Dobrý den,
v poslední době se mi stává, že při startu NTB se mi x-krát spustí Q-finder. Nakonec je v oznamovací části třeba 20x spuštěn. Musím ručně povypínat. Zkoušel jsem vypnout, aby se po startu nespouštěl, ale spouští se stále.
Před tím mě to dělal One drive klient. Myslel jsem, že je to chyba v programu a klienta jsem odinstaloval. Po čase začal blbnout Q-finder.
přidávám logy a budu rád za každou radu.
Děkuji
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-01-2020 01
Ran by Jirka (administrator) on JP-TOSH2 (TOSHIBA PORTEGE X30-D) (22-01-2020 17:54:30)
Running from C:\Users\Jirka\Desktop
Loaded Profiles: Jirka (Available Profiles: Jirka)
Platform: Windows 10 Pro Version 1909 18363.592 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Antony Corbett) [File not signed] C:\Program Files (x86)\SoundBox2014\MediaService\SoundBox.MediaJuice.Service.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdtrackersnmh.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcr.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(DEVGURU Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Digital Wave Ltd.) [File not signed] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(DTS, Inc. -> ) C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Huawei Technologies Co.,Ltd. -> ) C:\Program Files (x86)\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co.,Ltd. -> ) C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_a9d116625f58b0a8\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_a9d116625f58b0a8\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_a9d116625f58b0a8\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_a9d116625f58b0a8\IntelCpHeciSvc.exe
(Intel(R) Software Development Products -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_fd0b4b97d35097fa\aesm_service.exe
(Intel(R) Trust Services -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(INTERNET PROJECT LLC -> ) C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
(Lamantine Software a.s. -> Lamantine Software a.s.) C:\Program Files (x86)\Sticky Password\spNMHost.exe
(Lamantine Software a.s. -> Lamantine Software a.s.) C:\Program Files (x86)\Sticky Password\spUIAManager.exe
(Lamantine Software a.s. -> Lamantine Software a.s.) C:\Program Files (x86)\Sticky Password\stpass.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Jirka\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19101.10711.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19101.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(QNAP Systems, Inc. -> ) C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(QNAP Systems, Inc. -> ) C:\Program Files (x86)\QNAP\Qfinder\QfinderPro.exe
(QNAP Systems, Inc. -> QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\Qsync\Qsync.exe
(QNAP Systems, Inc. -> QNAP) C:\Program Files (x86)\QNAP\myQNAPcloud Connect\myQNAPcloudConnect.exe
(QNAP Systems, Inc. -> QNAP) C:\Program Files (x86)\QNAP\myQNAPcloud Connect\NetworkDriveAgent.exe
(QNAP) [File not signed] C:\Program Files\QNAP\QVHelper\QVHelper.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TOSHIBA CLIENT SOLUTIONS CO., LTD. -> Toshiba Client Solutions Co., Ltd.) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd) C:\Program Files\TOSHIBA\System Setting\Hotkey\TCrdKBB.exe
(Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.) C:\Program Files\TOSHIBA\System Setting\TCrdMain_Win8.exe
(Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TStationSrv.exe
(Viber Media S.à r.l. -> Viber Media S.Ã r.l.) C:\Users\Jirka\AppData\Local\Viber\Viber.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [187184 2016-07-18] (Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.)
HKLM\...\Run: [HP LaserJet 200 color MFP M276 Series Fax] => C:\Program Files (x86)\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe [3706424 2014-04-28] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM\...\Run: [TCrdMain] => C:\Program Files\Toshiba\System Setting\TSSlauncher.exe [272352 2017-06-10] (TOSHIBA CLIENT SOLUTIONS CO., LTD. -> Toshiba Client Solutions Co., Ltd.)
HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [456088 2019-10-13] (Bitdefender SRL -> Bitdefender)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [NetworkDriveAgent] => C:\Program Files (x86)\QNAP\myQNAPcloud Connect\NetworkDriveAgent.exe [1743224 2018-09-25] (QNAP Systems, Inc. -> QNAP)
HKLM-x32\...\Run: [QfinderPro] => C:\Program Files (x86)\QNAP\Qfinder\QfinderPro.exe [10130232 2018-12-05] (QNAP Systems, Inc. -> )
HKLM-x32\...\Run: [Qsync] => C:\Program Files (x86)\QNAP\Qsync\Qsync.exe [73438520 2020-01-02] (QNAP Systems, Inc. -> QNAP Systems, Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [204272 2018-09-25] (INTERNET PROJECT LLC -> )
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [47552040 2019-12-22] (Google LLC -> )
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\Run: [StickyPassword] => C:\Program Files (x86)\Sticky Password\stpass.exe [66288 2019-10-09] (Lamantine Software a.s. -> Lamantine Software a.s.)
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\Run: [Spotify] => C:\Users\Jirka\AppData\Roaming\Spotify\Spotify.exe [22202272 2020-01-20] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\Run: [eM Client] => C:\Program Files (x86)\eM Client\MailClient.exe [22625232 2019-10-11] (eM Client, s.r.o. -> eM Client s.r.o.)
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\Run: [Viber] => C:\Users\Jirka\AppData\Local\Viber\Viber.exe [39504456 2020-01-09] (Viber Media S.à r.l. -> Viber Media S.Ã r.l.)
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23867696 2020-01-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30860272 2019-06-18] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {52761519-ee49-11e9-ba59-f8597124b3db} - "E:\Lenovo_Suite.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {5b26448c-2552-11ea-bac0-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {650239c0-f894-11e9-ba6d-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {76f7f962-e46e-11e9-ba4a-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {c9fb2835-e3f4-11e8-b99e-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {d532e4f0-ff99-11e8-b9ab-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {e8158db1-ce11-11e9-ba2b-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-16] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Soundcraft USB Audio Control Panel Autostart.lnk [2019-10-30]
ShortcutTarget: Soundcraft USB Audio Control Panel Autostart.lnk -> C:\Program Files\Harman Pro\Soundcraft\Multi-channel USB Audio\SoundcraftUSBCpl.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {06B43AF0-626B-4A08-9653-5596DB580E7A} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 15.5.99 => C:\Program Files (x86)\Microsoft Visual Studio\2017\Community\Common7\IDE\VSIXAutoUpdate.exe
Task: {0E621E0E-E33F-4D8D-BC22-A7F49683FECD} - System32\Tasks\MyCloudNASConnectAutoStartup => C:\Program Files (x86)\QNAP\myQNAPcloud Connect\myQNAPcloudConnect.exe [9935736 2018-09-25] (QNAP Systems, Inc. -> QNAP)
Task: {12D0BF9A-BCC4-4BC9-A1F1-21C9BDB57346} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [525120 2019-12-18] (Bitdefender SRL -> Bitdefender)
Task: {1ABC16EA-6B92-43FC-B475-257B26F884E9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4360000 2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {1CD2C6F5-5A29-42C2-952B-1328AB94B9EA} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> No File <==== ATTENTION
Task: {28DF967D-0D7F-432A-AB47-F40D05B0AE98} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> No File <==== ATTENTION
Task: {32DE8275-CB80-4334-9157-37A4926D0F3A} - System32\Tasks\iSCSIAgentAutoStartup => C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe [1740088 2018-12-05] (QNAP Systems, Inc. -> )
Task: {337EC18B-B1F8-4EE4-99DB-24C0B571820C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4360000 2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {38C4589A-6909-4C95-BF44-8543C0196221} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> No File <==== ATTENTION
Task: {3C396EF9-9687-44FE-AEE4-A3C7C3538E88} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115448 2020-01-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {3E3571AA-0D0D-47BC-9A99-3A50B452C31C} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [488760 2019-07-15] (Bitdefender SRL -> Bitdefender)
Task: {466AD8FF-2162-48EE-BCBA-352F68CE89BC} - System32\Tasks\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [827856 2017-09-06] (TOSHIBA CLIENT SOLUTIONS CO., LTD. -> Toshiba Client Solutions Co., Ltd.)
Task: {488C4C6E-9005-4200-80DD-68BAC4E02FF1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {56C504DC-01EB-49DA-9C27-575C37674AF0} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1376144 2020-01-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {57642420-BA25-4068-B3D8-243E709E8690} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> No File <==== ATTENTION
Task: {5A8A68F4-8974-41CA-BB6E-F3137460AAFA} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2150120 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {63F3E569-8511-4E68-8361-B1DCF00EE946} - System32\Tasks\G2MUploadTask-S-1-5-21-2580097617-4007673088-3194084131-1001 => C:\Users\Jirka\AppData\Local\GoToMeeting\16474\g2mupload.exe [32256 2020-01-11] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {693C7B41-BB5D-45D0-9550-CE52BE1CFCB9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {71DF9318-1A12-4083-BC68-CB198B014C2A} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40432 2019-06-18] (Garmin International, Inc. -> )
Task: {89B953FE-E9F9-4D68-8CCF-17A2C70ECBD9} - System32\Tasks\G2MUpdateTask-S-1-5-21-2580097617-4007673088-3194084131-1001 => C:\Users\Jirka\AppData\Local\GoToMeeting\16474\g2mupdate.exe [32256 2020-01-11] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {94C0B5C7-8052-4806-94B7-35F5988CD7FD} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService
Task: {95B1D080-17A5-46B9-8F42-D57FC34D43D9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {96B9F977-A0D4-415B-8122-BE611124E4AD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [14614416 2018-11-28] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {9812AEFC-FE2F-468B-94ED-51FFC1F63938} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {9816C2EC-9196-40EC-85F5-D50B7A0909E2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {AEB2C580-5EA9-42AD-821C-DEA1AE3335D2} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {B56770A6-0B1F-44DD-A237-6D44C7EAC759} - System32\Tasks\eM Client Database Backup (S-1-5-21-2580097617-4007673088-3194084131-1001) => C:\Program Files (x86)\eM Client\DbBackup.exe [139728 2019-10-11] (eM Client, s.r.o. -> )
Task: {C8C1A621-F9D7-48C1-AE45-DAF4014ECCE9} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {CAEC9DE1-1AA8-474E-BBE4-7E788D68CC14} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24629104 2020-01-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D62F2E99-E775-4DB0-9F5C-87B2A59080C0} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {D88F3AC4-D58E-4F39-92C5-473D7841819F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24629104 2020-01-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {E259EDC7-C9DF-40DE-BEEF-7A4D87D6E077} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1492960 2017-11-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {F076D55A-72E3-4567-B6C4-06C4F9EB9B27} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1376144 2020-01-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {F10C3648-C742-4CC5-AB26-595CD119CB75} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> No File <==== ATTENTION
Task: {F212A953-4E40-4B30-B6BA-A04D9FF0F171} - System32\Tasks\dts_apo_service_task => C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_task.exe [15288 2017-03-16] (DTS, Inc. -> )
Task: {F5C9594C-339C-4D29-9FAF-53521E1BF4BE} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> No File <==== ATTENTION
Task: {F8E8DD43-1C06-497D-9F53-DF549F8D1CB8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115448 2020-01-18] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2580097617-4007673088-3194084131-1001.job => C:\Users\Jirka\AppData\Local\GoToMeeting\16474\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2580097617-4007673088-3194084131-1001.job => C:\Users\Jirka\AppData\Local\GoToMeeting\16474\g2mupload.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4a2f7be9-6a04-4c0f-af14-aa438e81a2d9}: [NameServer] 93.153.117.49 93.153.117.17
Tcpip\..\Interfaces\{74c2b7d5-6a01-4868-b07a-ec78d5c2e632}: [DhcpNameServer] 192.168.1.21 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{91f60e8d-7a30-45b5-af20-295c787baf5c}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{a17dd845-49d1-43ed-9aef-e45167213c58}: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{c937cc08-9413-4106-88a4-7a76b006b5a9}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=620947&OCID=AVRES000&pc=UE00
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.toshiba.eu/generic/makeitwork
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {30F4BD11-8B52-4BC0-990E-446E81BB6DEF} URL =
BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2019-12-18] (Bitdefender SRL -> Bitdefender)
BHO: Bitdefender - Portmonka -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-18] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2019-12-18] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender - Portmonka -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-18] (Bitdefender SRL -> Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - Bitdefender - Portmonka - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-18] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Bitdefender - Portmonka - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-12-18] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> No Name - {C500C267-63BF-451F-8797-4D720C9A2ED9} - No File
Toolbar: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> Bitdefender - Portmonka - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-12-18] (Bitdefender SRL -> Bitdefender)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\h0tr0tln.default [2018-12-09]
FF Extension: (Sticky Password extension) - C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\h0tr0tln.default\Extensions\{ecb80162-dfbd-4d91-a8da-17b35ba4707a}.xpi [2018-09-05] [UpdateUrl:hxxps://www.stickypassword.com/static/Mozilla/updates.json]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2019-12-18]
FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF Extension: (Bitdefender Anti-tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2019-11-21]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2018-10-29] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-12-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-12-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2018-02-27] (HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. -> )
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.idnes.cz/
CHR Notifications: Default -> hxxps://drive.google.com; hxxps://forum.skodahome.cz; hxxps://www.instagram.com
CHR Profile: C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default [2020-01-22]
CHR DownloadDir: C:\Users\Jirka\Downloads
CHR Extension: (Prezentace) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-03]
CHR Extension: (Rozšíření pro webové stránky - WP Screenshot) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\akgpcdalpfphjmfifkmfbpdmgdmeeaeo [2019-11-28]
CHR Extension: (CacheList) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\amhhdbdhoghppijbjfdkiaconkmfbbpa [2019-09-24]
CHR Extension: (Dokumenty) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-03]
CHR Extension: (Disk Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]
CHR Extension: (DuckDuckGo) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2019-12-13]
CHR Extension: (YouTube) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-11-03]
CHR Extension: (Sticky Password - správce hesel) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2019-10-08]
CHR Extension: (Territory Helper) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfndhkjkblpckipleodmhbomhoceanjb [2018-12-13]
CHR Extension: (Adobe Acrobat) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-09-30]
CHR Extension: (Tabulky) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-03]
CHR Extension: (Page Analytics (by Google)) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnbdnhhicmebfgdgglcdacdapkcihcoh [2017-11-05]
CHR Extension: (Bitdefender Wallet) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2019-12-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-16]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-12-18]
CHR Extension: (Helium Backup) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpglbgbpeobllokpmeagpoagjbfknanl [2019-03-07]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2020-01-16]
CHR Extension: (Skyrama) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlehaidnnmjjkhgbbiombcdifogolhap [2017-11-05]
CHR Extension: (TerritoryHelper - AddOn) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\kelmmbafkjmcbdcmepomfkpmcggakonp [2020-01-07]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2019-11-19]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-11-06]
CHR Extension: (Mapy Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-11-05]
CHR Extension: (Rozšíření Google Keep pro Chrome) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2020-01-16]
CHR Extension: (IDM Integration Module) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-01-14]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-03]
CHR Extension: (Gmail) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-24]
CHR Extension: (Chrome Media Router) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-11]
CHR Profile: C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-01-21]
CHR Profile: C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\System Profile [2019-07-01]
CHR HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AESMService; C:\WINDOWS\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_fd0b4b97d35097fa\aesm_service.exe [716824 2019-09-22] (Intel(R) Software Development Products -> Intel Corporation)
S3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\vpnservice.exe [322432 2019-06-04] (AnchorFree Inc -> AnchorFree Inc.)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-18] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-18] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-03-22] (Bitdefender SRL -> Bitdefender)
R2 BdVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [471120 2019-10-13] (Bitdefender SRL -> Bitdefender)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11164232 2020-01-07] (Microsoft Corporation -> Microsoft Corporation)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [119368 2019-11-14] (Bitdefender SRL -> Bitdefender)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [433664 2018-07-04] (Digital Wave Ltd.) [File not signed]
R3 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [23488 2017-03-16] (DTS, Inc. -> )
S3 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2019-12-25] (Mixbyte Inc -> Freemake)
R2 HWDeviceService64.exe; C:\Program Files (x86)\DatacardService\HWDeviceService64.exe [351888 2016-03-24] (Huawei Technologies Co.,Ltd. -> )
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [530424 2019-08-08] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [758552 2018-03-02] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [719640 2018-03-02] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [682072 2015-07-06] (Huawei Technologies Co.,Ltd. -> )
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21304 2017-09-28] (Microsoft Corporation -> Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [205968 2017-12-03] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2011-04-13] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [66048 2011-04-13] (Hewlett-Packard) [File not signed]
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1291888 2019-07-15] (Bitdefender SRL -> Bitdefender)
R2 QVHelper; C:\Program Files\QNAP\QVHelper\QVHelper.exe [164864 2017-09-22] (QNAP) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324576 2017-11-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SoundBox.MediaJuice.Service; C:\Program Files (x86)\SoundBox2014\MediaService\SoundBox.MediaJuice.Service.exe [43008 2018-05-20] (Antony Corbett) [File not signed]
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182112 2019-08-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-08-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [780328 2019-08-16] (DEVGURU Co., Ltd. -> DEVGURU Co., LTD.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [271328 2019-12-05] (Synaptics Incorporated -> Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12097024 2019-11-06] (TeamViewer GmbH -> TeamViewer Germany GmbH)
S3 ThunderboltService; C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe [2150120 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
R2 TStationSrv; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TStationSrv.exe [229296 2016-12-14] (Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [151656 2019-12-18] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2019-12-18] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3743800 2019-06-24] (Intel Corporation -> Intel® Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-06-15] (AnchorFree Inc -> The OpenVPN Project)
R3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [34416 2017-06-20] (Anvsoft Inc. -> AnvSoft Inc.)
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1693368 2019-11-21] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [739264 2019-11-21] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2019-08-28] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96448 2018-04-27] (Bitdefender SRL -> BitDefender)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [135520 2019-08-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ew_hwusbdev; C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 ew_usbenumfilter; C:\WINDOWS\System32\drivers\ew_usbenumfilter.sys [26368 2017-08-04] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [564112 2019-11-21] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R3 guardian2; C:\WINDOWS\System32\Drivers\oz776x64.sys [117232 2017-07-17] (BayHub Technology Inc. -> O2Micro)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2019-06-03] (Bitdefender SRL -> BitDefender LLC)
R3 honeywell_enum; C:\WINDOWS\System32\drivers\honeywell_enum.sys [106024 2017-09-04] (HONEYWELL INTERNATIONAL INC. -> Jungo)
S3 hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_cdcacm.sys [155136 2017-08-04] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\WINDOWS\System32\drivers\ew_wwanecm.sys [352896 2017-08-04] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [731640 2019-08-08] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R2 Ignis; C:\WINDOWS\System32\DRIVERS\ignis.sys [196392 2019-08-28] (Bitdefender SRL -> Bitdefender)
R3 Netwtw06; C:\WINDOWS\system32\DRIVERS\Netwtw06.sys [8831488 2019-08-27] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R2 NPF; C:\Program Files\iVMS-4200 Station\iVMS-4200\iVMS-4200 Client\npf64.sys [36600 2018-06-02] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S3 pmxdrv; C:\WINDOWS\system32\drivers\pmxdrv.sys [31152 2019-04-09] (PAIPTAC Driver -> )
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [779232 2016-08-05] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
S3 rtux64w10; C:\WINDOWS\System32\drivers\rtux64w10.sys [420808 2018-01-29] (Realtek Semiconductor Corp. -> Realtek Corporation )
S3 SGXEPC; C:\WINDOWS\System32\drivers\sgx_driver.sys [52824 2016-10-16] (Intel Corporation -> Windows (R) Win 7 DDK provider)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [47576 2019-12-05] (Synaptics Incorporated -> Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166752 2019-08-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43360 2019-08-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [44952 2017-04-27] (Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [610640 2019-03-04] (Bitdefender SRL -> Bitdefender)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-01-22 17:54 - 2020-01-22 17:55 - 000050260 _____ C:\Users\Jirka\Desktop\FRST.txt
2020-01-22 17:53 - 2020-01-22 17:54 - 000000000 ____D C:\FRST
2020-01-22 17:52 - 2020-01-22 17:52 - 002580480 _____ (Farbar) C:\Users\Jirka\Desktop\FRST64.exe
2020-01-22 17:21 - 2020-01-22 17:21 - 000000000 ___HD C:\OneDriveTemp
2020-01-22 11:26 - 2020-01-22 11:26 - 000042258 _____ C:\Users\Jirka\Downloads\Úklid sálu Království 2020 2_3.pdf
2020-01-21 22:56 - 2020-01-21 22:57 - 034947160 _____ C:\Users\Jirka\Desktop\C0065 (1).mp4
2020-01-21 22:51 - 2020-01-21 22:53 - 012293089 _____ C:\Users\Jirka\Desktop\C0065u1.mp4
2020-01-21 22:49 - 2020-01-17 22:03 - 565890581 _____ C:\Users\Jirka\Desktop\C0065.MP4
2020-01-21 22:07 - 2020-01-21 22:08 - 000000268 _____ C:\Users\Jirka\Desktop\Nový textový dokument (2).txt
2020-01-21 09:23 - 2020-01-21 09:23 - 000263825 _____ C:\Users\Jirka\Desktop\Weleda-TopAkce-15SF.zip
2020-01-21 08:49 - 2020-01-21 08:49 - 000001368 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2020-01-21 08:49 - 2020-01-21 08:49 - 000001368 _____ C:\ProgramData\Desktop\Freemake Video Converter.lnk
2020-01-21 08:49 - 2020-01-21 08:49 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2020-01-21 08:49 - 2020-01-21 08:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2020-01-21 08:41 - 2020-01-21 08:42 - 000000000 ____D C:\Users\Jirka\Desktop\Freemake Video Converter Gold 4.1.10.106 Final CZ+SK+HU
2020-01-20 22:07 - 2020-01-20 22:08 - 141043635 _____ C:\Users\Jirka\Downloads\2020-01-04-so_přenos.zip
2020-01-20 20:48 - 2020-01-20 20:54 - 112685038 _____ C:\Users\Jirka\Downloads\Freemake Video Converter Gold 4.1.10.106 Final CZ+SK+HU.rar
2020-01-20 20:44 - 2020-01-20 20:45 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\system32
2020-01-20 20:44 - 2020-01-20 20:45 - 000000000 ____D C:\Users\Jirka\AppData\Local\system32
2020-01-20 20:42 - 2020-01-21 08:42 - 000000000 ____D C:\Users\Jirka\Downloads\AAA
2020-01-20 19:33 - 2020-01-20 19:33 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Google.Apis.Auth
2020-01-20 19:31 - 2020-01-21 08:49 - 000000000 ____D C:\Program Files (x86)\Freemake
2020-01-20 19:31 - 2020-01-20 19:31 - 000000000 ____D C:\Users\Jirka\Documents\Freemake
2020-01-20 19:31 - 2020-01-20 19:31 - 000000000 ____D C:\Users\Jirka\AppData\Local\FreemakeVideoConverter
2020-01-20 19:31 - 2020-01-20 19:31 - 000000000 ____D C:\ProgramData\Freemake
2020-01-20 18:52 - 2020-01-17 22:03 - 565890581 _____ C:\Users\Jirka\Downloads\C0065b.MP4
2020-01-20 18:36 - 2020-01-20 18:37 - 054918949 _____ C:\Users\Jirka\Downloads\jwb_B_202001_02_r720P.mp4
2020-01-20 18:36 - 2020-01-20 18:36 - 029355704 _____ C:\Users\Jirka\Downloads\jwb_B_202001_02_r480P.mp4
2020-01-20 12:36 - 2020-01-20 12:36 - 000001197 _____ C:\Users\Public\Desktop\Free Video Compressor.lnk
2020-01-20 12:36 - 2020-01-20 12:36 - 000001197 _____ C:\ProgramData\Desktop\Free Video Compressor.lnk
2020-01-20 12:36 - 2020-01-20 12:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Compressor
2020-01-20 12:36 - 2020-01-20 12:36 - 000000000 ____D C:\Program Files (x86)\Free Video Compressor
2020-01-20 12:31 - 2020-01-20 12:31 - 000001332 _____ C:\Users\Jirka\Desktop\Any Video Converter Ultimate.lnk
2020-01-20 12:31 - 2020-01-20 12:31 - 000000000 ____D C:\Users\Jirka\Documents\Any Video Converter Ultimate
2020-01-20 12:31 - 2020-01-20 12:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
2020-01-20 12:30 - 2020-01-20 12:31 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Anvsoft
2020-01-20 12:30 - 2020-01-20 12:30 - 000000000 ____D C:\Program Files (x86)\Anvsoft
2020-01-20 12:30 - 2017-06-20 11:38 - 000034416 _____ (AnvSoft Inc.) C:\WINDOWS\system32\Drivers\anvsnddrv.sys
2020-01-20 12:29 - 2020-01-20 12:29 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Wondershare
2020-01-20 12:29 - 2020-01-20 12:29 - 000000000 ____D C:\ProgramData\ProductFeatures
2020-01-20 12:25 - 2020-01-20 12:29 - 000000000 ____D C:\ProgramData\Wondershare
2020-01-20 12:25 - 2020-01-20 12:25 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-01-20 12:25 - 2020-01-20 12:25 - 000000000 ____D C:\Users\Jirka\AppData\Local\Wondershare
2020-01-20 12:25 - 2020-01-20 12:25 - 000000000 ____D C:\ProgramData\Documents\Wondershare
2020-01-20 12:25 - 2020-01-20 12:25 - 000000000 ____D C:\AllMyTube Recorded
2020-01-20 12:25 - 2020-01-20 12:25 - 000000000 ____D C:\AllMyTube Downloaded
2020-01-20 12:25 - 2020-01-20 12:25 - 000000000 ____D C:\AllMyTube Converted
2020-01-20 08:12 - 2020-01-21 15:39 - 000000000 ____D C:\Users\Jirka\AppData\Local\CrashDumps
2020-01-19 23:40 - 2020-01-19 23:40 - 000000000 ____D C:\Users\Public\Documents\Blackmagic Design
2020-01-19 23:40 - 2020-01-19 23:40 - 000000000 ____D C:\Users\Jirka\Documents\Blackmagic Design
2020-01-19 23:40 - 2020-01-19 23:40 - 000000000 ____D C:\ProgramData\Documents\Blackmagic Design
2020-01-19 22:45 - 2020-01-19 22:45 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Blackmagic Design
2020-01-19 22:22 - 2020-01-19 22:22 - 000002016 _____ C:\Users\Jirka\Desktop\DaVinci Resolve Project Server.lnk
2020-01-19 22:22 - 2020-01-19 22:22 - 000001996 _____ C:\Users\Jirka\Desktop\Resolve.lnk
2020-01-19 22:21 - 2020-01-19 22:22 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2020-01-19 22:21 - 2020-01-19 22:21 - 000000000 ____D C:\ProgramData\Blackmagic Design
2020-01-19 22:21 - 2020-01-19 22:21 - 000000000 ____D C:\Program Files\Blackmagic Design
2020-01-19 22:05 - 2020-01-19 22:26 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2020-01-19 22:05 - 2020-01-19 22:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2020-01-19 21:58 - 2020-01-19 22:02 - 1396976354 _____ C:\Users\Jirka\Downloads\DaVinci_Resolve_16.1.2_Windows.zip
2020-01-18 21:52 - 2020-01-18 21:53 - 061756336 _____ (QNAP SYSTEMS, INC.) C:\Users\Jirka\Downloads\QNAPQsyncClientWindows-4.3.9.1302.exe
2020-01-17 12:41 - 2020-01-17 12:41 - 000000000 ____D C:\Users\Jirka\Desktop\alpik z mailu
2020-01-17 12:34 - 2020-01-17 12:35 - 361588142 _____ C:\Users\Jirka\Downloads\alpik_webdesign-eshop_navrh-c1_20191009 (1).pdf
2020-01-16 23:39 - 2020-01-16 23:53 - 1753365278 _____ C:\Users\Jirka\Downloads\bDIBrvqGBqk0bBgnfHlW0i5qcWx6UfACY2r5hFsgtMs3vwAOxW5OxkBjI15kX3PnODrNXUD9E0tOrll3oVS1_1_fle.mp4
2020-01-16 23:39 - 2020-01-16 23:40 - 083352033 _____ C:\Users\Jirka\Downloads\bDIBrvqGBqk0bBgnfHlW0i5qcWx6UfACY2r5hFsgtMs3vwAOxW5OxkBjI15kX3PnODrNXUD9E0tOrll3oVS1_6_fle.mp4
2020-01-16 14:42 - 2020-01-17 13:01 - 000000000 ____D C:\Users\Jirka\Desktop\Alpik- NEW z OOO
2020-01-16 14:31 - 2020-01-16 14:32 - 361588142 _____ C:\Users\Jirka\Downloads\alpik_webdesign-eshop_navrh-c1_20191009.pdf
2020-01-16 08:35 - 2020-01-16 08:35 - 000751426 _____ C:\Users\Jirka\Downloads\WINTMCZ.zip
2020-01-16 08:35 - 2020-01-16 08:35 - 000260251 _____ C:\Users\Jirka\Downloads\proslovy 2_2020.pdf
2020-01-15 19:37 - 2020-01-15 19:37 - 000143319 _____ C:\Users\Jirka\Downloads\S-61-B (4).pdf
2020-01-15 19:35 - 2020-01-15 19:35 - 000259534 _____ C:\Users\Jirka\Downloads\Potvrzení o přijetí peněz za 12-2019 (1).pdf
2020-01-15 14:53 - 2020-01-15 14:53 - 000038997 _____ C:\Users\Jirka\Downloads\platba Fosfa.pdf
2020-01-15 13:53 - 2020-01-15 13:53 - 000412508 _____ C:\Users\Jirka\Desktop\půdorys.pdf
2020-01-15 11:06 - 2019-10-14 02:32 - 001082880 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 001082880 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000940544 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000940544 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000853752 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-01-15 11:06 - 2019-10-14 02:32 - 000853752 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-01-15 11:06 - 2019-10-14 02:32 - 000711424 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-01-15 11:06 - 2019-10-14 02:32 - 000711424 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-01-15 11:06 - 2019-10-14 02:32 - 000212664 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000184344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000168984 _____ C:\WINDOWS\SysWOW64\libGLESv2.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000141824 _____ C:\WINDOWS\SysWOW64\libGLESv1_CM.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000136704 _____ C:\WINDOWS\SysWOW64\libEGL.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000121344 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-01-15 11:06 - 2019-10-14 02:32 - 000108032 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-01-15 11:06 - 2019-10-14 02:31 - 000284464 _____ C:\WINDOWS\system32\igfxCPL.cpl
2020-01-15 10:55 - 2020-01-15 10:55 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 022627840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 018020352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 009928208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 008012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 007016448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 006520480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 005913600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 003729408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 002870784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 002801152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 002494464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 002473976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001985928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001610752 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001399096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 001330952 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001106944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001072952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 001051664 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 001020032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000689664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000678712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000571392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 000542496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000432256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000363840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000162696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tsusbhub.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000127520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000089536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2020-01-15 10:55 - 2020-01-15 10:55 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serscan.sys
2020-01-15 10:55 - 2020-01-15 10:55 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-01-15 10:55 - 2020-01-15 10:55 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-01-15 10:49 - 2019-12-10 06:15 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-01-15 10:49 - 2019-12-10 05:59 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-01-14 13:23 - 2020-01-14 13:23 - 000039257 _____ C:\Users\Jirka\Downloads\Potvrzení platby 1987.pdf
2020-01-14 10:30 - 2020-01-14 10:30 - 000000000 ____D C:\Users\Jirka\AppData\Local\Viber
2020-01-13 19:02 - 2020-01-13 19:02 - 000028448 _____ C:\Users\Jirka\Desktop\Skupina3_prosinec_2019.t19
2020-01-13 18:47 - 2020-01-13 18:47 - 000259534 _____ C:\Users\Jirka\Downloads\Potvrzení o přijetí peněz za 12-2019.pdf
2020-01-12 15:05 - 2020-01-12 15:05 - 000130131 _____ C:\Users\Jirka\Downloads\Městský obvod 37.pdf
2020-01-12 14:58 - 2020-01-12 14:58 - 000329131 _____ C:\Users\Jirka\Downloads\Městský 37.pdf
2020-01-11 16:04 - 2020-01-11 16:04 - 002435029 _____ C:\Users\Jirka\Downloads\Gmail.zip
2020-01-09 09:44 - 2020-01-09 09:44 - 000010393 _____ C:\Users\Jirka\Desktop\Nové šampony Natura Siberica.xlsx
2020-01-09 08:35 - 2020-01-09 08:35 - 000040828 _____ C:\Users\Jirka\Downloads\RCO-20191030a-B.pdf
2020-01-09 08:34 - 2020-01-09 08:34 - 000035631 _____ C:\Users\Jirka\Downloads\RCO-20191030-B.pdf
2020-01-09 08:31 - 2020-01-09 08:31 - 000104710 _____ C:\Users\Jirka\Downloads\Letter to the comitee 200105.pdf
2020-01-09 08:31 - 2020-01-09 08:31 - 000050354 _____ C:\Users\Jirka\Downloads\Reinstatement letter from Arsen Babajan.pdf
2020-01-09 08:28 - 2020-01-09 08:28 - 000320707 _____ C:\Users\Jirka\Downloads\2020 Pozvánka na školení PO a BOZP_SK Poruba.pdf
2020-01-09 08:28 - 2020-01-09 08:28 - 000112050 _____ C:\Users\Jirka\Downloads\Vzor.pdf
2020-01-09 08:28 - 2020-01-09 08:28 - 000087442 _____ C:\Users\Jirka\Downloads\Záznam o provedeném školení o požární ochraně a BOZP.pdf
2020-01-09 08:26 - 2020-01-09 08:26 - 000043651 _____ C:\Users\Jirka\Downloads\Zápis z RS 22.11.2019 (1).pdf
2020-01-09 08:19 - 2020-01-09 08:19 - 000032431 _____ C:\Users\Jirka\Downloads\S-205b-B-2up.pdf
2020-01-09 00:14 - 2020-01-09 00:14 - 000014329 _____ C:\Users\Jirka\AppData\Local\recently-used.xbel
2020-01-08 14:10 - 2020-01-08 14:10 - 000636830 _____ C:\Users\Jirka\Desktop\stryczkova.pdf
2020-01-08 11:14 - 2020-01-08 11:14 - 000594410 _____ C:\Users\Jirka\Downloads\S-302_Oznámení o návštěvě KD (3).pdf
2020-01-07 22:44 - 2020-01-07 22:44 - 000005453 _____ C:\Users\Jirka\Desktop\vítkov.ods
2020-01-07 10:36 - 2020-01-07 10:51 - 000000000 ____D C:\Users\Jirka\Desktop\zimní péče 2020
2020-01-06 19:39 - 2020-01-06 19:39 - 000024712 _____ C:\Users\Jirka\Desktop\Skupina2_prosinec_2019.t19
2020-01-06 18:56 - 2020-01-06 18:56 - 000290818 _____ C:\Users\Jirka\Downloads\Verification_of_Congregation_Person_Records-B (1).pdf
2020-01-06 13:11 - 2020-01-06 13:11 - 000575552 _____ C:\Users\Jirka\Desktop\Čištění Tepurem- návod.pdf
2020-01-06 13:10 - 2020-01-06 13:10 - 000216034 _____ C:\Users\Jirka\Desktop\bezpecnostni_list Tepur.pdf
2020-01-06 12:15 - 2020-01-06 12:15 - 000000000 ____D C:\Users\Jirka\Desktop\milan
2020-01-06 12:12 - 2020-01-06 12:12 - 000011281 _____ C:\Users\Jirka\Desktop\Správné EANy -DE AOC.xlsx
2020-01-05 19:42 - 2020-01-05 19:42 - 000026776 _____ C:\Users\Jirka\Desktop\Skupina1_prosinec_2019.t19
2020-01-04 21:10 - 2020-01-04 21:10 - 000108486 _____ C:\Users\Jirka\Downloads\Tsxcz.zip
2020-01-04 21:08 - 2020-01-04 21:09 - 000000117 _____ C:\Users\Jirka\Downloads\Tsxcz.ini
2020-01-04 21:07 - 2020-01-04 21:07 - 000222248 _____ (John El Self) C:\Users\Jirka\Downloads\Tsxcz.exe
2020-01-03 10:05 - 2020-01-03 10:05 - 001178432 _____ C:\Users\Jirka\Desktop\MilujuBio 11700117.pdf
2020-01-02 12:48 - 2020-01-02 12:48 - 000012737 _____ C:\Users\Jirka\Downloads\Delegáti zvlaštní sjezd 2020 Ostrava Poruba střed.xlsx
2020-01-02 12:39 - 2020-01-02 12:39 - 000589357 _____ C:\Users\Jirka\Downloads\Seznam_doporučených_ubytovacích_zařízení_PRAHA_2020 (1).pdf
2020-01-02 12:39 - 2020-01-02 12:39 - 000266341 _____ C:\Users\Jirka\Downloads\CO-39-B (2).pdf
2020-01-02 10:51 - 2020-01-02 10:51 - 000620938 _____ C:\Users\Jirka\Desktop\Voucher #1015e - 1000,- Kč Alpik.cz .pdf
2020-01-02 10:09 - 2020-01-02 10:09 - 000036162 _____ C:\Users\Jirka\Downloads\CONG-20200101-B (1).pdf
2020-01-02 10:08 - 2020-01-02 10:08 - 000386563 _____ C:\Users\Jirka\Downloads\S-52-B.pdf
2020-01-02 10:08 - 2020-01-02 10:08 - 000298881 _____ C:\Users\Jirka\Downloads\S-135-B (2).pdf
2020-01-02 10:07 - 2020-01-02 10:07 - 000589357 _____ C:\Users\Jirka\Downloads\Seznam_doporučených_ubytovacích_zařízení_PRAHA_2020.pdf
2020-01-02 10:07 - 2020-01-02 10:07 - 000266341 _____ C:\Users\Jirka\Downloads\CO-39-B (1).pdf
2020-01-02 10:01 - 2020-01-02 10:01 - 000572809 _____ C:\Users\Jirka\Downloads\S-147-20.01-B-Cz.pdf
2020-01-02 10:01 - 2020-01-02 10:01 - 000290818 _____ C:\Users\Jirka\Downloads\Verification_of_Congregation_Person_Records-B.pdf
2020-01-01 20:15 - 2020-01-01 20:15 - 000000000 ____D C:\Users\Public\Documents\Steam
2020-01-01 20:15 - 2020-01-01 20:15 - 000000000 ____D C:\ProgramData\Documents\Steam
2020-01-01 20:14 - 2020-01-01 20:14 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Promotion Software GmbH
2020-01-01 20:13 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2020-01-01 20:13 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2020-01-01 20:13 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2020-01-01 20:13 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2020-01-01 20:13 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2020-01-01 20:13 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2020-01-01 20:13 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2020-01-01 20:13 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2020-01-01 20:13 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2020-01-01 20:13 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2020-01-01 20:13 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2020-01-01 20:13 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2020-01-01 20:13 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2020-01-01 20:13 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2020-01-01 20:13 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2020-01-01 20:13 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2020-01-01 20:13 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2020-01-01 20:13 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2020-01-01 20:13 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2020-01-01 20:13 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2020-01-01 20:13 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2020-01-01 20:13 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2020-01-01 20:13 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2020-01-01 20:13 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2020-01-01 20:13 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2020-01-01 20:13 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2020-01-01 20:13 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2020-01-01 20:13 - 2008-10-10 04:52 - 005631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2020-01-01 20:13 - 2008-10-10 04:52 - 004379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2020-01-01 20:13 - 2008-10-10 04:52 - 002605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2020-01-01 20:13 - 2008-10-10 04:52 - 002036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2020-01-01 20:13 - 2008-10-10 04:52 - 000519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2020-01-01 20:13 - 2008-10-10 04:52 - 000452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2020-01-01 20:13 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2020-01-01 20:13 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2020-01-01 20:13 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2020-01-01 20:13 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2020-01-01 20:13 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2020-01-01 20:13 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2020-01-01 20:13 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2020-01-01 20:13 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2020-01-01 20:13 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2020-01-01 20:13 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2020-01-01 20:13 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2020-01-01 20:13 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2020-01-01 20:13 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2020-01-01 20:13 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2020-01-01 20:13 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2020-01-01 20:13 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2020-01-01 20:13 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2020-01-01 20:13 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2020-01-01 20:13 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2020-01-01 20:13 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2020-01-01 20:13 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2020-01-01 20:13 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2020-01-01 20:13 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2020-01-01 20:13 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2020-01-01 20:13 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2020-01-01 20:13 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2020-01-01 20:13 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2020-01-01 20:13 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2020-01-01 20:13 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2020-01-01 20:13 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2020-01-01 20:13 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2020-01-01 20:13 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2020-01-01 20:13 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2020-01-01 20:13 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2020-01-01 20:13 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2020-01-01 20:13 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2020-01-01 20:13 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2020-01-01 20:13 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2020-01-01 20:13 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2020-01-01 20:13 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2020-01-01 20:13 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2020-01-01 20:13 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2020-01-01 20:13 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2020-01-01 20:13 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2020-01-01 20:13 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2020-01-01 20:13 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2020-01-01 20:13 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2020-01-01 20:13 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2020-01-01 20:13 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2020-01-01 20:13 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2020-01-01 20:13 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2020-01-01 20:13 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2020-01-01 20:13 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2020-01-01 20:13 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2020-01-01 20:13 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2020-01-01 20:13 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2020-01-01 20:13 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2020-01-01 20:13 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2020-01-01 20:13 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2020-01-01 20:13 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2020-01-01 20:13 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2020-01-01 20:13 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2020-01-01 20:13 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2020-01-01 20:13 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2020-01-01 20:13 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2020-01-01 20:13 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2020-01-01 20:13 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2020-01-01 20:13 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2020-01-01 20:13 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2020-01-01 20:13 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2020-01-01 20:13 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2020-01-01 20:13 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2020-01-01 20:13 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2020-01-01 20:13 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2020-01-01 20:13 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2020-01-01 20:13 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2020-01-01 20:13 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2020-01-01 20:13 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2020-01-01 20:13 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2020-01-01 20:13 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2020-01-01 20:13 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2020-01-01 20:13 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2020-01-01 20:13 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2020-01-01 20:13 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2020-01-01 20:13 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2020-01-01 20:13 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2020-01-01 20:13 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2020-01-01 20:13 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2020-01-01 20:13 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2020-01-01 20:13 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2020-01-01 20:13 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2020-01-01 20:13 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2020-01-01 20:13 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2020-01-01 20:13 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2020-01-01 20:13 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2020-01-01 20:13 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2020-01-01 20:13 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2020-01-01 20:13 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2020-01-01 20:13 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2020-01-01 20:13 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2020-01-01 20:13 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2020-01-01 20:13 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2020-01-01 20:13 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2020-01-01 20:13 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2020-01-01 20:13 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2020-01-01 20:13 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2020-01-01 20:13 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2020-01-01 20:13 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2020-01-01 20:13 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2020-01-01 20:13 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2020-01-01 20:13 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2020-01-01 20:13 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2020-01-01 20:13 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2020-01-01 20:13 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2020-01-01 20:12 - 2020-01-01 20:13 - 000000000 ___HD C:\WINDOWS\msdownld.tmp
2020-01-01 20:12 - 2020-01-01 20:13 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2020-01-01 20:01 - 2020-01-01 20:01 - 000001525 _____ C:\Users\Public\Desktop\Emergency 20.lnk
2020-01-01 20:01 - 2020-01-01 20:01 - 000001525 _____ C:\ProgramData\Desktop\Emergency 20.lnk
2020-01-01 20:01 - 2020-01-01 20:01 - 000000000 ____D C:\Games
2020-01-01 13:25 - 2020-01-01 13:25 - 000266341 _____ C:\Users\Jirka\Downloads\CO-39-B.pdf
2020-01-01 13:24 - 2020-01-01 13:24 - 000336159 _____ C:\Users\Jirka\Downloads\A-149-B.pdf
2020-01-01 13:21 - 2020-01-01 13:21 - 000036162 _____ C:\Users\Jirka\Downloads\CONG-20200101-B.pdf
2019-12-28 15:51 - 2019-12-28 15:51 - 000276911 _____ C:\Users\Jirka\Downloads\BOE-20191210-V.pdf
2019-12-26 14:49 - 2019-12-26 14:49 - 000298693 _____ C:\Users\Jirka\Downloads\S-147-19.12-B-Cz (1).pdf
2019-12-26 11:15 - 2019-12-26 11:15 - 000036335 _____ C:\Users\Jirka\Downloads\lma19.12-B (1).pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-01-22 17:53 - 2019-04-17 10:04 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\eM Client
2020-01-22 17:47 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-01-22 17:21 - 2017-11-03 13:50 - 000000000 ___RD C:\Users\Jirka\OneDrive
2020-01-22 17:19 - 2019-08-14 23:33 - 001693640 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-01-22 17:19 - 2019-03-19 12:57 - 000718198 _____ C:\WINDOWS\system32\perfh005.dat
2020-01-22 17:19 - 2019-03-19 12:57 - 000145242 _____ C:\WINDOWS\system32\perfc005.dat
2020-01-22 17:19 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2020-01-22 17:15 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-01-22 17:15 - 2017-11-06 12:57 - 000000000 ___RD C:\Users\Jirka\Disk Google
2020-01-22 17:14 - 2017-11-07 09:02 - 000000000 ___RD C:\Users\Jirka\Qsync
2020-01-22 17:13 - 2019-08-14 23:33 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-01-22 17:13 - 2017-11-07 10:58 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-01-22 17:13 - 2017-11-03 13:48 - 000000000 __SHD C:\Users\Jirka\IntelGraphicsProfiles
2020-01-22 15:46 - 2019-03-19 05:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2020-01-22 15:46 - 2017-11-06 15:19 - 000002348 ____H C:\Users\Jirka\Documents\Default.rdp
2020-01-22 15:33 - 2018-02-02 10:07 - 000000000 ___SD C:\Users\Jirka\Documents\Sticky Passwords
2020-01-22 14:44 - 2019-08-14 23:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-01-22 14:22 - 2017-11-05 22:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-01-22 14:10 - 2019-11-27 13:53 - 000000000 ____D C:\Users\Jirka\AppData\Local\GoToMeeting
2020-01-22 13:27 - 2018-02-27 14:05 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\Spotify
2020-01-22 09:21 - 2018-02-27 14:05 - 000000000 ____D C:\Users\Jirka\AppData\Local\Spotify
2020-01-22 09:20 - 2017-11-04 20:17 - 000000000 ____D C:\Users\Jirka\Desktop\apss
2020-01-22 08:06 - 2019-03-19 05:37 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2020-01-21 23:13 - 2017-11-04 20:25 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\vlc
2020-01-21 22:11 - 2017-11-04 08:09 - 000000000 ____D C:\Users\Jirka\AppData\Local\Packages
2020-01-21 11:39 - 2019-11-27 11:24 - 000000000 ____D C:\EXPORT
2020-01-20 13:48 - 2018-10-04 11:58 - 000000000 ____D C:\Users\Jirka\Documents\ViberDownloads
2020-01-18 23:55 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-01-18 21:54 - 2017-11-22 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QNAP
2020-01-18 21:54 - 2017-05-19 14:34 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-01-18 21:53 - 2017-11-06 10:07 - 000000000 ____D C:\Users\Jirka\AppData\Local\QNAP
2020-01-16 21:48 - 2017-11-03 23:09 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-16 09:24 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-01-15 17:42 - 2019-08-14 23:24 - 000529792 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-01-15 17:41 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\UNP
2020-01-15 17:41 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-01-15 17:41 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-01-15 17:41 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-01-15 14:53 - 2019-08-14 23:33 - 000003366 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2580097617-4007673088-3194084131-1001
2020-01-15 14:53 - 2019-08-14 23:27 - 000002376 _____ C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-01-15 11:07 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-01-15 11:07 - 2017-05-19 14:18 - 000000000 ____D C:\ProgramData\Intel
2020-01-15 11:01 - 2017-11-03 20:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-01-15 10:57 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-01-15 10:57 - 2017-11-03 20:13 - 120202352 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-01-14 11:38 - 2018-10-04 11:58 - 000000000 ____D C:\Users\Jirka\AppData\Roaming\ViberPC
2020-01-12 01:41 - 2019-11-27 13:53 - 000000652 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2580097617-4007673088-3194084131-1001.job
2020-01-12 01:41 - 2019-11-27 13:53 - 000000556 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2580097617-4007673088-3194084131-1001.job
2020-01-11 15:29 - 2019-11-27 13:53 - 000003808 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-2580097617-4007673088-3194084131-1001
2020-01-11 15:29 - 2019-11-27 13:53 - 000003712 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-2580097617-4007673088-3194084131-1001
2020-01-10 15:33 - 2017-11-07 09:08 - 000007658 _____ C:\Users\Jirka\AppData\Local\Resmon.ResmonCfg
2020-01-09 00:14 - 2017-12-09 17:20 - 000000000 ____D C:\Users\Jirka\.gimp-2.8
2020-01-09 00:13 - 2017-12-10 13:19 - 000000000 ____D C:\Users\Jirka\AppData\Local\gtk-2.0
2020-01-08 13:32 - 2019-08-14 23:27 - 000000000 ____D C:\Users\Jirka
2020-01-04 10:58 - 2019-08-14 23:33 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-01-03 14:56 - 2017-11-13 09:50 - 000064825 _____ C:\Users\Jirka\Desktop\tržby.xlsx
2020-01-02 08:37 - 2017-11-21 10:30 - 000000000 ____D C:\Users\Jirka\AppData\Local\ElevatedDiagnostics
2020-01-01 18:36 - 2019-11-05 20:02 - 000000000 ____D C:\Users\Jirka\Desktop\nová grafika
==================== Files in the root of some directories ========
2018-10-13 20:45 - 2018-12-02 14:11 - 000000779 _____ () C:\Users\Jirka\AppData\Roaming\buttrc
2018-03-19 07:47 - 2019-01-03 13:30 - 000000058 _____ () C:\Users\Jirka\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2020-01-09 00:14 - 2020-01-09 00:14 - 000014329 _____ () C:\Users\Jirka\AppData\Local\recently-used.xbel
2017-11-07 09:08 - 2020-01-10 15:33 - 000007658 _____ () C:\Users\Jirka\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Win10 - při startu zapne x-krát nějaký program na pozadí
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Win10 - při startu zapne x-krát nějaký program na pozadí
- Přílohy
-
- FRST + Addition.zip
- (35.83 KiB) Staženo 69 x
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
# -------------------------------
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build: 12-17-2019
# Database: 2020-01-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-22-2020
# Duration: 00:00:01
# OS: Windows 10 Pro
# Cleaned: 8
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Seznam.cz
Deleted C:\ProgramData\Solvusoft
Deleted C:\Users\Jirka\AppData\Roaming\Seznam.cz
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\Seznam.cz
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|ProductUpdater
***** [ Chromium (and derivatives) ] *****
Deleted Seznam pro Chrome - Email
Deleted Seznam pro Chrome - Esko
Deleted gkcefkcdkepgkpbgncjchhbjgoanleod
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [3632 octets] - [22/01/2020 19:10:36]
AdwCleaner[S01].txt - [3693 octets] - [22/01/2020 19:14:42]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build: 12-17-2019
# Database: 2020-01-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-22-2020
# Duration: 00:00:01
# OS: Windows 10 Pro
# Cleaned: 8
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Seznam.cz
Deleted C:\ProgramData\Solvusoft
Deleted C:\Users\Jirka\AppData\Roaming\Seznam.cz
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\Seznam.cz
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|ProductUpdater
***** [ Chromium (and derivatives) ] *****
Deleted Seznam pro Chrome - Email
Deleted Seznam pro Chrome - Esko
Deleted gkcefkcdkepgkpbgncjchhbjgoanleod
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [3632 octets] - [22/01/2020 19:10:36]
AdwCleaner[S01].txt - [3693 octets] - [22/01/2020 19:14:42]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
V příloze.
Po restartu se stále načítá v několika procesech Q finder, tedy beze změny.
Po restartu se stále načítá v několika procesech Q finder, tedy beze změny.
- Přílohy
-
- FRST + Addition 2.zip
- (35.8 KiB) Staženo 57 x
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {52761519-ee49-11e9-ba59-f8597124b3db} - "E:\Lenovo_Suite.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {5b26448c-2552-11ea-bac0-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {650239c0-f894-11e9-ba6d-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {76f7f962-e46e-11e9-ba4a-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {c9fb2835-e3f4-11e8-b99e-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {d532e4f0-ff99-11e8-b9ab-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {e8158db1-ce11-11e9-ba2b-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction ? <==== ATTENTION
Task: {02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {1CD2C6F5-5A29-42C2-952B-1328AB94B9EA} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> No File <==== ATTENTION
Task: {28DF967D-0D7F-432A-AB47-F40D05B0AE98} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> No File <==== ATTENTION
Task: {38C4589A-6909-4C95-BF44-8543C0196221} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> No File <==== ATTENTION
Task: {488C4C6E-9005-4200-80DD-68BAC4E02FF1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {57642420-BA25-4068-B3D8-243E709E8690} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> No File <==== ATTENTION
Task: {9812AEFC-FE2F-468B-94ED-51FFC1F63938} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {9816C2EC-9196-40EC-85F5-D50B7A0909E2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {F10C3648-C742-4CC5-AB26-595CD119CB75} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> No File <==== ATTENTION
Task: {F5C9594C-339C-4D29-9FAF-53521E1BF4BE} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> No File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {30F4BD11-8B52-4BC0-990E-446E81BB6DEF} URL =
Toolbar: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> No Name - {C500C267-63BF-451F-8797-4D720C9A2ED9} - No File
C:\WINDOWS\msdownld.tmp
C:\Users\Jirka\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{66A22D9E-7C6D-4641-BBD7-E6C738CF32B0}\InprocServer32 -> C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll => No File
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Jirka\AppData\Local\GoToMeeting\15502\G2MOutlookAddin64.dll => No File
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0xD3814710F6BDD301B3424EE77D2DD501240000004600000000000000 => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_S-1-5-21-2580097617-4007673088-3194084131-1001: [ kopenwpsshellext] -> {66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll -> No File
ContextMenuHandlers4_S-1-5-21-2580097617-4007673088-3194084131-1001: [ kopenwpsshellext] -> {66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll -> No File
FirewallRules: [{BDE9F847-AC6D-498A-8CF1-A86F6289AC3C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{FF040B0B-E0BC-451C-BFFF-6053334A1F86}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{6BC57676-6B0A-4EF6-8FFB-D280D05BEF0C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{1FC55D25-0555-462B-AD82-1B45248B6478}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{480C6BDA-2AC9-453B-9762-97FE0DA89174}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{03EFF2B1-65A0-4FFB-9DEC-CDF01745CE01}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{30456FD4-2A1E-4B16-964E-7F6F7DFB69E5}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe No File
FirewallRules: [{006F0EE5-3B31-461C-B5A7-86C01415E58B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\OxygenPanelDaemon.exe No File
EmptyTemp:
Hosts:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Q finder se načetl jen jednou.
přikládám log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 22-01-2020 01
Ran by Jirka (22-01-2020 21:16:17) Run:1
Running from C:\Users\Jirka\Desktop
Loaded Profiles: Jirka (Available Profiles: Jirka)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {52761519-ee49-11e9-ba59-f8597124b3db} - "E:\Lenovo_Suite.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {5b26448c-2552-11ea-bac0-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {650239c0-f894-11e9-ba6d-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {76f7f962-e46e-11e9-ba4a-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {c9fb2835-e3f4-11e8-b99e-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {d532e4f0-ff99-11e8-b9ab-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {e8158db1-ce11-11e9-ba2b-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction ? <==== ATTENTION
Task: {02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {1CD2C6F5-5A29-42C2-952B-1328AB94B9EA} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> No File <==== ATTENTION
Task: {28DF967D-0D7F-432A-AB47-F40D05B0AE98} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> No File <==== ATTENTION
Task: {38C4589A-6909-4C95-BF44-8543C0196221} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> No File <==== ATTENTION
Task: {488C4C6E-9005-4200-80DD-68BAC4E02FF1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {57642420-BA25-4068-B3D8-243E709E8690} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> No File <==== ATTENTION
Task: {9812AEFC-FE2F-468B-94ED-51FFC1F63938} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {9816C2EC-9196-40EC-85F5-D50B7A0909E2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {F10C3648-C742-4CC5-AB26-595CD119CB75} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> No File <==== ATTENTION
Task: {F5C9594C-339C-4D29-9FAF-53521E1BF4BE} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> No File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {30F4BD11-8B52-4BC0-990E-446E81BB6DEF} URL =
Toolbar: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> No Name - {C500C267-63BF-451F-8797-4D720C9A2ED9} - No File
C:\WINDOWS\msdownld.tmp
C:\Users\Jirka\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{66A22D9E-7C6D-4641-BBD7-E6C738CF32B0}\InprocServer32 -> C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll => No File
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Jirka\AppData\Local\GoToMeeting\15502\G2MOutlookAddin64.dll => No File
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0xD3814710F6BDD301B3424EE77D2DD501240000004600000000000000 => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_S-1-5-21-2580097617-4007673088-3194084131-1001: [ kopenwpsshellext] -> {66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll -> No File
ContextMenuHandlers4_S-1-5-21-2580097617-4007673088-3194084131-1001: [ kopenwpsshellext] -> {66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll -> No File
FirewallRules: [{BDE9F847-AC6D-498A-8CF1-A86F6289AC3C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{FF040B0B-E0BC-451C-BFFF-6053334A1F86}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{6BC57676-6B0A-4EF6-8FFB-D280D05BEF0C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{1FC55D25-0555-462B-AD82-1B45248B6478}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{480C6BDA-2AC9-453B-9762-97FE0DA89174}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{03EFF2B1-65A0-4FFB-9DEC-CDF01745CE01}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{30456FD4-2A1E-4B16-964E-7F6F7DFB69E5}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe No File
FirewallRules: [{006F0EE5-3B31-461C-B5A7-86C01415E58B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\OxygenPanelDaemon.exe No File
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{52761519-ee49-11e9-ba59-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b26448c-2552-11ea-bac0-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{650239c0-f894-11e9-ba6d-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{76f7f962-e46e-11e9-ba4a-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9fb2835-e3f4-11e8-b99e-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d532e4f0-ff99-11e8-b9ab-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e8158db1-ce11-11e9-ba2b-f8597124b3db} => removed successfully
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1CD2C6F5-5A29-42C2-952B-1328AB94B9EA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1CD2C6F5-5A29-42C2-952B-1328AB94B9EA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{28DF967D-0D7F-432A-AB47-F40D05B0AE98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28DF967D-0D7F-432A-AB47-F40D05B0AE98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38C4589A-6909-4C95-BF44-8543C0196221}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38C4589A-6909-4C95-BF44-8543C0196221}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{488C4C6E-9005-4200-80DD-68BAC4E02FF1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{488C4C6E-9005-4200-80DD-68BAC4E02FF1}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{57642420-BA25-4068-B3D8-243E709E8690}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57642420-BA25-4068-B3D8-243E709E8690}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9812AEFC-FE2F-468B-94ED-51FFC1F63938}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9812AEFC-FE2F-468B-94ED-51FFC1F63938}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9816C2EC-9196-40EC-85F5-D50B7A0909E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9816C2EC-9196-40EC-85F5-D50B7A0909E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F10C3648-C742-4CC5-AB26-595CD119CB75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F10C3648-C742-4CC5-AB26-595CD119CB75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5C9594C-339C-4D29-9FAF-53521E1BF4BE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5C9594C-339C-4D29-9FAF-53521E1BF4BE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock" => not found
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
"HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{30F4BD11-8B52-4BC0-990E-446E81BB6DEF} => removed successfully
"HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C500C267-63BF-451F-8797-4D720C9A2ED9}" => removed successfully
C:\WINDOWS\msdownld.tmp => moved successfully
C:\Users\Jirka\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat => moved successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Classes\*\ShellEx\ContextMenuHandlers\ kopenwpsshellext => not found
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ kopenwpsshellext => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BDE9F847-AC6D-498A-8CF1-A86F6289AC3C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FF040B0B-E0BC-451C-BFFF-6053334A1F86}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6BC57676-6B0A-4EF6-8FFB-D280D05BEF0C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1FC55D25-0555-462B-AD82-1B45248B6478}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{480C6BDA-2AC9-453B-9762-97FE0DA89174}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{03EFF2B1-65A0-4FFB-9DEC-CDF01745CE01}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{30456FD4-2A1E-4B16-964E-7F6F7DFB69E5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{006F0EE5-3B31-461C-B5A7-86C01415E58B}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 930147776 B
Java, Flash, Steam htmlcache => 1110 B
Windows/system/drivers => 17477527 B
Edge => 1894666 B
Chrome => 536571791 B
Firefox => 7833157 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 63683873 B
NetworkService => 63684509 B
Jirka => 1724941292 B
RecycleBin => 707421165 B
EmptyTemp: => 3.8 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 21:22:57 ====
přikládám log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 22-01-2020 01
Ran by Jirka (22-01-2020 21:16:17) Run:1
Running from C:\Users\Jirka\Desktop
Loaded Profiles: Jirka (Available Profiles: Jirka)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {52761519-ee49-11e9-ba59-f8597124b3db} - "E:\Lenovo_Suite.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {5b26448c-2552-11ea-bac0-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {650239c0-f894-11e9-ba6d-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {76f7f962-e46e-11e9-ba4a-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {c9fb2835-e3f4-11e8-b99e-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {d532e4f0-ff99-11e8-b9ab-f8597124b3db} - "E:\AutoRun.exe"
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\...\MountPoints2: {e8158db1-ce11-11e9-ba2b-f8597124b3db} - "E:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction ? <==== ATTENTION
Task: {02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {1CD2C6F5-5A29-42C2-952B-1328AB94B9EA} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> No File <==== ATTENTION
Task: {28DF967D-0D7F-432A-AB47-F40D05B0AE98} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> No File <==== ATTENTION
Task: {38C4589A-6909-4C95-BF44-8543C0196221} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> No File <==== ATTENTION
Task: {488C4C6E-9005-4200-80DD-68BAC4E02FF1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {57642420-BA25-4068-B3D8-243E709E8690} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> No File <==== ATTENTION
Task: {9812AEFC-FE2F-468B-94ED-51FFC1F63938} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-11-03] (Google Inc -> Google Inc.)
Task: {9816C2EC-9196-40EC-85F5-D50B7A0909E2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {F10C3648-C742-4CC5-AB26-595CD119CB75} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> No File <==== ATTENTION
Task: {F5C9594C-339C-4D29-9FAF-53521E1BF4BE} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> No File <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE00
SearchScopes: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> {30F4BD11-8B52-4BC0-990E-446E81BB6DEF} URL =
Toolbar: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001 -> No Name - {C500C267-63BF-451F-8797-4D720C9A2ED9} - No File
C:\WINDOWS\msdownld.tmp
C:\Users\Jirka\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{66A22D9E-7C6D-4641-BBD7-E6C738CF32B0}\InprocServer32 -> C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll => No File
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Jirka\AppData\Local\GoToMeeting\15502\G2MOutlookAddin64.dll => No File
CustomCLSID: HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0xD3814710F6BDD301B3424EE77D2DD501240000004600000000000000 => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_S-1-5-21-2580097617-4007673088-3194084131-1001: [ kopenwpsshellext] -> {66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll -> No File
ContextMenuHandlers4_S-1-5-21-2580097617-4007673088-3194084131-1001: [ kopenwpsshellext] -> {66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => C:\Users\Jirka\AppData\Local\Kingsoft\WPS Office\11.2.0.8934\office6\kopenwpsshellext64.dll -> No File
FirewallRules: [{BDE9F847-AC6D-498A-8CF1-A86F6289AC3C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{FF040B0B-E0BC-451C-BFFF-6053334A1F86}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{6BC57676-6B0A-4EF6-8FFB-D280D05BEF0C}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{1FC55D25-0555-462B-AD82-1B45248B6478}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{480C6BDA-2AC9-453B-9762-97FE0DA89174}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{03EFF2B1-65A0-4FFB-9DEC-CDF01745CE01}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe No File
FirewallRules: [{30456FD4-2A1E-4B16-964E-7F6F7DFB69E5}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe No File
FirewallRules: [{006F0EE5-3B31-461C-B5A7-86C01415E58B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\OxygenPanelDaemon.exe No File
EmptyTemp:
Hosts:
End
*****************
Processes closed successfully.
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{52761519-ee49-11e9-ba59-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b26448c-2552-11ea-bac0-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{650239c0-f894-11e9-ba6d-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{76f7f962-e46e-11e9-ba4a-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c9fb2835-e3f4-11e8-b99e-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d532e4f0-ff99-11e8-b9ab-f8597124b3db} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e8158db1-ce11-11e9-ba2b-f8597124b3db} => removed successfully
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02C5E2EA-54AD-44A4-A55D-F4FCEA4B819D}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1CD2C6F5-5A29-42C2-952B-1328AB94B9EA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1CD2C6F5-5A29-42C2-952B-1328AB94B9EA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{28DF967D-0D7F-432A-AB47-F40D05B0AE98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28DF967D-0D7F-432A-AB47-F40D05B0AE98}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38C4589A-6909-4C95-BF44-8543C0196221}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38C4589A-6909-4C95-BF44-8543C0196221}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{488C4C6E-9005-4200-80DD-68BAC4E02FF1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{488C4C6E-9005-4200-80DD-68BAC4E02FF1}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{57642420-BA25-4068-B3D8-243E709E8690}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57642420-BA25-4068-B3D8-243E709E8690}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9812AEFC-FE2F-468B-94ED-51FFC1F63938}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9812AEFC-FE2F-468B-94ED-51FFC1F63938}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9816C2EC-9196-40EC-85F5-D50B7A0909E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9816C2EC-9196-40EC-85F5-D50B7A0909E2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F10C3648-C742-4CC5-AB26-595CD119CB75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F10C3648-C742-4CC5-AB26-595CD119CB75}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5C9594C-339C-4D29-9FAF-53521E1BF4BE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5C9594C-339C-4D29-9FAF-53521E1BF4BE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock" => not found
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
"HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{30F4BD11-8B52-4BC0-990E-446E81BB6DEF} => removed successfully
"HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C500C267-63BF-451F-8797-4D720C9A2ED9}" => removed successfully
C:\WINDOWS\msdownld.tmp => moved successfully
C:\Users\Jirka\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat => moved successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{66A22D9E-7C6D-4641-BBD7-E6C738CF32B0} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309} => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Classes\*\ShellEx\ContextMenuHandlers\ kopenwpsshellext => not found
HKU\S-1-5-21-2580097617-4007673088-3194084131-1001\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ kopenwpsshellext => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BDE9F847-AC6D-498A-8CF1-A86F6289AC3C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FF040B0B-E0BC-451C-BFFF-6053334A1F86}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6BC57676-6B0A-4EF6-8FFB-D280D05BEF0C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1FC55D25-0555-462B-AD82-1B45248B6478}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{480C6BDA-2AC9-453B-9762-97FE0DA89174}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{03EFF2B1-65A0-4FFB-9DEC-CDF01745CE01}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{30456FD4-2A1E-4B16-964E-7F6F7DFB69E5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{006F0EE5-3B31-461C-B5A7-86C01415E58B}" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 930147776 B
Java, Flash, Steam htmlcache => 1110 B
Windows/system/drivers => 17477527 B
Edge => 1894666 B
Chrome => 536571791 B
Firefox => 7833157 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 63683873 B
NetworkService => 63684509 B
Jirka => 1724941292 B
RecycleBin => 707421165 B
EmptyTemp: => 3.8 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 21:22:57 ====
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Smazáno. Už je to tedy v pořádku?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Ano, už se načetlo vše pořádku.
Děkuji !!
Děkuji !!
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Dnes ráno po startu, se Q finder načetl 2x. Je to podstatně lepší než ve dnech předchozích. Večer vše OK a ráno ho tu mám 2x
Viz screen:
Viz screen:
- Přílohy
-
- Snímek obrazovky (166).png (120.18 KiB) Zobrazeno 1357 x
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Win10 - při startu zapne x-krát nějaký program na pozadí
Tak to potom nevím. S tímto síť. nástrojem nemám osobní zkušenost, nepoužívám ho, takže vám bude muset poradit jeho výrobce. Přeistalace by nepomohla? Virový problém to není. Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?