Dobrý deny prosím o kontrolu,
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-01-2020
Ran by norst (administrator) on DESKTOP-3SL6531 (Micro-Star International Co., Ltd MS-7B86) (13-01-2020 09:31:25)
Running from C:\Users\norst\Desktop
Loaded Profiles: norst (Available Profiles: norst)
Platform: Windows 10 Pro Version 2004 19041.1 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Bloody ToneMaker1.exe
() [File not signed] C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\SDK\CM_LibraryIO.exe
(A FOUR TECH CO., LTD. -> ) C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0350652.inf_amd64_18673f4bf2e5fe02\B350656\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0350652.inf_amd64_18673f4bf2e5fe02\B350656\atiesrxx.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12430.20050.0_x64__8wekyb3d8bbwe\HxAccounts.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12430.20050.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12430.20050.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11912.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbengine.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645648 2019-10-05] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\Run: [EpicGamesLauncher] => "E:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe [15912176 2019-11-25] (A FOUR TECH CO., LTD. -> )
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\Run: [Steam] => F:\Steam\steam.exe [3288016 2019-12-16] (Valve -> Valve Corporation)
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\Run: [BloodyToneMaker] => C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Bloody ToneMaker1.exe [8555008 2017-10-16] () [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.117\Installer\chrmstp.exe [2020-01-10] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {008539BF-83F9-4483-9E0A-EEEE6EAC0A08} - System32\Tasks\Microsoft\Windows\Shell\UpdateUserPictureTask => {09C5DD34-009D-40FA-BCB9-0165AD0C15D4} C:\Windows\System32\Windows.UI.Immersive.dll [1250816 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {0E653EF1-59B9-484F-B54E-26CCAAC22F45} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\RadeonInstaller.exe [40620216 2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0E690A82-5787-461C-A6D1-92560FE90C63} - System32\Tasks\Driver Booster SkipUAC (norst) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {14DBEA2E-2CCC-474E-9915-7468B25896B4} - System32\Tasks\Microsoft\Windows\WwanSvc\OobeDiscovery => {C93CF9D5-031B-4AAA-AB0B-EF802347B381} C:\Windows\System32\MBMediaManager.dll [718848 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {1BA77342-43F7-4F2B-8C3A-9524ECE16FD2} - System32\Tasks\Microsoft\Windows\Application Experience\PcaPatchDbTask => %windir%\system32\rundll32.exe %windir%\system32\PcaSvc.dll,PcaPatchSdbTask
Task: {20C6EBF6-869E-4ECE-AA3E-88CEFC099409} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {3C05DC9B-64F0-4C4D-A356-5CC7D819EB89} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-29] (Google Inc -> Google LLC)
Task: {4A0DEFDA-A2B8-4736-88E1-A578E00D9704} - System32\Tasks\Microsoft\Windows\Input\PenSyncDataAvailable => {378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA} C:\Windows\System32\InputCloudStore.dll [153600 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {6311E797-5CCB-4EB3-9B29-1D62992753E4} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {773F8E01-F51C-404D-9CE7-8FA90FDA35BB} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [488760 2019-07-15] (Bitdefender SRL -> Bitdefender)
Task: {7C4733D2-81D6-4CA3-B30C-E00B496B9857} - System32\Tasks\Microsoft\Windows\Input\TouchpadSyncDataAvailable => {378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA} C:\Windows\System32\InputCloudStore.dll [153600 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {8C98B5D6-71D5-481B-8248-CE336CD7F21D} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [525120 2019-12-06] (Bitdefender SRL -> Bitdefender)
Task: {9A089018-1054-48B2-B3C7-1BFCC80E7A79} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628672 2020-01-09] (Advanced Micro Devices, Inc.) [File not signed]
Task: {9B2D80EF-5AB9-46A0-93C0-AC799DF47B72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-29] (Google Inc -> Google LLC)
Task: {A60D9ECB-A6F4-4FE1-9BD7-B049487A67E7} - System32\Tasks\Microsoft\Windows\International\Synchronize Language Settings => {10D62541-90D0-42FE-848C-0DBC1AC42EDA} C:\Windows\System32\CoreGlobConfig.dll [215896 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {AC774B6C-063F-461A-AF0B-9C7BA8919C70} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1628672 2020-01-09] (Advanced Micro Devices, Inc.) [File not signed]
Task: {AD046360-D99B-44EA-B4AD-A5D3C2464C60} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {AF7A8CDF-8ECD-442F-B3AF-19BE0846C384} - System32\Tasks\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner => {AD08DCC2-4E35-4486-9D49-547CBD30942D} C:\WINDOWS\System32\MitigationClient.dll [417792 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {B202F0E3-D7BC-424B-AD7B-55A406DB8AFB} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [1628672 2020-01-09] (Advanced Micro Devices, Inc.) [File not signed]
Task: {CADF1293-5495-426F-8E37-A30F69274AF4} - System32\Tasks\Microsoft\Windows\Input\LocalUserSyncDataAvailable => {8E7C2AFB-72B9-415C-9AC2-5037693309B7} C:\Windows\System32\InputCloudStore.dll [153600 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {CDB68126-F760-4DA4-9657-3A680E2800E3} - \MSISW_Host -> No File <==== ATTENTION
Task: {DA42085F-11E4-4EE1-A363-1898204812F5} - System32\Tasks\Microsoft\Windows\Input\MouseSyncDataAvailable => {378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA} C:\Windows\System32\InputCloudStore.dll [153600 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {EBE418C0-BDDD-439E-8565-981CC4884480} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {F13D6A7E-6378-451A-9A82-50B1387375C6} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [1124536 2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{fd686bca-420d-4fee-9a19-104bc139cd2a}: [DhcpNameServer] 192.168.100.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-1574780382-662587334-3847424838-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-1574780382-662587334-3847424838-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO: Bitdefender - Portmonka -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender - Portmonka -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_231\bin\ssv.dll [2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Bitdefender - Portmonka - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Bitdefender - Portmonka - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-1574780382-662587334-3847424838-1001 -> Bitdefender - Portmonka - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-06] (Bitdefender SRL -> Bitdefender)
FireFox:
========
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2019-12-16] [Legacy] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files (x86)\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files (x86)\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-14] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-14] (Google LLC -> Google LLC)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR Notifications: Default -> hxxps://www.youtube.com
CHR Profile: C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default [2020-01-13]
CHR DownloadDir: C:\Users\norst\Desktop
CHR Extension: (Prezentace) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-11-29]
CHR Extension: (Dokumenty) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-11-29]
CHR Extension: (Disk Google) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-11-29]
CHR Extension: (YouTube) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-11-29]
CHR Extension: (Tabulky) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-11-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-10]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-29]
CHR Extension: (Gmail) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-11-29]
CHR Extension: (Chrome Media Router) - C:\Users\norst\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-21]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0350652.inf_amd64_18673f4bf2e5fe02\B350656\atiesrxx.exe [524720 2020-01-09] (Advanced Micro Devices, Inc. -> AMD)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195344 2018-03-22] (Bitdefender SRL -> Bitdefender)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8402648 2020-01-10] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2019-11-12] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 MixedRealityOpenXRSvc; C:\WINDOWS\System32\MixedRealityRuntime.dll [134248 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 MixedRealityOpenXRSvc; C:\WINDOWS\SysWOW64\MixedRealityRuntime.dll [104808 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2475312 2020-01-03] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3393848 2020-01-03] (Electronic Arts, Inc. -> Electronic Arts)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1291888 2019-07-15] (Bitdefender SRL -> Bitdefender)
S3 Rockstar Service; E:\Rockstar Launcher\RockstarService.exe [474256 2019-12-14] (Rockstar Games, Inc. -> Rockstar Games)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4956856 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 UdkUserSvc; C:\WINDOWS\System32\windowsudk.shellcommon.dll [1915904 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [151656 2019-12-06] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-06] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdgpio2; C:\WINDOWS\System32\drivers\amdgpio2.sys [45536 2019-05-19] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [24528 2019-12-24] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\u0350652.inf_amd64_18673f4bf2e5fe02\B350656\atikmdag.sys [65749192 2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\u0350652.inf_amd64_18673f4bf2e5fe02\B350656\atikmpag.sys [592288 2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [111456 2019-12-12] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AMDPCIDev; C:\WINDOWS\System32\drivers\AMDPCIDev.sys [32728 2019-07-25] (Advanced Micro Devices INC. -> Advanced Micro Devices)
R0 amdpsp; C:\WINDOWS\System32\drivers\amdpsp.sys [138064 2019-06-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc. )
R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [93240 2019-12-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [33336 2019-12-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1693368 2019-09-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [108152 2019-07-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [739264 2019-07-29] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2019-06-21] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96448 2018-04-27] (Bitdefender SRL -> BitDefender)
R1 CimFS; C:\Windows\System32\Drivers\CimFS.sys [91136 2019-12-07] (Microsoft Windows -> )
R3 CMUAC; C:\WINDOWS\system32\DRIVERS\Headset6400x1.SYS [387072 2013-10-03] (C-MEDIA ELECTRONICS INC. -> A4Tech Inc.)
R0 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [564112 2019-11-07] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2018-11-28] (Bitdefender SRL -> BitDefender LLC)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-12-24] (Martin Malik - REALiX -> REALiX(tm))
R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [196392 2019-07-04] (Bitdefender SRL -> Bitdefender)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
R3 MsQuic; C:\WINDOWS\System32\drivers\msquic.sys [322600 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1154336 2019-06-19] (Realtek Semiconductor Corp. -> Realtek )
S3 spaceparser; C:\WINDOWS\System32\drivers\spaceparser.sys [26624 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R0 Telemetry; C:\WINDOWS\System32\drivers\IntelTA.sys [26808 2019-12-07] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 tesrsdt; C:\Windows\system32\drivers\tesrsdt.sys [442128 2019-12-26] (Tencent Technology(Shenzhen) Company Limited -> TENCENT)
S3 TesSafe; C:\Windows\system32\TesSafe.sys [555064 2019-12-26] (Tencent Technology(Shenzhen) Company Limited -> TENCENT)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [610640 2019-01-14] (Bitdefender SRL -> Bitdefender)
S3 VirtualRender; C:\WINDOWS\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys [11264 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S2 AMDRyzenMasterDriver; \??\C:\Program Files\AMD\Performance Profile Client\RyzenMaster\AMDRyzenMasterDriver.sys [X]
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]
S1 EneIo; \??\C:\WINDOWS\system32\drivers\ene.sys [X]
S1 lmimirr; \SystemRoot\system32\DRIVERS\lmimirr.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-01-13 09:31 - 2020-01-13 09:31 - 000027026 _____ C:\Users\norst\Desktop\FRST.txt
2020-01-13 09:31 - 2020-01-13 09:31 - 000000000 ____D C:\FRST
2020-01-13 09:30 - 2020-01-13 09:30 - 002573312 _____ (Farbar) C:\Users\norst\Desktop\FRST64.exe
2020-01-12 08:58 - 2020-01-13 09:27 - 000003126 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2020-01-11 22:55 - 2020-01-11 22:55 - 000000000 ____D C:\Users\norst\AppData\LocalLow\SteelRaven7
2020-01-11 22:54 - 2020-01-11 22:54 - 000000202 _____ C:\Users\norst\Desktop\Ravenfield.url
2020-01-11 16:00 - 2020-01-11 16:00 - 000001024 _____ C:\.rnd
2020-01-11 16:00 - 2020-01-11 16:00 - 000000000 ____D C:\Users\norst\AppData\Local\LogMeIn
2020-01-11 16:00 - 2017-01-11 02:08 - 000030432 _____ (LogMeIn, Inc.) C:\WINDOWS\system32\Drivers\LMIInfo.sys.000.bak
2020-01-11 16:00 - 2017-01-10 10:04 - 000081088 _____ (LogMeIn, Inc.) C:\WINDOWS\system32\Drivers\LMIRfsDriver.sys.000.bak
2020-01-11 15:58 - 2020-01-11 15:58 - 034377728 _____ C:\Users\norst\Desktop\logmein.msi
2020-01-10 18:23 - 2020-01-10 18:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Software
2020-01-10 18:23 - 2020-01-10 18:23 - 000000000 ____D C:\Program Files (x86)\AMD
2020-01-10 18:22 - 2020-01-09 18:35 - 001073296 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 001073296 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000929888 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000929888 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000852168 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000852168 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000761240 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000710040 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000710040 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000574880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000493768 _____ C:\WINDOWS\system32\dgtrayicon.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000491720 _____ C:\WINDOWS\system32\GameManager64.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000485784 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000451992 _____ C:\WINDOWS\system32\atieah64.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000428744 _____ C:\WINDOWS\system32\EEURestart.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000374472 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000344776 _____ C:\WINDOWS\system32\clinfo.exe
2020-01-10 18:22 - 2020-01-09 18:35 - 000242080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000209312 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000184520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000163224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000159432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000153504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000138648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000136608 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000136600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000091552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mcl64.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000076184 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mcl32.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000047304 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000044448 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000020616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2020-01-10 18:22 - 2020-01-09 18:35 - 000020384 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 004564168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 004076960 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 001243544 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 001243544 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 000469192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 000346008 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2020-01-10 18:22 - 2020-01-09 18:34 - 000179056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 000158200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 000124824 _____ C:\WINDOWS\system32\atidxx64.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 000107440 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2020-01-10 18:22 - 2020-01-09 18:34 - 000071072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2020-01-10 18:22 - 2020-01-09 18:33 - 001686824 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll
2020-01-10 18:22 - 2020-01-09 18:33 - 001365968 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2020-01-10 18:22 - 2020-01-09 18:33 - 000128728 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2020-01-10 18:22 - 2020-01-09 18:33 - 000108064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2020-01-10 18:22 - 2020-01-09 15:37 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2020-01-10 18:22 - 2020-01-09 15:37 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2020-01-10 18:22 - 2020-01-09 15:28 - 000541392 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2020-01-10 18:22 - 2020-01-09 15:28 - 000541392 _____ C:\WINDOWS\system32\atiapfxx.blb
2020-01-10 18:21 - 2020-01-09 18:34 - 078651080 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 062867864 _____ C:\WINDOWS\system32\amd_comgr.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 052403400 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000941768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000769224 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000554184 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000484552 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000467144 _____ C:\WINDOWS\system32\amdlogum.exe
2020-01-10 18:21 - 2020-01-09 18:34 - 000384200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000373960 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000166984 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000135584 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000121760 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000121248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2020-01-10 18:21 - 2020-01-09 18:34 - 000106184 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2020-01-10 18:21 - 2020-01-09 18:33 - 000546528 _____ C:\WINDOWS\system32\amdmiracast.dll
2020-01-10 18:21 - 2020-01-09 18:33 - 000134928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2020-01-10 18:21 - 2020-01-09 18:33 - 000128728 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2020-01-10 18:21 - 2020-01-09 18:33 - 000119848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2020-01-10 18:21 - 2020-01-09 18:33 - 000107832 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2020-01-10 18:20 - 2020-01-10 18:20 - 000000000 ____D C:\Users\norst\AppData\Local\AMD
2020-01-10 18:19 - 2020-01-13 09:27 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2020-01-10 18:19 - 2020-01-10 18:19 - 000003194 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2020-01-10 18:19 - 2020-01-10 18:19 - 000003160 _____ C:\WINDOWS\system32\Tasks\StartCN
2020-01-10 18:19 - 2020-01-10 18:19 - 000003080 _____ C:\WINDOWS\system32\Tasks\StartDVR
2020-01-10 18:19 - 2020-01-09 18:34 - 001730760 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2020-01-10 18:19 - 2020-01-09 18:34 - 000197384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2020-01-10 18:19 - 2019-12-12 20:46 - 000204952 _____ C:\WINDOWS\SysWOW64\ativvsvl.dat
2020-01-10 18:19 - 2019-12-12 20:46 - 000204952 _____ C:\WINDOWS\system32\ativvsvl.dat
2020-01-10 18:19 - 2019-12-12 20:46 - 000157144 _____ C:\WINDOWS\SysWOW64\ativvsva.dat
2020-01-10 18:19 - 2019-12-12 20:46 - 000157144 _____ C:\WINDOWS\system32\ativvsva.dat
2020-01-10 18:19 - 2019-12-12 20:46 - 000154384 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin
2020-01-10 18:19 - 2019-12-12 20:46 - 000138832 _____ C:\WINDOWS\system32\samu_krnl_isv_ci.sbin
2020-01-10 18:19 - 2019-12-12 20:46 - 000125488 _____ C:\WINDOWS\system32\kapp_ci.sbin
2020-01-10 18:19 - 2019-12-12 20:46 - 000121168 _____ C:\WINDOWS\system32\kapp_si.sbin
2020-01-10 18:19 - 2019-12-12 20:46 - 000069770 _____ C:\WINDOWS\system32\AMDKernelEvents.man
2020-01-10 18:19 - 2019-07-24 06:55 - 000108152 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\AtihdWT6.sys
2020-01-10 18:18 - 2020-01-10 18:18 - 000000000 ____D C:\ProgramData\AMD
2020-01-10 18:00 - 2020-01-10 18:00 - 000000283 _____ C:\Users\norst\Desktop\Fortnite.url
2020-01-10 16:48 - 2020-01-10 16:48 - 000000877 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2020-01-10 16:48 - 2020-01-10 16:48 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2020-01-10 16:48 - 2020-01-10 16:48 - 000000877 _____ C:\ProgramData\Desktop\Epic Games Launcher.lnk
2020-01-10 16:46 - 2020-01-10 16:46 - 043749376 _____ C:\Users\norst\Desktop\EpicInstaller-10.7.0.msi
2020-01-10 16:44 - 2020-01-13 08:32 - 000303616 ____N C:\WINDOWS\Minidump\011320-6781-01.dmp
2020-01-10 16:44 - 2020-01-13 08:09 - 000351991 ____N C:\WINDOWS\Minidump\011320-6765-01.dmp
2020-01-10 16:44 - 2020-01-12 17:09 - 001108954 ____N C:\WINDOWS\Minidump\011220-6875-01.dmp
2020-01-10 16:44 - 2020-01-12 16:55 - 000700767 ____N C:\WINDOWS\Minidump\011220-7765-01.dmp
2020-01-10 11:30 - 2020-01-10 11:30 - 000000000 ____D C:\Users\norst\Downloads\Bee Gees - Greatest Hits (2CD-2008) [FLAC]
2020-01-10 08:05 - 2020-01-10 08:05 - 000000000 ____D C:\WINDOWS\Panther
2020-01-10 07:52 - 2020-01-10 07:52 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2020-01-09 18:51 - 2020-01-09 18:51 - 000022240 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_12927440781640.dll
2020-01-09 17:15 - 2020-01-10 08:45 - 337674240 _____ C:\Users\norst\Downloads\codex-kingdom.come.deliverance.iso
2020-01-09 14:24 - 2020-01-09 14:24 - 000001609 _____ C:\Users\norst\Desktop\Roblox.lnk
2020-01-09 13:16 - 2020-01-09 13:16 - 000000000 ____D C:\Users\norst\AppData\Local\Downloaded Installations
2020-01-09 12:56 - 2020-01-09 12:56 - 000000000 ____D C:\Users\norst\Desktop\Radeon
2020-01-09 12:50 - 2020-01-10 18:16 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2020-01-09 12:44 - 2020-01-09 12:44 - 041900000 _____ (AMD Inc.) C:\Users\norst\Downloads\radeon-software-adrenalin-2020-19.12.2-minimalsetup-191212_64bit.exe
2020-01-09 12:38 - 2020-01-09 12:38 - 000000000 ____D C:\Users\norst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2020-01-08 16:28 - 2020-01-12 17:07 - 000000000 ____D C:\WINDOWS\system32\DAX3
2020-01-08 16:28 - 2020-01-12 17:07 - 000000000 ____D C:\WINDOWS\system32\DAX2
2020-01-08 16:28 - 2020-01-08 16:28 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2020-01-08 16:28 - 2020-01-08 16:28 - 000000000 _____ C:\WINDOWS\system32\fpfftResultsFile.txt
2020-01-08 16:22 - 2020-01-08 16:22 - 000000000 ____D C:\ProgramData\NortonInstaller
2020-01-08 16:22 - 2020-01-08 16:22 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2020-01-08 16:21 - 2020-01-08 16:21 - 000000000 ____D C:\Users\Default\AppData\Local\Google
2020-01-08 16:21 - 2020-01-08 16:21 - 000000000 ____D C:\Users\Default User\AppData\Local\Google
2020-01-08 16:21 - 2020-01-08 16:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2020-01-08 16:18 - 2014-04-30 16:23 - 000011248 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\acpimof.dll
2020-01-08 16:17 - 2020-01-09 14:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2020-01-08 16:17 - 2020-01-09 14:05 - 000000000 ____D C:\MSI
2020-01-08 10:27 - 2020-01-08 10:27 - 000000000 ____D C:\Program Files (x86)\BloodyToneMaker
2020-01-08 10:27 - 2013-10-03 02:06 - 000387072 _____ (A4Tech Inc.) C:\WINDOWS\system32\Drivers\Headset6400x1.SYS
2020-01-08 10:27 - 2013-08-28 08:05 - 001965312 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMXearSurr.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000961616 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMAPOMain.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000841624 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMXearLiving10.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000809664 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMXearVoClear.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000720584 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMXearSingFX.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000129864 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMXearSonic.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000080896 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMEffectPropPage.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000074304 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMEffectGFX.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000070184 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMEffectLFX.dll
2020-01-08 10:27 - 2013-08-28 08:05 - 000064528 _____ (C-Media Electronics Inc.) C:\WINDOWS\system32\CMMicEffectLFX.dll
2020-01-07 18:05 - 2020-01-07 18:05 - 000022240 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_29639015398589.dll
2020-01-07 09:23 - 2020-01-07 09:23 - 000000000 ____D C:\Users\norst\AppData\Local\Adobe
2020-01-05 14:16 - 2020-01-05 14:16 - 000000000 ____D C:\ProgramData\Roblox
2020-01-05 14:16 - 2020-01-05 14:16 - 000000000 ____D C:\Program Files (x86)\Roblox
2020-01-05 14:15 - 2020-01-09 12:38 - 000000254 _____ C:\Users\norst\AppData\LocalLow\rbxcsettings.rbx
2020-01-05 14:15 - 2020-01-09 12:38 - 000000000 ____D C:\Users\norst\AppData\Local\Roblox
2019-12-28 16:35 - 2019-12-28 16:35 - 000000000 ____D C:\Users\norst\Documents\WB Games
2019-12-28 16:32 - 2019-12-28 16:33 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2019-12-28 16:32 - 2019-12-28 16:32 - 000000000 ____D C:\WINDOWS\SysWOW64\xlive
2019-12-28 16:32 - 2019-12-28 16:32 - 000000000 ____D C:\Users\norst\Documents\Games for Windows - LIVE Demos
2019-12-28 16:32 - 2019-12-28 16:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2019-12-28 16:32 - 2019-12-28 16:32 - 000000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2019-12-28 14:17 - 2019-12-28 14:18 - 000000000 ____D C:\Users\norst\Downloads\Batman Arkham City Game Of The Year Edition CZ
2019-12-28 14:02 - 2019-12-28 17:59 - 1209521318 _____ C:\Users\norst\Downloads\Flashing.Lights.rar
2019-12-28 09:57 - 2019-12-28 17:59 - 001291072 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2019-12-27 19:53 - 2019-12-27 19:53 - 000000000 ____D C:\ProgramData\dbg
2019-12-27 19:47 - 2020-01-13 09:26 - 000000000 ____D C:\WINDOWS\Minidump
2019-12-27 19:41 - 2020-01-13 09:15 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-12-27 19:37 - 2019-12-27 19:37 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-12-27 19:37 - 2019-12-07 10:07 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-12-27 19:36 - 2019-12-27 19:36 - 000000020 ___SH C:\Users\norst\ntuser.ini
2019-12-27 19:35 - 2020-01-13 09:27 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-12-27 19:35 - 2019-12-27 19:38 - 000003802 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2019-12-27 19:35 - 2019-12-27 19:35 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-12-27 19:35 - 2019-12-27 19:35 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-12-27 19:35 - 2019-12-27 19:35 - 000003760 _____ C:\WINDOWS\system32\Tasks\AMD Updater
2019-12-27 19:35 - 2019-12-27 19:35 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2019-12-27 19:35 - 2019-12-27 19:35 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2019-12-27 19:35 - 2019-12-27 19:35 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2019-12-27 19:35 - 2019-12-27 19:35 - 000002638 _____ C:\WINDOWS\system32\Tasks\AMD ThankingURL
2019-12-27 19:35 - 2019-12-27 19:35 - 000002404 _____ C:\WINDOWS\system32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C
2019-12-27 19:35 - 2019-12-27 19:35 - 000002380 _____ C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (norst)
2019-12-27 19:35 - 2019-12-27 19:35 - 000002236 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2019-12-27 19:33 - 2020-01-13 09:27 - 000008192 ___SH C:\DumpStack.log.tmp
2019-12-27 19:33 - 2020-01-13 08:32 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-12-27 19:33 - 2019-12-27 19:33 - 000258096 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-12-27 19:32 - 2019-12-27 19:32 - 000073016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WinSetupBoot.sys
2019-12-27 19:25 - 2019-12-27 19:33 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-12-27 19:24 - 2020-01-13 08:47 - 000000000 ____D C:\Users\norst
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Šablony
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Soubory cookie
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Poslední
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Okolní tiskárny
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Okolní síť
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Nabídka Start
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Dokumenty
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Documents\Obrázky
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Documents\Hudba
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Documents\Filmy
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\Data aplikací
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 _SHDL C:\Users\norst\AppData\Local\Data aplikací
2019-12-27 19:24 - 2019-12-27 19:24 - 000000000 ____D C:\WINDOWS\system32\AMD
2019-12-27 19:24 - 2019-12-07 10:10 - 000001105 _____ C:\Users\norst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-12-27 19:23 - 2019-12-27 19:25 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-12-27 19:21 - 2019-12-27 19:21 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-12-27 19:21 - 2019-12-27 19:21 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-12-27 19:21 - 2019-12-27 19:21 - 000000000 ____D C:\Program Files\MSBuild
2019-12-27 19:21 - 2019-12-27 19:21 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-12-27 19:21 - 2019-12-27 19:21 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-12-27 19:20 - 2019-12-27 19:20 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2019-12-27 19:20 - 2019-12-03 14:04 - 000781384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-12-27 19:20 - 2019-12-03 14:04 - 000105544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-12-27 19:20 - 2019-12-03 14:04 - 000037864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-12-27 19:20 - 2019-11-08 14:44 - 001168968 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-12-27 19:20 - 2019-11-08 14:44 - 000127056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-12-27 19:20 - 2019-11-08 14:44 - 000038072 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-12-27 19:16 - 2019-12-27 19:16 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-12-27 18:53 - 2019-12-27 18:53 - 000000000 ___HD C:\$WinREAgent
2019-12-27 18:43 - 2016-12-27 10:23 - 000395024 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe
2019-12-27 18:42 - 2019-12-27 18:42 - 000000000 ____D C:\Users\norst\Documents\CPY_SAVES
2019-12-26 22:00 - 2020-01-10 08:14 - 003592769 _____ C:\WINDOWS\ZAM.krnl.trace
2019-12-26 22:00 - 2020-01-10 08:14 - 000000000 ____D C:\Users\norst\AppData\Local\AMSDK
2019-12-26 19:17 - 2019-12-26 19:17 - 000000000 ____D C:\ProgramData\GOG.com
2019-12-26 19:13 - 2019-12-26 19:13 - 000000000 ____D C:\ProgramData\Apple
2019-12-26 19:11 - 2019-12-26 19:11 - 000000064 _____ C:\Users\norst\AppData\Roaming\changzhi_mplayer.data
2019-12-26 19:10 - 2019-12-26 19:10 - 000000000 ____D C:\Users\norst\Documents\LDPlayer
2019-12-26 19:09 - 2019-12-26 22:05 - 000000000 ____D C:\ProgramData\AVAST Software
2019-12-26 19:09 - 2019-12-26 19:09 - 000286556 _____ C:\Users\norst\AppData\Roaming\85x_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2019-12-26 19:09 - 2019-12-26 19:09 - 000046200 _____ C:\Users\norst\AppData\Roaming\85x_0L0D0P1I1T2U1P1C1V0I0C1V0F0StJ1V0A0V0A0S0T.txt
2019-12-26 19:08 - 2020-01-09 21:25 - 000000000 ____D C:\Users\norst\AppData\Roaming\Fusion_ld
2019-12-26 19:08 - 2019-12-26 19:15 - 000000000 ____D C:\Users\norst\AppData\Roaming\ChangZhi2
2019-12-26 18:25 - 2019-12-26 18:58 - 000555064 _____ (TENCENT) C:\WINDOWS\system32\TesSafe.sys
2019-12-26 18:25 - 2019-12-26 18:25 - 000442128 _____ (TENCENT) C:\WINDOWS\system32\Drivers\tesrsdt.sys
2019-12-26 18:25 - 2019-12-26 18:25 - 000000000 ____D C:\Users\norst\AppData\Roaming\AndroidTbox
2019-12-26 18:25 - 2019-12-26 18:25 - 000000000 ____D C:\ProgramData\Tencent
2019-12-26 18:24 - 2019-12-26 19:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tencent Software
2019-12-26 18:24 - 2019-12-26 18:24 - 000000000 ____D C:\Users\norst\AppData\Local\Tencent
2019-12-26 18:23 - 2019-12-26 19:02 - 000000000 ____D C:\Users\norst\AppData\Roaming\Tencent
2019-12-26 18:21 - 2019-12-26 19:18 - 000000000 ____D C:\Users\Public\BlueStacks
2019-12-26 17:49 - 2019-12-26 17:49 - 000000000 ____D C:\Program Files (x86)\Kebbaz
2019-12-26 17:49 - 2019-12-26 17:49 - 000000000 ____D C:\Program Files (x86)\Farfouch
2019-12-25 19:18 - 2019-12-12 21:13 - 000111456 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdkmpfd.sys
2019-12-25 19:11 - 2019-12-26 21:45 - 000000000 ____D C:\found.000
2019-12-25 19:11 - 2019-12-25 19:11 - 000000080 ___SH C:\bootTel.dat
2019-12-25 18:50 - 2019-12-25 18:50 - 000022240 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_43296929666636.dll
2019-12-25 09:30 - 2019-06-19 15:58 - 001154336 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2019-12-25 09:28 - 2019-12-25 09:28 - 000000000 ____D C:\ProgramData\Propagation
2019-12-25 09:27 - 2019-07-25 00:46 - 000032728 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\AMDPCIDev.sys
2019-12-25 09:26 - 2019-06-27 04:45 - 000466552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\tbaseregistry64.dll
2019-12-25 09:26 - 2019-06-27 04:45 - 000368240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\tbaseregistry32.dll
2019-12-25 09:26 - 2019-06-27 04:44 - 000138064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\Drivers\amdpsp.sys
2019-12-25 09:24 - 2020-01-12 17:07 - 000000000 ___HD C:\Program Files (x86)\Temp
2019-12-25 09:24 - 2020-01-12 17:07 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-12-25 09:24 - 2019-04-15 13:13 - 002856624 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2019-12-24 18:51 - 2020-01-09 12:30 - 000000000 ____D C:\Users\norst\AppData\Roaming\Canon
2019-12-24 18:51 - 2019-12-24 18:51 - 000000000 ___HD C:\ProgramData\CanonIJQuickMenu
2019-12-24 18:49 - 2014-03-18 05:00 - 000408576 _____ (CANON INC.) C:\WINDOWS\system32\CNMXLMCA.DLL
2019-12-24 18:48 - 2019-12-27 19:33 - 000000000 ____D C:\WINDOWS\system32\STRING
2019-12-24 18:48 - 2014-03-17 19:15 - 000380928 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNMNPPM.DLL
2019-12-24 18:48 - 2014-03-17 19:15 - 000375296 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6PPM.DLL
2019-12-24 18:48 - 2014-03-17 19:15 - 000039424 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6UI.DLL
2019-12-24 18:48 - 2013-12-02 12:51 - 000096000 _____ C:\WINDOWS\SysWOW64\CNC177FD.TBL
2019-12-24 18:48 - 2008-08-25 18:02 - 000015872 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNHMCA.dll
2019-12-24 18:42 - 2020-01-09 12:35 - 000000000 ____D C:\Program Files (x86)\Canon
2019-12-24 17:21 - 2019-12-24 17:21 - 000000000 ____D C:\Program Files (x86)\Microsoft XNA
2019-12-24 17:20 - 2019-12-24 17:20 - 000093240 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amd_sata.sys
2019-12-24 17:20 - 2019-12-24 17:20 - 000033336 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amd_xata.sys
2019-12-24 17:20 - 2019-12-24 17:20 - 000024528 _____ (Advanced Micro Devices, Inc) C:\WINDOWS\system32\Drivers\amdgpio3.sys
2019-12-24 17:17 - 2019-12-27 19:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit
2019-12-24 17:17 - 2019-12-25 09:26 - 000000000 ____D C:\ProgramData\IObit
2019-12-24 17:17 - 2019-12-24 17:17 - 000027552 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2019-12-22 03:58 - 2020-01-09 12:56 - 000000000 ____D C:\Users\norst\Desktop\Práce
2019-12-22 03:57 - 2019-12-22 03:57 - 000211349 _____ C:\Users\norst\Downloads\Milosrdní práce.pdf
2019-12-19 11:16 - 2019-12-19 11:16 - 001397976 _____ (Google LLC) C:\Users\norst\Downloads\ChromeSetup.exe
2019-12-19 11:15 - 2019-12-19 11:15 - 000038158 _____ C:\ProgramData\dm.uninstall.1576750544.bdinstall.bin
2019-12-19 10:46 - 2019-12-19 10:46 - 000803620 _____ C:\ProgramData\cl.1576748658.bdinstall.v2.bin
2019-12-19 10:46 - 2019-12-19 10:46 - 000102260 _____ C:\ProgramData\cl.kit.1576748654.bdinstall.v2.bin
2019-12-19 10:46 - 2019-12-19 10:46 - 000063668 _____ C:\ProgramData\dm.1576748770.bdinstall.bin
2019-12-19 10:46 - 2019-12-19 10:46 - 000000000 ____D C:\ProgramData\Bitdefender Device Management
2019-12-19 10:45 - 2019-12-27 19:33 - 000000000 ____D C:\WINDOWS\system32\elambkup
2019-12-19 10:45 - 2019-12-27 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2019-12-19 10:45 - 2019-12-19 10:45 - 000000000 ____D C:\ProgramData\Gemma
2019-12-19 10:45 - 2019-12-19 10:45 - 000000000 ____D C:\ProgramData\BDLogging
2019-12-19 10:45 - 2019-12-19 10:45 - 000000000 ____D C:\ProgramData\Atc
2019-12-19 10:45 - 2019-11-07 08:49 - 000564112 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2019-12-19 10:45 - 2019-06-21 07:30 - 000046056 _____ (© Bitdefender SRL) C:\WINDOWS\system32\Drivers\bdprivmon.sys
2019-12-19 10:45 - 2019-03-21 00:12 - 000022960 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2019-12-19 10:45 - 2018-04-27 07:45 - 000096448 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys
2019-12-19 10:44 - 2019-12-20 12:40 - 000000000 ____D C:\Program Files\Bitdefender
2019-12-19 10:44 - 2019-12-19 11:01 - 000000000 ____D C:\ProgramData\Bitdefender
2019-12-19 10:44 - 2019-12-19 10:46 - 000000000 ____D C:\Users\norst\AppData\Roaming\Bitdefender
2019-12-19 10:44 - 2019-12-19 10:44 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
2019-12-19 10:44 - 2019-09-23 08:43 - 001693368 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2019-12-19 10:44 - 2019-07-29 15:32 - 000739264 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2019-12-19 10:44 - 2019-07-04 11:15 - 000196392 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2019-12-19 10:44 - 2019-01-14 16:25 - 000610640 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys
2019-12-19 10:44 - 2018-11-28 05:45 - 000188384 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2019-12-19 10:42 - 2020-01-13 09:26 - 000000000 ____D C:\Program Files\Bitdefender Agent
2019-12-19 10:42 - 2019-12-19 10:42 - 000107676 _____ C:\ProgramData\agent.1576748521.bdinstall.v2.bin
2019-12-19 10:42 - 2019-12-19 10:42 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2019-12-16 18:08 - 2019-12-27 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
2019-12-16 16:04 - 2019-12-27 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2019-12-16 16:04 - 2019-12-27 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-12-16 16:04 - 2019-12-16 16:04 - 000000000 ____D C:\Users\norst\AppData\Local\VS Revo Group
2019-12-16 16:04 - 2019-12-16 16:04 - 000000000 ____D C:\ProgramData\VS Revo Group
2019-12-16 16:04 - 2019-12-16 16:04 - 000000000 ____D C:\Program Files\VS Revo Group
2019-12-16 16:04 - 2019-12-16 16:04 - 000000000 ____D C:\Program Files\CCleaner
2019-12-16 16:04 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2019-12-16 11:46 - 2019-12-16 11:46 - 000000000 ____D C:\Users\Public\Documents\Steam
2019-12-16 11:46 - 2019-12-16 11:46 - 000000000 ____D C:\ProgramData\Documents\Steam
2019-12-16 11:09 - 2019-12-27 09:47 - 000000000 ____D C:\Users\norst\Documents\My Games
2019-12-16 10:52 - 2019-12-27 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
2019-12-16 10:52 - 2019-12-16 10:52 - 000000000 ____D C:\Users\norst\Documents\My ISO Files
2019-12-16 10:52 - 2019-12-16 10:52 - 000000000 ____D C:\Program Files (x86)\UltraISO
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-01-13 09:29 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-01-13 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2020-01-13 09:26 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2020-01-13 09:26 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-01-13 09:26 - 2019-11-29 15:27 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2020-01-13 09:26 - 2019-11-29 14:32 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2020-01-13 09:26 - 2019-11-29 14:32 - 000000000 ____D C:\Program Files\AMD
2020-01-13 09:25 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-01-13 09:25 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\registration
2020-01-13 09:24 - 2019-12-07 10:03 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2020-01-13 09:23 - 2019-11-29 15:00 - 000000000 ____D C:\Program Files (x86)\Origin
2020-01-13 09:15 - 2019-12-07 15:43 - 000716706 _____ C:\WINDOWS\system32\perfh005.dat
2020-01-13 09:15 - 2019-12-07 15:43 - 000144884 _____ C:\WINDOWS\system32\perfc005.dat
2020-01-12 22:05 - 2019-11-29 14:59 - 000000000 ____D C:\ProgramData\Origin
2020-01-12 17:56 - 2019-11-29 14:59 - 000000000 ____D C:\Users\norst\AppData\Roaming\Origin
2020-01-12 17:55 - 2019-11-29 14:59 - 000000000 ____D C:\Users\norst\AppData\Local\Origin
2020-01-12 16:50 - 2019-12-13 20:49 - 000000000 ____D C:\Users\norst\AppData\Local\ElevatedDiagnostics
2020-01-12 09:49 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-01-11 22:54 - 2019-12-03 16:17 - 000000000 ____D C:\Users\norst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-01-11 20:10 - 2019-12-11 16:01 - 000000000 ____D C:\Users\norst\AppData\Roaming\.minecraft
2020-01-11 16:33 - 2019-11-29 14:34 - 000000000 ____D C:\Users\norst\AppData\Local\PlaceholderTileLogoFolder
2020-01-11 16:33 - 2019-11-29 14:32 - 000000000 ____D C:\Users\norst\AppData\Local\Packages
2020-01-10 20:35 - 2019-11-29 15:12 - 000000000 ____D C:\Users\norst\AppData\Local\D3DSCache
2020-01-10 18:22 - 2019-11-29 14:32 - 000000000 ____D C:\AMD
2020-01-10 14:27 - 2019-12-08 11:39 - 000000000 ____D C:\Users\norst\AppData\Roaming\uTorrent
2020-01-10 08:35 - 2019-12-03 13:09 - 000000000 ____D C:\Program Files\Rockstar Games
2020-01-10 07:50 - 2019-11-29 14:39 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-09 19:03 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-01-09 14:04 - 2019-11-29 14:32 - 000000000 ____D C:\ProgramData\Package Cache
2020-01-09 12:53 - 2019-12-07 13:22 - 000000000 ____D C:\Users\norst\AppData\Roaming\ATI
2020-01-09 12:40 - 2019-12-02 09:28 - 000000000 ____D C:\Users\norst\AppData\Local\CrashDumps
2020-01-09 12:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-01-09 12:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-01-09 09:21 - 2019-11-29 14:39 - 000000000 ____D C:\Users\norst\AppData\LocalLow\AMD
2020-01-08 16:28 - 2019-11-29 14:48 - 000000000 ____D C:\ProgramData\Packages
2020-01-08 16:21 - 2019-11-29 14:39 - 000000000 ____D C:\Users\norst\AppData\Local\Google
2020-01-08 16:21 - 2019-11-29 14:39 - 000000000 ____D C:\Program Files (x86)\Google
2020-01-08 16:15 - 2019-11-29 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloody
2020-01-06 09:46 - 2019-12-02 09:30 - 000000000 ____D C:\Users\norst\AppData\Roaming\vlc
2019-12-28 08:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2019-12-27 19:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-12-27 19:44 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-12-27 19:37 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-12-27 19:36 - 2019-11-29 14:32 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-12-27 19:36 - 2019-11-29 14:32 - 000000000 ___RD C:\Users\norst\3D Objects
2019-12-27 19:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-12-27 19:35 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2019-12-27 19:35 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2019-12-27 19:34 - 2019-12-07 10:14 - 000000000 __RSD C:\WINDOWS\Media
2019-12-27 19:34 - 2019-12-07 10:14 - 000000000 __RHD C:\Users\Public\Libraries
2019-12-27 19:33 - 2019-12-12 14:04 - 000000000 ____D C:\Users\norst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-12-27 19:33 - 2019-12-12 14:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-12-27 19:33 - 2019-12-11 19:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-12-27 19:33 - 2019-12-11 16:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher
2019-12-27 19:33 - 2019-12-07 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apex Legends
2019-12-27 19:33 - 2019-12-07 10:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-12-27 19:33 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-12-27 19:33 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\spool
2019-12-27 19:33 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-12-27 19:33 - 2019-12-03 13:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2019-12-27 19:33 - 2019-12-02 09:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2019-12-27 19:33 - 2019-11-29 15:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2019-12-27 19:33 - 2019-11-29 14:57 - 000000000 ____D C:\Users\norst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2019-12-27 19:33 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-12-27 19:33 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2019-12-27 19:32 - 2019-12-07 10:18 - 000000000 ____D C:\WINDOWS\Setup
2019-12-27 19:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-12-27 19:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2019-12-27 09:47 - 2019-11-29 15:10 - 000000000 ____D C:\Users\norst\AppData\Local\UnrealEngine
2019-12-26 22:08 - 2019-12-08 11:39 - 000001042 _____ C:\Users\norst\Desktop\µTorrent.lnk
2019-12-17 08:11 - 2019-12-07 12:52 - 000000000 ____D C:\Program Files\Common Files\AV
2019-12-16 11:20 - 2019-11-29 14:33 - 000000000 ___RD C:\Users\norst\OneDrive
==================== Files in the root of some directories ========
2019-12-26 19:09 - 2019-12-26 19:09 - 000046200 _____ () C:\Users\norst\AppData\Roaming\85x_0L0D0P1I1T2U1P1C1V0I0C1V0F0StJ1V0A0V0A0S0T.txt
2019-12-26 19:09 - 2019-12-26 19:09 - 000286556 _____ () C:\Users\norst\AppData\Roaming\85x_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2019-12-26 19:11 - 2019-12-26 19:11 - 000000064 _____ () C:\Users\norst\AppData\Roaming\changzhi_mplayer.data
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Divné PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Divné PC
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-01-2020
Ran by norst (13-01-2020 09:32:44)
Running from C:\Users\norst\Desktop
Windows 10 Pro Version 2004 19041.1 (X64) (2019-12-27 18:35:59)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1574780382-662587334-3847424838-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1574780382-662587334-3847424838-503 - Limited - Disabled)
Guest (S-1-5-21-1574780382-662587334-3847424838-501 - Limited - Disabled)
norst (S-1-5-21-1574780382-662587334-3847424838-1001 - Administrator - Enabled) => C:\Users\norst
WDAGUtilityAccount (S-1-5-21-1574780382-662587334-3847424838-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AV: COMODO Antivirus (Disabled - Up to date) {05AFA9EE-1ABD-A226-D250-B41671D7635C}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.1.3.26837 - emc, uTorrent.CZ)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 20.1.1 - Advanced Micro Devices, Inc.)
Apex Legends (HKLM-x32\...\{D7FBF176-382D-484E-863A-DFD1124A2A1C}) (Version: 1.0.2.6 - Electronic Arts, Inc.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 24.0.1.143 - Bitdefender)
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 24.0.14.80 - Bitdefender)
Bloody7 (HKLM-x32\...\Bloody3) (Version: 19.11.0010 - Bloody)
Branding64 (HKLM\...\{133E6274-9FD4-4ABD-80A8-2A954E89EAD6}) (Version: 1.00.0002 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
Epic Games Launcher (HKLM-x32\...\{C69A2919-0662-4390-9418-67C931B44C18}) (Version: 1.1.236.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Farming Simulator 19 v.1.4.0.0 (HKLM-x32\...\Farming Simulator 19_is1) (Version: - )
Google Drive (HKLM-x32\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.117 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.1868.0 - Rockstar Games)
Java 8 Update 231 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180231F0}) (Version: 8.0.2310.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{810F1419-7760-402E-8772-B4054FAA2B72}) (Version: 1.0.0.0 - Mojang)
Origin (HKLM-x32\...\Origin) (Version: 10.5.58.36192 - Electronic Arts, Inc.)
Revo Uninstaller Pro 4.2.3 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.2.3 - VS Revo Group, Ltd.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.17.199 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.4.3 - Rockstar Games)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
ToneMaker 1 (HKLM-x32\...\BloodyToneMaker) (Version: 17.10.0006 - Bloody)
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version: - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
Packages:
=========
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.14.251.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Studios)
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation) [MS Ad]
NcsiUwpApp -> C:\Windows\SystemApps\NcsiUwpApp_8wekyb3d8bbwe [2019-12-27] (Microsoft)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.7.199.0_x64__dt26b99r8h8gj [2020-01-13] (Realtek Semiconductor Corp)
ROBLOX -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.414.44205.0_x86__55nm5eh3cm0pr [2020-01-13] (ROBLOX Corporation)
UDK Package -> C:\Windows\SystemApps\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy [2019-12-27] (Microsoft Corporation)
UX.Client.ST -> C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy [2019-12-27] (Microsoft Windows)
Windows Search -> C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy [2019-12-27] (Microsoft Corporation)
Xbox Insider Hub -> C:\Program Files\WindowsApps\Microsoft.FlightDashboard_462.2001.6001.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellServiceObjects: OneDrive network states cache SSO -> {78DE489B-7931-4f14-83B4-C56D38AC9FFA} => C:\Windows\System32\Windows.FileExplorer.Common.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)
ShellServiceObjects-x32: OneDrive network states cache SSO -> {78DE489B-7931-4f14-83B4-C56D38AC9FFA} => C:\Windows\SysWOW64\Windows.FileExplorer.Common.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2019-11-29 20:41 - 2017-04-17 09:43 - 003852800 ____N () [File not signed] C:\Program Files (x86)\Bloody7\Bloody7\Data\Mouse\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll
2020-01-08 16:15 - 2014-01-10 10:48 - 004260352 _____ () [File not signed] C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Data\RES\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2020-01-09 09:33 - 2020-01-09 09:33 - 001518592 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\WVR\OpenVR\bin\win64\driver_amdwvr.dll
2019-12-24 18:48 - 2014-03-17 19:15 - 000375296 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMN6PPM.DLL
2019-12-24 18:49 - 2014-03-18 05:00 - 000408576 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMXLMCA.DLL
2020-01-08 10:27 - 2013-08-09 02:02 - 000243200 _____ (C-MEDIA Electronics INC.) [File not signed] C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\SDK\x64\Vista\osConfLib.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 001180672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2020-01-09 09:43 - 2020-01-09 09:43 - 006010880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 006345216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 001078272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 004000256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 003802624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000376320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 092323328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 005560832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000188416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 002888704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcCtnrSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MsQuic => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NgcCtnrSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NgcSvc => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\norst\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\p8071385.jpg
DNS Servers: 192.168.100.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\...\StartupApproved\Run32: => "IseUI"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{0A36E8A4-F9E0-43F7-AB64-C68FFADB9024}] => (Allow) F:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{1480D245-3058-4DD8-8B50-A1FEB142FFFF}] => (Allow) F:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{DBC87FBA-7781-4BD5-BDF2-5752F25C24BD}] => (Allow) F:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{34C036B1-BB1D-4412-B47D-26FC10C8A866}] => (Allow) F:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4A74CD17-98FE-4155-9630-73A4F9BEEB67}] => (Allow) F:\Steam\steamapps\common\Ravenfield\ravenfield.exe () [File not signed]
FirewallRules: [{C35239F5-9CAF-4E9E-ADB9-2082AF1A2AF7}] => (Allow) F:\Steam\steamapps\common\Ravenfield\ravenfield.exe () [File not signed]
==================== Restore Points =========================
10-01-2020 07:51:53 Removed AMD Ryzen Master SDK.
10-01-2020 18:15:09 Radeon Installer
10-01-2020 18:23:10 Radeon Installer
11-01-2020 15:59:09 Installed LogMeIn
11-01-2020 16:06:24 Removed LogMeIn
11-01-2020 16:07:06 Removed LogMeIn Client
12-01-2020 17:05:37 Odstraněno Realtek Ethernet Controller Driver
13-01-2020 09:17:56 Operace obnovení
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (01/13/2020 09:27:40 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Během obnovení systému došlo k nespecifikované chybě: (Odstraněno Realtek Ethernet Controller Driver). Další informace: 0x80070005.
Error: (01/13/2020 09:24:07 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Během obnovení systému došlo k nespecifikované chybě: (Installed LogMeIn). Další informace: 0x80070005.
Error: (01/13/2020 09:18:14 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/11/2020 04:01:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: chrome.exe, verze: 79.0.3945.117, časové razítko: 0x5e1392c6
Název chybujícího modulu: chrome_elf.dll, verze: 79.0.3945.117, časové razítko: 0x5e1392c6
Kód výjimky: 0x80000003
Posun chyby: 0x0000000000027bbf
ID chybujícího procesu: 0x1748
Čas spuštění chybující aplikace: 0x01d5c890080c34b6
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.117\chrome_elf.dll
ID zprávy: ae0db520-6cba-40a8-94f4-aabf062f7fff
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/11/2020 02:58:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Název chybujícího modulu: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Kód výjimky: 0xc0000005
Posun chyby: 0x00099d50
ID chybujícího procesu: 0x1358
Čas spuštění chybující aplikace: 0x01d5c887299d097e
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
ID zprávy: 8305dbee-2864-4607-bb0d-739b3e8f71ba
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/11/2020 08:41:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Název chybujícího modulu: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Kód výjimky: 0xc0000005
Posun chyby: 0x00099d50
ID chybujícího procesu: 0x124c
Čas spuštění chybující aplikace: 0x01d5c852872ddb68
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
ID zprávy: e2ad72e0-972d-40be-a205-72f852387271
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/10/2020 06:17:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Název chybujícího modulu: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Kód výjimky: 0xc0000005
Posun chyby: 0x00099d50
ID chybujícího procesu: 0x10a8
Čas spuštění chybující aplikace: 0x01d5c7d9d86c40bf
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
ID zprávy: 6bb6a6b2-0ec7-449d-a253-37b22fb1ba09
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/10/2020 06:16:44 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\Users\norst\Desktop\Radeon\amdcleanuputility.exe ; Popis = AMDCleanupUtility Restore Point; Chyba = 0x8007043c).
System errors:
=============
Error: (01/13/2020 09:27:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AMDRyzenMasterDriver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedenou cestu.
Error: (01/13/2020 09:27:20 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.
Error: (01/13/2020 09:24:36 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-3SL6531)
Description: Server Microsoft.WindowsStore_11912.1001.1.0_x64__8wekyb3d8bbwe!App.AppX65azfy60a5wn91mcvdd3dr2y0wj02n39.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (01/13/2020 09:24:36 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-3SL6531)
Description: Server Microsoft.Windows.Search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppX49we79s9ab0xp8xpjb6t6g31ep03r71y.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (01/13/2020 09:23:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AMDRyzenMasterDriver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedenou cestu.
Error: (01/13/2020 09:23:41 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.
Error: (01/13/2020 09:09:43 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.
Error: (01/13/2020 09:09:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AMDRyzenMasterDriver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedenou cestu.
==================== Memory info ===========================
BIOS: American Megatrends Inc. A.80 07/09/2019
Motherboard: Micro-Star International Co., Ltd B450-A PRO (MS-7B86)
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 59%
Total physical RAM: 8143.17 MB
Available physical RAM: 3294.72 MB
Total Virtual: 18383.17 MB
Available Virtual: 9451.95 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.47 GB) (Free:112.33 GB) NTFS
Drive e: () (Fixed) (Total:44.77 GB) (Free:0.6 GB) NTFS
Drive f: (Nový svazek) (Fixed) (Total:931.5 GB) (Free:690.84 GB) NTFS
\\?\Volume{3f56fba8-0156-4b64-b49c-cf546d53f9e0}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.09 GB) NTFS
\\?\Volume{ff876857-b282-44f1-bf7f-a7826ca06bb5}\ () (Fixed) (Total:0.47 GB) (Free:0.08 GB) NTFS
\\?\Volume{47112dd1-a372-427b-bf08-e369e67013c6}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 111.8 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 2 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
Ran by norst (13-01-2020 09:32:44)
Running from C:\Users\norst\Desktop
Windows 10 Pro Version 2004 19041.1 (X64) (2019-12-27 18:35:59)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1574780382-662587334-3847424838-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1574780382-662587334-3847424838-503 - Limited - Disabled)
Guest (S-1-5-21-1574780382-662587334-3847424838-501 - Limited - Disabled)
norst (S-1-5-21-1574780382-662587334-3847424838-1001 - Administrator - Enabled) => C:\Users\norst
WDAGUtilityAccount (S-1-5-21-1574780382-662587334-3847424838-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AV: COMODO Antivirus (Disabled - Up to date) {05AFA9EE-1ABD-A226-D250-B41671D7635C}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.1.3.26837 - emc, uTorrent.CZ)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 20.1.1 - Advanced Micro Devices, Inc.)
Apex Legends (HKLM-x32\...\{D7FBF176-382D-484E-863A-DFD1124A2A1C}) (Version: 1.0.2.6 - Electronic Arts, Inc.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 24.0.1.143 - Bitdefender)
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 24.0.14.80 - Bitdefender)
Bloody7 (HKLM-x32\...\Bloody3) (Version: 19.11.0010 - Bloody)
Branding64 (HKLM\...\{133E6274-9FD4-4ABD-80A8-2A954E89EAD6}) (Version: 1.00.0002 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
Epic Games Launcher (HKLM-x32\...\{C69A2919-0662-4390-9418-67C931B44C18}) (Version: 1.1.236.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Farming Simulator 19 v.1.4.0.0 (HKLM-x32\...\Farming Simulator 19_is1) (Version: - )
Google Drive (HKLM-x32\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.117 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.1868.0 - Rockstar Games)
Java 8 Update 231 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180231F0}) (Version: 8.0.2310.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{810F1419-7760-402E-8772-B4054FAA2B72}) (Version: 1.0.0.0 - Mojang)
Origin (HKLM-x32\...\Origin) (Version: 10.5.58.36192 - Electronic Arts, Inc.)
Revo Uninstaller Pro 4.2.3 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.2.3 - VS Revo Group, Ltd.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.17.199 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.4.3 - Rockstar Games)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
ToneMaker 1 (HKLM-x32\...\BloodyToneMaker) (Version: 17.10.0006 - Bloody)
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version: - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)
Packages:
=========
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.14.251.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Studios)
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation) [MS Ad]
NcsiUwpApp -> C:\Windows\SystemApps\NcsiUwpApp_8wekyb3d8bbwe [2019-12-27] (Microsoft)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.7.199.0_x64__dt26b99r8h8gj [2020-01-13] (Realtek Semiconductor Corp)
ROBLOX -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.414.44205.0_x86__55nm5eh3cm0pr [2020-01-13] (ROBLOX Corporation)
UDK Package -> C:\Windows\SystemApps\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy [2019-12-27] (Microsoft Corporation)
UX.Client.ST -> C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy [2019-12-27] (Microsoft Windows)
Windows Search -> C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy [2019-12-27] (Microsoft Corporation)
Xbox Insider Hub -> C:\Program Files\WindowsApps\Microsoft.FlightDashboard_462.2001.6001.0_x64__8wekyb3d8bbwe [2020-01-13] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellServiceObjects: OneDrive network states cache SSO -> {78DE489B-7931-4f14-83B4-C56D38AC9FFA} => C:\Windows\System32\Windows.FileExplorer.Common.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)
ShellServiceObjects-x32: OneDrive network states cache SSO -> {78DE489B-7931-4f14-83B4-C56D38AC9FFA} => C:\Windows\SysWOW64\Windows.FileExplorer.Common.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-01-09] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2009-10-22] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2019-11-29 20:41 - 2017-04-17 09:43 - 003852800 ____N () [File not signed] C:\Program Files (x86)\Bloody7\Bloody7\Data\Mouse\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll
2020-01-08 16:15 - 2014-01-10 10:48 - 004260352 _____ () [File not signed] C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\Data\RES\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2020-01-09 09:33 - 2020-01-09 09:33 - 001518592 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\WVR\OpenVR\bin\win64\driver_amdwvr.dll
2019-12-24 18:48 - 2014-03-17 19:15 - 000375296 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMN6PPM.DLL
2019-12-24 18:49 - 2014-03-18 05:00 - 000408576 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMXLMCA.DLL
2020-01-08 10:27 - 2013-08-09 02:02 - 000243200 _____ (C-MEDIA Electronics INC.) [File not signed] C:\Program Files (x86)\BloodyToneMaker\BloodyToneMaker\SDK\x64\Vista\osConfLib.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 001180672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2020-01-09 09:43 - 2020-01-09 09:43 - 006010880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 006345216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 001078272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 004000256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 003802624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000376320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 092323328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 005560832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 000188416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2019-07-18 10:22 - 2019-07-18 10:22 - 002888704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcCtnrSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MsQuic => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NgcCtnrSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NgcSvc => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\norst\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\p8071385.jpg
DNS Servers: 192.168.100.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\...\StartupApproved\Run32: => "IseUI"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1574780382-662587334-3847424838-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{0A36E8A4-F9E0-43F7-AB64-C68FFADB9024}] => (Allow) F:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{1480D245-3058-4DD8-8B50-A1FEB142FFFF}] => (Allow) F:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{DBC87FBA-7781-4BD5-BDF2-5752F25C24BD}] => (Allow) F:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{34C036B1-BB1D-4412-B47D-26FC10C8A866}] => (Allow) F:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4A74CD17-98FE-4155-9630-73A4F9BEEB67}] => (Allow) F:\Steam\steamapps\common\Ravenfield\ravenfield.exe () [File not signed]
FirewallRules: [{C35239F5-9CAF-4E9E-ADB9-2082AF1A2AF7}] => (Allow) F:\Steam\steamapps\common\Ravenfield\ravenfield.exe () [File not signed]
==================== Restore Points =========================
10-01-2020 07:51:53 Removed AMD Ryzen Master SDK.
10-01-2020 18:15:09 Radeon Installer
10-01-2020 18:23:10 Radeon Installer
11-01-2020 15:59:09 Installed LogMeIn
11-01-2020 16:06:24 Removed LogMeIn
11-01-2020 16:07:06 Removed LogMeIn Client
12-01-2020 17:05:37 Odstraněno Realtek Ethernet Controller Driver
13-01-2020 09:17:56 Operace obnovení
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (01/13/2020 09:27:40 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Během obnovení systému došlo k nespecifikované chybě: (Odstraněno Realtek Ethernet Controller Driver). Další informace: 0x80070005.
Error: (01/13/2020 09:24:07 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Během obnovení systému došlo k nespecifikované chybě: (Installed LogMeIn). Další informace: 0x80070005.
Error: (01/13/2020 09:18:14 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]
Error: (01/11/2020 04:01:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: chrome.exe, verze: 79.0.3945.117, časové razítko: 0x5e1392c6
Název chybujícího modulu: chrome_elf.dll, verze: 79.0.3945.117, časové razítko: 0x5e1392c6
Kód výjimky: 0x80000003
Posun chyby: 0x0000000000027bbf
ID chybujícího procesu: 0x1748
Čas spuštění chybující aplikace: 0x01d5c890080c34b6
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.117\chrome_elf.dll
ID zprávy: ae0db520-6cba-40a8-94f4-aabf062f7fff
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/11/2020 02:58:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Název chybujícího modulu: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Kód výjimky: 0xc0000005
Posun chyby: 0x00099d50
ID chybujícího procesu: 0x1358
Čas spuštění chybující aplikace: 0x01d5c887299d097e
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
ID zprávy: 8305dbee-2864-4607-bb0d-739b3e8f71ba
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/11/2020 08:41:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Název chybujícího modulu: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Kód výjimky: 0xc0000005
Posun chyby: 0x00099d50
ID chybujícího procesu: 0x124c
Čas spuštění chybující aplikace: 0x01d5c852872ddb68
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
ID zprávy: e2ad72e0-972d-40be-a205-72f852387271
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/10/2020 06:17:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Název chybujícího modulu: OriginWebHelperService.exe, verze: 10.5.57.35162, časové razítko: 0x5df243e3
Kód výjimky: 0xc0000005
Posun chyby: 0x00099d50
ID chybujícího procesu: 0x10a8
Čas spuštění chybující aplikace: 0x01d5c7d9d86c40bf
Cesta k chybující aplikaci: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Origin\OriginWebHelperService.exe
ID zprávy: 6bb6a6b2-0ec7-449d-a253-37b22fb1ba09
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (01/10/2020 06:16:44 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Vytvoření bodu obnovení se nezdařilo (Proces = C:\Users\norst\Desktop\Radeon\amdcleanuputility.exe ; Popis = AMDCleanupUtility Restore Point; Chyba = 0x8007043c).
System errors:
=============
Error: (01/13/2020 09:27:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AMDRyzenMasterDriver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedenou cestu.
Error: (01/13/2020 09:27:20 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.
Error: (01/13/2020 09:24:36 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-3SL6531)
Description: Server Microsoft.WindowsStore_11912.1001.1.0_x64__8wekyb3d8bbwe!App.AppX65azfy60a5wn91mcvdd3dr2y0wj02n39.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (01/13/2020 09:24:36 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-3SL6531)
Description: Server Microsoft.Windows.Search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppX49we79s9ab0xp8xpjb6t6g31ep03r71y.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (01/13/2020 09:23:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AMDRyzenMasterDriver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedenou cestu.
Error: (01/13/2020 09:23:41 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.
Error: (01/13/2020 09:09:43 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: Při pokusu o načtení souboru místních hostitelů došlo k chybě.
Error: (01/13/2020 09:09:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AMDRyzenMasterDriver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedenou cestu.
==================== Memory info ===========================
BIOS: American Megatrends Inc. A.80 07/09/2019
Motherboard: Micro-Star International Co., Ltd B450-A PRO (MS-7B86)
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 59%
Total physical RAM: 8143.17 MB
Available physical RAM: 3294.72 MB
Total Virtual: 18383.17 MB
Available Virtual: 9451.95 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.47 GB) (Free:112.33 GB) NTFS
Drive e: () (Fixed) (Total:44.77 GB) (Free:0.6 GB) NTFS
Drive f: (Nový svazek) (Fixed) (Total:931.5 GB) (Free:690.84 GB) NTFS
\\?\Volume{3f56fba8-0156-4b64-b49c-cf546d53f9e0}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.09 GB) NTFS
\\?\Volume{ff876857-b282-44f1-bf7f-a7826ca06bb5}\ () (Fixed) (Total:0.47 GB) (Free:0.08 GB) NTFS
\\?\Volume{47112dd1-a372-427b-bf08-e369e67013c6}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 111.8 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 2 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
-
Rudy
- Site Admin
- Příspěvky: 118273
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Divné PC
Zdravím!
Nadpis trochu zavádějící. Co je na tom PC divného? Spusťte tuto utilitu:
Nadpis trochu zavádějící. Co je na tom PC divného? Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Divné PC
Syn hledal nějaké kody a pořad řeší nějaké pytloviny na hry. Snažím se mu něco kupovat,ale sřejmě mu to je málo. Přestalo mi fungovat písmeno na klávesnici vis chyby se "S". Tlačítko je mechanicky v pořádku a dokonce na chvilku funguje,ale jen asi 10s. Počítač není svižný.
Re: Divné PC
# -------------------------------
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build: 12-17-2019
# Database: 2020-01-06.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-13-2020
# Duration: 00:00:01
# OS: Windows 10 Pro
# Cleaned: 9
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\ProgramData\Tencent
Deleted C:\Users\norst\AppData\Local\Tencent
Deleted C:\Users\norst\AppData\Roaming\Tencent
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted C:\Windows\System32\Tasks\DRIVER BOOSTER SKIPUAC (NORST)
***** [ Registry ] *****
Deleted HKCU\Software\csastats
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0E690A82-5787-461C-A6D1-92560FE90C63}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0E690A82-5787-461C-A6D1-92560FE90C63}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DRIVER BOOSTER SKIPUAC (NORST)
Deleted HKLM\Software\Classes\METNSD
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [2071 octets] - [13/01/2020 10:53:30]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build: 12-17-2019
# Database: 2020-01-06.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-13-2020
# Duration: 00:00:01
# OS: Windows 10 Pro
# Cleaned: 9
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\ProgramData\Tencent
Deleted C:\Users\norst\AppData\Local\Tencent
Deleted C:\Users\norst\AppData\Roaming\Tencent
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted C:\Windows\System32\Tasks\DRIVER BOOSTER SKIPUAC (NORST)
***** [ Registry ] *****
Deleted HKCU\Software\csastats
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0E690A82-5787-461C-A6D1-92560FE90C63}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0E690A82-5787-461C-A6D1-92560FE90C63}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DRIVER BOOSTER SKIPUAC (NORST)
Deleted HKLM\Software\Classes\METNSD
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [2071 octets] - [13/01/2020 10:53:30]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
, ale malé nikoli-
Rudy
- Site Admin
- Příspěvky: 118273
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Divné PC
OK. Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?