Chrome zamrzne PC

[netman]

Dobrý den,
minulý týden jsem zjistil, že se mi automaticky zaktualizoval Google Chrome na verzi 69, ale od té doby začaly problémy s tím, že pokaždé když ho spustím, tak paměť jede přes 90% a celé PC je nepoužitelné. Mám tam poměrně dost záložek a relaci, u které se otevírá dost tabů, ale v minulé verzi to nedělalo problém.
Prosím o kontrolu a pokud možno zásah tak, abych nepřišel o tu relaci tabů v Google Chrome.
Děkuji za radu

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.09.2018
Ran by Lubos (administrator) on LUBOS-PC (29-09-2018 10:18:45)
Running from C:\Users\Lubos\Desktop
Loaded Profiles: Lubos (Available Profiles: Lubos)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-08-28] (AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{A63D2477-15AE-419C-80DA-AA832C529AE8}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
IE Session Restore: HKU\S-1-5-21-4287783693-2563561285-1554447606-1000 -> is enabled.

FireFox:
========
FF ProfilePath: C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\pbznzbem.default [2018-09-29]
FF Homepage: Mozilla\Firefox\Profiles\pbznzbem.default -> about:blank
FF Session Restore: Mozilla\Firefox\Profiles\pbznzbem.default -> is enabled.
FF Extension: (Firefox Monitor) - C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\pbznzbem.default\features\{5487b612-75ef-428b-b6f2-af15b6621432}\fxmonitor@mozilla.org.xpi [2018-09-13]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_31_0_0_108.dll [2018-09-28] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_108.dll [2018-09-28] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)

Chrome:
=======
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default [2018-09-29]
CHR Extension: (Disk Google) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-18]
CHR Extension: (YouTube) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-18]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Gmail) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-18]
CHR Extension: (Chrome Media Router) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-09-20]
CHR Profile: C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\System Profile [2018-09-29]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7994520 2018-08-28] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-08-28] (AVAST Software)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-11-22] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-11-22] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-09-25] (Dropbox, Inc.)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
S4 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [73856 2017-09-26] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [73856 2017-09-26] (The OpenVPN Project)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11293936 2018-04-03] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [199712 2018-08-28] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229384 2018-08-28] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201320 2018-08-28] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-08-28] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59568 2018-08-28] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-08-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [163392 2018-09-11] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111864 2018-08-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87904 2018-08-28] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-08-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467320 2018-09-04] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215920 2018-09-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381560 2018-08-28] (AVAST Software)
S3 aswHdsKe; \??\C:\Windows\system32\drivers\aswHdsKe.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-09-29 10:18 - 2018-09-29 10:21 - 000009465 _____ C:\Users\Lubos\Desktop\FRST.txt
2018-09-29 10:18 - 2018-09-29 10:18 - 000000000 ____D C:\FRST
2018-09-29 10:15 - 2018-09-29 10:16 - 002414080 _____ (Farbar) C:\Users\Lubos\Desktop\FRST64.exe
2018-09-28 18:01 - 2018-09-28 18:01 - 000004528 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-09-28 18:01 - 2018-09-28 18:01 - 000004408 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-09-28 14:09 - 2018-09-12 23:50 - 000397088 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-09-28 14:09 - 2018-09-12 22:52 - 000348960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-09-28 14:09 - 2018-09-12 07:56 - 025735680 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-09-28 14:09 - 2018-09-12 07:44 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-09-28 14:09 - 2018-09-12 07:44 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-09-28 14:09 - 2018-09-12 07:31 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-09-28 14:09 - 2018-09-12 07:31 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-09-28 14:09 - 2018-09-12 07:30 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-09-28 14:09 - 2018-09-12 07:30 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-09-28 14:09 - 2018-09-12 07:30 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-09-28 14:09 - 2018-09-12 07:29 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-09-28 14:09 - 2018-09-12 07:25 - 005778944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-09-28 14:09 - 2018-09-12 07:23 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-09-28 14:09 - 2018-09-12 07:22 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-09-28 14:09 - 2018-09-12 07:20 - 020279808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-09-28 14:09 - 2018-09-12 07:19 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-09-28 14:09 - 2018-09-12 07:18 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-09-28 14:09 - 2018-09-12 07:18 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-09-28 14:09 - 2018-09-12 07:18 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-09-28 14:09 - 2018-09-12 07:18 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-09-28 14:09 - 2018-09-12 07:13 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-09-28 14:09 - 2018-09-12 07:11 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-09-28 14:09 - 2018-09-12 07:08 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-09-28 14:09 - 2018-09-12 07:01 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-09-28 14:09 - 2018-09-12 07:01 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-09-28 14:09 - 2018-09-12 07:01 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-09-28 14:09 - 2018-09-12 07:01 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-09-28 14:09 - 2018-09-12 07:00 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-09-28 14:09 - 2018-09-12 07:00 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-09-28 14:09 - 2018-09-12 07:00 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-09-28 14:09 - 2018-09-12 06:59 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-09-28 14:09 - 2018-09-12 06:57 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-09-28 14:09 - 2018-09-12 06:57 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-09-28 14:09 - 2018-09-12 06:56 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-09-28 14:09 - 2018-09-12 06:54 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-09-28 14:09 - 2018-09-12 06:54 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-09-28 14:09 - 2018-09-12 06:54 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-09-28 14:09 - 2018-09-12 06:52 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-09-28 14:09 - 2018-09-12 06:52 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-09-28 14:09 - 2018-09-12 06:51 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-09-28 14:09 - 2018-09-12 06:51 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-09-28 14:09 - 2018-09-12 06:51 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-09-28 14:09 - 2018-09-12 06:43 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-09-28 14:09 - 2018-09-12 06:42 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-09-28 14:09 - 2018-09-12 06:42 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-09-28 14:09 - 2018-09-12 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-09-28 14:09 - 2018-09-12 06:41 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-09-28 14:09 - 2018-09-12 06:39 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-09-28 14:09 - 2018-09-12 06:39 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-09-28 14:09 - 2018-09-12 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-09-28 14:09 - 2018-09-12 06:38 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-09-28 14:09 - 2018-09-12 06:37 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-09-28 14:09 - 2018-09-12 06:35 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-09-28 14:09 - 2018-09-12 06:34 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-09-28 14:09 - 2018-09-12 06:33 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-09-28 14:09 - 2018-09-12 06:32 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-09-28 14:09 - 2018-09-12 06:29 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-09-28 14:09 - 2018-09-12 06:27 - 004510720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-09-28 14:09 - 2018-09-12 06:26 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-09-28 14:09 - 2018-09-12 06:25 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-09-28 14:09 - 2018-09-12 06:25 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-09-28 14:09 - 2018-09-12 06:24 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-09-28 14:09 - 2018-09-12 06:24 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-09-28 14:09 - 2018-09-12 06:16 - 001555456 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-09-28 14:09 - 2018-09-12 06:05 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-09-28 14:09 - 2018-09-12 06:04 - 004037632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-09-28 14:09 - 2018-09-12 06:02 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-09-28 14:09 - 2018-09-12 06:01 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-09-28 14:09 - 2018-08-31 17:22 - 003227136 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-09-28 14:09 - 2018-08-16 07:24 - 004054192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-09-28 14:09 - 2018-08-16 06:49 - 003959976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-09-28 14:09 - 2018-08-16 05:08 - 000631624 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-09-28 14:09 - 2018-08-16 05:02 - 005554272 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-09-28 14:09 - 2018-08-16 05:01 - 000263776 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-09-28 14:09 - 2018-08-16 05:01 - 000154800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-09-28 14:09 - 2018-08-16 05:01 - 000095408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-09-28 14:09 - 2018-08-16 05:00 - 000709728 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-09-28 14:09 - 2018-08-16 04:59 - 001665760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 001461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:45 - 001314048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:25 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-09-28 14:09 - 2018-08-16 04:25 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-09-28 14:09 - 2018-08-16 04:25 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-09-28 14:09 - 2018-08-16 04:24 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-09-28 14:09 - 2018-08-16 04:21 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-09-28 14:09 - 2018-08-16 04:20 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-09-28 14:09 - 2018-08-16 04:20 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-09-28 14:09 - 2018-08-16 04:18 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2018-09-28 14:09 - 2018-08-16 04:17 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-09-28 14:09 - 2018-08-16 04:17 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-09-28 14:09 - 2018-08-16 04:16 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-09-28 14:09 - 2018-08-16 04:16 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-09-28 14:09 - 2018-08-16 04:15 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-09-28 14:09 - 2018-08-16 04:13 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-09-28 14:09 - 2018-08-16 04:13 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-09-28 14:09 - 2018-08-16 04:13 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-09-28 14:09 - 2018-08-16 04:13 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-09-28 14:09 - 2018-08-16 04:12 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-09-28 14:09 - 2018-08-13 23:49 - 001391856 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2018-09-28 14:09 - 2018-08-13 17:54 - 000687616 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2018-09-28 14:09 - 2018-08-12 22:32 - 000140976 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-09-28 14:09 - 2018-08-12 22:27 - 000680960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-09-28 14:09 - 2018-08-08 17:54 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-09-28 14:09 - 2018-08-08 17:54 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-09-28 14:09 - 2018-08-08 17:40 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-09-28 14:09 - 2018-08-08 17:40 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-09-27 21:07 - 2018-09-27 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-09-25 13:52 - 2018-09-25 13:52 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-09-25 13:52 - 2018-09-25 13:52 - 000050232 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-09-25 13:52 - 2018-09-25 13:52 - 000050232 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-09-25 13:52 - 2018-09-25 13:52 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-09-23 11:38 - 2018-09-27 21:13 - 000000000 ____D C:\Users\Public\DOPRAHY
2018-09-12 18:55 - 2018-08-28 07:50 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2018-09-12 18:54 - 2018-08-31 17:08 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2018-09-12 18:54 - 2018-08-31 17:08 - 000340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2018-09-12 18:54 - 2018-08-30 03:47 - 001230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2018-09-12 18:54 - 2018-08-30 03:10 - 001424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 002004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 001888768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2018-09-12 18:54 - 2018-08-13 17:53 - 001867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-09-12 18:54 - 2018-08-13 17:53 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2018-09-12 18:54 - 2018-08-13 17:41 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 001390080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2018-09-12 18:54 - 2018-08-12 22:32 - 000378464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-09-12 18:54 - 2018-08-12 22:31 - 001894496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-09-12 18:54 - 2018-08-12 22:31 - 000289376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-09-12 18:54 - 2018-08-12 22:28 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2018-09-12 18:54 - 2018-08-12 22:14 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2018-09-12 18:54 - 2018-08-10 17:58 - 000385120 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-09-12 18:54 - 2018-08-10 17:55 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-09-12 18:54 - 2018-08-10 17:55 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-09-12 18:54 - 2018-08-10 17:53 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-09-12 18:54 - 2018-08-10 17:53 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-09-12 18:54 - 2018-08-10 17:45 - 000309424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-09-12 18:54 - 2018-08-10 17:41 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-09-12 18:54 - 2018-08-10 17:41 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-09-12 18:54 - 2018-08-10 17:40 - 000463360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-09-12 18:54 - 2018-08-10 17:40 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-09-12 18:54 - 2018-08-10 17:40 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-09-12 18:54 - 2018-08-10 17:27 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-09-12 18:54 - 2018-08-10 17:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2018-09-12 18:54 - 2018-08-10 17:13 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-09-12 18:54 - 2018-07-29 17:55 - 001110528 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-09-12 18:54 - 2018-07-18 17:18 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2018-09-02 12:32 - 2018-06-27 15:20 - 000419648 _____ C:\Windows\SysWOW64\locale.nls
2018-09-02 12:32 - 2018-06-27 15:19 - 000419648 _____ C:\Windows\system32\locale.nls

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-09-29 10:06 - 2009-07-14 06:45 - 000014192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-09-29 10:06 - 2009-07-14 06:45 - 000014192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-09-29 10:05 - 2017-11-22 11:42 - 000000906 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-09-29 09:58 - 2018-07-10 08:20 - 000000000 ____D C:\Users\Lubos\AppData\Local\AVAST Software
2018-09-29 09:58 - 2016-12-04 18:39 - 000000000 ____D C:\Users\Lubos\AppData\LocalLow\Mozilla
2018-09-29 09:56 - 2017-11-22 11:41 - 000000902 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-09-29 09:56 - 2016-05-18 15:05 - 000000000 ____D C:\Program Files (x86)\Google
2018-09-29 09:56 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-09-28 19:51 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-09-28 18:19 - 2014-07-05 18:32 - 000003836 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1404577935
2018-09-28 18:19 - 2014-07-05 18:32 - 000000000 ____D C:\Program Files (x86)\Opera
2018-09-28 18:18 - 2015-06-09 16:55 - 000001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-09-28 18:01 - 2014-03-16 12:43 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-09-28 18:01 - 2014-03-16 12:43 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-09-28 18:01 - 2014-03-16 12:43 - 000000000 ____D C:\Windows\system32\Macromed
2018-09-28 18:00 - 2014-03-15 09:34 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-09-28 16:02 - 2015-06-09 12:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-09-28 15:50 - 2017-11-02 02:15 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-09-28 14:32 - 2009-07-14 17:18 - 000668826 _____ C:\Windows\system32\perfh005.dat
2018-09-28 14:32 - 2009-07-14 17:18 - 000141486 _____ C:\Windows\system32\perfc005.dat
2018-09-28 14:32 - 2009-07-14 07:13 - 001584386 _____ C:\Windows\system32\PerfStringBackup.INI
2018-09-28 14:23 - 2009-07-14 06:45 - 000366048 _____ C:\Windows\system32\FNTCACHE.DAT
2018-09-28 14:14 - 2014-03-15 21:46 - 001559100 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-09-28 14:02 - 2017-11-20 12:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcatel PIMphony
2018-09-28 14:02 - 2016-10-17 18:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake
2018-09-28 14:02 - 2016-06-04 11:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VisitURL
2018-09-27 21:08 - 2017-11-22 11:41 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-09-22 00:00 - 2017-11-22 11:42 - 000003902 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2018-09-22 00:00 - 2017-11-22 11:41 - 000003650 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2018-09-21 15:45 - 2018-03-28 17:20 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-09-21 15:45 - 2016-05-18 15:05 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-09-21 15:45 - 2016-05-18 15:05 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-09-21 15:45 - 2016-04-25 09:10 - 000002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-09-21 15:45 - 2015-12-21 10:27 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-09-21 15:45 - 2015-07-09 11:47 - 000004516 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-09-21 15:45 - 2015-07-08 11:21 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-09-21 15:45 - 2014-03-15 23:37 - 000003102 _____ C:\Windows\System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B}
2018-09-21 15:45 - 2014-03-15 23:37 - 000003032 _____ C:\Windows\System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775}
2018-09-21 11:26 - 2018-07-04 09:15 - 000000000 ____D C:\Users\Lubos\Desktop\SONS
2018-09-20 15:00 - 2017-02-08 19:12 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-09-20 13:40 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
2018-09-20 11:19 - 2018-07-13 07:58 - 000001310 _____ C:\Users\Public\Desktop\Skype.lnk
2018-09-20 11:19 - 2018-07-13 07:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-09-20 01:47 - 2016-05-18 15:06 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-09-20 01:47 - 2016-05-18 15:06 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-09-19 23:46 - 2015-11-14 16:57 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-09-19 11:12 - 2015-06-09 16:57 - 000000000 ____D C:\Users\Lubos\AppData\Roaming\vlc
2018-09-18 18:37 - 2017-11-20 13:01 - 000000000 ____D C:\Users\Lubos\AppData\Roaming\Alcatel PIMphony
2018-09-15 18:40 - 2014-06-27 20:40 - 000000000 ____D C:\Users\Lubos\AppData\Local\Adobe
2018-09-13 22:29 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-09-12 19:55 - 2014-03-14 21:12 - 000215920 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-09-12 19:31 - 2014-03-14 22:12 - 000000000 ____D C:\Windows\system32\MRT
2018-09-12 19:20 - 2014-03-14 22:12 - 139184408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-09-11 19:53 - 2014-03-14 21:12 - 000163392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-09-11 07:53 - 2016-04-25 09:10 - 000000000 ____D C:\Program Files\CCleaner
2018-09-07 11:33 - 2017-03-29 11:38 - 000000000 ____D C:\Users\Lubos\AppData\Roaming\FileZilla
2018-09-04 19:53 - 2014-03-14 21:12 - 000467320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

==================== Files in the root of some directories =======

2017-01-17 13:44 - 2017-01-17 13:44 - 000004096 ____H () C:\Users\Lubos\AppData\Local\keyfile3.drm
2018-05-29 11:25 - 2018-05-29 11:25 - 000000855 _____ () C:\Users\Lubos\AppData\Local\recently-used.xbel
2016-05-14 22:08 - 2017-07-26 19:21 - 000007611 _____ () C:\Users\Lubos\AppData\Local\Resmon.ResmonCfg
2017-07-19 12:06 - 2017-07-19 12:06 - 000000003 _____ () C:\Users\Lubos\AppData\Local\updater.log
2017-07-19 12:06 - 2017-07-21 19:23 - 000000059 _____ () C:\Users\Lubos\AppData\Local\UserProducts.xml

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-09-27 21:32

==================== End of FRST.txt ============================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28.09.2018
Ran by Lubos (29-09-2018 10:21:38)
Running from C:\Users\Lubos\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2014-03-14 18:03:47)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4287783693-2563561285-1554447606-500 - Administrator - Disabled)
Guest (S-1-5-21-4287783693-2563561285-1554447606-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4287783693-2563561285-1554447606-1006 - Limited - Enabled)
Lubos (S-1-5-21-4287783693-2563561285-1554447606-1000 - Administrator - Enabled) => C:\Users\Lubos

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 18.011.20063 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 31.0.0.96 - Adobe Systems Incorporated)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.108 - Adobe Systems Incorporated)
Adobe Flash Player 31 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 31.0.0.108 - Adobe Systems Incorporated)
Agent Assistant V10 (HKLM-x32\...\{95CB7CF0-6EC0-4E60-8874-3FF3365AA047}) (Version: 10.100.01 - A.C.D.)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Apetit (HKLM-x32\...\{2330EBAD-ABEC-A1D4-FA71-9CE7C824DE89}) (Version: 1.3 - CoverPage s.r.o.) Hidden
Apetit (HKLM-x32\...\com.coverpage.burdadigital.apetit.desktop) (Version: 1.3 - CoverPage s.r.o.)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{268CF0B8-CA38-4E20-9E99-514A07F7C1F1}) (Version: 3.5.23.272 - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.6.2349 - AVAST Software)
Canon CanoScan Toolbox 5.0 (HKLM-x32\...\CanoScan Toolbox 5.0) (Version: - )
CanoScan LiDE 70 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2411) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
Dropbox (HKLM-x32\...\Dropbox) (Version: 58.4.92 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.141.1 - Dropbox, Inc.) Hidden
FLV and Media Player 4.2.1.1 (HKLM-x32\...\FLV and Media Player) (Version: 4.2.1.1 - Applian Technologies)
Fritz 15 64-bit (HKLM\...\{E055F983-1A0C-4A1B-84BE-A0E5F03F279C}) (Version: 15.3.0.0 - ChessBase)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 69.0.3497.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP Deskjet 2000 J210 series Nápověda (HKLM-x32\...\{52040558-EE65-4BB1-AEE4-7BEABCB71AF2}) (Version: 140.0.65.65 - Hewlett Packard)
Chessmaster Grandmaster Edition (HKLM-x32\...\{27614800-84A9-484E-9CCB-43ED2F1205F5}) (Version: 1.00.0000 - Ubisoft) Hidden
Chessmaster Grandmaster Edition (HKLM-x32\...\InstallShield_{27614800-84A9-484E-9CCB-43ED2F1205F5}) (Version: 1.02.0000 - Ubisoft)
Chip CZ (HKLM-x32\...\{087FD00C-3448-1A87-07A5-AD292C5D6F56}) (Version: 2.1 - CoverPage s.r.o.) Hidden
Chip CZ (HKLM-x32\...\com.coverpage.burdamedia.chipcz.desktop) (Version: 2.1 - CoverPage s.r.o.)
ICQ6.5 (HKLM-x32\...\{60DE4033-9503-48D1-A483-7846BD217CA9}) (Version: 6.5 - ICQ)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.1.0.3 - PandoraTV)
Microsoft .NET Framework 4.7.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft WSE 2.0 SP3 Runtime (HKLM-x32\...\{F3CA9611-CD42-4562-ADAB-A554CF8E17F1}) (Version: 2.0.5050.0 - Microsoft Corp.)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 62.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 62.0.2 (x64 cs)) (Version: 62.0.2 - Mozilla)
Mozilla Thunderbird 52.9.1 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 52.9.1 (x86 cs)) (Version: 52.9.1 - Mozilla)
NVDA (HKLM-x32\...\NVDA) (Version: 2015.4 - NV Access)
oCam 버전 418.0 (HKLM-x32\...\oCam_is1) (Version: 418.0 - hxxp://ohsoft.net/)
OpenVPN 2.4.4-I601 (HKLM\...\OpenVPN) (Version: 2.4.4-I601 - OpenVPN Technologies, Inc.)
Opera Stable 56.0.3051.31 (HKLM-x32\...\Opera 56.0.3051.31) (Version: 56.0.3051.31 - Opera Software)
PhotoFiltre 7 (HKU\S-1-5-21-4287783693-2563561285-1554447606-1000\...\PhotoFiltre 7) (Version: - )
PIMphony (HKLM-x32\...\{831ADA8C-C73B-4915-AF8D-83D22BD58AA8}) (Version: 6.8.3240 - ALE International)
Plantronics Spokes SDK (HKLM-x32\...\{E7371804-8B7C-4A3D-A56B-4C13EB39F8BD}) (Version: 2.8.24304.0 - Plantronics, Inc.)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 4.5.8.2500 - Jan Fiala)
Skype verze 8.30 (HKLM-x32\...\Skype_is1) (Version: 8.30 - Skype Technologies S.A.)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.1.3629 - TeamViewer)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.10 - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VisitURL 1.74 (HKLM-x32\...\VisitURL_is1) (Version: - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.4 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
Základní software zařízení HP Deskjet 2000 J210 series (HKLM\...\{4D227771-8B0A-46B0-8C20-4A18EEA6A919}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
Zoner Photo Studio 18 (HKLM\...\ZonerPhotoStudio18_CZ_is1) (Version: 18.0.1.9 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2004-12-26] ()
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers4-x32: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2004-12-26] ()
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ContextMenuHandlers6-x32: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2004-12-26] ()

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1BDB1EFB-B563-4DED-B8F7-B92F6402F39A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-09-28] (Adobe Systems Incorporated)
Task: {1E87A8D3-7825-4F45-9D33-461CC4F91109} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_108_pepper.exe [2018-09-15] (Adobe Systems Incorporated)
Task: {1F2D9BBB-E554-41D6-AB15-517CF577A41F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)
Task: {22C9F1E9-A54A-4040-BC82-15A8379C2426} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)
Task: {322C68B3-F33F-40FD-929E-EB2F8B858A8B} - System32\Tasks\update-S-1-5-21-4287783693-2563561285-1554447606-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {38841BCF-D564-47EB-9A49-230D54B5B823} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_108_Plugin.exe [2018-09-28] (Adobe Systems Incorporated)
Task: {4BE65F40-E207-492B-98DD-2B6683E936DC} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {4DD7C567-64FE-4A61-9FFA-753CB5789FE4} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-11-22] (Dropbox, Inc.)
Task: {5BC18CD5-4501-4A4D-83C1-B040793DA40E} - System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775} => C:\Windows\system32\pcalua.exe -a D:\Setup.exe -d D:\
Task: {5DDF4F7C-D0BD-40C5-945C-30F6A3034F3A} - System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B} => C:\Windows\system32\pcalua.exe -a D:\ScanGear\English\SetupSG.exe -d D:\ScanGear\English
Task: {63445559-E808-4A85-B82E-7D36665D54CD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)
Task: {7D667449-99C8-43E7-93C0-E2B566708F7B} - System32\Tasks\Opera scheduled Autoupdate 1404577935 => c:\program files (x86)\opera\launcher.exe [2018-09-25] (Opera Software)
Task: {80DC7807-93F2-4104-ABDC-8DC8F3976884} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-08-28] (AVAST Software)
Task: {912E2DDF-5F55-438A-8A4B-150442075FE5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)
Task: {CB218C47-5BE3-4127-B8F6-1DCB7D1D5780} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-11-22] (Dropbox, Inc.)
Task: {CD2121C2-AF03-4AC4-AC7C-76438545B953} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {DA4D4868-5777-47E5-8694-1A00C1678FAA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated)
Task: {FFDD1CB0-3AA3-4F68-BFAB-59CCC08A139D} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-09-15] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\update-S-1-5-21-4287783693-2563561285-1554447606-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-08-28 11:51 - 2018-08-28 11:51 - 000575704 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-09-29 09:22 - 2018-09-29 09:22 - 005702288 _____ () C:\Program Files\AVAST Software\Avast\defs\18092900\algo.dll
2018-08-28 11:51 - 2018-08-28 11:51 - 000896216 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-08-28 11:51 - 2018-08-28 11:51 - 000541400 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-08-28 11:51 - 2018-08-28 11:51 - 000986840 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2018-03-02 09:18 - 2018-03-02 09:18 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4287783693-2563561285-1554447606-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: ACDaemon => 2
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: OpenVPNServiceInteractive => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: WMPNetworkSvc => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk => C:\Windows\pss\TMMonitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Lubos^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^PIMphony.lnk => C:\Windows\pss\PIMphony.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
MSCONFIG\startupreg: Zoner Photo Studio Autoupdate => "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 18\Program32\ZPSTRAY.EXE"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{F1A19036-D462-4C05-96E9-AE893039B6E8}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{6FFA8E6C-9356-4CBC-99DC-7E5634625169}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{A7995894-9D67-482C-A13F-6541CE30F245}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8EE99AB3-7832-4AD9-B601-6177F79F0129}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5D4AB909-0322-418D-9EBD-BAC164781F3E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6D4EE28A-A350-44F9-B5DF-11A4A80102B1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{32841105-D88F-4C39-B67E-F678D626416B}C:\windows\syswow64\mpsmc_01.exe] => (Allow) C:\windows\syswow64\mpsmc_01.exe
FirewallRules: [UDP Query User{A160FC7A-AE59-4202-91D7-BA9373590442}C:\windows\syswow64\mpsmc_01.exe] => (Allow) C:\windows\syswow64\mpsmc_01.exe
FirewallRules: [{349C0624-64AD-4CE5-974F-DED2E4305332}] => (Allow) C:\Program Files\HP\HP Deskjet 2000 J210 series\Bin\USBSetup.exe
FirewallRules: [{B689BEDF-20D5-41A8-A523-BB4754E35906}] => (Allow) C:\Program Files\HP\HP Deskjet 2000 J210 series\Bin\USBSetup.exe
FirewallRules: [{C6693520-0630-41E1-9073-75978319DE35}] => (Allow) C:\Program Files\Zoner\Photo Studio 18\Program32\MediaServer.exe
FirewallRules: [{3518D6CF-1C39-441B-9CF3-8D0F0453C04A}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{25BEFE61-6777-4F45-86EC-6D8EE0F428FE}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{7365FA36-B2F6-4C74-92C3-6F901E6136E0}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{307B7BA1-BDAC-4035-9522-E778B1DD6864}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{3B91E011-1C6E-44E8-A680-7F5B4E3AE8A9}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{080908C5-9CDE-42B6-8DD5-EB382A334DE2}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{9374DAEF-0B46-4B8A-8A38-EEF8EAE04E48}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{5C3246C8-8FB4-43B1-ABE1-4AD4FD41E0AA}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{97C18F13-CDFB-4072-91B7-3937C5AEFCCC}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{581B865A-2A6F-448A-AE3F-29E0BBF61B47}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{6E5D4F44-F5F8-418B-B088-0047CFA5FEF3}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{CF17E480-8187-41A8-8608-55F34E4BCD69}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{7FE9AE11-9428-4F7C-9D94-3B2F3242FF21}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{F929927C-BDFB-45CD-BCF2-50C471C252B4}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{7532EC17-8DD9-4DB4-8FA8-C4ACCC9DEAA0}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{15717E3E-5836-4673-8EDA-183D02DD18CA}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{5254EF26-3027-4177-8871-872FD7C1E935}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{B51088E8-B0DF-40DD-98D2-B34C85AF3DE3}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{EB8C5418-E997-437D-BD46-B0DD3092E268}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{20F0B4ED-27C2-4243-8685-101088774034}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{170727B6-67D3-4976-A90F-78CD992D65B8}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{1066F0CF-EC93-4ED2-8369-BD7FE8AF7856}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{B84DE423-9333-453A-B3AC-1D2A67C1130A}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{6BB8C1AB-D0BC-4982-B83D-8AB4B219C4F2}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{6ED77008-EAE7-42C5-AB8C-2F21F2645670}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [{BF0AE1A3-D83D-4738-99E5-248B58A539F4}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [{7294F797-381A-4389-9957-AF941C628702}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [{CECFCE9C-AED1-440C-AEDC-44FEED9D9054}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [TCP Query User{2AE6D11A-7BBA-427D-84DB-5C842989ADC0}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{F126D6B9-A2F5-4AAD-9E49-0564BAB6F1AB}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [TCP Query User{A34AE7F2-7F64-4307-997A-3A1A7D59C233}C:\users\lubos\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lubos\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{8A58D435-4134-4EF4-8231-BE74E9B2F3D9}C:\users\lubos\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lubos\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{2B6C7F16-4843-45D9-BA80-4722D00DDFB2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E1AE51A6-FCD9-47AA-974B-96CEF58CEB26}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AACFCD89-88A5-4EF8-BD2B-038D277C6FAB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{FA8FEC32-DD30-4E84-862A-A818ACABC963}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{85FE00A3-8168-4805-B54E-0B49140B4689}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{464F122A-BAD5-4EC7-AF2E-3C44A023FAFA}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{5E297D32-EB95-4BE6-9427-3B69E041FA0D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{AE2F46AA-5825-4114-B751-9F268EF39A21}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{B7C26881-834E-4513-8285-4B2632400D18}] => (Allow) C:\Program Files (x86)\Opera\55.0.2994.61\opera.exe
FirewallRules: [{5E8ED8F3-9C20-4232-A8B5-6E0C08AB69B4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{C953B4EC-78C7-46DF-94C6-8CF72A564460}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
FirewallRules: [{C1090705-77A7-46EF-92F4-B9EE3A88C5B1}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
FirewallRules: [{3929BB18-EC40-4BB8-A5A3-B6621FDA57B8}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{C491F39E-22CA-4989-B9DC-478D03E5099B}] => (Allow) c:\program files (x86)\opera\56.0.3051.31\opera.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: NetGroup Packet Filter Driver
Description: NetGroup Packet Filter Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: npf
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/20/2018 09:44:08 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (1416) WebCacheLocal: Při otevírání souboru protokolu C:\Users\Lubos\AppData\Local\Microsoft\Windows\WebCache\V01.log došlo k chybě -1032 (0xfffffbf8).

Error: (09/20/2018 09:44:06 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhost (1416) WebCacheLocal: Pokus o otevření souboru C:\Users\Lubos\AppData\Local\Microsoft\Windows\WebCache\V01.log jen pro čtení se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (07/21/2018 11:51:31 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Systém Windows nemůže získat přístup k souboru z jednoho z těchto důvodů:
došlo k problému s připojením k síti, s diskem, na kterém je soubor uložen, nebo
s ovladači ukládání nainstalovanými v tomto počítači; nebo disk chybí.
Systém Windows kvůli této chybě ukončil program Microsoft Office Word.

Program: Microsoft Office Word
Soubor:

Hodnota chyby je uvedena v části Další údaje.
Akce uživatele
1. Otevřete soubor znovu.
Může se jednat o dočasný problém, který se při novém spuštění programu nebude opakovat.
2.
Pokud k souboru stále nelze získat přístup a:
- Nachází se v síti,
měl by správce sítě ověřit, zda nedošlo k problému se sítí a zda lze server kontaktovat.
- Je na vyměnitelném disku (například disketě nebo disku CD-ROM), ověřte, zda je disk správně vložen do počítače.
3. Zkontrolujte a opravte systém souborů pomocí nástroje CHKDSK. Ten lze spustit tak, že kliknete na tlačítko Start a příkaz Spustit, zadáte příkaz CMD a kliknete na tlačítko OK. Do příkazového řádku zadejte příkaz CHKDSK /F a stiskněte klávesu ENTER.
4. Pokud potíže potrvají, obnovte soubor ze záložní kopie.
5. Zjistěte, zda lze otevřít jiné soubory na stejném disku. Pokud ne, může být disk poškozen. Jedná-li se o pevný disk, obraťte se na správce nebo na dodavatele počítačového hardwaru
se žádostí o pomoc.

Další údaje
Hodnota chyby: 00000000
Typ disku: 0

Error: (07/21/2018 11:51:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: WINWORD.EXE, verze: 12.0.6787.5000, časové razítko: 0x5ab6b28d
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000096
Posun chyby: 0x02c25960
ID chybujícího procesu: 0xb4
Čas spuštění chybující aplikace: 0x01d42007d91c28e6
Cesta k chybující aplikaci: C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
Cesta k chybujícímu modulu: unknown
ID zprávy: a4b75dc7-8ccb-11e8-8aee-001fd08ea4fc

Error: (07/13/2018 07:54:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: opera_autoupdate.exe, verze: 54.0.2952.51, časové razítko: 0x5b3f63af
Název chybujícího modulu: opera_autoupdate.exe, verze: 54.0.2952.51, časové razítko: 0x5b3f63af
Kód výjimky: 0x80000003
Posun chyby: 0x0011e057
ID chybujícího procesu: 0xb9c
Čas spuštění chybující aplikace: 0x01d41a6dff621f4d
Cesta k chybující aplikaci: C:\Program Files (x86)\Opera\54.0.2952.51\opera_autoupdate.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Opera\54.0.2952.51\opera_autoupdate.exe
ID zprávy: 46933be2-8661-11e8-abc7-001fd08ea4fc

Error: (06/19/2018 11:58:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: DbxSvc.exe, verze: 1.0.24.0, časové razítko: 0x5b151068
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.24150, časové razítko: 0x5b0cbc1e
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000000db0a
ID chybujícího procesu: 0x77c
Čas spuštění chybující aplikace: 0x01d407cd5099748d
Cesta k chybující aplikaci: C:\Windows\system32\DbxSvc.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: d46de469-740b-11e8-8986-001fd08ea4fc

Error: (03/14/2018 11:39:20 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Sledování výkonu objektu indexování nebylo inicializováno, protože nejsou načteny čítače nebo nebyl otevřen sdílený objekt paměti. Tato skutečnost má vliv pouze na dostupnost čítačů výkonu. Restartujte počítač.

Kontext: aplikace , katalog SystemIndex

Error: (02/28/2018 10:48:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CompatTelRunner.exe, verze: 10.0.17060.1019, časové razítko: 0x0206ae46
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.24024, časové razítko: 0x5a58e571
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000bf6b2
ID chybujícího procesu: 0x2d0
Čas spuštění chybující aplikace: 0x01d3b0703a2d4f8a
Cesta k chybující aplikaci: C:\Windows\system32\CompatTelRunner.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 29f8611b-1c64-11e8-b555-001fd08ea4fc


System errors:
=============
Error: (09/29/2018 09:56:59 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba aswbIDSAgent neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (09/29/2018 09:56:59 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby aswbIDSAgent bylo dosaženo časového limitu (30000 ms).

Error: (09/29/2018 09:56:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetGroup Packet Filter Driver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (09/29/2018 09:56:13 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (09/29/2018 09:56:13 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (09/29/2018 09:21:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetGroup Packet Filter Driver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (09/29/2018 09:21:09 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (09/29/2018 09:21:09 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter


Windows Defender:
===================================
Date: 2015-08-21 18:05:19.831
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{8D84E661-1930-4968-822D-F5695F2D5FA0}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:Lubos-PC\Lubos

CodeIntegrity:
===================================

Date: 2016-09-03 07:11:02.226
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-03 00:15:30.492
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-24 11:25:33.398
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-13 08:45:25.429
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-13 00:27:08.585
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-12 09:37:56.772
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-11 21:12:57.240
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-11 09:40:56.289
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU E5200 @ 2.50GHz
Percentage of memory in use: 47%
Total physical RAM: 4094.49 MB
Available physical RAM: 2160.52 MB
Total Virtual: 8187.13 MB
Available Virtual: 6021.66 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:25.57 GB) NTFS
Drive e: () (Fixed) (Total:831.41 GB) (Free:419.18 GB) NTFS

\\?\Volume{a5d90c24-aba1-11e3-be1c-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: DD660AA2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=831.4 GB) - (Type=0F Extended)

==================== End of Addition.txt ============================

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

[netman]

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-09-24.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 09-29-2018
# Duration: 00:00:33
# OS: Windows 7 Ultimate
# Cleaned: 60
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\Lubos\AppData\Roaming\Booking_helper
Deleted C:\Program Files (x86)\Applian Technologies\FLV and Media Player
Deleted C:\Users\Lubos\AppData\Roaming\GoldenGate
Deleted C:\ProgramData\Uniblue
Deleted C:\Users\Lubos\AppData\Roaming\DriverCure
Deleted C:\Users\Lubos\AppData\Roaming\FLV and Media Player
Deleted C:\Program Files (x86)\globalUpdate
Deleted C:\Users\Lubos\AppData\Local\globalUpdate
Deleted C:\ProgramData\PARETOLOGIC
Deleted C:\Users\Lubos\AppData\Roaming\PARETOLOGIC
Deleted C:\ProgramData\apn

***** [ Files ] *****

Deleted C:\Users\Public\Desktop\FLV and Media Player.lnk
Deleted C:\Windows\System32\roboot64.exe

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FE0184D2-97A9-40B7-A84B-2981FE3BA03C}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4DF6CC-8A6F-4E69-A68A-343D59CFEBF1}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35E5A95-BD13-4013-A58-59FB62AB73B5}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3009BC9D-A6DC-4D4F-A470-FBFE7C862936}
Deleted HKCU\Software\AppDataLow\Software\Crossrider
Deleted HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
Deleted HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
Deleted HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Deleted HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Deleted HKLM\Software\Wow6432Node\Applian Technologies
Deleted HKLM\SOFTWARE\Classes\DVD\shell\PlayWithApplianMP
Deleted HKLM\SOFTWARE\Classes\AudioCD\shell\PlayWithApplianMP
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayCDAudioOnArrival
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayCDAudioOnArrival
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDMovieOnArrival
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDMovieOnArrival
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVideoFilesOnArrival
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVideoFilesOnArrival
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlaySVCDMovieOnArrival
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlaySVCDMovieOnArrival
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVCDMovieOnArrival
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayVCDMovieOnArrival
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayMusicFilesOnArrival
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayMusicFilesOnArrival
Deleted HKLM\Software\Wow6432Node\Clients\Media\ApplianMP
Deleted HKLM\SOFTWARE\Clients\Media\ApplianMP
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDAudioOnArrival
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ApplianMPPlayDVDAudioOnArrival
Deleted HKLM\Software\Wow6432Node\RegisteredApplications|FLV and Media Player
Deleted HKLM\SOFTWARE\RegisteredApplications|FLV and Media Player
Deleted HKLM\SOFTWARE\Classes\Applications\amp.exe
Deleted HKLM\Software\Wow6432Node\Freeze.com
Deleted HKCU\Software\csastats
Deleted HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Internet Speed Checker
Deleted HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Internet Speed Checker
Deleted HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Internet Speed Checker
Deleted HKU\S-1-5-18\Software\AppDataLow\Software\Internet Speed Checker
Deleted HKU\.DEFAULT\Software\AppDataLow\Software\Internet Speed Checker
Deleted HKCU\Software\GoldenGate
Deleted HKLM\Software\Wow6432Node\Uniblue
Deleted HKCU\Software\ParetoLogic
Deleted HKLM\Software\Wow6432Node\ParetoLogic
Deleted HKCU\Software\GlobalUpdate
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FLV and Media Player
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted HKCU\Software\PRODUCTSETUP
Deleted HKLM\Software\Classes\driverscanner

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [7743 octets] - [29/09/2018 11:23:10]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[Rudy]

Dejte nový log FRST.

[netman]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.09.2018
Ran by Lubos (administrator) on LUBOS-PC (29-09-2018 15:16:52)
Running from C:\Users\Lubos\Desktop
Loaded Profiles: Lubos (Available Profiles: Lubos)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-08-28] (AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{A63D2477-15AE-419C-80DA-AA832C529AE8}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
IE Session Restore: HKU\S-1-5-21-4287783693-2563561285-1554447606-1000 -> is enabled.

FireFox:
========
FF ProfilePath: C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\pbznzbem.default [2018-09-29]
FF Homepage: Mozilla\Firefox\Profiles\pbznzbem.default -> about:blank
FF Session Restore: Mozilla\Firefox\Profiles\pbznzbem.default -> is enabled.
FF Extension: (Firefox Monitor) - C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\pbznzbem.default\features\{5487b612-75ef-428b-b6f2-af15b6621432}\fxmonitor@mozilla.org.xpi [2018-09-13]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_31_0_0_108.dll [2018-09-28] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_108.dll [2018-09-28] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-08-09] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)

Chrome:
=======
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default [2018-09-29]
CHR Extension: (Disk Google) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-18]
CHR Extension: (YouTube) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-18]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Gmail) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-18]
CHR Extension: (Chrome Media Router) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-09-20]
CHR Profile: C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\System Profile [2018-09-29]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7994520 2018-08-28] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-08-28] (AVAST Software)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-11-22] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-11-22] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-09-25] (Dropbox, Inc.)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
S4 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [73856 2017-09-26] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [73856 2017-09-26] (The OpenVPN Project)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11293936 2018-04-03] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [199712 2018-08-28] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229384 2018-08-28] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201320 2018-08-28] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-08-28] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59568 2018-08-28] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-08-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [163392 2018-09-11] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111864 2018-08-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87904 2018-08-28] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-08-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467320 2018-09-04] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215920 2018-09-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381560 2018-08-28] (AVAST Software)
S3 aswHdsKe; \??\C:\Windows\system32\drivers\aswHdsKe.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-09-29 11:18 - 2018-09-29 11:25 - 000000000 ____D C:\AdwCleaner
2018-09-29 11:16 - 2018-09-29 11:16 - 007592144 _____ (Malwarebytes) C:\Users\Lubos\Desktop\adwcleaner_7.2.4.0.exe
2018-09-29 10:21 - 2018-09-29 10:23 - 000039653 _____ C:\Users\Lubos\Desktop\Addition.txt
2018-09-29 10:18 - 2018-09-29 15:19 - 000009012 _____ C:\Users\Lubos\Desktop\FRST.txt
2018-09-29 10:18 - 2018-09-29 15:16 - 000000000 ____D C:\FRST
2018-09-29 10:15 - 2018-09-29 10:16 - 002414080 _____ (Farbar) C:\Users\Lubos\Desktop\FRST64.exe
2018-09-28 18:01 - 2018-09-29 14:02 - 000004528 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-09-28 18:01 - 2018-09-29 14:02 - 000004408 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-09-28 14:09 - 2018-09-12 23:50 - 000397088 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-09-28 14:09 - 2018-09-12 22:52 - 000348960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-09-28 14:09 - 2018-09-12 07:56 - 025735680 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-09-28 14:09 - 2018-09-12 07:44 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-09-28 14:09 - 2018-09-12 07:44 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-09-28 14:09 - 2018-09-12 07:31 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-09-28 14:09 - 2018-09-12 07:31 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-09-28 14:09 - 2018-09-12 07:30 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-09-28 14:09 - 2018-09-12 07:30 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-09-28 14:09 - 2018-09-12 07:30 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-09-28 14:09 - 2018-09-12 07:29 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-09-28 14:09 - 2018-09-12 07:25 - 005778944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-09-28 14:09 - 2018-09-12 07:23 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-09-28 14:09 - 2018-09-12 07:22 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-09-28 14:09 - 2018-09-12 07:20 - 020279808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-09-28 14:09 - 2018-09-12 07:19 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-09-28 14:09 - 2018-09-12 07:18 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-09-28 14:09 - 2018-09-12 07:18 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-09-28 14:09 - 2018-09-12 07:18 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-09-28 14:09 - 2018-09-12 07:18 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-09-28 14:09 - 2018-09-12 07:13 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-09-28 14:09 - 2018-09-12 07:11 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-09-28 14:09 - 2018-09-12 07:08 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-09-28 14:09 - 2018-09-12 07:01 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-09-28 14:09 - 2018-09-12 07:01 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-09-28 14:09 - 2018-09-12 07:01 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-09-28 14:09 - 2018-09-12 07:01 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-09-28 14:09 - 2018-09-12 07:00 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-09-28 14:09 - 2018-09-12 07:00 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-09-28 14:09 - 2018-09-12 07:00 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-09-28 14:09 - 2018-09-12 06:59 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-09-28 14:09 - 2018-09-12 06:57 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-09-28 14:09 - 2018-09-12 06:57 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-09-28 14:09 - 2018-09-12 06:56 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-09-28 14:09 - 2018-09-12 06:54 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-09-28 14:09 - 2018-09-12 06:54 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-09-28 14:09 - 2018-09-12 06:54 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-09-28 14:09 - 2018-09-12 06:52 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-09-28 14:09 - 2018-09-12 06:52 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-09-28 14:09 - 2018-09-12 06:51 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-09-28 14:09 - 2018-09-12 06:51 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-09-28 14:09 - 2018-09-12 06:51 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-09-28 14:09 - 2018-09-12 06:43 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-09-28 14:09 - 2018-09-12 06:42 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-09-28 14:09 - 2018-09-12 06:42 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-09-28 14:09 - 2018-09-12 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-09-28 14:09 - 2018-09-12 06:41 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-09-28 14:09 - 2018-09-12 06:39 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-09-28 14:09 - 2018-09-12 06:39 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-09-28 14:09 - 2018-09-12 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-09-28 14:09 - 2018-09-12 06:38 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-09-28 14:09 - 2018-09-12 06:37 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-09-28 14:09 - 2018-09-12 06:35 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-09-28 14:09 - 2018-09-12 06:34 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-09-28 14:09 - 2018-09-12 06:33 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-09-28 14:09 - 2018-09-12 06:32 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-09-28 14:09 - 2018-09-12 06:29 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-09-28 14:09 - 2018-09-12 06:27 - 004510720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-09-28 14:09 - 2018-09-12 06:26 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-09-28 14:09 - 2018-09-12 06:25 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-09-28 14:09 - 2018-09-12 06:25 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-09-28 14:09 - 2018-09-12 06:24 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-09-28 14:09 - 2018-09-12 06:24 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-09-28 14:09 - 2018-09-12 06:16 - 001555456 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-09-28 14:09 - 2018-09-12 06:05 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-09-28 14:09 - 2018-09-12 06:04 - 004037632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-09-28 14:09 - 2018-09-12 06:02 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-09-28 14:09 - 2018-09-12 06:01 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-09-28 14:09 - 2018-08-31 17:22 - 003227136 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-09-28 14:09 - 2018-08-16 07:24 - 004054192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-09-28 14:09 - 2018-08-16 06:49 - 003959976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-09-28 14:09 - 2018-08-16 05:08 - 000631624 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-09-28 14:09 - 2018-08-16 05:02 - 005554272 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-09-28 14:09 - 2018-08-16 05:01 - 000263776 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-09-28 14:09 - 2018-08-16 05:01 - 000154800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-09-28 14:09 - 2018-08-16 05:01 - 000095408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-09-28 14:09 - 2018-08-16 05:00 - 000709728 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-09-28 14:09 - 2018-08-16 04:59 - 001665760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 001461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 001211904 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-09-28 14:09 - 2018-08-16 04:58 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:57 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:45 - 001314048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-09-28 14:09 - 2018-08-16 04:43 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:42 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:25 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-09-28 14:09 - 2018-08-16 04:25 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-09-28 14:09 - 2018-08-16 04:25 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-09-28 14:09 - 2018-08-16 04:24 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-09-28 14:09 - 2018-08-16 04:21 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-09-28 14:09 - 2018-08-16 04:20 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-09-28 14:09 - 2018-08-16 04:20 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-09-28 14:09 - 2018-08-16 04:18 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2018-09-28 14:09 - 2018-08-16 04:17 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-09-28 14:09 - 2018-08-16 04:17 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-09-28 14:09 - 2018-08-16 04:16 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-09-28 14:09 - 2018-08-16 04:16 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-09-28 14:09 - 2018-08-16 04:15 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2018-09-28 14:09 - 2018-08-16 04:15 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-09-28 14:09 - 2018-08-16 04:13 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-09-28 14:09 - 2018-08-16 04:13 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-09-28 14:09 - 2018-08-16 04:13 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-09-28 14:09 - 2018-08-16 04:13 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-09-28 14:09 - 2018-08-16 04:12 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-09-28 14:09 - 2018-08-16 04:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-09-28 14:09 - 2018-08-13 23:49 - 001391856 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2018-09-28 14:09 - 2018-08-13 17:54 - 000687616 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2018-09-28 14:09 - 2018-08-12 22:32 - 000140976 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-09-28 14:09 - 2018-08-12 22:27 - 000680960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-09-28 14:09 - 2018-08-08 17:54 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-09-28 14:09 - 2018-08-08 17:54 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-09-28 14:09 - 2018-08-08 17:40 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-09-28 14:09 - 2018-08-08 17:40 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-09-27 21:07 - 2018-09-27 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-09-25 13:52 - 2018-09-25 13:52 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-09-25 13:52 - 2018-09-25 13:52 - 000050232 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-09-25 13:52 - 2018-09-25 13:52 - 000050232 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-09-25 13:52 - 2018-09-25 13:52 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-09-23 11:38 - 2018-09-27 21:13 - 000000000 ____D C:\Users\Public\DOPRAHY
2018-09-12 18:55 - 2018-08-28 07:50 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2018-09-12 18:54 - 2018-08-31 17:08 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2018-09-12 18:54 - 2018-08-31 17:08 - 000340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2018-09-12 18:54 - 2018-08-30 03:47 - 001230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2018-09-12 18:54 - 2018-08-30 03:10 - 001424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 002004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 001888768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2018-09-12 18:54 - 2018-08-13 17:54 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2018-09-12 18:54 - 2018-08-13 17:53 - 001867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-09-12 18:54 - 2018-08-13 17:53 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2018-09-12 18:54 - 2018-08-13 17:41 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 001390080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2018-09-12 18:54 - 2018-08-13 17:40 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2018-09-12 18:54 - 2018-08-12 22:32 - 000378464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-09-12 18:54 - 2018-08-12 22:31 - 001894496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-09-12 18:54 - 2018-08-12 22:31 - 000289376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-09-12 18:54 - 2018-08-12 22:28 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2018-09-12 18:54 - 2018-08-12 22:14 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2018-09-12 18:54 - 2018-08-10 17:58 - 000385120 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-09-12 18:54 - 2018-08-10 17:55 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-09-12 18:54 - 2018-08-10 17:55 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-09-12 18:54 - 2018-08-10 17:54 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-09-12 18:54 - 2018-08-10 17:53 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-09-12 18:54 - 2018-08-10 17:53 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-09-12 18:54 - 2018-08-10 17:45 - 000309424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-09-12 18:54 - 2018-08-10 17:41 - 000111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-09-12 18:54 - 2018-08-10 17:41 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-09-12 18:54 - 2018-08-10 17:40 - 000463360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-09-12 18:54 - 2018-08-10 17:40 - 000071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-09-12 18:54 - 2018-08-10 17:40 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-09-12 18:54 - 2018-08-10 17:27 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-09-12 18:54 - 2018-08-10 17:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2018-09-12 18:54 - 2018-08-10 17:13 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-09-12 18:54 - 2018-07-29 17:55 - 001110528 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-09-12 18:54 - 2018-07-18 17:18 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2018-09-02 12:32 - 2018-06-27 15:20 - 000419648 _____ C:\Windows\SysWOW64\locale.nls
2018-09-02 12:32 - 2018-06-27 15:19 - 000419648 _____ C:\Windows\system32\locale.nls

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-09-29 15:16 - 2016-12-04 18:39 - 000000000 ____D C:\Users\Lubos\AppData\LocalLow\Mozilla
2018-09-29 15:06 - 2017-11-22 11:42 - 000000906 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-09-29 14:08 - 2009-07-14 06:45 - 000014192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-09-29 14:08 - 2009-07-14 06:45 - 000014192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-09-29 14:02 - 2018-03-28 17:20 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-09-29 14:02 - 2017-11-22 11:42 - 000003912 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2018-09-29 14:02 - 2017-11-22 11:41 - 000003660 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2018-09-29 14:02 - 2017-11-22 11:41 - 000000902 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-09-29 14:02 - 2016-05-18 15:05 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-09-29 14:02 - 2016-05-18 15:05 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-09-29 14:02 - 2016-04-25 09:10 - 000002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-09-29 14:02 - 2015-12-21 10:27 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-09-29 14:02 - 2015-07-09 11:47 - 000004516 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-09-29 14:02 - 2015-07-08 11:21 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-09-29 14:02 - 2014-07-05 18:32 - 000003836 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1404577935
2018-09-29 14:02 - 2014-03-15 23:37 - 000003102 _____ C:\Windows\System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B}
2018-09-29 14:02 - 2014-03-15 23:37 - 000003032 _____ C:\Windows\System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775}
2018-09-29 11:58 - 2018-07-10 08:20 - 000000000 ____D C:\Users\Lubos\AppData\Local\AVAST Software
2018-09-29 11:57 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-09-29 11:25 - 2014-09-29 13:43 - 000000000 ____D C:\Program Files (x86)\Applian Technologies
2018-09-29 09:56 - 2016-05-18 15:05 - 000000000 ____D C:\Program Files (x86)\Google
2018-09-28 19:51 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-09-28 18:19 - 2014-07-05 18:32 - 000000000 ____D C:\Program Files (x86)\Opera
2018-09-28 18:18 - 2015-06-09 16:55 - 000001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-09-28 18:01 - 2014-03-16 12:43 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-09-28 18:01 - 2014-03-16 12:43 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-09-28 18:01 - 2014-03-16 12:43 - 000000000 ____D C:\Windows\system32\Macromed
2018-09-28 18:00 - 2014-03-15 09:34 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-09-28 16:02 - 2015-06-09 12:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-09-28 15:50 - 2017-11-02 02:15 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-09-28 14:32 - 2009-07-14 17:18 - 000668826 _____ C:\Windows\system32\perfh005.dat
2018-09-28 14:32 - 2009-07-14 17:18 - 000141486 _____ C:\Windows\system32\perfc005.dat
2018-09-28 14:32 - 2009-07-14 07:13 - 001584386 _____ C:\Windows\system32\PerfStringBackup.INI
2018-09-28 14:23 - 2009-07-14 06:45 - 000366048 _____ C:\Windows\system32\FNTCACHE.DAT
2018-09-28 14:14 - 2014-03-15 21:46 - 001559100 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-09-28 14:02 - 2017-11-20 12:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcatel PIMphony
2018-09-28 14:02 - 2016-10-17 18:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake
2018-09-28 14:02 - 2016-06-04 11:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VisitURL
2018-09-27 21:08 - 2017-11-22 11:41 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-09-21 11:26 - 2018-07-04 09:15 - 000000000 ____D C:\Users\Lubos\Desktop\SONS
2018-09-20 15:00 - 2017-02-08 19:12 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-09-20 13:40 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF
2018-09-20 11:19 - 2018-07-13 07:58 - 000001310 _____ C:\Users\Public\Desktop\Skype.lnk
2018-09-20 11:19 - 2018-07-13 07:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-09-20 01:47 - 2016-05-18 15:06 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-09-20 01:47 - 2016-05-18 15:06 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-09-19 23:46 - 2015-11-14 16:57 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-09-19 11:12 - 2015-06-09 16:57 - 000000000 ____D C:\Users\Lubos\AppData\Roaming\vlc
2018-09-18 18:37 - 2017-11-20 13:01 - 000000000 ____D C:\Users\Lubos\AppData\Roaming\Alcatel PIMphony
2018-09-15 18:40 - 2014-06-27 20:40 - 000000000 ____D C:\Users\Lubos\AppData\Local\Adobe
2018-09-13 22:29 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-09-12 19:55 - 2014-03-14 21:12 - 000215920 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-09-12 19:31 - 2014-03-14 22:12 - 000000000 ____D C:\Windows\system32\MRT
2018-09-12 19:20 - 2014-03-14 22:12 - 139184408 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-09-11 19:53 - 2014-03-14 21:12 - 000163392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-09-11 07:53 - 2016-04-25 09:10 - 000000000 ____D C:\Program Files\CCleaner
2018-09-07 11:33 - 2017-03-29 11:38 - 000000000 ____D C:\Users\Lubos\AppData\Roaming\FileZilla
2018-09-04 19:53 - 2014-03-14 21:12 - 000467320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

==================== Files in the root of some directories =======

2017-01-17 13:44 - 2017-01-17 13:44 - 000004096 ____H () C:\Users\Lubos\AppData\Local\keyfile3.drm
2018-05-29 11:25 - 2018-05-29 11:25 - 000000855 _____ () C:\Users\Lubos\AppData\Local\recently-used.xbel
2016-05-14 22:08 - 2017-07-26 19:21 - 000007611 _____ () C:\Users\Lubos\AppData\Local\Resmon.ResmonCfg
2017-07-19 12:06 - 2017-07-19 12:06 - 000000003 _____ () C:\Users\Lubos\AppData\Local\updater.log
2017-07-19 12:06 - 2017-07-21 19:23 - 000000059 _____ () C:\Users\Lubos\AppData\Local\UserProducts.xml

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-09-27 21:32

==================== End of FRST.txt ============================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28.09.2018
Ran by Lubos (29-09-2018 15:19:53)
Running from C:\Users\Lubos\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2014-03-14 18:03:47)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4287783693-2563561285-1554447606-500 - Administrator - Disabled)
Guest (S-1-5-21-4287783693-2563561285-1554447606-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4287783693-2563561285-1554447606-1006 - Limited - Enabled)
Lubos (S-1-5-21-4287783693-2563561285-1554447606-1000 - Administrator - Enabled) => C:\Users\Lubos

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 18.011.20063 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 31.0.0.96 - Adobe Systems Incorporated)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.108 - Adobe Systems Incorporated)
Adobe Flash Player 31 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 31.0.0.108 - Adobe Systems Incorporated)
Agent Assistant V10 (HKLM-x32\...\{95CB7CF0-6EC0-4E60-8874-3FF3365AA047}) (Version: 10.100.01 - A.C.D.)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Apetit (HKLM-x32\...\{2330EBAD-ABEC-A1D4-FA71-9CE7C824DE89}) (Version: 1.3 - CoverPage s.r.o.) Hidden
Apetit (HKLM-x32\...\com.coverpage.burdadigital.apetit.desktop) (Version: 1.3 - CoverPage s.r.o.)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{268CF0B8-CA38-4E20-9E99-514A07F7C1F1}) (Version: 3.5.23.272 - ArcSoft)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.6.2349 - AVAST Software)
Canon CanoScan Toolbox 5.0 (HKLM-x32\...\CanoScan Toolbox 5.0) (Version: - )
CanoScan LiDE 70 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2411) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
Dropbox (HKLM-x32\...\Dropbox) (Version: 58.4.92 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.141.1 - Dropbox, Inc.) Hidden
Fritz 15 64-bit (HKLM\...\{E055F983-1A0C-4A1B-84BE-A0E5F03F279C}) (Version: 15.3.0.0 - ChessBase)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 69.0.3497.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HP Deskjet 2000 J210 series Nápověda (HKLM-x32\...\{52040558-EE65-4BB1-AEE4-7BEABCB71AF2}) (Version: 140.0.65.65 - Hewlett Packard)
Chessmaster Grandmaster Edition (HKLM-x32\...\{27614800-84A9-484E-9CCB-43ED2F1205F5}) (Version: 1.00.0000 - Ubisoft) Hidden
Chessmaster Grandmaster Edition (HKLM-x32\...\InstallShield_{27614800-84A9-484E-9CCB-43ED2F1205F5}) (Version: 1.02.0000 - Ubisoft)
Chip CZ (HKLM-x32\...\{087FD00C-3448-1A87-07A5-AD292C5D6F56}) (Version: 2.1 - CoverPage s.r.o.) Hidden
Chip CZ (HKLM-x32\...\com.coverpage.burdamedia.chipcz.desktop) (Version: 2.1 - CoverPage s.r.o.)
ICQ6.5 (HKLM-x32\...\{60DE4033-9503-48D1-A483-7846BD217CA9}) (Version: 6.5 - ICQ)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.1.0.3 - PandoraTV)
Microsoft .NET Framework 4.7.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft WSE 2.0 SP3 Runtime (HKLM-x32\...\{F3CA9611-CD42-4562-ADAB-A554CF8E17F1}) (Version: 2.0.5050.0 - Microsoft Corp.)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 62.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 62.0.2 (x64 cs)) (Version: 62.0.2 - Mozilla)
Mozilla Thunderbird 52.9.1 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 52.9.1 (x86 cs)) (Version: 52.9.1 - Mozilla)
NVDA (HKLM-x32\...\NVDA) (Version: 2015.4 - NV Access)
oCam 버전 418.0 (HKLM-x32\...\oCam_is1) (Version: 418.0 - hxxp://ohsoft.net/)
OpenVPN 2.4.4-I601 (HKLM\...\OpenVPN) (Version: 2.4.4-I601 - OpenVPN Technologies, Inc.)
Opera Stable 56.0.3051.31 (HKLM-x32\...\Opera 56.0.3051.31) (Version: 56.0.3051.31 - Opera Software)
PhotoFiltre 7 (HKU\S-1-5-21-4287783693-2563561285-1554447606-1000\...\PhotoFiltre 7) (Version: - )
PIMphony (HKLM-x32\...\{831ADA8C-C73B-4915-AF8D-83D22BD58AA8}) (Version: 6.8.3240 - ALE International)
Plantronics Spokes SDK (HKLM-x32\...\{E7371804-8B7C-4A3D-A56B-4C13EB39F8BD}) (Version: 2.8.24304.0 - Plantronics, Inc.)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 4.5.8.2500 - Jan Fiala)
Skype verze 8.30 (HKLM-x32\...\Skype_is1) (Version: 8.30 - Skype Technologies S.A.)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.1.3629 - TeamViewer)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.10 - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VisitURL 1.74 (HKLM-x32\...\VisitURL_is1) (Version: - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.4 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
Základní software zařízení HP Deskjet 2000 J210 series (HKLM\...\{4D227771-8B0A-46B0-8C20-4A18EEA6A919}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
Zoner Photo Studio 18 (HKLM\...\ZonerPhotoStudio18_CZ_is1) (Version: 18.0.1.9 - ZONER software)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2004-12-26] ()
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers4-x32: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2004-12-26] ()
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.25.0.dll [2018-09-25] (Dropbox, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-08-28] (AVAST Software)
ContextMenuHandlers6-x32: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2004-12-26] ()

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1BDB1EFB-B563-4DED-B8F7-B92F6402F39A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-09-28] (Adobe Systems Incorporated)
Task: {1E87A8D3-7825-4F45-9D33-461CC4F91109} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_108_pepper.exe [2018-09-15] (Adobe Systems Incorporated)
Task: {1F2D9BBB-E554-41D6-AB15-517CF577A41F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)
Task: {22C9F1E9-A54A-4040-BC82-15A8379C2426} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)
Task: {322C68B3-F33F-40FD-929E-EB2F8B858A8B} - System32\Tasks\update-S-1-5-21-4287783693-2563561285-1554447606-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {38841BCF-D564-47EB-9A49-230D54B5B823} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_108_Plugin.exe [2018-09-28] (Adobe Systems Incorporated)
Task: {4BE65F40-E207-492B-98DD-2B6683E936DC} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {4DD7C567-64FE-4A61-9FFA-753CB5789FE4} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-11-22] (Dropbox, Inc.)
Task: {5BC18CD5-4501-4A4D-83C1-B040793DA40E} - System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775} => C:\Windows\system32\pcalua.exe -a D:\Setup.exe -d D:\
Task: {5DDF4F7C-D0BD-40C5-945C-30F6A3034F3A} - System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B} => C:\Windows\system32\pcalua.exe -a D:\ScanGear\English\SetupSG.exe -d D:\ScanGear\English
Task: {63445559-E808-4A85-B82E-7D36665D54CD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)
Task: {7D667449-99C8-43E7-93C0-E2B566708F7B} - System32\Tasks\Opera scheduled Autoupdate 1404577935 => c:\program files (x86)\opera\launcher.exe [2018-09-25] (Opera Software)
Task: {80DC7807-93F2-4104-ABDC-8DC8F3976884} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-08-28] (AVAST Software)
Task: {912E2DDF-5F55-438A-8A4B-150442075FE5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)
Task: {CB218C47-5BE3-4127-B8F6-1DCB7D1D5780} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-11-22] (Dropbox, Inc.)
Task: {CD2121C2-AF03-4AC4-AC7C-76438545B953} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
Task: {DA4D4868-5777-47E5-8694-1A00C1678FAA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated)
Task: {FFDD1CB0-3AA3-4F68-BFAB-59CCC08A139D} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-09-15] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\update-S-1-5-21-4287783693-2563561285-1554447606-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-08-28 11:51 - 2018-08-28 11:51 - 000703192 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2018-08-28 11:51 - 2018-08-28 11:51 - 000575704 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-09-29 09:22 - 2018-09-29 09:22 - 005702288 _____ () C:\Program Files\AVAST Software\Avast\defs\18092900\algo.dll
2018-08-28 11:51 - 2018-08-28 11:51 - 000896216 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-08-28 11:51 - 2018-08-28 11:51 - 000541400 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-08-28 11:51 - 2018-08-28 11:51 - 000986840 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2018-03-02 09:18 - 2018-03-02 09:18 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4287783693-2563561285-1554447606-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: ACDaemon => 2
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: OpenVPNServiceInteractive => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: WMPNetworkSvc => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk => C:\Windows\pss\TMMonitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Lubos^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^PIMphony.lnk => C:\Windows\pss\PIMphony.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
MSCONFIG\startupreg: Zoner Photo Studio Autoupdate => "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 18\Program32\ZPSTRAY.EXE"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{F1A19036-D462-4C05-96E9-AE893039B6E8}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{6FFA8E6C-9356-4CBC-99DC-7E5634625169}] => (Allow) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe
FirewallRules: [{A7995894-9D67-482C-A13F-6541CE30F245}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8EE99AB3-7832-4AD9-B601-6177F79F0129}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5D4AB909-0322-418D-9EBD-BAC164781F3E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6D4EE28A-A350-44F9-B5DF-11A4A80102B1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{32841105-D88F-4C39-B67E-F678D626416B}C:\windows\syswow64\mpsmc_01.exe] => (Allow) C:\windows\syswow64\mpsmc_01.exe
FirewallRules: [UDP Query User{A160FC7A-AE59-4202-91D7-BA9373590442}C:\windows\syswow64\mpsmc_01.exe] => (Allow) C:\windows\syswow64\mpsmc_01.exe
FirewallRules: [{349C0624-64AD-4CE5-974F-DED2E4305332}] => (Allow) C:\Program Files\HP\HP Deskjet 2000 J210 series\Bin\USBSetup.exe
FirewallRules: [{B689BEDF-20D5-41A8-A523-BB4754E35906}] => (Allow) C:\Program Files\HP\HP Deskjet 2000 J210 series\Bin\USBSetup.exe
FirewallRules: [{C6693520-0630-41E1-9073-75978319DE35}] => (Allow) C:\Program Files\Zoner\Photo Studio 18\Program32\MediaServer.exe
FirewallRules: [{3518D6CF-1C39-441B-9CF3-8D0F0453C04A}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{25BEFE61-6777-4F45-86EC-6D8EE0F428FE}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{7365FA36-B2F6-4C74-92C3-6F901E6136E0}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{307B7BA1-BDAC-4035-9522-E778B1DD6864}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocphone.exe
FirewallRules: [{3B91E011-1C6E-44E8-A680-7F5B4E3AE8A9}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{080908C5-9CDE-42B6-8DD5-EB382A334DE2}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{9374DAEF-0B46-4B8A-8A38-EEF8EAE04E48}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{5C3246C8-8FB4-43B1-ABE1-4AD4FD41E0AA}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\aocwiz.exe
FirewallRules: [{97C18F13-CDFB-4072-91B7-3937C5AEFCCC}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{581B865A-2A6F-448A-AE3F-29E0BBF61B47}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{6E5D4F44-F5F8-418B-B088-0047CFA5FEF3}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{CF17E480-8187-41A8-8608-55F34E4BCD69}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\appdiag\appdiag.exe
FirewallRules: [{7FE9AE11-9428-4F7C-9D94-3B2F3242FF21}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{F929927C-BDFB-45CD-BCF2-50C471C252B4}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{7532EC17-8DD9-4DB4-8FA8-C4ACCC9DEAA0}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{15717E3E-5836-4673-8EDA-183D02DD18CA}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\abers.exe
FirewallRules: [{5254EF26-3027-4177-8871-872FD7C1E935}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{B51088E8-B0DF-40DD-98D2-B34C85AF3DE3}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{EB8C5418-E997-437D-BD46-B0DD3092E268}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{20F0B4ED-27C2-4243-8685-101088774034}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\uaproc.exe
FirewallRules: [{170727B6-67D3-4976-A90F-78CD992D65B8}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{1066F0CF-EC93-4ED2-8369-BD7FE8AF7856}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{B84DE423-9333-453A-B3AC-1D2A67C1130A}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{6BB8C1AB-D0BC-4982-B83D-8AB4B219C4F2}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\OnlineUpdat.exe
FirewallRules: [{6ED77008-EAE7-42C5-AB8C-2F21F2645670}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [{BF0AE1A3-D83D-4738-99E5-248B58A539F4}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [{7294F797-381A-4389-9957-AF941C628702}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [{CECFCE9C-AED1-440C-AEDC-44FEED9D9054}] => (Allow) C:\Program Files (x86)\Alcatel_PIMphony\Registration.exe
FirewallRules: [TCP Query User{2AE6D11A-7BBA-427D-84DB-5C842989ADC0}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{F126D6B9-A2F5-4AAD-9E49-0564BAB6F1AB}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [TCP Query User{A34AE7F2-7F64-4307-997A-3A1A7D59C233}C:\users\lubos\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lubos\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{8A58D435-4134-4EF4-8231-BE74E9B2F3D9}C:\users\lubos\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lubos\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{2B6C7F16-4843-45D9-BA80-4722D00DDFB2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E1AE51A6-FCD9-47AA-974B-96CEF58CEB26}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AACFCD89-88A5-4EF8-BD2B-038D277C6FAB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{FA8FEC32-DD30-4E84-862A-A818ACABC963}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{85FE00A3-8168-4805-B54E-0B49140B4689}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{464F122A-BAD5-4EC7-AF2E-3C44A023FAFA}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{5E297D32-EB95-4BE6-9427-3B69E041FA0D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{AE2F46AA-5825-4114-B751-9F268EF39A21}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{B7C26881-834E-4513-8285-4B2632400D18}] => (Allow) C:\Program Files (x86)\Opera\55.0.2994.61\opera.exe
FirewallRules: [{5E8ED8F3-9C20-4232-A8B5-6E0C08AB69B4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{C953B4EC-78C7-46DF-94C6-8CF72A564460}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
FirewallRules: [{C1090705-77A7-46EF-92F4-B9EE3A88C5B1}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
FirewallRules: [{3929BB18-EC40-4BB8-A5A3-B6621FDA57B8}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{C491F39E-22CA-4989-B9DC-478D03E5099B}] => (Allow) c:\program files (x86)\opera\56.0.3051.31\opera.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: NetGroup Packet Filter Driver
Description: NetGroup Packet Filter Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: npf
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/20/2018 09:44:08 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (1416) WebCacheLocal: Při otevírání souboru protokolu C:\Users\Lubos\AppData\Local\Microsoft\Windows\WebCache\V01.log došlo k chybě -1032 (0xfffffbf8).

Error: (09/20/2018 09:44:06 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhost (1416) WebCacheLocal: Pokus o otevření souboru C:\Users\Lubos\AppData\Local\Microsoft\Windows\WebCache\V01.log jen pro čtení se nezdařil. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru se nezdaří a dojde k chybě -1032 (0xfffffbf8).

Error: (07/21/2018 11:51:31 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Systém Windows nemůže získat přístup k souboru z jednoho z těchto důvodů:
došlo k problému s připojením k síti, s diskem, na kterém je soubor uložen, nebo
s ovladači ukládání nainstalovanými v tomto počítači; nebo disk chybí.
Systém Windows kvůli této chybě ukončil program Microsoft Office Word.

Program: Microsoft Office Word
Soubor:

Hodnota chyby je uvedena v části Další údaje.
Akce uživatele
1. Otevřete soubor znovu.
Může se jednat o dočasný problém, který se při novém spuštění programu nebude opakovat.
2.
Pokud k souboru stále nelze získat přístup a:
- Nachází se v síti,
měl by správce sítě ověřit, zda nedošlo k problému se sítí a zda lze server kontaktovat.
- Je na vyměnitelném disku (například disketě nebo disku CD-ROM), ověřte, zda je disk správně vložen do počítače.
3. Zkontrolujte a opravte systém souborů pomocí nástroje CHKDSK. Ten lze spustit tak, že kliknete na tlačítko Start a příkaz Spustit, zadáte příkaz CMD a kliknete na tlačítko OK. Do příkazového řádku zadejte příkaz CHKDSK /F a stiskněte klávesu ENTER.
4. Pokud potíže potrvají, obnovte soubor ze záložní kopie.
5. Zjistěte, zda lze otevřít jiné soubory na stejném disku. Pokud ne, může být disk poškozen. Jedná-li se o pevný disk, obraťte se na správce nebo na dodavatele počítačového hardwaru
se žádostí o pomoc.

Další údaje
Hodnota chyby: 00000000
Typ disku: 0

Error: (07/21/2018 11:51:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: WINWORD.EXE, verze: 12.0.6787.5000, časové razítko: 0x5ab6b28d
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000096
Posun chyby: 0x02c25960
ID chybujícího procesu: 0xb4
Čas spuštění chybující aplikace: 0x01d42007d91c28e6
Cesta k chybující aplikaci: C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
Cesta k chybujícímu modulu: unknown
ID zprávy: a4b75dc7-8ccb-11e8-8aee-001fd08ea4fc

Error: (07/13/2018 07:54:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: opera_autoupdate.exe, verze: 54.0.2952.51, časové razítko: 0x5b3f63af
Název chybujícího modulu: opera_autoupdate.exe, verze: 54.0.2952.51, časové razítko: 0x5b3f63af
Kód výjimky: 0x80000003
Posun chyby: 0x0011e057
ID chybujícího procesu: 0xb9c
Čas spuštění chybující aplikace: 0x01d41a6dff621f4d
Cesta k chybující aplikaci: C:\Program Files (x86)\Opera\54.0.2952.51\opera_autoupdate.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Opera\54.0.2952.51\opera_autoupdate.exe
ID zprávy: 46933be2-8661-11e8-abc7-001fd08ea4fc

Error: (06/19/2018 11:58:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: DbxSvc.exe, verze: 1.0.24.0, časové razítko: 0x5b151068
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.24150, časové razítko: 0x5b0cbc1e
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000000db0a
ID chybujícího procesu: 0x77c
Čas spuštění chybující aplikace: 0x01d407cd5099748d
Cesta k chybující aplikaci: C:\Windows\system32\DbxSvc.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: d46de469-740b-11e8-8986-001fd08ea4fc

Error: (03/14/2018 11:39:20 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Sledování výkonu objektu indexování nebylo inicializováno, protože nejsou načteny čítače nebo nebyl otevřen sdílený objekt paměti. Tato skutečnost má vliv pouze na dostupnost čítačů výkonu. Restartujte počítač.

Kontext: aplikace , katalog SystemIndex

Error: (02/28/2018 10:48:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CompatTelRunner.exe, verze: 10.0.17060.1019, časové razítko: 0x0206ae46
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.24024, časové razítko: 0x5a58e571
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000bf6b2
ID chybujícího procesu: 0x2d0
Čas spuštění chybující aplikace: 0x01d3b0703a2d4f8a
Cesta k chybující aplikaci: C:\Windows\system32\CompatTelRunner.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 29f8611b-1c64-11e8-b555-001fd08ea4fc


System errors:
=============
Error: (09/29/2018 11:57:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetGroup Packet Filter Driver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (09/29/2018 11:57:20 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (09/29/2018 11:57:20 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (09/29/2018 11:55:45 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Windows Update se po přijetí pokynu pro vypnutí neukončila správně.

Error: (09/29/2018 11:27:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetGroup Packet Filter Driver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (09/29/2018 11:27:45 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (09/29/2018 11:27:45 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (09/29/2018 11:25:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba DbxSvc byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
===================================
Date: 2015-08-21 18:05:19.831
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{8D84E661-1930-4968-822D-F5695F2D5FA0}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:Lubos-PC\Lubos

CodeIntegrity:
===================================

Date: 2016-09-03 07:11:02.226
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-03 00:15:30.492
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-24 11:25:33.398
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-13 08:45:25.429
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-13 00:27:08.585
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-12 09:37:56.772
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-11 21:12:57.240
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-08-11 09:40:56.289
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU E5200 @ 2.50GHz
Percentage of memory in use: 36%
Total physical RAM: 4094.49 MB
Available physical RAM: 2614.04 MB
Total Virtual: 8187.13 MB
Available Virtual: 6893.52 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:25.16 GB) NTFS
Drive e: () (Fixed) (Total:831.41 GB) (Free:419.18 GB) NTFS

\\?\Volume{a5d90c24-aba1-11e3-be1c-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: DD660AA2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=831.4 GB) - (Type=0F Extended)

==================== End of Addition.txt ============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
GroupPolicy: Restriction ? <==== ATTENTION
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B}
C:\Windows\System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775}
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
Task: {1F2D9BBB-E554-41D6-AB15-517CF577A41F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)
Task: {5BC18CD5-4501-4A4D-83C1-B040793DA40E} - System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775} => C:\Windows\system32\pcalua.exe -a D:\Setup.exe -d D:\
Task: {5DDF4F7C-D0BD-40C5-945C-30F6A3034F3A} - System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B} => C:\Windows\system32\pcalua.exe -a D:\ScanGear\English\SetupSG.exe -d D:\ScanGear\English
Task: {912E2DDF-5F55-438A-8A4B-150442075FE5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[netman]

Fix result of Farbar Recovery Scan Tool (x64) Version: 28.09.2018
Ran by Lubos (29-09-2018 16:03:53) Run:1
Running from C:\Users\Lubos\Desktop
Loaded Profiles: Lubos (Available Profiles: Lubos)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
GroupPolicy: Restriction ? <==== ATTENTION
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B}
C:\Windows\System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775}
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
Task: {1F2D9BBB-E554-41D6-AB15-517CF577A41F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)
Task: {5BC18CD5-4501-4A4D-83C1-B040793DA40E} - System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775} => C:\Windows\system32\pcalua.exe -a D:\Setup.exe -d D:\
Task: {5DDF4F7C-D0BD-40C5-945C-30F6A3034F3A} - System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B} => C:\Windows\system32\pcalua.exe -a D:\ScanGear\English\SetupSG.exe -d D:\ScanGear\English
Task: {912E2DDF-5F55-438A-8A4B-150442075FE5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-18] (Google Inc.)

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" => removed successfully
"HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SPReview" => removed successfully
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => removed successfully
HKLM\Software\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => not found
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Windows\System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B} => moved successfully
C:\Windows\System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775} => moved successfully
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFCreator.ShellContextMenu" => removed successfully
HKLM\Software\Classes\CLSID\{d9cea52e-100d-4159-89ea-76e845bc13e1} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1F2D9BBB-E554-41D6-AB15-517CF577A41F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F2D9BBB-E554-41D6-AB15-517CF577A41F}" => removed successfully
"C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BC18CD5-4501-4A4D-83C1-B040793DA40E}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BC18CD5-4501-4A4D-83C1-B040793DA40E}" => removed successfully
"C:\Windows\System32\Tasks\{11351B93-D7B3-41D8-8869-B5D6C6D46775}" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{11351B93-D7B3-41D8-8869-B5D6C6D46775}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5DDF4F7C-D0BD-40C5-945C-30F6A3034F3A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DDF4F7C-D0BD-40C5-945C-30F6A3034F3A}" => removed successfully
"C:\Windows\System32\Tasks\{DA3E6317-22B1-4F63-A203-CB7E70BD561B}" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DA3E6317-22B1-4F63-A203-CB7E70BD561B}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{912E2DDF-5F55-438A-8A4B-150442075FE5}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{912E2DDF-5F55-438A-8A4B-150442075FE5}" => removed successfully
"C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10249379 B
Java, Flash, Steam htmlcache => 1183 B
Windows/system/drivers => 368163631 B
Edge => 0 B
Chrome => 272147255 B
Firefox => 1099444627 B
Opera => 35141227 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 83693 B
systemprofile32 => 121650 B
LocalService => 132244 B
NetworkService => 66228 B
Lubos => 34758884 B

RecycleBin => 0 B
EmptyTemp: => 1.7 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 16:04:57 ====

[netman]

Jinak došlo k tomu, co jsem právě nejvíc nechtěl - v Google Chrome byla vymazána poslední relace otevřených oken + i historie. Je možné to nějak vrátit zpět?

[Rudy]

Pokud není zálohována, pak nikoli. Běžně se to ale při tomto mazání nestává. Chrome již nemrzne?

[netman]

Právě jedině v Chromu byla historie včetně poslední relace vymazána. Jinak FF zůstalo.
Chrome už se nezasekává a zdá se, že je to snad ok.
Pokud by ale šlo se přecijen dostat nějak k té poslední relaci, tak bych to uvítal. Třeba i cestou Bodu obnovení nebo nějak najít ve složce.

Jinak kde byl problém? Abych se vyvaroval pro příště.

díky

[Rudy]

Jen pár AdWarů a zbytečnosti. Mrzí mne ta ztráta historie, ale běžně to FRST nemaže (nikdo si zatím nestěžoval). Až ji obnovíte, udělejte si zálohu pomocí ChromeBackup: http://www.stahuj.cz/internet_a_site/pr ... me-backup/ . Pro jistotu. Nemáte zač!

[netman]

Neporadil by jste mi, co případně změnit, abych se tomu Adwaru vyvaroval? Chápu, že asi úplně to nejde, ale alespoň z části. Třeba změna antiviru? Teď používám jen free verzi Avastu a to asi není úplně ideální. Občas pc projedu CCleanerem - vyčistím registry a nějaké aplikace.
Jaký vy doporučujete používat internetový prohlížeč?

děkuji

[Rudy]

Antivir chytá viry, Adwary částečně odchytí třeba SuperAntispyware: https://www.superantispyware.com/ . Není to ovšem stoprocentní, občasné pročištění ADW mohu jen doporučit, nebo se vyhýbat "temným zákoutím" internetu. Kromě IE a všech jeho klonů mohu dopručit vlastně jakýkoli alternativní. Osobně používám Firefox.

[wegel]

netman - chtěl bych se zeptat jak dlouho ti trvalo u toho programu Farbar Recovery Scan Tool ten fixing log ? ja jsem musel dát reset protože to evidentně zamrzlo

[netman]

Ok, moc děkuji za pomoc