Prosím o kontrolu logu

Zpráva

korbel · #1 Příspěvek od **korbel** » 19 dub 2020 22:33

Dobrý den,

před pár dny mi začaly chodit emaily o nastavení nového hesla z různých účtů. Na hesla používám LastPass a jsou hodně silná. Proto si myslím, že je v tom nějaká "potvora"

Protože jsem si ale nedávno koupil nový SSD disk, tak jsem ho vyměnil za ten "podezřelý, zavirovaný" a na něj udělal novou instalaci OS. Nejsem si ale jistý, zda to vyřešilo můj problém. Byl bych proto klidnější, kdyby mi to nějaký zdejší odborník potvrdil.

Předem děkuji

Kód: Vybrat vše

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-04-2020
Ran by kabby (administrator) on HOLLAK (19-04-2020 22:53:30)
Running from C:\Users\kabby\Desktop
Loaded Profiles: kabby (Available Profiles: kabby)
Platform: Windows 10 Pro Version 1909 18363.592 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <3>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <23>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\kabby\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\perfmon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_95bdb3a23d6478de\Display.NvContainer\NVDisplay.Container.exe <2>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [108216 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8841472 2016-06-17] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKU\S-1-5-21-2174049523-3564953568-1433297775-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\kabby\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2174049523-3564953568-1433297775-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\kabby\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2174049523-3564953568-1433297775-1001\...\RunOnce: [Uninstall 19.232.1124.0010\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\kabby\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\amd64"
HKU\S-1-5-21-2174049523-3564953568-1433297775-1001\...\RunOnce: [Uninstall 19.232.1124.0010] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\kabby\AppData\Local\Microsoft\OneDrive\19.232.1124.0010"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.113\Installer\chrmstp.exe [2020-04-18] (Google LLC -> Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{83da5d46-114c-482b-ba6d-54d9dbbfe15c}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================

FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-18] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default [2020-04-19]
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR Session Restore: Default -> is enabled.
CHR Extension: (Prezentace) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-04-18]
CHR Extension: (Duolingo on the Web) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2020-04-18]
CHR Extension: (Dokumenty) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-04-18]
CHR Extension: (Disk Google) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-04-18]
CHR Extension: (Kaloricke Tabulky) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjjjbklcdnengpeomfcacfplfnmingjk [2020-04-18]
CHR Extension: (YouTube) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-04-18]
CHR Extension: (uBlock Origin) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-04-18]
CHR Extension: (Tabulky) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-04-18]
CHR Extension: (Stylish - Custom themes for any website) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2020-04-18]
CHR Extension: (Night Mode Pro) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbilbeoogenjmnabenfjfoockmpfnjoh [2020-04-18]
CHR Extension: (Dokumenty Google offline) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-18]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-04-18]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2020-04-18]
CHR Extension: (Speed Dial 2 New tab) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik [2020-04-18]
CHR Extension: (Grammarly for Chrome) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2020-04-18]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-18]
CHR Extension: (Evernote Web Clipper) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2020-04-18]
CHR Extension: (Gmail) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-04-18]
CHR Extension: (Chrome Media Router) - C:\Users\kabby\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-18]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-05-08] (ASUSTeK Computer Inc. -> )
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] (ASUSTeK Computer Inc. -> ) [File not signed]
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [5504928 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [345384 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [1005672 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [58048 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2020-01-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_95bdb3a23d6478de\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_95bdb3a23d6478de\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-05-08] (ASUSTeK Computer Inc. -> )
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [206120 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [234776 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [178968 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [60696 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2020-04-18] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42984 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175920 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [492144 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [109480 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [85056 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851808 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [459408 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [235696 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [317280 2020-04-18] (Avast Software s.r.o. -> AVAST Software)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_95bdb3a23d6478de\nvlddmkm.sys [23446760 2020-04-11] (NVIDIA Corporation -> NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek )
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-04-19 22:53 - 2020-04-19 22:53 - 000013414 _____ C:\Users\kabby\Desktop\FRST.txt
2020-04-19 22:35 - 2020-04-19 22:53 - 000000000 ____D C:\FRST
2020-04-19 22:35 - 2020-04-19 22:35 - 002281984 _____ (Farbar) C:\Users\kabby\Desktop\FRST64.exe
2020-04-19 09:57 - 2020-04-19 09:57 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-04-19 09:47 - 2020-04-19 09:48 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-04-19 09:47 - 2020-04-19 09:47 - 121542864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-04-18 23:49 - 2020-04-19 00:05 - 000011418 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1
2020-04-18 23:48 - 2020-03-17 05:57 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-04-18 23:48 - 2020-03-17 05:56 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-04-18 23:08 - 2020-04-19 13:03 - 000000000 ____D C:\Users\kabby\AppData\Roaming\foobar2000
2020-04-18 23:08 - 2020-04-18 23:08 - 000001186 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2020-04-18 23:08 - 2020-04-18 23:08 - 000001104 _____ C:\Users\Public\Desktop\foobar2000.lnk
2020-04-18 23:08 - 2020-04-18 23:08 - 000000000 ____D C:\Program Files (x86)\foobar2000
2020-04-18 23:02 - 2020-04-18 23:02 - 000001205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2020-04-18 23:02 - 2020-04-18 23:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2020-04-18 23:01 - 2020-04-18 23:01 - 000000000 ____D C:\Program Files (x86)\Webteh
2020-04-18 22:13 - 2020-04-19 22:43 - 000000000 ____D C:\Users\kabby\AppData\Roaming\TS3Client
2020-04-18 22:13 - 2020-04-18 22:13 - 000001008 _____ C:\Users\Public\Desktop\TeamSpeak 3.lnk
2020-04-18 22:13 - 2020-04-18 22:13 - 000000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2020-04-18 22:13 - 2020-04-18 22:13 - 000000000 ____D C:\Users\kabby\AppData\Local\TeamSpeak 3
2020-04-18 22:13 - 2020-04-18 22:13 - 000000000 ____D C:\ProgramData\Package Cache
2020-04-18 22:13 - 2020-04-18 22:13 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
2020-04-18 21:57 - 2020-04-18 23:46 - 000000000 ____D C:\Users\kabby\AppData\Roaming\vlc
2020-04-18 21:57 - 2020-04-18 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-04-18 21:57 - 2020-04-18 21:57 - 000000000 ____D C:\Program Files\VideoLAN
2020-04-18 21:40 - 2020-04-18 21:40 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2020-04-18 21:40 - 2020-04-18 21:40 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-04-18 21:40 - 2020-04-18 21:40 - 000000000 ____D C:\WINDOWS\system32\DAX2
2020-04-18 21:40 - 2020-04-18 21:40 - 000000000 ____D C:\Program Files\Realtek
2020-04-18 21:40 - 2020-04-18 21:40 - 000000000 ____D C:\Program Files (x86)\Realtek
2020-04-18 21:40 - 2016-06-17 08:16 - 015202040 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE3.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 003299824 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 002706864 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 002203752 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 002190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 002110600 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 001435144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 001382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 001336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000873472 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000582016 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000570096 _____ (Intel Corporation) C:\WINDOWS\system32\tbb_waves.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000467160 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000381416 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000341160 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000341160 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000258872 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000221976 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000209544 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000158704 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2020-04-18 21:40 - 2016-06-17 08:16 - 000075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 072520720 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2020-04-18 21:40 - 2016-06-17 08:15 - 024404696 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRenderAVX64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 024312224 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRender64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 017362784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioCapture64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 014057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 013122584 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 012988352 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 010512456 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 007172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 007096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 006402440 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV3apo.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 006318576 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2020-04-18 21:40 - 2016-06-17 08:15 - 006264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 005804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2020-04-18 21:40 - 2016-06-17 08:15 - 005776968 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 005593624 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 005339552 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 005152512 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2020-04-18 21:40 - 2016-06-17 08:15 - 003283248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 003282544 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 003199744 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 003181209 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2020-04-18 21:40 - 2016-06-17 08:15 - 003101912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 002895104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2020-04-18 21:40 - 2016-06-17 08:15 - 002825112 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 002731064 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 002437760 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 002060032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 002050184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001608128 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001422936 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001355616 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001213664 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001186832 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001166160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001061120 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001041744 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 001003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000999856 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000965032 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000927424 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000923744 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000716112 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000678192 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000677680 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000618192 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000589080 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2020-04-18 21:40 - 2016-06-17 08:15 - 000586432 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\CAF64APO2.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000574760 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000472312 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000450120 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000447720 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000445408 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000416512 _____ (Harman) C:\WINDOWS\system32\HMUI.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000371456 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000366128 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000362064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000360352 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000330568 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000310424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000214840 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000203848 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000192984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000190936 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000190936 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000179608 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000154368 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000122328 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000112496 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\Caf64api.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000105312 _____ C:\WINDOWS\system32\audioLibVc.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000088352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000084624 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000023696 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2020-04-18 21:40 - 2016-06-17 08:15 - 000007756 _____ C:\WINDOWS\system32\cxapo.prop
2020-04-18 21:40 - 2016-06-17 08:15 - 000005604 _____ C:\WINDOWS\system32\cxapo.lncs
2020-04-18 21:40 - 2014-04-14 17:52 - 000003008 _____ C:\WINDOWS\system32\Drivers\DTSU2P.DAT
2020-04-18 21:39 - 2020-04-18 21:40 - 000000000 ___HD C:\Program Files (x86)\Temp
2020-04-18 21:39 - 2020-04-18 21:39 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2020-04-18 21:39 - 2020-04-18 21:39 - 000000000 ____D C:\Program Files (x86)\ASUS
2020-04-18 21:39 - 2016-04-11 13:38 - 002838232 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2020-04-18 21:39 - 2015-05-08 14:26 - 000028672 _____ (ASUSTek Computer Inc.) C:\WINDOWS\SysWOW64\AsIO.dll
2020-04-18 21:39 - 2015-05-08 14:26 - 000015232 _____ C:\WINDOWS\SysWOW64\Drivers\AsIO.sys
2020-04-18 21:32 - 2020-04-18 21:32 - 000000000 ____D C:\Users\kabby\AppData\Roaming\WinRAR
2020-04-18 21:32 - 2020-04-18 21:32 - 000000000 ____D C:\Users\kabby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-04-18 21:32 - 2020-04-18 21:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-04-18 21:32 - 2020-04-18 21:32 - 000000000 ____D C:\Program Files\WinRAR
2020-04-18 21:26 - 2020-04-19 00:02 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-04-18 21:26 - 2020-04-18 22:52 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-04-18 21:26 - 2020-04-18 22:50 - 000000000 ____D C:\ProgramData\Adobe
2020-04-18 21:26 - 2020-04-18 21:26 - 000000000 ____D C:\Users\kabby\AppData\LocalLow\Adobe
2020-04-18 21:26 - 2020-04-18 21:26 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-04-18 21:25 - 2020-04-19 00:02 - 000000000 ____D C:\Users\kabby\AppData\Local\Adobe
2020-04-18 20:59 - 2020-04-18 20:59 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-04-18 20:56 - 2020-04-18 20:56 - 000002164 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2020-04-18 20:56 - 2020-04-18 20:56 - 000000000 ____D C:\Users\kabby\AppData\Roaming\Avast Software
2020-04-18 20:56 - 2020-04-18 20:56 - 000000000 ____D C:\Users\kabby\AppData\Local\CEF
2020-04-18 20:55 - 2020-04-18 20:55 - 000851808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000492144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000459408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000337048 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-04-18 20:55 - 2020-04-18 20:55 - 000317280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000235696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000234776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000206120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000178968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000175920 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000109480 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000085056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000060696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000042984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000016304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys
2020-04-18 20:55 - 2020-04-18 20:55 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-04-18 20:55 - 2020-04-18 20:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-04-18 20:55 - 2020-04-18 20:55 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2020-04-18 20:55 - 2020-04-18 20:55 - 000000000 ____D C:\Program Files\Avast Software
2020-04-18 20:44 - 2020-04-18 20:55 - 000000000 ____D C:\ProgramData\Avast Software
2020-04-18 20:41 - 2020-04-19 09:57 - 000053844 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-04-18 20:41 - 2020-04-19 09:57 - 000024106 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-04-18 20:41 - 2020-04-18 23:49 - 000011805 _____ C:\ProgramData\DisplaySessionContainer2.log_backup1
2020-04-18 20:41 - 2020-04-18 23:49 - 000001209 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-04-18 20:41 - 2020-04-18 20:41 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2020-04-18 20:39 - 2020-04-11 17:40 - 000039824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2020-04-18 20:38 - 2020-04-11 20:56 - 001729232 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-04-18 20:38 - 2020-04-11 20:56 - 001729232 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-04-18 20:38 - 2020-04-11 20:56 - 001329360 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-04-18 20:38 - 2020-04-11 20:56 - 001329360 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-04-18 20:38 - 2020-04-11 20:56 - 001078992 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-04-18 20:38 - 2020-04-11 20:56 - 001078992 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-04-18 20:38 - 2020-04-11 20:56 - 000937680 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-04-18 20:38 - 2020-04-11 20:56 - 000937680 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-04-18 20:38 - 2020-04-11 20:56 - 000450280 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-04-18 20:38 - 2020-04-11 20:56 - 000346856 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-04-18 20:38 - 2020-04-11 20:55 - 011945872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2020-04-18 20:38 - 2020-04-11 20:55 - 010286480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2020-04-18 20:38 - 2020-04-11 20:54 - 001481112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-04-18 20:38 - 2020-04-11 20:54 - 001141992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-04-18 20:38 - 2020-04-11 20:54 - 001004960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-04-18 20:38 - 2020-04-11 20:54 - 000679656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-04-18 20:38 - 2020-04-11 20:54 - 000676240 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-04-18 20:38 - 2020-04-11 20:54 - 000546536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-04-18 20:38 - 2020-04-11 20:54 - 000542952 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-04-18 20:38 - 2020-04-11 20:53 - 005590640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2020-04-18 20:38 - 2020-04-11 20:53 - 000561776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-04-18 20:38 - 2020-04-04 03:49 - 000106838 _____ C:\WINDOWS\system32\nvidia-smi.1.pdf
2020-04-18 20:38 - 2020-04-04 03:49 - 000077294 _____ C:\WINDOWS\system32\nvinfo.pb
2020-04-18 20:37 - 2020-04-11 20:53 - 017601632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 015158384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 005855856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 005159520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 002074208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 001566304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 001350768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 001048504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 000851040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-04-18 20:37 - 2020-04-11 20:53 - 000811448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 000655288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-04-18 20:37 - 2020-04-11 20:53 - 000443832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-04-18 20:37 - 2020-04-11 20:52 - 004927744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2020-04-18 20:37 - 2020-04-11 20:52 - 004195488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-04-18 20:26 - 2020-04-18 20:26 - 000000000 ____D C:\WINDOWS\PCHEALTH
2020-04-18 20:26 - 2020-04-18 20:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2020-04-18 20:26 - 2020-04-18 20:26 - 000000000 ____D C:\Program Files (x86)\Microsoft Works
2020-04-18 20:26 - 2020-04-18 20:26 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2020-04-18 20:25 - 2020-04-18 20:26 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-04-18 20:25 - 2020-04-18 20:25 - 000000000 __RHD C:\MSOCache
2020-04-18 20:25 - 2020-04-18 20:25 - 000000000 ____D C:\WINDOWS\SHELLNEW
2020-04-18 20:25 - 2020-04-18 20:25 - 000000000 ____D C:\Users\kabby\AppData\Local\Microsoft Help
2020-04-18 20:25 - 2020-04-18 20:25 - 000000000 ____D C:\Program Files\Microsoft Office
2020-04-18 20:24 - 2020-04-18 20:41 - 000000000 ____D C:\ProgramData\Packages
2020-04-18 20:24 - 2020-04-18 20:24 - 000000000 ____D C:\Users\kabby\AppData\Local\Comms
2020-04-18 20:22 - 2020-04-18 20:22 - 000007602 _____ C:\Users\kabby\AppData\Local\Resmon.ResmonCfg
2020-04-18 20:21 - 2020-04-18 20:21 - 000000000 ____D C:\Users\kabby\AppData\Local\D3DSCache
2020-04-18 20:18 - 2020-04-18 20:18 - 000000000 ____D C:\Users\kabby\AppData\Local\OneDrive
2020-04-18 20:11 - 2020-04-18 20:11 - 000002377 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-04-18 20:11 - 2020-04-18 20:11 - 000002336 _____ C:\Users\Public\Desktop\Chrome.lnk
2020-04-18 20:10 - 2020-04-19 20:10 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2174049523-3564953568-1433297775-1001
2020-04-18 20:10 - 2020-04-19 20:10 - 000000000 ___RD C:\Users\kabby\OneDrive
2020-04-18 20:10 - 2020-04-18 23:49 - 000000000 ____D C:\Users\kabby\AppData\Local\PlaceholderTileLogoFolder
2020-04-18 20:10 - 2020-04-18 20:13 - 000000000 ____D C:\Users\kabby\AppData\Local\Google
2020-04-18 20:10 - 2020-04-18 20:10 - 000003474 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-04-18 20:10 - 2020-04-18 20:10 - 000003350 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-04-18 20:10 - 2020-04-18 20:10 - 000000000 ____D C:\Program Files (x86)\Google
2020-04-18 20:09 - 2020-04-18 20:09 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-04-18 20:08 - 2020-04-18 22:08 - 000000000 ____D C:\Users\kabby\AppData\Local\Packages
2020-04-18 20:08 - 2020-04-18 21:26 - 000000000 ____D C:\Users\kabby\AppData\Roaming\Adobe
2020-04-18 20:08 - 2020-04-18 20:26 - 000000000 ____D C:\Users\kabby\AppData\Local\Publishers
2020-04-18 20:08 - 2020-04-18 20:08 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-04-18 20:08 - 2020-04-18 20:08 - 000000000 ___RD C:\Users\kabby\3D Objects
2020-04-18 20:08 - 2020-04-18 20:08 - 000000000 ___HD C:\Users\kabby\MicrosoftEdgeBackups
2020-04-18 20:08 - 2020-04-18 20:08 - 000000000 ____D C:\Users\kabby\AppData\Local\VirtualStore
2020-04-18 20:08 - 2020-04-18 20:08 - 000000000 ____D C:\Users\kabby\AppData\Local\MicrosoftEdge
2020-04-18 20:08 - 2020-04-18 20:08 - 000000000 ____D C:\Users\kabby\AppData\Local\ConnectedDevicesPlatform
2020-04-18 20:07 - 2020-04-19 10:02 - 001606106 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-04-18 20:06 - 2020-04-19 20:10 - 000002365 _____ C:\Users\kabby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-04-18 20:06 - 2020-04-18 20:10 - 000000000 ____D C:\Users\kabby
2020-04-18 20:06 - 2020-04-18 20:06 - 000000020 ___SH C:\Users\kabby\ntuser.ini
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Šablony
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Soubory cookie
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Poslední
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Okolní tiskárny
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Okolní síť
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Nabídka Start
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Dokumenty
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Documents\Obrázky
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Documents\Hudba
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Documents\Filmy
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\Data aplikací
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2020-04-18 20:06 - 2020-04-18 20:06 - 000000000 _SHDL C:\Users\kabby\AppData\Local\Data aplikací
2020-04-18 20:04 - 2020-01-09 23:24 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Public\Documents\Obrázky
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Public\Documents\Hudba
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Public\Documents\Filmy
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Šablony
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Poslední
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Okolní síť
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Dokumenty
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Documents\Obrázky
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Documents\Hudba
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Documents\Filmy
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\Data aplikací
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Šablony
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Soubory cookie
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Poslední
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Okolní tiskárny
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Okolní síť
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Nabídka Start
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Dokumenty
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Documents\Obrázky
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Documents\Hudba
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Documents\Filmy
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\Data aplikací
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\ProgramData\Šablony
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\ProgramData\Plocha
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\ProgramData\Dokumenty
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 _SHDL C:\ProgramData\Data aplikací
2020-04-18 20:03 - 2020-04-18 20:03 - 000000000 ____D C:\WINDOWS\minidump
2020-04-18 20:02 - 2020-04-18 20:02 - 000000000 ____D C:\WINDOWS\CSC
2020-04-18 20:01 - 2020-04-18 22:41 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-04-18 20:00 - 2020-04-19 20:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-04-18 20:00 - 2020-04-19 09:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-04-18 20:00 - 2020-04-18 23:49 - 000352448 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-04-18 20:00 - 2020-04-18 20:41 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2020-04-18 20:00 - 2020-04-18 20:41 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2020-04-18 20:00 - 2020-04-18 20:00 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-04-18 20:00 - 2020-04-18 20:00 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-04-18 19:49 - 2020-04-18 20:03 - 000000000 ___DC C:\WINDOWS\Panther
2020-04-18 19:42 - 2020-04-18 19:49 - 000000000 ____D C:\ESD
2020-04-18 19:34 - 2020-04-18 19:34 - 000000000 ___HD C:\$Windows.~WS

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-04-19 22:42 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-04-19 20:55 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-04-19 10:02 - 2019-03-19 13:57 - 000682526 _____ C:\WINDOWS\system32\perfh005.dat
2020-04-19 10:02 - 2019-03-19 13:57 - 000137244 _____ C:\WINDOWS\system32\perfc005.dat
2020-04-19 09:57 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-04-19 09:57 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-04-19 09:50 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-04-19 09:50 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-04-19 09:49 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\appcompat
2020-04-18 23:49 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-04-18 20:59 - 2019-03-19 06:56 - 000000000 ____D C:\WINDOWS\Setup
2020-04-18 20:59 - 2019-03-19 06:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-04-18 20:55 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-04-18 20:40 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Help
2020-04-18 20:26 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-04-18 20:05 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\USOPrivate
2020-04-18 20:04 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\spool
2020-04-18 20:04 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-04-18 20:03 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ServiceState
2020-04-18 20:03 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Windows NT
2020-04-18 20:01 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-04-18 20:01 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-04-18 20:00 - 2019-03-19 06:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-04-11 17:40 - 2014-08-19 22:14 - 000222112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys

==================== Files in the root of some directories ========

2020-04-18 20:22 - 2020-04-18 20:22 - 000007602 _____ () C:\Users\kabby\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2020
Ran by kabby (19-04-2020 22:54:01)
Running from C:\Users\kabby\Desktop
Windows 10 Pro Version 1909 18363.592 (X64) (2020-04-18 18:03:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2174049523-3564953568-1433297775-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2174049523-3564953568-1433297775-503 - Limited - Disabled)
Guest (S-1-5-21-2174049523-3564953568-1433297775-501 - Limited - Disabled)
kabby (S-1-5-21-2174049523-3564953568-1433297775-1001 - Administrator - Enabled) => C:\Users\kabby
WDAGUtilityAccount (S-1-5-21-2174049523-3564953568-1433297775-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Avast Premium Security (HKLM-x32\...\Avast Antivirus) (Version: 20.2.2401 - Avast Software)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.75.1088 - AB Team, d.o.o.)
foobar2000 v1.5.3 (HKLM-x32\...\foobar2000) (Version: 1.5.3 - Peter Pawlowski)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.113 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2174049523-3564953568-1433297775-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0012 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
NVIDIA Ovladač HD audia 1.3.38.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.26 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 445.87 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 445.87 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7848 - Realtek Semiconductor Corp.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.2 - TeamSpeak Systems GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)

Packages:
=========
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.8.5.0_x86__kgqvnymyfvs32 [2020-04-18] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.35.2.0_x86__kgqvnymyfvs32 [2020-04-18] (king.com)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.2.11280.0_x86__8wekyb3d8bbwe [2020-04-18] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2020-04-18] (NVIDIA Corp.)
Pošta a Kalendář -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11029.20108.0_x64__8wekyb3d8bbwe [2020-04-18] (Microsoft Corporation) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0 [2020-04-18] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-04-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-04-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-04-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_95bdb3a23d6478de\nvshext.dll [2020-04-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2020-04-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-04-18 21:39 - 2015-05-08 14:26 - 000104448 _____ () [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2020-04-18 21:39 - 2020-04-19 09:57 - 000028672 _____ () [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2019-04-09 10:21 - 2019-04-09 10:21 - 000018432 _____ () [File not signed] C:\Program Files\TeamSpeak 3 Client\libEGL.DLL
2019-04-09 10:21 - 2019-04-09 10:21 - 003572224 _____ () [File not signed] C:\Program Files\TeamSpeak 3 Client\libGLESv2.dll
2020-04-18 22:13 - 2020-04-18 22:13 - 000157696 _____ () [File not signed] C:\Users\kabby\AppData\Roaming\TS3Client\plugins\gamepad_joystick_win64.dll
2019-04-10 18:30 - 2019-04-10 18:30 - 000035328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\iconengines\qsvgicon.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2019-04-09 10:29 - 2019-04-09 10:29 - 000397312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2019-04-10 18:29 - 2019-04-10 18:29 - 000025600 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\imageformats\qsvg.dll
2019-04-09 10:30 - 2019-04-09 10:30 - 001453568 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2019-05-31 13:05 - 2019-05-31 13:05 - 006130176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Core.dll
2019-04-09 10:25 - 2019-04-09 10:25 - 006470656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Gui.dll
2019-04-09 10:24 - 2019-04-09 10:24 - 001314816 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Network.dll
2019-04-10 19:31 - 2019-04-10 19:31 - 000317440 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Positioning.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 000318464 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5PrintSupport.dll
2019-04-10 18:55 - 2019-04-10 18:55 - 004001792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Qml.dll
2019-04-10 18:48 - 2019-04-10 18:48 - 003776000 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Quick.dll
2019-04-10 18:50 - 2019-04-10 18:50 - 000072704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5QuickWidgets.dll
2019-04-09 10:23 - 2019-04-09 10:23 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Sql.dll
2019-04-10 18:29 - 2019-04-10 18:29 - 000332288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Svg.dll
2019-04-11 03:37 - 2019-04-11 03:37 - 079989760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5WebEngineCore.dll
2019-04-11 03:54 - 2019-04-11 03:54 - 000228864 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5WebEngineWidgets.dll
2019-04-10 19:40 - 2019-04-10 19:40 - 000113664 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5WebChannel.dll
2019-04-09 10:27 - 2019-04-09 10:27 - 005580800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\Qt5Widgets.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 001151488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2019-04-09 10:29 - 2019-04-09 10:29 - 000137216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\TeamSpeak 3 Client\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2174049523-3564953568-1433297775-1001\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{0F6A36EB-2DD7-47BC-84BA-CDAD6FEE0B8B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{BF090633-2CAB-4ED4-B35D-470A9ECBC584}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{6CDEB1C7-794E-4D95-9A17-B8ECF347EABA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{407F862C-8818-42FF-88FB-96FE2F0F85B2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{38F29E00-CD2E-40F2-A71C-ADA3C97CD51D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AB7D8C55-F79F-4314-A23D-4DBCC416896E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B122B993-EF7C-435F-BADA-87AA7683FE7B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{74BD29FF-7928-4485-BF47-C11C5812C2DB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{427A4678-4B79-450B-99FC-C0B2E65E246B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.130.658.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

==================== Restore Points =========================

18-04-2020 20:25:07 Installed Microsoft Office Enterprise 2007

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (04/19/2020 09:57:13 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (04/19/2020 09:57:13 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (04/18/2020 08:08:18 PM) (Source: ESENT) (EventID: 455) (User: )
Description: StartMenuExperienceHost (5584,R,98) TILEREPOSITORYS-1-5-21-2174049523-3564953568-1433297775-1001: Při otevírání souboru protokolu C:\Users\kabby\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (04/18/2020 08:08:18 PM) (Source: ESENT) (EventID: 522) (User: )
Description: StartMenuExperienceHost (5584,P,98) TILEREPOSITORYS-1-5-21-2174049523-3564953568-1433297775-1001: Pokus o otevření zařízení s názvem \\.\C:, který obsahuje C:\, se nepodařil a došlo k systémové chybě 5 (0x00000005): Přístup byl odepřen. . Operace se nepodaří a dojde k chybě -1032 (0xfffffbf8).

Error: (04/18/2020 08:05:08 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu Windows Defender na SECURITY_PRODUCT_STATE_ON došlo k chybě.

Error: (04/18/2020 08:00:54 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )
Description: Služba Šifrování neinicializovala databázi katalogu. Chyba: -2147418113 (0x8000ffff) : Katastrofální selhání
.

Error: (04/18/2020 08:00:54 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )
Description: Služba Šifrování neinicializovala databázi katalogu. Chyba: -2147418113 (0x8000ffff) : Katastrofální selhání
.

Error: (04/18/2020 08:00:53 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )
Description: Služba Šifrování neinicializovala databázi katalogu. Chyba: -2147418113 (0x8000ffff) : Katastrofální selhání
.


System errors:
=============
Error: (04/19/2020 08:12:32 PM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca

Error: (04/19/2020 08:12:32 PM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca

Error: (04/19/2020 09:57:39 AM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c!App.AppXaygf26t1thjd8qjpynd7k9g9ng00agm4.mca jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost

Error: (04/19/2020 09:57:39 AM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca

Error: (04/19/2020 09:49:20 AM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca

Error: (04/19/2020 09:46:58 AM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c\SkypeApp.exe" -ServerName:App.AppXffn3yxqvgawq9fpmnhy90fr3y01d1t5b.mca

Error: (04/19/2020 09:46:55 AM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c!App.AppXaygf26t1thjd8qjpynd7k9g9ng00agm4.mca jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.152.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost

Error: (04/18/2020 11:51:02 PM) (Source: DCOM) (EventID: 10001) (User: HOLLAK)
Description: Nelze spustit server DCOM: Microsoft.Windows.Photos_2019.18114.19418.0_x64__8wekyb3d8bbwe!App jako Není k dispozici/Není k dispozici. Došlo k chybě: 
2147958012
při provádění příkazu: 
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.19418.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca


CodeIntegrity:
===================================

Date: 2020-04-19 22:48:31.746
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-04-19 22:48:31.741
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-04-19 22:45:03.199
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-04-19 22:45:03.195
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-04-19 22:44:59.721
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-04-19 22:44:59.716
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-04-19 22:43:53.418
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-04-19 22:43:53.413
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Memory info =========================== 

BIOS: American Megatrends Inc. 1708 11/09/2012
Motherboard: ASUSTeK COMPUTER INC. P8Z77-M PRO
Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 49%
Total physical RAM: 8136.6 MB
Available physical RAM: 4093.76 MB
Total Virtual: 10056.6 MB
Available Virtual: 4685.44 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.88 GB) (Free:890.47 GB) NTFS
Drive d: (Data) (Fixed) (Total:1862.89 GB) (Free:365.98 GB) NTFS

\\?\Volume{8d1d2d8a-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
\\?\Volume{8d1d2d8a-0000-0000-0000-b0bee8000000}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 8D1D2D8A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=544 MB) - (Type=27)

==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

#2 Příspěvek od **Conder** » 20 dub 2020 02:32

Ahoj

Ano, cista instalacia Windowsu pomoze zbavit sa malware (ak sa pouzilo aj originalne instalacne medium). Podla logu to aj vyzera OK, ale mozme precistit zbytocnosti.

Inak co sa tyka tych e-mailov o resete hesla, nejde o e-maily o tom, ze niekto iba poziadal o reset hesla k danemu uctu? K tomu na vacsine stranok staci poznat iba e-mailovu adresu alebo pouzivatelske meno.

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

Uloz na plochu a ukonci vsetky programy
Spusti AdwCleaner ako spravca
Odsuhlas licencne podmienky
Klikni na Spustit skenovani a pockaj na dokoncenie
V pripade nalezov nechaj vsetky nalezy oznacene a klikni na Karantena (ak nie su ziadne nalezy, tak na Spustit zakladni opravu)
V pripade, ze sa detekuje "predinstalovany software", tieto programy mozes, ale nemusis zmazat (toto nie su skodlive programy, ale iba zbytocnosti)
Potvrd vyzvu, pockaj na dokoncenie a potvrd restartovanie PC
Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
Otvori sa log, jeho obsah skopiruj a vloz do dalsej odpovede

korbel · #3 Příspěvek od **korbel** » 20 dub 2020 10:07

Díky...tady je ten log. Zapomněl sem napsat, že mi nejenom chodily žádosti o změnu hesla ale u Originu mi změnili heslo, email a zapnuli ověření přihlášení u účtu. Instagram mi taky vzali, ale ten se mi pak povedlo smazat. Stejně jsem ho moc nepoužíval

Kód: Vybrat vše

# -------------------------------
# Malwarebytes AdwCleaner 8.0.4.0
# -------------------------------
# Build:    04-03-2020
# Database: 2020-04-08.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    04-20-2020
# Duration: 00:00:00
# OS:       Windows 10 Pro
# Cleaned:  3
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\Conduit
Deleted       HKLM\Software\Wow6432Node\Conduit

***** [ Chromium (and derivatives) ] *****

Deleted       mfhnkgpdlogbknkhlgdjlejeljbhflim

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1517 octets] - [20/04/2020 10:41:23]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

#4 Příspěvek od **Conder** » 20 dub 2020 23:20

Urob rychly sken cez Malwarebytes

Stiahni a nainstaluj Malwarebytes: https://www.malwarebytes.com/mwb-download/thankyou/
Aktivaciu skusobnej verzie mozes preskocit
Otvor Malwarebytes a klikni na modre tlacitko Sken
Pockaj na dokoncenie
V pripade detekcii nechaj zmazat vsetky nalezy kliknutim na Karantena
Po dokonceni klikni na Zobrazit zpravu -> Export -> Kopirovat do schranky
Skopirovany log vloz do dalsej odpovede

korbel · #5 Příspěvek od **korbel** » 20 dub 2020 23:43

Tady to je

Kód: Vybrat vše

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 21.04.20
Čas skenování: 0:40
Logovací soubor: f9613102-8357-11ea-b175-08606ed8853b.json

-Informace o softwaru-
Verze: 4.1.0.56
Verze komponentů: 1.0.875
Aktualizovat verzi balíku komponent: 1.0.22708
Licence: Zkušební

-Systémová informace-
OS: Windows 10 (Build 18362.592)
CPU: x64
Systém souborů: NTFS
Uživatel: HOLLAK\kabby

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 268722
Zjištěné hrozby: 0
Hrozby umístěné do karantény: 0
Uplynulý čas: 0 min, 32 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

#6 Příspěvek od **Conder** » 22 dub 2020 18:25

Pardon za zdrzanie. Poprosim o obidva nove logy z FRST.

korbel · #7 Příspěvek od **korbel** » 25 dub 2020 12:46

V pohodě, taky sem byl teď nějaký čas mimo. Až dojdu z práce, tak to sem pošlu. Chtěl jsem se ještě zeptat. Je normální, že mi Malwarebytes blokuje tyto stránky kvůli Podezření na trojkého koně?

korbel · #8 Příspěvek od **korbel** » 25 dub 2020 18:57

Posílám v příloze...díky

#9 Příspěvek od **Conder** » 28 dub 2020 01:38

Docistime najprv po McAfee, ktory bol zrejme odinstalovany, ale v PC este zostai nejake sucasti. Stiahni tento nastroj: http://us.mcafee.com/apps/supporttools/mcpr/mcpr.asp
Spusti ako spravca, klikni na Next, odsuhlas licencne podmienky (Agree), opis overovaci kod, pockaj na dokoncenie a potvrd restartovanie PC.

Po restarte PC poprosim opat o obidva nove logy z FRST.

korbel · #10 Příspěvek od **korbel** » 28 dub 2020 10:16

Tady to je

Je ale divné, že sem McAfee neinstaloval. Máme ho v práci a je s ním pořád nějaký problém, tak k němu mám odpor

#11 Příspěvek od **Conder** » 28 dub 2020 23:14

Otvor poznamkovy blok (Win+R -> notepad -> enter)

Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

Hosts:
EmptyTemp:
End

Uloz na plochu s nazvom fixlist.txt
Spusti znovu FRST a klikni na Fix
Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

korbel · #12 Příspěvek od **korbel** » 29 dub 2020 11:28

Kód: Vybrat vše

Fix result of Farbar Recovery Scan Tool (x64) Version: 28-04-2020
Ran by kabby (29-04-2020 12:20:49) Run:1
Running from C:\Users\kabby\Desktop
Loaded Profiles: kabby (Available Profiles: kabby)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count    : 7
Average  : 
Sum      : 21159292
Maximum  : 
Minimum  : 
Property : Length




========= End of Powershell: =========


========================= File: C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe ========================

C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
File not signed
MD5: 37F7DD839A711B5706B1264F4D8D4BDC
Creation and modification date: 2020-04-18 21:39 - 2014-04-24 14:29
Size: 001360016
Attributes: ----A
Company Name: ASUSTeK Computer Inc. -> 
Internal Name: 
Original Name: 
Product: 
Description: 
File Version: 
Product Version: 
Copyright: 
VirusTotal: https://www.virustotal.com/file/c949a7bb236c6c03e197ef7f9a6df53e34ec35d925034351b5fd5d7db62a770e/analysis/1587997836/

====== End of File: ======

HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 7626752 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 48893285 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 3067561 B
Edge => 2464486 B
Chrome => 528090649 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 100286 B
NetworkService => 102168 B
kabby => 39908813 B

RecycleBin => 0 B
EmptyTemp: => 601.1 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 12:21:36 ====

#13 Příspěvek od **Conder** » 29 dub 2020 22:17

Vyzera to OK. Su s PC nejake problemy?

korbel · #14 Příspěvek od **korbel** » 29 dub 2020 23:33

PC je v pořádku

Děkuji moc za pomoc

#15 Příspěvek od **Conder** » 01 kvě 2020 22:40

Tak este upraceme po pouzitych nastrojoch:

Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
Uloz na plochu a spusti
Nechaj oznacenu moznost "Remove disinfection tools"
Klikni na "Run"

VIRY.CZ

Prosím o kontrolu logu

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu