 04:17:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Wallpaper Engine Service zlyhalo kvôli nasledujúcej chybe:
Systém nemôže nájsť zadaný súbor.

Error: (07/30/2018 04:14:33 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:00:33 on ‎30.‎7.‎2018 was unexpected.

Error: (07/29/2018 10:36:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Wallpaper Engine Service zlyhalo kvôli nasledujúcej chybe:
Systém nemôže nájsť zadaný súbor.

Error: (07/29/2018 10:32:26 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 10:22:26 on ‎29.‎7.‎2018 was unexpected.

Error: (07/28/2018 03:29:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Wallpaper Engine Service zlyhalo kvôli nasledujúcej chybe:
Systém nemôže nájsť zadaný súbor.

Error: (07/28/2018 03:27:03 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 15:17:09 on ‎28.‎7.‎2018 was unexpected.

Error: (07/27/2018 02:21:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Avira Optimizer Host sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.

Error: (07/27/2018 02:20:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Wallpaper Engine Service zlyhalo kvôli nasledujúcej chybe:
Systém nemôže nájsť zadaný súbor.


Windows Defender:
===================================
Date: 2018-06-16 11:24:36.372
Description:
Windows Defender scan has been stopped before completion.
Scan ID: {9FD15CAF-11D6-42D1-87C0-8EBB25F7607E}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-16 10:56:45.401
Description:
Windows Defender scan has been stopped before completion.
Scan ID: {8CD4B914-D98C-442E-B63C-9F92674D54F3}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-15 18:46:38.262
Description:
Windows Defender has detected malware or other potentially unwanted software.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid= ... terprise=0
Name: Trojan:HTML/Brocoiner!rfn
ID: 2147724297
Severity: Závažná
Category: Trójsky kôň
Path: file:_C:\Users\Rudolf Badžgoň\AppData\Local\Mozilla\Firefox\Profiles\pqsz01li.default\cache2\entries\CE94BF5164C04AE312403C4CA6A85F4F3B1133A2
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Signature Version: AV: 1.269.1283.0, AS: 1.269.1283.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14901.4, NIS: 2.1.14600.4

Date: 2018-06-14 09:05:26.465
Description:
Windows Defender scan has been stopped before completion.
Scan ID: {195366D7-7D2D-41EF-99CA-B88BF83653A8}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-06-10 17:54:24.472
Description:
Windows Defender scan has been stopped before completion.
Scan ID: {9368F61F-3A1D-4857-BBE2-827546E28CEB}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2018-04-19 16:03:48.316
Description:
Windows Defender has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.265.722.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14700.5
Error code: 0x80240016
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2018-04-19 16:03:48.308
Description:
Windows Defender has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.265.722.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14700.5
Error code: 0x80240016
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2018-04-19 16:03:48.308
Description:
Windows Defender has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.265.722.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14700.5
Error code: 0x80240016
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2017-12-23 08:22:48.631
Description:
Windows Defender has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.259.654.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14405.2
Error code: 0x80240016
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2017-12-23 08:22:48.631
Description:
Windows Defender has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.259.654.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14405.2
Error code: 0x80240016
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

CodeIntegrity:
===================================

Date: 2018-06-16 11:01:00.807
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-06-01 10:02:33.988
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-05-15 08:16:10.087
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-05-14 08:49:29.316
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-05-13 09:32:43.131
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-04-30 06:03:53.172
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-04-19 15:53:16.169
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-04-08 09:38:00.686
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Percentage of memory in use: 33%
Total physical RAM: 8127.9 MB
Available physical RAM: 5368.71 MB
Total Virtual: 11327.9 MB
Available Virtual: 7753.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.17 GB) (Free:752.4 GB) NTFS
Drive y: (Nový zväzok) (Fixed) (Total:111.79 GB) (Free:52.34 GB) NTFS

\\?\Volume{3b4cd2d5-950e-11e4-824e-806e6f6e6963}\ (Vyhradené systémom) (Fixed) (Total:0.34 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2DDB2C4E)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 0ED40A84)
Partition 1: (Not Active) - (Size=111.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Samovoľné vypínanie PC

#2 Příspěvek od Rudy »

Zdravím!
Virus to způsobovat může, častěji se to ale stává v důsledku nějaké hw vady. Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět