Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
ladir
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 27 črc 2012 16:16
Bydliště: Žilna

Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#1 Příspěvek od ladir »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-06-2020
Ran by Ladislav (administrator) on DOMA (19-06-2020 12:05:03)
Running from C:\Users\Ladislav\Desktop
Loaded Profiles: Ladislav
Platform: Windows 10 Pro N Version 1903 18362.778 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <2>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\Vpn.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(MEDIAN s.r.o.) [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\AudioHUB.Processing.WwwAccessConnectorUrlMonitor.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Ladislav\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12004.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CredentialEnrollmentManager.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\usocoreworker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <6>
(Piriform Ltd -> Piriform Ltd) G:\Program Files\CCleaner\CCleaner.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [108136 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\Run: [CCleaner Monitoring] => G:\Program Files\CCleaner\CCleaner.exe [7972528 2017-12-01] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 19\Program32\ZPSTRAY.EXE [576456 2018-04-05] (ZONER software, a.s. -> ZONER software)
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365760 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [100352 2017-12-30] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP c111 Status Monitor: C:\WINDOWS\system32\hpinkstsc111LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\PCL hpz3llhn: C:\WINDOWS\system32\hpz3llhn.dll [36352 2017-12-30] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Installer\chrmstp.exe [2020-06-18] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\77.1.1829.91\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast Cleanup Premium.lnk [2019-11-01]
ShortcutTarget: Avast Cleanup Premium.lnk -> C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe (AVAST Software s.r.o. -> AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2019-05-24]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine\Vpn.exe (AVAST Software s.r.o. -> AVAST Software)
Startup: C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrácia výrobku.lnk [2018-01-18]
ShortcutTarget: Logitech . Registrácia výrobku.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Logitech -> Leader Technologies/Logitech)
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2EFE5E07-E261-4006-B316-5681E5735443} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2F91EF9C-6BFF-417E-AEC5-3975B0ED5BC9} - System32\Tasks\EOSv3 Scheduler onTime => F:\Download\esetonlinescanner_sky.exe [14566496 2020-04-13] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {3DB0D51A-481D-4B0C-8576-6CC988A3B40C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {4234B168-FCBD-4387-BF53-1354585352D2} - System32\Tasks\CCleanerSkipUAC => G:\Program Files\CCleaner\CCleaner.exe [7972528 2017-12-01] (Piriform Ltd -> Piriform Ltd)
Task: {44F2D455-275C-4CD8-8484-6D686A6E428A} - System32\Tasks\EOSv3 Scheduler onLogOn => F:\Download\esetonlinescanner_sky.exe [14566496 2020-04-13] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {553F5D5B-F320-42C1-A90A-C6485146738E} - System32\Tasks\{CFDEEEFB-EFAA-416A-877F-C4677BB58A9F} => C:\Windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {58907814-DD47-4F90-A7B5-781FA39B1A04} - System32\Tasks\Avast Cleanup Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [1659000 2019-07-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {5B06DFF3-96F4-48AB-B412-CBE4C51D1408} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
Task: {6BAF712F-7627-442F-B2A5-B9A280057E5A} - System32\Tasks\Uninstaller_SkipUac_Ladislav => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5889808 2019-10-08] (IObit Information Technology -> IObit)
Task: {6BBB532D-AAD4-4B6D-A953-3BF69A536930} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1722880 2019-06-25] () [File not signed]
Task: {7099B05A-A7B8-479D-8926-F852B93D2365} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {7FB76588-767E-4B92-AFAE-95732C64C38E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files (x86)\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {819CFFDD-68F7-4495-B14A-557B98D75C05} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-19] (Adobe Inc. -> Adobe)
Task: {8FE687B3-609E-4151-AE77-7F75AD383603} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3314272 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
Task: {9265ED66-8541-4217-A0EC-A62550B4E05C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {9540214B-8AC9-45E3-A148-535D9381B350} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
Task: {9686BD51-ECB5-4CA6-970F-B4CD90B72963} - System32\Tasks\Avast TUNEUP Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [1659000 2019-07-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {A465E30A-739C-44D5-B992-3D55DA1A2412} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => C:\Program Files\rempl\remsh.exe
Task: {AA694834-5B9F-4358-A144-77A97B768EF9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AB6119D8-7306-41C4-ACF1-A8FD128C125C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B0B8BD9F-E0B8-4A7C-867C-DDB1C1AE53C8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Task: {B480AE41-30EB-4DCF-BAB1-C51A6097CDE6} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {B777D4E2-8E0A-4623-8A6D-6505C3338C92} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {BE1DB860-765C-4EAA-83B7-D407091524E1} - System32\Tasks\{6BBC0B3F-C8AB-42FE-84CA-62CE54DFC15D} => C:\Windows\system32\pcalua.exe -a C:\Users\Ladislav\Downloads\wmp11-windowsxp-x64-enu.exe -d C:\Users\Ladislav\Downloads
Task: {CA29E826-E256-4C17-8C08-649FE35AFC92} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D4BB60BE-4A67-4461-8C71-84617F720A7B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files (x86)\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {D8344DAF-0F80-4C23-A663-9090130B90F9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Task: {EF129AAE-067D-44E0-AAB1-B877EEDA4054} - System32\Tasks\AudioHUB => C:\Program Files (x86)\Median\WwwAccessConnector\AudioHUB.Processing.WwwAccessConnectorUrlMonitor.exe [274944 2019-10-25] (MEDIAN s.r.o.) [File not signed]
Task: {F14F5345-31F4-4AAF-B5D4-42A2ADC6A067} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\AVAST Software\SecureLine\VpnUpdate.exe [1390472 2019-10-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {F18D052D-4820-4EB1-8A29-253A2FE25403} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-19] (Adobe Inc. -> Adobe)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-3290048940-3179038733-109409546-1001] => Proxy is enabled.
ProxyServer: [S-1-5-21-3290048940-3179038733-109409546-1001] => http=127.0.0.1:8877;https=127.0.0.1:8877
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{a7647244-abd4-4290-9f31-3fa47fdcaa99}: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{ad7ced24-b237-4e5f-a22f-90e1334ab0b0}: [NameServer] 100.120.134.1
ManualProxies: 1http=127.0.0.1:8877;https=127.0.0.1:8877

Internet Explorer:
==================
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2019-06-20] (IObit Information Technology -> IObit)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Office15\OCHelper.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-05-28] (McAfee, LLC -> McAfee, LLC)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: T-Mobile PC Messenger -> {9D940EED-467E-4732-96B3-8BAF0D5AFDFF} -> C:\Program Files (x86)\PC Messenger\PCMessengerBar.dll [2010-06-30] (Slovak Telekom, a.s.) [File not signed]
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-05-28] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - T-Mobile PC Messenger - {9D940EED-467E-4732-96B3-8BAF0D5AFDFF} - C:\Program Files (x86)\PC Messenger\PCMessengerBar.dll [2010-06-30] (Slovak Telekom, a.s.) [File not signed]
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Office15\MSOSB.DLL [2019-06-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File

Edge:
======
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.18.0_neutral__d55gg7py3s0m0 [not found]

FireFox:
========
FF DefaultProfile: v2n1kz7r.default
FF ProfilePath: C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\sb9janv3.default-release [2020-06-19]
FF Homepage: Mozilla\Firefox\Profiles\sb9janv3.default-release -> google.sk
FF ProfilePath: C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default [2020-06-19]
FF DownloadDir: F:\Download
FF Homepage: Mozilla\Firefox\Profiles\v2n1kz7r.default -> hxxps://www.google.com/
FF NetworkProxy: Mozilla\Firefox\Profiles\v2n1kz7r.default -> type", 0
FF Notifications: Mozilla\Firefox\Profiles\v2n1kz7r.default -> hxxps://www.facebook.com; hxxps://www.letenkyzababku.sk; hxxps://panel.marketagent.com
FF Extension: (AdGuard blokovač reklamy) - C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default\Extensions\adguardadblocker@adguard.com.xpi [2020-06-04]
FF Extension: (To Google Translate) - C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2019-11-25]
FF Extension: (YouTube to MP3 Button) - C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default\Extensions\{ec791a2e-1b4f-4bcc-a4d0-5e795de557dc}.xpi [2018-11-18]
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-05-28] [UpdateUrl:hxxps://sadownload.mcafee.com/products/SA/Win/xpi/webadvisor/update.json]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-19] (Adobe Inc. -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-19] (Adobe Inc. -> )
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-06-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3290048940-3179038733-109409546-1001: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\Ladislav\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-15] (RocketLife -> RocketLife, LLP)
FF Plugin HKU\S-1-5-21-3290048940-3179038733-109409546-1001: SkypeForBusinessPlugin-16.2 -> C:\Users\Ladislav\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.439\npGatewayNpapi.dll [2019-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3290048940-3179038733-109409546-1001: SkypeForBusinessPlugin64-16.2 -> C:\Users\Ladislav\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.439\npGatewayNpapi-x64.dll [2019-01-23] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default [2020-06-01]
CHR Extension: (Prezentácie) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-01-13]
CHR Extension: (Dokumenty) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-01-13]
CHR Extension: (Disk Google) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-01-13]
CHR Extension: (YouTube) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-13]
CHR Extension: (Tabuľky) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-01-13]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-03-09]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-09]
CHR Extension: (Gmail) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-17]
CHR Extension: (Chrome Media Router) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-09]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6392728 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [348968 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [1052984 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [58048 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 CleanupPSvc; C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe [10287216 2019-07-24] (AVAST Software s.r.o. -> AVAST Software)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4507328 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2019-08-23] (IObit Information Technology -> IObit)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [939544 2020-05-28] (McAfee, LLC -> McAfee, LLC)
R3 netprofm; C:\WINDOWS\System32\netprofmsvc.dll [613888 2020-03-11] (Microsoft Windows -> Microsoft Corporation) [File not signed]
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [6828424 2019-10-24] (AVAST Software s.r.o. -> AVAST Software)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13172752 2020-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205896 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [235088 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [178768 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [60496 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2020-03-02] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42784 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175208 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [506152 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [109280 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84856 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851608 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [462592 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [216824 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [322256 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-09-13] (Microsoft Corporation) [File not signed]
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2017-12-30] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2017-12-30] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 dot4usb; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [49056 2017-12-30] (Hewlett-Packard Company -> Microsoft Corporation)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 ISODrive; F:\Download\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44112 2019-07-30] (IObit Information Technology -> IObit)
S3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2019-07-30] (IObit Information Technology -> IObit)
S3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2019-07-30] (IObit Information Technology -> IObit)
S3 MsBridge; C:\WINDOWS\System32\drivers\bridge.sys [127488 2019-03-19] (Microsoft Windows -> Microsoft Corporation) [File not signed]
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2017-12-27] (ASUSTeK Computer Inc. -> )
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2018-12-07] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [25608 2019-03-21] (AVG Technologies CZ, s.r.o. -> SlimWare Utilities, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-06-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [401120 2020-06-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-19] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-19 12:05 - 2020-06-19 12:07 - 000029347 _____ C:\Users\Ladislav\Desktop\FRST.txt
2020-06-19 12:04 - 2020-06-19 12:06 - 000000000 ____D C:\FRST
2020-06-19 12:02 - 2020-06-19 12:02 - 002289152 _____ (Farbar) C:\Users\Ladislav\Desktop\FRST64.exe
2020-06-19 09:34 - 2020-06-18 09:28 - 000335976 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-06-18 09:28 - 2020-06-18 09:28 - 000216824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2020-06-18 09:28 - 2020-06-18 09:28 - 000175208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2020-06-17 13:43 - 2020-06-17 13:43 - 000537744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-07 11:46 - 2020-06-07 11:50 - 000000000 ____D C:\Users\Ladislav\AppData\Roaming\DRPSu
2020-06-07 10:16 - 2020-06-07 10:18 - 000000000 ____D C:\Users\Ladislav\AppData\Roaming\DriverFinder
2020-06-07 09:53 - 2020-06-07 09:53 - 000000000 ____D C:\Program Files\Common Files\logishrd
2020-06-06 11:08 - 2020-06-06 11:08 - 000019875 _____ C:\Users\Ladislav\Desktop\regrutacny-dotaznik._fgd3.odt
2020-06-06 11:08 - 2020-06-06 11:08 - 000000000 ____D C:\Users\Ladislav\OneDrive\Documents\Vlastné šablóny balíka Office
2020-06-03 10:18 - 2020-06-03 10:18 - 001401554 _____ C:\Users\Ladislav\Desktop\Pomocník.mp4
2020-06-03 10:14 - 2020-06-18 12:40 - 000000000 ____D C:\Users\Ladislav\OneDrive\Documents\ViberDownloads
2020-06-01 13:50 - 2020-06-15 10:16 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3290048940-3179038733-109409546-1001
2020-06-01 13:50 - 2020-06-04 08:43 - 000002394 _____ C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-06-01 13:49 - 2020-06-01 13:48 - 035209280 _____ (Microsoft Corporation) C:\Users\Ladislav\Downloads\OneDriveSetup.exe
2020-06-01 13:25 - 2020-06-01 13:29 - 000000000 ____D C:\Users\Ladislav\AppData\Local\TeamViewer
2020-06-01 13:25 - 2020-06-01 13:25 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer.lnk
2020-06-01 13:25 - 2020-06-01 13:25 - 000001028 _____ C:\Users\Public\Desktop\TeamViewer.lnk
2020-06-01 13:25 - 2020-06-01 13:25 - 000001028 _____ C:\ProgramData\Desktop\TeamViewer.lnk
2020-06-01 13:07 - 2020-06-04 11:07 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-05-24 08:50 - 2020-06-19 09:20 - 000004380 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-19 12:09 - 2019-01-10 11:08 - 030869504 _____ C:\WINDOWS\SysWOW64\tempResults.db
2020-06-19 12:07 - 2019-01-09 17:12 - 000000000 ____D C:\AAA
2020-06-19 12:05 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-06-19 11:36 - 2019-11-01 12:31 - 000004286 _____ C:\WINDOWS\system32\Tasks\Avast Cleanup Update
2020-06-19 11:36 - 2019-07-29 13:10 - 000911556 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-19 11:36 - 2019-03-19 06:49 - 000000000 ____D C:\WINDOWS\INF
2020-06-19 11:36 - 2018-10-31 10:52 - 000065732 _____ C:\WINDOWS\system32\perfh01B.dat
2020-06-19 11:36 - 2018-10-31 10:52 - 000017672 _____ C:\WINDOWS\system32\perfc01B.dat
2020-06-19 11:36 - 2017-12-27 21:38 - 000000000 ____D C:\Users\Ladislav\AppData\LocalLow\Mozilla
2020-06-19 11:35 - 2018-05-16 11:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-06-19 11:32 - 2019-03-19 06:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-06-19 11:31 - 2019-07-29 13:12 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-06-19 11:30 - 2018-04-18 17:43 - 000000000 ____D C:\Users\Ladislav\AppData\Local\AVAST Software
2020-06-19 11:28 - 2019-10-23 09:34 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2020-06-19 11:28 - 2019-10-23 09:34 - 000002076 _____ C:\Users\Public\Desktop\Avast Premium Security.lnk
2020-06-19 11:28 - 2019-10-23 09:34 - 000002076 _____ C:\ProgramData\Desktop\Avast Premium Security.lnk
2020-06-19 11:28 - 2019-07-29 13:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-19 11:28 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-06-19 10:47 - 2017-12-27 21:28 - 000000000 ____D C:\Users\Ladislav\AppData\Local\Packages
2020-06-19 09:34 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-06-19 09:20 - 2019-07-29 13:12 - 000004572 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-19 09:19 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-19 09:19 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-06-18 13:04 - 2019-07-29 12:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-06-18 09:35 - 2018-01-13 17:28 - 000002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-18 09:29 - 2018-01-26 11:35 - 000462592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2020-06-18 09:29 - 2018-01-26 11:35 - 000322256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2020-06-18 09:28 - 2020-04-22 08:39 - 000506152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2020-06-18 09:28 - 2019-01-15 09:57 - 000235088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2020-06-18 09:28 - 2019-01-06 11:19 - 000178768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2020-06-18 09:28 - 2019-01-06 11:19 - 000060496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2020-06-18 09:28 - 2018-10-18 08:38 - 000042784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000851608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000205896 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000109280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000084856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2020-06-16 11:38 - 2018-06-30 15:03 - 000000000 ____D C:\Users\Ladislav\AppData\Local\CrashDumps
2020-06-15 10:16 - 2019-10-31 11:02 - 000002218 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-06-15 10:16 - 2019-10-30 17:27 - 000002948 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2020-06-15 10:16 - 2019-10-30 17:27 - 000002568 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2020-06-15 10:16 - 2019-10-30 11:28 - 000002538 _____ C:\WINDOWS\system32\Tasks\AudioHUB
2020-06-15 10:16 - 2019-07-29 13:12 - 000003386 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-06-15 10:16 - 2019-07-29 13:12 - 000003162 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-06-15 10:16 - 2019-07-29 13:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-06-11 11:04 - 2019-07-29 11:10 - 000000000 ____D C:\Users\Ladislav
2020-06-11 11:02 - 2020-04-12 12:07 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite
2020-06-11 11:02 - 2018-01-21 09:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2020-06-11 11:02 - 2018-01-21 09:55 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2020-06-11 11:02 - 2017-12-28 17:33 - 000000000 ____D C:\ProgramData\AVAST Software
2020-06-11 10:56 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-06-11 10:53 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\registration
2020-06-11 10:51 - 2017-12-28 17:33 - 000000000 ____D C:\Program Files\AVAST Software
2020-06-04 11:13 - 2017-12-27 21:38 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-06-04 11:13 - 2017-12-27 21:38 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-06-04 11:07 - 2019-10-30 11:04 - 000000000 ____D C:\Users\Ladislav\AppData\Roaming\TeamViewer
2020-06-04 11:07 - 2018-08-19 21:03 - 000000000 ____D C:\Users\Ladislav\AppData\Local\D3DSCache
2020-06-04 08:43 - 2017-12-27 21:30 - 000000000 ___RD C:\Users\Ladislav\OneDrive
2020-06-03 14:07 - 2019-07-29 13:12 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-06-03 14:03 - 2019-10-31 10:39 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-02 08:27 - 2017-12-28 14:50 - 000000000 ____D C:\Users\Ladislav\AppData\Roaming\vlc
2020-06-01 14:28 - 2019-10-31 10:29 - 000002472 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_Ladislav
2020-06-01 14:19 - 2018-02-24 17:20 - 000007606 _____ C:\Users\Ladislav\AppData\Local\resmon.resmoncfg
2020-06-01 10:33 - 2019-10-31 10:29 - 000000000 ____D C:\ProgramData\ProductData
2020-06-01 10:32 - 2019-10-31 10:28 - 000000000 ____D C:\ProgramData\IObit
2020-05-30 16:02 - 2018-01-27 14:35 - 000000000 ____D C:\ProgramData\Corel
2020-05-30 13:58 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-05-30 12:18 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-05-30 08:29 - 2019-06-20 13:57 - 000000000 ____D C:\Program Files\UNP

==================== Files in the root of some directories ========

2018-10-07 11:29 - 2018-10-07 11:29 - 000791712 _____ (Disc Soft Ltd.) C:\Users\Ladislav\DTLiteInstaller.exe
2018-03-29 14:58 - 2018-03-29 14:58 - 000007680 _____ () C:\Program Files\CompareCLib.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000335924 _____ () C:\Program Files\CookieText.rtf
2018-04-20 13:27 - 2018-04-20 13:27 - 000211858 _____ () C:\Program Files\CookieText_pl.rtf
2018-06-05 15:51 - 2018-06-05 15:51 - 000236189 _____ () C:\Program Files\CookieText_sk.rtf
2018-03-29 14:58 - 2018-03-29 14:58 - 000121856 _____ (EasyNetQ) C:\Program Files\EasyNetQ.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000063488 _____ () C:\Program Files\EasyNetQ.Management.Client.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000320000 _____ () C:\Program Files\Google.ProtocolBuffers.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000057344 _____ () C:\Program Files\Google.ProtocolBuffers.Serialization.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000192512 _____ (ICSharpCode.net) C:\Program Files\ICSharpCode.SharpZipLib.dll
2018-07-13 10:59 - 2018-07-13 10:59 - 000071168 _____ () C:\Program Files\Interop.UIAutomationClient.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000040960 _____ (JetBrains s.r.o.) C:\Program Files\JetBrains.Annotations.dll
2016-08-11 10:20 - 2016-08-11 10:20 - 000006144 _____ () C:\Program Files\libmarker.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000010240 _____ () C:\Program Files\LibMarkerPc.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000007168 _____ () C:\Program Files\LibMarkerPcInterface.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000288768 _____ (The Apache Software Foundation) C:\Program Files\log4net.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000023552 _____ ( ) C:\Program Files\Microsoft.Build.Framework.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000177152 _____ ( ) C:\Program Files\Microsoft.Build.Tasks.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000050688 _____ ( ) C:\Program Files\Microsoft.Build.Utilities.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000009216 _____ ( ) C:\Program Files\Microsoft.VisualC.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000403968 _____ (MongoDB Inc.) C:\Program Files\MongoDB.Bson.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files\Mono.Data.Sqlite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000096768 _____ ( ) C:\Program Files\Mono.Data.Tds.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000185856 _____ ( ) C:\Program Files\Mono.Posix.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000290304 _____ ( ) C:\Program Files\Mono.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000019456 _____ ( ) C:\Program Files\Mono.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files\Mono.WebBrowser.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002596352 _____ ( ) C:\Program Files\mscorlib.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000471040 _____ (Mark Heath) C:\Program Files\NAudio.dll
2015-03-05 20:56 - 2015-03-05 20:56 - 000082944 _____ () C:\Program Files\NAudio.WindowsMediaFormat.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000110592 _____ (Brian Gideon) C:\Program Files\NDde.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000391680 _____ (Newtonsoft) C:\Program Files\Newtonsoft.Json.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000558592 _____ (VMware, Inc.) C:\Program Files\RabbitMQ.Client.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 003383808 _____ () C:\Program Files\SlimDX.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000025600 _____ ( ) C:\Program Files\System.ComponentModel.DataAnnotations.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000122880 _____ ( ) C:\Program Files\System.Configuration.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000022528 _____ ( ) C:\Program Files\System.Configuration.Install.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000291328 _____ ( ) C:\Program Files\System.Core.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000851456 _____ ( ) C:\Program Files\System.Data.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000176128 _____ ( ) C:\Program Files\System.Data.OracleClient.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001035264 _____ (Robert Simpson, et al.) C:\Program Files\System.Data.SQLite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000286720 _____ ( ) C:\Program Files\System.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000043008 _____ ( ) C:\Program Files\System.DirectoryServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001746944 _____ ( ) C:\Program Files\System.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000029184 _____ ( ) C:\Program Files\System.Drawing.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000443392 _____ ( ) C:\Program Files\System.Drawing.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000045568 _____ ( ) C:\Program Files\System.EnterpriseServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000048128 _____ ( ) C:\Program Files\System.Management.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000123392 _____ ( ) C:\Program Files\System.Runtime.Remoting.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000194560 _____ ( ) C:\Program Files\System.Runtime.Serialization.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000037376 _____ ( ) C:\Program Files\System.Runtime.Serialization.Formatters.Soap.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000132096 _____ ( ) C:\Program Files\System.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000044032 _____ ( ) C:\Program Files\System.ServiceProcess.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000030208 _____ ( ) C:\Program Files\System.Transactions.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002266112 _____ ( ) C:\Program Files\System.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000348672 _____ ( ) C:\Program Files\System.Web.Services.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 003023360 _____ ( ) C:\Program Files\System.Windows.Forms.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001269248 _____ ( ) C:\Program Files\System.Xml.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000105984 _____ ( ) C:\Program Files\System.Xml.Linq.dll
2018-04-19 15:34 - 2018-04-19 15:34 - 000299008 _____ () C:\Program Files\tempResults.db
2018-03-29 14:58 - 2018-03-29 14:58 - 000203264 _____ () C:\Program Files\Topshelf.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000009216 _____ () C:\Program Files\Topshelf.Log4Net.dll
2018-07-13 10:59 - 2018-07-13 10:59 - 000186880 _____ () C:\Program Files\UIAComWrapper.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000020480 _____ () C:\Program Files\UrlHistoryLibrary.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000057344 _____ () C:\Program Files\WaveLibMixer.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000007680 _____ () C:\Program Files (x86)\CompareCLib.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000335924 _____ () C:\Program Files (x86)\CookieText.rtf
2018-04-20 13:27 - 2018-04-20 13:27 - 000211858 _____ () C:\Program Files (x86)\CookieText_pl.rtf
2018-06-05 15:51 - 2018-06-05 15:51 - 000236189 _____ () C:\Program Files (x86)\CookieText_sk.rtf
2018-07-24 15:19 - 2018-07-24 15:19 - 000121856 _____ (EasyNetQ) C:\Program Files (x86)\EasyNetQ.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000063488 _____ () C:\Program Files (x86)\EasyNetQ.Management.Client.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000320000 _____ () C:\Program Files (x86)\Google.ProtocolBuffers.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000057344 _____ () C:\Program Files (x86)\Google.ProtocolBuffers.Serialization.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000192512 _____ (ICSharpCode.net) C:\Program Files (x86)\ICSharpCode.SharpZipLib.dll
2019-10-25 13:53 - 2019-10-25 13:53 - 000071168 _____ () C:\Program Files (x86)\Interop.UIAutomationClient.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000040960 _____ (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains.Annotations.dll
2016-08-11 10:20 - 2016-08-11 10:20 - 000006144 _____ () C:\Program Files (x86)\libmarker.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000010240 _____ () C:\Program Files (x86)\LibMarkerPc.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000007168 _____ () C:\Program Files (x86)\LibMarkerPcInterface.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000288768 _____ (The Apache Software Foundation) C:\Program Files (x86)\log4net.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000023552 _____ ( ) C:\Program Files (x86)\Microsoft.Build.Framework.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000177152 _____ ( ) C:\Program Files (x86)\Microsoft.Build.Tasks.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000050688 _____ ( ) C:\Program Files (x86)\Microsoft.Build.Utilities.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000009216 _____ ( ) C:\Program Files (x86)\Microsoft.VisualC.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000403968 _____ (MongoDB Inc.) C:\Program Files (x86)\MongoDB.Bson.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files (x86)\Mono.Data.Sqlite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000096768 _____ ( ) C:\Program Files (x86)\Mono.Data.Tds.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000185856 _____ ( ) C:\Program Files (x86)\Mono.Posix.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000290304 _____ ( ) C:\Program Files (x86)\Mono.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000019456 _____ ( ) C:\Program Files (x86)\Mono.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files (x86)\Mono.WebBrowser.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002596352 _____ ( ) C:\Program Files (x86)\mscorlib.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000471040 _____ (Mark Heath) C:\Program Files (x86)\NAudio.dll
2015-03-05 20:56 - 2015-03-05 20:56 - 000082944 _____ () C:\Program Files (x86)\NAudio.WindowsMediaFormat.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000110592 _____ (Brian Gideon) C:\Program Files (x86)\NDde.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000391680 _____ (Newtonsoft) C:\Program Files (x86)\Newtonsoft.Json.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000558592 _____ (VMware, Inc.) C:\Program Files (x86)\RabbitMQ.Client.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 003383808 _____ () C:\Program Files (x86)\SlimDX.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000025600 _____ ( ) C:\Program Files (x86)\System.ComponentModel.DataAnnotations.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000122880 _____ ( ) C:\Program Files (x86)\System.Configuration.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000022528 _____ ( ) C:\Program Files (x86)\System.Configuration.Install.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000291328 _____ ( ) C:\Program Files (x86)\System.Core.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000851456 _____ ( ) C:\Program Files (x86)\System.Data.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000176128 _____ ( ) C:\Program Files (x86)\System.Data.OracleClient.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 001035264 _____ (Robert Simpson, et al.) C:\Program Files (x86)\System.Data.SQLite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000286720 _____ ( ) C:\Program Files (x86)\System.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000043008 _____ ( ) C:\Program Files (x86)\System.DirectoryServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001746944 _____ ( ) C:\Program Files (x86)\System.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000029184 _____ ( ) C:\Program Files (x86)\System.Drawing.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000443392 _____ ( ) C:\Program Files (x86)\System.Drawing.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000045568 _____ ( ) C:\Program Files (x86)\System.EnterpriseServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000048128 _____ ( ) C:\Program Files (x86)\System.Management.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000123392 _____ ( ) C:\Program Files (x86)\System.Runtime.Remoting.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000194560 _____ ( ) C:\Program Files (x86)\System.Runtime.Serialization.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000037376 _____ ( ) C:\Program Files (x86)\System.Runtime.Serialization.Formatters.Soap.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000132096 _____ ( ) C:\Program Files (x86)\System.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000044032 _____ ( ) C:\Program Files (x86)\System.ServiceProcess.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000030208 _____ ( ) C:\Program Files (x86)\System.Transactions.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002266112 _____ ( ) C:\Program Files (x86)\System.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000348672 _____ ( ) C:\Program Files (x86)\System.Web.Services.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 003023360 _____ ( ) C:\Program Files (x86)\System.Windows.Forms.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001269248 _____ ( ) C:\Program Files (x86)\System.Xml.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000105984 _____ ( ) C:\Program Files (x86)\System.Xml.Linq.dll
2018-04-19 15:34 - 2018-04-19 15:34 - 000299008 _____ () C:\Program Files (x86)\tempResults.db
2018-07-24 15:20 - 2018-07-24 15:20 - 000203264 _____ () C:\Program Files (x86)\Topshelf.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000009216 _____ () C:\Program Files (x86)\Topshelf.Log4Net.dll
2019-10-25 13:54 - 2019-10-25 13:54 - 000186880 _____ () C:\Program Files (x86)\UIAComWrapper.dll
2019-10-30 10:03 - 2019-10-30 10:03 - 000065320 _____ () C:\Program Files (x86)\Uninstall.exe
2018-07-24 15:20 - 2018-07-24 15:20 - 000020480 _____ () C:\Program Files (x86)\UrlHistoryLibrary.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000057344 _____ () C:\Program Files (x86)\WaveLibMixer.dll
2018-11-18 19:17 - 2019-02-02 12:21 - 000033191 _____ () C:\Users\Ladislav\AppData\Roaming\downloads.json
2017-12-31 11:08 - 2017-12-31 11:08 - 000000092 _____ () C:\Users\Ladislav\AppData\Roaming\PDFShaper.ini
2017-12-28 19:37 - 2017-12-28 19:37 - 000000600 _____ () C:\Users\Ladislav\AppData\Roaming\winscp.rnd
2017-12-31 11:09 - 2017-12-31 11:09 - 000000024 _____ () C:\Users\Ladislav\AppData\Local\pdfshaper.ini
2018-02-24 17:20 - 2020-06-01 14:19 - 000007606 _____ () C:\Users\Ladislav\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-06-2020
Ran by Ladislav (19-06-2020 12:10:29)
Running from C:\Users\Ladislav\Desktop
Windows 10 Pro N Version 1903 18362.778 (X64) (2019-07-29 11:13:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3290048940-3179038733-109409546-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3290048940-3179038733-109409546-503 - Limited - Disabled)
Guest (S-1-5-21-3290048940-3179038733-109409546-501 - Limited - Disabled)
Ladislav (S-1-5-21-3290048940-3179038733-109409546-1001 - Administrator - Enabled) => C:\Users\Ladislav
WDAGUtilityAccount (S-1-5-21-3290048940-3179038733-109409546-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: ESET Security (Disabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: ESET Firewall (Disabled) {B066057A-E576-007C-D591-56C163D3B33B}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 18.06 (HKLM-x32\...\{23170F69-40C1-2701-1806-000001000000}) (Version: 18.06.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Apowersoft Video Stahovač V6.4.8.5 (HKLM-x32\...\{b3336f66-e079-4ff6-abdb-51e2fab781d5}_is1) (Version: 6.4.8.5 - APOWERSOFT LIMITED)
aTube Catcher version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
AudioHUBWwwAccessConnector 1.0.0.2202 (HKLM-x32\...\AudioHUBWwwAccessConnector) (Version: 1.0.0.2202 - MEDIAN s.r.o.)
Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 19.1.7734.0 - AVAST Software)
Avast Driver Updater (HKLM-x32\...\{8804140C-3144-4075-9526-1C662E26CA17}) (Version: 2.5.5 - AVAST Software) Hidden
Avast Premium Security (HKLM-x32\...\Avast Antivirus) (Version: 20.4.2410 - Avast Software)
Avast SecureLine (HKLM\...\{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 5.2.429 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.5.245.0 - AVAST Software) Hidden
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Corel Graphics - Windows Shell Extension (HKLM\...\_{5D262585-5C19-4279-B1BC-C0D242E6AA3E}) (Version: 20.1.0.708 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{5D262585-5C19-4279-B1BC-C0D242E6AA3E}) (Version: 20.1.708 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{9D4064B2-A6B6-42E6-8695-7C9B3D69954E}) (Version: 20.1.708 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 64 Bit (HKLM\...\{4DD94E1E-998D-414B-953C-9BAC44E4CCDD}) (Version: 17.1.572 - Corel Corporation) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.12.0.1184 - Disc Soft Ltd)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FastStone Image Viewer 6.4 (HKLM-x32\...\FastStone Image Viewer) (Version: 6.4 - FastStone Soft)
Free Audio Editor 2017 v9.4.0 (HKLM-x32\...\Free Audio Editor 2017_is1) (Version: - Copyright(C) 2005-2017 FAEMedia, Inc.)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.106 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
HP Deskjet 1510 series Basic Device Software (HKLM\...\{D17E60E8-478A-4D4A-8147-21D481B5CA55}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Image Zone Express (HKLM-x32\...\{759524D5-08C9-4E88-8EB3-8D6ECB226C52}) (Version: 1.5.3.36 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
IObit Uninstaller 9 (HKLM-x32\...\IObitUninstall) (Version: 9.1.0.8 - IObit)
K-Lite Mega Codec Pack 15.0.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.0.0 - KLCP)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lamer (HKLM-x32\...\Lamer) (Version: - )
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.102 - McAfee, LLC)
Microsoft Office 2013 Professional Plus (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\OneDriveSetup.exe) (Version: 20.064.0329.0008 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{5a7dc0ad-cdb2-43b5-8b82-f81065fe6092}) (Version: 15.0.26717 - Microsoft Corporation)
Mozilla Firefox 77.0.1 (x64 sk) (HKLM\...\Mozilla Firefox 77.0.1 (x64 sk)) (Version: 77.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 64.0 - Mozilla)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
NirSoft Wireless Network Watcher (HKLM-x32\...\NirSoft Wireless Network Watcher) (Version: - )
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (HKLM\...\{E237254B-36A1-3D27-815E-B37C13BE0796}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (HKLM-x32\...\{03077B58-6ACF-32CA-B42A-EAA458C295A1}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
PC Messenger (HKLM-x32\...\PC Messenger) (Version: - )
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
Skype Meetings App (HKLM-x32\...\{38419113-95E3-48BB-B00E-113E3F08D87C}) (Version: 16.2.0.439 - Microsoft Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.2.2756 - TeamViewer)
UltraISO Premium V9.66 (HKLM-x32\...\UltraISO_is1) (Version: - )
Update for Skype for Business 2015 (KB4484097) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{1EB78C78-BFAF-4052-BD35-9A0F99B941CC}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4484097) 64-Bit Edition (HKLM\...\{90150000-012B-041B-1000-0000000FF1CE}_Office15.PROPLUSR_{1EB78C78-BFAF-4052-BD35-9A0F99B941CC}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4484097) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{1EB78C78-BFAF-4052-BD35-9A0F99B941CC}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM-x32\...\{7C070E60-8769-4763-BBD8-7537A28A60D4}) (Version: 1.10.0.0 - Microsoft Corporation) Hidden
Viber (HKLM-x32\...\{0B863FF2-B8B4-4F51-873E-9ACBE3B0F8DB}) (Version: 12.8.1.20 - Viber Media S.a.r.l) Hidden
Viber (HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\{80e9c69f-df63-4fca-bff4-bd9f6c23ec8d}) (Version: 12.8.1.20 - 2010-2020 Viber Media S.a.r.l)
Videoder 1.0.9 (HKLM-x32\...\808fc302-3d01-59ce-8094-e0443a55877e) (Version: 1.0.9 - GlennioTech)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.10 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{F92064F6-BDE8-46FC-A19F-4E12D311BE3A}) (Version: 1.0.30 - Microsoft Corporation)
WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
WinRAR 5.50 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
YTD Video Downloader 5.9.13 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 5.9.13 - GreenTree Applications SRL) <==== ATTENTION
Zoner Photo Studio X (HKLM\...\ZonerPhotoStudioX_SK_is1) (Version: 19.1804.2.61 - ZONER software)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (HKLM\...\{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (HKLM-x32\...\{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}) (Version: 11.0.51108 - Microsoft Corporation) Hidden

Packages:
=========
Adblock Plus -> C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-06-11] (eyeo GmbH)
Doplnok pre Fotografie -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Studios) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
MSN Počasie -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3290048940-3179038733-109409546-1001_Classes\CLSID\{3E3AD4BD-346A-460A-80E8-90699B75C00B}\InprocServer32 -> C:\Users\Ladislav\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.439\GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2019-07-30] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => F:\Download\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2019-07-30] (IObit Information Technology -> IObit)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => F:\Download\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2019-07-30] (IObit Information Technology -> IObit)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => F:\Download\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.i420] => C:\WINDOWS\system32\lvcod64.dll [475672 2018-01-19] (Logitech Inc -> Logitech Inc.)
HKLM\...\Drivers32: [VIDC.X264] => C:\WINDOWS\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\WINDOWS\system32\lagarith.dll [148992 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\WINDOWS\system32\xvidvfw.dll [311296 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\WINDOWS\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [416280 2018-01-19] (Logitech Inc -> Logitech Inc.)
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284672 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [File not signed]
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-11-01 12:30 - 2016-09-12 16:53 - 048936448 _____ () [File not signed] C:\Program Files (x86)\AVAST Software\Avast Cleanup\libcef.dll
2020-06-19 11:31 - 2020-06-19 11:31 - 000104448 _____ () [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\AudioMarkerWin.dll
2020-06-19 11:31 - 2020-06-19 11:31 - 002391615 _____ () [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\libfftw3f-3.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 001035264 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\System.Data.SQLite.dll
2019-02-13 17:02 - 2018-09-05 22:32 - 002095104 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\AVAST Software\SecureLine\libcrypto-1_1.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-07-10 13:02 - 2019-01-04 10:25 - 000000826 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %C_EM64T_REDIST11%bin\Intel64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1 - 195.146.128.62
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "LWS"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\StartupFolder: => "Logitech . Registrácia výrobku.lnk"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "Flvto Youtube Downloader"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

01-06-2020 08:48:30 Scheduled Checkpoint
09-06-2020 11:06:23 Scheduled Checkpoint
11-06-2020 10:46:29 Operácia obnovovania

==================== Faulty Device Manager Devices ============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (06/19/2020 12:02:38 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "F:\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_e6c6b761130d4fb8.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_2e73ee38278978be.manifest.

Error: (06/19/2020 11:48:47 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6024,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 11:38:46 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SystemSettings.exe version 10.0.18362.628 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 18a0

Start Time: 01d6461c1eeb5eea

Termination Time: 4294967295

Application Path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe

Report Id: cb45632d-3416-483b-9462-b794bb4d7b46

Faulting package full name: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy

Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel

Hang type: Cross-thread

Error: (06/19/2020 11:36:29 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3972,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 11:28:57 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "F:\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_e6c6b761130d4fb8.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_2e73ee38278978be.manifest.

Error: (06/19/2020 11:23:56 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "F:\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_e6c6b761130d4fb8.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_2e73ee38278978be.manifest.

Error: (06/19/2020 11:16:47 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7992,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 10:25:21 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3448,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.


System errors:
=============
Error: (06/19/2020 11:27:52 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Avast Antivirus sa po prijatí ovládacieho príkazu pred vypnutím nevypla správne.

Error: (06/19/2020 08:57:48 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby FDResPub bol dosiahnutý časový limit (30000 ms).

Error: (06/19/2020 08:57:17 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby BFE bol dosiahnutý časový limit (30000 ms).

Error: (06/18/2020 03:58:29 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby BFE bol dosiahnutý časový limit (30000 ms).

Error: (06/18/2020 03:57:53 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby FDResPub bol dosiahnutý časový limit (30000 ms).

Error: (06/18/2020 03:57:22 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby BFE bol dosiahnutý časový limit (30000 ms).

Error: (06/18/2020 09:23:45 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby FDResPub bol dosiahnutý časový limit (30000 ms).

Error: (06/18/2020 09:23:14 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby BFE bol dosiahnutý časový limit (30000 ms).


Windows Defender:
===================================
Date: 2019-10-30 17:21:25.278
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {DF7E3EE8-F712-4ACF-8A7E-406FD63E7B2F}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-25 10:39:50.833
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {819476DB-D247-4EF0-9BA5-A462A7327E58}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-25 10:19:47.998
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {AC92A06D-653B-4416-A73F-DE38574F4E19}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-24 22:01:50.289
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {743837B6-6BE5-4231-A61E-CBAC6B606B0B}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-24 18:01:04.684
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {10BCC3E8-4480-4449-AEE6-39690F46E854}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2020-06-19 11:46:16.882
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.317.1689.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17100.2
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2020-06-19 11:33:18.691
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.305.986.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16500.1
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2020-06-11 11:08:15.406
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.305.986.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16500.1
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2019-10-30 18:35:40.281
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.305.986.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16500.1
Error code: 0x800706d9
Error description: There are no more endpoints available from the endpoint mapper.

Date: 2019-10-30 18:24:42.363
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.305.986.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16500.1
Error code: 0x800706d9
Error description: There are no more endpoints available from the endpoint mapper.

CodeIntegrity:
===================================

Date: 2020-06-19 11:45:55.917
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 11:45:55.847
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 11:45:55.774
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 11:45:55.691
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 11:45:55.624
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 11:45:55.552
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 11:45:55.483
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 11:45:55.412
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 0902 07/27/2011
Motherboard: ASUSTeK Computer INC. P5G41T-M LX
Processor: Intel(R) Celeron(R) CPU E3500 @ 2.70GHz
Percentage of memory in use: 87%
Total physical RAM: 4061.11 MB
Available physical RAM: 515.11 MB
Total Virtual: 4765.11 MB
Available Virtual: 1040.75 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.35 GB) (Free:62.56 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive e: () (Removable) (Total:1.91 GB) (Free:0.81 GB) FAT
Drive f: () (Fixed) (Total:149.05 GB) (Free:1.04 GB) NTFS
Drive g: (WinXPdisk) (Fixed) (Total:298.08 GB) (Free:159.83 GB) NTFS
Drive j: (Ex-disk) (Fixed) (Total:298.09 GB) (Free:1.17 GB) NTFS

\\?\Volume{7e7ebd41-0000-0000-0000-20d61b000000}\ () (Fixed) (Total:0.45 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: E327E327)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 7E7EBD41)
Partition 1: (Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=460 MB) - (Type=27)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: A4A3A4A3)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (Size: 298.1 GB) (Disk ID: A6D0342D)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=07 NTFS)

==========================================================
Disk: 4 (Size: 1.9 GB) (Disk ID: 6F20736B)
No partition Table on disk 4.
Disk 4 is a removable device.

==================== End of Addition.txt =======================
Ladir

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ladir
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 27 črc 2012 16:16
Bydliště: Žilna

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#3 Příspěvek od ladir »

Posielam log

# -------------------------------
# Malwarebytes AdwCleaner 8.0.5.0
# -------------------------------
# Build: 05-25-2020
# Database: 2020-05-19.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-19-2020
# Duration: 00:00:04
# OS: Windows 10 Pro N
# Cleaned: 49
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\GreenTree Applications
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Deleted C:\ProgramData\ytd video downloader
Deleted C:\Users\Ladislav\AppData\Local\DriverToolkit
Deleted C:\Users\Ladislav\AppData\Roaming\DRPSu
Deleted C:\Users\Ladislav\AppData\Roaming\DriverFinder
Deleted C:\Users\Public\Documents\Downloaded Installers
Deleted C:\Windows\Installer\{4D0A0750-B034-4DF8-97DE-26F1212AC2FF}

***** [ Files ] *****

Deleted C:\Users\Public\Desktop\YTD Video Downloader.lnk
Deleted C:\Windows\Reimage.ini
Deleted C:\Windows\System32\drivers\swdumon.sys

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\DriverToolkit
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\drp.su
Deleted HKCU\Software\Norassie
Deleted HKCU\Software\PRODUCTSETUP
Deleted HKCU\Software\Reimage
Deleted HKCU\Software\csastats
Deleted HKCU\Software\drpsu
Deleted HKCU\Software\{DAF8B7E5-449D-4180-8281-10E536E597F2}
Deleted HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Deleted HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Deleted HKLM\SOFTWARE\Classes\Applications\DriverDocSetup.exe
Deleted HKLM\SYSTEM\Setup\FirstBoot\Services\SWDUMon
Deleted HKLM\Software\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Deleted HKLM\Software\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Deleted HKLM\Software\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Deleted HKLM\Software\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Deleted HKLM\Software\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Deleted HKLM\Software\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Deleted HKLM\Software\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1}
Deleted HKLM\Software\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Deleted HKLM\Software\Wow6432Node\SlimWare Utilities Inc
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\NCTAudioCDGrabber2.DLL
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\REI_AxControl.DLL
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{81CA8FCD-1420-4A07-B47D-B30F3DDA79E1}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Deleted HKLM\Software\Wow6432Node\drpsu
Deleted HKLM\Software\Wow6432Node\{DAF8B7E5-449D-4180-8281-10E536E597F2}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5869 octets] - [19/06/2020 12:56:14]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Ladir

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#4 Příspěvek od Rudy »

Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ladir
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 27 črc 2012 16:16
Bydliště: Žilna

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#5 Příspěvek od ladir »

posielam nové logy FRST, Addition

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-06-2020
Ran by Ladislav (administrator) on DOMA (19-06-2020 14:04:12)
Running from C:\Users\Ladislav\Desktop
Loaded Profiles: Ladislav
Platform: Windows 10 Pro N Version 1903 18362.778 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <2>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\Vpn.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(MEDIAN s.r.o.) [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\AudioHUB.Processing.WwwAccessConnectorUrlMonitor.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Ladislav\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12004.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <6>
(Piriform Ltd -> Piriform Ltd) G:\Program Files\CCleaner\CCleaner.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [108136 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\Run: [CCleaner Monitoring] => G:\Program Files\CCleaner\CCleaner.exe [7972528 2017-12-01] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 19\Program32\ZPSTRAY.EXE [576456 2018-04-05] (ZONER software, a.s. -> ZONER software)
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365760 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [100352 2017-12-30] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP c111 Status Monitor: C:\WINDOWS\system32\hpinkstsc111LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\PCL hpz3llhn: C:\WINDOWS\system32\hpz3llhn.dll [36352 2017-12-30] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Installer\chrmstp.exe [2020-06-18] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\77.1.1829.91\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast Cleanup Premium.lnk [2019-11-01]
ShortcutTarget: Avast Cleanup Premium.lnk -> C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe (AVAST Software s.r.o. -> AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2019-05-24]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine\Vpn.exe (AVAST Software s.r.o. -> AVAST Software)
Startup: C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrácia výrobku.lnk [2018-01-18]
ShortcutTarget: Logitech . Registrácia výrobku.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Logitech -> Leader Technologies/Logitech)
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2EFE5E07-E261-4006-B316-5681E5735443} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2F91EF9C-6BFF-417E-AEC5-3975B0ED5BC9} - System32\Tasks\EOSv3 Scheduler onTime => F:\Download\esetonlinescanner_sky.exe [14566496 2020-04-13] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {3DB0D51A-481D-4B0C-8576-6CC988A3B40C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {4234B168-FCBD-4387-BF53-1354585352D2} - System32\Tasks\CCleanerSkipUAC => G:\Program Files\CCleaner\CCleaner.exe [7972528 2017-12-01] (Piriform Ltd -> Piriform Ltd)
Task: {44F2D455-275C-4CD8-8484-6D686A6E428A} - System32\Tasks\EOSv3 Scheduler onLogOn => F:\Download\esetonlinescanner_sky.exe [14566496 2020-04-13] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {553F5D5B-F320-42C1-A90A-C6485146738E} - System32\Tasks\{CFDEEEFB-EFAA-416A-877F-C4677BB58A9F} => C:\Windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {58907814-DD47-4F90-A7B5-781FA39B1A04} - System32\Tasks\Avast Cleanup Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [1659000 2019-07-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {5B06DFF3-96F4-48AB-B412-CBE4C51D1408} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
Task: {6BAF712F-7627-442F-B2A5-B9A280057E5A} - System32\Tasks\Uninstaller_SkipUac_Ladislav => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5889808 2019-10-08] (IObit Information Technology -> IObit)
Task: {6BBB532D-AAD4-4B6D-A953-3BF69A536930} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1722880 2019-06-25] () [File not signed]
Task: {7099B05A-A7B8-479D-8926-F852B93D2365} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {7FB76588-767E-4B92-AFAE-95732C64C38E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files (x86)\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {819CFFDD-68F7-4495-B14A-557B98D75C05} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-19] (Adobe Inc. -> Adobe)
Task: {8FE687B3-609E-4151-AE77-7F75AD383603} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3314272 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
Task: {9265ED66-8541-4217-A0EC-A62550B4E05C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {9540214B-8AC9-45E3-A148-535D9381B350} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
Task: {9686BD51-ECB5-4CA6-970F-B4CD90B72963} - System32\Tasks\Avast TUNEUP Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [1659000 2019-07-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {A465E30A-739C-44D5-B992-3D55DA1A2412} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => C:\Program Files\rempl\remsh.exe
Task: {AA694834-5B9F-4358-A144-77A97B768EF9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AB6119D8-7306-41C4-ACF1-A8FD128C125C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B0B8BD9F-E0B8-4A7C-867C-DDB1C1AE53C8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Task: {B480AE41-30EB-4DCF-BAB1-C51A6097CDE6} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {B777D4E2-8E0A-4623-8A6D-6505C3338C92} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {BE1DB860-765C-4EAA-83B7-D407091524E1} - System32\Tasks\{6BBC0B3F-C8AB-42FE-84CA-62CE54DFC15D} => C:\Windows\system32\pcalua.exe -a C:\Users\Ladislav\Downloads\wmp11-windowsxp-x64-enu.exe -d C:\Users\Ladislav\Downloads
Task: {CA29E826-E256-4C17-8C08-649FE35AFC92} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MpCmdRun.exe [491104 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D4BB60BE-4A67-4461-8C71-84617F720A7B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files (x86)\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {D8344DAF-0F80-4C23-A663-9090130B90F9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Task: {EF129AAE-067D-44E0-AAB1-B877EEDA4054} - System32\Tasks\AudioHUB => C:\Program Files (x86)\Median\WwwAccessConnector\AudioHUB.Processing.WwwAccessConnectorUrlMonitor.exe [274944 2019-10-25] (MEDIAN s.r.o.) [File not signed]
Task: {F14F5345-31F4-4AAF-B5D4-42A2ADC6A067} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\AVAST Software\SecureLine\VpnUpdate.exe [1390472 2019-10-24] (AVAST Software s.r.o. -> AVAST Software)
Task: {F18D052D-4820-4EB1-8A29-253A2FE25403} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-19] (Adobe Inc. -> Adobe)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-3290048940-3179038733-109409546-1001] => Proxy is enabled.
ProxyServer: [S-1-5-21-3290048940-3179038733-109409546-1001] => http=127.0.0.1:8877;https=127.0.0.1:8877
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{a7647244-abd4-4290-9f31-3fa47fdcaa99}: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{ad7ced24-b237-4e5f-a22f-90e1334ab0b0}: [NameServer] 100.120.134.1
ManualProxies: 1http=127.0.0.1:8877;https=127.0.0.1:8877

Internet Explorer:
==================
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2019-06-20] (IObit Information Technology -> IObit)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Office15\OCHelper.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-05-28] (McAfee, LLC -> McAfee, LLC)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: T-Mobile PC Messenger -> {9D940EED-467E-4732-96B3-8BAF0D5AFDFF} -> C:\Program Files (x86)\PC Messenger\PCMessengerBar.dll [2010-06-30] (Slovak Telekom, a.s.) [File not signed]
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-05-28] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - T-Mobile PC Messenger - {9D940EED-467E-4732-96B3-8BAF0D5AFDFF} - C:\Program Files (x86)\PC Messenger\PCMessengerBar.dll [2010-06-30] (Slovak Telekom, a.s.) [File not signed]
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Office15\MSOSB.DLL [2019-06-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File

Edge:
======
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.18.0_neutral__d55gg7py3s0m0 [not found]

FireFox:
========
FF DefaultProfile: v2n1kz7r.default
FF ProfilePath: C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\sb9janv3.default-release [2020-06-19]
FF Homepage: Mozilla\Firefox\Profiles\sb9janv3.default-release -> google.sk
FF ProfilePath: C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default [2020-06-19]
FF DownloadDir: F:\Download
FF Homepage: Mozilla\Firefox\Profiles\v2n1kz7r.default -> hxxps://www.google.com/
FF NetworkProxy: Mozilla\Firefox\Profiles\v2n1kz7r.default -> type", 0
FF Notifications: Mozilla\Firefox\Profiles\v2n1kz7r.default -> hxxps://www.facebook.com; hxxps://www.letenkyzababku.sk; hxxps://panel.marketagent.com
FF Extension: (AdGuard blokovač reklamy) - C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default\Extensions\adguardadblocker@adguard.com.xpi [2020-06-04]
FF Extension: (To Google Translate) - C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2019-11-25]
FF Extension: (YouTube to MP3 Button) - C:\Users\Ladislav\AppData\Roaming\Mozilla\Firefox\Profiles\v2n1kz7r.default\Extensions\{ec791a2e-1b4f-4bcc-a4d0-5e795de557dc}.xpi [2018-11-18]
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-05-28] [UpdateUrl:hxxps://sadownload.mcafee.com/products/SA/Win/xpi/webadvisor/update.json]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-19] (Adobe Inc. -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-19] (Adobe Inc. -> )
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-06-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3290048940-3179038733-109409546-1001: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\Ladislav\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-15] (RocketLife -> RocketLife, LLP)
FF Plugin HKU\S-1-5-21-3290048940-3179038733-109409546-1001: SkypeForBusinessPlugin-16.2 -> C:\Users\Ladislav\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.439\npGatewayNpapi.dll [2019-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3290048940-3179038733-109409546-1001: SkypeForBusinessPlugin64-16.2 -> C:\Users\Ladislav\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.439\npGatewayNpapi-x64.dll [2019-01-23] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default [2020-06-01]
CHR Extension: (Prezentácie) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-01-13]
CHR Extension: (Dokumenty) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-01-13]
CHR Extension: (Disk Google) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-01-13]
CHR Extension: (YouTube) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-13]
CHR Extension: (Tabuľky) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-01-13]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-03-09]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-09]
CHR Extension: (Gmail) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-17]
CHR Extension: (Chrome Media Router) - C:\Users\Ladislav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-09]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6392728 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [348968 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [1052984 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [58048 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 CleanupPSvc; C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe [10287216 2019-07-24] (AVAST Software s.r.o. -> AVAST Software)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4507328 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 EntAppSvc; C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll [521728 2019-03-19] (Microsoft Windows -> Microsoft Corporation) [File not signed]
S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2019-08-23] (IObit Information Technology -> IObit)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [939544 2020-05-28] (McAfee, LLC -> McAfee, LLC)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [6828424 2019-10-24] (AVAST Software s.r.o. -> AVAST Software)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13172752 2020-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-19] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205896 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [235088 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [178768 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [60496 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2020-03-02] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42784 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175208 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [506152 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [109280 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84856 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851608 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [462592 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [216824 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2018-09-05] (AVAST Software s.r.o. -> The OpenVPN Project)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [322256 2020-06-18] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-09-13] (Microsoft Corporation) [File not signed]
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2017-12-30] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2017-12-30] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 dot4usb; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [49056 2017-12-30] (Hewlett-Packard Company -> Microsoft Corporation)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 ISODrive; F:\Download\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44112 2019-07-30] (IObit Information Technology -> IObit)
S3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2019-07-30] (IObit Information Technology -> IObit)
S3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2019-07-30] (IObit Information Technology -> IObit)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2017-12-27] (ASUSTeK Computer Inc. -> )
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2018-12-07] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-06-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [401120 2020-06-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-19] (Microsoft Windows -> Microsoft Corporation)
S3 SWDUMon; \SystemRoot\system32\DRIVERS\SWDUMon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-19 12:54 - 2020-06-19 12:57 - 000000000 ____D C:\AdwCleaner
2020-06-19 12:54 - 2020-06-19 12:54 - 008402608 _____ (Malwarebytes) C:\Users\Ladislav\Desktop\adwcleaner_8.0.5.exe
2020-06-19 12:10 - 2020-06-19 12:13 - 000038182 _____ C:\Users\Ladislav\Desktop\Addition.txt
2020-06-19 12:05 - 2020-06-19 14:06 - 000028750 _____ C:\Users\Ladislav\Desktop\FRST.txt
2020-06-19 12:04 - 2020-06-19 14:05 - 000000000 ____D C:\FRST
2020-06-19 12:02 - 2020-06-19 12:02 - 002289152 _____ (Farbar) C:\Users\Ladislav\Desktop\FRST64.exe
2020-06-19 09:34 - 2020-06-18 09:28 - 000335976 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-06-18 09:28 - 2020-06-18 09:28 - 000216824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2020-06-18 09:28 - 2020-06-18 09:28 - 000175208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2020-06-17 13:43 - 2020-06-17 13:43 - 000537744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-07 09:53 - 2020-06-07 09:53 - 000000000 ____D C:\Program Files\Common Files\logishrd
2020-06-06 11:08 - 2020-06-06 11:08 - 000019875 _____ C:\Users\Ladislav\Desktop\regrutacny-dotaznik._fgd3.odt
2020-06-06 11:08 - 2020-06-06 11:08 - 000000000 ____D C:\Users\Ladislav\OneDrive\Documents\Vlastné šablóny balíka Office
2020-06-03 10:18 - 2020-06-03 10:18 - 001401554 _____ C:\Users\Ladislav\Desktop\Pomocník.mp4
2020-06-03 10:14 - 2020-06-18 12:40 - 000000000 ____D C:\Users\Ladislav\OneDrive\Documents\ViberDownloads
2020-06-01 13:50 - 2020-06-15 10:16 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3290048940-3179038733-109409546-1001
2020-06-01 13:50 - 2020-06-04 08:43 - 000002394 _____ C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-06-01 13:49 - 2020-06-01 13:48 - 035209280 _____ (Microsoft Corporation) C:\Users\Ladislav\Downloads\OneDriveSetup.exe
2020-06-01 13:25 - 2020-06-01 13:29 - 000000000 ____D C:\Users\Ladislav\AppData\Local\TeamViewer
2020-06-01 13:25 - 2020-06-01 13:25 - 000001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer.lnk
2020-06-01 13:25 - 2020-06-01 13:25 - 000001028 _____ C:\Users\Public\Desktop\TeamViewer.lnk
2020-06-01 13:07 - 2020-06-04 11:07 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-05-24 08:50 - 2020-06-19 09:20 - 000004380 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-19 14:07 - 2019-01-10 11:08 - 030869504 _____ C:\WINDOWS\SysWOW64\tempResults.db
2020-06-19 14:04 - 2019-01-09 17:12 - 000000000 ____D C:\AAA
2020-06-19 14:00 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-06-19 13:06 - 2019-11-01 12:31 - 000004286 _____ C:\WINDOWS\system32\Tasks\Avast Cleanup Update
2020-06-19 13:06 - 2019-07-29 13:10 - 000911556 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-19 13:06 - 2019-03-19 06:49 - 000000000 ____D C:\WINDOWS\INF
2020-06-19 13:06 - 2018-10-31 10:52 - 000065732 _____ C:\WINDOWS\system32\perfh01B.dat
2020-06-19 13:06 - 2018-10-31 10:52 - 000017672 _____ C:\WINDOWS\system32\perfc01B.dat
2020-06-19 13:01 - 2018-04-18 17:43 - 000000000 ____D C:\Users\Ladislav\AppData\Local\AVAST Software
2020-06-19 12:59 - 2017-12-27 21:38 - 000000000 ____D C:\Users\Ladislav\AppData\LocalLow\Mozilla
2020-06-19 12:58 - 2019-07-29 13:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-19 12:57 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-06-19 12:49 - 2019-07-29 12:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-06-19 11:35 - 2018-05-16 11:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-06-19 11:32 - 2019-03-19 06:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-06-19 11:31 - 2019-07-29 13:12 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-06-19 11:28 - 2019-10-23 09:34 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2020-06-19 11:28 - 2019-10-23 09:34 - 000002076 _____ C:\Users\Public\Desktop\Avast Premium Security.lnk
2020-06-19 10:47 - 2017-12-27 21:28 - 000000000 ____D C:\Users\Ladislav\AppData\Local\Packages
2020-06-19 09:34 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-06-19 09:20 - 2019-07-29 13:12 - 000004572 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-19 09:19 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-19 09:19 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-06-18 09:35 - 2018-01-13 17:28 - 000002313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-18 09:29 - 2018-01-26 11:35 - 000462592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2020-06-18 09:29 - 2018-01-26 11:35 - 000322256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2020-06-18 09:28 - 2020-04-22 08:39 - 000506152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2020-06-18 09:28 - 2019-01-15 09:57 - 000235088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2020-06-18 09:28 - 2019-01-06 11:19 - 000178768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2020-06-18 09:28 - 2019-01-06 11:19 - 000060496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2020-06-18 09:28 - 2018-10-18 08:38 - 000042784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000851608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000205896 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000109280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2020-06-18 09:28 - 2018-01-26 11:35 - 000084856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2020-06-16 11:38 - 2018-06-30 15:03 - 000000000 ____D C:\Users\Ladislav\AppData\Local\CrashDumps
2020-06-15 10:16 - 2019-10-31 11:02 - 000002218 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-06-15 10:16 - 2019-10-30 17:27 - 000002948 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2020-06-15 10:16 - 2019-10-30 17:27 - 000002568 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2020-06-15 10:16 - 2019-10-30 11:28 - 000002538 _____ C:\WINDOWS\system32\Tasks\AudioHUB
2020-06-15 10:16 - 2019-07-29 13:12 - 000003386 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-06-15 10:16 - 2019-07-29 13:12 - 000003162 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-06-15 10:16 - 2019-07-29 13:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-06-11 11:04 - 2019-07-29 11:10 - 000000000 ____D C:\Users\Ladislav
2020-06-11 11:02 - 2020-04-12 12:07 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite
2020-06-11 11:02 - 2018-01-21 09:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2020-06-11 11:02 - 2018-01-21 09:55 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2020-06-11 11:02 - 2017-12-28 17:33 - 000000000 ____D C:\ProgramData\AVAST Software
2020-06-11 10:56 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-06-11 10:53 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\registration
2020-06-11 10:51 - 2017-12-28 17:33 - 000000000 ____D C:\Program Files\AVAST Software
2020-06-04 11:13 - 2017-12-27 21:38 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-06-04 11:13 - 2017-12-27 21:38 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-06-04 11:07 - 2019-10-30 11:04 - 000000000 ____D C:\Users\Ladislav\AppData\Roaming\TeamViewer
2020-06-04 11:07 - 2018-08-19 21:03 - 000000000 ____D C:\Users\Ladislav\AppData\Local\D3DSCache
2020-06-04 08:43 - 2017-12-27 21:30 - 000000000 ___RD C:\Users\Ladislav\OneDrive
2020-06-03 14:07 - 2019-07-29 13:12 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-06-03 14:03 - 2019-10-31 10:39 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-02 08:27 - 2017-12-28 14:50 - 000000000 ____D C:\Users\Ladislav\AppData\Roaming\vlc
2020-06-01 14:28 - 2019-10-31 10:29 - 000002472 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_Ladislav
2020-06-01 14:19 - 2018-02-24 17:20 - 000007606 _____ C:\Users\Ladislav\AppData\Local\resmon.resmoncfg
2020-06-01 10:33 - 2019-10-31 10:29 - 000000000 ____D C:\ProgramData\ProductData
2020-06-01 10:32 - 2019-10-31 10:28 - 000000000 ____D C:\ProgramData\IObit
2020-05-30 16:02 - 2018-01-27 14:35 - 000000000 ____D C:\ProgramData\Corel
2020-05-30 13:58 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-05-30 12:18 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-05-30 08:29 - 2019-06-20 13:57 - 000000000 ____D C:\Program Files\UNP

==================== Files in the root of some directories ========

2018-10-07 11:29 - 2018-10-07 11:29 - 000791712 _____ (Disc Soft Ltd.) C:\Users\Ladislav\DTLiteInstaller.exe
2018-03-29 14:58 - 2018-03-29 14:58 - 000007680 _____ () C:\Program Files\CompareCLib.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000335924 _____ () C:\Program Files\CookieText.rtf
2018-04-20 13:27 - 2018-04-20 13:27 - 000211858 _____ () C:\Program Files\CookieText_pl.rtf
2018-06-05 15:51 - 2018-06-05 15:51 - 000236189 _____ () C:\Program Files\CookieText_sk.rtf
2018-03-29 14:58 - 2018-03-29 14:58 - 000121856 _____ (EasyNetQ) C:\Program Files\EasyNetQ.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000063488 _____ () C:\Program Files\EasyNetQ.Management.Client.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000320000 _____ () C:\Program Files\Google.ProtocolBuffers.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000057344 _____ () C:\Program Files\Google.ProtocolBuffers.Serialization.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000192512 _____ (ICSharpCode.net) C:\Program Files\ICSharpCode.SharpZipLib.dll
2018-07-13 10:59 - 2018-07-13 10:59 - 000071168 _____ () C:\Program Files\Interop.UIAutomationClient.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000040960 _____ (JetBrains s.r.o.) C:\Program Files\JetBrains.Annotations.dll
2016-08-11 10:20 - 2016-08-11 10:20 - 000006144 _____ () C:\Program Files\libmarker.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000010240 _____ () C:\Program Files\LibMarkerPc.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000007168 _____ () C:\Program Files\LibMarkerPcInterface.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000288768 _____ (The Apache Software Foundation) C:\Program Files\log4net.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000023552 _____ ( ) C:\Program Files\Microsoft.Build.Framework.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000177152 _____ ( ) C:\Program Files\Microsoft.Build.Tasks.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000050688 _____ ( ) C:\Program Files\Microsoft.Build.Utilities.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000009216 _____ ( ) C:\Program Files\Microsoft.VisualC.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000403968 _____ (MongoDB Inc.) C:\Program Files\MongoDB.Bson.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files\Mono.Data.Sqlite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000096768 _____ ( ) C:\Program Files\Mono.Data.Tds.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000185856 _____ ( ) C:\Program Files\Mono.Posix.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000290304 _____ ( ) C:\Program Files\Mono.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000019456 _____ ( ) C:\Program Files\Mono.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files\Mono.WebBrowser.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002596352 _____ ( ) C:\Program Files\mscorlib.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000471040 _____ (Mark Heath) C:\Program Files\NAudio.dll
2015-03-05 20:56 - 2015-03-05 20:56 - 000082944 _____ () C:\Program Files\NAudio.WindowsMediaFormat.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000110592 _____ (Brian Gideon) C:\Program Files\NDde.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000391680 _____ (Newtonsoft) C:\Program Files\Newtonsoft.Json.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000558592 _____ (VMware, Inc.) C:\Program Files\RabbitMQ.Client.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 003383808 _____ () C:\Program Files\SlimDX.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000025600 _____ ( ) C:\Program Files\System.ComponentModel.DataAnnotations.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000122880 _____ ( ) C:\Program Files\System.Configuration.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000022528 _____ ( ) C:\Program Files\System.Configuration.Install.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000291328 _____ ( ) C:\Program Files\System.Core.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000851456 _____ ( ) C:\Program Files\System.Data.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000176128 _____ ( ) C:\Program Files\System.Data.OracleClient.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001035264 _____ (Robert Simpson, et al.) C:\Program Files\System.Data.SQLite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000286720 _____ ( ) C:\Program Files\System.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000043008 _____ ( ) C:\Program Files\System.DirectoryServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001746944 _____ ( ) C:\Program Files\System.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000029184 _____ ( ) C:\Program Files\System.Drawing.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000443392 _____ ( ) C:\Program Files\System.Drawing.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000045568 _____ ( ) C:\Program Files\System.EnterpriseServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000048128 _____ ( ) C:\Program Files\System.Management.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000123392 _____ ( ) C:\Program Files\System.Runtime.Remoting.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000194560 _____ ( ) C:\Program Files\System.Runtime.Serialization.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000037376 _____ ( ) C:\Program Files\System.Runtime.Serialization.Formatters.Soap.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000132096 _____ ( ) C:\Program Files\System.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000044032 _____ ( ) C:\Program Files\System.ServiceProcess.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000030208 _____ ( ) C:\Program Files\System.Transactions.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002266112 _____ ( ) C:\Program Files\System.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000348672 _____ ( ) C:\Program Files\System.Web.Services.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 003023360 _____ ( ) C:\Program Files\System.Windows.Forms.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001269248 _____ ( ) C:\Program Files\System.Xml.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000105984 _____ ( ) C:\Program Files\System.Xml.Linq.dll
2018-04-19 15:34 - 2018-04-19 15:34 - 000299008 _____ () C:\Program Files\tempResults.db
2018-03-29 14:58 - 2018-03-29 14:58 - 000203264 _____ () C:\Program Files\Topshelf.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000009216 _____ () C:\Program Files\Topshelf.Log4Net.dll
2018-07-13 10:59 - 2018-07-13 10:59 - 000186880 _____ () C:\Program Files\UIAComWrapper.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000020480 _____ () C:\Program Files\UrlHistoryLibrary.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000057344 _____ () C:\Program Files\WaveLibMixer.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000007680 _____ () C:\Program Files (x86)\CompareCLib.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000335924 _____ () C:\Program Files (x86)\CookieText.rtf
2018-04-20 13:27 - 2018-04-20 13:27 - 000211858 _____ () C:\Program Files (x86)\CookieText_pl.rtf
2018-06-05 15:51 - 2018-06-05 15:51 - 000236189 _____ () C:\Program Files (x86)\CookieText_sk.rtf
2018-07-24 15:19 - 2018-07-24 15:19 - 000121856 _____ (EasyNetQ) C:\Program Files (x86)\EasyNetQ.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000063488 _____ () C:\Program Files (x86)\EasyNetQ.Management.Client.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000320000 _____ () C:\Program Files (x86)\Google.ProtocolBuffers.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000057344 _____ () C:\Program Files (x86)\Google.ProtocolBuffers.Serialization.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000192512 _____ (ICSharpCode.net) C:\Program Files (x86)\ICSharpCode.SharpZipLib.dll
2019-10-25 13:53 - 2019-10-25 13:53 - 000071168 _____ () C:\Program Files (x86)\Interop.UIAutomationClient.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000040960 _____ (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains.Annotations.dll
2016-08-11 10:20 - 2016-08-11 10:20 - 000006144 _____ () C:\Program Files (x86)\libmarker.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000010240 _____ () C:\Program Files (x86)\LibMarkerPc.dll
2017-02-21 16:18 - 2017-02-21 16:18 - 000007168 _____ () C:\Program Files (x86)\LibMarkerPcInterface.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000288768 _____ (The Apache Software Foundation) C:\Program Files (x86)\log4net.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000023552 _____ ( ) C:\Program Files (x86)\Microsoft.Build.Framework.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000177152 _____ ( ) C:\Program Files (x86)\Microsoft.Build.Tasks.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000050688 _____ ( ) C:\Program Files (x86)\Microsoft.Build.Utilities.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000009216 _____ ( ) C:\Program Files (x86)\Microsoft.VisualC.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000403968 _____ (MongoDB Inc.) C:\Program Files (x86)\MongoDB.Bson.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files (x86)\Mono.Data.Sqlite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000096768 _____ ( ) C:\Program Files (x86)\Mono.Data.Tds.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000185856 _____ ( ) C:\Program Files (x86)\Mono.Posix.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000290304 _____ ( ) C:\Program Files (x86)\Mono.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000019456 _____ ( ) C:\Program Files (x86)\Mono.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000169984 _____ ( ) C:\Program Files (x86)\Mono.WebBrowser.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002596352 _____ ( ) C:\Program Files (x86)\mscorlib.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000471040 _____ (Mark Heath) C:\Program Files (x86)\NAudio.dll
2015-03-05 20:56 - 2015-03-05 20:56 - 000082944 _____ () C:\Program Files (x86)\NAudio.WindowsMediaFormat.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000110592 _____ (Brian Gideon) C:\Program Files (x86)\NDde.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000391680 _____ (Newtonsoft) C:\Program Files (x86)\Newtonsoft.Json.dll
2018-07-24 15:19 - 2018-07-24 15:19 - 000558592 _____ (VMware, Inc.) C:\Program Files (x86)\RabbitMQ.Client.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 003383808 _____ () C:\Program Files (x86)\SlimDX.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000025600 _____ ( ) C:\Program Files (x86)\System.ComponentModel.DataAnnotations.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000122880 _____ ( ) C:\Program Files (x86)\System.Configuration.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000022528 _____ ( ) C:\Program Files (x86)\System.Configuration.Install.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000291328 _____ ( ) C:\Program Files (x86)\System.Core.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000851456 _____ ( ) C:\Program Files (x86)\System.Data.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000176128 _____ ( ) C:\Program Files (x86)\System.Data.OracleClient.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 001035264 _____ (Robert Simpson, et al.) C:\Program Files (x86)\System.Data.SQLite.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000286720 _____ ( ) C:\Program Files (x86)\System.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000043008 _____ ( ) C:\Program Files (x86)\System.DirectoryServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001746944 _____ ( ) C:\Program Files (x86)\System.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000029184 _____ ( ) C:\Program Files (x86)\System.Drawing.Design.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000443392 _____ ( ) C:\Program Files (x86)\System.Drawing.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000045568 _____ ( ) C:\Program Files (x86)\System.EnterpriseServices.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000048128 _____ ( ) C:\Program Files (x86)\System.Management.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000123392 _____ ( ) C:\Program Files (x86)\System.Runtime.Remoting.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000194560 _____ ( ) C:\Program Files (x86)\System.Runtime.Serialization.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000037376 _____ ( ) C:\Program Files (x86)\System.Runtime.Serialization.Formatters.Soap.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000132096 _____ ( ) C:\Program Files (x86)\System.Security.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000044032 _____ ( ) C:\Program Files (x86)\System.ServiceProcess.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000030208 _____ ( ) C:\Program Files (x86)\System.Transactions.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 002266112 _____ ( ) C:\Program Files (x86)\System.Web.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000348672 _____ ( ) C:\Program Files (x86)\System.Web.Services.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 003023360 _____ ( ) C:\Program Files (x86)\System.Windows.Forms.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 001269248 _____ ( ) C:\Program Files (x86)\System.Xml.dll
2018-03-29 14:58 - 2018-03-29 14:58 - 000105984 _____ ( ) C:\Program Files (x86)\System.Xml.Linq.dll
2018-04-19 15:34 - 2018-04-19 15:34 - 000299008 _____ () C:\Program Files (x86)\tempResults.db
2018-07-24 15:20 - 2018-07-24 15:20 - 000203264 _____ () C:\Program Files (x86)\Topshelf.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000009216 _____ () C:\Program Files (x86)\Topshelf.Log4Net.dll
2019-10-25 13:54 - 2019-10-25 13:54 - 000186880 _____ () C:\Program Files (x86)\UIAComWrapper.dll
2019-10-30 10:03 - 2019-10-30 10:03 - 000065320 _____ () C:\Program Files (x86)\Uninstall.exe
2018-07-24 15:20 - 2018-07-24 15:20 - 000020480 _____ () C:\Program Files (x86)\UrlHistoryLibrary.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 000057344 _____ () C:\Program Files (x86)\WaveLibMixer.dll
2018-11-18 19:17 - 2019-02-02 12:21 - 000033191 _____ () C:\Users\Ladislav\AppData\Roaming\downloads.json
2017-12-31 11:08 - 2017-12-31 11:08 - 000000092 _____ () C:\Users\Ladislav\AppData\Roaming\PDFShaper.ini
2017-12-28 19:37 - 2017-12-28 19:37 - 000000600 _____ () C:\Users\Ladislav\AppData\Roaming\winscp.rnd
2017-12-31 11:09 - 2017-12-31 11:09 - 000000024 _____ () C:\Users\Ladislav\AppData\Local\pdfshaper.ini
2018-02-24 17:20 - 2020-06-01 14:19 - 000007606 _____ () C:\Users\Ladislav\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-06-2020
Ran by Ladislav (19-06-2020 14:08:36)
Running from C:\Users\Ladislav\Desktop
Windows 10 Pro N Version 1903 18362.778 (X64) (2019-07-29 11:13:07)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3290048940-3179038733-109409546-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3290048940-3179038733-109409546-503 - Limited - Disabled)
Guest (S-1-5-21-3290048940-3179038733-109409546-501 - Limited - Disabled)
Ladislav (S-1-5-21-3290048940-3179038733-109409546-1001 - Administrator - Enabled) => C:\Users\Ladislav
WDAGUtilityAccount (S-1-5-21-3290048940-3179038733-109409546-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: ESET Security (Disabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: ESET Firewall (Disabled) {B066057A-E576-007C-D591-56C163D3B33B}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 18.06 (HKLM-x32\...\{23170F69-40C1-2701-1806-000001000000}) (Version: 18.06.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Apowersoft Video Stahovač V6.4.8.5 (HKLM-x32\...\{b3336f66-e079-4ff6-abdb-51e2fab781d5}_is1) (Version: 6.4.8.5 - APOWERSOFT LIMITED)
aTube Catcher version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
AudioHUBWwwAccessConnector 1.0.0.2202 (HKLM-x32\...\AudioHUBWwwAccessConnector) (Version: 1.0.0.2202 - MEDIAN s.r.o.)
Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 19.1.7734.0 - AVAST Software)
Avast Driver Updater (HKLM-x32\...\{8804140C-3144-4075-9526-1C662E26CA17}) (Version: 2.5.5 - AVAST Software) Hidden
Avast Premium Security (HKLM-x32\...\Avast Antivirus) (Version: 20.4.2410 - Avast Software)
Avast SecureLine (HKLM\...\{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 5.2.429 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.5.245.0 - AVAST Software) Hidden
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Corel Graphics - Windows Shell Extension (HKLM\...\_{5D262585-5C19-4279-B1BC-C0D242E6AA3E}) (Version: 20.1.0.708 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{5D262585-5C19-4279-B1BC-C0D242E6AA3E}) (Version: 20.1.708 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{9D4064B2-A6B6-42E6-8695-7C9B3D69954E}) (Version: 20.1.708 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 64 Bit (HKLM\...\{4DD94E1E-998D-414B-953C-9BAC44E4CCDD}) (Version: 17.1.572 - Corel Corporation) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.12.0.1184 - Disc Soft Ltd)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FastStone Image Viewer 6.4 (HKLM-x32\...\FastStone Image Viewer) (Version: 6.4 - FastStone Soft)
Free Audio Editor 2017 v9.4.0 (HKLM-x32\...\Free Audio Editor 2017_is1) (Version: - Copyright(C) 2005-2017 FAEMedia, Inc.)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.106 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
HP Deskjet 1510 series Basic Device Software (HKLM\...\{D17E60E8-478A-4D4A-8147-21D481B5CA55}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Image Zone Express (HKLM-x32\...\{759524D5-08C9-4E88-8EB3-8D6ECB226C52}) (Version: 1.5.3.36 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
IObit Uninstaller 9 (HKLM-x32\...\IObitUninstall) (Version: 9.1.0.8 - IObit)
K-Lite Mega Codec Pack 15.0.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.0.0 - KLCP)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lamer (HKLM-x32\...\Lamer) (Version: - )
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.102 - McAfee, LLC)
Microsoft Office 2013 Professional Plus (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\OneDriveSetup.exe) (Version: 20.064.0329.0008 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{5a7dc0ad-cdb2-43b5-8b82-f81065fe6092}) (Version: 15.0.26717 - Microsoft Corporation)
Mozilla Firefox 77.0.1 (x64 sk) (HKLM\...\Mozilla Firefox 77.0.1 (x64 sk)) (Version: 77.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 64.0 - Mozilla)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
NirSoft Wireless Network Watcher (HKLM-x32\...\NirSoft Wireless Network Watcher) (Version: - )
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (HKLM\...\{E237254B-36A1-3D27-815E-B37C13BE0796}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (HKLM-x32\...\{03077B58-6ACF-32CA-B42A-EAA458C295A1}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
PC Messenger (HKLM-x32\...\PC Messenger) (Version: - )
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
Skype Meetings App (HKLM-x32\...\{38419113-95E3-48BB-B00E-113E3F08D87C}) (Version: 16.2.0.439 - Microsoft Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.2.2756 - TeamViewer)
UltraISO Premium V9.66 (HKLM-x32\...\UltraISO_is1) (Version: - )
Update for Skype for Business 2015 (KB4484097) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{1EB78C78-BFAF-4052-BD35-9A0F99B941CC}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4484097) 64-Bit Edition (HKLM\...\{90150000-012B-041B-1000-0000000FF1CE}_Office15.PROPLUSR_{1EB78C78-BFAF-4052-BD35-9A0F99B941CC}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4484097) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{1EB78C78-BFAF-4052-BD35-9A0F99B941CC}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM-x32\...\{7C070E60-8769-4763-BBD8-7537A28A60D4}) (Version: 1.10.0.0 - Microsoft Corporation) Hidden
Viber (HKLM-x32\...\{0B863FF2-B8B4-4F51-873E-9ACBE3B0F8DB}) (Version: 12.8.1.20 - Viber Media S.a.r.l) Hidden
Viber (HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\{80e9c69f-df63-4fca-bff4-bd9f6c23ec8d}) (Version: 12.8.1.20 - 2010-2020 Viber Media S.a.r.l)
Videoder 1.0.9 (HKLM-x32\...\808fc302-3d01-59ce-8094-e0443a55877e) (Version: 1.0.9 - GlennioTech)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.10 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{F92064F6-BDE8-46FC-A19F-4E12D311BE3A}) (Version: 1.0.30 - Microsoft Corporation)
WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
WinRAR 5.50 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Zoner Photo Studio X (HKLM\...\ZonerPhotoStudioX_SK_is1) (Version: 19.1804.2.61 - ZONER software)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (HKLM\...\{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (HKLM-x32\...\{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}) (Version: 11.0.51108 - Microsoft Corporation) Hidden

Packages:
=========
Adblock Plus -> C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.19.0_neutral__d55gg7py3s0m0 [2020-06-11] (eyeo GmbH)
Doplnok pre Fotografie -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Studios) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
MSN Počasie -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-06-11] (Microsoft Corporation) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3290048940-3179038733-109409546-1001_Classes\CLSID\{3E3AD4BD-346A-460A-80E8-90699B75C00B}\InprocServer32 -> C:\Users\Ladislav\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.439\GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2019-07-30] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => F:\Download\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2019-07-30] (IObit Information Technology -> IObit)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => F:\Download\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-06-18] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2019-07-30] (IObit Information Technology -> IObit)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => F:\Download\UltraISO\isoshl64.dll [2015-10-08] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.i420] => C:\WINDOWS\system32\lvcod64.dll [475672 2018-01-19] (Logitech Inc -> Logitech Inc.)
HKLM\...\Drivers32: [VIDC.X264] => C:\WINDOWS\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\WINDOWS\system32\lagarith.dll [148992 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\WINDOWS\system32\xvidvfw.dll [311296 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\WINDOWS\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [416280 2018-01-19] (Logitech Inc -> Logitech Inc.)
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284672 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [File not signed]
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-11-01 12:30 - 2016-09-12 16:53 - 048936448 _____ () [File not signed] C:\Program Files (x86)\AVAST Software\Avast Cleanup\libcef.dll
2020-06-19 13:01 - 2020-06-19 13:41 - 000104448 _____ () [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\AudioMarkerWin.dll
2020-06-19 13:01 - 2020-06-19 13:41 - 002391615 _____ () [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\libfftw3f-3.dll
2018-07-24 15:20 - 2018-07-24 15:20 - 001035264 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files (x86)\Median\WwwAccessConnector\System.Data.SQLite.dll
2019-02-13 17:02 - 2018-09-05 22:32 - 002095104 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\AVAST Software\SecureLine\libcrypto-1_1.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-07-10 13:02 - 2019-01-04 10:25 - 000000826 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %C_EM64T_REDIST11%bin\Intel64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ladislav\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1 - 195.146.128.62
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "LWS"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\StartupFolder: => "Logitech . Registrácia výrobku.lnk"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
HKU\S-1-5-21-3290048940-3179038733-109409546-1001\...\StartupApproved\Run: => "Flvto Youtube Downloader"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

01-06-2020 08:48:30 Scheduled Checkpoint
09-06-2020 11:06:23 Scheduled Checkpoint
11-06-2020 10:46:29 Operácia obnovovania
19-06-2020 12:34:31 Scheduled Checkpoint

==================== Faulty Device Manager Devices ============

Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (06/19/2020 02:06:22 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7552,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 01:45:42 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (8208,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 01:06:14 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4056,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 12:58:45 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "F:\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_e6c6b761130d4fb8.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_2e73ee38278978be.manifest.

Error: (06/19/2020 12:23:33 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (2600,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 12:02:38 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "F:\Audacity\audacity.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_e6c6b761130d4fb8.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.778_none_2e73ee38278978be.manifest.

Error: (06/19/2020 11:48:47 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6024,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/19/2020 11:38:46 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SystemSettings.exe version 10.0.18362.628 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 18a0

Start Time: 01d6461c1eeb5eea

Termination Time: 4294967295

Application Path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe

Report Id: cb45632d-3416-483b-9462-b794bb4d7b46

Faulting package full name: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy

Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel

Hang type: Cross-thread


System errors:
=============
Error: (06/19/2020 01:41:35 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby CDPUserSvc_25eb0 bol dosiahnutý časový limit (30000 ms).

Error: (06/19/2020 01:40:48 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby CDPUserSvc_25eb0 bol dosiahnutý časový limit (30000 ms).

Error: (06/19/2020 01:40:18 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby BFE bol dosiahnutý časový limit (30000 ms).

Error: (06/19/2020 01:07:56 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Počas čakania na odpoveď transakcie od služby CDPUserSvc_25eb0 bol dosiahnutý časový limit (30000 ms).

Error: (06/19/2020 12:57:41 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Avast Antivirus sa po prijatí ovládacieho príkazu pred vypnutím nevypla správne.

Error: (06/19/2020 12:57:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby CredentialEnrollmentManagerUserSvc_25910 zlyhalo kvôli nasledujúcej chybe:
The service did not respond to the start or control request in a timely fashion.

Error: (06/19/2020 12:57:18 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Počas čakania na pripojenie služby CredentialEnrollmentManagerUserSvc_25910 bol dosiahnutý časový limit (30000 ms).

Error: (06/19/2020 12:57:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba CredentialEnrollmentManagerUserSvc_25910 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.


Windows Defender:
===================================
Date: 2019-10-30 17:21:25.278
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {DF7E3EE8-F712-4ACF-8A7E-406FD63E7B2F}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-25 10:39:50.833
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {819476DB-D247-4EF0-9BA5-A462A7327E58}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-25 10:19:47.998
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {AC92A06D-653B-4416-A73F-DE38574F4E19}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-24 22:01:50.289
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {743837B6-6BE5-4231-A61E-CBAC6B606B0B}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-10-24 18:01:04.684
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {10BCC3E8-4480-4449-AEE6-39690F46E854}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2020-06-19 13:53:46.231
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.317.1689.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17100.2
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2020-06-19 11:46:16.882
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.317.1689.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.17100.2
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2020-06-19 11:33:18.691
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.305.986.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16500.1
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2020-06-11 11:08:15.406
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.305.986.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16500.1
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

Date: 2019-10-30 18:35:40.281
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.305.986.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16500.1
Error code: 0x800706d9
Error description: There are no more endpoints available from the endpoint mapper.

CodeIntegrity:
===================================

Date: 2020-06-19 13:00:37.073
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-06-19 13:00:28.120
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-06-19 13:00:28.068
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-06-19 13:00:27.955
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-06-19 13:00:04.986
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 13:00:04.793
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 13:00:04.732
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-19 13:00:04.665
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 0902 07/27/2011
Motherboard: ASUSTeK Computer INC. P5G41T-M LX
Processor: Intel(R) Celeron(R) CPU E3500 @ 2.70GHz
Percentage of memory in use: 70%
Total physical RAM: 4061.11 MB
Available physical RAM: 1181.85 MB
Total Virtual: 4765.11 MB
Available Virtual: 1337.67 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.35 GB) (Free:61.98 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive e: () (Removable) (Total:1.91 GB) (Free:0.81 GB) FAT
Drive f: () (Fixed) (Total:149.05 GB) (Free:1.03 GB) NTFS
Drive g: (WinXPdisk) (Fixed) (Total:298.08 GB) (Free:159.83 GB) NTFS

\\?\Volume{7e7ebd41-0000-0000-0000-20d61b000000}\ () (Fixed) (Total:0.45 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 7E7EBD41)
Partition 1: (Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=460 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: A4A3A4A3)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (Size: 298.1 GB) (Disk ID: E327E327)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (Size: 1.9 GB) (Disk ID: 6F20736B)
No partition Table on disk 3.
Disk 3 is a removable device.

==================== End of Addition.txt =======================
Ladir

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {553F5D5B-F320-42C1-A90A-C6485146738E} - System32\Tasks\{CFDEEEFB-EFAA-416A-877F-C4677BB58A9F} => C:\Windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {B0B8BD9F-E0B8-4A7C-867C-DDB1C1AE53C8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Task: {D8344DAF-0F80-4C23-A663-9090130B90F9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - T-Mobile PC Messenger - {9D940EED-467E-4732-96B3-8BAF0D5AFDFF} - C:\Program Files (x86)\PC Messenger\PCMessengerBar.dll [2010-06-30] (Slovak Telekom, a.s.) [File not signed]
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ladir
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 27 črc 2012 16:16
Bydliště: Žilna

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#7 Příspěvek od ladir »

Fix result of Farbar Recovery Scan Tool (x64) Version: 06-06-2020
Ran by Ladislav (19-06-2020 18:00:42) Run:1
Running from C:\Users\Ladislav\Desktop
Loaded Profiles: Ladislav
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {553F5D5B-F320-42C1-A90A-C6485146738E} - System32\Tasks\{CFDEEEFB-EFAA-416A-877F-C4677BB58A9F} => C:\Windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {B0B8BD9F-E0B8-4A7C-867C-DDB1C1AE53C8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Task: {D8344DAF-0F80-4C23-A663-9090130B90F9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-01-13] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - T-Mobile PC Messenger - {9D940EED-467E-4732-96B3-8BAF0D5AFDFF} - C:\Program Files (x86)\PC Messenger\PCMessengerBar.dll [2010-06-30] (Slovak Telekom, a.s.) [File not signed]
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{553F5D5B-F320-42C1-A90A-C6485146738E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{553F5D5B-F320-42C1-A90A-C6485146738E}" => removed successfully
C:\WINDOWS\System32\Tasks\{CFDEEEFB-EFAA-416A-877F-C4677BB58A9F} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CFDEEEFB-EFAA-416A-877F-C4677BB58A9F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B0B8BD9F-E0B8-4A7C-867C-DDB1C1AE53C8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0B8BD9F-E0B8-4A7C-867C-DDB1C1AE53C8}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D8344DAF-0F80-4C23-A663-9090130B90F9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8344DAF-0F80-4C23-A663-9090130B90F9}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{9D940EED-467E-4732-96B3-8BAF0D5AFDFF}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{9D940EED-467E-4732-96B3-8BAF0D5AFDFF} => removed successfully
HKLM\Software\Classes\PROTOCOLS\Handler\sacore => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 12869632 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 28530027 B
Java, Flash, Steam htmlcache => 1144 B
Windows/system/drivers => 23877950 B
Edge => 204601 B
Chrome => 440477 B
Firefox => 1173743826 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 43480 B
NetworkService => 116048690 B
Ladislav => 163016992 B

RecycleBin => 17221101 B
EmptyTemp: => 1.4 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 18:02:29 ====
Ladir

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ladir
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 27 črc 2012 16:16
Bydliště: Žilna

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#9 Příspěvek od ladir »

PC sa zrýchlil. Ale s prihlásením Onedrive do konta microsoft sa neudialo nič. Stále sa nechce prihlásiť.
Hlási chybu 0x 8004de40.
hlasenie chyby.jpg
hlasenie chyby.jpg (66.53 KiB) Zobrazeno 1843 x
Ladir

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#10 Příspěvek od Rudy »

OK. To znamená, že problém nezpůsobuje virus. Koukněte sem: https://translate.google.com/translate? ... rev=search , je tam i odkaz na video s řešením.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ladir
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 27 črc 2012 16:16
Bydliště: Žilna

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#11 Příspěvek od ladir »

A bol tam nejaký vírus, čo spomaloval PC?
Ladir

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#12 Příspěvek od Rudy »

Jen zbytky a zbytečnosti.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

ladir
Návštěvník
Návštěvník
Příspěvky: 86
Registrován: 27 črc 2012 16:16
Bydliště: Žilna

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#13 Příspěvek od ladir »

Tak pekne ďakujem. Už som podľa toho odkazu opravil aj to prihlásenie onedrive.
Ladir

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118251
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Presím o kontrolu PC, je nejaký spomalený, nedá sa prihlásiť onedrive do konta microsoft

#14 Příspěvek od Rudy »

Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno