prosim o kontrolu logu, obcas sa po zapnuti neda pripojit k wifi a je potrebny restart, dakujem:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.01.2018
Ran by uzivatel (administrator) on ZERO1 (27-04-2020 19:38:29)
Running from C:\Users\uzivatel\Desktop
Loaded Profiles: uzivatel & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Available Profiles: uzivatel & Administrator & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS)
Platform: Windows 8.1 Pro (Update) (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlceip.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlceip.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\Launchpad.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\Launchpad.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdhost.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(f.lux Software LLC) C:\Users\uzivatel\AppData\Local\FluxSoftware\Flux\flux.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(alch) C:\Program Files (x86)\ClamWin\bin\ClamTray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [309560 2020-03-22] (Apple Inc.)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [ClamWin] => C:\Program Files (x86)\ClamWin\bin\ClamTray.exe [86016 2018-03-03] (alch)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22245560 2020-03-19] (Piriform Software Ltd)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [f.lux] => C:\Users\uzivatel\AppData\Local\FluxSoftware\Flux\flux.exe [1385480 2019-08-30] (f.lux Software LLC)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-03-22] (Apple Inc.)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [OEXPRESS] => [X]
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\MountPoints2: {1b8b6c10-8736-11e8-88c6-edb37e02d125} - "E:\Setup.exe"
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\SysWOW64\ACTUAL~1.SCR [111616 2017-06-21] ()
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.151.233.251 192.168.0.1
Tcpip\..\Interfaces\{AE1B6697-3F17-41CD-9040-9266881E316F}: [DhcpNameServer] 213.151.233.251 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
URLSearchHook: [S-1-5-80-1985561900-798682989-2213159822-1904180398-3434236965] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3477044410-376262199-2110164357-2030828471-4165405235] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3919359670-3540430778-4246408611-3681914861-206046543] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Filter: text/xml - No CLSID Value
FireFox:
========
FF DefaultProfile: 7h7ex4z3.default-1552668782976
FF ProfilePath: Profiles/7h7ex4z3.default-1552668782976 [not found] <==== ATTENTION
FF ProfilePath: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976 [2020-04-27]
FF NewTabOverride: Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976 -> Enabled: @contain-facebook
FF Extension: (Facebook Container) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\@contain-facebook.xpi [2019-12-08]
FF Extension: (Dark Reader) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\addon@darkreader.org.xpi [2019-12-08]
FF Extension: (Name) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\firefox@ghostery.com.xpi [2019-06-24]
FF Extension: (HTTPS Everywhere) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\https-everywhere@eff.org.xpi [2020-04-03]
FF Extension: (Privacy Badger) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2019-12-08]
FF Extension: (No Name) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\tranquility@ushnisha.com.xpi [2020-02-08]
FF Extension: (uBlock Origin) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\uBlock0@raymondhill.net.xpi [2019-07-26]
FF Extension: (NoScript) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2019-07-26]
FF Extension: (DoH Roll-Out) - C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [2020-02-20] [not signed]
FF Extension: (WebCompat Reporter) - C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2020-03-14] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_363.dll [2020-04-19] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_363.dll [2020-04-19] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-04-19] (Adobe)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-03-12] (Apple Inc.)
S2 edgeupdate; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223120 2020-04-09] (Microsoft Corporation)
S3 edgeupdatem; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223120 2020-04-09] (Microsoft Corporation)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 ibtsiva.exe; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [121288 2014-08-13] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
R2 IntelUSBoverIP; C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe [394184 2014-10-15] (Intel)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-09-03] (Intel Corporation)
S3 MicrosoftEdgeElevationService; C:\Program Files (x86)\Microsoft\Edge\Application\81.0.416.64\elevation_service.exe [1125264 2020-04-23] (Microsoft Corporation)
S3 MsMpiLaunchSvc; C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe [23040 2016-03-04] () [File not signed]
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [485048 2017-08-22] (Microsoft Corporation)
R3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [60592 2017-08-22] (Microsoft Corporation)
R3 MSSQLFDLauncher$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [60592 2017-08-22] (Microsoft Corporation)
R2 MSSQLLaunchpad; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\launchpad.exe [1121464 2017-08-22] (Microsoft Corporation)
R2 MSSQLLaunchpad$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\launchpad.exe [1121464 2017-08-22] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [485048 2017-08-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265936 2014-10-29] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [578744 2017-08-22] (Microsoft Corporation)
S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [578744 2017-08-22] (Microsoft Corporation)
R2 SQLTELEMETRY; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlceip.exe [246968 2017-08-22] (Microsoft Corporation)
R2 SQLTELEMETRY$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlceip.exe [246968 2017-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3818704 2014-10-29] (Intel® Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-11-21] (ASUS Corporation)
S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [113864 2013-07-18] (ASIX Electronics Corp.)
S3 BthMtpEnum; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [62976 2013-08-22] (Microsoft Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [130648 2016-08-22] (GenesysLogic)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [219592 2014-08-13] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
S1 ISODisk; C:\Windows\SysWow64\Drivers\ISODisk.sys [9600 2006-04-26] () [File not signed]
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3482600 2014-11-06] (Intel Corporation)
S4 RsFx0500; C:\Windows\System32\DRIVERS\RsFx0500.sys [261848 2017-08-22] (Microsoft Corporation)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [70656 2013-06-18] (Realtek )
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [14368 1999-09-14] () [File not signed]
R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [213296 2014-10-15] (Windows (R) Win 7 DDK provider)
S3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [237312 2020-02-19] (Oracle Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]
S3 VirtualDVD; \SystemRoot\system32\DRIVERS\VirtualDVD.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-04-27 19:38 - 2020-04-27 19:38 - 000019081 _____ C:\Users\uzivatel\Desktop\FRST.txt
2020-04-16 10:50 - 2020-04-16 10:50 - 000032464 _____ C:\Users\uzivatel\Downloads\PK_2020_03_20.pdf
2020-04-13 15:52 - 2020-04-13 15:52 - 000000947 _____ C:\Users\Public\Desktop\ISODisk.lnk
2020-04-13 15:52 - 2020-04-13 15:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISODisk
2020-04-13 15:52 - 2020-04-13 15:52 - 000000000 ____D C:\Program Files (x86)\ISODisk
2020-04-13 15:52 - 2006-04-26 01:03 - 000009600 _____ C:\Windows\SysWOW64\Drivers\ISODisk.sys
2020-04-13 15:19 - 2020-04-13 15:51 - 000000000 ____D C:\Program Files (x86)\WinISO Computing
2020-04-13 15:19 - 2020-04-13 15:19 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\WinISO Computing
2020-04-13 15:19 - 2020-04-13 15:19 - 000000000 ____D C:\Users\uzivatel\AppData\Local\WinISO Computing
2020-04-13 15:10 - 2020-04-13 15:17 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Seznam.cz
2020-04-13 14:10 - 2020-04-13 14:10 - 000001133 _____ C:\Users\Public\Desktop\MiniTool Power Data Recovery 6.8.lnk
2020-04-13 14:10 - 2020-04-13 14:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Power Data Recovery 6.8
2020-04-13 14:10 - 2020-04-13 14:10 - 000000000 ____D C:\Program Files (x86)\PowerDataRecovery
2020-04-13 13:49 - 2020-04-13 13:57 - 000000000 ____D C:\Program Files (x86)\DiskInternals
2020-04-13 11:53 - 2020-04-13 11:58 - 000000000 ____D C:\Program Files\Wondershare
2020-04-12 22:06 - 2020-04-12 22:06 - 000003032 _____ C:\Windows\System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B}
2020-04-11 21:06 - 2020-04-13 11:54 - 000000000 ____D C:\ProgramData\Wondershare
2020-04-11 21:01 - 2020-04-11 21:10 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Wondershare
2020-04-10 22:07 - 1999-09-14 17:43 - 000014368 ____R C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2020-04-09 22:55 - 2020-04-09 22:55 - 001376256 _____ C:\Windows\SysWOW64\glide3x.dll
2020-04-09 22:55 - 2020-04-09 22:55 - 001310720 _____ C:\Windows\SysWOW64\glide.dll
2020-04-09 22:20 - 2020-04-09 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein
2020-04-09 22:15 - 2020-04-13 15:28 - 000000635 _____ C:\Windows\Rtcw.INI
2020-04-09 22:14 - 2020-04-24 14:19 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-04-09 22:14 - 2020-04-24 14:19 - 000002210 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-04-09 22:13 - 2020-04-16 10:02 - 000003380 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-04-09 22:13 - 2020-04-16 10:02 - 000003252 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-04-09 19:29 - 2020-04-09 19:30 - 000002235 _____ C:\Windows\diagwrn.xml
2020-04-09 19:29 - 2020-04-09 19:30 - 000001908 _____ C:\Windows\diagerr.xml
2020-04-07 22:47 - 2020-04-07 22:47 - 000001375 _____ C:\Windows\Ncss97.ini
2020-04-07 22:47 - 2020-04-07 22:47 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCSS 97
2020-04-07 22:47 - 2020-04-07 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSS 97
2020-04-07 22:47 - 1998-04-01 12:33 - 000254976 _____ (heilerSoftware) C:\Windows\SysWOW64\h5ocx32.ocx
2020-04-07 22:47 - 1998-04-01 12:32 - 001028096 _____ (heilerSoftware) C:\Windows\SysWOW64\h5krnl32.dll
2020-04-07 22:47 - 1998-04-01 12:31 - 000114688 _____ (heilerSoftware) C:\Windows\SysWOW64\h5dlg32.dll
2020-04-07 22:47 - 1998-04-01 12:31 - 000051200 _____ (heilerSoftware) C:\Windows\SysWOW64\h5tool32.dll
2020-04-07 22:47 - 1998-03-16 17:59 - 000093696 _____ (heilerSoftware) C:\Windows\SysWOW64\h5rtf32.dll
2020-04-07 22:47 - 1998-03-16 17:58 - 000175104 _____ (heilerSoftware) C:\Windows\SysWOW64\h5menu32.dll
2020-04-07 22:47 - 1998-03-16 17:57 - 000188928 _____ (heilerSoftware) C:\Windows\SysWOW64\h5icon32.dll
2020-04-07 22:47 - 1997-04-18 05:00 - 000622536 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Graphs32.ocx
2020-04-07 22:47 - 1997-04-16 05:00 - 000468928 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gsw32.exe
2020-04-07 22:47 - 1997-04-16 05:00 - 000263120 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gswag32.dll
2020-04-07 22:47 - 1997-04-16 05:00 - 000104384 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gswdll32.dll
2020-04-07 22:47 - 1997-04-15 05:00 - 000107008 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gsjpg32.dll
2020-04-07 22:47 - 1997-04-09 05:00 - 000974967 _____ C:\Windows\SysWOW64\Graphppd.hlp
2020-04-07 22:47 - 1997-04-01 05:00 - 000000666 _____ C:\Windows\SysWOW64\Graphppd.cnt
2020-04-07 22:47 - 1996-11-17 00:00 - 000006931 _____ C:\Windows\SysWOW64\Odbcjet.cnt
2020-04-07 22:47 - 1996-11-17 00:00 - 000003176 _____ C:\Windows\SysWOW64\Odbcjtnw.cnt
2020-04-07 22:47 - 1996-10-10 11:41 - 000240640 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\imgman31.dll
2020-04-07 22:47 - 1996-10-10 11:41 - 000036352 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31xjpg.del
2020-04-07 22:47 - 1996-10-10 11:40 - 000055808 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31tif.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000033792 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31pcx.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000021504 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31tga.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000020992 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31bmp.dil
2020-04-07 22:47 - 1996-07-25 10:50 - 000118272 _____ (Crescent Division of Progress Software Corporation) C:\Windows\SysWOW64\Qpro32.dll
2020-04-07 22:47 - 1996-07-24 14:27 - 000100352 _____ (Crescent Division of Progress Software Corporation.) C:\Windows\SysWOW64\Csform32.ocx
2020-04-07 22:47 - 1995-10-11 02:00 - 000133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfcans32.dll
2020-04-07 22:47 - 1995-05-22 02:00 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Oc30.dll
2020-04-07 22:46 - 2020-04-07 22:47 - 000000000 ____D C:\Program Files (x86)\NCSS97
2020-04-07 22:46 - 1998-01-05 11:49 - 000054784 _____ (Circle Systems, Inc. ) C:\Windows\SysWOW64\Stodbc32.dll
2020-04-07 22:46 - 1998-01-05 11:47 - 000427008 _____ (Circle Systems, Inc. ) C:\Windows\SysWOW64\Statrn32.dll
2020-04-07 22:46 - 1997-07-31 10:46 - 000101888 _____ (MicroDexterity, Inc.) C:\Windows\SysWOW64\stamin32.dll
2020-04-07 22:46 - 1997-07-19 17:00 - 000129808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2020-04-07 22:46 - 1997-07-19 16:55 - 001347344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvbvm50.dll
2020-04-07 22:46 - 1997-07-01 21:52 - 000238080 _____ (EllTech Development, Inc.) C:\Windows\SysWOW64\Comppl32.dll
2020-04-07 22:46 - 1997-07-01 12:01 - 000816640 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\Vcf132.ocx
2020-04-07 22:46 - 1997-03-11 10:52 - 000152576 _____ (VideoSoft) C:\Windows\SysWOW64\Vsocx32.ocx
2020-04-07 16:25 - 2020-04-09 22:08 - 000000000 ____D C:\Users\uzivatel\VirtualBox VMs
2020-04-07 16:25 - 2020-04-09 22:08 - 000000000 ____D C:\Users\uzivatel\.VirtualBox
2020-04-07 16:25 - 2020-04-09 20:16 - 000000000 ____D C:\ProgramData\VirtualBox
2020-04-07 16:18 - 2020-04-09 23:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Finale 2000
2020-04-07 16:18 - 1998-04-30 14:56 - 000129024 _____ C:\Windows\UNWISE.EXE
2020-04-06 23:12 - 2020-04-06 23:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chessmaster 5500
2020-04-06 23:12 - 2020-04-06 23:12 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chessmaster 5500
2020-04-06 23:08 - 2020-04-07 22:47 - 000000209 _____ C:\Windows\ODBCINST.INI
2020-04-06 23:08 - 2020-04-06 23:08 - 000000232 _____ C:\Windows\ODBC.INI
2020-04-06 23:08 - 1997-04-25 00:00 - 000230672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0011.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0010.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0005.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000087824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0007.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH000f.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000026224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC16GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000011536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBCCP32.CPL
2020-04-06 23:08 - 1997-04-25 00:00 - 000010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC32GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DS32GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000004656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DS16GT.DLL
2020-04-06 23:08 - 1996-12-03 13:07 - 000403216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl35.dll
2020-04-06 23:08 - 1996-11-17 00:00 - 001038848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJET35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000368912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBAR332.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000251664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSRD2X35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000163384 _____ C:\Windows\SysWOW64\Odbcjet.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBCTL32.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000061269 _____ C:\Windows\SysWOW64\Odbcjtnw.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000036624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJINT35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000026340 _____ C:\Windows\SysWOW64\Odbcinst.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000024336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJTER35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000000244 _____ C:\Windows\SysWOW64\Odbcinst.cnt
2020-04-06 23:08 - 1996-10-31 00:00 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0004.TMP
2020-04-06 23:08 - 1996-09-18 00:00 - 000018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0006.TMP
2020-04-06 23:08 - 1996-08-24 00:00 - 000002233 _____ C:\Windows\SysWOW64\~GLH0002.TMP
2020-04-06 23:08 - 1996-08-24 00:00 - 000002151 _____ C:\Windows\SysWOW64\~GLH0003.TMP
2020-04-06 23:08 - 1995-12-04 14:08 - 000027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.000
2020-04-06 22:17 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnlobby.dll
2020-04-06 22:17 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2020-04-06 22:17 - 2013-08-22 13:22 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2020-04-06 22:17 - 2013-08-22 13:22 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2020-04-06 22:17 - 2013-08-22 13:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2020-04-06 22:17 - 2013-08-22 13:17 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2020-04-06 22:17 - 2013-08-22 13:17 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2020-04-06 22:17 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnlobby.dll
2020-04-06 22:17 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll
2020-04-06 22:17 - 2013-08-22 05:56 - 000377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2020-04-06 22:17 - 2013-08-22 05:55 - 000033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2020-04-06 22:17 - 2013-08-22 05:51 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2020-04-06 22:17 - 2013-08-22 05:51 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2020-04-06 22:17 - 2013-08-22 05:50 - 000059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2020-04-06 22:08 - 2020-04-06 22:08 - 000000000 ____D C:\Users\uzivatel\AppData\Local\DOSBox
2020-04-01 19:43 - 2020-04-01 19:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2020-04-01 19:19 - 2020-04-01 19:19 - 000001761 _____ C:\Users\Public\Desktop\iTunes.lnk
2020-04-01 19:19 - 2020-04-01 19:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2020-04-01 19:19 - 2020-04-01 19:19 - 000000000 ____D C:\Program Files\iTunes
2020-04-01 19:19 - 2020-04-01 19:19 - 000000000 ____D C:\Program Files\iPod
2020-03-29 15:34 - 2020-03-29 15:34 - 000751680 _____ C:\Users\uzivatel\Downloads\ProLite XB2483HSU-B3 - cz_cs.pdf
2020-03-28 12:35 - 2011-05-09 16:44 - 001837296 _____ (Microsoft Corporation) C:\Windows\system32\WUDFUpdate_01009.dll
2020-03-28 12:14 - 2020-03-28 12:54 - 000000000 ____D C:\Program Files (x86)\DriverToolkit
2020-03-28 12:14 - 2020-03-28 12:14 - 000000000 ____D C:\Users\uzivatel\AppData\Local\DriverToolkit
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-04-27 19:38 - 2017-07-25 22:18 - 000000000 ____D C:\FRST
2020-04-27 19:38 - 2014-03-18 17:25 - 001243990 _____ C:\Windows\system32\PerfStringBackup.INI
2020-04-27 19:38 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2020-04-27 19:33 - 2016-11-15 19:41 - 000000000 ____D C:\Users\uzivatel\AppData\LocalLow\Mozilla
2020-04-27 19:31 - 2018-03-28 20:32 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2020-04-27 19:31 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-04-27 19:29 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2020-04-27 19:27 - 2018-06-01 16:01 - 000508936 _____ C:\Windows\system32\FNTCACHE.DAT
2020-04-27 13:00 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2020-04-25 10:35 - 2015-09-02 18:48 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4176085001-3363555415-2058170901-1001
2020-04-24 15:21 - 2017-06-30 22:07 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Mp3tag
2020-04-19 10:02 - 2015-09-03 21:51 - 000000000 ____D C:\Users\uzivatel\AppData\Local\Adobe
2020-04-19 09:55 - 2018-05-18 21:28 - 000004462 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2020-04-19 09:55 - 2015-09-30 17:16 - 000004288 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2020-04-19 09:55 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-04-19 09:55 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2020-04-18 20:04 - 2018-08-31 14:18 - 000131200 _____ C:\Users\uzivatel\AppData\Local\GDIPFONTCACHEV1.DAT
2020-04-13 13:46 - 2019-07-07 17:04 - 000000000 ____D C:\Program Files\Recuva
2020-04-13 11:53 - 2018-01-12 23:13 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-04-12 22:15 - 2019-04-28 19:01 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\vlc
2020-04-12 22:07 - 2015-05-13 11:07 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2020-04-11 21:13 - 2017-07-18 21:59 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-04-11 21:01 - 2018-01-12 23:13 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-04-11 21:01 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\FxsTmp
2020-04-11 11:40 - 2017-03-04 22:24 - 000000432 __RSH C:\ProgramData\ntuser.pol
2020-04-10 00:01 - 2020-03-27 14:03 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Visual Studio Setup
2020-04-10 00:01 - 2014-11-16 14:09 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-04-10 00:01 - 2014-11-16 08:56 - 000000000 ____D C:\ProgramData\Package Cache
2020-04-10 00:01 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-04-09 23:59 - 2015-09-06 13:31 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Foxit Software
2020-04-09 23:58 - 2020-03-27 14:54 - 000000000 ____D C:\Program Files\IIS Express
2020-04-09 23:58 - 2020-03-27 14:54 - 000000000 ____D C:\Program Files (x86)\IIS Express
2020-04-09 23:58 - 2018-03-28 17:06 - 000000000 ____D C:\Windows\SysWOW64\1033
2020-04-09 23:58 - 2018-03-28 17:06 - 000000000 ____D C:\Windows\system32\1033
2020-04-09 23:58 - 2018-03-28 16:52 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2020-04-09 23:06 - 2015-09-02 19:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-04-09 23:03 - 2016-06-12 11:14 - 000000000 ____D C:\Users\uzivatel\AppData\Local\CrashDumps
2020-04-09 22:55 - 2017-12-17 20:04 - 002953216 _____ (3Dfx Interactive, Inc.) C:\Windows\SysWOW64\glide2x.dll
2020-04-09 22:54 - 2017-09-24 19:14 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-04-09 22:54 - 2015-09-02 19:09 - 000000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-04-09 19:44 - 2013-08-22 17:36 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2020-04-09 19:44 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2020-04-07 16:25 - 2015-09-02 18:42 - 000000000 ____D C:\Users\uzivatel
2020-04-07 09:03 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2020-04-06 22:17 - 2015-09-02 19:15 - 000220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2020-04-06 22:17 - 2015-09-02 19:15 - 000046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2020-04-06 22:17 - 2015-09-02 19:14 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2020-04-06 22:17 - 2015-09-02 19:14 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2020-04-06 22:17 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2020-04-02 01:49 - 2017-10-14 13:27 - 000744808 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2020-04-01 19:45 - 2017-07-16 19:13 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Apple Computer
2020-03-28 12:22 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
==================== Files in the root of some directories =======
2015-09-02 18:43 - 2019-10-27 20:27 - 000000125 _____ () C:\Users\uzivatel\AppData\Roaming\sp_data.sys
2015-10-01 15:42 - 2015-10-01 15:42 - 000000017 _____ () C:\Users\uzivatel\AppData\Local\resmon.resmoncfg
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2020-04-13 09:44
==================== End of FRST.txt ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
prosim o kontrolu & obcas problem wifi (nahodne)
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 118241
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosim o kontrolu & obcas problem wifi (nahodne)
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosim o kontrolu & obcas problem wifi (nahodne)
# -------------------------------
# Malwarebytes AdwCleaner 8.0.4.0
# -------------------------------
# Build: 04-03-2020
# Database: 2020-04-08.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-29-2020
# Duration: 00:00:01
# OS: Windows 8.1 Pro
# Cleaned: 5
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\DriverToolkit
Deleted C:\Users\uzivatel\AppData\Local\DriverToolkit
Deleted C:\Users\uzivatel\AppData\Roaming\Seznam.cz
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\DriverToolkit
Deleted HKCU\Software\Seznam.cz
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner_Debug.log - [31614 octets] - [27/10/2019 19:33:40]
AdwCleaner[S00].txt - [3840 octets] - [27/10/2019 19:34:06]
AdwCleaner[C00].txt - [4287 octets] - [27/10/2019 19:36:09]
AdwCleaner[S01].txt - [1911 octets] - [29/04/2020 20:19:59]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
# Malwarebytes AdwCleaner 8.0.4.0
# -------------------------------
# Build: 04-03-2020
# Database: 2020-04-08.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-29-2020
# Duration: 00:00:01
# OS: Windows 8.1 Pro
# Cleaned: 5
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\DriverToolkit
Deleted C:\Users\uzivatel\AppData\Local\DriverToolkit
Deleted C:\Users\uzivatel\AppData\Roaming\Seznam.cz
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\DriverToolkit
Deleted HKCU\Software\Seznam.cz
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner_Debug.log - [31614 octets] - [27/10/2019 19:33:40]
AdwCleaner[S00].txt - [3840 octets] - [27/10/2019 19:34:06]
AdwCleaner[C00].txt - [4287 octets] - [27/10/2019 19:36:09]
AdwCleaner[S01].txt - [1911 octets] - [29/04/2020 20:19:59]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 118241
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosim o kontrolu & obcas problem wifi (nahodne)
Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosim o kontrolu & obcas problem wifi (nahodne)
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.01.2018
Ran by uzivatel (administrator) on ZERO1 (30-04-2020 18:58:28)
Running from C:\Users\uzivatel\Desktop
Loaded Profiles: uzivatel & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Available Profiles: uzivatel & Administrator & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS)
Platform: Windows 8.1 Pro (Update) (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlceip.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlceip.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\Launchpad.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\Launchpad.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
() C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdhost.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(f.lux Software LLC) C:\Users\uzivatel\AppData\Local\FluxSoftware\Flux\flux.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(alch) C:\Program Files (x86)\ClamWin\bin\ClamTray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302392 2020-03-28] (Apple Inc.)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM\...\Run: [MTPW] => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] ()
HKLM-x32\...\Run: [ClamWin] => C:\Program Files (x86)\ClamWin\bin\ClamTray.exe [86016 2018-03-03] (alch)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22245560 2020-03-19] (Piriform Software Ltd)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [f.lux] => C:\Users\uzivatel\AppData\Local\FluxSoftware\Flux\flux.exe [1385480 2019-08-30] (f.lux Software LLC)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-03-22] (Apple Inc.)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [OEXPRESS] => [X]
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\MountPoints2: {1b8b6c10-8736-11e8-88c6-edb37e02d125} - "E:\Setup.exe"
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\SysWOW64\ACTUAL~1.SCR [111616 2017-06-21] ()
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.151.233.251 192.168.0.1
Tcpip\..\Interfaces\{AE1B6697-3F17-41CD-9040-9266881E316F}: [DhcpNameServer] 213.151.233.251 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
URLSearchHook: [S-1-5-80-1985561900-798682989-2213159822-1904180398-3434236965] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3477044410-376262199-2110164357-2030828471-4165405235] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3919359670-3540430778-4246408611-3681914861-206046543] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Filter: text/xml - No CLSID Value
FireFox:
========
FF DefaultProfile: 7h7ex4z3.default-1552668782976
FF ProfilePath: Profiles/7h7ex4z3.default-1552668782976 [not found] <==== ATTENTION
FF ProfilePath: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976 [2020-04-30]
FF NewTabOverride: Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976 -> Enabled: @contain-facebook
FF Extension: (Facebook Container) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\@contain-facebook.xpi [2019-12-08]
FF Extension: (Dark Reader) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\addon@darkreader.org.xpi [2019-12-08]
FF Extension: (Name) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\firefox@ghostery.com.xpi [2019-06-24]
FF Extension: (HTTPS Everywhere) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\https-everywhere@eff.org.xpi [2020-04-03]
FF Extension: (Privacy Badger) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2019-12-08]
FF Extension: (No Name) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\tranquility@ushnisha.com.xpi [2020-02-08]
FF Extension: (uBlock Origin) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\uBlock0@raymondhill.net.xpi [2019-07-26]
FF Extension: (NoScript) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2019-07-26]
FF Extension: (DoH Roll-Out) - C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [2020-02-20] [not signed]
FF Extension: (WebCompat Reporter) - C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2020-03-14] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_363.dll [2020-04-19] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_363.dll [2020-04-19] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-04-19] (Adobe)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-03-12] (Apple Inc.)
S2 edgeupdate; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223120 2020-04-09] (Microsoft Corporation)
S3 edgeupdatem; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223120 2020-04-09] (Microsoft Corporation)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 ibtsiva.exe; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [121288 2014-08-13] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
R2 IntelUSBoverIP; C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe [394184 2014-10-15] (Intel)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-09-03] (Intel Corporation)
S3 MicrosoftEdgeElevationService; C:\Program Files (x86)\Microsoft\Edge\Application\81.0.416.68\elevation_service.exe [1125264 2020-04-29] (Microsoft Corporation)
S3 MsMpiLaunchSvc; C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe [23040 2016-03-04] () [File not signed]
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [485048 2017-08-22] (Microsoft Corporation)
R3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [60592 2017-08-22] (Microsoft Corporation)
R3 MSSQLFDLauncher$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [60592 2017-08-22] (Microsoft Corporation)
R2 MSSQLLaunchpad; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\launchpad.exe [1121464 2017-08-22] (Microsoft Corporation)
R2 MSSQLLaunchpad$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\launchpad.exe [1121464 2017-08-22] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [485048 2017-08-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265936 2014-10-29] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [578744 2017-08-22] (Microsoft Corporation)
S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [578744 2017-08-22] (Microsoft Corporation)
R2 SQLTELEMETRY; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlceip.exe [246968 2017-08-22] (Microsoft Corporation)
R2 SQLTELEMETRY$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlceip.exe [246968 2017-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3818704 2014-10-29] (Intel® Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-11-21] (ASUS Corporation)
S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [113864 2013-07-18] (ASIX Electronics Corp.)
S3 BthMtpEnum; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [62976 2013-08-22] (Microsoft Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [130648 2016-08-22] (GenesysLogic)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [219592 2014-08-13] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
S1 ISODisk; C:\Windows\SysWow64\Drivers\ISODisk.sys [9600 2006-04-26] () [File not signed]
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3482600 2014-11-06] (Intel Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] ()
S4 RsFx0500; C:\Windows\System32\DRIVERS\RsFx0500.sys [261848 2017-08-22] (Microsoft Corporation)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [70656 2013-06-18] (Realtek )
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [14368 1999-09-14] () [File not signed]
R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [213296 2014-10-15] (Windows (R) Win 7 DDK provider)
S3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [237312 2020-02-19] (Oracle Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]
S3 VirtualDVD; \SystemRoot\system32\DRIVERS\VirtualDVD.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-04-30 18:58 - 2020-04-30 18:58 - 000019265 _____ C:\Users\uzivatel\Desktop\FRST.txt
2020-04-30 15:52 - 2019-11-08 10:15 - 003600896 _____ C:\Windows\system32\pwNative.exe
2020-04-30 15:52 - 2019-11-08 10:15 - 000019152 _____ C:\Windows\system32\pwdrvio.sys
2020-04-30 15:52 - 2019-11-08 10:15 - 000012504 _____ C:\Windows\system32\pwdspio.sys
2020-04-30 15:51 - 2020-04-30 15:51 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\QtProject
2020-04-30 15:50 - 2020-04-30 15:52 - 000000000 ____D C:\Program Files\MiniTool Partition Wizard 12
2020-04-30 15:50 - 2020-04-30 15:50 - 000003180 _____ C:\Windows\System32\Tasks\MiniToolPartitionWizard
2020-04-30 15:50 - 2020-04-30 15:50 - 000001001 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard.lnk
2020-04-30 15:50 - 2020-04-30 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard 12
2020-04-30 15:48 - 2020-04-30 15:49 - 004095376 _____ (MiniTool Software Limited ) C:\Users\uzivatel\Downloads\pw12-free.exe
2020-04-30 15:39 - 2020-04-30 15:57 - 000000299 _____ C:\Users\uzivatel\Desktop\usb.txt
2020-04-30 15:01 - 2020-04-30 15:18 - 000000000 ____D C:\Users\uzivatel\Documents\dokumenty
2020-04-29 20:18 - 2020-04-29 20:18 - 008196784 _____ (Malwarebytes) C:\Users\uzivatel\Desktop\adwcleaner_8.0.4.exe
2020-04-28 21:25 - 2020-04-28 21:25 - 000001761 _____ C:\Users\Public\Desktop\iTunes.lnk
2020-04-28 21:25 - 2020-04-28 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2020-04-28 21:25 - 2020-04-28 21:25 - 000000000 ____D C:\Program Files\iTunes
2020-04-28 21:25 - 2020-04-28 21:25 - 000000000 ____D C:\Program Files\iPod
2020-04-17 21:39 - 2020-04-17 22:29 - 000078343 _____ C:\Users\uzivatel\Downloads\prepocet_ETF.xlsx
2020-04-16 10:50 - 2020-04-16 10:50 - 000032464 _____ C:\Users\uzivatel\Downloads\PK_2020_03_20.pdf
2020-04-15 20:33 - 2020-04-17 23:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein DEMO
2020-04-13 15:52 - 2020-04-13 15:52 - 000000947 _____ C:\Users\Public\Desktop\ISODisk.lnk
2020-04-13 15:52 - 2020-04-13 15:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISODisk
2020-04-13 15:52 - 2020-04-13 15:52 - 000000000 ____D C:\Program Files (x86)\ISODisk
2020-04-13 15:52 - 2006-04-26 01:03 - 000009600 _____ C:\Windows\SysWOW64\Drivers\ISODisk.sys
2020-04-13 15:19 - 2020-04-13 15:51 - 000000000 ____D C:\Program Files (x86)\WinISO Computing
2020-04-13 15:19 - 2020-04-13 15:19 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\WinISO Computing
2020-04-13 15:19 - 2020-04-13 15:19 - 000000000 ____D C:\Users\uzivatel\AppData\Local\WinISO Computing
2020-04-13 14:10 - 2020-04-13 14:10 - 000001133 _____ C:\Users\Public\Desktop\MiniTool Power Data Recovery 6.8.lnk
2020-04-13 14:10 - 2020-04-13 14:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Power Data Recovery 6.8
2020-04-13 14:10 - 2020-04-13 14:10 - 000000000 ____D C:\Program Files (x86)\PowerDataRecovery
2020-04-13 13:49 - 2020-04-13 13:57 - 000000000 ____D C:\Program Files (x86)\DiskInternals
2020-04-13 11:53 - 2020-04-13 11:58 - 000000000 ____D C:\Program Files\Wondershare
2020-04-12 22:06 - 2020-04-12 22:06 - 000003032 _____ C:\Windows\System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B}
2020-04-12 17:51 - 2020-04-12 17:51 - 001522649 _____ C:\Users\uzivatel\Downloads\konec-prokrastinace-petr-ludwig-ukazkova-kapitola.pdf
2020-04-11 21:06 - 2020-04-13 11:54 - 000000000 ____D C:\ProgramData\Wondershare
2020-04-11 21:01 - 2020-04-11 21:10 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Wondershare
2020-04-10 22:07 - 1999-09-14 17:43 - 000014368 ____R C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2020-04-09 22:55 - 2020-04-09 22:55 - 001376256 _____ C:\Windows\SysWOW64\glide3x.dll
2020-04-09 22:55 - 2020-04-09 22:55 - 001310720 _____ C:\Windows\SysWOW64\glide.dll
2020-04-09 22:20 - 2020-04-09 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein
2020-04-09 22:15 - 2020-04-13 15:28 - 000000635 _____ C:\Windows\Rtcw.INI
2020-04-09 22:14 - 2020-04-30 14:57 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-04-09 22:14 - 2020-04-30 14:57 - 000002210 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-04-09 22:13 - 2020-04-30 14:51 - 000003380 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-04-09 22:13 - 2020-04-30 14:51 - 000003252 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-04-09 19:29 - 2020-04-09 19:30 - 000002235 _____ C:\Windows\diagwrn.xml
2020-04-09 19:29 - 2020-04-09 19:30 - 000001908 _____ C:\Windows\diagerr.xml
2020-04-07 22:47 - 2020-04-07 22:47 - 000001375 _____ C:\Windows\Ncss97.ini
2020-04-07 22:47 - 2020-04-07 22:47 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCSS 97
2020-04-07 22:47 - 2020-04-07 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSS 97
2020-04-07 22:47 - 1998-04-01 12:33 - 000254976 _____ (heilerSoftware) C:\Windows\SysWOW64\h5ocx32.ocx
2020-04-07 22:47 - 1998-04-01 12:32 - 001028096 _____ (heilerSoftware) C:\Windows\SysWOW64\h5krnl32.dll
2020-04-07 22:47 - 1998-04-01 12:31 - 000114688 _____ (heilerSoftware) C:\Windows\SysWOW64\h5dlg32.dll
2020-04-07 22:47 - 1998-04-01 12:31 - 000051200 _____ (heilerSoftware) C:\Windows\SysWOW64\h5tool32.dll
2020-04-07 22:47 - 1998-03-16 17:59 - 000093696 _____ (heilerSoftware) C:\Windows\SysWOW64\h5rtf32.dll
2020-04-07 22:47 - 1998-03-16 17:58 - 000175104 _____ (heilerSoftware) C:\Windows\SysWOW64\h5menu32.dll
2020-04-07 22:47 - 1998-03-16 17:57 - 000188928 _____ (heilerSoftware) C:\Windows\SysWOW64\h5icon32.dll
2020-04-07 22:47 - 1997-04-18 05:00 - 000622536 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Graphs32.ocx
2020-04-07 22:47 - 1997-04-16 05:00 - 000468928 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gsw32.exe
2020-04-07 22:47 - 1997-04-16 05:00 - 000263120 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gswag32.dll
2020-04-07 22:47 - 1997-04-16 05:00 - 000104384 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gswdll32.dll
2020-04-07 22:47 - 1997-04-15 05:00 - 000107008 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gsjpg32.dll
2020-04-07 22:47 - 1997-04-09 05:00 - 000974967 _____ C:\Windows\SysWOW64\Graphppd.hlp
2020-04-07 22:47 - 1997-04-01 05:00 - 000000666 _____ C:\Windows\SysWOW64\Graphppd.cnt
2020-04-07 22:47 - 1996-11-17 00:00 - 000006931 _____ C:\Windows\SysWOW64\Odbcjet.cnt
2020-04-07 22:47 - 1996-11-17 00:00 - 000003176 _____ C:\Windows\SysWOW64\Odbcjtnw.cnt
2020-04-07 22:47 - 1996-10-10 11:41 - 000240640 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\imgman31.dll
2020-04-07 22:47 - 1996-10-10 11:41 - 000036352 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31xjpg.del
2020-04-07 22:47 - 1996-10-10 11:40 - 000055808 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31tif.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000033792 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31pcx.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000021504 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31tga.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000020992 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31bmp.dil
2020-04-07 22:47 - 1996-07-25 10:50 - 000118272 _____ (Crescent Division of Progress Software Corporation) C:\Windows\SysWOW64\Qpro32.dll
2020-04-07 22:47 - 1996-07-24 14:27 - 000100352 _____ (Crescent Division of Progress Software Corporation.) C:\Windows\SysWOW64\Csform32.ocx
2020-04-07 22:47 - 1995-10-11 02:00 - 000133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfcans32.dll
2020-04-07 22:47 - 1995-05-22 02:00 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Oc30.dll
2020-04-07 22:46 - 2020-04-07 22:47 - 000000000 ____D C:\Program Files (x86)\NCSS97
2020-04-07 22:46 - 1998-01-05 11:49 - 000054784 _____ (Circle Systems, Inc. ) C:\Windows\SysWOW64\Stodbc32.dll
2020-04-07 22:46 - 1998-01-05 11:47 - 000427008 _____ (Circle Systems, Inc. ) C:\Windows\SysWOW64\Statrn32.dll
2020-04-07 22:46 - 1997-07-31 10:46 - 000101888 _____ (MicroDexterity, Inc.) C:\Windows\SysWOW64\stamin32.dll
2020-04-07 22:46 - 1997-07-19 17:00 - 000129808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2020-04-07 22:46 - 1997-07-19 16:55 - 001347344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvbvm50.dll
2020-04-07 22:46 - 1997-07-01 21:52 - 000238080 _____ (EllTech Development, Inc.) C:\Windows\SysWOW64\Comppl32.dll
2020-04-07 22:46 - 1997-07-01 12:01 - 000816640 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\Vcf132.ocx
2020-04-07 22:46 - 1997-03-11 10:52 - 000152576 _____ (VideoSoft) C:\Windows\SysWOW64\Vsocx32.ocx
2020-04-07 16:25 - 2020-04-09 22:08 - 000000000 ____D C:\Users\uzivatel\VirtualBox VMs
2020-04-07 16:25 - 2020-04-09 22:08 - 000000000 ____D C:\Users\uzivatel\.VirtualBox
2020-04-07 16:25 - 2020-04-09 20:16 - 000000000 ____D C:\ProgramData\VirtualBox
2020-04-07 16:18 - 2020-04-09 23:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Finale 2000
2020-04-07 16:18 - 1998-04-30 14:56 - 000129024 _____ C:\Windows\UNWISE.EXE
2020-04-06 23:12 - 2020-04-06 23:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chessmaster 5500
2020-04-06 23:12 - 2020-04-06 23:12 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chessmaster 5500
2020-04-06 23:08 - 2020-04-07 22:47 - 000000209 _____ C:\Windows\ODBCINST.INI
2020-04-06 23:08 - 2020-04-06 23:08 - 000000232 _____ C:\Windows\ODBC.INI
2020-04-06 23:08 - 1997-04-25 00:00 - 000230672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0011.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0010.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0005.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000087824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0007.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH000f.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000026224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC16GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000011536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBCCP32.CPL
2020-04-06 23:08 - 1997-04-25 00:00 - 000010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC32GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DS32GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000004656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DS16GT.DLL
2020-04-06 23:08 - 1996-12-03 13:07 - 000403216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl35.dll
2020-04-06 23:08 - 1996-11-17 00:00 - 001038848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJET35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000368912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBAR332.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000251664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSRD2X35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000163384 _____ C:\Windows\SysWOW64\Odbcjet.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBCTL32.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000061269 _____ C:\Windows\SysWOW64\Odbcjtnw.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000036624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJINT35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000026340 _____ C:\Windows\SysWOW64\Odbcinst.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000024336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJTER35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000000244 _____ C:\Windows\SysWOW64\Odbcinst.cnt
2020-04-06 23:08 - 1996-10-31 00:00 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0004.TMP
2020-04-06 23:08 - 1996-09-18 00:00 - 000018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0006.TMP
2020-04-06 23:08 - 1996-08-24 00:00 - 000002233 _____ C:\Windows\SysWOW64\~GLH0002.TMP
2020-04-06 23:08 - 1996-08-24 00:00 - 000002151 _____ C:\Windows\SysWOW64\~GLH0003.TMP
2020-04-06 23:08 - 1995-12-04 14:08 - 000027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.000
2020-04-06 22:17 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnlobby.dll
2020-04-06 22:17 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2020-04-06 22:17 - 2013-08-22 13:22 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2020-04-06 22:17 - 2013-08-22 13:22 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2020-04-06 22:17 - 2013-08-22 13:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2020-04-06 22:17 - 2013-08-22 13:17 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2020-04-06 22:17 - 2013-08-22 13:17 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2020-04-06 22:17 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnlobby.dll
2020-04-06 22:17 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll
2020-04-06 22:17 - 2013-08-22 05:56 - 000377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2020-04-06 22:17 - 2013-08-22 05:55 - 000033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2020-04-06 22:17 - 2013-08-22 05:51 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2020-04-06 22:17 - 2013-08-22 05:51 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2020-04-06 22:17 - 2013-08-22 05:50 - 000059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2020-04-06 22:08 - 2020-04-06 22:08 - 000000000 ____D C:\Users\uzivatel\AppData\Local\DOSBox
2020-04-03 18:08 - 2020-04-03 18:08 - 000256149 _____ C:\Users\uzivatel\Downloads\Odporúčania,ako zvládnuť krízu s vlastnými financiami.pdf
2020-04-03 18:08 - 2020-04-03 18:08 - 000057344 _____ C:\Users\uzivatel\Downloads\SÚPIS VÝDAVKOV 2020.xls
2020-04-01 19:43 - 2020-04-01 19:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-04-30 18:58 - 2017-07-25 22:18 - 000000000 ____D C:\FRST
2020-04-30 18:54 - 2014-03-18 17:25 - 001243990 _____ C:\Windows\system32\PerfStringBackup.INI
2020-04-30 18:54 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2020-04-30 18:49 - 2016-11-15 19:41 - 000000000 ____D C:\Users\uzivatel\AppData\LocalLow\Mozilla
2020-04-30 18:40 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-04-30 16:08 - 2015-09-02 18:48 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4176085001-3363555415-2058170901-1001
2020-04-30 16:03 - 2019-07-07 17:04 - 000000000 ____D C:\Program Files\Recuva
2020-04-29 22:26 - 2016-06-12 11:14 - 000000000 ____D C:\Users\uzivatel\AppData\Local\CrashDumps
2020-04-29 20:18 - 2017-07-26 21:10 - 000000000 ____D C:\AdwCleaner
2020-04-27 19:31 - 2018-03-28 20:32 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2020-04-27 19:29 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2020-04-27 19:27 - 2018-06-01 16:01 - 000508936 _____ C:\Windows\system32\FNTCACHE.DAT
2020-04-27 13:00 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2020-04-24 15:21 - 2017-06-30 22:07 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Mp3tag
2020-04-19 10:02 - 2015-09-03 21:51 - 000000000 ____D C:\Users\uzivatel\AppData\Local\Adobe
2020-04-19 09:55 - 2018-05-18 21:28 - 000004462 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2020-04-19 09:55 - 2015-09-30 17:16 - 000004288 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2020-04-19 09:55 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-04-19 09:55 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2020-04-18 20:04 - 2018-08-31 14:18 - 000131200 _____ C:\Users\uzivatel\AppData\Local\GDIPFONTCACHEV1.DAT
2020-04-13 11:53 - 2018-01-12 23:13 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-04-12 22:15 - 2019-04-28 19:01 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\vlc
2020-04-12 22:07 - 2015-05-13 11:07 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2020-04-11 21:13 - 2017-07-18 21:59 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-04-11 21:01 - 2018-01-12 23:13 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-04-11 21:01 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\FxsTmp
2020-04-11 11:40 - 2017-03-04 22:24 - 000000432 __RSH C:\ProgramData\ntuser.pol
2020-04-10 00:01 - 2020-03-27 14:03 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Visual Studio Setup
2020-04-10 00:01 - 2014-11-16 14:09 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-04-10 00:01 - 2014-11-16 08:56 - 000000000 ____D C:\ProgramData\Package Cache
2020-04-10 00:01 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-04-09 23:59 - 2015-09-06 13:31 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Foxit Software
2020-04-09 23:58 - 2020-03-27 14:54 - 000000000 ____D C:\Program Files\IIS Express
2020-04-09 23:58 - 2020-03-27 14:54 - 000000000 ____D C:\Program Files (x86)\IIS Express
2020-04-09 23:58 - 2018-03-28 17:06 - 000000000 ____D C:\Windows\SysWOW64\1033
2020-04-09 23:58 - 2018-03-28 17:06 - 000000000 ____D C:\Windows\system32\1033
2020-04-09 23:58 - 2018-03-28 16:52 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2020-04-09 23:06 - 2015-09-02 19:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-04-09 22:55 - 2017-12-17 20:04 - 002953216 _____ (3Dfx Interactive, Inc.) C:\Windows\SysWOW64\glide2x.dll
2020-04-09 22:54 - 2017-09-24 19:14 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-04-09 22:54 - 2015-09-02 19:09 - 000000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-04-09 19:44 - 2013-08-22 17:36 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2020-04-09 19:44 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2020-04-07 16:25 - 2015-09-02 18:42 - 000000000 ____D C:\Users\uzivatel
2020-04-07 09:03 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2020-04-06 22:17 - 2015-09-02 19:15 - 000220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2020-04-06 22:17 - 2015-09-02 19:15 - 000046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2020-04-06 22:17 - 2015-09-02 19:14 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2020-04-06 22:17 - 2015-09-02 19:14 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2020-04-06 22:17 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2020-04-02 01:49 - 2017-10-14 13:27 - 000744808 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2020-04-01 19:45 - 2017-07-16 19:13 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Apple Computer
==================== Files in the root of some directories =======
2015-09-02 18:43 - 2019-10-27 20:27 - 000000125 _____ () C:\Users\uzivatel\AppData\Roaming\sp_data.sys
2015-10-01 15:42 - 2015-10-01 15:42 - 000000017 _____ () C:\Users\uzivatel\AppData\Local\resmon.resmoncfg
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2020-04-30 16:08
==================== End of FRST.txt ============================
Ran by uzivatel (administrator) on ZERO1 (30-04-2020 18:58:28)
Running from C:\Users\uzivatel\Desktop
Loaded Profiles: uzivatel & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Available Profiles: uzivatel & Administrator & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS)
Platform: Windows 8.1 Pro (Update) (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlceip.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlceip.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\Launchpad.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\Launchpad.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
() C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdhost.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(f.lux Software LLC) C:\Users\uzivatel\AppData\Local\FluxSoftware\Flux\flux.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(alch) C:\Program Files (x86)\ClamWin\bin\ClamTray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302392 2020-03-28] (Apple Inc.)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM\...\Run: [MTPW] => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] ()
HKLM-x32\...\Run: [ClamWin] => C:\Program Files (x86)\ClamWin\bin\ClamTray.exe [86016 2018-03-03] (alch)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22245560 2020-03-19] (Piriform Software Ltd)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [f.lux] => C:\Users\uzivatel\AppData\Local\FluxSoftware\Flux\flux.exe [1385480 2019-08-30] (f.lux Software LLC)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-03-22] (Apple Inc.)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [OEXPRESS] => [X]
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\MountPoints2: {1b8b6c10-8736-11e8-88c6-edb37e02d125} - "E:\Setup.exe"
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\SysWOW64\ACTUAL~1.SCR [111616 2017-06-21] ()
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.151.233.251 192.168.0.1
Tcpip\..\Interfaces\{AE1B6697-3F17-41CD-9040-9266881E316F}: [DhcpNameServer] 213.151.233.251 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
URLSearchHook: [S-1-5-80-1985561900-798682989-2213159822-1904180398-3434236965] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3477044410-376262199-2110164357-2030828471-4165405235] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3919359670-3540430778-4246408611-3681914861-206046543] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Filter: text/xml - No CLSID Value
FireFox:
========
FF DefaultProfile: 7h7ex4z3.default-1552668782976
FF ProfilePath: Profiles/7h7ex4z3.default-1552668782976 [not found] <==== ATTENTION
FF ProfilePath: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976 [2020-04-30]
FF NewTabOverride: Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976 -> Enabled: @contain-facebook
FF Extension: (Facebook Container) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\@contain-facebook.xpi [2019-12-08]
FF Extension: (Dark Reader) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\addon@darkreader.org.xpi [2019-12-08]
FF Extension: (Name) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\firefox@ghostery.com.xpi [2019-06-24]
FF Extension: (HTTPS Everywhere) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\https-everywhere@eff.org.xpi [2020-04-03]
FF Extension: (Privacy Badger) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2019-12-08]
FF Extension: (No Name) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\tranquility@ushnisha.com.xpi [2020-02-08]
FF Extension: (uBlock Origin) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\uBlock0@raymondhill.net.xpi [2019-07-26]
FF Extension: (NoScript) - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\7h7ex4z3.default-1552668782976\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2019-07-26]
FF Extension: (DoH Roll-Out) - C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [2020-02-20] [not signed]
FF Extension: (WebCompat Reporter) - C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2020-03-14] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_363.dll [2020-04-19] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_363.dll [2020-04-19] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [No File]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-01-17] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-04-19] (Adobe)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-03-12] (Apple Inc.)
S2 edgeupdate; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223120 2020-04-09] (Microsoft Corporation)
S3 edgeupdatem; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223120 2020-04-09] (Microsoft Corporation)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 ibtsiva.exe; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [121288 2014-08-13] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
R2 IntelUSBoverIP; C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe [394184 2014-10-15] (Intel)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-09-03] (Intel Corporation)
S3 MicrosoftEdgeElevationService; C:\Program Files (x86)\Microsoft\Edge\Application\81.0.416.68\elevation_service.exe [1125264 2020-04-29] (Microsoft Corporation)
S3 MsMpiLaunchSvc; C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe [23040 2016-03-04] () [File not signed]
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [485048 2017-08-22] (Microsoft Corporation)
R3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [60592 2017-08-22] (Microsoft Corporation)
R3 MSSQLFDLauncher$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [60592 2017-08-22] (Microsoft Corporation)
R2 MSSQLLaunchpad; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\launchpad.exe [1121464 2017-08-22] (Microsoft Corporation)
R2 MSSQLLaunchpad$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\launchpad.exe [1121464 2017-08-22] (Microsoft Corporation)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [485048 2017-08-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [265936 2014-10-29] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [578744 2017-08-22] (Microsoft Corporation)
S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [578744 2017-08-22] (Microsoft Corporation)
R2 SQLTELEMETRY; C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\sqlceip.exe [246968 2017-08-22] (Microsoft Corporation)
R2 SQLTELEMETRY$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\sqlceip.exe [246968 2017-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3818704 2014-10-29] (Intel® Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69904 2014-11-21] (ASUS Corporation)
S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [113864 2013-07-18] (ASIX Electronics Corp.)
S3 BthMtpEnum; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [62976 2013-08-22] (Microsoft Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [130648 2016-08-22] (GenesysLogic)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [219592 2014-08-13] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
S1 ISODisk; C:\Windows\SysWow64\Drivers\ISODisk.sys [9600 2006-04-26] () [File not signed]
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3482600 2014-11-06] (Intel Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] ()
S4 RsFx0500; C:\Windows\System32\DRIVERS\RsFx0500.sys [261848 2017-08-22] (Microsoft Corporation)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [70656 2013-06-18] (Realtek )
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [14368 1999-09-14] () [File not signed]
R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [213296 2014-10-15] (Windows (R) Win 7 DDK provider)
S3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [237312 2020-02-19] (Oracle Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]
S3 VirtualDVD; \SystemRoot\system32\DRIVERS\VirtualDVD.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-04-30 18:58 - 2020-04-30 18:58 - 000019265 _____ C:\Users\uzivatel\Desktop\FRST.txt
2020-04-30 15:52 - 2019-11-08 10:15 - 003600896 _____ C:\Windows\system32\pwNative.exe
2020-04-30 15:52 - 2019-11-08 10:15 - 000019152 _____ C:\Windows\system32\pwdrvio.sys
2020-04-30 15:52 - 2019-11-08 10:15 - 000012504 _____ C:\Windows\system32\pwdspio.sys
2020-04-30 15:51 - 2020-04-30 15:51 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\QtProject
2020-04-30 15:50 - 2020-04-30 15:52 - 000000000 ____D C:\Program Files\MiniTool Partition Wizard 12
2020-04-30 15:50 - 2020-04-30 15:50 - 000003180 _____ C:\Windows\System32\Tasks\MiniToolPartitionWizard
2020-04-30 15:50 - 2020-04-30 15:50 - 000001001 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard.lnk
2020-04-30 15:50 - 2020-04-30 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard 12
2020-04-30 15:48 - 2020-04-30 15:49 - 004095376 _____ (MiniTool Software Limited ) C:\Users\uzivatel\Downloads\pw12-free.exe
2020-04-30 15:39 - 2020-04-30 15:57 - 000000299 _____ C:\Users\uzivatel\Desktop\usb.txt
2020-04-30 15:01 - 2020-04-30 15:18 - 000000000 ____D C:\Users\uzivatel\Documents\dokumenty
2020-04-29 20:18 - 2020-04-29 20:18 - 008196784 _____ (Malwarebytes) C:\Users\uzivatel\Desktop\adwcleaner_8.0.4.exe
2020-04-28 21:25 - 2020-04-28 21:25 - 000001761 _____ C:\Users\Public\Desktop\iTunes.lnk
2020-04-28 21:25 - 2020-04-28 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2020-04-28 21:25 - 2020-04-28 21:25 - 000000000 ____D C:\Program Files\iTunes
2020-04-28 21:25 - 2020-04-28 21:25 - 000000000 ____D C:\Program Files\iPod
2020-04-17 21:39 - 2020-04-17 22:29 - 000078343 _____ C:\Users\uzivatel\Downloads\prepocet_ETF.xlsx
2020-04-16 10:50 - 2020-04-16 10:50 - 000032464 _____ C:\Users\uzivatel\Downloads\PK_2020_03_20.pdf
2020-04-15 20:33 - 2020-04-17 23:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein DEMO
2020-04-13 15:52 - 2020-04-13 15:52 - 000000947 _____ C:\Users\Public\Desktop\ISODisk.lnk
2020-04-13 15:52 - 2020-04-13 15:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISODisk
2020-04-13 15:52 - 2020-04-13 15:52 - 000000000 ____D C:\Program Files (x86)\ISODisk
2020-04-13 15:52 - 2006-04-26 01:03 - 000009600 _____ C:\Windows\SysWOW64\Drivers\ISODisk.sys
2020-04-13 15:19 - 2020-04-13 15:51 - 000000000 ____D C:\Program Files (x86)\WinISO Computing
2020-04-13 15:19 - 2020-04-13 15:19 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\WinISO Computing
2020-04-13 15:19 - 2020-04-13 15:19 - 000000000 ____D C:\Users\uzivatel\AppData\Local\WinISO Computing
2020-04-13 14:10 - 2020-04-13 14:10 - 000001133 _____ C:\Users\Public\Desktop\MiniTool Power Data Recovery 6.8.lnk
2020-04-13 14:10 - 2020-04-13 14:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Power Data Recovery 6.8
2020-04-13 14:10 - 2020-04-13 14:10 - 000000000 ____D C:\Program Files (x86)\PowerDataRecovery
2020-04-13 13:49 - 2020-04-13 13:57 - 000000000 ____D C:\Program Files (x86)\DiskInternals
2020-04-13 11:53 - 2020-04-13 11:58 - 000000000 ____D C:\Program Files\Wondershare
2020-04-12 22:06 - 2020-04-12 22:06 - 000003032 _____ C:\Windows\System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B}
2020-04-12 17:51 - 2020-04-12 17:51 - 001522649 _____ C:\Users\uzivatel\Downloads\konec-prokrastinace-petr-ludwig-ukazkova-kapitola.pdf
2020-04-11 21:06 - 2020-04-13 11:54 - 000000000 ____D C:\ProgramData\Wondershare
2020-04-11 21:01 - 2020-04-11 21:10 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Wondershare
2020-04-10 22:07 - 1999-09-14 17:43 - 000014368 ____R C:\Windows\SysWOW64\Drivers\SECDRV.SYS
2020-04-09 22:55 - 2020-04-09 22:55 - 001376256 _____ C:\Windows\SysWOW64\glide3x.dll
2020-04-09 22:55 - 2020-04-09 22:55 - 001310720 _____ C:\Windows\SysWOW64\glide.dll
2020-04-09 22:20 - 2020-04-09 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein
2020-04-09 22:15 - 2020-04-13 15:28 - 000000635 _____ C:\Windows\Rtcw.INI
2020-04-09 22:14 - 2020-04-30 14:57 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-04-09 22:14 - 2020-04-30 14:57 - 000002210 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-04-09 22:13 - 2020-04-30 14:51 - 000003380 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-04-09 22:13 - 2020-04-30 14:51 - 000003252 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-04-09 19:29 - 2020-04-09 19:30 - 000002235 _____ C:\Windows\diagwrn.xml
2020-04-09 19:29 - 2020-04-09 19:30 - 000001908 _____ C:\Windows\diagerr.xml
2020-04-07 22:47 - 2020-04-07 22:47 - 000001375 _____ C:\Windows\Ncss97.ini
2020-04-07 22:47 - 2020-04-07 22:47 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCSS 97
2020-04-07 22:47 - 2020-04-07 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSS 97
2020-04-07 22:47 - 1998-04-01 12:33 - 000254976 _____ (heilerSoftware) C:\Windows\SysWOW64\h5ocx32.ocx
2020-04-07 22:47 - 1998-04-01 12:32 - 001028096 _____ (heilerSoftware) C:\Windows\SysWOW64\h5krnl32.dll
2020-04-07 22:47 - 1998-04-01 12:31 - 000114688 _____ (heilerSoftware) C:\Windows\SysWOW64\h5dlg32.dll
2020-04-07 22:47 - 1998-04-01 12:31 - 000051200 _____ (heilerSoftware) C:\Windows\SysWOW64\h5tool32.dll
2020-04-07 22:47 - 1998-03-16 17:59 - 000093696 _____ (heilerSoftware) C:\Windows\SysWOW64\h5rtf32.dll
2020-04-07 22:47 - 1998-03-16 17:58 - 000175104 _____ (heilerSoftware) C:\Windows\SysWOW64\h5menu32.dll
2020-04-07 22:47 - 1998-03-16 17:57 - 000188928 _____ (heilerSoftware) C:\Windows\SysWOW64\h5icon32.dll
2020-04-07 22:47 - 1997-04-18 05:00 - 000622536 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Graphs32.ocx
2020-04-07 22:47 - 1997-04-16 05:00 - 000468928 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gsw32.exe
2020-04-07 22:47 - 1997-04-16 05:00 - 000263120 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gswag32.dll
2020-04-07 22:47 - 1997-04-16 05:00 - 000104384 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gswdll32.dll
2020-04-07 22:47 - 1997-04-15 05:00 - 000107008 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\Gsjpg32.dll
2020-04-07 22:47 - 1997-04-09 05:00 - 000974967 _____ C:\Windows\SysWOW64\Graphppd.hlp
2020-04-07 22:47 - 1997-04-01 05:00 - 000000666 _____ C:\Windows\SysWOW64\Graphppd.cnt
2020-04-07 22:47 - 1996-11-17 00:00 - 000006931 _____ C:\Windows\SysWOW64\Odbcjet.cnt
2020-04-07 22:47 - 1996-11-17 00:00 - 000003176 _____ C:\Windows\SysWOW64\Odbcjtnw.cnt
2020-04-07 22:47 - 1996-10-10 11:41 - 000240640 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\imgman31.dll
2020-04-07 22:47 - 1996-10-10 11:41 - 000036352 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31xjpg.del
2020-04-07 22:47 - 1996-10-10 11:40 - 000055808 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31tif.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000033792 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31pcx.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000021504 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31tga.dil
2020-04-07 22:47 - 1996-10-10 11:39 - 000020992 _____ (Data Techniques, Inc.) C:\Windows\SysWOW64\IM31bmp.dil
2020-04-07 22:47 - 1996-07-25 10:50 - 000118272 _____ (Crescent Division of Progress Software Corporation) C:\Windows\SysWOW64\Qpro32.dll
2020-04-07 22:47 - 1996-07-24 14:27 - 000100352 _____ (Crescent Division of Progress Software Corporation.) C:\Windows\SysWOW64\Csform32.ocx
2020-04-07 22:47 - 1995-10-11 02:00 - 000133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfcans32.dll
2020-04-07 22:47 - 1995-05-22 02:00 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Oc30.dll
2020-04-07 22:46 - 2020-04-07 22:47 - 000000000 ____D C:\Program Files (x86)\NCSS97
2020-04-07 22:46 - 1998-01-05 11:49 - 000054784 _____ (Circle Systems, Inc. ) C:\Windows\SysWOW64\Stodbc32.dll
2020-04-07 22:46 - 1998-01-05 11:47 - 000427008 _____ (Circle Systems, Inc. ) C:\Windows\SysWOW64\Statrn32.dll
2020-04-07 22:46 - 1997-07-31 10:46 - 000101888 _____ (MicroDexterity, Inc.) C:\Windows\SysWOW64\stamin32.dll
2020-04-07 22:46 - 1997-07-19 17:00 - 000129808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2020-04-07 22:46 - 1997-07-19 16:55 - 001347344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvbvm50.dll
2020-04-07 22:46 - 1997-07-01 21:52 - 000238080 _____ (EllTech Development, Inc.) C:\Windows\SysWOW64\Comppl32.dll
2020-04-07 22:46 - 1997-07-01 12:01 - 000816640 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\Vcf132.ocx
2020-04-07 22:46 - 1997-03-11 10:52 - 000152576 _____ (VideoSoft) C:\Windows\SysWOW64\Vsocx32.ocx
2020-04-07 16:25 - 2020-04-09 22:08 - 000000000 ____D C:\Users\uzivatel\VirtualBox VMs
2020-04-07 16:25 - 2020-04-09 22:08 - 000000000 ____D C:\Users\uzivatel\.VirtualBox
2020-04-07 16:25 - 2020-04-09 20:16 - 000000000 ____D C:\ProgramData\VirtualBox
2020-04-07 16:18 - 2020-04-09 23:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Finale 2000
2020-04-07 16:18 - 1998-04-30 14:56 - 000129024 _____ C:\Windows\UNWISE.EXE
2020-04-06 23:12 - 2020-04-06 23:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chessmaster 5500
2020-04-06 23:12 - 2020-04-06 23:12 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chessmaster 5500
2020-04-06 23:08 - 2020-04-07 22:47 - 000000209 _____ C:\Windows\ODBCINST.INI
2020-04-06 23:08 - 2020-04-06 23:08 - 000000232 _____ C:\Windows\ODBC.INI
2020-04-06 23:08 - 1997-04-25 00:00 - 000230672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0011.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0010.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0005.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000087824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0007.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH000f.TMP
2020-04-06 23:08 - 1997-04-25 00:00 - 000026224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC16GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000011536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBCCP32.CPL
2020-04-06 23:08 - 1997-04-25 00:00 - 000010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBC32GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DS32GT.DLL
2020-04-06 23:08 - 1997-04-25 00:00 - 000004656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DS16GT.DLL
2020-04-06 23:08 - 1996-12-03 13:07 - 000403216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl35.dll
2020-04-06 23:08 - 1996-11-17 00:00 - 001038848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJET35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000368912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBAR332.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000251664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSRD2X35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000163384 _____ C:\Windows\SysWOW64\Odbcjet.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ODBCTL32.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000061269 _____ C:\Windows\SysWOW64\Odbcjtnw.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000036624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJINT35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000026340 _____ C:\Windows\SysWOW64\Odbcinst.hlp
2020-04-06 23:08 - 1996-11-17 00:00 - 000024336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJTER35.DLL
2020-04-06 23:08 - 1996-11-17 00:00 - 000000244 _____ C:\Windows\SysWOW64\Odbcinst.cnt
2020-04-06 23:08 - 1996-10-31 00:00 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0004.TMP
2020-04-06 23:08 - 1996-09-18 00:00 - 000018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\~GLH0006.TMP
2020-04-06 23:08 - 1996-08-24 00:00 - 000002233 _____ C:\Windows\SysWOW64\~GLH0002.TMP
2020-04-06 23:08 - 1996-08-24 00:00 - 000002151 _____ C:\Windows\SysWOW64\~GLH0003.TMP
2020-04-06 23:08 - 1995-12-04 14:08 - 000027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.000
2020-04-06 22:17 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnlobby.dll
2020-04-06 22:17 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2020-04-06 22:17 - 2013-08-22 13:22 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2020-04-06 22:17 - 2013-08-22 13:22 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2020-04-06 22:17 - 2013-08-22 13:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2020-04-06 22:17 - 2013-08-22 13:17 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2020-04-06 22:17 - 2013-08-22 13:17 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2020-04-06 22:17 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnlobby.dll
2020-04-06 22:17 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnaddr.dll
2020-04-06 22:17 - 2013-08-22 05:56 - 000377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2020-04-06 22:17 - 2013-08-22 05:55 - 000033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2020-04-06 22:17 - 2013-08-22 05:51 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2020-04-06 22:17 - 2013-08-22 05:51 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2020-04-06 22:17 - 2013-08-22 05:50 - 000059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2020-04-06 22:08 - 2020-04-06 22:08 - 000000000 ____D C:\Users\uzivatel\AppData\Local\DOSBox
2020-04-03 18:08 - 2020-04-03 18:08 - 000256149 _____ C:\Users\uzivatel\Downloads\Odporúčania,ako zvládnuť krízu s vlastnými financiami.pdf
2020-04-03 18:08 - 2020-04-03 18:08 - 000057344 _____ C:\Users\uzivatel\Downloads\SÚPIS VÝDAVKOV 2020.xls
2020-04-01 19:43 - 2020-04-01 19:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-04-30 18:58 - 2017-07-25 22:18 - 000000000 ____D C:\FRST
2020-04-30 18:54 - 2014-03-18 17:25 - 001243990 _____ C:\Windows\system32\PerfStringBackup.INI
2020-04-30 18:54 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2020-04-30 18:49 - 2016-11-15 19:41 - 000000000 ____D C:\Users\uzivatel\AppData\LocalLow\Mozilla
2020-04-30 18:40 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-04-30 16:08 - 2015-09-02 18:48 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4176085001-3363555415-2058170901-1001
2020-04-30 16:03 - 2019-07-07 17:04 - 000000000 ____D C:\Program Files\Recuva
2020-04-29 22:26 - 2016-06-12 11:14 - 000000000 ____D C:\Users\uzivatel\AppData\Local\CrashDumps
2020-04-29 20:18 - 2017-07-26 21:10 - 000000000 ____D C:\AdwCleaner
2020-04-27 19:31 - 2018-03-28 20:32 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2020-04-27 19:29 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2020-04-27 19:27 - 2018-06-01 16:01 - 000508936 _____ C:\Windows\system32\FNTCACHE.DAT
2020-04-27 13:00 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2020-04-24 15:21 - 2017-06-30 22:07 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Mp3tag
2020-04-19 10:02 - 2015-09-03 21:51 - 000000000 ____D C:\Users\uzivatel\AppData\Local\Adobe
2020-04-19 09:55 - 2018-05-18 21:28 - 000004462 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2020-04-19 09:55 - 2015-09-30 17:16 - 000004288 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2020-04-19 09:55 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-04-19 09:55 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2020-04-18 20:04 - 2018-08-31 14:18 - 000131200 _____ C:\Users\uzivatel\AppData\Local\GDIPFONTCACHEV1.DAT
2020-04-13 11:53 - 2018-01-12 23:13 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-04-12 22:15 - 2019-04-28 19:01 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\vlc
2020-04-12 22:07 - 2015-05-13 11:07 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2020-04-11 21:13 - 2017-07-18 21:59 - 000000000 ____D C:\Program Files (x86)\Adobe
2020-04-11 21:01 - 2018-01-12 23:13 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-04-11 21:01 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\FxsTmp
2020-04-11 11:40 - 2017-03-04 22:24 - 000000432 __RSH C:\ProgramData\ntuser.pol
2020-04-10 00:01 - 2020-03-27 14:03 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Visual Studio Setup
2020-04-10 00:01 - 2014-11-16 14:09 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-04-10 00:01 - 2014-11-16 08:56 - 000000000 ____D C:\ProgramData\Package Cache
2020-04-10 00:01 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-04-09 23:59 - 2015-09-06 13:31 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Foxit Software
2020-04-09 23:58 - 2020-03-27 14:54 - 000000000 ____D C:\Program Files\IIS Express
2020-04-09 23:58 - 2020-03-27 14:54 - 000000000 ____D C:\Program Files (x86)\IIS Express
2020-04-09 23:58 - 2018-03-28 17:06 - 000000000 ____D C:\Windows\SysWOW64\1033
2020-04-09 23:58 - 2018-03-28 17:06 - 000000000 ____D C:\Windows\system32\1033
2020-04-09 23:58 - 2018-03-28 16:52 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2020-04-09 23:06 - 2015-09-02 19:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-04-09 22:55 - 2017-12-17 20:04 - 002953216 _____ (3Dfx Interactive, Inc.) C:\Windows\SysWOW64\glide2x.dll
2020-04-09 22:54 - 2017-09-24 19:14 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-04-09 22:54 - 2015-09-02 19:09 - 000000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-04-09 19:44 - 2013-08-22 17:36 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2020-04-09 19:44 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2020-04-07 16:25 - 2015-09-02 18:42 - 000000000 ____D C:\Users\uzivatel
2020-04-07 09:03 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2020-04-06 22:17 - 2015-09-02 19:15 - 000220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2020-04-06 22:17 - 2015-09-02 19:15 - 000046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2020-04-06 22:17 - 2015-09-02 19:14 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2020-04-06 22:17 - 2015-09-02 19:14 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2020-04-06 22:17 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2020-04-02 01:49 - 2017-10-14 13:27 - 000744808 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2020-04-01 19:45 - 2017-07-16 19:13 - 000000000 ____D C:\Users\uzivatel\AppData\Roaming\Apple Computer
==================== Files in the root of some directories =======
2015-09-02 18:43 - 2019-10-27 20:27 - 000000125 _____ () C:\Users\uzivatel\AppData\Roaming\sp_data.sys
2015-10-01 15:42 - 2015-10-01 15:42 - 000000017 _____ () C:\Users\uzivatel\AppData\Local\resmon.resmoncfg
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2020-04-30 16:08
==================== End of FRST.txt ============================
Re: prosim o kontrolu & obcas problem wifi (nahodne)
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02.01.2018
Ran by uzivatel (30-04-2020 18:58:58)
Running from C:\Users\uzivatel\Desktop
Windows 8.1 Pro (Update) (X64) (2015-09-02 16:42:46)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-4176085001-3363555415-2058170901-500 - Administrator - Enabled) => C:\Users\Administrator
Guest (S-1-5-21-4176085001-3363555415-2058170901-501 - Limited - Disabled)
MSSQLSERVER00 (S-1-5-21-4176085001-3363555415-2058170901-1026 - Limited - Enabled)
MSSQLSERVER01 (S-1-5-21-4176085001-3363555415-2058170901-1027 - Limited - Enabled)
MSSQLSERVER02 (S-1-5-21-4176085001-3363555415-2058170901-1028 - Limited - Enabled)
MSSQLSERVER03 (S-1-5-21-4176085001-3363555415-2058170901-1029 - Limited - Enabled)
MSSQLSERVER04 (S-1-5-21-4176085001-3363555415-2058170901-1030 - Limited - Enabled)
MSSQLSERVER05 (S-1-5-21-4176085001-3363555415-2058170901-1031 - Limited - Enabled)
MSSQLSERVER06 (S-1-5-21-4176085001-3363555415-2058170901-1032 - Limited - Enabled)
MSSQLSERVER07 (S-1-5-21-4176085001-3363555415-2058170901-1033 - Limited - Enabled)
MSSQLSERVER08 (S-1-5-21-4176085001-3363555415-2058170901-1034 - Limited - Enabled)
MSSQLSERVER09 (S-1-5-21-4176085001-3363555415-2058170901-1035 - Limited - Enabled)
MSSQLSERVER10 (S-1-5-21-4176085001-3363555415-2058170901-1036 - Limited - Enabled)
MSSQLSERVER11 (S-1-5-21-4176085001-3363555415-2058170901-1037 - Limited - Enabled)
MSSQLSERVER12 (S-1-5-21-4176085001-3363555415-2058170901-1038 - Limited - Enabled)
MSSQLSERVER13 (S-1-5-21-4176085001-3363555415-2058170901-1039 - Limited - Enabled)
MSSQLSERVER14 (S-1-5-21-4176085001-3363555415-2058170901-1040 - Limited - Enabled)
MSSQLSERVER15 (S-1-5-21-4176085001-3363555415-2058170901-1041 - Limited - Enabled)
MSSQLSERVER16 (S-1-5-21-4176085001-3363555415-2058170901-1042 - Limited - Enabled)
MSSQLSERVER17 (S-1-5-21-4176085001-3363555415-2058170901-1043 - Limited - Enabled)
MSSQLSERVER18 (S-1-5-21-4176085001-3363555415-2058170901-1044 - Limited - Enabled)
MSSQLSERVER19 (S-1-5-21-4176085001-3363555415-2058170901-1045 - Limited - Enabled)
MSSQLSERVER20 (S-1-5-21-4176085001-3363555415-2058170901-1046 - Limited - Enabled)
SQLEXPRESS00 (S-1-5-21-4176085001-3363555415-2058170901-1004 - Limited - Enabled)
SQLEXPRESS01 (S-1-5-21-4176085001-3363555415-2058170901-1005 - Limited - Enabled)
SQLEXPRESS02 (S-1-5-21-4176085001-3363555415-2058170901-1006 - Limited - Enabled)
SQLEXPRESS03 (S-1-5-21-4176085001-3363555415-2058170901-1007 - Limited - Enabled)
SQLEXPRESS04 (S-1-5-21-4176085001-3363555415-2058170901-1008 - Limited - Enabled)
SQLEXPRESS05 (S-1-5-21-4176085001-3363555415-2058170901-1009 - Limited - Enabled)
SQLEXPRESS06 (S-1-5-21-4176085001-3363555415-2058170901-1010 - Limited - Enabled)
SQLEXPRESS07 (S-1-5-21-4176085001-3363555415-2058170901-1011 - Limited - Enabled)
SQLEXPRESS08 (S-1-5-21-4176085001-3363555415-2058170901-1012 - Limited - Enabled)
SQLEXPRESS09 (S-1-5-21-4176085001-3363555415-2058170901-1013 - Limited - Enabled)
SQLEXPRESS10 (S-1-5-21-4176085001-3363555415-2058170901-1014 - Limited - Enabled)
SQLEXPRESS11 (S-1-5-21-4176085001-3363555415-2058170901-1015 - Limited - Enabled)
SQLEXPRESS12 (S-1-5-21-4176085001-3363555415-2058170901-1016 - Limited - Enabled)
SQLEXPRESS13 (S-1-5-21-4176085001-3363555415-2058170901-1017 - Limited - Enabled)
SQLEXPRESS14 (S-1-5-21-4176085001-3363555415-2058170901-1018 - Limited - Enabled)
SQLEXPRESS15 (S-1-5-21-4176085001-3363555415-2058170901-1019 - Limited - Enabled)
SQLEXPRESS16 (S-1-5-21-4176085001-3363555415-2058170901-1020 - Limited - Enabled)
SQLEXPRESS17 (S-1-5-21-4176085001-3363555415-2058170901-1021 - Limited - Enabled)
SQLEXPRESS18 (S-1-5-21-4176085001-3363555415-2058170901-1022 - Limited - Enabled)
SQLEXPRESS19 (S-1-5-21-4176085001-3363555415-2058170901-1023 - Limited - Enabled)
SQLEXPRESS20 (S-1-5-21-4176085001-3363555415-2058170901-1024 - Limited - Enabled)
uzivatel (S-1-5-21-4176085001-3363555415-2058170901-1001 - Administrator - Enabled) => C:\Users\uzivatel
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.363 - Adobe)
Apple Mobile Device Support (HKLM\...\{6E93B248-22B6-48B2-A568-2E49C65B2EA4}) (Version: 13.5.0.20 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.31 - ICEpower a/s)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Browser for SQL Server 2017 (HKLM-x32\...\{CF8EEB96-E7E7-4EF7-A0A1-559F09953156}) (Version: 14.0.1000.169 - Microsoft Corporation)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.71.1081 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.65 - Piriform)
ClamWin Free Antivirus 0.99.4 (HKLM-x32\...\ClamWin Free Antivirus_is1) (Version: - alch)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.52.56 - Conexant)
f.lux (HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Flux) (Version: - f.lux Software LLC)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 9.4.1.16828 - Foxit Software Inc.)
FREE MSG File Viewer version 2.0 (HKLM-x32\...\{2D370F64-93D0-4731-B27B-35869AEEB460}_is1) (Version: 2.0 - SysTools Software)
Fritz 9 (HKLM-x32\...\{4FAA46FA-D8C1-488C-A979-83F41BB1E1DA}_is1) (Version: 9.0 - US - ACTION, s.r.o.)
ChessBase Reader (HKLM-x32\...\{DE1044D3-B7A3-45F0-AE4C-9F68BDD7B596}) (Version: 12.42.0.0 - ChessBase)
iCloud (HKLM\...\{A3616230-EF97-44F3-83D3-1AE29DC639D3}) (Version: 7.18.0.22 - Apple Inc.)
IIS 10.0 Express (HKLM\...\{2B8326B6-4202-4239-B9A9-F3EC8812E82D}) (Version: 10.0.03917 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Hidden
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1017 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.0.10100.71 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{f5d71765-7cd1-4e68-998f-5b379e725da3}) (Version: 10.0.22 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.28.1006 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4013 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{2F97FBC6-7992-4DF7-A7C7-B68455E307F7}) (Version: 5.1.20.0 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{06A5031E-3B1E-4FB9-AC4C-BA0FE2706152}) (Version: 17.1.1433.02 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{c78a13fd-4324-4ddb-a613-746d2461441d}) (Version: 17.13.1 - Intel Corporation)
ISODisk 1.1 (HKLM-x32\...\{BF731945-7AAD-45E3-A202-A60C9213915C}_is1) (Version: - ISODisk.com)
iTunes (HKLM\...\{BFF1E6B9-6E1B-4764-8691-5BE9E7541757}) (Version: 12.10.6.2 - Apple Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 81.0.416.68 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.127.15 - )
Microsoft MPI (7.0.12437.8) (HKLM\...\{8499ACD3-C1E3-45AB-BF96-DA491727EBE1}) (Version: 7.0.12437.8 - Microsoft Corporation)
Microsoft ODBC Driver 13 for SQL Server (HKLM\...\{76CF9EF4-ABA0-484E-8042-12B99499AF5F}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{4D2C56FF-7F36-4B49-A97A-24F0522D41D7}) (Version: 11.3.6540.0 - Microsoft Corporation)
Microsoft SQL Server 2016 LocalDB (HKLM\...\{9097BF1A-13A0-4A4A-A1F8-473E2A669863}) (Version: 13.1.4001.0 - Microsoft Corporation)
Microsoft SQL Server 2017 (64-bit) (HKLM\...\Microsoft SQL Server SQL2017) (Version: - Microsoft Corporation)
Microsoft SQL Server 2017 LocalDB (HKLM\...\{216778FC-CC9A-4D47-AF5E-8223A37626D4}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft SQL Server 2017 Setup (English) (HKLM\...\{405252DC-ADF7-4BC8-95F5-F89DE513DD62}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft SQL Server 2017 T-SQL Language Service (HKLM\...\{C8A51693-98B9-4AB1-91B8-9A1B86729D5F}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 (HKLM-x32\...\{6913e92a-b64e-41c9-a5e6-cef39207fe89}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 (HKLM-x32\...\{65e650ff-30be-469d-b63a-418d71ea1765}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 2.5.2059.317 - Microsoft Corporation)
Microsoft VSS Writer for SQL Server 2017 (HKLM\...\{20B328C9-C6BB-434A-928A-00F05CD820B8}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft Web Deploy 4.0 (HKLM\...\{BBCDB523-F5B7-4E53-A911-C85191E3BDF0}) (Version: 10.0.2606 - Microsoft Corporation)
MiniTool Partition Wizard Free 12 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Software Limited)
MiniTool Power Data Recovery (HKLM-x32\...\MiniTool Power Data Recovery_is1) (Version: - MiniTool Solution Ltd.)
Mozilla Firefox 75.0 (x64 en-US) (HKLM\...\Mozilla Firefox 75.0 (x64 en-US)) (Version: 75.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 55.0.3 - Mozilla)
Mp3tag v2.73 (HKLM-x32\...\Mp3tag) (Version: v2.73 - Florian Heidenreich)
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
NCSS 97 (HKLM-x32\...\NCSS 97) (Version: - )
Podpora Apple aplikácií (32-bit) (HKLM-x32\...\{6CF0CAEE-54B6-4D84-A055-3AF110F189D3}) (Version: 8.4 - Apple Inc.)
Podpora Apple aplikácií(64-bit) (HKLM\...\{8B127943-89E7-4691-A7A4-D05807920A84}) (Version: 8.4 - Apple Inc.)
Realtek USB Fast Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{D2B61BE0-B18B-4091-81B4-F234F4C30DFD}) (Version: 8.13.106.2014 - Realtek)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
SQL Server 2017 Advanced Analytics (HKLM\...\{3471E30E-5FFC-4FB1-81BA-43060B3D2B42}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Advanced Analytics (HKLM\...\{826DA700-7B76-49BA-8A83-E55F5FA1301E}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Batch Parser (HKLM\...\{2C6E8311-28BD-4615-9545-6E39E8E83A4B}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools (HKLM\...\{A6A9EFA1-AFEB-4209-B25D-3CFF2E6FAE2C}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools (HKLM\...\{BD1502B1-778B-44B6-B2B4-0B77BD0366A1}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools Extensions (HKLM\...\{06324A5D-66BB-4FAC-8D0B-9FEC1B230FFF}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools Extensions (HKLM\...\{200F38B2-1492-4576-B08C-78F2C2C953FC}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Common Files (HKLM\...\{9D1C0509-D490-4E9E-ACF5-A73E5C53742D}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Common Files (HKLM\...\{B777C4C0-A1CD-4AB9-99B1-AD5FBED6F8E5}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Connection Info (HKLM\...\{89A7644F-E056-4EC1-BFDE-9D1A531D6855}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Connection Info (HKLM\...\{A9A443F5-56E1-4FC6-937C-5F481345A843}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{28EEF6BA-A23A-42D2-86BA-A6BEE723B969}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{36C9ADEE-91B0-4FFA-9CBA-9164CE6089D5}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{CDFAD32A-7C67-44E2-B4FC-80F2D748A032}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{DED314CA-0EFE-4593-9D66-EF75E5289A4C}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Shared (HKLM\...\{0E22DBB4-691B-400C-B52D-8DFE8EC421AA}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Shared (HKLM\...\{793F1C1E-5C83-4E33-A29B-6EAA7C1E791C}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 DMF (HKLM\...\{B9998A13-5563-496C-B95E-597FFC70B670}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 DMF (HKLM\...\{D7D28BBF-3B0E-43F0-A457-331F1CD9E9EB}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Full text search (HKLM\...\{887B9993-3A2F-43B1-B7C1-B6CCF8B0D0FA}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Full text search (HKLM\...\{C37AD300-12CF-4911-9019-A05D66055EB4}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects (HKLM\...\{10855B1A-F7F2-4D8A-A725-9287C73BED5A}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects (HKLM\...\{6CBBF624-696C-499E-948D-ADBAFFA2F548}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects Extensions (HKLM\...\{8C515C22-BE07-4908-985C-0AA9349E1ED4}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects Extensions (HKLM\...\{C6D92730-3EC0-47B1-8F6C-6F5635D1EFAC}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 SQL Diagnostics (HKLM\...\{DFA6A906-3024-49DE-87AD-750EAED2FA49}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mpy (HKLM\...\{86DE7941-F5F3-48DF-A45F-82FA91217B45}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mpy (HKLM\...\{EE93819A-0492-4720-8721-1D06BF78457F}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mr (HKLM\...\{8868BCE1-8084-4035-AE2A-13765BE09D93}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mr (HKLM\...\{F3C3A536-BF8E-467A-8E33-4C508B8BC52F}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 XEvent (HKLM\...\{12D2DB8D-80FF-4152-8F51-EDB3BD3C6976}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 XEvent (HKLM\...\{AA2A015C-C210-413B-95F6-BF9D3CDD6E0D}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.6 - VideoLAN)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 8.02 - NCH Software)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files (x86)\ClamWin\bin\ExpShell64.dll [2008-04-19] ()
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Inc.)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2015-12-19] (Florian Heidenreich)
ContextMenuHandlers1: [PeContextMenuExtension] -> {098A124A-AA1C-38C8-A65E-D1199A14516A} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-03-22] (Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (Alexander Roshal)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2015-12-19] (Florian Heidenreich)
ContextMenuHandlers4: [DiskInternals_cd_recovery] -> {6DD33479-D4D0-4666-93C8-F6DC46668518} => -> No File
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2015-12-19] (Florian Heidenreich)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2014-11-19] (Intel Corporation)
ContextMenuHandlers6: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files (x86)\ClamWin\bin\ExpShell64.dll [2008-04-19] ()
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Inc.)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {03FFD3FB-EC53-49E5-9516-D186256A7561} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2020-03-19] (Piriform Software Ltd)
Task: {0F53A6E3-7ACC-43BC-AA49-F08975CB3CFE} - System32\Tasks\MiniToolPartitionWizard => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [2020-02-19] ()
Task: {15909E40-4ADC-43C1-8930-51875FF61EAE} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-04-09] (Microsoft Corporation) <==== ATTENTION
Task: {1E42491B-FF4F-4072-9C31-8EEBDCD06FF7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {1F3766D5-FDA3-405E-94DE-11D8CC033CB6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_363_Plugin.exe [2020-04-19] (Adobe)
Task: {27A7C62D-CEA7-4907-BF93-9423C61D6BD7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {2A008B37-B1A8-4AEA-8C18-F85A7CA743D9} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-04-09] (Microsoft Corporation) <==== ATTENTION
Task: {373B82C6-0C6A-4000-9629-06576883574D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {4223C28F-64A5-43C8-8D34-57BCF79ABAB2} - System32\Tasks\{DB60350E-319A-4774-8EFE-E29DBFE64664} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\GT Interactive\Driver\Config.exe" -d "C:\Program Files (x86)\GT Interactive\Driver"
Task: {5DDC1DD5-0FB0-4743-A658-062CADB882D4} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {7FA08B59-93D0-4A21-B3C7-A4519AB44934} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2020-03-19] (Piriform Software Ltd)
Task: {82451308-5CE2-461D-BDE3-7C64DB640DC6} - System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B} => C:\Windows\system32\pcalua.exe -a E:\START.EXE -d E:\
Task: {8F828BE9-8F00-4753-89D6-CD6A2D78E879} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {9E18FA8E-0FFE-4F8F-92DC-689D5B0D42CC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {ACEA0C20-FAEA-4FA3-A2E3-901FC34C7AD5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2019-09-04] (Apple Inc.)
Task: {B38F889E-7831-48F1-B170-90F04B0841FE} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe
Task: {D54DF9DB-019F-4075-A408-0658B53598D0} - System32\Tasks\{C01FDCB7-76D8-42C6-BA18-7BC5F6149E70} => C:\Windows\system32\pcalua.exe -a "E:\Robo\_games\Duke_3d_atomic\duke nukem 3d atomic edition for windows.exe" -d E:\Robo\_games\Duke_3d_atomic
Task: {E134A771-90AD-4CE4-8C0C-5C817A81A772} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
Task: {F8DC1AF1-F03D-425D-B9C2-C43C7F495DFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2020-04-19] (Adobe)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\uzivatel\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm
ShortcutWithArgument: C:\Users\uzivatel\Documents\dokumenty\2012\PB\PB-fakturacia\Fabasoft.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://iwebfabalb.slposta.sk/FSC
ShortcutWithArgument: C:\Users\uzivatel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default
==================== Loaded Modules (Whitelisted) ==============
2017-11-30 19:54 - 2017-11-30 19:54 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2020-03-21 19:03 - 2020-03-21 19:03 - 001315640 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-03-28 17:11 - 2017-08-24 03:12 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\RLauncher.dll
2018-03-28 17:22 - 2017-08-24 03:13 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\Pythonlauncher.dll
2020-03-27 21:33 - 2017-08-24 03:12 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\RLauncher.dll
2020-03-27 21:50 - 2017-08-24 03:13 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\Pythonlauncher.dll
2020-04-30 15:50 - 2020-02-19 12:08 - 000219616 _____ () C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe
2020-04-30 15:50 - 2019-11-08 10:13 - 000024032 _____ () C:\Program Files\MiniTool Partition Wizard 12\idriver.dll
2020-04-30 15:50 - 2020-03-16 13:39 - 003241440 _____ () C:\Program Files\MiniTool Partition Wizard 12\ikernel.dll
2020-04-30 15:50 - 2020-02-03 12:22 - 001177832 _____ () C:\Program Files\MiniTool Partition Wizard 12\PowerDataRecoveryCore.dll
2020-04-30 15:50 - 2019-11-08 10:13 - 000026592 _____ () C:\Program Files\MiniTool Partition Wizard 12\efs.dll
2020-04-30 15:50 - 2019-12-03 12:46 - 000368096 _____ () C:\Program Files\MiniTool Partition Wizard 12\RawObject.dll
2014-12-31 04:32 - 2014-11-19 09:26 - 000457616 _____ () C:\Windows\system32\igfxTray.exe
2020-03-25 16:30 - 2020-03-25 16:30 - 000095544 _____ () C:\Program Files\iTunes\zlib1.dll
2020-03-25 16:30 - 2020-03-25 16:30 - 001315640 _____ () C:\Program Files\iTunes\libxml2.dll
2020-03-21 19:05 - 2020-03-21 19:05 - 001038136 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2017-11-30 19:55 - 2017-11-30 19:55 - 000076088 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2020-02-01 19:43 - 2005-02-08 18:23 - 000979005 _____ () C:\Program Files (x86)\ClamWin\bin\python23.dll
2020-02-01 19:43 - 2004-11-20 04:27 - 000069632 _____ () C:\Program Files (x86)\ClamWin\lib\win32api.pyd
2020-02-01 19:43 - 2004-10-11 21:21 - 000094208 _____ () C:\Program Files (x86)\ClamWin\lib\pywintypes23.dll
2020-02-01 19:43 - 2004-05-25 22:18 - 000057401 _____ () C:\Program Files (x86)\ClamWin\lib\_sre.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000086016 _____ () C:\Program Files (x86)\ClamWin\lib\win32gui.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000024576 _____ () C:\Program Files (x86)\ClamWin\lib\win32event.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000036864 _____ () C:\Program Files (x86)\ClamWin\lib\win32process.pyd
2020-02-01 19:43 - 2004-05-25 22:18 - 000049212 _____ () C:\Program Files (x86)\ClamWin\lib\_socket.pyd
2020-02-01 19:43 - 2004-05-25 22:18 - 000495616 _____ () C:\Program Files (x86)\ClamWin\lib\_ssl.pyd
2020-02-01 19:43 - 2004-05-25 22:20 - 000036864 _____ () C:\Program Files (x86)\ClamWin\lib\_winreg.pyd
2020-02-01 19:43 - 2004-10-11 21:22 - 000315392 _____ () C:\Program Files (x86)\ClamWin\lib\pythoncom23.dll
2020-02-01 19:43 - 2004-11-20 04:27 - 000106496 _____ () C:\Program Files (x86)\ClamWin\lib\shell.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000065536 _____ () C:\Program Files (x86)\ClamWin\lib\win32security.pyd
2020-02-01 19:43 - 2004-01-15 15:45 - 000061440 _____ () C:\Program Files (x86)\ClamWin\lib\_ctypes.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000077824 _____ () C:\Program Files (x86)\ClamWin\lib\win32file.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000024576 _____ () C:\Program Files (x86)\ClamWin\lib\win32pipe.pyd
2020-02-01 19:43 - 2003-10-01 14:40 - 002240512 _____ () C:\Program Files (x86)\ClamWin\lib\wxc.pyd
2020-02-01 19:43 - 2003-10-01 12:43 - 003239936 _____ () C:\Program Files (x86)\ClamWin\lib\wxmsw24h.dll
2020-02-01 19:43 - 2003-08-10 10:14 - 000061440 _____ () C:\Program Files (x86)\ClamWin\lib\mxDateTime.pyd
2020-02-01 19:43 - 2004-05-25 22:17 - 000622651 _____ () C:\Program Files (x86)\ClamWin\lib\_bsddb.pyd
2020-02-01 19:43 - 2004-05-25 22:19 - 000045117 _____ () C:\Program Files (x86)\ClamWin\lib\datetime.pyd
2014-09-03 12:03 - 2014-09-03 12:03 - 001241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2019-04-28 18:57 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Photo Viewer.jpg
DNS Servers: 213.151.233.251 - 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Asus WebStorage Windows Service => 2
MSCONFIG\Services: ServiceLayer => 3
MSCONFIG\Services: SkypeUpdate => 2
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\StartupApproved\Run: => "PC Suite Tray"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{00064B71-B157-4296-B557-1B5790C7A22A}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{CDC23CF8-26ED-4146-AF84-C61C5224D039}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{44EC8DD0-D4D8-4E65-88F4-A2B4ADC0F6A3}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
FirewallRules: [{D7FFF49A-1F52-4E26-B9A6-E4DA766FEC3D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8E23E35F-F8AE-4C90-8718-E7FD6017DAFA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{D2482C71-4345-456B-ACFC-6B5C63FE7E7E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{AF2D4A39-57B3-4979-B349-58FCB38A6E6A}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{1DC6AEFE-FF81-46D4-B274-D2F83EA419B9}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{CFB942CC-94F4-49FF-886F-CF2C62D91B98}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe
FirewallRules: [{C8B507A4-20ED-43EA-883A-52760D526974}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe
FirewallRules: [{F2D32F0B-74C1-4DD7-AB29-12339BE07A8A}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe
FirewallRules: [{7D7B0550-C56E-46FD-BDCA-78FBB6749B16}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe
FirewallRules: [{42BEFE17-0576-4BB0-9281-82B806FDF264}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe
FirewallRules: [{F7F5DADB-311C-4209-A324-22437AB8B550}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe
FirewallRules: [{B075E3D3-3C99-430E-AE95-49ED57266E90}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{1D905ADC-6D6E-4DD6-A0F8-8F4AD6FDB803}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{C50432B7-A71F-4386-8DAB-66320D6406CA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C5906037-302B-494F-B7C4-547AEF751EDB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{EE10742C-392D-4081-A4B4-AE5D407D07F0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3EAC0EFC-D28E-4EBF-9057-5F852B5C2739}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{397C0836-2D80-420A-8E5B-F9883E9ACF2B}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{4228E7C8-8DDC-452C-90B6-99244AF648BF}] => (Allow) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
==================== Restore Points =========================
25-04-2020 13:10:22 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/30/2020 06:54:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/30/2020 06:48:05 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/30/2020 02:45:45 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/29/2020 08:28:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/29/2020 08:18:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Názov chybujúceho modulu: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Kód výnimky: 0xc0000005
Odstup chyby: 0x0004c7aa
Identifikácia chybujúceho procesu: 0x1b5c
Čas spustenia chybujúcej aplikácie: 0x01d61e528dde9c0e
Cesta chybujúcej aplikácie: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Cesta chybujúceho modulu: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Identifikácia hlásenia: cd870f66-8a45-11ea-8cff-ec6eda50a3f5
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:
Error: (04/29/2020 08:18:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Názov chybujúceho modulu: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Kód výnimky: 0xc0000005
Odstup chyby: 0x0004c7aa
Identifikácia chybujúceho procesu: 0x7f8
Čas spustenia chybujúcej aplikácie: 0x01d61e5287ed4654
Cesta chybujúcej aplikácie: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Cesta chybujúceho modulu: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Identifikácia hlásenia: c782a94d-8a45-11ea-8cff-ec6eda50a3f5
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:
Error: (04/29/2020 08:17:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Názov chybujúceho modulu: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Kód výnimky: 0xc0000005
Odstup chyby: 0x0004c7aa
Identifikácia chybujúceho procesu: 0x1838
Čas spustenia chybujúcej aplikácie: 0x01d61e527b53a6cc
Cesta chybujúcej aplikácie: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Cesta chybujúceho modulu: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Identifikácia hlásenia: bccf829a-8a45-11ea-8cff-ec6eda50a3f5
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:
Error: (04/29/2020 07:52:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/28/2020 08:31:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/27/2020 08:08:31 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
System errors:
=============
Error: (04/30/2020 06:58:08 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.
Error: (04/30/2020 06:57:38 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.
Error: (04/30/2020 06:47:08 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24611) (User: NT AUTHORITY)
Description: Metadata commit: No copies of metadata on volume E: could be written. If failures continue, decrypt volume.
Error: (04/30/2020 06:45:39 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24611) (User: NT AUTHORITY)
Description: Metadata commit: No copies of metadata on volume E: could be written. If failures continue, decrypt volume.
Error: (04/30/2020 06:40:27 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ISODisk.SYS
Error: (04/30/2020 04:09:22 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.
Error: (04/30/2020 04:09:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SQL Server Launchpad (SQLEXPRESS) sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.
Error: (04/30/2020 04:09:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SQL Server Launchpad (MSSQLSERVER) sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.
Error: (04/30/2020 04:08:52 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.
Error: (04/30/2020 04:03:48 PM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR10, has a bad block.
CodeIntegrity:
===================================
Date: 2020-02-24 23:20:57.266
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-23 12:06:50.794
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-22 19:15:43.903
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-12 18:02:46.950
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-11 18:34:01.982
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-09 10:10:05.514
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-07 19:45:45.000
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-04 19:32:18.967
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-02 14:10:37.344
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-01 19:17:02.658
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
Percentage of memory in use: 29%
Total physical RAM: 12190.62 MB
Available physical RAM: 8615.38 MB
Total Virtual: 14046.62 MB
Available Virtual: 10156.57 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:95.39 GB) (Free:31.67 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Data) (Fixed) (Total:127.85 GB) (Free:95.27 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 90842B2C)
Partition: GPT.
==================== End of Addition.txt ============================
Ran by uzivatel (30-04-2020 18:58:58)
Running from C:\Users\uzivatel\Desktop
Windows 8.1 Pro (Update) (X64) (2015-09-02 16:42:46)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-4176085001-3363555415-2058170901-500 - Administrator - Enabled) => C:\Users\Administrator
Guest (S-1-5-21-4176085001-3363555415-2058170901-501 - Limited - Disabled)
MSSQLSERVER00 (S-1-5-21-4176085001-3363555415-2058170901-1026 - Limited - Enabled)
MSSQLSERVER01 (S-1-5-21-4176085001-3363555415-2058170901-1027 - Limited - Enabled)
MSSQLSERVER02 (S-1-5-21-4176085001-3363555415-2058170901-1028 - Limited - Enabled)
MSSQLSERVER03 (S-1-5-21-4176085001-3363555415-2058170901-1029 - Limited - Enabled)
MSSQLSERVER04 (S-1-5-21-4176085001-3363555415-2058170901-1030 - Limited - Enabled)
MSSQLSERVER05 (S-1-5-21-4176085001-3363555415-2058170901-1031 - Limited - Enabled)
MSSQLSERVER06 (S-1-5-21-4176085001-3363555415-2058170901-1032 - Limited - Enabled)
MSSQLSERVER07 (S-1-5-21-4176085001-3363555415-2058170901-1033 - Limited - Enabled)
MSSQLSERVER08 (S-1-5-21-4176085001-3363555415-2058170901-1034 - Limited - Enabled)
MSSQLSERVER09 (S-1-5-21-4176085001-3363555415-2058170901-1035 - Limited - Enabled)
MSSQLSERVER10 (S-1-5-21-4176085001-3363555415-2058170901-1036 - Limited - Enabled)
MSSQLSERVER11 (S-1-5-21-4176085001-3363555415-2058170901-1037 - Limited - Enabled)
MSSQLSERVER12 (S-1-5-21-4176085001-3363555415-2058170901-1038 - Limited - Enabled)
MSSQLSERVER13 (S-1-5-21-4176085001-3363555415-2058170901-1039 - Limited - Enabled)
MSSQLSERVER14 (S-1-5-21-4176085001-3363555415-2058170901-1040 - Limited - Enabled)
MSSQLSERVER15 (S-1-5-21-4176085001-3363555415-2058170901-1041 - Limited - Enabled)
MSSQLSERVER16 (S-1-5-21-4176085001-3363555415-2058170901-1042 - Limited - Enabled)
MSSQLSERVER17 (S-1-5-21-4176085001-3363555415-2058170901-1043 - Limited - Enabled)
MSSQLSERVER18 (S-1-5-21-4176085001-3363555415-2058170901-1044 - Limited - Enabled)
MSSQLSERVER19 (S-1-5-21-4176085001-3363555415-2058170901-1045 - Limited - Enabled)
MSSQLSERVER20 (S-1-5-21-4176085001-3363555415-2058170901-1046 - Limited - Enabled)
SQLEXPRESS00 (S-1-5-21-4176085001-3363555415-2058170901-1004 - Limited - Enabled)
SQLEXPRESS01 (S-1-5-21-4176085001-3363555415-2058170901-1005 - Limited - Enabled)
SQLEXPRESS02 (S-1-5-21-4176085001-3363555415-2058170901-1006 - Limited - Enabled)
SQLEXPRESS03 (S-1-5-21-4176085001-3363555415-2058170901-1007 - Limited - Enabled)
SQLEXPRESS04 (S-1-5-21-4176085001-3363555415-2058170901-1008 - Limited - Enabled)
SQLEXPRESS05 (S-1-5-21-4176085001-3363555415-2058170901-1009 - Limited - Enabled)
SQLEXPRESS06 (S-1-5-21-4176085001-3363555415-2058170901-1010 - Limited - Enabled)
SQLEXPRESS07 (S-1-5-21-4176085001-3363555415-2058170901-1011 - Limited - Enabled)
SQLEXPRESS08 (S-1-5-21-4176085001-3363555415-2058170901-1012 - Limited - Enabled)
SQLEXPRESS09 (S-1-5-21-4176085001-3363555415-2058170901-1013 - Limited - Enabled)
SQLEXPRESS10 (S-1-5-21-4176085001-3363555415-2058170901-1014 - Limited - Enabled)
SQLEXPRESS11 (S-1-5-21-4176085001-3363555415-2058170901-1015 - Limited - Enabled)
SQLEXPRESS12 (S-1-5-21-4176085001-3363555415-2058170901-1016 - Limited - Enabled)
SQLEXPRESS13 (S-1-5-21-4176085001-3363555415-2058170901-1017 - Limited - Enabled)
SQLEXPRESS14 (S-1-5-21-4176085001-3363555415-2058170901-1018 - Limited - Enabled)
SQLEXPRESS15 (S-1-5-21-4176085001-3363555415-2058170901-1019 - Limited - Enabled)
SQLEXPRESS16 (S-1-5-21-4176085001-3363555415-2058170901-1020 - Limited - Enabled)
SQLEXPRESS17 (S-1-5-21-4176085001-3363555415-2058170901-1021 - Limited - Enabled)
SQLEXPRESS18 (S-1-5-21-4176085001-3363555415-2058170901-1022 - Limited - Enabled)
SQLEXPRESS19 (S-1-5-21-4176085001-3363555415-2058170901-1023 - Limited - Enabled)
SQLEXPRESS20 (S-1-5-21-4176085001-3363555415-2058170901-1024 - Limited - Enabled)
uzivatel (S-1-5-21-4176085001-3363555415-2058170901-1001 - Administrator - Enabled) => C:\Users\uzivatel
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}) (Version: - Microsoft) Hidden
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.363 - Adobe)
Apple Mobile Device Support (HKLM\...\{6E93B248-22B6-48B2-A568-2E49C65B2EA4}) (Version: 13.5.0.20 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.31 - ICEpower a/s)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Browser for SQL Server 2017 (HKLM-x32\...\{CF8EEB96-E7E7-4EF7-A0A1-559F09953156}) (Version: 14.0.1000.169 - Microsoft Corporation)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.71.1081 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.65 - Piriform)
ClamWin Free Antivirus 0.99.4 (HKLM-x32\...\ClamWin Free Antivirus_is1) (Version: - alch)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.52.56 - Conexant)
f.lux (HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Flux) (Version: - f.lux Software LLC)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 9.4.1.16828 - Foxit Software Inc.)
FREE MSG File Viewer version 2.0 (HKLM-x32\...\{2D370F64-93D0-4731-B27B-35869AEEB460}_is1) (Version: 2.0 - SysTools Software)
Fritz 9 (HKLM-x32\...\{4FAA46FA-D8C1-488C-A979-83F41BB1E1DA}_is1) (Version: 9.0 - US - ACTION, s.r.o.)
ChessBase Reader (HKLM-x32\...\{DE1044D3-B7A3-45F0-AE4C-9F68BDD7B596}) (Version: 12.42.0.0 - ChessBase)
iCloud (HKLM\...\{A3616230-EF97-44F3-83D3-1AE29DC639D3}) (Version: 7.18.0.22 - Apple Inc.)
IIS 10.0 Express (HKLM\...\{2B8326B6-4202-4239-B9A9-F3EC8812E82D}) (Version: 10.0.03917 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Hidden
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1017 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.0.10100.71 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{f5d71765-7cd1-4e68-998f-5b379e725da3}) (Version: 10.0.22 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.28.1006 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4013 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{2F97FBC6-7992-4DF7-A7C7-B68455E307F7}) (Version: 5.1.20.0 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{06A5031E-3B1E-4FB9-AC4C-BA0FE2706152}) (Version: 17.1.1433.02 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{c78a13fd-4324-4ddb-a613-746d2461441d}) (Version: 17.13.1 - Intel Corporation)
ISODisk 1.1 (HKLM-x32\...\{BF731945-7AAD-45E3-A202-A60C9213915C}_is1) (Version: - ISODisk.com)
iTunes (HKLM\...\{BFF1E6B9-6E1B-4764-8691-5BE9E7541757}) (Version: 12.10.6.2 - Apple Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 81.0.416.68 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.127.15 - )
Microsoft MPI (7.0.12437.8) (HKLM\...\{8499ACD3-C1E3-45AB-BF96-DA491727EBE1}) (Version: 7.0.12437.8 - Microsoft Corporation)
Microsoft ODBC Driver 13 for SQL Server (HKLM\...\{76CF9EF4-ABA0-484E-8042-12B99499AF5F}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{4D2C56FF-7F36-4B49-A97A-24F0522D41D7}) (Version: 11.3.6540.0 - Microsoft Corporation)
Microsoft SQL Server 2016 LocalDB (HKLM\...\{9097BF1A-13A0-4A4A-A1F8-473E2A669863}) (Version: 13.1.4001.0 - Microsoft Corporation)
Microsoft SQL Server 2017 (64-bit) (HKLM\...\Microsoft SQL Server SQL2017) (Version: - Microsoft Corporation)
Microsoft SQL Server 2017 LocalDB (HKLM\...\{216778FC-CC9A-4D47-AF5E-8223A37626D4}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft SQL Server 2017 Setup (English) (HKLM\...\{405252DC-ADF7-4BC8-95F5-F89DE513DD62}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft SQL Server 2017 T-SQL Language Service (HKLM\...\{C8A51693-98B9-4AB1-91B8-9A1B86729D5F}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 (HKLM-x32\...\{6913e92a-b64e-41c9-a5e6-cef39207fe89}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 (HKLM-x32\...\{65e650ff-30be-469d-b63a-418d71ea1765}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 2.5.2059.317 - Microsoft Corporation)
Microsoft VSS Writer for SQL Server 2017 (HKLM\...\{20B328C9-C6BB-434A-928A-00F05CD820B8}) (Version: 14.0.1000.169 - Microsoft Corporation)
Microsoft Web Deploy 4.0 (HKLM\...\{BBCDB523-F5B7-4E53-A911-C85191E3BDF0}) (Version: 10.0.2606 - Microsoft Corporation)
MiniTool Partition Wizard Free 12 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Software Limited)
MiniTool Power Data Recovery (HKLM-x32\...\MiniTool Power Data Recovery_is1) (Version: - MiniTool Solution Ltd.)
Mozilla Firefox 75.0 (x64 en-US) (HKLM\...\Mozilla Firefox 75.0 (x64 en-US)) (Version: 75.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 55.0.3 - Mozilla)
Mp3tag v2.73 (HKLM-x32\...\Mp3tag) (Version: v2.73 - Florian Heidenreich)
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
NCSS 97 (HKLM-x32\...\NCSS 97) (Version: - )
Podpora Apple aplikácií (32-bit) (HKLM-x32\...\{6CF0CAEE-54B6-4D84-A055-3AF110F189D3}) (Version: 8.4 - Apple Inc.)
Podpora Apple aplikácií(64-bit) (HKLM\...\{8B127943-89E7-4691-A7A4-D05807920A84}) (Version: 8.4 - Apple Inc.)
Realtek USB Fast Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{D2B61BE0-B18B-4091-81B4-F234F4C30DFD}) (Version: 8.13.106.2014 - Realtek)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
SQL Server 2017 Advanced Analytics (HKLM\...\{3471E30E-5FFC-4FB1-81BA-43060B3D2B42}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Advanced Analytics (HKLM\...\{826DA700-7B76-49BA-8A83-E55F5FA1301E}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Batch Parser (HKLM\...\{2C6E8311-28BD-4615-9545-6E39E8E83A4B}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools (HKLM\...\{A6A9EFA1-AFEB-4209-B25D-3CFF2E6FAE2C}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools (HKLM\...\{BD1502B1-778B-44B6-B2B4-0B77BD0366A1}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools Extensions (HKLM\...\{06324A5D-66BB-4FAC-8D0B-9FEC1B230FFF}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Client Tools Extensions (HKLM\...\{200F38B2-1492-4576-B08C-78F2C2C953FC}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Common Files (HKLM\...\{9D1C0509-D490-4E9E-ACF5-A73E5C53742D}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Common Files (HKLM\...\{B777C4C0-A1CD-4AB9-99B1-AD5FBED6F8E5}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Connection Info (HKLM\...\{89A7644F-E056-4EC1-BFDE-9D1A531D6855}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Connection Info (HKLM\...\{A9A443F5-56E1-4FC6-937C-5F481345A843}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{28EEF6BA-A23A-42D2-86BA-A6BEE723B969}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{36C9ADEE-91B0-4FFA-9CBA-9164CE6089D5}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{CDFAD32A-7C67-44E2-B4FC-80F2D748A032}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Services (HKLM\...\{DED314CA-0EFE-4593-9D66-EF75E5289A4C}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Shared (HKLM\...\{0E22DBB4-691B-400C-B52D-8DFE8EC421AA}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Database Engine Shared (HKLM\...\{793F1C1E-5C83-4E33-A29B-6EAA7C1E791C}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 DMF (HKLM\...\{B9998A13-5563-496C-B95E-597FFC70B670}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 DMF (HKLM\...\{D7D28BBF-3B0E-43F0-A457-331F1CD9E9EB}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Full text search (HKLM\...\{887B9993-3A2F-43B1-B7C1-B6CCF8B0D0FA}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Full text search (HKLM\...\{C37AD300-12CF-4911-9019-A05D66055EB4}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects (HKLM\...\{10855B1A-F7F2-4D8A-A725-9287C73BED5A}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects (HKLM\...\{6CBBF624-696C-499E-948D-ADBAFFA2F548}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects Extensions (HKLM\...\{8C515C22-BE07-4908-985C-0AA9349E1ED4}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 Shared Management Objects Extensions (HKLM\...\{C6D92730-3EC0-47B1-8F6C-6F5635D1EFAC}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 SQL Diagnostics (HKLM\...\{DFA6A906-3024-49DE-87AD-750EAED2FA49}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mpy (HKLM\...\{86DE7941-F5F3-48DF-A45F-82FA91217B45}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mpy (HKLM\...\{EE93819A-0492-4720-8721-1D06BF78457F}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mr (HKLM\...\{8868BCE1-8084-4035-AE2A-13765BE09D93}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 sql_inst_mr (HKLM\...\{F3C3A536-BF8E-467A-8E33-4C508B8BC52F}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 XEvent (HKLM\...\{12D2DB8D-80FF-4152-8F51-EDB3BD3C6976}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
SQL Server 2017 XEvent (HKLM\...\{AA2A015C-C210-413B-95F6-BF9D3CDD6E0D}) (Version: 14.0.1000.169 - Microsoft Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.6 - VideoLAN)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 8.02 - NCH Software)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files (x86)\ClamWin\bin\ExpShell64.dll [2008-04-19] ()
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Inc.)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2015-12-19] (Florian Heidenreich)
ContextMenuHandlers1: [PeContextMenuExtension] -> {098A124A-AA1C-38C8-A65E-D1199A14516A} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-03-22] (Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (Alexander Roshal)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2015-12-19] (Florian Heidenreich)
ContextMenuHandlers4: [DiskInternals_cd_recovery] -> {6DD33479-D4D0-4666-93C8-F6DC46668518} => -> No File
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2015-12-19] (Florian Heidenreich)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2014-11-19] (Intel Corporation)
ContextMenuHandlers6: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files (x86)\ClamWin\bin\ExpShell64.dll [2008-04-19] ()
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-12-25] (Foxit Software Inc.)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {03FFD3FB-EC53-49E5-9516-D186256A7561} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2020-03-19] (Piriform Software Ltd)
Task: {0F53A6E3-7ACC-43BC-AA49-F08975CB3CFE} - System32\Tasks\MiniToolPartitionWizard => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [2020-02-19] ()
Task: {15909E40-4ADC-43C1-8930-51875FF61EAE} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-04-09] (Microsoft Corporation) <==== ATTENTION
Task: {1E42491B-FF4F-4072-9C31-8EEBDCD06FF7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {1F3766D5-FDA3-405E-94DE-11D8CC033CB6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_363_Plugin.exe [2020-04-19] (Adobe)
Task: {27A7C62D-CEA7-4907-BF93-9423C61D6BD7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {2A008B37-B1A8-4AEA-8C18-F85A7CA743D9} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-04-09] (Microsoft Corporation) <==== ATTENTION
Task: {373B82C6-0C6A-4000-9629-06576883574D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {4223C28F-64A5-43C8-8D34-57BCF79ABAB2} - System32\Tasks\{DB60350E-319A-4774-8EFE-E29DBFE64664} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\GT Interactive\Driver\Config.exe" -d "C:\Program Files (x86)\GT Interactive\Driver"
Task: {5DDC1DD5-0FB0-4743-A658-062CADB882D4} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {7FA08B59-93D0-4A21-B3C7-A4519AB44934} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2020-03-19] (Piriform Software Ltd)
Task: {82451308-5CE2-461D-BDE3-7C64DB640DC6} - System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B} => C:\Windows\system32\pcalua.exe -a E:\START.EXE -d E:\
Task: {8F828BE9-8F00-4753-89D6-CD6A2D78E879} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {9E18FA8E-0FFE-4F8F-92DC-689D5B0D42CC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation)
Task: {ACEA0C20-FAEA-4FA3-A2E3-901FC34C7AD5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2019-09-04] (Apple Inc.)
Task: {B38F889E-7831-48F1-B170-90F04B0841FE} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe
Task: {D54DF9DB-019F-4075-A408-0658B53598D0} - System32\Tasks\{C01FDCB7-76D8-42C6-BA18-7BC5F6149E70} => C:\Windows\system32\pcalua.exe -a "E:\Robo\_games\Duke_3d_atomic\duke nukem 3d atomic edition for windows.exe" -d E:\Robo\_games\Duke_3d_atomic
Task: {E134A771-90AD-4CE4-8C0C-5C817A81A772} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
Task: {F8DC1AF1-F03D-425D-B9C2-C43C7F495DFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2020-04-19] (Adobe)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\uzivatel\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm
ShortcutWithArgument: C:\Users\uzivatel\Documents\dokumenty\2012\PB\PB-fakturacia\Fabasoft.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://iwebfabalb.slposta.sk/FSC
ShortcutWithArgument: C:\Users\uzivatel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default
==================== Loaded Modules (Whitelisted) ==============
2017-11-30 19:54 - 2017-11-30 19:54 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2020-03-21 19:03 - 2020-03-21 19:03 - 001315640 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-03-28 17:11 - 2017-08-24 03:12 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\RLauncher.dll
2018-03-28 17:22 - 2017-08-24 03:13 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.SQLEXPRESS\MSSQL\Binn\Pythonlauncher.dll
2020-03-27 21:33 - 2017-08-24 03:12 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\RLauncher.dll
2020-03-27 21:50 - 2017-08-24 03:13 - 000954368 _____ () C:\Program Files\Microsoft SQL Server\MSSQL14.MSSQLSERVER\MSSQL\Binn\Pythonlauncher.dll
2020-04-30 15:50 - 2020-02-19 12:08 - 000219616 _____ () C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe
2020-04-30 15:50 - 2019-11-08 10:13 - 000024032 _____ () C:\Program Files\MiniTool Partition Wizard 12\idriver.dll
2020-04-30 15:50 - 2020-03-16 13:39 - 003241440 _____ () C:\Program Files\MiniTool Partition Wizard 12\ikernel.dll
2020-04-30 15:50 - 2020-02-03 12:22 - 001177832 _____ () C:\Program Files\MiniTool Partition Wizard 12\PowerDataRecoveryCore.dll
2020-04-30 15:50 - 2019-11-08 10:13 - 000026592 _____ () C:\Program Files\MiniTool Partition Wizard 12\efs.dll
2020-04-30 15:50 - 2019-12-03 12:46 - 000368096 _____ () C:\Program Files\MiniTool Partition Wizard 12\RawObject.dll
2014-12-31 04:32 - 2014-11-19 09:26 - 000457616 _____ () C:\Windows\system32\igfxTray.exe
2020-03-25 16:30 - 2020-03-25 16:30 - 000095544 _____ () C:\Program Files\iTunes\zlib1.dll
2020-03-25 16:30 - 2020-03-25 16:30 - 001315640 _____ () C:\Program Files\iTunes\libxml2.dll
2020-03-21 19:05 - 2020-03-21 19:05 - 001038136 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2017-11-30 19:55 - 2017-11-30 19:55 - 000076088 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2020-02-01 19:43 - 2005-02-08 18:23 - 000979005 _____ () C:\Program Files (x86)\ClamWin\bin\python23.dll
2020-02-01 19:43 - 2004-11-20 04:27 - 000069632 _____ () C:\Program Files (x86)\ClamWin\lib\win32api.pyd
2020-02-01 19:43 - 2004-10-11 21:21 - 000094208 _____ () C:\Program Files (x86)\ClamWin\lib\pywintypes23.dll
2020-02-01 19:43 - 2004-05-25 22:18 - 000057401 _____ () C:\Program Files (x86)\ClamWin\lib\_sre.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000086016 _____ () C:\Program Files (x86)\ClamWin\lib\win32gui.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000024576 _____ () C:\Program Files (x86)\ClamWin\lib\win32event.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000036864 _____ () C:\Program Files (x86)\ClamWin\lib\win32process.pyd
2020-02-01 19:43 - 2004-05-25 22:18 - 000049212 _____ () C:\Program Files (x86)\ClamWin\lib\_socket.pyd
2020-02-01 19:43 - 2004-05-25 22:18 - 000495616 _____ () C:\Program Files (x86)\ClamWin\lib\_ssl.pyd
2020-02-01 19:43 - 2004-05-25 22:20 - 000036864 _____ () C:\Program Files (x86)\ClamWin\lib\_winreg.pyd
2020-02-01 19:43 - 2004-10-11 21:22 - 000315392 _____ () C:\Program Files (x86)\ClamWin\lib\pythoncom23.dll
2020-02-01 19:43 - 2004-11-20 04:27 - 000106496 _____ () C:\Program Files (x86)\ClamWin\lib\shell.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000065536 _____ () C:\Program Files (x86)\ClamWin\lib\win32security.pyd
2020-02-01 19:43 - 2004-01-15 15:45 - 000061440 _____ () C:\Program Files (x86)\ClamWin\lib\_ctypes.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000077824 _____ () C:\Program Files (x86)\ClamWin\lib\win32file.pyd
2020-02-01 19:43 - 2004-11-20 04:27 - 000024576 _____ () C:\Program Files (x86)\ClamWin\lib\win32pipe.pyd
2020-02-01 19:43 - 2003-10-01 14:40 - 002240512 _____ () C:\Program Files (x86)\ClamWin\lib\wxc.pyd
2020-02-01 19:43 - 2003-10-01 12:43 - 003239936 _____ () C:\Program Files (x86)\ClamWin\lib\wxmsw24h.dll
2020-02-01 19:43 - 2003-08-10 10:14 - 000061440 _____ () C:\Program Files (x86)\ClamWin\lib\mxDateTime.pyd
2020-02-01 19:43 - 2004-05-25 22:17 - 000622651 _____ () C:\Program Files (x86)\ClamWin\lib\_bsddb.pyd
2020-02-01 19:43 - 2004-05-25 22:19 - 000045117 _____ () C:\Program Files (x86)\ClamWin\lib\datetime.pyd
2014-09-03 12:03 - 2014-09-03 12:03 - 001241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2019-04-28 18:57 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Photo Viewer.jpg
DNS Servers: 213.151.233.251 - 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Asus WebStorage Windows Service => 2
MSCONFIG\Services: ServiceLayer => 3
MSCONFIG\Services: SkypeUpdate => 2
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\StartupApproved\Run: => "PC Suite Tray"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{00064B71-B157-4296-B557-1B5790C7A22A}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{CDC23CF8-26ED-4146-AF84-C61C5224D039}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{44EC8DD0-D4D8-4E65-88F4-A2B4ADC0F6A3}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
FirewallRules: [{D7FFF49A-1F52-4E26-B9A6-E4DA766FEC3D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8E23E35F-F8AE-4C90-8718-E7FD6017DAFA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{D2482C71-4345-456B-ACFC-6B5C63FE7E7E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{AF2D4A39-57B3-4979-B349-58FCB38A6E6A}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{1DC6AEFE-FF81-46D4-B274-D2F83EA419B9}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{CFB942CC-94F4-49FF-886F-CF2C62D91B98}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe
FirewallRules: [{C8B507A4-20ED-43EA-883A-52760D526974}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe
FirewallRules: [{F2D32F0B-74C1-4DD7-AB29-12339BE07A8A}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe
FirewallRules: [{7D7B0550-C56E-46FD-BDCA-78FBB6749B16}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe
FirewallRules: [{42BEFE17-0576-4BB0-9281-82B806FDF264}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe
FirewallRules: [{F7F5DADB-311C-4209-A324-22437AB8B550}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe
FirewallRules: [{B075E3D3-3C99-430E-AE95-49ED57266E90}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{1D905ADC-6D6E-4DD6-A0F8-8F4AD6FDB803}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{C50432B7-A71F-4386-8DAB-66320D6406CA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C5906037-302B-494F-B7C4-547AEF751EDB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{EE10742C-392D-4081-A4B4-AE5D407D07F0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3EAC0EFC-D28E-4EBF-9057-5F852B5C2739}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{397C0836-2D80-420A-8E5B-F9883E9ACF2B}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{4228E7C8-8DDC-452C-90B6-99244AF648BF}] => (Allow) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
==================== Restore Points =========================
25-04-2020 13:10:22 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/30/2020 06:54:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/30/2020 06:48:05 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/30/2020 02:45:45 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/29/2020 08:28:08 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/29/2020 08:18:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Názov chybujúceho modulu: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Kód výnimky: 0xc0000005
Odstup chyby: 0x0004c7aa
Identifikácia chybujúceho procesu: 0x1b5c
Čas spustenia chybujúcej aplikácie: 0x01d61e528dde9c0e
Cesta chybujúcej aplikácie: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Cesta chybujúceho modulu: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Identifikácia hlásenia: cd870f66-8a45-11ea-8cff-ec6eda50a3f5
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:
Error: (04/29/2020 08:18:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Názov chybujúceho modulu: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Kód výnimky: 0xc0000005
Odstup chyby: 0x0004c7aa
Identifikácia chybujúceho procesu: 0x7f8
Čas spustenia chybujúcej aplikácie: 0x01d61e5287ed4654
Cesta chybujúcej aplikácie: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Cesta chybujúceho modulu: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Identifikácia hlásenia: c782a94d-8a45-11ea-8cff-ec6eda50a3f5
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:
Error: (04/29/2020 08:17:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Názov chybujúceho modulu: adwcleaner_7.0.6.0.exe, verzia: 7.0.6.0, časová značka: 0x5a3c0583
Kód výnimky: 0xc0000005
Odstup chyby: 0x0004c7aa
Identifikácia chybujúceho procesu: 0x1838
Čas spustenia chybujúcej aplikácie: 0x01d61e527b53a6cc
Cesta chybujúcej aplikácie: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Cesta chybujúceho modulu: C:\Users\uzivatel\Desktop\adwcleaner_7.0.6.0.exe
Identifikácia hlásenia: bccf829a-8a45-11ea-8cff-ec6eda50a3f5
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:
Error: (04/29/2020 07:52:51 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/28/2020 08:31:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
Error: (04/27/2020 08:08:31 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3006) (User: NT AUTHORITY)
Description: Unable to read the performance counter strings defined for the 01b language ID. The first DWORD in the Data section contains the Win32 error code.
System errors:
=============
Error: (04/30/2020 06:58:08 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.
Error: (04/30/2020 06:57:38 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.
Error: (04/30/2020 06:47:08 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24611) (User: NT AUTHORITY)
Description: Metadata commit: No copies of metadata on volume E: could be written. If failures continue, decrypt volume.
Error: (04/30/2020 06:45:39 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24611) (User: NT AUTHORITY)
Description: Metadata commit: No copies of metadata on volume E: could be written. If failures continue, decrypt volume.
Error: (04/30/2020 06:40:27 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ISODisk.SYS
Error: (04/30/2020 04:09:22 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.
Error: (04/30/2020 04:09:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SQL Server Launchpad (SQLEXPRESS) sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.
Error: (04/30/2020 04:09:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SQL Server Launchpad (MSSQLSERVER) sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1-krát.
Error: (04/30/2020 04:08:52 PM) (Source: DCOM) (EventID: 10010) (User: Zero1)
Description: The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.
Error: (04/30/2020 04:03:48 PM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR10, has a bad block.
CodeIntegrity:
===================================
Date: 2020-02-24 23:20:57.266
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-23 12:06:50.794
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-22 19:15:43.903
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-12 18:02:46.950
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-11 18:34:01.982
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-09 10:10:05.514
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-07 19:45:45.000
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-04 19:32:18.967
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-02 14:10:37.344
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-01 19:17:02.658
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
Percentage of memory in use: 29%
Total physical RAM: 12190.62 MB
Available physical RAM: 8615.38 MB
Total Virtual: 14046.62 MB
Available Virtual: 10156.57 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:95.39 GB) (Free:31.67 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Data) (Fixed) (Total:127.85 GB) (Free:95.27 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 90842B2C)
Partition: GPT.
==================== End of Addition.txt ============================
-
Rudy
- Site Admin
- Příspěvky: 118241
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosim o kontrolu & obcas problem wifi (nahodne)
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers4: [DiskInternals_cd_recovery] -> {6DD33479-D4D0-4666-93C8-F6DC46668518} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {82451308-5CE2-461D-BDE3-7C64DB640DC6} - System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B} => C:\Windows\system32\pcalua.exe -a E:\START.EXE -d E:\
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [OEXPRESS] => [X]
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\MountPoints2: {1b8b6c10-8736-11e8-88c6-edb37e02d125} - "E:\Setup.exe"
URLSearchHook: [S-1-5-80-1985561900-798682989-2213159822-1904180398-3434236965] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3477044410-376262199-2110164357-2030828471-4165405235] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3919359670-3540430778-4246408611-3681914861-206046543] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Filter: text/xml - No CLSID Value
FF ProfilePath: Profiles/7h7ex4z3.default-1552668782976 [not found] <==== ATTENTION
C:\Windows\SysWOW64\~GLH0011.TMP
C:\Windows\SysWOW64\~GLH0010.TMP
C:\Windows\SysWOW64\~GLH0005.TMP
C:\Windows\SysWOW64\~GLH0007.TMP
C:\Windows\SysWOW64\~GLH000f.TMP
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosim o kontrolu & obcas problem wifi (nahodne)
Fix result of Farbar Recovery Scan Tool (x64) Version: 02.01.2018
Ran by uzivatel (01-05-2020 16:38:31) Run:2
Running from C:\Users\uzivatel\Desktop
Loaded Profiles: uzivatel & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Available Profiles: uzivatel & Administrator & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers4: [DiskInternals_cd_recovery] -> {6DD33479-D4D0-4666-93C8-F6DC46668518} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {82451308-5CE2-461D-BDE3-7C64DB640DC6} - System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B} => C:\Windows\system32\pcalua.exe -a E:\START.EXE -d E:\
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [OEXPRESS] => [X]
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\MountPoints2: {1b8b6c10-8736-11e8-88c6-edb37e02d125} - "E:\Setup.exe"
URLSearchHook: [S-1-5-80-1985561900-798682989-2213159822-1904180398-3434236965] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3477044410-376262199-2110164357-2030828471-4165405235] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3919359670-3540430778-4246408611-3681914861-206046543] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Filter: text/xml - No CLSID Value
FF ProfilePath: Profiles/7h7ex4z3.default-1552668782976 [not found] <==== ATTENTION
C:\Windows\SysWOW64\~GLH0011.TMP
C:\Windows\SysWOW64\~GLH0010.TMP
C:\Windows\SysWOW64\~GLH0005.TMP
C:\Windows\SysWOW64\~GLH0007.TMP
C:\Windows\SysWOW64\~GLH000f.TMP
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\DiskInternals_cd_recovery" => removed successfully
HKLM\Software\Classes\CLSID\{6DD33479-D4D0-4666-93C8-F6DC46668518} => key not found
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => key not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{82451308-5CE2-461D-BDE3-7C64DB640DC6} => could not remove key. ErrorCode1: 0x00000002
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{82451308-5CE2-461D-BDE3-7C64DB640DC6}" => removed successfully
C:\Windows\System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B}" => removed successfully
"HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Windows\CurrentVersion\Run\\OEXPRESS" => removed successfully
"HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1b8b6c10-8736-11e8-88c6-edb37e02d125}" => removed successfully
HKLM\Software\Classes\CLSID\{1b8b6c10-8736-11e8-88c6-edb37e02d125} => key not found
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
HKLM\Software\Classes\PROTOCOLS\Filter\Filter: text/xml - No CLSID Value => key not found
C:\Windows\SysWOW64\~GLH0011.TMP => moved successfully
C:\Windows\SysWOW64\~GLH0010.TMP => moved successfully
C:\Windows\SysWOW64\~GLH0005.TMP => moved successfully
C:\Windows\SysWOW64\~GLH0007.TMP => moved successfully
C:\Windows\SysWOW64\~GLH000f.TMP => moved successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10621802 B
Java, Flash, Steam htmlcache => 1127 B
Windows/system/drivers => 836932 B
Edge => 0 B
Chrome => 0 B
Firefox => 17974374 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 0 B
uzivatel => 1247641 B
Administrator => 0 B
SQLTELEMETRY$SQLEXPRESS => 0 B
SQLTELEMETRY => 0 B
MSSQLFDLauncher => 0 B
MSSQLLaunchpad => 0 B
MSSQL$SQLEXPRESS => 0 B
MSSQLSERVER => 0 B
MSSQLLaunchpad$SQLEXPRESS => 0 B
MSSQLFDLauncher$SQLEXPRESS => 0 B
RecycleBin => 0 B
EmptyTemp: => 29.3 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 16:38:49 ====
Ran by uzivatel (01-05-2020 16:38:31) Run:2
Running from C:\Users\uzivatel\Desktop
Loaded Profiles: uzivatel & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS (Available Profiles: uzivatel & Administrator & SQLTELEMETRY$SQLEXPRESS & SQLTELEMETRY & MSSQLFDLauncher & MSSQLLaunchpad & MSSQL$SQLEXPRESS & MSSQLSERVER & MSSQLLaunchpad$SQLEXPRESS & MSSQLFDLauncher$SQLEXPRESS)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers4: [DiskInternals_cd_recovery] -> {6DD33479-D4D0-4666-93C8-F6DC46668518} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {82451308-5CE2-461D-BDE3-7C64DB640DC6} - System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B} => C:\Windows\system32\pcalua.exe -a E:\START.EXE -d E:\
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\Run: [OEXPRESS] => [X]
HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\...\MountPoints2: {1b8b6c10-8736-11e8-88c6-edb37e02d125} - "E:\Setup.exe"
URLSearchHook: [S-1-5-80-1985561900-798682989-2213159822-1904180398-3434236965] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3263513310-3392720605-1798839546-683002060-3227631582] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3477044410-376262199-2110164357-2030828471-4165405235] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3919359670-3540430778-4246408611-3681914861-206046543] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Filter: text/xml - No CLSID Value
FF ProfilePath: Profiles/7h7ex4z3.default-1552668782976 [not found] <==== ATTENTION
C:\Windows\SysWOW64\~GLH0011.TMP
C:\Windows\SysWOW64\~GLH0010.TMP
C:\Windows\SysWOW64\~GLH0005.TMP
C:\Windows\SysWOW64\~GLH0007.TMP
C:\Windows\SysWOW64\~GLH000f.TMP
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\DiskInternals_cd_recovery" => removed successfully
HKLM\Software\Classes\CLSID\{6DD33479-D4D0-4666-93C8-F6DC46668518} => key not found
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => key not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{82451308-5CE2-461D-BDE3-7C64DB640DC6} => could not remove key. ErrorCode1: 0x00000002
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{82451308-5CE2-461D-BDE3-7C64DB640DC6}" => removed successfully
C:\Windows\System32\Tasks\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{43A172EE-326E-41F5-A02C-6D02CE3E1C2B}" => removed successfully
"HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\Software\Microsoft\Windows\CurrentVersion\Run\\OEXPRESS" => removed successfully
"HKU\S-1-5-21-4176085001-3363555415-2058170901-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1b8b6c10-8736-11e8-88c6-edb37e02d125}" => removed successfully
HKLM\Software\Classes\CLSID\{1b8b6c10-8736-11e8-88c6-edb37e02d125} => key not found
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
Could not restore Default URLSearchHook.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
HKLM\Software\Classes\PROTOCOLS\Filter\Filter: text/xml - No CLSID Value => key not found
C:\Windows\SysWOW64\~GLH0011.TMP => moved successfully
C:\Windows\SysWOW64\~GLH0010.TMP => moved successfully
C:\Windows\SysWOW64\~GLH0005.TMP => moved successfully
C:\Windows\SysWOW64\~GLH0007.TMP => moved successfully
C:\Windows\SysWOW64\~GLH000f.TMP => moved successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10621802 B
Java, Flash, Steam htmlcache => 1127 B
Windows/system/drivers => 836932 B
Edge => 0 B
Chrome => 0 B
Firefox => 17974374 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 0 B
uzivatel => 1247641 B
Administrator => 0 B
SQLTELEMETRY$SQLEXPRESS => 0 B
SQLTELEMETRY => 0 B
MSSQLFDLauncher => 0 B
MSSQLLaunchpad => 0 B
MSSQL$SQLEXPRESS => 0 B
MSSQLSERVER => 0 B
MSSQLLaunchpad$SQLEXPRESS => 0 B
MSSQLFDLauncher$SQLEXPRESS => 0 B
RecycleBin => 0 B
EmptyTemp: => 29.3 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 16:38:49 ====
-
Rudy
- Site Admin
- Příspěvky: 118241
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosim o kontrolu & obcas problem wifi (nahodne)
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: prosim o kontrolu & obcas problem wifi (nahodne)
zatial nenastal problem s pripojenim wifi pri starte.
dakujem
dakujem
-
Rudy
- Site Admin
- Příspěvky: 118241
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: prosim o kontrolu & obcas problem wifi (nahodne)
To jsem rád. Nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?