Dobrý den,
rád bych poprosil o kontrolu logu. PC je kompletně zpomalené, od startu jednoduchou práci až po vypnutí. Děkuji
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-12-2019
Ran by HP (administrator) on OMAR (Hewlett-Packard HP Pavilion dv6 Notebook PC) (29-12-2019 16:07:23)
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available Profiles: HP)
Platform: Windows 10 Home Version 1809 17763.864 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Andrea Electronics Corporation) [File not signed] C:\Program Files\IDT\WDM\AESTSr64.exe
(Dassault Systemes) [File not signed] C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\sttray64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19101.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-16] (IDT, Inc.) [File not signed]
HKLM\...\Run: [MMReminderService] => C:\Program Files\Mindjet\MindManager 17\MMReminderService.exe [124616 2016-11-30] (Corel Corporation -> Mindjet)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\ecmdS.exe [183088 2019-12-19] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44016 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [uTorrent] => C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe [414656 2018-10-25] (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Policies\Explorer: []
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-19] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{90EF4A5E-85DB-4825-96F5-1AB93C2A8EEB}] -> C:\Program Files\Mindjet\MindManager 17\sys\MmInternetExplorerActiveSetup.vbs
BootExecute: autocheck autochk *
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1A4E3749-F1CB-4AFA-8931-8DCB05940086} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {3628A419-FEF1-49CF-9512-E223D33D5BA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {41BDC851-7201-4E82-9F29-E0DE006FB542} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {467F0685-829A-45A8-8CAF-ECDF56A7E87A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C8E5F04-5511-46FC-B6F4-370DFF46470B} - System32\Tasks\Minitab\Minitab Software Update Manager => C:\Program Files (x86)\Common Files\Minitab Shared\Software Manager\SoftwareManager.exe [430984 2010-03-25] (Minitab, Inc. -> Minitab)
Task: {5291B013-58A4-4AE5-AF48-C66D7DEA02F0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B6032BF-A587-460D-AAEF-CBD073D9D9C5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {6313A704-AF50-4537-BD30-439CC29B5619} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {67B43A3C-9068-42FD-8677-AD79170C9A27} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {86B14A71-7A97-413E-82B5-B3228C711A4E} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [136688 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
Task: {9CF886D3-1A34-4A14-925A-02024454103D} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\IObit Driver Booster\IObit Driver Booster\Driver Booster\Scheduler.exe [147232 2017-12-11] (IObit Information Technology -> IObit)
Task: {A7A07F81-BB06-42D6-A2B2-52398C4AD329} - System32\Tasks\Driver Booster SkipUAC (HP) => C:\Program Files (x86)\IObit\IObit Driver Booster\IObit Driver Booster\Driver Booster\DriverBooster.exe [6058784 2018-01-12] (IObit Information Technology -> IObit) [File not signed]
Task: {A92524F8-0508-4CFC-9A76-1DB2E69AB340} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0F0567A-EF61-4B33-B19C-C6E5385A1F45} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16467424 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CF338B1B-2211-4849-AAF6-91832FDBEB9A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {E9FC4462-7404-4C33-9F0B-7E0287B842D2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F21D0E2B-E0DE-4CAF-8DB6-E23C748AA1E7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{148bb867-3ddc-4ade-af32-1479bd21fa9b}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d3fe3cec-24de-40e8-b104-26ad4bd0ecad}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {04F8E5EE-DB4A-498C-A718-546FDA7B91A1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {0D04E46E-9F9A-4DEC-B2EB-2402EB567F22} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {104288F0-5BED-4695-AFF4-B97DDEA35E71} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {14FB0ECB-585A-4DEE-979B-2D5B38568787} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {41D5C8BB-6F41-4718-BFB4-D23FC352FC71} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {770746A7-C47B-4222-AF5C-C12E43533D41} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {AFF94F12-9074-4C26-B9E5-9B4B51CCF283} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10440__190224&q={searchTerms}
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {E37BFB27-554B-4815-86A0-3698AF89CA4C} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {EE92CE6F-C278-4F7E-88EC-7C1642B87008} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_40139
BHO: CmjBrowserHelperObject Object -> {6FE6A929-59D1-4763-91AD-29B61CFFB35B} -> C:\Program Files\Mindjet\MindManager 17\Mm8InternetExplorer.dll [2016-11-30] (Corel Corporation -> Mindjet)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: k4h86qir.default
FF ProfilePath: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default [2019-12-29]
FF Homepage: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__190224
FF NewTab: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__190224
FF Extension: (Seznam doplněk - Esko) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\sko-extension@firma.seznam.cz [2019-02-27]
FF Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2019-02-27]
FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\searchplugins\securesearch.xml [2019-02-24]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2019-12-29]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/","hxxp://www.seznam.cz/"
CHR NewTab: Default -> Not-active:"chrome-extension://nladljmabboanhihfkjacnnkgjhnokhj/new-tab.html", Not-active:"chrome-extension://olfeabkoenfaoljndfecamgilllcpiak/speeddial/newTab.html"
CHR Notifications: Default -> hxxps://hackercombat.com
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default [2019-12-29]
CHR Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2019-11-02]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-10-31]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (Adaware Secure) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj [2019-04-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Seznam doplněk - Esko) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2019-11-20]
CHR Extension: (Chrome Media Router) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-29]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-05-26]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\System Profile [2019-05-26]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1233272 2019-05-14] (Autodesk, Inc. -> Autodesk Inc.)
R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [File not signed]
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 BBDemon; C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe [36864 2010-01-09] (Dassault Systemes) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11199776 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 hpqwmiex; C:\Users\HP\AppData\Roaming\Hewlett-Packard\hpqwmiex.exe [794112 2019-02-07] (Hewlett-Packard Company) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2425136 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3303736 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [279248 2019-02-28] (Synaptics Incorporated -> Synaptics Incorporated)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [43840 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149944 2019-11-30] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [103264 2019-11-30] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-06-07] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [189512 2019-11-30] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50712 2019-11-30] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79744 2019-12-19] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116696 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2019-03-10] (ESET, spol. s r.o. -> ESET)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [28936 2019-03-03] (Glarysoft LTD -> Glarysoft Ltd)
R0 hpdskflt; C:\Windows\System32\DRIVERS\hpdskflt.sys [31040 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-02-28] (Martin Malik - REALiX -> REALiX(tm))
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
R3 ROCKEYNT; C:\Windows\system32\DRIVERS\Rockey4.sys [36904 2019-04-07] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1158944 2019-09-08] (Realtek Semiconductor Corp. -> Realtek )
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-04-28] (Synaptics Incorporated -> Synaptics Incorporated)
R3 STHDA; C:\Windows\system32\DRIVERS\stwrt64.sys [551936 2013-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-02-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [333792 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 16:07 - 2019-12-29 16:09 - 000026609 _____ C:\Users\HP\Desktop\FRST.txt
2019-12-29 16:06 - 2019-12-29 16:08 - 000000000 ____D C:\FRST
2019-12-29 16:05 - 2019-12-29 16:05 - 002272256 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 16:02 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-12-29 16:02 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-12-29 16:01 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-12-29 16:01 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-12-29 15:59 - 2019-03-07 17:30 - 000000000 ____D C:\Program Files\Microsoft Office
2019-12-29 15:57 - 2019-01-28 12:28 - 000000000 ____D C:\Windows\system32\MRT
2019-12-29 15:53 - 2019-02-28 18:16 - 000003076 _____ C:\Windows\system32\Tasks\Driver Booster SkipUAC (HP)
2019-12-29 15:52 - 2019-01-28 12:28 - 129221664 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-12-29 15:51 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-12-29 15:48 - 2019-03-03 20:16 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2019-12-19 18:09 - 2019-02-24 20:18 - 000000000 ____D C:\Users\HP\AppData\Roaming\uTorrent
2019-12-19 18:02 - 2019-01-28 12:13 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2019-12-19 18:02 - 2018-09-15 18:32 - 000718198 _____ C:\Windows\system32\perfh005.dat
2019-12-19 18:02 - 2018-09-15 18:32 - 000145242 _____ C:\Windows\system32\perfc005.dat
2019-12-19 18:02 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-12-19 17:55 - 2019-01-28 12:00 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-12-19 17:53 - 2018-09-15 07:09 - 000786432 _____ C:\Windows\system32\config\BBI
2019-12-19 17:51 - 2019-02-07 15:27 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-12-19 17:51 - 2019-02-07 15:27 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-12-19 17:43 - 2019-02-07 15:26 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2019-12-19 17:43 - 2019-02-07 15:26 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2019-12-19 17:42 - 2019-11-10 10:16 - 000000000 ____D C:\ProgramData\Origin
2019-12-19 17:41 - 2016-08-08 10:19 - 000116696 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2019-12-19 17:41 - 2016-08-08 10:19 - 000079744 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2019-12-19 17:40 - 2019-11-10 10:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\Origin
2019-12-10 08:58 - 2019-02-07 15:25 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-12-10 07:13 - 2019-01-28 12:15 - 000003344 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-559692135-8497052-1209249446-1001
2019-12-10 07:11 - 2019-07-01 18:15 - 000002382 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-12-10 07:11 - 2019-01-28 12:15 - 000000000 ___RD C:\Users\HP\OneDrive
2019-12-10 06:55 - 2019-11-10 10:20 - 000000000 ____D C:\Program Files (x86)\Origin Games
2019-12-10 06:53 - 2019-01-28 11:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-12-03 16:32 - 2019-02-07 15:49 - 000000000 ____D C:\Users\HP\AppData\Local\CrashDumps
2019-11-30 20:28 - 2019-01-28 12:12 - 000000000 ____D C:\Users\HP
2019-11-30 20:26 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-11-30 20:25 - 2016-08-08 10:19 - 000189512 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000149944 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000103264 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000050712 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Kompletně zpomalený notebook
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Kompletně zpomalený notebook
- Přílohy
-
- Addition.zip
- (11.68 KiB) Staženo 50 x
-
Rudy
- Site Admin
- Příspěvky: 118251
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kompletně zpomalený notebook
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kompletně zpomalený notebook
Díky za odpověď, níže log.
# -------------------------------
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build: 12-17-2019
# Database: 2019-12-17.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 12-29-2019
# Duration: 00:00:07
# OS: Windows 10 Home
# Cleaned: 47
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Seznam.cz
Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\ProgramData\IOBIT\Driver Booster
Deleted C:\Users\HP\AppData\Roaming\IOBIT\Driver Booster
Deleted C:\Users\HP\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Users\HP\AppData\Roaming\Seznam.cz
***** [ Files ] *****
Deleted C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\searchplugins\securesearch.xml
Deleted C:\Windows\Reimage.ini
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted C:\Windows\System32\Tasks\DRIVER BOOSTER SCHEDULER
Deleted C:\Windows\System32\Tasks\DRIVER BOOSTER SKIPUAC (HP)
***** [ Registry ] *****
Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|cz.seznam.software.autoupdate
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|cz.seznam.software.szndesktop
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
Deleted HKCU\Software\Mozilla\NativeMessagingHosts\sznpp_nm
Deleted HKCU\Software\Reimage
Deleted HKCU\Software\Seznam.cz
Deleted HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7A07F81-BB06-42D6-A2B2-52398C4AD329}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9CF886D3-1A34-4A14-925A-02024454103D}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7A07F81-BB06-42D6-A2B2-52398C4AD329}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DRIVER BOOSTER SKIPUAC (HP)
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scheduler
Deleted HKLM\Software\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Deleted HKLM\Software\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted HKLM\Software\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted HKLM\Software\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|seznam-listicka-distribuce
Deleted HKLM\Software\Reimage
Deleted HKLM\Software\Wow6432Node\IObit\Driver Booster
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\REI_AxControl.DLL
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
***** [ Chromium (and derivatives) ] *****
Deleted Adaware Secure Search
Deleted Seznam doplněk - Email
Deleted Seznam doplněk - Esko
***** [ Chromium URLs ] *****
Deleted Speedbit Search
Deleted Speedbit Search
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
Deleted http://securedsearch.lavasoft.com/?pr=v ... 40__190224
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [5729 octets] - [29/12/2019 17:08:00]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
# -------------------------------
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build: 12-17-2019
# Database: 2019-12-17.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 12-29-2019
# Duration: 00:00:07
# OS: Windows 10 Home
# Cleaned: 47
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Seznam.cz
Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\ProgramData\IOBIT\Driver Booster
Deleted C:\Users\HP\AppData\Roaming\IOBIT\Driver Booster
Deleted C:\Users\HP\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Users\HP\AppData\Roaming\Seznam.cz
***** [ Files ] *****
Deleted C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\searchplugins\securesearch.xml
Deleted C:\Windows\Reimage.ini
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted C:\Windows\System32\Tasks\DRIVER BOOSTER SCHEDULER
Deleted C:\Windows\System32\Tasks\DRIVER BOOSTER SKIPUAC (HP)
***** [ Registry ] *****
Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|cz.seznam.software.autoupdate
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|cz.seznam.software.szndesktop
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
Deleted HKCU\Software\Mozilla\NativeMessagingHosts\sznpp_nm
Deleted HKCU\Software\Reimage
Deleted HKCU\Software\Seznam.cz
Deleted HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7A07F81-BB06-42D6-A2B2-52398C4AD329}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9CF886D3-1A34-4A14-925A-02024454103D}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7A07F81-BB06-42D6-A2B2-52398C4AD329}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DRIVER BOOSTER SKIPUAC (HP)
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scheduler
Deleted HKLM\Software\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Deleted HKLM\Software\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted HKLM\Software\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted HKLM\Software\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|seznam-listicka-distribuce
Deleted HKLM\Software\Reimage
Deleted HKLM\Software\Wow6432Node\IObit\Driver Booster
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\REI_AxControl.DLL
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
***** [ Chromium (and derivatives) ] *****
Deleted Adaware Secure Search
Deleted Seznam doplněk - Email
Deleted Seznam doplněk - Esko
***** [ Chromium URLs ] *****
Deleted Speedbit Search
Deleted Speedbit Search
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
Deleted http://securedsearch.lavasoft.com/?pr=v ... 40__190224
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [5729 octets] - [29/12/2019 17:08:00]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 118251
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kompletně zpomalený notebook
Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kompletně zpomalený notebook
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-12-2019
Ran by HP (administrator) on OMAR (Hewlett-Packard HP Pavilion dv6 Notebook PC) (29-12-2019 17:58:32)
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available Profiles: HP)
Platform: Windows 10 Home Version 1809 17763.914 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Andrea Electronics Corporation) [File not signed] C:\Program Files\IDT\WDM\AESTSr64.exe
(Dassault Systemes) [File not signed] C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\sttray64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1910.1283.0_x64__8wekyb3d8bbwe\LocalBridge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19081.22010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11912.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19101.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> ) C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.850_none_7e18264b4d00f498\TiWorker.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-16] (IDT, Inc.) [File not signed]
HKLM\...\Run: [MMReminderService] => C:\Program Files\Mindjet\MindManager 17\MMReminderService.exe [124616 2016-11-30] (Corel Corporation -> Mindjet)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\ecmdS.exe [183088 2019-12-19] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44016 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [uTorrent] => C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe [414656 2018-10-25] (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Policies\Explorer: []
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-19] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{90EF4A5E-85DB-4825-96F5-1AB93C2A8EEB}] -> C:\Program Files\Mindjet\MindManager 17\sys\MmInternetExplorerActiveSetup.vbs
BootExecute: autocheck autochk *
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1A4E3749-F1CB-4AFA-8931-8DCB05940086} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {3628A419-FEF1-49CF-9512-E223D33D5BA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {41BDC851-7201-4E82-9F29-E0DE006FB542} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {467F0685-829A-45A8-8CAF-ECDF56A7E87A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C8E5F04-5511-46FC-B6F4-370DFF46470B} - System32\Tasks\Minitab\Minitab Software Update Manager => C:\Program Files (x86)\Common Files\Minitab Shared\Software Manager\SoftwareManager.exe [430984 2010-03-25] (Minitab, Inc. -> Minitab)
Task: {5291B013-58A4-4AE5-AF48-C66D7DEA02F0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B6032BF-A587-460D-AAEF-CBD073D9D9C5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {6313A704-AF50-4537-BD30-439CC29B5619} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {67B43A3C-9068-42FD-8677-AD79170C9A27} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {86B14A71-7A97-413E-82B5-B3228C711A4E} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [136688 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
Task: {A92524F8-0508-4CFC-9A76-1DB2E69AB340} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0F0567A-EF61-4B33-B19C-C6E5385A1F45} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16467424 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CF338B1B-2211-4849-AAF6-91832FDBEB9A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {E9FC4462-7404-4C33-9F0B-7E0287B842D2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F21D0E2B-E0DE-4CAF-8DB6-E23C748AA1E7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{148bb867-3ddc-4ade-af32-1479bd21fa9b}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d3fe3cec-24de-40e8-b104-26ad4bd0ecad}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {04F8E5EE-DB4A-498C-A718-546FDA7B91A1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {0D04E46E-9F9A-4DEC-B2EB-2402EB567F22} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {104288F0-5BED-4695-AFF4-B97DDEA35E71} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {14FB0ECB-585A-4DEE-979B-2D5B38568787} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {41D5C8BB-6F41-4718-BFB4-D23FC352FC71} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {770746A7-C47B-4222-AF5C-C12E43533D41} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {AFF94F12-9074-4C26-B9E5-9B4B51CCF283} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {E37BFB27-554B-4815-86A0-3698AF89CA4C} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {EE92CE6F-C278-4F7E-88EC-7C1642B87008} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_40139
BHO: CmjBrowserHelperObject Object -> {6FE6A929-59D1-4763-91AD-29B61CFFB35B} -> C:\Program Files\Mindjet\MindManager 17\Mm8InternetExplorer.dll [2016-11-30] (Corel Corporation -> Mindjet)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: k4h86qir.default
FF ProfilePath: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default [2019-12-29]
FF Homepage: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxps://www.google.com/
FF NewTab: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__190224
FF Extension: (Seznam doplněk - Esko) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\sko-extension@firma.seznam.cz [2019-02-27]
FF Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2019-02-27]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2019-12-29]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/","hxxp://www.seznam.cz/"
CHR Notifications: Default -> hxxps://hackercombat.com
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default [2019-12-29]
CHR Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2019-12-29]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-10-31]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Chrome Media Router) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-29]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-05-26]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\System Profile [2019-05-26]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1233272 2019-05-14] (Autodesk, Inc. -> Autodesk Inc.)
R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [File not signed]
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 BBDemon; C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe [36864 2010-01-09] (Dassault Systemes) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11199776 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 hpqwmiex; C:\Users\HP\AppData\Roaming\Hewlett-Packard\hpqwmiex.exe [794112 2019-02-07] (Hewlett-Packard Company) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2425136 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3303736 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [279248 2019-02-28] (Synaptics Incorporated -> Synaptics Incorporated)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [43840 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149944 2019-11-30] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [103264 2019-11-30] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-06-07] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [189512 2019-11-30] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50712 2019-11-30] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79744 2019-12-19] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116696 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2019-03-10] (ESET, spol. s r.o. -> ESET)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [28936 2019-03-03] (Glarysoft LTD -> Glarysoft Ltd)
R0 hpdskflt; C:\Windows\System32\DRIVERS\hpdskflt.sys [31040 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-02-28] (Martin Malik - REALiX -> REALiX(tm))
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
R3 ROCKEYNT; C:\Windows\system32\DRIVERS\Rockey4.sys [36904 2019-04-07] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1158944 2019-09-08] (Realtek Semiconductor Corp. -> Realtek )
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-04-28] (Synaptics Incorporated -> Synaptics Incorporated)
R3 STHDA; C:\Windows\system32\DRIVERS\stwrt64.sys [551936 2013-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-02-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [333792 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 17:06 - 2019-12-29 17:08 - 000000000 ____D C:\AdwCleaner
2019-12-29 17:06 - 2019-12-29 17:06 - 008237744 _____ (Malwarebytes) C:\Users\HP\Downloads\adwcleaner_8.0.1.exe
2019-12-29 16:55 - 2019-12-29 16:56 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-12-29 16:55 - 2019-12-29 16:55 - 000001265 _____ C:\Users\HP\Desktop\CrystalDiskInfo.lnk
2019-12-29 16:55 - 2019-12-29 16:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2019-12-29 16:54 - 2019-12-29 16:55 - 003956368 _____ (Crystal Dew World ) C:\Users\HP\Downloads\CrystalDiskInfo7_0_4-en.exe
2019-12-29 16:07 - 2019-12-29 18:00 - 000024522 _____ C:\Users\HP\Desktop\FRST.txt
2019-12-29 16:06 - 2019-12-29 17:59 - 000000000 ____D C:\FRST
2019-12-29 16:05 - 2019-12-29 16:05 - 002272256 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe
2019-12-29 15:46 - 2019-12-29 15:46 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 020816384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 001201128 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 009668408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 007886848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 007645384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006541712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006444032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 003638272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 003576832 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 003387392 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002707968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 002699768 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002233688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002192384 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002072384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001702392 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-12-29 15:45 - 2019-12-29 15:45 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001677808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001676288 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001668960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001666440 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001656192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001473088 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001465264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001258296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001049400 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000981504 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000901120 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000793824 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000764928 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000758688 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000678672 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000603792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000575488 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000508928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000505632 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000430592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000408736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000312832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000203064 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\DevQueryBroker.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 18:00 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-12-29 17:19 - 2019-03-03 20:16 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2019-12-29 17:17 - 2019-01-28 12:13 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2019-12-29 17:17 - 2018-09-15 18:32 - 000718198 _____ C:\Windows\system32\perfh005.dat
2019-12-29 17:17 - 2018-09-15 18:32 - 000145242 _____ C:\Windows\system32\perfc005.dat
2019-12-29 17:17 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-12-29 17:15 - 2019-02-24 20:18 - 000000000 ____D C:\Users\HP\AppData\Roaming\uTorrent
2019-12-29 17:15 - 2019-02-07 15:49 - 000000000 ____D C:\Users\HP\AppData\Local\CrashDumps
2019-12-29 17:11 - 2019-01-28 11:59 - 000407328 _____ C:\Windows\system32\FNTCACHE.DAT
2019-12-29 17:10 - 2019-01-28 12:00 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-12-29 17:09 - 2018-09-15 07:09 - 000786432 _____ C:\Windows\system32\config\BBI
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\IObit
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\ProgramData\IObit
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-12-29 16:01 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-12-29 15:59 - 2019-03-07 17:30 - 000000000 ____D C:\Program Files\Microsoft Office
2019-12-29 15:57 - 2019-01-28 12:28 - 000000000 ____D C:\Windows\system32\MRT
2019-12-29 15:52 - 2019-01-28 12:28 - 129221664 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-12-29 15:51 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-12-19 17:51 - 2019-02-07 15:27 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-12-19 17:51 - 2019-02-07 15:27 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-12-19 17:43 - 2019-02-07 15:26 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2019-12-19 17:43 - 2019-02-07 15:26 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2019-12-19 17:42 - 2019-11-10 10:16 - 000000000 ____D C:\ProgramData\Origin
2019-12-19 17:41 - 2016-08-08 10:19 - 000116696 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2019-12-19 17:41 - 2016-08-08 10:19 - 000079744 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2019-12-19 17:40 - 2019-11-10 10:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\Origin
2019-12-10 08:58 - 2019-02-07 15:25 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-12-10 07:13 - 2019-01-28 12:15 - 000003344 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-559692135-8497052-1209249446-1001
2019-12-10 07:11 - 2019-07-01 18:15 - 000002382 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-12-10 07:11 - 2019-01-28 12:15 - 000000000 ___RD C:\Users\HP\OneDrive
2019-12-10 06:55 - 2019-11-10 10:20 - 000000000 ____D C:\Program Files (x86)\Origin Games
2019-12-10 06:53 - 2019-01-28 11:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-11-30 20:28 - 2019-01-28 12:12 - 000000000 ____D C:\Users\HP
2019-11-30 20:26 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-11-30 20:25 - 2016-08-08 10:19 - 000189512 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000149944 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000103264 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000050712 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-12-2019
Ran by HP (29-12-2019 18:00:42)
Running from C:\Users\HP\Desktop
Windows 10 Home Version 1809 17763.914 (X64) (2019-01-28 11:08:38)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-559692135-8497052-1209249446-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-559692135-8497052-1209249446-503 - Limited - Disabled)
Guest (S-1-5-21-559692135-8497052-1209249446-501 - Limited - Disabled)
HP (S-1-5-21-559692135-8497052-1209249446-1001 - Administrator - Enabled) => C:\Users\HP
WDAGUtilityAccount (S-1-5-21-559692135-8497052-1209249446-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: ESET Security (Enabled - Up to date) {333C65BB-8923-0EAA-C47E-C486E687BEFD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ACA & MEP 2019 Object Enabler (HKLM\...\{28B89EEF-2004-0000-5102-CF3F3A09B77D}) (Version: 8.1.44.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{28B89EEF-2001-0000-3102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
AIDA64 Extreme v5.99 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.99 - FinalWire Ltd.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AutoCAD 2019 – Čeština (Czech) (HKLM\...\{28B89EEF-2001-0405-2102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
AutoCAD 2019 (HKLM\...\{28B89EEF-2001-0000-0102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
AutoCAD 2019 Language Pack – Čeština (Czech) (HKLM\...\{28B89EEF-2001-0405-1102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
Autodesk App Manager 2016-2019 (HKLM-x32\...\{C1BF29A7-2D9E-4E8D-A3C1-02F6B20B8AB7}) (Version: 2.5.0 - Autodesk)
Autodesk AutoCAD 2019 – Čeština (Czech) (HKLM\...\AutoCAD 2019 – Čeština (Czech)) (Version: 23.0.46.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.3.0 (HKLM-x32\...\{448BC38C-2654-48CD-BB43-F59A37854A3E}) (Version: 1.3.0.0 - Autodesk)
Autodesk Material Library 2019 (HKLM-x32\...\{8F69EE2C-DC34-4746-9B47-7511147BD4B0}) (Version: 17.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2019 (HKLM-x32\...\{3AAA4C1B-51DA-487D-81A3-4234DBB9A8F9}) (Version: 17.11.3.0 - Autodesk)
Autodesk ReCap (HKLM\...\{50EDF910-0000-1033-0102-E3D118CE2EEA}) (Version: 5.0.0.40 - Autodesk) Hidden
Autodesk ReCap (HKLM\...\Autodesk ReCap 360) (Version: 5.0.0.40 - Autodesk)
Autodesk ReCap Photo (HKLM\...\{0E4FA9C0-0000-1033-0102-1B3A7F15D307}) (Version: 19.0.0.38 - Autodesk) Hidden
Autodesk ReCap Photo (HKLM\...\Autodesk ReCap Photo) (Version: 19.0.0.38 - Autodesk)
Bootstrapper (HKLM-x32\...\{EFDD0584-E443-4CA8-8B79-E5BE7B22651D}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.54 - Piriform)
CrystalDiskInfo 7.0.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.4 - Crystal Dew World)
Dassault Systemes Software B20 (HKLM\...\Dassault Systemes B20_0) (Version: - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
ESET Security (HKLM\...\{C26AA376-9D1B-4B7B-A1F0-DC41E8530176}) (Version: 13.0.24.0 - ESET, spol. s r.o.)
FARO LS 1.1.700.0 (64bit) (HKLM-x32\...\{FF6E9382-0B85-48DE-888F-76EFD9A87038}) (Version: 7.0.0.23 - FARO Scanner Production)
Glary Utilities PRO 5.130 (HKLM-x32\...\Glary Utilities 5) (Version: 5.130.0.156 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
HP 3D DriveGuard (HKLM\...\{04927A60-31CD-4614-A25C-055B1AD3A8CE}) (Version: 4.2.9.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6491.0 - IDT)
IObit Driver Booster (HKLM-x32\...\{2E29F3D8-99B4-4B2F-A93F-827DFFF26970}) (Version: 1.0.0 - IObit)
Kolekce The Sims™ 3 Moje městečko (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Kolekce The Sims™ 3 Styl 70., 80. a 90. let (HKLM-x32\...\{E1868CAE-E3B9-4099-8C18-AA8944D336FD}) (Version: 17.0.77 - Electronic Arts)
Kolekce The Sims™ 3 Zahradní mejdan (HKLM-x32\...\{117B6BF6-82C3-420C-B284-9247C8568E53}) (Version: 7.0.55 - Electronic Arts)
Kolekce The Sims™ 3 Na plný plyn (HKLM-x32\...\{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}) (Version: 5.0.44 - Electronic Arts)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\Proplus2019Retail - cs-cz) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - cs-cz.proof (HKLM\...\Proplus2019Retail - cs-cz.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us (HKLM\...\Proplus2019Retail - en-us) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us.proof (HKLM\...\Proplus2019Retail - en-us.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27027 (HKLM-x32\...\{39e28474-b67b-4209-af1b-e9ad0a83d8ca}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mindjet MindManager 2017 (HKLM\...\{BF3C3096-DD7F-49FE-896E-7D3E7DB91C91}) (Version: 17.1.167 - Mindjet)
Minitab 16 (HKLM-x32\...\Minitab16) (Version: 16.1.0 - Minitab, Inc.)
Minitab Software Update Manager (HKLM-x32\...\MinitabSoftwareManager) (Version: 1.0.0.0 - Minitab, Inc.)
Minitab16 (HKLM-x32\...\{3686ED2F-634B-45EE-84BB-18D17119A582}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Minitab16 (HKLM-x32\...\{63FD90F3-58B5-4A25-9C47-428576D994D0}) (Version: 16.1.0.0 - Minitab, Inc.) Hidden
Minitab16 (HKLM-x32\...\{B565A187-9E9C-42B6-A051-99223EB7E05B}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Mozilla Firefox 65.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 65.0.2 (x64 en-US)) (Version: 65.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.55.33574 - Electronic Arts, Inc.)
Počítačová aplikace Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.16.29 - Autodesk)
SoftwareManager (HKLM-x32\...\{1C92C419-4DAA-4B9B-B04F-C2E3CDEDCAF9}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
Speciální aplikace Autodesk 2016-2019 (HKLM-x32\...\{79F5747D-A961-4CCD-88B0-41F004D79AEB}) (Version: 2.5.0 - Autodesk)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
The Sims™ 3 Cestovní horečka (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
The Sims™ 3 Diesel Kolekce (HKLM-x32\...\{1C9B6173-6DC9-4EEE-9EFC-6BA115CFBE43}) (Version: 14.0.48 - Electronic Arts)
The Sims™ 3 Do Budoucnosti (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)
The Sims™ 3 Domácí mazlíčci (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
The Sims™ 3 Filmové rekvizity (HKLM-x32\...\{D0087539-3C57-44E0-BEE7-D779D546CBE1}) (Version: 20.0.53 - Electronic Arts)
The Sims™ 3 Hrátky osudu (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
The Sims™ 3 Luxusní bydlení – Kolekce (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 High-End Loft Stuff) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Obludárium (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
The Sims™ 3 Povolání snů (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
The Sims™ 3 Přepychové ložnice Kolekce (HKLM-x32\...\{08A25478-C5DD-4EA7-B168-3D687CA987FF}) (Version: 11.0.84 - Electronic Arts)
The Sims™ 3 Roční období (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
The Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
The Sims™ 3 Sladké radosti Katy Perry (HKLM-x32\...\{9B2506E3-9A3F-45B5-96BF-509CAD584650}) (Version: 13.0.62 - Electronic Arts)
The Sims™ 3 Studentský život (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
The Sims™ 3 Tropický ráj (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
The Sims™ 3 Po setmění (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Late Night) (Version: 1.0.0.0 - Electronic Arts Inc.)
VBA (3821b) (HKLM-x32\...\{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
ZWCAD Mechanical 2015 (HKLM-x32\...\{8D36B335-F5B1-437E-BA2B-E4544BF9772E}) (Version: 1.0.0 - ZWSoft)
ZWCAD Mechanical 2015 Resource Package (HKLM-x32\...\{FB8DB18F-1843-4918-B3E3-F10D7E27059C}) (Version: 1.0.0 - ZWsoft)
ZWCAD+ 2014 (HKLM-x32\...\{9ACA2843-A001-0000-A001-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
ZWCAD+ 2014 Czech (HKLM-x32\...\{EC7D6813-6893-409A-AB22-94E24369F5E6}) (Version: 14.0.3.1237 - ZWSOFT)
ZWCAD+ 2014 Language Pack - Czech (HKLM-x32\...\{9ACA2843-A001-1029-A101-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
Packages:
=========
8 Zip Lite - unpack RAR, ZIP, 7z for free -> C:\Program Files\WindowsApps\BooStudioLLC.8ZipLite_1.2.150.0_x64__b6e429xa66pga [2019-02-26] (Finebits OÜ) [MS Ad]
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa [2019-12-29] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_2.2.16.0_x64__nfy108tqq3p12 [2019-11-02] (Thumbmunkeys Ltd) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2019\cs-CZ\acadficn.dll (Autodesk Development Sarl -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2019-06-16] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2019-06-16] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Loaded Modules (Whitelisted) =============
2019-12-19 17:45 - 2019-11-17 23:07 - 000281600 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVFILESYSTEMMETADATA.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000400896 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvApi.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 001124864 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvSubsystemController.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000519680 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvVirtualization.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000836608 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVOrchestration.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 000585008 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVCatalog.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001642800 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIntegration.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000177968 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvStreamingManager.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001010992 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVMANIFEST.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001091888 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVPOLICY.dll
2019-11-12 19:58 - 2019-11-10 10:18 - 001277440 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\LIBEAY32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\ssleay32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001611264 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005487104 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Core.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005841920 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Gui.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001179136 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Network.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005089792 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000184832 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "MMReminderService"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\StartupApproved\Run: => "GUDelayStartup"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{C877A85E-B2FD-4176-8133-20D7347A3E8F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E62881B7-9E27-4E54-8ABB-257B4241DC6F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BB3007E1-07BC-46D2-9156-6C855513F2FB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B98FB333-8349-4E4D-9130-7F409280F497}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [TCP Query User{24991BA5-EF5A-4200-AA63-2B6A5C58D8C5}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{0848160E-493B-408A-8A4E-F1EDEEC5AAF9}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{049C5CD7-3D83-440F-A847-B84BC8FD1F5C}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{37DB4E6B-5BE9-42C2-825F-4A5811804B37}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{49B4B3A7-6829-45B3-9539-A0337CB045FD}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B3D430E7-97B7-4D5A-A03E-A9EA2FFF7F89}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{081425AF-7D92-4165-83BB-4514B723AF0D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{F10712AC-BF24-4881-A182-0EF3F2930022}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{0E4522AB-81B4-4E9F-A00D-CB9E5230F4EF}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{E1AF51E2-4F6D-47FC-B258-907DCD4138B2}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{11D8539E-C435-41AA-911A-D551B09476A6}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{A5EAF838-D4FD-48D3-8E87-4EA7BF1923E4}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{476B2A7E-27AC-4601-A930-33E413BD094D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{C3CC689F-0A5D-4254-B07E-34A68378A53B}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{279382BD-7115-4822-8F97-32A470A99185}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{2842FC69-2B57-4A64-B22E-466910925B89}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{BF274251-D301-4F98-9E3F-88C06283CC93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{9597FF2B-BB34-46CD-A2AB-CAC510B2C341}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{29E97D38-1618-4153-8C12-F0C40EA18977}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B38CD689-F832-4BA8-A8F2-99ED5C966F4B}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{5538E21E-7E8D-4AF0-9B3D-D7F187254B35}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{4357DF77-9FB1-46B2-90C0-E2DC41072A93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D09CAA84-5CEF-4881-A2DA-A29E7EACF548}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{D75AD38C-F7E0-4B32-83B9-171A5060CB91}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{54325E48-B8B0-4A24-AE28-3A15144D0354}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D0DC8E9A-9ECE-40B8-A8FF-9F620A9B3119}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [TCP Query User{B475CECD-9273-44EC-BB31-0DA14A1826AF}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [UDP Query User{29953AB9-EE19-4F28-B615-ECD2C81BE1F4}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [{89007969-568E-4171-8230-B3B530B3A6D3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C8048005-DD76-4E43-9ED4-CC1CC8203C7C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{51AC7886-3A4A-4D39-8961-462811FD8B73}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AFE33915-9721-49D0-A5A0-632D6EE5E905}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{06745F54-5BEA-4F64-A0AA-F166B4D3F13A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F952119-76B5-4FD6-A9B0-1BBEEACC66EB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F6FE490C-FCCD-49D5-8C1A-00BB1ACB7518}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3EC5AB58-1B44-41FB-8BD3-1A078B3F6903}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C9CDD50D-E8A2-4DEC-83AE-503DA3B644C7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{93BC58B3-E333-49A5-AB11-C48761F469BD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
==================== Restore Points =========================
20-11-2019 12:26:39 Naplánovaný kontrolní bod
02-12-2019 15:31:31 Naplánovaný kontrolní bod
19-12-2019 18:07:53 Windows Update
29-12-2019 15:49:26 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (12/29/2019 05:15:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0xef4
Čas spuštění chybující aplikace: 0x01d5be62e444665f
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: a1ab6346-b08c-48be-9075-911f19e81fe1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 04:32:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2a40
Čas spuštění chybující aplikace: 0x01d5a9ee281b1471
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: c91aa8e8-9c06-48d5-bf1b-e5cf007ff503
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:03:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Integrator.exe, verze: 5.130.0.156, časové razítko: 0x5db258a8
Název chybujícího modulu: MSVCR90.dll, verze: 9.0.30729.9518, časové razítko: 0x5b690a0f
Kód výjimky: 0xc0000417
Posun chyby: 0x0003523b
ID chybujícího procesu: 0x2950
Čas spuštění chybující aplikace: 0x01d5a99f61ddc110
Cesta k chybující aplikaci: C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
Cesta k chybujícímu modulu: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9518_none_508db366bcbd18c4\MSVCR90.dll
ID zprávy: 7af37492-537d-4202-b2ce-1add21177dc1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:02:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2be0
Čas spuštění chybující aplikace: 0x01d5a99ef5af0f12
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 127a6d05-f915-4dfc-9511-fb3a40c033d3
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/02/2019 11:58:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x1b18
Čas spuštění chybující aplikace: 0x01d5a8ff4bf58557
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 74428661-8075-4803-a7a9-8761b67113ae
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/30/2019 08:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x14ec
Čas spuštění chybující aplikace: 0x01d5a7b85d29d891
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 86f51449-85d0-474b-a6ed-9318d8521856
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/25/2019 03:51:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x49c
Čas spuštění chybující aplikace: 0x01d5a39efbd2f693
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 1c44fa2b-3052-4191-84f3-d1209ef84614
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/19/2019 07:16:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2f6c
Čas spuštění chybující aplikace: 0x01d59ea02345b4c6
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 7d00f725-7ccc-4ebb-9d0f-b828bb596712
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (12/29/2019 05:15:25 PM) (Source: DCOM) (EventID: 10016) (User: OMAR)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli OMAR\HP (SID: S-1-5-21-559692135-8497052-1209249446-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (12/29/2019 05:08:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Microsoft Office Click-to-Run Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SynTPEnh Caller Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Validity WBF Policy Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba FlexNet Licensing Service 64 byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Backbone Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Andrea ST Filters Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba HP Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Windows Defender:
===================================
Date: 2019-02-07 15:07:23.809
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {451271AA-3DEC-4B12-AC8C-DD97527C5B89}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-02-05 17:39:11.374
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {8978230C-122E-469C-8518-18B21EB3523D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
CodeIntegrity:
===================================
Date: 2019-11-21 18:54:55.879
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.872
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.857
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.851
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.676
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.668
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.651
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.644
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: Hewlett-Packard F.1B 10/05/2011
Motherboard: Hewlett-Packard 1656
Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 37%
Total physical RAM: 8139.86 MB
Available physical RAM: 5064.7 MB
Total Virtual: 9419.86 MB
Available Virtual: 6412.7 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.22 GB) (Free:108.62 GB) NTFS
\\?\Volume{191739fe-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.54 GB) (Free:0.14 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 191739FE)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Ran by HP (administrator) on OMAR (Hewlett-Packard HP Pavilion dv6 Notebook PC) (29-12-2019 17:58:32)
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available Profiles: HP)
Platform: Windows 10 Home Version 1809 17763.914 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Andrea Electronics Corporation) [File not signed] C:\Program Files\IDT\WDM\AESTSr64.exe
(Dassault Systemes) [File not signed] C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\sttray64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1910.1283.0_x64__8wekyb3d8bbwe\LocalBridge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19081.22010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11912.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19101.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> ) C:\Windows\System32\Windows.WARP.JITService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.850_none_7e18264b4d00f498\TiWorker.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-16] (IDT, Inc.) [File not signed]
HKLM\...\Run: [MMReminderService] => C:\Program Files\Mindjet\MindManager 17\MMReminderService.exe [124616 2016-11-30] (Corel Corporation -> Mindjet)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\ecmdS.exe [183088 2019-12-19] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44016 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [uTorrent] => C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe [414656 2018-10-25] (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Policies\Explorer: []
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-19] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{90EF4A5E-85DB-4825-96F5-1AB93C2A8EEB}] -> C:\Program Files\Mindjet\MindManager 17\sys\MmInternetExplorerActiveSetup.vbs
BootExecute: autocheck autochk *
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1A4E3749-F1CB-4AFA-8931-8DCB05940086} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {3628A419-FEF1-49CF-9512-E223D33D5BA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {41BDC851-7201-4E82-9F29-E0DE006FB542} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {467F0685-829A-45A8-8CAF-ECDF56A7E87A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C8E5F04-5511-46FC-B6F4-370DFF46470B} - System32\Tasks\Minitab\Minitab Software Update Manager => C:\Program Files (x86)\Common Files\Minitab Shared\Software Manager\SoftwareManager.exe [430984 2010-03-25] (Minitab, Inc. -> Minitab)
Task: {5291B013-58A4-4AE5-AF48-C66D7DEA02F0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B6032BF-A587-460D-AAEF-CBD073D9D9C5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {6313A704-AF50-4537-BD30-439CC29B5619} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {67B43A3C-9068-42FD-8677-AD79170C9A27} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {86B14A71-7A97-413E-82B5-B3228C711A4E} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [136688 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
Task: {A92524F8-0508-4CFC-9A76-1DB2E69AB340} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0F0567A-EF61-4B33-B19C-C6E5385A1F45} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16467424 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CF338B1B-2211-4849-AAF6-91832FDBEB9A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {E9FC4462-7404-4C33-9F0B-7E0287B842D2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F21D0E2B-E0DE-4CAF-8DB6-E23C748AA1E7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{148bb867-3ddc-4ade-af32-1479bd21fa9b}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d3fe3cec-24de-40e8-b104-26ad4bd0ecad}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {04F8E5EE-DB4A-498C-A718-546FDA7B91A1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {0D04E46E-9F9A-4DEC-B2EB-2402EB567F22} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {104288F0-5BED-4695-AFF4-B97DDEA35E71} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {14FB0ECB-585A-4DEE-979B-2D5B38568787} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {41D5C8BB-6F41-4718-BFB4-D23FC352FC71} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {770746A7-C47B-4222-AF5C-C12E43533D41} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {AFF94F12-9074-4C26-B9E5-9B4B51CCF283} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {E37BFB27-554B-4815-86A0-3698AF89CA4C} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {EE92CE6F-C278-4F7E-88EC-7C1642B87008} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_40139
BHO: CmjBrowserHelperObject Object -> {6FE6A929-59D1-4763-91AD-29B61CFFB35B} -> C:\Program Files\Mindjet\MindManager 17\Mm8InternetExplorer.dll [2016-11-30] (Corel Corporation -> Mindjet)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: k4h86qir.default
FF ProfilePath: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default [2019-12-29]
FF Homepage: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxps://www.google.com/
FF NewTab: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10440__190224
FF Extension: (Seznam doplněk - Esko) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\sko-extension@firma.seznam.cz [2019-02-27]
FF Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2019-02-27]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2019-12-29]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/","hxxp://www.seznam.cz/"
CHR Notifications: Default -> hxxps://hackercombat.com
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default [2019-12-29]
CHR Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2019-12-29]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-10-31]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Chrome Media Router) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-29]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-05-26]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\System Profile [2019-05-26]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1233272 2019-05-14] (Autodesk, Inc. -> Autodesk Inc.)
R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [File not signed]
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 BBDemon; C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe [36864 2010-01-09] (Dassault Systemes) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11199776 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 hpqwmiex; C:\Users\HP\AppData\Roaming\Hewlett-Packard\hpqwmiex.exe [794112 2019-02-07] (Hewlett-Packard Company) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2425136 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3303736 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [279248 2019-02-28] (Synaptics Incorporated -> Synaptics Incorporated)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [43840 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149944 2019-11-30] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [103264 2019-11-30] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-06-07] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [189512 2019-11-30] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50712 2019-11-30] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79744 2019-12-19] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116696 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2019-03-10] (ESET, spol. s r.o. -> ESET)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [28936 2019-03-03] (Glarysoft LTD -> Glarysoft Ltd)
R0 hpdskflt; C:\Windows\System32\DRIVERS\hpdskflt.sys [31040 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-02-28] (Martin Malik - REALiX -> REALiX(tm))
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
R3 ROCKEYNT; C:\Windows\system32\DRIVERS\Rockey4.sys [36904 2019-04-07] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1158944 2019-09-08] (Realtek Semiconductor Corp. -> Realtek )
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-04-28] (Synaptics Incorporated -> Synaptics Incorporated)
R3 STHDA; C:\Windows\system32\DRIVERS\stwrt64.sys [551936 2013-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-02-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [333792 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 17:06 - 2019-12-29 17:08 - 000000000 ____D C:\AdwCleaner
2019-12-29 17:06 - 2019-12-29 17:06 - 008237744 _____ (Malwarebytes) C:\Users\HP\Downloads\adwcleaner_8.0.1.exe
2019-12-29 16:55 - 2019-12-29 16:56 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-12-29 16:55 - 2019-12-29 16:55 - 000001265 _____ C:\Users\HP\Desktop\CrystalDiskInfo.lnk
2019-12-29 16:55 - 2019-12-29 16:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2019-12-29 16:54 - 2019-12-29 16:55 - 003956368 _____ (Crystal Dew World ) C:\Users\HP\Downloads\CrystalDiskInfo7_0_4-en.exe
2019-12-29 16:07 - 2019-12-29 18:00 - 000024522 _____ C:\Users\HP\Desktop\FRST.txt
2019-12-29 16:06 - 2019-12-29 17:59 - 000000000 ____D C:\FRST
2019-12-29 16:05 - 2019-12-29 16:05 - 002272256 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe
2019-12-29 15:46 - 2019-12-29 15:46 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 020816384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 001201128 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 009668408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 007886848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 007645384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006541712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006444032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 003638272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 003576832 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 003387392 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002707968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 002699768 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002233688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002192384 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002072384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001702392 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-12-29 15:45 - 2019-12-29 15:45 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001677808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001676288 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001668960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001666440 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001656192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001473088 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001465264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001258296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001049400 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000981504 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000901120 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000793824 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000764928 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000758688 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000678672 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000603792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000575488 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000508928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000505632 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000430592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000408736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000312832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000203064 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\DevQueryBroker.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 18:00 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-12-29 17:19 - 2019-03-03 20:16 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2019-12-29 17:17 - 2019-01-28 12:13 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2019-12-29 17:17 - 2018-09-15 18:32 - 000718198 _____ C:\Windows\system32\perfh005.dat
2019-12-29 17:17 - 2018-09-15 18:32 - 000145242 _____ C:\Windows\system32\perfc005.dat
2019-12-29 17:17 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-12-29 17:15 - 2019-02-24 20:18 - 000000000 ____D C:\Users\HP\AppData\Roaming\uTorrent
2019-12-29 17:15 - 2019-02-07 15:49 - 000000000 ____D C:\Users\HP\AppData\Local\CrashDumps
2019-12-29 17:11 - 2019-01-28 11:59 - 000407328 _____ C:\Windows\system32\FNTCACHE.DAT
2019-12-29 17:10 - 2019-01-28 12:00 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-12-29 17:09 - 2018-09-15 07:09 - 000786432 _____ C:\Windows\system32\config\BBI
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\IObit
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\ProgramData\IObit
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-12-29 16:01 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-12-29 15:59 - 2019-03-07 17:30 - 000000000 ____D C:\Program Files\Microsoft Office
2019-12-29 15:57 - 2019-01-28 12:28 - 000000000 ____D C:\Windows\system32\MRT
2019-12-29 15:52 - 2019-01-28 12:28 - 129221664 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-12-29 15:51 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-12-19 17:51 - 2019-02-07 15:27 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-12-19 17:51 - 2019-02-07 15:27 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-12-19 17:43 - 2019-02-07 15:26 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2019-12-19 17:43 - 2019-02-07 15:26 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2019-12-19 17:42 - 2019-11-10 10:16 - 000000000 ____D C:\ProgramData\Origin
2019-12-19 17:41 - 2016-08-08 10:19 - 000116696 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2019-12-19 17:41 - 2016-08-08 10:19 - 000079744 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2019-12-19 17:40 - 2019-11-10 10:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\Origin
2019-12-10 08:58 - 2019-02-07 15:25 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-12-10 07:13 - 2019-01-28 12:15 - 000003344 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-559692135-8497052-1209249446-1001
2019-12-10 07:11 - 2019-07-01 18:15 - 000002382 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-12-10 07:11 - 2019-01-28 12:15 - 000000000 ___RD C:\Users\HP\OneDrive
2019-12-10 06:55 - 2019-11-10 10:20 - 000000000 ____D C:\Program Files (x86)\Origin Games
2019-12-10 06:53 - 2019-01-28 11:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-11-30 20:28 - 2019-01-28 12:12 - 000000000 ____D C:\Users\HP
2019-11-30 20:26 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-11-30 20:25 - 2016-08-08 10:19 - 000189512 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000149944 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000103264 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000050712 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-12-2019
Ran by HP (29-12-2019 18:00:42)
Running from C:\Users\HP\Desktop
Windows 10 Home Version 1809 17763.914 (X64) (2019-01-28 11:08:38)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-559692135-8497052-1209249446-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-559692135-8497052-1209249446-503 - Limited - Disabled)
Guest (S-1-5-21-559692135-8497052-1209249446-501 - Limited - Disabled)
HP (S-1-5-21-559692135-8497052-1209249446-1001 - Administrator - Enabled) => C:\Users\HP
WDAGUtilityAccount (S-1-5-21-559692135-8497052-1209249446-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: ESET Security (Enabled - Up to date) {333C65BB-8923-0EAA-C47E-C486E687BEFD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ACA & MEP 2019 Object Enabler (HKLM\...\{28B89EEF-2004-0000-5102-CF3F3A09B77D}) (Version: 8.1.44.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{28B89EEF-2001-0000-3102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
AIDA64 Extreme v5.99 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.99 - FinalWire Ltd.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AutoCAD 2019 – Čeština (Czech) (HKLM\...\{28B89EEF-2001-0405-2102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
AutoCAD 2019 (HKLM\...\{28B89EEF-2001-0000-0102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
AutoCAD 2019 Language Pack – Čeština (Czech) (HKLM\...\{28B89EEF-2001-0405-1102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
Autodesk App Manager 2016-2019 (HKLM-x32\...\{C1BF29A7-2D9E-4E8D-A3C1-02F6B20B8AB7}) (Version: 2.5.0 - Autodesk)
Autodesk AutoCAD 2019 – Čeština (Czech) (HKLM\...\AutoCAD 2019 – Čeština (Czech)) (Version: 23.0.46.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.3.0 (HKLM-x32\...\{448BC38C-2654-48CD-BB43-F59A37854A3E}) (Version: 1.3.0.0 - Autodesk)
Autodesk Material Library 2019 (HKLM-x32\...\{8F69EE2C-DC34-4746-9B47-7511147BD4B0}) (Version: 17.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2019 (HKLM-x32\...\{3AAA4C1B-51DA-487D-81A3-4234DBB9A8F9}) (Version: 17.11.3.0 - Autodesk)
Autodesk ReCap (HKLM\...\{50EDF910-0000-1033-0102-E3D118CE2EEA}) (Version: 5.0.0.40 - Autodesk) Hidden
Autodesk ReCap (HKLM\...\Autodesk ReCap 360) (Version: 5.0.0.40 - Autodesk)
Autodesk ReCap Photo (HKLM\...\{0E4FA9C0-0000-1033-0102-1B3A7F15D307}) (Version: 19.0.0.38 - Autodesk) Hidden
Autodesk ReCap Photo (HKLM\...\Autodesk ReCap Photo) (Version: 19.0.0.38 - Autodesk)
Bootstrapper (HKLM-x32\...\{EFDD0584-E443-4CA8-8B79-E5BE7B22651D}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.54 - Piriform)
CrystalDiskInfo 7.0.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.4 - Crystal Dew World)
Dassault Systemes Software B20 (HKLM\...\Dassault Systemes B20_0) (Version: - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
ESET Security (HKLM\...\{C26AA376-9D1B-4B7B-A1F0-DC41E8530176}) (Version: 13.0.24.0 - ESET, spol. s r.o.)
FARO LS 1.1.700.0 (64bit) (HKLM-x32\...\{FF6E9382-0B85-48DE-888F-76EFD9A87038}) (Version: 7.0.0.23 - FARO Scanner Production)
Glary Utilities PRO 5.130 (HKLM-x32\...\Glary Utilities 5) (Version: 5.130.0.156 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
HP 3D DriveGuard (HKLM\...\{04927A60-31CD-4614-A25C-055B1AD3A8CE}) (Version: 4.2.9.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6491.0 - IDT)
IObit Driver Booster (HKLM-x32\...\{2E29F3D8-99B4-4B2F-A93F-827DFFF26970}) (Version: 1.0.0 - IObit)
Kolekce The Sims™ 3 Moje městečko (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Kolekce The Sims™ 3 Styl 70., 80. a 90. let (HKLM-x32\...\{E1868CAE-E3B9-4099-8C18-AA8944D336FD}) (Version: 17.0.77 - Electronic Arts)
Kolekce The Sims™ 3 Zahradní mejdan (HKLM-x32\...\{117B6BF6-82C3-420C-B284-9247C8568E53}) (Version: 7.0.55 - Electronic Arts)
Kolekce The Sims™ 3 Na plný plyn (HKLM-x32\...\{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}) (Version: 5.0.44 - Electronic Arts)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\Proplus2019Retail - cs-cz) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - cs-cz.proof (HKLM\...\Proplus2019Retail - cs-cz.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us (HKLM\...\Proplus2019Retail - en-us) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us.proof (HKLM\...\Proplus2019Retail - en-us.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27027 (HKLM-x32\...\{39e28474-b67b-4209-af1b-e9ad0a83d8ca}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mindjet MindManager 2017 (HKLM\...\{BF3C3096-DD7F-49FE-896E-7D3E7DB91C91}) (Version: 17.1.167 - Mindjet)
Minitab 16 (HKLM-x32\...\Minitab16) (Version: 16.1.0 - Minitab, Inc.)
Minitab Software Update Manager (HKLM-x32\...\MinitabSoftwareManager) (Version: 1.0.0.0 - Minitab, Inc.)
Minitab16 (HKLM-x32\...\{3686ED2F-634B-45EE-84BB-18D17119A582}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Minitab16 (HKLM-x32\...\{63FD90F3-58B5-4A25-9C47-428576D994D0}) (Version: 16.1.0.0 - Minitab, Inc.) Hidden
Minitab16 (HKLM-x32\...\{B565A187-9E9C-42B6-A051-99223EB7E05B}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Mozilla Firefox 65.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 65.0.2 (x64 en-US)) (Version: 65.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.55.33574 - Electronic Arts, Inc.)
Počítačová aplikace Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.16.29 - Autodesk)
SoftwareManager (HKLM-x32\...\{1C92C419-4DAA-4B9B-B04F-C2E3CDEDCAF9}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
Speciální aplikace Autodesk 2016-2019 (HKLM-x32\...\{79F5747D-A961-4CCD-88B0-41F004D79AEB}) (Version: 2.5.0 - Autodesk)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
The Sims™ 3 Cestovní horečka (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
The Sims™ 3 Diesel Kolekce (HKLM-x32\...\{1C9B6173-6DC9-4EEE-9EFC-6BA115CFBE43}) (Version: 14.0.48 - Electronic Arts)
The Sims™ 3 Do Budoucnosti (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)
The Sims™ 3 Domácí mazlíčci (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
The Sims™ 3 Filmové rekvizity (HKLM-x32\...\{D0087539-3C57-44E0-BEE7-D779D546CBE1}) (Version: 20.0.53 - Electronic Arts)
The Sims™ 3 Hrátky osudu (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
The Sims™ 3 Luxusní bydlení – Kolekce (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 High-End Loft Stuff) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Obludárium (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
The Sims™ 3 Povolání snů (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
The Sims™ 3 Přepychové ložnice Kolekce (HKLM-x32\...\{08A25478-C5DD-4EA7-B168-3D687CA987FF}) (Version: 11.0.84 - Electronic Arts)
The Sims™ 3 Roční období (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
The Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
The Sims™ 3 Sladké radosti Katy Perry (HKLM-x32\...\{9B2506E3-9A3F-45B5-96BF-509CAD584650}) (Version: 13.0.62 - Electronic Arts)
The Sims™ 3 Studentský život (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
The Sims™ 3 Tropický ráj (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
The Sims™ 3 Po setmění (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Late Night) (Version: 1.0.0.0 - Electronic Arts Inc.)
VBA (3821b) (HKLM-x32\...\{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
ZWCAD Mechanical 2015 (HKLM-x32\...\{8D36B335-F5B1-437E-BA2B-E4544BF9772E}) (Version: 1.0.0 - ZWSoft)
ZWCAD Mechanical 2015 Resource Package (HKLM-x32\...\{FB8DB18F-1843-4918-B3E3-F10D7E27059C}) (Version: 1.0.0 - ZWsoft)
ZWCAD+ 2014 (HKLM-x32\...\{9ACA2843-A001-0000-A001-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
ZWCAD+ 2014 Czech (HKLM-x32\...\{EC7D6813-6893-409A-AB22-94E24369F5E6}) (Version: 14.0.3.1237 - ZWSOFT)
ZWCAD+ 2014 Language Pack - Czech (HKLM-x32\...\{9ACA2843-A001-1029-A101-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
Packages:
=========
8 Zip Lite - unpack RAR, ZIP, 7z for free -> C:\Program Files\WindowsApps\BooStudioLLC.8ZipLite_1.2.150.0_x64__b6e429xa66pga [2019-02-26] (Finebits OÜ) [MS Ad]
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa [2019-12-29] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_2.2.16.0_x64__nfy108tqq3p12 [2019-11-02] (Thumbmunkeys Ltd) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2019\cs-CZ\acadficn.dll (Autodesk Development Sarl -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2019-06-16] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2019-06-16] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Loaded Modules (Whitelisted) =============
2019-12-19 17:45 - 2019-11-17 23:07 - 000281600 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVFILESYSTEMMETADATA.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000400896 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvApi.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 001124864 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvSubsystemController.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000519680 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvVirtualization.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000836608 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVOrchestration.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 000585008 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVCatalog.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001642800 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIntegration.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000177968 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvStreamingManager.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001010992 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVMANIFEST.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001091888 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVPOLICY.dll
2019-11-12 19:58 - 2019-11-10 10:18 - 001277440 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\LIBEAY32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\ssleay32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001611264 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005487104 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Core.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005841920 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Gui.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001179136 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Network.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005089792 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000184832 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "MMReminderService"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\StartupApproved\Run: => "GUDelayStartup"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{C877A85E-B2FD-4176-8133-20D7347A3E8F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E62881B7-9E27-4E54-8ABB-257B4241DC6F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BB3007E1-07BC-46D2-9156-6C855513F2FB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B98FB333-8349-4E4D-9130-7F409280F497}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [TCP Query User{24991BA5-EF5A-4200-AA63-2B6A5C58D8C5}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{0848160E-493B-408A-8A4E-F1EDEEC5AAF9}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{049C5CD7-3D83-440F-A847-B84BC8FD1F5C}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{37DB4E6B-5BE9-42C2-825F-4A5811804B37}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{49B4B3A7-6829-45B3-9539-A0337CB045FD}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B3D430E7-97B7-4D5A-A03E-A9EA2FFF7F89}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{081425AF-7D92-4165-83BB-4514B723AF0D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{F10712AC-BF24-4881-A182-0EF3F2930022}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{0E4522AB-81B4-4E9F-A00D-CB9E5230F4EF}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{E1AF51E2-4F6D-47FC-B258-907DCD4138B2}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{11D8539E-C435-41AA-911A-D551B09476A6}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{A5EAF838-D4FD-48D3-8E87-4EA7BF1923E4}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{476B2A7E-27AC-4601-A930-33E413BD094D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{C3CC689F-0A5D-4254-B07E-34A68378A53B}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{279382BD-7115-4822-8F97-32A470A99185}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{2842FC69-2B57-4A64-B22E-466910925B89}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{BF274251-D301-4F98-9E3F-88C06283CC93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{9597FF2B-BB34-46CD-A2AB-CAC510B2C341}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{29E97D38-1618-4153-8C12-F0C40EA18977}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B38CD689-F832-4BA8-A8F2-99ED5C966F4B}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{5538E21E-7E8D-4AF0-9B3D-D7F187254B35}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{4357DF77-9FB1-46B2-90C0-E2DC41072A93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D09CAA84-5CEF-4881-A2DA-A29E7EACF548}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{D75AD38C-F7E0-4B32-83B9-171A5060CB91}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{54325E48-B8B0-4A24-AE28-3A15144D0354}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D0DC8E9A-9ECE-40B8-A8FF-9F620A9B3119}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [TCP Query User{B475CECD-9273-44EC-BB31-0DA14A1826AF}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [UDP Query User{29953AB9-EE19-4F28-B615-ECD2C81BE1F4}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [{89007969-568E-4171-8230-B3B530B3A6D3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C8048005-DD76-4E43-9ED4-CC1CC8203C7C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{51AC7886-3A4A-4D39-8961-462811FD8B73}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AFE33915-9721-49D0-A5A0-632D6EE5E905}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{06745F54-5BEA-4F64-A0AA-F166B4D3F13A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F952119-76B5-4FD6-A9B0-1BBEEACC66EB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F6FE490C-FCCD-49D5-8C1A-00BB1ACB7518}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3EC5AB58-1B44-41FB-8BD3-1A078B3F6903}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C9CDD50D-E8A2-4DEC-83AE-503DA3B644C7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{93BC58B3-E333-49A5-AB11-C48761F469BD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
==================== Restore Points =========================
20-11-2019 12:26:39 Naplánovaný kontrolní bod
02-12-2019 15:31:31 Naplánovaný kontrolní bod
19-12-2019 18:07:53 Windows Update
29-12-2019 15:49:26 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (12/29/2019 05:15:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0xef4
Čas spuštění chybující aplikace: 0x01d5be62e444665f
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: a1ab6346-b08c-48be-9075-911f19e81fe1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 04:32:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2a40
Čas spuštění chybující aplikace: 0x01d5a9ee281b1471
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: c91aa8e8-9c06-48d5-bf1b-e5cf007ff503
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:03:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Integrator.exe, verze: 5.130.0.156, časové razítko: 0x5db258a8
Název chybujícího modulu: MSVCR90.dll, verze: 9.0.30729.9518, časové razítko: 0x5b690a0f
Kód výjimky: 0xc0000417
Posun chyby: 0x0003523b
ID chybujícího procesu: 0x2950
Čas spuštění chybující aplikace: 0x01d5a99f61ddc110
Cesta k chybující aplikaci: C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
Cesta k chybujícímu modulu: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9518_none_508db366bcbd18c4\MSVCR90.dll
ID zprávy: 7af37492-537d-4202-b2ce-1add21177dc1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:02:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2be0
Čas spuštění chybující aplikace: 0x01d5a99ef5af0f12
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 127a6d05-f915-4dfc-9511-fb3a40c033d3
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/02/2019 11:58:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x1b18
Čas spuštění chybující aplikace: 0x01d5a8ff4bf58557
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 74428661-8075-4803-a7a9-8761b67113ae
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/30/2019 08:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x14ec
Čas spuštění chybující aplikace: 0x01d5a7b85d29d891
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 86f51449-85d0-474b-a6ed-9318d8521856
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/25/2019 03:51:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x49c
Čas spuštění chybující aplikace: 0x01d5a39efbd2f693
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 1c44fa2b-3052-4191-84f3-d1209ef84614
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/19/2019 07:16:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2f6c
Čas spuštění chybující aplikace: 0x01d59ea02345b4c6
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 7d00f725-7ccc-4ebb-9d0f-b828bb596712
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (12/29/2019 05:15:25 PM) (Source: DCOM) (EventID: 10016) (User: OMAR)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli OMAR\HP (SID: S-1-5-21-559692135-8497052-1209249446-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (12/29/2019 05:08:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Microsoft Office Click-to-Run Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SynTPEnh Caller Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Validity WBF Policy Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba FlexNet Licensing Service 64 byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Backbone Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Andrea ST Filters Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 05:08:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba HP Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Windows Defender:
===================================
Date: 2019-02-07 15:07:23.809
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {451271AA-3DEC-4B12-AC8C-DD97527C5B89}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-02-05 17:39:11.374
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {8978230C-122E-469C-8518-18B21EB3523D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
CodeIntegrity:
===================================
Date: 2019-11-21 18:54:55.879
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.872
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.857
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.851
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.676
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.668
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.651
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.644
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: Hewlett-Packard F.1B 10/05/2011
Motherboard: Hewlett-Packard 1656
Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 37%
Total physical RAM: 8139.86 MB
Available physical RAM: 5064.7 MB
Total Virtual: 9419.86 MB
Available Virtual: 6412.7 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.22 GB) (Free:108.62 GB) NTFS
\\?\Volume{191739fe-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.54 GB) (Free:0.14 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 191739FE)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
-
Rudy
- Site Admin
- Příspěvky: 118251
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kompletně zpomalený notebook
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Policies\Explorer: []
Task: {1A4E3749-F1CB-4AFA-8931-8DCB05940086} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {3628A419-FEF1-49CF-9512-E223D33D5BA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
FF NewTab: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxp://securedsearch.lavasoft.com/?pr=v ... 40__190224
CHR Notifications: Default -> hxxps://hackercombat.com
C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kompletně zpomalený notebook
Log se mi nezobrazil a asi ani neuložil, po dokončení se pc restartoval. Zde posílám nový log.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-12-2019
Ran by HP (administrator) on OMAR (Hewlett-Packard HP Pavilion dv6 Notebook PC) (29-12-2019 20:25:52)
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available Profiles: HP)
Platform: Windows 10 Home Version 1809 17763.914 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Andrea Electronics Corporation) [File not signed] C:\Program Files\IDT\WDM\AESTSr64.exe
(Dassault Systemes) [File not signed] C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\sttray64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19101.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(uTorrent.CZ -> BitTorrent, Inc.) [File not signed] C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-16] (IDT, Inc.) [File not signed]
HKLM\...\Run: [MMReminderService] => C:\Program Files\Mindjet\MindManager 17\MMReminderService.exe [124616 2016-11-30] (Corel Corporation -> Mindjet)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\ecmdS.exe [183088 2019-12-19] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44016 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [uTorrent] => C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe [414656 2018-10-25] (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-19] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{90EF4A5E-85DB-4825-96F5-1AB93C2A8EEB}] -> C:\Program Files\Mindjet\MindManager 17\sys\MmInternetExplorerActiveSetup.vbs
BootExecute: autocheck autochk *
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {41BDC851-7201-4E82-9F29-E0DE006FB542} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {467F0685-829A-45A8-8CAF-ECDF56A7E87A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C8E5F04-5511-46FC-B6F4-370DFF46470B} - System32\Tasks\Minitab\Minitab Software Update Manager => C:\Program Files (x86)\Common Files\Minitab Shared\Software Manager\SoftwareManager.exe [430984 2010-03-25] (Minitab, Inc. -> Minitab)
Task: {5291B013-58A4-4AE5-AF48-C66D7DEA02F0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B6032BF-A587-460D-AAEF-CBD073D9D9C5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {6313A704-AF50-4537-BD30-439CC29B5619} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {67B43A3C-9068-42FD-8677-AD79170C9A27} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {86B14A71-7A97-413E-82B5-B3228C711A4E} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [136688 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
Task: {A92524F8-0508-4CFC-9A76-1DB2E69AB340} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0F0567A-EF61-4B33-B19C-C6E5385A1F45} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16467424 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CF338B1B-2211-4849-AAF6-91832FDBEB9A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {E9FC4462-7404-4C33-9F0B-7E0287B842D2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F21D0E2B-E0DE-4CAF-8DB6-E23C748AA1E7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{148bb867-3ddc-4ade-af32-1479bd21fa9b}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d3fe3cec-24de-40e8-b104-26ad4bd0ecad}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {04F8E5EE-DB4A-498C-A718-546FDA7B91A1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {0D04E46E-9F9A-4DEC-B2EB-2402EB567F22} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {104288F0-5BED-4695-AFF4-B97DDEA35E71} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {14FB0ECB-585A-4DEE-979B-2D5B38568787} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {41D5C8BB-6F41-4718-BFB4-D23FC352FC71} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {770746A7-C47B-4222-AF5C-C12E43533D41} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {AFF94F12-9074-4C26-B9E5-9B4B51CCF283} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {E37BFB27-554B-4815-86A0-3698AF89CA4C} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {EE92CE6F-C278-4F7E-88EC-7C1642B87008} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_40139
BHO: CmjBrowserHelperObject Object -> {6FE6A929-59D1-4763-91AD-29B61CFFB35B} -> C:\Program Files\Mindjet\MindManager 17\Mm8InternetExplorer.dll [2016-11-30] (Corel Corporation -> Mindjet)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: k4h86qir.default
FF ProfilePath: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default [2019-12-29]
FF Homepage: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxps://www.google.com/
FF Extension: (Seznam doplněk - Esko) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\sko-extension@firma.seznam.cz [2019-02-27]
FF Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2019-02-27]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2019-12-29]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/","hxxp://www.seznam.cz/"
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default [2019-12-29]
CHR Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2019-12-29]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-10-31]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Chrome Media Router) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-29]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-12-29]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\System Profile [2019-12-29]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1233272 2019-05-14] (Autodesk, Inc. -> Autodesk Inc.)
R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [File not signed]
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 BBDemon; C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe [36864 2010-01-09] (Dassault Systemes) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11199776 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 hpqwmiex; C:\Users\HP\AppData\Roaming\Hewlett-Packard\hpqwmiex.exe [794112 2019-02-07] (Hewlett-Packard Company) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2425136 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3303736 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [279248 2019-02-28] (Synaptics Incorporated -> Synaptics Incorporated)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [43840 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149944 2019-11-30] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [103264 2019-11-30] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-06-07] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [189512 2019-11-30] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50712 2019-11-30] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79744 2019-12-19] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116696 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2019-03-10] (ESET, spol. s r.o. -> ESET)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [28936 2019-03-03] (Glarysoft LTD -> Glarysoft Ltd)
R0 hpdskflt; C:\Windows\System32\DRIVERS\hpdskflt.sys [31040 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-02-28] (Martin Malik - REALiX -> REALiX(tm))
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
R3 ROCKEYNT; C:\Windows\system32\DRIVERS\Rockey4.sys [36904 2019-04-07] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1158944 2019-09-08] (Realtek Semiconductor Corp. -> Realtek )
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-04-28] (Synaptics Incorporated -> Synaptics Incorporated)
R3 STHDA; C:\Windows\system32\DRIVERS\stwrt64.sys [551936 2013-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-02-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [333792 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 20:14 - 2019-12-29 20:14 - 000000000 ____D C:\Users\HP\Documents\Barča
2019-12-29 20:13 - 2019-12-29 20:13 - 000014546 _____ C:\Users\HP\Downloads\[CzT]Laska_nebeska_Love_Actually_2003_720p_.torrent
2019-12-29 20:12 - 2019-12-29 20:15 - 000005027 _____ C:\Users\HP\Desktop\Fixlog.txt
2019-12-29 18:00 - 2019-12-29 18:02 - 000046308 _____ C:\Users\HP\Desktop\Addition.txt
2019-12-29 17:06 - 2019-12-29 17:08 - 000000000 ____D C:\AdwCleaner
2019-12-29 17:06 - 2019-12-29 17:06 - 008237744 _____ (Malwarebytes) C:\Users\HP\Downloads\adwcleaner_8.0.1.exe
2019-12-29 16:55 - 2019-12-29 18:13 - 000001265 _____ C:\Users\HP\Desktop\CrystalDiskInfo.lnk
2019-12-29 16:55 - 2019-12-29 16:56 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-12-29 16:55 - 2019-12-29 16:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2019-12-29 16:54 - 2019-12-29 16:55 - 003956368 _____ (Crystal Dew World ) C:\Users\HP\Downloads\CrystalDiskInfo7_0_4-en.exe
2019-12-29 16:07 - 2019-12-29 20:28 - 000023127 _____ C:\Users\HP\Desktop\FRST.txt
2019-12-29 16:06 - 2019-12-29 20:27 - 000000000 ____D C:\FRST
2019-12-29 16:05 - 2019-12-29 16:05 - 002272256 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe
2019-12-29 15:46 - 2019-12-29 15:46 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 020816384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 001201128 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 009668408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 007886848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 007645384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006541712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006444032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 003638272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 003576832 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 003387392 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002707968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 002699768 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002233688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002192384 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002072384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001702392 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-12-29 15:45 - 2019-12-29 15:45 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001677808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001676288 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001668960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001666440 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001656192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001473088 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001465264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001258296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001049400 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000981504 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000901120 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000793824 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000764928 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000758688 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000678672 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000603792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000575488 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000508928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000505632 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000430592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000408736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000312832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000203064 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\DevQueryBroker.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 20:29 - 2019-02-24 20:18 - 000000000 ____D C:\Users\HP\AppData\Roaming\uTorrent
2019-12-29 20:25 - 2019-03-03 20:16 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2019-12-29 20:25 - 2019-01-28 12:13 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2019-12-29 20:25 - 2018-09-15 18:32 - 000718198 _____ C:\Windows\system32\perfh005.dat
2019-12-29 20:25 - 2018-09-15 18:32 - 000145242 _____ C:\Windows\system32\perfc005.dat
2019-12-29 20:25 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-12-29 20:21 - 2019-01-28 11:59 - 000308368 _____ C:\Windows\system32\FNTCACHE.DAT
2019-12-29 20:21 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-12-29 20:20 - 2019-01-28 12:00 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-12-29 20:19 - 2018-09-15 07:09 - 000786432 _____ C:\Windows\system32\config\BBI
2019-12-29 20:15 - 2019-06-04 18:44 - 000000000 ____D C:\Users\HP\AppData\LocalLow\Temp
2019-12-29 20:07 - 2019-01-28 11:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-12-29 18:40 - 2019-06-17 16:26 - 000000000 ____D C:\Program Files\Autodesk
2019-12-29 18:40 - 2019-06-17 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2019-12-29 18:40 - 2019-06-17 16:21 - 000000000 ____D C:\ProgramData\Autodesk
2019-12-29 18:33 - 2019-06-17 16:26 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2019-12-29 18:29 - 2019-06-17 16:31 - 000000000 ____D C:\Users\Public\Documents\Autodesk
2019-12-29 18:29 - 2019-06-17 16:30 - 000000000 ____D C:\Users\HP\AppData\Roaming\Autodesk
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-12-29 17:15 - 2019-02-07 15:49 - 000000000 ____D C:\Users\HP\AppData\Local\CrashDumps
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\IObit
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\ProgramData\IObit
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-12-29 16:01 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-12-29 15:59 - 2019-03-07 17:30 - 000000000 ____D C:\Program Files\Microsoft Office
2019-12-29 15:57 - 2019-01-28 12:28 - 000000000 ____D C:\Windows\system32\MRT
2019-12-29 15:52 - 2019-01-28 12:28 - 129221664 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-12-29 15:51 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-12-19 17:51 - 2019-02-07 15:27 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-12-19 17:51 - 2019-02-07 15:27 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-12-19 17:42 - 2019-11-10 10:16 - 000000000 ____D C:\ProgramData\Origin
2019-12-19 17:41 - 2016-08-08 10:19 - 000116696 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2019-12-19 17:41 - 2016-08-08 10:19 - 000079744 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2019-12-19 17:40 - 2019-11-10 10:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\Origin
2019-12-10 08:58 - 2019-02-07 15:25 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-12-10 07:13 - 2019-01-28 12:15 - 000003344 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-559692135-8497052-1209249446-1001
2019-12-10 07:11 - 2019-07-01 18:15 - 000002382 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-12-10 07:11 - 2019-01-28 12:15 - 000000000 ___RD C:\Users\HP\OneDrive
2019-12-10 06:55 - 2019-11-10 10:20 - 000000000 ____D C:\Program Files (x86)\Origin Games
2019-11-30 20:28 - 2019-01-28 12:12 - 000000000 ____D C:\Users\HP
2019-11-30 20:26 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-11-30 20:25 - 2016-08-08 10:19 - 000189512 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000149944 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000103264 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000050712 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-12-2019
Ran by HP (29-12-2019 20:29:40)
Running from C:\Users\HP\Desktop
Windows 10 Home Version 1809 17763.914 (X64) (2019-01-28 11:08:38)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-559692135-8497052-1209249446-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-559692135-8497052-1209249446-503 - Limited - Disabled)
Guest (S-1-5-21-559692135-8497052-1209249446-501 - Limited - Disabled)
HP (S-1-5-21-559692135-8497052-1209249446-1001 - Administrator - Enabled) => C:\Users\HP
WDAGUtilityAccount (S-1-5-21-559692135-8497052-1209249446-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: ESET Security (Enabled - Up to date) {333C65BB-8923-0EAA-C47E-C486E687BEFD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AIDA64 Extreme v5.99 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.99 - FinalWire Ltd.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Bootstrapper (HKLM-x32\...\{EFDD0584-E443-4CA8-8B79-E5BE7B22651D}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.54 - Piriform)
CrystalDiskInfo 7.0.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.4 - Crystal Dew World)
Dassault Systemes Software B20 (HKLM\...\Dassault Systemes B20_0) (Version: - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
ESET Security (HKLM\...\{C26AA376-9D1B-4B7B-A1F0-DC41E8530176}) (Version: 13.0.24.0 - ESET, spol. s r.o.)
FARO LS 1.1.700.0 (64bit) (HKLM-x32\...\{FF6E9382-0B85-48DE-888F-76EFD9A87038}) (Version: 7.0.0.23 - FARO Scanner Production)
Glary Utilities PRO 5.130 (HKLM-x32\...\Glary Utilities 5) (Version: 5.130.0.156 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
HP 3D DriveGuard (HKLM\...\{04927A60-31CD-4614-A25C-055B1AD3A8CE}) (Version: 4.2.9.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6491.0 - IDT)
IObit Driver Booster (HKLM-x32\...\{2E29F3D8-99B4-4B2F-A93F-827DFFF26970}) (Version: 1.0.0 - IObit)
Kolekce The Sims™ 3 Moje městečko (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Kolekce The Sims™ 3 Styl 70., 80. a 90. let (HKLM-x32\...\{E1868CAE-E3B9-4099-8C18-AA8944D336FD}) (Version: 17.0.77 - Electronic Arts)
Kolekce The Sims™ 3 Zahradní mejdan (HKLM-x32\...\{117B6BF6-82C3-420C-B284-9247C8568E53}) (Version: 7.0.55 - Electronic Arts)
Kolekce The Sims™ 3 Na plný plyn (HKLM-x32\...\{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}) (Version: 5.0.44 - Electronic Arts)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\Proplus2019Retail - cs-cz) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - cs-cz.proof (HKLM\...\Proplus2019Retail - cs-cz.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us (HKLM\...\Proplus2019Retail - en-us) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us.proof (HKLM\...\Proplus2019Retail - en-us.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27027 (HKLM-x32\...\{39e28474-b67b-4209-af1b-e9ad0a83d8ca}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mindjet MindManager 2017 (HKLM\...\{BF3C3096-DD7F-49FE-896E-7D3E7DB91C91}) (Version: 17.1.167 - Mindjet)
Minitab 16 (HKLM-x32\...\Minitab16) (Version: 16.1.0 - Minitab, Inc.)
Minitab Software Update Manager (HKLM-x32\...\MinitabSoftwareManager) (Version: 1.0.0.0 - Minitab, Inc.)
Minitab16 (HKLM-x32\...\{3686ED2F-634B-45EE-84BB-18D17119A582}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Minitab16 (HKLM-x32\...\{63FD90F3-58B5-4A25-9C47-428576D994D0}) (Version: 16.1.0.0 - Minitab, Inc.) Hidden
Minitab16 (HKLM-x32\...\{B565A187-9E9C-42B6-A051-99223EB7E05B}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Mozilla Firefox 65.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 65.0.2 (x64 en-US)) (Version: 65.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.55.33574 - Electronic Arts, Inc.)
Počítačová aplikace Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.16.29 - Autodesk)
SoftwareManager (HKLM-x32\...\{1C92C419-4DAA-4B9B-B04F-C2E3CDEDCAF9}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
Speciální aplikace Autodesk 2016-2019 (HKLM-x32\...\{79F5747D-A961-4CCD-88B0-41F004D79AEB}) (Version: 2.5.0 - Autodesk)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
The Sims™ 3 Cestovní horečka (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
The Sims™ 3 Diesel Kolekce (HKLM-x32\...\{1C9B6173-6DC9-4EEE-9EFC-6BA115CFBE43}) (Version: 14.0.48 - Electronic Arts)
The Sims™ 3 Do Budoucnosti (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)
The Sims™ 3 Domácí mazlíčci (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
The Sims™ 3 Filmové rekvizity (HKLM-x32\...\{D0087539-3C57-44E0-BEE7-D779D546CBE1}) (Version: 20.0.53 - Electronic Arts)
The Sims™ 3 Hrátky osudu (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
The Sims™ 3 Luxusní bydlení – Kolekce (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 High-End Loft Stuff) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Obludárium (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
The Sims™ 3 Povolání snů (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
The Sims™ 3 Přepychové ložnice Kolekce (HKLM-x32\...\{08A25478-C5DD-4EA7-B168-3D687CA987FF}) (Version: 11.0.84 - Electronic Arts)
The Sims™ 3 Roční období (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
The Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
The Sims™ 3 Sladké radosti Katy Perry (HKLM-x32\...\{9B2506E3-9A3F-45B5-96BF-509CAD584650}) (Version: 13.0.62 - Electronic Arts)
The Sims™ 3 Studentský život (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
The Sims™ 3 Tropický ráj (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
The Sims™ 3 Po setmění (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Late Night) (Version: 1.0.0.0 - Electronic Arts Inc.)
VBA (3821b) (HKLM-x32\...\{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
ZWCAD Mechanical 2015 (HKLM-x32\...\{8D36B335-F5B1-437E-BA2B-E4544BF9772E}) (Version: 1.0.0 - ZWSoft)
ZWCAD Mechanical 2015 Resource Package (HKLM-x32\...\{FB8DB18F-1843-4918-B3E3-F10D7E27059C}) (Version: 1.0.0 - ZWsoft)
ZWCAD+ 2014 (HKLM-x32\...\{9ACA2843-A001-0000-A001-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
ZWCAD+ 2014 Czech (HKLM-x32\...\{EC7D6813-6893-409A-AB22-94E24369F5E6}) (Version: 14.0.3.1237 - ZWSOFT)
ZWCAD+ 2014 Language Pack - Czech (HKLM-x32\...\{9ACA2843-A001-1029-A101-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
Packages:
=========
8 Zip Lite - unpack RAR, ZIP, 7z for free -> C:\Program Files\WindowsApps\BooStudioLLC.8ZipLite_1.2.150.0_x64__b6e429xa66pga [2019-02-26] (Finebits OÜ) [MS Ad]
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa [2019-12-29] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_2.2.16.0_x64__nfy108tqq3p12 [2019-11-02] (Thumbmunkeys Ltd) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe => No File
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2019\cs-CZ\acadficn.dll => No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Loaded Modules (Whitelisted) =============
2019-12-19 17:45 - 2019-11-17 23:07 - 000281600 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVFILESYSTEMMETADATA.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000400896 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvApi.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 001124864 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvSubsystemController.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000519680 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvVirtualization.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000836608 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVOrchestration.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 000585008 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVCatalog.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001642800 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIntegration.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000177968 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvStreamingManager.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001010992 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVMANIFEST.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001091888 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVPOLICY.dll
2019-11-12 19:58 - 2019-11-10 10:18 - 001277440 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\LIBEAY32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\ssleay32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001611264 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005487104 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Core.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005841920 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Gui.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001179136 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Network.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005089792 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000184832 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "MMReminderService"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\StartupApproved\Run: => "GUDelayStartup"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{C877A85E-B2FD-4176-8133-20D7347A3E8F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E62881B7-9E27-4E54-8ABB-257B4241DC6F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BB3007E1-07BC-46D2-9156-6C855513F2FB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B98FB333-8349-4E4D-9130-7F409280F497}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [TCP Query User{24991BA5-EF5A-4200-AA63-2B6A5C58D8C5}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{0848160E-493B-408A-8A4E-F1EDEEC5AAF9}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{049C5CD7-3D83-440F-A847-B84BC8FD1F5C}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{37DB4E6B-5BE9-42C2-825F-4A5811804B37}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{49B4B3A7-6829-45B3-9539-A0337CB045FD}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B3D430E7-97B7-4D5A-A03E-A9EA2FFF7F89}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{081425AF-7D92-4165-83BB-4514B723AF0D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{F10712AC-BF24-4881-A182-0EF3F2930022}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{0E4522AB-81B4-4E9F-A00D-CB9E5230F4EF}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{E1AF51E2-4F6D-47FC-B258-907DCD4138B2}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{11D8539E-C435-41AA-911A-D551B09476A6}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{A5EAF838-D4FD-48D3-8E87-4EA7BF1923E4}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{476B2A7E-27AC-4601-A930-33E413BD094D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{C3CC689F-0A5D-4254-B07E-34A68378A53B}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{279382BD-7115-4822-8F97-32A470A99185}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{2842FC69-2B57-4A64-B22E-466910925B89}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{BF274251-D301-4F98-9E3F-88C06283CC93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{9597FF2B-BB34-46CD-A2AB-CAC510B2C341}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{29E97D38-1618-4153-8C12-F0C40EA18977}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B38CD689-F832-4BA8-A8F2-99ED5C966F4B}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{5538E21E-7E8D-4AF0-9B3D-D7F187254B35}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{4357DF77-9FB1-46B2-90C0-E2DC41072A93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D09CAA84-5CEF-4881-A2DA-A29E7EACF548}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{D75AD38C-F7E0-4B32-83B9-171A5060CB91}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{54325E48-B8B0-4A24-AE28-3A15144D0354}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D0DC8E9A-9ECE-40B8-A8FF-9F620A9B3119}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [TCP Query User{B475CECD-9273-44EC-BB31-0DA14A1826AF}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [UDP Query User{29953AB9-EE19-4F28-B615-ECD2C81BE1F4}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [{89007969-568E-4171-8230-B3B530B3A6D3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C8048005-DD76-4E43-9ED4-CC1CC8203C7C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{51AC7886-3A4A-4D39-8961-462811FD8B73}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AFE33915-9721-49D0-A5A0-632D6EE5E905}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{06745F54-5BEA-4F64-A0AA-F166B4D3F13A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F952119-76B5-4FD6-A9B0-1BBEEACC66EB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F6FE490C-FCCD-49D5-8C1A-00BB1ACB7518}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3EC5AB58-1B44-41FB-8BD3-1A078B3F6903}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C9CDD50D-E8A2-4DEC-83AE-503DA3B644C7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{93BC58B3-E333-49A5-AB11-C48761F469BD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
==================== Restore Points =========================
02-12-2019 15:31:31 Naplánovaný kontrolní bod
19-12-2019 18:07:53 Windows Update
29-12-2019 15:49:26 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (12/29/2019 05:15:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0xef4
Čas spuštění chybující aplikace: 0x01d5be62e444665f
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: a1ab6346-b08c-48be-9075-911f19e81fe1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 04:32:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2a40
Čas spuštění chybující aplikace: 0x01d5a9ee281b1471
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: c91aa8e8-9c06-48d5-bf1b-e5cf007ff503
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:03:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Integrator.exe, verze: 5.130.0.156, časové razítko: 0x5db258a8
Název chybujícího modulu: MSVCR90.dll, verze: 9.0.30729.9518, časové razítko: 0x5b690a0f
Kód výjimky: 0xc0000417
Posun chyby: 0x0003523b
ID chybujícího procesu: 0x2950
Čas spuštění chybující aplikace: 0x01d5a99f61ddc110
Cesta k chybující aplikaci: C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
Cesta k chybujícímu modulu: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9518_none_508db366bcbd18c4\MSVCR90.dll
ID zprávy: 7af37492-537d-4202-b2ce-1add21177dc1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:02:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2be0
Čas spuštění chybující aplikace: 0x01d5a99ef5af0f12
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 127a6d05-f915-4dfc-9511-fb3a40c033d3
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/02/2019 11:58:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x1b18
Čas spuštění chybující aplikace: 0x01d5a8ff4bf58557
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 74428661-8075-4803-a7a9-8761b67113ae
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/30/2019 08:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x14ec
Čas spuštění chybující aplikace: 0x01d5a7b85d29d891
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 86f51449-85d0-474b-a6ed-9318d8521856
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/25/2019 03:51:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x49c
Čas spuštění chybující aplikace: 0x01d5a39efbd2f693
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 1c44fa2b-3052-4191-84f3-d1209ef84614
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/19/2019 07:16:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2f6c
Čas spuštění chybující aplikace: 0x01d59ea02345b4c6
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 7d00f725-7ccc-4ebb-9d0f-b828bb596712
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (12/29/2019 08:23:08 PM) (Source: DCOM) (EventID: 10016) (User: OMAR)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli OMAR\HP (SID: S-1-5-21-559692135-8497052-1209249446-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (12/29/2019 08:22:50 PM) (Source: DCOM) (EventID: 10001) (User: OMAR)
Description: Nelze spustit server DCOM: microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
0
při provádění příkazu:
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server
Error: (12/29/2019 08:13:10 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
Instance této služby je již spuštěna.
Error: (12/29/2019 08:12:47 PM) (Source: DCOM) (EventID: 10016) (User: OMAR)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli OMAR\HP (SID: S-1-5-21-559692135-8497052-1209249446-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Microsoft Office Click-to-Run Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Origin Web Helper Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Validity WBF Policy Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Windows Defender:
===================================
Date: 2019-02-07 15:07:23.809
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {451271AA-3DEC-4B12-AC8C-DD97527C5B89}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-02-05 17:39:11.374
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {8978230C-122E-469C-8518-18B21EB3523D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
CodeIntegrity:
===================================
Date: 2019-11-21 18:54:55.879
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.872
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.857
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.851
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.676
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.668
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.651
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.644
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: Hewlett-Packard F.1B 10/05/2011
Motherboard: Hewlett-Packard 1656
Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 35%
Total physical RAM: 8139.86 MB
Available physical RAM: 5275.72 MB
Total Virtual: 9419.86 MB
Available Virtual: 6725.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.22 GB) (Free:110 GB) NTFS
\\?\Volume{191739fe-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.54 GB) (Free:0.14 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 191739FE)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-12-2019
Ran by HP (administrator) on OMAR (Hewlett-Packard HP Pavilion dv6 Notebook PC) (29-12-2019 20:25:52)
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available Profiles: HP)
Platform: Windows 10 Home Version 1809 17763.914 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Andrea Electronics Corporation) [File not signed] C:\Program Files\IDT\WDM\AESTSr64.exe
(Dassault Systemes) [File not signed] C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\sttray64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19101.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(uTorrent.CZ -> BitTorrent, Inc.) [File not signed] C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-16] (IDT, Inc.) [File not signed]
HKLM\...\Run: [MMReminderService] => C:\Program Files\Mindjet\MindManager 17\MMReminderService.exe [124616 2016-11-30] (Corel Corporation -> Mindjet)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\ecmdS.exe [183088 2019-12-19] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44016 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Run: [uTorrent] => C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe [414656 2018-10-25] (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-19] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{90EF4A5E-85DB-4825-96F5-1AB93C2A8EEB}] -> C:\Program Files\Mindjet\MindManager 17\sys\MmInternetExplorerActiveSetup.vbs
BootExecute: autocheck autochk *
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {41BDC851-7201-4E82-9F29-E0DE006FB542} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {467F0685-829A-45A8-8CAF-ECDF56A7E87A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C8E5F04-5511-46FC-B6F4-370DFF46470B} - System32\Tasks\Minitab\Minitab Software Update Manager => C:\Program Files (x86)\Common Files\Minitab Shared\Software Manager\SoftwareManager.exe [430984 2010-03-25] (Minitab, Inc. -> Minitab)
Task: {5291B013-58A4-4AE5-AF48-C66D7DEA02F0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B6032BF-A587-460D-AAEF-CBD073D9D9C5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24667928 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {6313A704-AF50-4537-BD30-439CC29B5619} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2058560 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {67B43A3C-9068-42FD-8677-AD79170C9A27} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {86B14A71-7A97-413E-82B5-B3228C711A4E} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [136688 2019-10-28] (Glarysoft LTD -> Glarysoft Ltd)
Task: {A92524F8-0508-4CFC-9A76-1DB2E69AB340} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0F0567A-EF61-4B33-B19C-C6E5385A1F45} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16467424 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CF338B1B-2211-4849-AAF6-91832FDBEB9A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {E9FC4462-7404-4C33-9F0B-7E0287B842D2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158552 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F21D0E2B-E0DE-4CAF-8DB6-E23C748AA1E7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6109080 2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{148bb867-3ddc-4ade-af32-1479bd21fa9b}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d3fe3cec-24de-40e8-b104-26ad4bd0ecad}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {04F8E5EE-DB4A-498C-A718-546FDA7B91A1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {0D04E46E-9F9A-4DEC-B2EB-2402EB567F22} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {104288F0-5BED-4695-AFF4-B97DDEA35E71} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {14FB0ECB-585A-4DEE-979B-2D5B38568787} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {41D5C8BB-6F41-4718-BFB4-D23FC352FC71} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {770746A7-C47B-4222-AF5C-C12E43533D41} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {AFF94F12-9074-4C26-B9E5-9B4B51CCF283} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {E37BFB27-554B-4815-86A0-3698AF89CA4C} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_40139
SearchScopes: HKU\S-1-5-21-559692135-8497052-1209249446-1001 -> {EE92CE6F-C278-4F7E-88EC-7C1642B87008} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_40139
BHO: CmjBrowserHelperObject Object -> {6FE6A929-59D1-4763-91AD-29B61CFFB35B} -> C:\Program Files\Mindjet\MindManager 17\Mm8InternetExplorer.dll [2016-11-30] (Corel Corporation -> Mindjet)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: k4h86qir.default
FF ProfilePath: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default [2019-12-29]
FF Homepage: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxps://www.google.com/
FF Extension: (Seznam doplněk - Esko) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\sko-extension@firma.seznam.cz [2019-02-27]
FF Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\k4h86qir.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2019-02-27]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-12-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-19] (Google LLC -> Google LLC)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2019-12-29]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/","hxxp://www.seznam.cz/"
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default [2019-12-29]
CHR Extension: (Seznam doplněk - Email) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2019-12-29]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-10-31]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Chrome Media Router) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-29]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-12-29]
CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\System Profile [2019-12-29]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-559692135-8497052-1209249446-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1233272 2019-05-14] (Autodesk, Inc. -> Autodesk Inc.)
R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [File not signed]
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 BBDemon; C:\Program Files (x86)\Dassault Systemes\B20\intel_a\code\bin\CATSysDemon.exe [36864 2010-01-09] (Dassault Systemes) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11199776 2019-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2245488 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 hpqwmiex; C:\Users\HP\AppData\Roaming\Hewlett-Packard\hpqwmiex.exe [794112 2019-02-07] (Hewlett-Packard Company) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2425136 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3303736 2019-11-12] (Electronic Arts, Inc. -> Electronic Arts)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [279248 2019-02-28] (Synaptics Incorporated -> Synaptics Incorporated)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-30] (Microsoft Windows Hardware Compatibility Publisher -> Validity Sensors, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-25] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [43840 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149944 2019-11-30] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [103264 2019-11-30] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-06-07] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [189512 2019-11-30] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50712 2019-11-30] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79744 2019-12-19] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116696 2019-12-19] (ESET, spol. s r.o. -> ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [181160 2019-03-10] (ESET, spol. s r.o. -> ESET)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [28936 2019-03-03] (Glarysoft LTD -> Glarysoft Ltd)
R0 hpdskflt; C:\Windows\System32\DRIVERS\hpdskflt.sys [31040 2012-09-24] (Hewlett-Packard Company -> Hewlett-Packard Company)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-02-28] (Martin Malik - REALiX -> REALiX(tm))
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
R3 ROCKEYNT; C:\Windows\system32\DRIVERS\Rockey4.sys [36904 2019-04-07] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1158944 2019-09-08] (Realtek Semiconductor Corp. -> Realtek )
S3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [52904 2016-04-28] (Synaptics Incorporated -> Synaptics Incorporated)
R3 STHDA; C:\Windows\system32\DRIVERS\stwrt64.sys [551936 2013-08-16] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-02-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [333792 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-25] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 20:14 - 2019-12-29 20:14 - 000000000 ____D C:\Users\HP\Documents\Barča
2019-12-29 20:13 - 2019-12-29 20:13 - 000014546 _____ C:\Users\HP\Downloads\[CzT]Laska_nebeska_Love_Actually_2003_720p_.torrent
2019-12-29 20:12 - 2019-12-29 20:15 - 000005027 _____ C:\Users\HP\Desktop\Fixlog.txt
2019-12-29 18:00 - 2019-12-29 18:02 - 000046308 _____ C:\Users\HP\Desktop\Addition.txt
2019-12-29 17:06 - 2019-12-29 17:08 - 000000000 ____D C:\AdwCleaner
2019-12-29 17:06 - 2019-12-29 17:06 - 008237744 _____ (Malwarebytes) C:\Users\HP\Downloads\adwcleaner_8.0.1.exe
2019-12-29 16:55 - 2019-12-29 18:13 - 000001265 _____ C:\Users\HP\Desktop\CrystalDiskInfo.lnk
2019-12-29 16:55 - 2019-12-29 16:56 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-12-29 16:55 - 2019-12-29 16:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2019-12-29 16:54 - 2019-12-29 16:55 - 003956368 _____ (Crystal Dew World ) C:\Users\HP\Downloads\CrystalDiskInfo7_0_4-en.exe
2019-12-29 16:07 - 2019-12-29 20:28 - 000023127 _____ C:\Users\HP\Desktop\FRST.txt
2019-12-29 16:06 - 2019-12-29 20:27 - 000000000 ____D C:\FRST
2019-12-29 16:05 - 2019-12-29 16:05 - 002272256 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe
2019-12-29 15:46 - 2019-12-29 15:46 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 020816384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-12-29 15:46 - 2019-12-29 15:46 - 001201128 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 009668408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 007886848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 007645384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006541712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 006444032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 003638272 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 003576832 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 003387392 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002707968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-12-29 15:45 - 2019-12-29 15:45 - 002699768 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002233688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002192384 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 002072384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001702392 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-12-29 15:45 - 2019-12-29 15:45 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001677808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001676288 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001668960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001666440 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001656192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001473088 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001465264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 001258296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 001049400 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000981504 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000901120 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000793824 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000764928 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000758688 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000678672 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000603792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000575488 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000508928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000505632 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000430592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-12-29 15:45 - 2019-12-29 15:45 - 000408736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000312832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000203064 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\DevQueryBroker.dll
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-12-29 15:45 - 2019-12-29 15:45 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-12-29 20:29 - 2019-02-24 20:18 - 000000000 ____D C:\Users\HP\AppData\Roaming\uTorrent
2019-12-29 20:25 - 2019-03-03 20:16 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2019-12-29 20:25 - 2019-01-28 12:13 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2019-12-29 20:25 - 2018-09-15 18:32 - 000718198 _____ C:\Windows\system32\perfh005.dat
2019-12-29 20:25 - 2018-09-15 18:32 - 000145242 _____ C:\Windows\system32\perfc005.dat
2019-12-29 20:25 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-12-29 20:21 - 2019-01-28 11:59 - 000308368 _____ C:\Windows\system32\FNTCACHE.DAT
2019-12-29 20:21 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-12-29 20:20 - 2019-01-28 12:00 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-12-29 20:19 - 2018-09-15 07:09 - 000786432 _____ C:\Windows\system32\config\BBI
2019-12-29 20:15 - 2019-06-04 18:44 - 000000000 ____D C:\Users\HP\AppData\LocalLow\Temp
2019-12-29 20:07 - 2019-01-28 11:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-12-29 18:40 - 2019-06-17 16:26 - 000000000 ____D C:\Program Files\Autodesk
2019-12-29 18:40 - 2019-06-17 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2019-12-29 18:40 - 2019-06-17 16:21 - 000000000 ____D C:\ProgramData\Autodesk
2019-12-29 18:33 - 2019-06-17 16:26 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2019-12-29 18:29 - 2019-06-17 16:31 - 000000000 ____D C:\Users\Public\Documents\Autodesk
2019-12-29 18:29 - 2019-06-17 16:30 - 000000000 ____D C:\Users\HP\AppData\Roaming\Autodesk
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-12-29 17:29 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-12-29 17:15 - 2019-02-07 15:49 - 000000000 ____D C:\Users\HP\AppData\Local\CrashDumps
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\IObit
2019-12-29 17:08 - 2019-02-28 18:16 - 000000000 ____D C:\ProgramData\IObit
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\ShellExperiences
2019-12-29 17:08 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-12-29 16:01 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-12-29 15:59 - 2019-03-07 17:30 - 000000000 ____D C:\Program Files\Microsoft Office
2019-12-29 15:57 - 2019-01-28 12:28 - 000000000 ____D C:\Windows\system32\MRT
2019-12-29 15:52 - 2019-01-28 12:28 - 129221664 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-12-29 15:51 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-12-19 17:51 - 2019-02-07 15:27 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-12-19 17:51 - 2019-02-07 15:27 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-12-19 17:42 - 2019-11-10 10:16 - 000000000 ____D C:\ProgramData\Origin
2019-12-19 17:41 - 2016-08-08 10:19 - 000116696 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2019-12-19 17:41 - 2016-08-08 10:19 - 000079744 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2019-12-19 17:40 - 2019-11-10 10:16 - 000000000 ____D C:\Users\HP\AppData\Roaming\Origin
2019-12-10 08:58 - 2019-02-07 15:25 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-12-10 07:13 - 2019-01-28 12:15 - 000003344 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-559692135-8497052-1209249446-1001
2019-12-10 07:11 - 2019-07-01 18:15 - 000002382 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-12-10 07:11 - 2019-01-28 12:15 - 000000000 ___RD C:\Users\HP\OneDrive
2019-12-10 06:55 - 2019-11-10 10:20 - 000000000 ____D C:\Program Files (x86)\Origin Games
2019-11-30 20:28 - 2019-01-28 12:12 - 000000000 ____D C:\Users\HP
2019-11-30 20:26 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-11-30 20:25 - 2016-08-08 10:19 - 000189512 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000149944 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000103264 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2019-11-30 20:25 - 2016-08-08 10:19 - 000050712 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-12-2019
Ran by HP (29-12-2019 20:29:40)
Running from C:\Users\HP\Desktop
Windows 10 Home Version 1809 17763.914 (X64) (2019-01-28 11:08:38)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-559692135-8497052-1209249446-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-559692135-8497052-1209249446-503 - Limited - Disabled)
Guest (S-1-5-21-559692135-8497052-1209249446-501 - Limited - Disabled)
HP (S-1-5-21-559692135-8497052-1209249446-1001 - Administrator - Enabled) => C:\Users\HP
WDAGUtilityAccount (S-1-5-21-559692135-8497052-1209249446-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: ESET Security (Enabled - Up to date) {333C65BB-8923-0EAA-C47E-C486E687BEFD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AIDA64 Extreme v5.99 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.99 - FinalWire Ltd.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Bootstrapper (HKLM-x32\...\{EFDD0584-E443-4CA8-8B79-E5BE7B22651D}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.54 - Piriform)
CrystalDiskInfo 7.0.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.4 - Crystal Dew World)
Dassault Systemes Software B20 (HKLM\...\Dassault Systemes B20_0) (Version: - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
ESET Security (HKLM\...\{C26AA376-9D1B-4B7B-A1F0-DC41E8530176}) (Version: 13.0.24.0 - ESET, spol. s r.o.)
FARO LS 1.1.700.0 (64bit) (HKLM-x32\...\{FF6E9382-0B85-48DE-888F-76EFD9A87038}) (Version: 7.0.0.23 - FARO Scanner Production)
Glary Utilities PRO 5.130 (HKLM-x32\...\Glary Utilities 5) (Version: 5.130.0.156 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
HP 3D DriveGuard (HKLM\...\{04927A60-31CD-4614-A25C-055B1AD3A8CE}) (Version: 4.2.9.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6491.0 - IDT)
IObit Driver Booster (HKLM-x32\...\{2E29F3D8-99B4-4B2F-A93F-827DFFF26970}) (Version: 1.0.0 - IObit)
Kolekce The Sims™ 3 Moje městečko (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
Kolekce The Sims™ 3 Styl 70., 80. a 90. let (HKLM-x32\...\{E1868CAE-E3B9-4099-8C18-AA8944D336FD}) (Version: 17.0.77 - Electronic Arts)
Kolekce The Sims™ 3 Zahradní mejdan (HKLM-x32\...\{117B6BF6-82C3-420C-B284-9247C8568E53}) (Version: 7.0.55 - Electronic Arts)
Kolekce The Sims™ 3 Na plný plyn (HKLM-x32\...\{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}) (Version: 5.0.44 - Electronic Arts)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\Proplus2019Retail - cs-cz) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - cs-cz.proof (HKLM\...\Proplus2019Retail - cs-cz.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us (HKLM\...\Proplus2019Retail - en-us) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - en-us.proof (HKLM\...\Proplus2019Retail - en-us.proof) (Version: 16.0.12410.20000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27027 (HKLM-x32\...\{39e28474-b67b-4209-af1b-e9ad0a83d8ca}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mindjet MindManager 2017 (HKLM\...\{BF3C3096-DD7F-49FE-896E-7D3E7DB91C91}) (Version: 17.1.167 - Mindjet)
Minitab 16 (HKLM-x32\...\Minitab16) (Version: 16.1.0 - Minitab, Inc.)
Minitab Software Update Manager (HKLM-x32\...\MinitabSoftwareManager) (Version: 1.0.0.0 - Minitab, Inc.)
Minitab16 (HKLM-x32\...\{3686ED2F-634B-45EE-84BB-18D17119A582}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Minitab16 (HKLM-x32\...\{63FD90F3-58B5-4A25-9C47-428576D994D0}) (Version: 16.1.0.0 - Minitab, Inc.) Hidden
Minitab16 (HKLM-x32\...\{B565A187-9E9C-42B6-A051-99223EB7E05B}) (Version: 16.1.0.0 - Minitab Inc) Hidden
Mozilla Firefox 65.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 65.0.2 (x64 en-US)) (Version: 65.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.12410.20000 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.55.33574 - Electronic Arts, Inc.)
Počítačová aplikace Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.16.29 - Autodesk)
SoftwareManager (HKLM-x32\...\{1C92C419-4DAA-4B9B-B04F-C2E3CDEDCAF9}) (Version: 1.0.0.0 - Minitab, Inc.) Hidden
Speciální aplikace Autodesk 2016-2019 (HKLM-x32\...\{79F5747D-A961-4CCD-88B0-41F004D79AEB}) (Version: 2.5.0 - Autodesk)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
The Sims™ 3 Cestovní horečka (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
The Sims™ 3 Diesel Kolekce (HKLM-x32\...\{1C9B6173-6DC9-4EEE-9EFC-6BA115CFBE43}) (Version: 14.0.48 - Electronic Arts)
The Sims™ 3 Do Budoucnosti (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)
The Sims™ 3 Domácí mazlíčci (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
The Sims™ 3 Filmové rekvizity (HKLM-x32\...\{D0087539-3C57-44E0-BEE7-D779D546CBE1}) (Version: 20.0.53 - Electronic Arts)
The Sims™ 3 Hrátky osudu (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
The Sims™ 3 Luxusní bydlení – Kolekce (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 High-End Loft Stuff) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Obludárium (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
The Sims™ 3 Povolání snů (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
The Sims™ 3 Přepychové ložnice Kolekce (HKLM-x32\...\{08A25478-C5DD-4EA7-B168-3D687CA987FF}) (Version: 11.0.84 - Electronic Arts)
The Sims™ 3 Roční období (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
The Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
The Sims™ 3 Sladké radosti Katy Perry (HKLM-x32\...\{9B2506E3-9A3F-45B5-96BF-509CAD584650}) (Version: 13.0.62 - Electronic Arts)
The Sims™ 3 Studentský život (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
The Sims™ 3 Tropický ráj (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
The Sims™ 3 Po setmění (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Late Night) (Version: 1.0.0.0 - Electronic Arts Inc.)
VBA (3821b) (HKLM-x32\...\{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
ZWCAD Mechanical 2015 (HKLM-x32\...\{8D36B335-F5B1-437E-BA2B-E4544BF9772E}) (Version: 1.0.0 - ZWSoft)
ZWCAD Mechanical 2015 Resource Package (HKLM-x32\...\{FB8DB18F-1843-4918-B3E3-F10D7E27059C}) (Version: 1.0.0 - ZWsoft)
ZWCAD+ 2014 (HKLM-x32\...\{9ACA2843-A001-0000-A001-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
ZWCAD+ 2014 Czech (HKLM-x32\...\{EC7D6813-6893-409A-AB22-94E24369F5E6}) (Version: 14.0.3.1237 - ZWSOFT)
ZWCAD+ 2014 Language Pack - Czech (HKLM-x32\...\{9ACA2843-A001-1029-A101-71159ABDD80F}) (Version: 14.0.3.1237 - ZWSOFT) Hidden
Packages:
=========
8 Zip Lite - unpack RAR, ZIP, 7z for free -> C:\Program Files\WindowsApps\BooStudioLLC.8ZipLite_1.2.150.0_x64__b6e429xa66pga [2019-02-26] (Finebits OÜ) [MS Ad]
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa [2019-12-29] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-28] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_2.2.16.0_x64__nfy108tqq3p12 [2019-11-02] (Thumbmunkeys Ltd) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe => No File
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
CustomCLSID: HKU\S-1-5-21-559692135-8497052-1209249446-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2019\cs-CZ\acadficn.dll => No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2019-12-19] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2019-03-11] (Glarysoft LTD -> Glarysoft Ltd)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Loaded Modules (Whitelisted) =============
2019-12-19 17:45 - 2019-11-17 23:07 - 000281600 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVFILESYSTEMMETADATA.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000400896 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvApi.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 001124864 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvSubsystemController.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000519680 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvVirtualization.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000836608 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVOrchestration.dll
2019-12-19 17:45 - 2019-11-17 23:07 - 000585008 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVCatalog.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001642800 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIntegration.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 000177968 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvStreamingManager.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001010992 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVMANIFEST.dll
2019-12-19 17:45 - 2019-11-17 23:08 - 001091888 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVPOLICY.dll
2019-11-12 19:58 - 2019-11-10 10:18 - 001277440 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\LIBEAY32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Origin\ssleay32.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001611264 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005487104 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Core.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005841920 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Gui.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 001179136 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Network.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 005089792 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2019-11-14 13:18 - 2019-11-10 10:18 - 000184832 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-559692135-8497052-1209249446-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "MMReminderService"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\StartupApproved\Run: => "GUDelayStartup"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{C877A85E-B2FD-4176-8133-20D7347A3E8F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E62881B7-9E27-4E54-8ABB-257B4241DC6F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BB3007E1-07BC-46D2-9156-6C855513F2FB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B98FB333-8349-4E4D-9130-7F409280F497}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [TCP Query User{24991BA5-EF5A-4200-AA63-2B6A5C58D8C5}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{0848160E-493B-408A-8A4E-F1EDEEC5AAF9}C:\users\hp\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\hp\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{049C5CD7-3D83-440F-A847-B84BC8FD1F5C}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{37DB4E6B-5BE9-42C2-825F-4A5811804B37}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{49B4B3A7-6829-45B3-9539-A0337CB045FD}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B3D430E7-97B7-4D5A-A03E-A9EA2FFF7F89}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{081425AF-7D92-4165-83BB-4514B723AF0D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{F10712AC-BF24-4881-A182-0EF3F2930022}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{0E4522AB-81B4-4E9F-A00D-CB9E5230F4EF}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{E1AF51E2-4F6D-47FC-B258-907DCD4138B2}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{11D8539E-C435-41AA-911A-D551B09476A6}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{A5EAF838-D4FD-48D3-8E87-4EA7BF1923E4}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{476B2A7E-27AC-4601-A930-33E413BD094D}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{C3CC689F-0A5D-4254-B07E-34A68378A53B}] => (Allow) C:\Program Files (x86)\ZWCAD+ 2014\ZwSyble.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{279382BD-7115-4822-8F97-32A470A99185}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{2842FC69-2B57-4A64-B22E-466910925B89}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWCAD.EXE (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.) [File not signed]
FirewallRules: [{BF274251-D301-4F98-9E3F-88C06283CC93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{9597FF2B-BB34-46CD-A2AB-CAC510B2C341}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwCrashReportManagement.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{29E97D38-1618-4153-8C12-F0C40EA18977}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{B38CD689-F832-4BA8-A8F2-99ED5C966F4B}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZWErrorDialog.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{5538E21E-7E8D-4AF0-9B3D-D7F187254B35}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{4357DF77-9FB1-46B2-90C0-E2DC41072A93}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwAuthHost.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D09CAA84-5CEF-4881-A2DA-A29E7EACF548}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{D75AD38C-F7E0-4B32-83B9-171A5060CB91}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwUpdHost.exe (ZWCAD Software Co.,LTD -> ZWCAD DESIGN CO., LTD.)
FirewallRules: [{54325E48-B8B0-4A24-AE28-3A15144D0354}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [{D0DC8E9A-9ECE-40B8-A8FF-9F620A9B3119}] => (Allow) C:\Program Files (x86)\ZWCAD MECHANICAL 2015 ENU\ZwSyble.exe (ZWCAD Software Co.,LTD -> )
FirewallRules: [TCP Query User{B475CECD-9273-44EC-BB31-0DA14A1826AF}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [UDP Query User{29953AB9-EE19-4F28-B615-ECD2C81BE1F4}C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b20\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [{89007969-568E-4171-8230-B3B530B3A6D3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C8048005-DD76-4E43-9ED4-CC1CC8203C7C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{51AC7886-3A4A-4D39-8961-462811FD8B73}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AFE33915-9721-49D0-A5A0-632D6EE5E905}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{06745F54-5BEA-4F64-A0AA-F166B4D3F13A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F952119-76B5-4FD6-A9B0-1BBEEACC66EB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F6FE490C-FCCD-49D5-8C1A-00BB1ACB7518}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3EC5AB58-1B44-41FB-8BD3-1A078B3F6903}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C9CDD50D-E8A2-4DEC-83AE-503DA3B644C7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{93BC58B3-E333-49A5-AB11-C48761F469BD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12103.1.43048.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
==================== Restore Points =========================
02-12-2019 15:31:31 Naplánovaný kontrolní bod
19-12-2019 18:07:53 Windows Update
29-12-2019 15:49:26 Windows Update
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (12/29/2019 05:15:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0xef4
Čas spuštění chybující aplikace: 0x01d5be62e444665f
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: a1ab6346-b08c-48be-9075-911f19e81fe1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 04:32:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2a40
Čas spuštění chybující aplikace: 0x01d5a9ee281b1471
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: c91aa8e8-9c06-48d5-bf1b-e5cf007ff503
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:03:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Integrator.exe, verze: 5.130.0.156, časové razítko: 0x5db258a8
Název chybujícího modulu: MSVCR90.dll, verze: 9.0.30729.9518, časové razítko: 0x5b690a0f
Kód výjimky: 0xc0000417
Posun chyby: 0x0003523b
ID chybujícího procesu: 0x2950
Čas spuštění chybující aplikace: 0x01d5a99f61ddc110
Cesta k chybující aplikaci: C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
Cesta k chybujícímu modulu: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9518_none_508db366bcbd18c4\MSVCR90.dll
ID zprávy: 7af37492-537d-4202-b2ce-1add21177dc1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/03/2019 07:02:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2be0
Čas spuštění chybující aplikace: 0x01d5a99ef5af0f12
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 127a6d05-f915-4dfc-9511-fb3a40c033d3
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (12/02/2019 11:58:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x1b18
Čas spuštění chybující aplikace: 0x01d5a8ff4bf58557
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 74428661-8075-4803-a7a9-8761b67113ae
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/30/2019 08:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x14ec
Čas spuštění chybující aplikace: 0x01d5a7b85d29d891
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 86f51449-85d0-474b-a6ed-9318d8521856
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/25/2019 03:51:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x49c
Čas spuštění chybující aplikace: 0x01d5a39efbd2f693
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 1c44fa2b-3052-4191-84f3-d1209ef84614
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (11/19/2019 07:16:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.17763.592, časové razítko: 0xabe94558
Kód výjimky: 0xc000041d
Posun chyby: 0x00005fc7
ID chybujícího procesu: 0x2f6c
Čas spuštění chybující aplikace: 0x01d59ea02345b4c6
Cesta k chybující aplikaci: C:\Users\HP\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: 7d00f725-7ccc-4ebb-9d0f-b828bb596712
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (12/29/2019 08:23:08 PM) (Source: DCOM) (EventID: 10016) (User: OMAR)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli OMAR\HP (SID: S-1-5-21-559692135-8497052-1209249446-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (12/29/2019 08:22:50 PM) (Source: DCOM) (EventID: 10001) (User: OMAR)
Description: Nelze spustit server DCOM: microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
0
při provádění příkazu:
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12228.20356.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server
Error: (12/29/2019 08:13:10 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
Instance této služby je již spuštěna.
Error: (12/29/2019 08:12:47 PM) (Source: DCOM) (EventID: 10016) (User: OMAR)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli OMAR\HP (SID: S-1-5-21-559692135-8497052-1209249446-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Microsoft Office Click-to-Run Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Origin Web Helper Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (12/29/2019 08:12:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Validity WBF Policy Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Windows Defender:
===================================
Date: 2019-02-07 15:07:23.809
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {451271AA-3DEC-4B12-AC8C-DD97527C5B89}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-02-05 17:39:11.374
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {8978230C-122E-469C-8518-18B21EB3523D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
CodeIntegrity:
===================================
Date: 2019-11-21 18:54:55.879
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.872
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.857
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 18:54:55.851
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.676
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.668
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.651
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-11-21 17:54:50.644
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: Hewlett-Packard F.1B 10/05/2011
Motherboard: Hewlett-Packard 1656
Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 35%
Total physical RAM: 8139.86 MB
Available physical RAM: 5275.72 MB
Total Virtual: 9419.86 MB
Available Virtual: 6725.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.22 GB) (Free:110 GB) NTFS
\\?\Volume{191739fe-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.54 GB) (Free:0.14 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 191739FE)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Re: Kompletně zpomalený notebook
Tak kecám, LOG byl na ploše, jen jsem ho přehlédl.
Fix result of Farbar Recovery Scan Tool (x64) Version: 28-12-2019
Ran by HP (29-12-2019 20:12:39) Run:1
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available Profiles: HP)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Policies\Explorer: []
Task: {1A4E3749-F1CB-4AFA-8931-8DCB05940086} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {3628A419-FEF1-49CF-9512-E223D33D5BA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
FF NewTab: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxp://securedsearch.lavasoft.com/?pr=v ... 40__190224
CHR Notifications: Default -> hxxps://hackercombat.com
C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1A4E3749-F1CB-4AFA-8931-8DCB05940086}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A4E3749-F1CB-4AFA-8931-8DCB05940086}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3628A419-FEF1-49CF-9512-E223D33D5BA4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3628A419-FEF1-49CF-9512-E223D33D5BA4}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"Firefox newtab" => removed successfully
"Chrome Notifications" => removed successfully
"C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 97524939 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 6578505 B
Edge => 573621 B
Chrome => 313988703 B
Firefox => 14431444 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 15336 B
NetworkService => 15336 B
HP => 67949624 B
RecycleBin => 88982 B
EmptyTemp: => 485.5 MB temporary data Removed.
================================
The system needed a reboot.
==== End 1 Fixlog 20:15:25 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 28-12-2019
Ran by HP (29-12-2019 20:12:39) Run:1
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available Profiles: HP)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-559692135-8497052-1209249446-1001\...\Policies\Explorer: []
Task: {1A4E3749-F1CB-4AFA-8931-8DCB05940086} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
Task: {3628A419-FEF1-49CF-9512-E223D33D5BA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-02-07] (Google Inc -> Google Inc.)
FF NewTab: Mozilla\Firefox\Profiles\k4h86qir.default -> hxxp://securedsearch.lavasoft.com/?pr=v ... 40__190224
CHR Notifications: Default -> hxxps://hackercombat.com
C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKU\S-1-5-21-559692135-8497052-1209249446-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1A4E3749-F1CB-4AFA-8931-8DCB05940086}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A4E3749-F1CB-4AFA-8931-8DCB05940086}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3628A419-FEF1-49CF-9512-E223D33D5BA4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3628A419-FEF1-49CF-9512-E223D33D5BA4}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"Firefox newtab" => removed successfully
"Chrome Notifications" => removed successfully
"C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 97524939 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 6578505 B
Edge => 573621 B
Chrome => 313988703 B
Firefox => 14431444 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 15336 B
NetworkService => 15336 B
HP => 67949624 B
RecycleBin => 88982 B
EmptyTemp: => 485.5 MB temporary data Removed.
================================
The system needed a reboot.
==== End 1 Fixlog 20:15:25 ====
-
Rudy
- Site Admin
- Příspěvky: 118251
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kompletně zpomalený notebook
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kompletně zpomalený notebook
PC lépe reaguje, ale start je stále pomalý. Než najede antivir, tak neotevřu ani složku.
Možná to tak má být, notebook není nejnovější a bůh ví, jak je na tom disk.
Možná to tak má být, notebook není nejnovější a bůh ví, jak je na tom disk.
-
Rudy
- Site Admin
- Příspěvky: 118251
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kompletně zpomalený notebook
Disk můžeme zkontrolovat. Stáhněte, nainstalujte a spusťte CrystalDiskInfo: https://www.instaluj.cz/crystaldiskinfo a přes Úpravy>lopírovat sem dejte log.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kompletně zpomalený notebook
----------------------------------------------------------------------------
CrystalDiskInfo 7.0.4 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 10 [10.0 Build 17763] (x64)
Date : 2019/12/29 23:31:42
-- Controller Map ----------------------------------------------------------
+ Intel(R) 6 Series/C200 Series Chipset Family 6 Port SATA AHCI Controller - 1C03 [ATA]
- TOSHIBA MK5061GSYN
- hp DVDRAM GT50N
- Řadič prostorů úložišť [SCSI]
-- Disk List ---------------------------------------------------------------
(1) TOSHIBA MK5061GSYN : 500,1 GB [0/0/0, pd1]
----------------------------------------------------------------------------
(1) TOSHIBA MK5061GSYN
----------------------------------------------------------------------------
Model : TOSHIBA MK5061GSYN
Firmware : MH000C
Serial Number : 517EF4BCS
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/300
Power On Hours : 21994 hod.
Power On Count : 2815 krát
Temperature : 39 C (102 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : ----
Drive Letter : C:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 000000000000 Počet chyb čtení
02 100 100 _50 000000000000 Průchodnost disku
03 100 100 __2 000000000919 Čas na roztočení ploten
04 100 100 __0 0000000010C8 Počet spuštění/zastavení
05 100 100 _10 000000000000 Počet přemapovaných sektorů
07 100 100 _50 000000000000 Počet chybných hledání
08 100 100 _50 000000000000 Čas potřebný na vyhledání
09 _46 _46 __0 0000000055EA Hodin v činnosti
0A 185 100 _30 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 __0 000000000AFF Počet cyklů zapnutí zařízení
B7 100 100 __1 000000000000 Specifický pro výrobce
B8 100 100 _97 000000000000 Ukončovacích chyb
B9 100 100 __1 00000000FFFF Specifický pro výrobce
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _99 __0 0000000001F5 Časový limit příkazu
BD 100 100 __1 000000000000 Vysoká rychlost zápisu
BE _61 _48 _40 00002B1B0027 Teplota toku vzduchu
BF 100 100 __0 00000000000E Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000090009 Počet vypnutí disku
C1 _46 _46 __0 00000008515C Počet cyklů načítání/vymazání
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2035 3137 4546 3442 4353
020: 0000 8000 0004 4D48 3030 3043 2020 544F 5348 4942
030: 4120 4D4B 3530 3631 4753 594E 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0007 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0D06 0004 004C 0040
080: 01F8 0000 706B 7C09 6123 7069 BC09 6123 203F 0035
090: 0035 0080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 4000 0000 5000 0393
110: 46E0 22B3 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 1DA5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 64 00 00 00 00 00 00 00 02 27
010: 00 64 64 00 00 00 00 00 00 00 03 23 00 64 64 19
020: 09 00 00 00 00 00 04 32 00 64 64 C8 10 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 2F
040: 00 64 64 00 00 00 00 00 00 00 08 25 00 64 64 00
050: 00 00 00 00 00 00 09 32 00 2E 2E EA 55 00 00 00
060: 00 00 0A 33 00 B9 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 FF 0A 00 00 00 00 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 B9 32 00 64 64 FF FF 00 00 00 00 00 BB 32
0A0: 00 64 64 00 00 00 00 00 00 00 BC 32 00 64 63 F5
0B0: 01 00 00 00 00 00 BD 3A 00 64 64 00 00 00 00 00
0C0: 00 00 BE 22 00 3D 30 27 00 1B 2B 00 00 00 BF 32
0D0: 00 64 64 0E 00 00 00 00 00 00 C0 22 00 64 64 09
0E0: 00 09 00 00 00 00 C1 32 00 2E 2E 5C 51 08 00 00
0F0: 00 00 C4 32 00 64 64 00 00 00 00 00 00 00 C5 32
100: 00 64 64 00 00 00 00 00 00 00 C7 32 00 C8 C8 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 51
170: 03 00 01 00 02 6B 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3A
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 02 32
010: 00 00 00 00 00 00 00 00 00 00 03 02 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 0A 00 00 00 00 00 00 00 00 00 00 07 32
040: 00 00 00 00 00 00 00 00 00 00 08 32 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 1E 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B7 01 00 00 00 00
080: 00 00 00 00 00 00 B8 61 00 00 00 00 00 00 00 00
090: 00 00 B9 01 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
0B0: 00 00 00 00 00 00 BD 01 00 00 00 00 00 00 00 00
0C0: 00 00 BE 28 00 00 00 00 00 00 00 00 00 00 BF 00
0D0: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
0E0: 00 00 00 00 00 00 C1 00 00 00 00 00 00 00 00 00
0F0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
100: 00 00 00 00 00 00 00 00 00 00 C7 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8B
CrystalDiskInfo 7.0.4 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 10 [10.0 Build 17763] (x64)
Date : 2019/12/29 23:31:42
-- Controller Map ----------------------------------------------------------
+ Intel(R) 6 Series/C200 Series Chipset Family 6 Port SATA AHCI Controller - 1C03 [ATA]
- TOSHIBA MK5061GSYN
- hp DVDRAM GT50N
- Řadič prostorů úložišť [SCSI]
-- Disk List ---------------------------------------------------------------
(1) TOSHIBA MK5061GSYN : 500,1 GB [0/0/0, pd1]
----------------------------------------------------------------------------
(1) TOSHIBA MK5061GSYN
----------------------------------------------------------------------------
Model : TOSHIBA MK5061GSYN
Firmware : MH000C
Serial Number : 517EF4BCS
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/300
Power On Hours : 21994 hod.
Power On Count : 2815 krát
Temperature : 39 C (102 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : ----
Drive Letter : C:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 000000000000 Počet chyb čtení
02 100 100 _50 000000000000 Průchodnost disku
03 100 100 __2 000000000919 Čas na roztočení ploten
04 100 100 __0 0000000010C8 Počet spuštění/zastavení
05 100 100 _10 000000000000 Počet přemapovaných sektorů
07 100 100 _50 000000000000 Počet chybných hledání
08 100 100 _50 000000000000 Čas potřebný na vyhledání
09 _46 _46 __0 0000000055EA Hodin v činnosti
0A 185 100 _30 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 __0 000000000AFF Počet cyklů zapnutí zařízení
B7 100 100 __1 000000000000 Specifický pro výrobce
B8 100 100 _97 000000000000 Ukončovacích chyb
B9 100 100 __1 00000000FFFF Specifický pro výrobce
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _99 __0 0000000001F5 Časový limit příkazu
BD 100 100 __1 000000000000 Vysoká rychlost zápisu
BE _61 _48 _40 00002B1B0027 Teplota toku vzduchu
BF 100 100 __0 00000000000E Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000090009 Počet vypnutí disku
C1 _46 _46 __0 00000008515C Počet cyklů načítání/vymazání
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2035 3137 4546 3442 4353
020: 0000 8000 0004 4D48 3030 3043 2020 544F 5348 4942
030: 4120 4D4B 3530 3631 4753 594E 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0007 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0D06 0004 004C 0040
080: 01F8 0000 706B 7C09 6123 7069 BC09 6123 203F 0035
090: 0035 0080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 4000 0000 5000 0393
110: 46E0 22B3 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 1DA5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 64 00 00 00 00 00 00 00 02 27
010: 00 64 64 00 00 00 00 00 00 00 03 23 00 64 64 19
020: 09 00 00 00 00 00 04 32 00 64 64 C8 10 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 2F
040: 00 64 64 00 00 00 00 00 00 00 08 25 00 64 64 00
050: 00 00 00 00 00 00 09 32 00 2E 2E EA 55 00 00 00
060: 00 00 0A 33 00 B9 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 FF 0A 00 00 00 00 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 B9 32 00 64 64 FF FF 00 00 00 00 00 BB 32
0A0: 00 64 64 00 00 00 00 00 00 00 BC 32 00 64 63 F5
0B0: 01 00 00 00 00 00 BD 3A 00 64 64 00 00 00 00 00
0C0: 00 00 BE 22 00 3D 30 27 00 1B 2B 00 00 00 BF 32
0D0: 00 64 64 0E 00 00 00 00 00 00 C0 22 00 64 64 09
0E0: 00 09 00 00 00 00 C1 32 00 2E 2E 5C 51 08 00 00
0F0: 00 00 C4 32 00 64 64 00 00 00 00 00 00 00 C5 32
100: 00 64 64 00 00 00 00 00 00 00 C7 32 00 C8 C8 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 51
170: 03 00 01 00 02 6B 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3A
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 02 32
010: 00 00 00 00 00 00 00 00 00 00 03 02 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 0A 00 00 00 00 00 00 00 00 00 00 07 32
040: 00 00 00 00 00 00 00 00 00 00 08 32 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 1E 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B7 01 00 00 00 00
080: 00 00 00 00 00 00 B8 61 00 00 00 00 00 00 00 00
090: 00 00 B9 01 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
0B0: 00 00 00 00 00 00 BD 01 00 00 00 00 00 00 00 00
0C0: 00 00 BE 28 00 00 00 00 00 00 00 00 00 00 BF 00
0D0: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
0E0: 00 00 00 00 00 00 C1 00 00 00 00 00 00 00 00 00
0F0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
100: 00 00 00 00 00 00 00 00 00 00 C7 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8B
-
Rudy
- Site Admin
- Příspěvky: 118251
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kompletně zpomalený notebook
Disk je v pořádku. Zkuste disk defragmentovat.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kompletně zpomalený notebook
Zdá se to být lepší.
Díky za váš čas, úm a vše nejlepší do nového roku.
Díky za váš čas, úm a vše nejlepší do nového roku.
-
Rudy
- Site Admin
- Příspěvky: 118251
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kompletně zpomalený notebook
Ještě je možřné defragmentovat registry: https://www.chip.cz/novinky/trendy/ausl ... efrag-6-1/ . Šťastný a veselý a nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?