Prosím o kontrolu. Děkuji.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-06-2020
Ran by Milan (administrator) on HP (Hewlett-Packard 810-000ec) (27-06-2020 23:52:00)
Running from C:\Users\Milan\Downloads
Loaded Profiles: Milan
Platform: Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\ActionCenter.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabMakePortable.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabReports.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcon.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcr.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\btwdins.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <21>
(Google LLC -> Google) C:\Users\Milan\AppData\Local\Google\Chrome\User Data\SwReporter\83.238.200\software_reporter_tool.exe <4>
(GuinpinSoft inc) [File not signed] [File is in use] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) [File not signed] [File is in use] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Josh Mayfield -> UltimateOutsider) C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe
(Konstantin Polyakov IP -> ) C:\Program Files (x86)\Autorun Organizer\Reg64Call.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Mixbyte Inc -> Ellora Assets Corp.) E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Mixbyte Inc -> Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Nenad Hrg SoftwareOK) [File not signed] [File is in use] C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(OOO AMA -> Kerish Products) C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synology Inc. -> ) [File not signed] [File is in use] C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Synology Inc. -> ) C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
(Synology Inc. -> Synology Inc.) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Vivaldi Technologies AS -> Vivaldi Technologies AS) E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe [4559944 2016-01-24] (Josh Mayfield -> UltimateOutsider)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [549032 2020-06-23] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2019-01-30] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2020-04-27] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [DesktopOK] => C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe [233472 2016-10-13] (Nenad Hrg SoftwareOK) [File not signed] [File is in use]
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Data Replicator 3] => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Vivaldi Update Notifier] => E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe [1859656 2020-06-24] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG7100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBR.DLL [30208 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG7100 series: C:\WINDOWS\system32\CNMLMBR.DLL [391168 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\ASUS\Bluetooth Software\\BtwCP.dll [2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-08-12]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ASUS\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
BootExecute: autocheck autochk * sdnclean64.exe
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00A5A0B1-7556-4B18-B57E-038D8295F470} - System32\Tasks\Paragon Job (Back up partitions or disks to virtual containers) - {46beb899-e93a-43e0-491f-d9ff47346787} => C:\Program Files\Paragon Software\Hard Disk Manager 25 Anniversary LE\program\hdmengine_scriptsapp.exe [3537304 2019-11-22] (Paragon Software GmbH -> Paragon Software)
Task: {010157E6-86DD-4E1E-918F-B76D3128A5EF} - System32\Tasks\Kerish Doctor => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe [4904568 2020-06-18] (OOO AMA -> Kerish Products)
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {085B11DD-C1FF-4C59-988E-A3C0242FD180} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {0DA1BF58-DF15-468B-A92B-6AFF87379E22} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {12B9E8E0-063D-4A4D-80A6-2EE1AA903C9D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {17FD829C-813D-4D47-9688-332A6A5708B2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-téka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {2F5317B0-40DA-4281-9DB9-5D225BC8DC55} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1448832 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {40159E94-CCBF-466B-9FC0-8E3DEF3B9641} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4E7A0467-C9EE-40F1-A464-2B9134922C68} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {50701EEC-28E8-4637-93A1-ACEA149D8127} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {5E3E78EF-2FAF-458B-A22C-0AAEBCCEE74B} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag on Milan logon => C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe [3452280 2020-06-23] (Auslogics Labs Pty Ltd -> Auslogics)
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {67991882-52F0-4C8B-965E-31052A068347} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {6B519139-51D6-44D1-B396-483F551B4663} - System32\Tasks\Speedfan => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> )
Task: {6C24ED94-C837-4CE9-8ECF-7C48CF522415} - System32\Tasks\Synology Data Replicator 3-HP-Milan => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {77A64781-67AB-4B9F-97C1-829AAB06DD81} - System32\Tasks\Opera scheduled Autoupdate 1593188087 => C:\Program Files (x86)\launcher.exe [1509400 2020-06-22] (Opera Software AS -> Opera Software) <==== ATTENTION
Task: {7B7B2178-7A07-45BC-B2C1-819DAA6C17E4} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {930B96B9-27A0-4403-9751-03D727568671} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {9B80A8C1-CE2A-4B69-8BB0-7E8AFFDAC3FE} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2020-03-27] (Bitdefender SRL -> Bitdefender)
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A66240ED-7854-408B-BE4C-421A219F6205} - System32\Tasks\Autorun Organizer => C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe [10810816 2018-10-26] (Konstantin Polyakov IP -> Chemtable Software)
Task: {BE479DF2-7A43-4673-9831-1A968F6C2D71} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1A80A88-FAD6-4409-AE0E-BEA26ED8DDF2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C3EC7682-92EC-444E-80D8-C598376C1D42} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [3203480 2016-02-26] (Symantec Corporation -> Symantec Corporation)
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {D92C0A54-9000-44C5-8046-6C401EC688BB} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {E31E94EA-8ADB-42A9-BF83-812F81DCD152} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_pepper.exe [1454648 2020-06-09] (Adobe Inc. -> Adobe)
Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
Task: {FA8A9E9A-8A1B-4CA4-99AB-E7953BC61EBD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 109.72.0.1 109.72.2.30
Tcpip\..\Interfaces\{E2641B9C-4257-42E8-B3E4-FA4A8C923E89}: [DhcpNameServer] 109.72.0.1 109.72.2.30
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: kje70kdo.default
FF DefaultProfile: daneqr12.default-1581870394713
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default [2020-06-27]
FF user.js: detected! => C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js [2015-03-10]
FF DownloadDir: C:\Users\Milan\Desktop
FF Homepage: Mozilla\Firefox\Profiles\kje70kdo.default -> about:blank
FF Session Restore: Mozilla\Firefox\Profiles\kje70kdo.default -> is enabled.
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2020-06-13]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2020-06-13]
FF Extension: (Restart) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\Restart@schuzak.jp.xpi [2017-03-13] [Legacy]
FF Extension: (Session Sync) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\session-sync@gabrielivanica.com.xpi [2020-03-25]
FF Extension: (Youtube Watchmarker) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\yourect@coderect.com.xpi [2020-04-27]
FF Extension: (Linkification) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}.xpi [2015-07-26] [Legacy] [not signed]
FF Extension: (Video DownloadHelper) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-30]
FF Extension: (No Name) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-04-01]
FF Extension: (YouTube Flash Video Player) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi [2018-02-11]
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 [2020-06-27]
FF Homepage: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> about:home
FF Session Restore: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> is enabled.
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-05-04] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-05-17] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2019-02-26] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> E:\Program Files (x86)\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.) [File not signed] [File is in use]
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) [File not signed] [File is in use]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google Inc -> Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2016-02-29] (Nero AG -> Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2013-03-04] (HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. -> )
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-10-20] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2019-11-03] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-10-20] <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2019-11-03] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default [2020-06-27]
CHR Notifications: Default -> hxxps://keep.google.com; hxxps://www.facebook.com
CHR StartupUrls: Default -> "hxxp://www.auto.cz/"
CHR Extension: (ProxFlow) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2020-06-11]
CHR Extension: (YouTube WATCHED. Classic View) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aendhplcpcfjlebhcjfiapmoaiekpkba [2020-01-12]
CHR Extension: (Dokumenty) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-21]
CHR Extension: (Disk Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-08]
CHR Extension: (uBlock Origin) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-05-30]
CHR Extension: (Vyhledávání Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2020-05-17]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2018-07-27]
CHR Extension: (Session Buddy) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2020-05-10]
CHR Extension: (Adobe Acrobat) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-06-23]
CHR Extension: (Tabs Outliner) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl [2020-04-30]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2020-05-10]
CHR Extension: (Bitdefender Wallet) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2019-12-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-30]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-06-14]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-05-30]
CHR Extension: (Flash® Player for YouTube™) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lajdkhdcndkniopfefocbgbkofflagpm [2017-07-23]
CHR Extension: (Linkclump) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2020-06-23]
CHR Extension: (Clickable Links) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2016-05-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-18]
CHR Extension: (Gmail) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-24]
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\System Profile [2017-04-09]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
Opera:
=======
OPR StartupUrls: "hxxps://www.idnes.cz/","hxxps://www.seznam.cz/" ... vodajstvi/"
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-10-07] (Bitdefender SRL -> Bitdefender)
R2 btwdins; C:\Program Files\ASUS\Bluetooth Software\btwdins.exe [960368 2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe [8704 2019-09-29] (GuinpinSoft inc) [File not signed] [File is in use]
R2 Chemtable Startup Checking; C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe [9924368 2018-09-03] (Konstantin Polyakov IP -> Chemtable Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11096432 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [120392 2020-03-27] (Bitdefender SRL -> Bitdefender)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2020-02-25] (Mixbyte Inc -> Freemake)
R2 FreemakeVideoCapture; E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [17792 2019-05-17] (Mixbyte Inc -> Ellora Assets Corp.)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] [File is in use]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129336 2013-01-31] (Intel Corporation -> Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21256 2018-04-20] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2019-12-04] (Malwarebytes Inc -> Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [463856 2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1352120 2020-03-27] (Bitdefender SRL -> Bitdefender)
U3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-27] (Elaborate Bytes) [File not signed] [File is in use]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
R2 SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [384072 2013-10-09] (Synology Inc. -> )
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [170328 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2014-02-25] (Synology Inc. -> ) [File not signed] [File is in use]
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; "E:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE" /auditservice [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Co., Ltd. -> AnvSoft Inc.)
R0 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2106424 2020-06-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [757240 2020-06-23] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-02-14] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96616 2020-05-26] (Bitdefender SRL -> BitDefender)
R2 ei2c; C:\windows\system32\drivers\ei2c.sys [20784 2014-05-01] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-29] (Elaborate Bytes AG) [File not signed] [File is in use]
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-02-02] (Malwarebytes Corporation -> Malwarebytes)
R0 EUDSKCP; C:\WINDOWS\System32\drivers\EuDskCp.sys [74184 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R1 EUEUMDK; C:\WINDOWS\system32\drivers\EuEumDk.sys [23496 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [453344 2020-06-23] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2019-06-03] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\System32\DRIVERS\ignis.sys [196392 2019-09-16] (Bitdefender SRL -> Bitdefender)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-04-07] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [44448 2014-10-12] (EATON POWER QUALITY SAS -> hxxp://libusb-win32.sourceforge.net)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-03-15] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [226448 2020-06-27] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73584 2020-06-27] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-27] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [119960 2020-06-23] (Malwarebytes Inc -> Malwarebytes)
S3 MDA_NTDRV; C:\WINDOWS\system32\MDA_NTDRV.sys [21208 2013-02-25] (北京铠信神州科技有限责任公司 -> )
R2 mi2c; C:\windows\system32\drivers\mi2c.sys [20784 2016-07-27] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [551936 2014-01-05] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [638368 2020-05-04] (Bitdefender SRL -> Bitdefender)
R1 UimBus; C:\WINDOWS\System32\drivers\uimbus.sys [109504 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
R1 Uim_DEVIM; C:\WINDOWS\System32\drivers\uimdevim.sys [46016 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation -> Intel Corporation)
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-27 23:52 - 2020-06-27 23:52 - 000046201 _____ C:\Users\Milan\Downloads\FRST.txt
2020-06-27 23:51 - 2020-06-27 23:52 - 000000000 ____D C:\FRST
2020-06-27 23:51 - 2020-06-27 23:51 - 002291200 _____ (Farbar) C:\Users\Milan\Downloads\FRST64.exe
2020-06-27 23:49 - 2020-06-27 23:49 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-06-27 23:49 - 2020-06-27 23:49 - 000073584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-06-27 23:39 - 2020-06-27 23:49 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\IGDump
2020-06-27 23:39 - 2020-06-27 23:39 - 000226448 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2020-06-27 23:38 - 2020-06-27 23:38 - 000680512 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-27 19:05 - 2020-06-27 19:05 - 064618056 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.1.1929.45.x64.exe
2020-06-27 09:43 - 2020-06-27 09:43 - 000000000 ___HD C:\Users\Milan\.opera
2020-06-26 22:23 - 2020-06-26 22:23 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2020-06-26 22:22 - 2020-06-26 22:22 - 013547840 _____ (GuinpinSoft inc) C:\Users\Milan\Downloads\Setup_MakeMKV_v1.15.1.exe
2020-06-26 20:51 - 2020-06-26 20:51 - 000000000 ___HD C:\Users\Milan\Downloads\.opera
2020-06-26 20:13 - 2020-06-26 20:13 - 000000000 ___HD C:\Program Files (x86)\.opera
2020-06-26 18:14 - 2020-06-26 18:14 - 002294440 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup (1).exe
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ C:\Program Files (x86)\installation_status.json
2020-06-26 18:14 - 2020-06-26 18:14 - 000003980 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1593188087
2020-06-26 18:14 - 2020-06-26 18:14 - 000001083 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\Assets
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\69.0.3686.36
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ C:\Program Files (x86)\Resources.pri
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\opera autoupdate
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Program Files (x86)\opera autoupdate
2020-06-24 22:36 - 2020-06-24 22:39 - 000214102 _____ C:\Users\Milan\Downloads\Optimalizace trati, SŽ.pdf
2020-06-24 21:12 - 2020-06-24 21:12 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-06-24 18:22 - 2020-06-24 18:22 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2020-06-24 18:21 - 2020-06-24 18:21 - 041626504 _____ (DiskInternals Research) C:\Users\Milan\Downloads\Partition_Recovery.exe
2020-06-24 11:02 - 2020-06-24 11:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-06-24 11:01 - 2020-06-24 11:02 - 041824168 _____ C:\Users\Milan\Downloads\vlc-3.0.11-win64.exe
2020-06-24 10:34 - 2020-06-24 10:35 - 207277528 _____ (Logitech Inc.) C:\Users\Milan\Downloads\Options_8.20.329.exe
2020-06-24 10:33 - 2020-06-24 10:32 - 000114344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-06-24 10:31 - 2020-06-24 10:31 - 002066568 _____ (Oracle Corporation) C:\Users\Milan\Downloads\chromeinstall-8u251.exe
2020-06-23 22:45 - 2020-06-23 22:45 - 000001716 _____ C:\Users\Milan\Desktop\Games – zástupce.lnk
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\Program Files (x86)\Auslogics
2020-06-23 22:21 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\Downloads\opera autoupdate
2020-06-23 22:16 - 2020-06-23 22:16 - 000119960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-06-23 20:41 - 2020-06-23 20:41 - 009936128 _____ (Resplendence Software Projects Sp. ) C:\Users\Milan\Downloads\whocrashedSetup.exe
2020-06-23 20:41 - 2020-06-23 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2020-06-23 20:39 - 2020-06-23 20:39 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TVDownloader
2020-06-23 20:32 - 2020-06-23 20:32 - 008612792 _____ (ALTAP) C:\Users\Milan\Downloads\as40x64.exe
2020-06-23 20:28 - 2020-06-27 23:45 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-26 18:14 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json.backup
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ C:\Program Files (x86)\server_tracking_data
2020-06-23 20:28 - 2020-06-26 18:13 - 000000000 ____D C:\Program Files (x86)\assistant
2020-06-23 20:27 - 2020-06-26 18:13 - 000000000 ____D C:\Program Files (x86)\68.0.3618.173
2020-06-23 20:27 - 2020-06-23 20:27 - 002464864 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup.exe
2020-06-23 19:57 - 2020-06-27 20:00 - 000000304 _____ C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job
2020-06-23 19:57 - 2020-06-23 19:57 - 000002856 _____ C:\WINDOWS\system32\Tasks\Synology Data Replicator 3-HP-Milan
2020-06-23 18:16 - 2020-06-23 18:16 - 000000000 ___HD C:\Users\Milan\Desktop\DEATH DEALER (CAN)
2020-06-23 17:46 - 2020-06-23 17:46 - 000000787 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:45 - 2020-06-23 17:45 - 003419088 _____ C:\Users\Milan\Downloads\winrar-x64-590cz.exe
2020-06-23 17:42 - 2020-06-23 17:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoReDo
2020-06-23 17:41 - 2020-06-23 17:41 - 043786040 _____ (DRD Systems, Inc. ) C:\Users\Milan\Downloads\VRDTVSH264-5-4-84-771a.exe
2020-06-23 17:28 - 2020-06-23 17:28 - 000000000 ____D C:\Program Files\Basilisk
2020-06-23 17:25 - 2020-06-23 17:25 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer (1).exe
2020-06-23 17:20 - 2020-06-23 17:20 - 000003244 _____ C:\WINDOWS\system32\Tasks\Kerish Doctor
2020-06-23 17:19 - 2020-06-23 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerish Doctor
2020-06-23 17:19 - 2019-10-21 08:50 - 000061560 _____ (Kerish Products) C:\WINDOWS\SysWOW64\GPUTemp.dll
2020-06-23 17:17 - 2020-06-23 17:17 - 044625960 _____ (Kerish Products ) C:\Users\Milan\Downloads\Kerish_Doctor_4.80.exe
2020-06-23 17:08 - 2020-06-23 17:08 - 000000833 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2020-06-23 17:07 - 2020-06-23 17:07 - 004432054 _____ (foobar2000.org) C:\Users\Milan\Downloads\foobar2000_v1.5.4.exe
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\Users\Public\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\ProgramData\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 6.4
2020-06-23 16:39 - 2020-06-23 17:15 - 000001545 _____ C:\Users\Milan\Desktop\NOVINKY.lnk
2020-06-23 16:38 - 2020-06-23 16:44 - 313282560 _____ C:\Users\Milan\Downloads\LibreOffice_6.4.4_Win_x64.msi
2020-06-23 15:39 - 2020-06-23 15:40 - 092168968 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Milan\Downloads\ashampoo_backup_2020_12.06_sm.exe
2020-06-23 15:28 - 2020-06-23 17:15 - 000000729 _____ C:\Users\Milan\Desktop\DVD.lnk
2020-06-23 15:22 - 2020-06-23 15:22 - 027169792 _____ (GOM & Company) C:\Users\Milan\Downloads\GOMPLAYERGLOBALSETUP_CHROME.EXE
2020-06-23 15:22 - 2020-06-23 15:22 - 000000284 _____ C:\nsispromotion_log.txt
2020-06-23 15:18 - 2020-06-23 15:18 - 003571616 _____ C:\Users\Milan\Downloads\mp3tagv301setup.exe
2020-06-23 15:15 - 2020-06-23 15:15 - 000001561 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\burningstudio21.exe.lnk
2020-06-23 14:10 - 2020-06-23 14:10 - 002106424 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000757240 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000453344 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-06-23 12:50 - 2020-06-23 12:50 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer.exe
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\tmp
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Recuva
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Macrorit
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\SuperBird
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Secunia
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Seagate
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Omron Healthcare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Novel Games
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\FlashGet Network
2020-06-21 20:34 - 2020-06-21 20:34 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (2).pdf
2020-06-21 20:33 - 2020-06-21 20:33 - 000237213 _____ C:\Users\Milan\Downloads\D.1.2.1.5 Detaily.pdf.pdf
2020-06-18 18:19 - 2020-06-18 18:19 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (1).pdf
2020-06-18 18:18 - 2020-06-18 18:18 - 001701635 _____ C:\Users\Milan\Downloads\1394_001.pdf
2020-06-16 23:11 - 2020-06-01 20:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-16 23:11 - 2020-06-01 20:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-16 23:07 - 2020-06-02 07:18 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-16 23:07 - 2020-06-02 06:50 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-16 23:07 - 2020-06-02 06:44 - 001489408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:43 - 001464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2020-06-16 23:07 - 2020-06-02 06:35 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-16 23:07 - 2020-06-02 06:27 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:25 - 001204736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2020-06-16 23:07 - 2020-06-02 05:59 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-16 23:07 - 2020-06-02 05:47 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-16 23:07 - 2020-05-30 04:54 - 004168192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-16 23:07 - 2020-05-30 04:30 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-16 23:07 - 2020-05-30 03:41 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-16 23:07 - 2020-05-30 03:23 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-16 23:07 - 2020-05-28 01:06 - 022364856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-16 23:07 - 2020-05-28 01:06 - 019796328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-16 23:07 - 2020-05-20 17:25 - 001384648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 007362312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-16 23:07 - 2020-05-20 17:21 - 002170784 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001662512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001062344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 001135696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 000806200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 14:48 - 025755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-06-16 23:07 - 2020-05-20 14:27 - 002911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-06-16 23:07 - 2020-05-20 14:25 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 005499392 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 000785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-16 23:07 - 2020-05-20 13:56 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-16 23:07 - 2020-05-20 13:52 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 13:50 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 13:46 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 13:44 - 001124800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001560272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001214720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 000548440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000614056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 015478784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 13:35 - 002132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 13:34 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-16 23:07 - 2020-05-20 13:26 - 001756672 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 13:23 - 004859392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-06-16 23:07 - 2020-05-20 13:12 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-06-16 23:07 - 2020-05-20 13:01 - 000801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-16 23:07 - 2020-05-20 13:00 - 020291584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-16 23:07 - 2020-05-20 12:53 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 12:44 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-16 23:07 - 2020-05-20 12:40 - 002304000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-06-16 23:07 - 2020-05-20 12:34 - 000653824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-16 23:07 - 2020-05-20 12:21 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-16 23:07 - 2020-05-20 12:18 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 12:16 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 12:14 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 12:11 - 004111872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-06-16 23:07 - 2020-05-20 12:08 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 12:06 - 013861888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-16 23:07 - 2020-05-20 12:06 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-16 23:07 - 2020-05-20 12:01 - 001494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 11:50 - 004387328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-06-16 23:07 - 2020-05-20 11:47 - 001341952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-06-16 23:07 - 2020-05-20 11:46 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-16 23:07 - 2020-05-13 19:49 - 001368592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-06-16 23:07 - 2020-05-13 03:23 - 000414624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-16 23:07 - 2020-05-13 03:23 - 000373888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-16 23:07 - 2020-05-13 01:37 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-12 11:47 - 000466840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-16 23:07 - 2020-05-12 11:46 - 000415240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-16 23:07 - 2020-05-12 08:42 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-10 11:24 - 001311768 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-16 23:07 - 2020-05-10 06:36 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-06-16 23:07 - 2020-05-10 06:23 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 06:20 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-16 23:07 - 2020-05-10 06:15 - 003331584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-16 23:07 - 2020-05-10 06:03 - 001040384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-16 23:07 - 2020-05-10 05:56 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 05:53 - 003640320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-16 23:07 - 2020-05-10 05:53 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-16 23:07 - 2020-05-10 05:47 - 000936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-16 23:07 - 2020-05-10 05:25 - 001085952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2020-06-16 23:07 - 2020-05-10 05:23 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-06-16 23:07 - 2020-05-10 05:17 - 014533120 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-16 23:07 - 2020-05-10 05:09 - 012880384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-16 23:07 - 2020-05-01 16:17 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-16 23:07 - 2020-05-01 16:15 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001737520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001500888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-06-13 17:20 - 2020-06-13 17:20 - 000000000 ____D C:\Users\Milan\Documents\Ashampoo Burning Studio 21
2020-06-12 21:18 - 2020-06-12 21:18 - 000002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-11 10:37 - 2020-06-11 10:37 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-02 23:20 - 2020-06-02 23:20 - 000011608 _____ C:\Users\Milan\Downloads\e1af1ca0dfadad6a8e69540c5d445aa9e4970ec9.dlc
2020-05-30 13:01 - 2020-06-27 21:06 - 000001161 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2020-05-30 13:01 - 2020-06-16 21:30 - 000000374 _____ C:\Users\Milan\.vivaldi_reporting_data
2020-05-30 13:01 - 2020-05-30 13:01 - 000000000 ____D C:\Users\Milan\AppData\Local\Vivaldi
2020-05-30 12:59 - 2020-05-30 13:00 - 063187528 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.0.1874.38.x64.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-27 23:51 - 2017-10-26 20:17 - 000003648 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-06-27 23:49 - 2014-04-20 01:12 - 000000000 ____D C:\ProgramData\NVIDIA
2020-06-27 23:49 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-27 23:43 - 2014-04-28 21:19 - 000003598 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2134351818-1356353880-2322332928-1001
2020-06-27 23:42 - 2016-11-21 23:06 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\Mozilla
2020-06-27 23:42 - 2014-03-18 17:33 - 000024112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-27 23:42 - 2014-03-18 16:54 - 000018184 _____ C:\WINDOWS\system32\perfh005.dat
2020-06-27 23:42 - 2014-03-18 16:54 - 000007220 _____ C:\WINDOWS\system32\perfc005.dat
2020-06-27 23:42 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2020-06-27 23:39 - 2014-04-29 01:24 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2020-06-27 23:38 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM
2020-06-27 23:36 - 2014-04-29 21:48 - 000000000 ____D C:\Users\Milan\AppData\Local\JDownloader v2.0
2020-06-27 21:35 - 2016-10-14 18:11 - 000000000 ____D C:\Users\Milan\AppData\Roaming\DesktopOK
2020-06-27 20:07 - 2020-05-08 20:50 - 000472462 ____H C:\Users\Milan\drlog.txt
2020-06-27 09:43 - 2014-04-29 20:29 - 000000000 ____D C:\Users\Milan
2020-06-26 22:24 - 2014-04-30 21:23 - 000000000 ____D C:\Users\Milan\Desktop\NÁSTROJE
2020-06-26 20:15 - 2014-05-05 21:22 - 000000000 ____D C:\Hobby-téka
2020-06-26 18:57 - 2015-09-03 20:46 - 000000000 ____D C:\Users\Milan\AppData\Local\CrashDumps
2020-06-26 18:34 - 2014-04-29 21:30 - 000000000 ____D C:\Users\Milan\Documents\Soubory aplikace Outlook
2020-06-26 18:13 - 2014-05-18 20:15 - 000000000 ____D C:\Program Files (x86)\Opera
2020-06-26 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-06-26 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-06-24 20:54 - 2014-04-30 22:13 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-24 20:25 - 2014-05-04 19:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\XnViewMP
2020-06-24 10:36 - 2018-08-17 18:47 - 000000000 ____D C:\Users\Milan\AppData\Local\Deployment
2020-06-24 10:36 - 2018-07-27 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-06-24 10:35 - 2018-07-27 22:17 - 000000000 ____D C:\Program Files\Logitech
2020-06-24 10:33 - 2018-01-18 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-06-24 10:33 - 2015-07-18 12:03 - 000000000 ____D C:\Program Files (x86)\Java
2020-06-24 10:28 - 2017-04-08 14:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\MusicBee
2020-06-23 20:33 - 2020-04-27 19:40 - 000000801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Altap Salamander (x64).lnk
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Mp3tag
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2020-06-23 17:43 - 2014-04-20 01:17 - 000000000 ____D C:\ProgramData\Temp
2020-06-23 17:42 - 2015-05-06 22:04 - 000000000 ____D C:\Users\Milan\AppData\Roaming\VideoReDo-TVSuite5
2020-06-23 17:28 - 2019-06-18 20:03 - 000000873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Basilisk.lnk
2020-06-23 17:19 - 2020-04-07 02:00 - 000000000 ____D C:\Program Files (x86)\Kerish Doctor
2020-06-23 17:08 - 2014-12-24 20:37 - 000000000 ____D C:\Users\Milan\AppData\Roaming\foobar2000
2020-06-23 15:53 - 2020-02-01 21:28 - 000000000 ____D C:\Users\Milan\AppData\Local\Ashampoo Backup
2020-06-23 15:41 - 2014-04-29 22:03 - 000000000 ____D C:\ProgramData\Ashampoo
2020-06-23 15:24 - 2017-04-06 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM
2020-06-23 15:24 - 2014-04-30 21:30 - 000000881 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2020-06-23 13:11 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-06-23 09:49 - 2017-10-07 17:29 - 000000000 ____D C:\UsbFix
2020-06-23 09:49 - 2014-05-11 16:34 - 000000000 ____D C:\Program Files (x86)\Canon
2020-06-23 09:49 - 2014-05-11 13:26 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2020-06-23 09:49 - 2014-04-30 22:12 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-23 09:49 - 2014-04-30 21:33 - 000000000 ____D C:\The KMPlayer
2020-06-23 09:49 - 2014-04-29 21:24 - 000000000 ____D C:\inetpub
2020-06-23 09:49 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\System
2020-06-22 20:30 - 2020-02-02 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AweClone 2.6
2020-06-22 20:30 - 2019-12-24 14:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hasleo WinToHDD
2020-06-22 20:30 - 2018-09-12 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Premium
2020-06-22 20:30 - 2018-09-10 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint 7
2020-06-22 20:30 - 2018-05-26 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Dude
2020-06-22 20:30 - 2017-05-22 22:15 - 000000000 ____D C:\ProgramData\Vso
2020-06-22 20:30 - 2017-05-09 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2020-06-22 20:30 - 2014-11-23 23:05 - 000000000 ____D C:\Users\Milan\Desktop\HRY
2020-06-22 20:30 - 2014-11-21 13:53 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-11-21 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-06-29 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2020-06-22 20:30 - 2014-04-30 21:33 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2020-06-20 08:46 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2020-06-20 00:26 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-16 23:10 - 2013-08-22 17:36 - 000000000 ___RD C:\WINDOWS\ToastData
2020-06-16 23:10 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2020-06-16 23:09 - 2018-05-26 15:06 - 000000000 ____D C:\Users\Milan\AppData\Roaming\GlarySoft
2020-06-16 23:02 - 2018-05-26 15:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-06-16 23:02 - 2014-04-28 21:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-06-14 10:54 - 2020-04-17 18:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\vlc
2020-06-13 15:53 - 2014-04-28 21:31 - 000000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-06-09 20:21 - 2016-04-08 11:21 - 000004480 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-06-09 20:21 - 2014-09-10 21:27 - 000004372 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-06-09 20:04 - 2018-03-13 23:21 - 000004516 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-05 19:02 - 2014-04-20 01:18 - 000000000 ____D C:\ProgramData\install_clap
2020-06-05 19:02 - 2013-09-25 21:07 - 000000000 ____D C:\SWSETUP
2020-06-03 19:46 - 2014-04-28 21:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Adobe
2020-06-02 08:10 - 2014-03-18 17:24 - 002476032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
==================== Files in the root of some directories ========
2017-10-07 17:25 - 2017-10-07 17:25 - 000195296 ____N () C:\Users\Milan\comcat5.dll
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ () C:\Program Files (x86)\installation_status.json
2020-06-23 20:28 - 2020-06-27 23:45 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-26 18:14 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json.backup
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ () C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ () C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ () C:\Program Files (x86)\Resources.pri
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ () C:\Program Files (x86)\server_tracking_data
2017-08-02 20:18 - 2017-08-02 20:20 - 000099384 ____N () C:\Users\Milan\AppData\Roaming\inst.exe
2017-08-02 20:18 - 2017-08-02 20:20 - 000007859 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.cat
2017-08-02 20:18 - 2017-08-02 20:20 - 000001167 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.inf
2017-08-02 20:18 - 2017-08-02 20:20 - 000000033 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.log
2017-08-02 20:18 - 2017-08-02 20:20 - 000082816 ____N (VSO Software) C:\Users\Milan\AppData\Roaming\pcouffin.sys
2018-10-07 20:41 - 2018-10-07 20:41 - 000000000 ____N () C:\Users\Milan\AppData\Local\oobelibMkey.log
2014-11-21 02:36 - 2014-11-21 02:36 - 000000017 ____N () C:\Users\Milan\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2020-06-23 16:09
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-06-2020
Ran by Milan (27-06-2020 23:53:13)
Running from C:\Users\Milan\Downloads
Windows 8.1 (Update) (X64) (2014-04-29 18:34:23)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2134351818-1356353880-2322332928-500 - Administrator - Disabled)
Guest (S-1-5-21-2134351818-1356353880-2322332928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2134351818-1356353880-2322332928-1005 - Limited - Enabled)
Milan (S-1-5-21-2134351818-1356353880-2322332928-1001 - Administrator - Enabled) => C:\Users\Milan
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.)
Aktualizace NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.) Hidden
Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.)
Altap Salamander 4.0 (x64) (HKLM\...\Altap Salamander 4.0 (x64)) (Version: 4.0 - ALTAP)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{62CB44B2-8007-DBB2-1CBA-5CB7309EB3C3}) (Version: 10.1.17134.12 - Microsoft) Hidden
Ashampoo Burning Studio 21 (HKLM-x32\...\{91B33C97-3390-FD9A-8E0F-3F6BA7865E46}_is1) (Version: 21.5.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 15 (HKLM-x32\...\{0A11EA01-E0CE-916E-BC94-74670FA71836}_is1) (Version: 15.1.0 - Ashampoo GmbH & Co. KG)
ASUS Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.5000 - ASUS)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 9.4.0.0 - Auslogics Labs Pty Ltd)
Autorun Organizer verze 3.02 (HKLM-x32\...\Autorun Organizer_is1) (Version: 3.02 - ChemTable Software)
Basilisk 52.9.2020.06.10 (x64 en-US) (HKLM\...\Basilisk 52.9.2020.06.10 (x64 en-US)) (Version: 52.9.2020.06.10 - Moonchild Productions)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.24.36 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.20.114 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG7100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series) (Version: 1.01 - Canon Inc.)
Canon MG7100 series On-screen Manual (HKLM-x32\...\Canon MG7100 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
CD/Spectrum Pro (HKLM-x32\...\CDSpectrum Pro) (Version: CDSPro v2006.0204 - Synthesoft Corporation)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
CrystalDiskInfo 8.4.2 (64-bit) (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6522 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.3003 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4016 - CyberLink Corp.)
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.2011 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DiskInternals Partition Recovery (HKLM-x32\...\DiskInternals Partition Recovery) (Version: 8.0.1 - DiskInternals Research)
Driver Easy 5.6.14 (HKLM\...\DriverEasy_is1) (Version: 5.6.14 - Easeware)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
EO - ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #8) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #3 (HKLM-x32\...\ST6UNST #10) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #4 (HKLM-x32\...\ST6UNST #11) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #5 (HKLM-x32\...\ST6UNST #15) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) (HKLM-x32\...\ST6UNST #13) (Version: - )
EO - ActiveX (HKLM-x32\...\ST6UNST #3) (Version: - )
e-Saver version 3.1 (HKLM-x32\...\{C97CA73D-E96B-4B42-830E-D0F7BD780FB8}_is1) (Version: 3.1 - AOC)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Fonts version 1.0 (HKLM-x32\...\{95E6D335-B7B1-445B-9B58-64818030390E}_is1) (Version: 1.0 - MSTech (Modern Software Technology))
foobar2000 v1.5.4 (HKLM-x32\...\foobar2000) (Version: 1.5.4 - Peter Pawlowski)
Fotogaléria (HKLM-x32\...\{9093B0D5-EA59-4C9E-A2E3-CC130138DFCD}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Freemake Audio Converter verze 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Freemake Video Converter verze 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Mixbyte Inc.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.54.5318 - GOM & Company)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.116 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
HARDiNFO 8 PRO (HKLM\...\{708C3C8B-A637-4AF5-9749-8F2914CA6B23}) (Version: 8.0 - Ultimate Systems) Hidden
HARDiNFO 8 PRO (HKLM-x32\...\HARDiNFO 8 PRO) (Version: 8.0 - Ultimate Systems)
Hewlett-Packard ACLM.NET v1.2.2.1 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HOBBY-téka 4.00 (HKLM-x32\...\HOBBY-téka 4.00) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #16) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #18) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #19) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #12) (Version: - )
HOBBY-téka ActiveX (HKLM-x32\...\ST6UNST #7) (Version: - )
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP Quick Start (HKLM-x32\...\{574F0207-8E98-46CD-8F79-318348C98C46}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6668.4491 - Hewlett-Packard)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
HWiNFO64 Version 4.36 (HKLM\...\HWiNFO64_is1) (Version: 4.36 - Martin Malík - REALiX)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6435.0 - IDT)
i-Menu version 4.1.3 (HKLM-x32\...\{0121C0BD-363C-4B1D-8B64-FE7681A37D0A}_is1) (Version: 4.1.3 - AOC)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.40 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.40 - Dominik Reichl)
Kerish Doctor 2020 (HKLM-x32\...\{EF70A54F-E09E-4570-8F21-C7674CDDB5B6}_is1) (Version: 4.80 - Kerish Products)
Kits Configuration Installer (HKLM-x32\...\{6F502640-B753-C101-FFA5-B38C3FA5B29A}) (Version: 10.1.17134.12 - Microsoft) Hidden
LibreOffice 6.4.4.2 (HKLM\...\{F00C391B-6092-40E7-9ECD-144933865571}) (Version: 6.4.4.2 - The Document Foundation)
LockHunter 3.3, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.20.329 - Logitech)
Logitech SetPoint 6.69 (HKLM\...\sp6) (Version: 6.69.126 - Logitech)
MakeMKV v1.15.1 (HKLM-x32\...\MakeMKV) (Version: v1.15.1 - GuinpinSoft inc)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Mediaport (HKLM-x32\...\Mediaport) (Version: - )
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft .NET Framework 4.7.2 SDK (HKLM-x32\...\{229FC339-A2DE-46C7-8AB7-E64BD2FD9592}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{90FBABBB-0CFC-469F-971F-0A1F11F5AF2E}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.12430.20264 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MKVToolNix 40.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 40.0.0 - Moritz Bunkus)
Monkey's Audio (HKLM-x32\...\Monkey's Audio_is1) (Version: - )
Movie Maker (HKLM-x32\...\{8E6E8CBB-8E58-493C-943F-4664F5F2FEDB}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{9EDF46F0-2D4E-4C00-B2B6-0660666E9F60}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{A035950F-15BA-41C0-9D8F-165FC0536012}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 66.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 66.0.2 (x64 cs)) (Version: 66.0.2 - Mozilla)
Mozilla Firefox 77.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 77.0.1 (x64 en-US)) (Version: 77.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0.2 - Mozilla)
MSI Development Tools (HKLM-x32\...\{1E406B46-65F4-91CE-65DA-DB66D5443B68}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
MSTech Folder Icon Pro (HKLM-x32\...\{C8483ED0-185F-45D7-9AC4-DD751942B9ED}) (Version: 2.9.3.750 - MSTech (Modern Software Technology))
MultiCommander (x64) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MultiCommander x64) (Version: 8.3.0.2469 - Mathias Svensson)
Nero CoverDesigner (HKLM-x32\...\{12391E45-23F7-4DEA-ABAE-2CA69CA87D92}) (Version: 12.0.02300 - Nero AG)
NVIDIA Ovladač 3D Vision 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.73 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.73 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OCCT 4.4.0 (HKLM-x32\...\OCCT) (Version: 4.4.0 - Ocbase.com)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Omron Health Management Software (HKLM-x32\...\{E01DFD45-F13A-4F12-AC38-8EEE2163E52E}) (Version: 1.60.0003 - Omron Healthcare)
Opera Stable 69.0.3686.36 (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Opera 69.0.3686.36) (Version: 69.0.3686.36 - Opera Software)
Ovládací panel NVIDIA 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.73 - NVIDIA Corporation) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM\...\{14EEF044-2FC6-40AA-9285-F430B3D90EF6}) (Version: 17.10.2.5049 - Paragon Software) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM-x32\...\{f541ba6a-92bf-466b-b956-5efa58ffe017}) (Version: 17.10.2.5049 - Paragon Software GmbH)
Paragon UIM (HKLM\...\{06B4D67B-9ECB-41E5-B4C1-92F529BB703D}) (Version: 24.65.0.487 - Paragon Software) Hidden
PeaZip 6.6.0 (HKLM-x32\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.6.0 - Giorgio Tani)
PeaZip 6.8.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.8.0 - Giorgio Tani)
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30153 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.0.6208 - CyberLink Corp.) Hidden
Registrace uživatele zařízení Canon MG7100 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG7100 series) (Version: - Canon Inc.)
Relax-KEŠ ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #9) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #1) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #2) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #4) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #6 (HKLM-x32\...\ST6UNST #6) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #7 (HKLM-x32\...\ST6UNST #17) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #14) (Version: - )
Relax-KEŠ ActiveX (HKLM-x32\...\ST6UNST #5) (Version: - )
SDK ARM Additions (HKLM-x32\...\{346B2C02-CC0D-6E09-8B9D-CAA2821473CF}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{825784BB-114D-ADB3-B65F-E1EB2A63C3BC}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK Debuggers (HKLM-x32\...\{8238CD59-617A-FE41-8AB4-A88AF3160849}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Soft Organizer verze 7.52 (HKLM-x32\...\Soft Organizer_is1) (Version: 7.52 - ChemTable Software)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - )
Synology Data Replicator 3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TechniPort Plus Beta (HKLM-x32\...\TechniPort Plus Beta) (Version: 0.9.5.4_beta - TechniSat)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
TotalAudioConverter (HKLM-x32\...\Total Audio Converter_is1) (Version: 5.1 - Softplicity, Inc.)
TVDownloader (HKLM-x32\...\TVDownloader) (Version: 1.18.0.0 - XPloRR)
Universal CRT Extension SDK (HKLM-x32\...\{18ABFDF6-23D9-87E6-015E-FFE3C7F153D5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{0D6B41AF-D117-8944-A059-3F9346A896C5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{B6273353-8B54-1F89-1A16-5940925104CE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{BA6F1D53-C3F2-F9D5-80CE-CEF608E36AD3}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{6E43CA0C-046E-4F38-A0A2-3B1BA139B661}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{775886B8-DEE1-CB20-8A94-FC09FA54ECF6}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Unlocker (HKLM-x32\...\{5577A25D-E4FE-4BFB-A660-E0D766BC4EDD}) (Version: 1.9.2 - ajua Custom Installers)
VDownloader 4.5.2902 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited)
VideoReDo TVSuite Version 5.4.84.771 (HKLM-x32\...\VideoReDo5_is1) (Version: - DRD Systems, Inc.)
Vivaldi (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Vivaldi) (Version: 3.1.1929.45 - Vivaldi Technologies AS.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
VSO Media Player 1.6.12.521 (HKLM-x32\...\{59F1E8E6-60EC-4CC1-8C72-E0F38E585215}_is1) (Version: 1.6.12.521 - VSO Software)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Web Components (HKLM-x32\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: - )
WhoCrashed 6.65 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
WinAppDeploy (HKLM-x32\...\{5AD4A604-B476-1578-2A20-6B02FC6258BE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Mobile Connectivity Tools 10.0.15254.0 - Desktop x86 (HKLM-x32\...\{833F02C5-2C39-49F6-BD64-91D351081274}) (Version: 10.1.15254.1 - Microsoft Corporation)
Windows SDK AddOn (HKLM-x32\...\{E77C2F78-6089-48F8-89DF-DDF2850DFFD9}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17134.12 (HKLM-x32\...\{5f83ccda-0498-4b97-a298-16a642bf49f2}) (Version: 10.1.17134.12 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{389D182F-0ADA-5C7E-FF32-2573A821592C}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{C3776B36-B34E-00E2-3009-95A6F1870B58}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{965D1746-D94A-49B9-2A48-A14914CA3B57}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{84C6B91B-67DA-DDE3-86F1-87A3E307E8C1}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{3755CD99-C62E-3312-DDD3-29A4F259270D}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{729DA966-8590-2C1F-2178-16C1D32FD7FD}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{F1C18506-3168-A9D9-E2D9-D23A512A326E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{4095D263-6A13-78D3-DEDA-AA3452011F6E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{C3243E23-2EB6-4419-2692-40944923B112}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WPT Redistributables (HKLM-x32\...\{F28E1B8B-1F92-80AF-710B-3E0191A25917}) (Version: 10.1.17134.12 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{711802CA-302C-6805-6D1F-D5CEF535F15E}) (Version: 10.1.17134.12 - Microsoft) Hidden
XnViewMP 0.64 (HKLM\...\XnViewMP_is1) (Version: 0.64 - Gougelet Pierre-e)
XYplorer 15.90 (HKLM-x32\...\XYplorer) (Version: 15.90 - Donald Lessau)
Packages:
=========
Box for Windows 8 -> C:\Program Files\WindowsApps\134D4F5B.Box_2.1.4.4_neutral__2qk4zy5s3qmee [2018-02-18] (Box, Inc.)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-03-07] (Canon Inc.)
HP Registration -> C:\Program Files\WindowsApps\AD2F1837.HPRegistration_1.2.1.166_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
Hry -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Hudba -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview_1.0.9431.0_neutral__8wekyb3d8bbwe [2018-02-18] (Rozšíření Microsoft Platform)
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.Preview.1_1.0.9345.0_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Windows Library for JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview.Internal_1.0.9385.3_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Finance -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Gurmánský svět -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Norton Studio -> C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp [2018-02-18] (Symantec Corporation)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2018-02-18] (Skype) [MS Ad]
Video -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Výběr prohlížeče -> C:\WINDOWS\BrowserChoice [2014-04-29] (Microsoft Corporation)
Začínáme se systémem Windows 8 -> C:\Program Files\WindowsApps\AD2F1837.GettingStartedwithWindows8_1.6.0.0_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> E:\Program Files (x86)\Vivaldi\Application\3.1.1929.45\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6722448 2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers1: [TotalConverter] -> {280CFDE1-1354-4431-92F3-03073BA593FB} => C:\Program Files (x86)\TotalAudioConverter\axTotalConverter64.dll [2014-03-14] (Softplicity) [File not signed] [File is in use]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers4: [FolderIconProMnu] -> {ee6b78fb-091b-3896-8982-9987a45d50bb} => E:\Program Files (x86)\MSTech Folder Icon Pro\FolderIconProMnu.DLL [2019-03-02] (MSTech (Modern Software Technology)) [File not signed] [File is in use]
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> C:\ProgramData\Ashampoo\YourDeals.exe () -> hxxp://linktarget.ashampoo.com/linktarget/?target=marketplace&edition=eid=15445&utm_medium=desktop&x-pos=Metro
==================== Loaded Modules (Whitelisted) =============
2018-04-19 22:31 - 2018-04-19 22:31 - 000267776 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL
2018-02-18 18:48 - 2017-12-19 04:51 - 000874880 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2018-02-18 18:48 - 2017-12-19 04:51 - 000339072 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2013-08-07 10:49 - 2013-08-07 10:49 - 000602112 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\devctrl.dll
2013-08-06 14:52 - 2013-08-06 14:52 - 001281536 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\vssWin764.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2020-06-27 23:49 - 000000000 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\VDownloader;C:\Program Files\ASUS\Bluetooth Software\;C:\Program Files\ASUS\Bluetooth Software\syswow64;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\HP\HP_Orkney_Stones.jpg
DNS Servers: 109.72.0.1 - 109.72.2.30
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{B384870C-5BE3-4735-97F2-5C7F4D5C1F1E}] => (Allow) LPort=1900
FirewallRules: [{C5D7703D-8AEB-4EA2-9201-6B27121E8F5C}] => (Allow) LPort=2869
FirewallRules: [{1FD973EA-C3CE-4556-A571-2C6D7618F862}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{52661EC0-718E-4A10-B226-E402B8BA8552}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9B768B84-2E68-44C0-9C18-48ED8811FB1B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6BE5FF36-FC45-4B96-81B5-8D58DBC93DDF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0410599E-4774-431E-A310-5411BADF2955}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{33249233-4380-4407-AE78-79F3222250BF}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{946C85CF-AD28-4698-89A2-451103BA6275}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{CF42E03B-7A5F-4742-91E9-CDA2D995E37B}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{BDFF5D59-DA54-4CC6-866A-1ABD6F2BD361}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{7188B0BC-8686-4FDF-869F-2F7865AEC1DF}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{16A2A0B4-C95D-4780-A4C5-7A74105C165F}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{3CA6EE64-D75A-4954-931D-A1D239377DD5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{478BC89C-8B49-4371-9729-1F6432AAD5E9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{2D7D2949-C15C-42FD-B6B0-BD3903A6D94C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{C161A352-112A-4538-9333-830F26014802}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{7DDBA0CE-B419-4EF2-BDA1-C217CC705F17}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9144AD77-433A-4B1B-8D92-58C02259F298}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C8A1B26A-E1C3-47DB-8754-43BAD054FCD0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F566AE56-7E66-44D3-804D-4149275C4394}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BAB750B0-D53E-48EE-BE80-0BDB26C79A15}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3AE55082-D404-45CF-B593-B97A1ACB03B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F57D2F83-1AF5-4767-A155-DA1E3BB70BD8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9BAA4FA-B27F-463D-BD6F-D5E23B76F7BF}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{EB4C43AF-30CD-4477-BEBC-07F64B46BD98}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{C1F6B667-11F8-451B-BDF7-FF029BC1E9D1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{87C55617-9CED-4DDA-BAEF-B13875FDE3AF}] => (Allow) C:\Program Files (x86)\69.0.3686.36\opera.exe (Opera Software AS -> Opera Software)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe] => Enabled:Flashget3
==================== Restore Points =========================
==================== Faulty Device Manager Devices ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (06/27/2020 11:49:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci Microsoft.WindowsAlarms_8wekyb3d8bbwe!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/27/2020 11:38:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci Microsoft.WindowsAlarms_8wekyb3d8bbwe!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/27/2020 11:04:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/27/2020 10:04:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/27/2020 09:04:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/27/2020 08:04:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/27/2020 07:11:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/27/2020 06:35:51 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
System errors:
=============
Error: (06/27/2020 11:49:26 PM) (Source: DCOM) (EventID: 10016) (User: HP)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
a APPID
{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}
uživateli HP\Milan (SID: S-1-5-21-2134351818-1356353880-2322332928-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (06/27/2020 11:49:25 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppX2tphb21dp9jkkycchwvscnrxk12cys3z.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/27/2020 11:49:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba ElbyCDIO Driver neuspěla při spuštění v důsledku následující chyby:
Načtení tohoto ovladače je blokováno.
Error: (06/27/2020 11:49:24 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ElbyCDIO.sys
Error: (06/27/2020 11:49:19 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (23:38:31, 27. 6. 2020) bylo neočekávané.
Error: (06/27/2020 11:38:37 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppX2tphb21dp9jkkycchwvscnrxk12cys3z.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/27/2020 11:38:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba ElbyCDIO Driver neuspěla při spuštění v důsledku následující chyby:
Načtení tohoto ovladače je blokováno.
Error: (06/27/2020 11:38:36 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ElbyCDIO.sys
==================== Memory info ===========================
BIOS: AMI 80.20 03/25/2014
Motherboard: Hewlett-Packard 2AF3
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 27%
Total physical RAM: 16337.16 MB
Available physical RAM: 11838.18 MB
Total Virtual: 22993.16 MB
Available Virtual: 17741.81 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:103.83 GB) (Free:25.68 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Recovery Image) (Fixed) (Total:13.49 GB) (Free:1.6 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (DATADRIVE) (Fixed) (Total:3725.9 GB) (Free:3636.24 GB) NTFS
Drive f: (Bowling for Columbine) (CDROM) (Total:7.62 GB) (Free:0 GB) UDF
Drive h: () (Fixed) (Total:1397.26 GB) (Free:1257.67 GB) NTFS
Drive l: () (Fixed) (Total:1397.26 GB) (Free:121.46 GB) NTFS
\\?\Volume{abe04f1f-1613-40cd-8aa4-0671b7515e52}\ () (Fixed) (Total:0 GB) (Free:0 GB)
\\?\Volume{b49f7e97-af19-4680-ad83-9b7505e9a462}\ () (Fixed) (Total:0 GB) (Free:0 GB)
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 1AD3749A)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 3 (Size: 1397.3 GB) (Disk ID: 4AB79538)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==========================================================
Disk: 4 (Size: 1397.3 GB) (Disk ID: 40505CCB)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Občasné problémy s PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Občasné problémy s PC
Ahoj 
Ake problemy s PC sa vyskytuju?
Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/
Ake problemy s PC sa vyskytuju? Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/
- Uloz na plochu a ukonci vsetky programy
- Spusti AdwCleaner ako spravca
- Odsuhlas licencne podmienky
- Klikni na Spustit skenovani a pockaj na dokoncenie
- V pripade nalezov nechaj vsetky nalezy oznacene a klikni na Karantena (ak nie su ziadne nalezy, tak na Spustit zakladni opravu)
- V pripade, ze sa detekuje aj "predinstalovany software", tieto programy mozes, ale nemusis zmazat (toto nie su skodlive programy, ale iba zbytocnosti)
- Potvrd vyzvu, pockaj na dokoncenie a potvrd restartovanie PC
- Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
- Otvori sa log, jeho obsah skopiruj a vloz do dalsej odpovede
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: Občasné problémy s PC
Zdravím a děkuji,
problémy - občas bez zjevného důvodu přestanou fungovat browsery, např. mám otevřený Chrome a v něm se stránky načítají, ovšem Opera, nebo Basilisk nenačtou vůbec nic. Restartuji PC a už nefunguje žádný browser - ani se nespustí. Nejde ani standardní Správce úloh či Sysinternals Process Explorer. Musím znovu restartovat a pak už všechno jde.
Log z AdwCleaner:
# -------------------------------
# Malwarebytes AdwCleaner 8.0.5.0
# -------------------------------
# Build: 05-25-2020
# Database: 2020-06-15.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-28-2020
# Duration: 00:00:01
# OS: Windows 8.1
# Cleaned: 3
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Assistant
***** [ Files ] *****
Deleted C:\END
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ProductUpdater
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [3254 octets] - [28/06/2020 09:42:45]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
problémy - občas bez zjevného důvodu přestanou fungovat browsery, např. mám otevřený Chrome a v něm se stránky načítají, ovšem Opera, nebo Basilisk nenačtou vůbec nic. Restartuji PC a už nefunguje žádný browser - ani se nespustí. Nejde ani standardní Správce úloh či Sysinternals Process Explorer. Musím znovu restartovat a pak už všechno jde.
Log z AdwCleaner:
# -------------------------------
# Malwarebytes AdwCleaner 8.0.5.0
# -------------------------------
# Build: 05-25-2020
# Database: 2020-06-15.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-28-2020
# Duration: 00:00:01
# OS: Windows 8.1
# Cleaned: 3
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Assistant
***** [ Files ] *****
Deleted C:\END
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ProductUpdater
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [3254 octets] - [28/06/2020 09:42:45]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Re: Občasné problémy s PC
Poprosim o obidva nove logy z FRST.
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: Občasné problémy s PC
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-06-2020
Ran by Milan (administrator) on HP (Hewlett-Packard 810-000ec) (29-06-2020 20:23:14)
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan
Platform: Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AppWork GmbH -> AppWork GmbH) C:\Users\Milan\AppData\Local\JDownloader v2.0\JDownloader2.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\ActionCenter.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabMakePortable.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabReports.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcr.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\btwdins.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <36>
(GuinpinSoft inc) [File not signed] [File is in use] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) [File not signed] [File is in use] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Josh Mayfield -> UltimateOutsider) C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe
(Konstantin Polyakov IP -> ) C:\Program Files (x86)\Autorun Organizer\Reg64Call.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Mixbyte Inc -> Ellora Assets Corp.) E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Mixbyte Inc -> Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(Nenad Hrg SoftwareOK) [File not signed] [File is in use] C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(OOO AMA -> Kerish Products) C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Synology Inc. -> ) [File not signed] [File is in use] C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Synology Inc. -> ) C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
(Synology Inc. -> Synology Inc.) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Vivaldi Technologies AS -> Vivaldi Technologies AS) E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe [4559944 2016-01-24] (Josh Mayfield -> UltimateOutsider)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [549032 2020-06-23] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2019-01-30] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2020-04-27] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [DesktopOK] => C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe [233472 2016-10-13] (Nenad Hrg SoftwareOK) [File not signed] [File is in use]
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Data Replicator 3] => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Vivaldi Update Notifier] => E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe [1859656 2020-06-24] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG7100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBR.DLL [30208 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG7100 series: C:\WINDOWS\system32\CNMLMBR.DLL [391168 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\ASUS\Bluetooth Software\\BtwCP.dll [2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-08-12]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ASUS\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
BootExecute: autocheck autochk * sdnclean64.exe
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00A5A0B1-7556-4B18-B57E-038D8295F470} - System32\Tasks\Paragon Job (Back up partitions or disks to virtual containers) - {46beb899-e93a-43e0-491f-d9ff47346787} => C:\Program Files\Paragon Software\Hard Disk Manager 25 Anniversary LE\program\hdmengine_scriptsapp.exe [3537304 2019-11-22] (Paragon Software GmbH -> Paragon Software)
Task: {010157E6-86DD-4E1E-918F-B76D3128A5EF} - System32\Tasks\Kerish Doctor => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe [4904568 2020-06-18] (OOO AMA -> Kerish Products)
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {085B11DD-C1FF-4C59-988E-A3C0242FD180} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {0DA1BF58-DF15-468B-A92B-6AFF87379E22} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {12B9E8E0-063D-4A4D-80A6-2EE1AA903C9D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {17FD829C-813D-4D47-9688-332A6A5708B2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-téka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {2F5317B0-40DA-4281-9DB9-5D225BC8DC55} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1448832 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {40159E94-CCBF-466B-9FC0-8E3DEF3B9641} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4E7A0467-C9EE-40F1-A464-2B9134922C68} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {50701EEC-28E8-4637-93A1-ACEA149D8127} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {5E3E78EF-2FAF-458B-A22C-0AAEBCCEE74B} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag on Milan logon => C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe [3452280 2020-06-23] (Auslogics Labs Pty Ltd -> Auslogics)
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {67991882-52F0-4C8B-965E-31052A068347} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {6B519139-51D6-44D1-B396-483F551B4663} - System32\Tasks\Speedfan => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> )
Task: {6C24ED94-C837-4CE9-8ECF-7C48CF522415} - System32\Tasks\Synology Data Replicator 3-HP-Milan => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {77A64781-67AB-4B9F-97C1-829AAB06DD81} - System32\Tasks\Opera scheduled Autoupdate 1593188087 => C:\Program Files (x86)\launcher.exe [1509400 2020-06-22] (Opera Software AS -> Opera Software) <==== ATTENTION
Task: {7B7B2178-7A07-45BC-B2C1-819DAA6C17E4} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {930B96B9-27A0-4403-9751-03D727568671} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {9B80A8C1-CE2A-4B69-8BB0-7E8AFFDAC3FE} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2020-03-27] (Bitdefender SRL -> Bitdefender)
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A66240ED-7854-408B-BE4C-421A219F6205} - System32\Tasks\Autorun Organizer => C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe [10810816 2018-10-26] (Konstantin Polyakov IP -> Chemtable Software)
Task: {BE479DF2-7A43-4673-9831-1A968F6C2D71} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1A80A88-FAD6-4409-AE0E-BEA26ED8DDF2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C3EC7682-92EC-444E-80D8-C598376C1D42} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [3203480 2016-02-26] (Symantec Corporation -> Symantec Corporation)
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {D92C0A54-9000-44C5-8046-6C401EC688BB} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {E31E94EA-8ADB-42A9-BF83-812F81DCD152} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_pepper.exe [1454648 2020-06-09] (Adobe Inc. -> Adobe)
Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
Task: {FA8A9E9A-8A1B-4CA4-99AB-E7953BC61EBD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 109.72.0.1 109.72.2.30
Tcpip\..\Interfaces\{E2641B9C-4257-42E8-B3E4-FA4A8C923E89}: [DhcpNameServer] 109.72.0.1 109.72.2.30
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: kje70kdo.default
FF DefaultProfile: daneqr12.default-1581870394713
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default [2020-06-29]
FF user.js: detected! => C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js [2015-03-10]
FF DownloadDir: C:\Users\Milan\Desktop
FF Homepage: Mozilla\Firefox\Profiles\kje70kdo.default -> about:blank
FF Session Restore: Mozilla\Firefox\Profiles\kje70kdo.default -> is enabled.
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2020-06-13]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2020-06-13]
FF Extension: (Restart) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\Restart@schuzak.jp.xpi [2017-03-13] [Legacy]
FF Extension: (Session Sync) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\session-sync@gabrielivanica.com.xpi [2020-03-25]
FF Extension: (Youtube Watchmarker) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\yourect@coderect.com.xpi [2020-04-27]
FF Extension: (Linkification) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}.xpi [2015-07-26] [Legacy] [not signed]
FF Extension: (Video DownloadHelper) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-30]
FF Extension: (No Name) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-04-01]
FF Extension: (YouTube Flash Video Player) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi [2018-02-11]
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 [2020-06-28]
FF Homepage: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> about:home
FF Session Restore: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> is enabled.
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-05-04] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-05-17] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2019-02-26] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> E:\Program Files (x86)\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.) [File not signed] [File is in use]
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) [File not signed] [File is in use]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google Inc -> Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2016-02-29] (Nero AG -> Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2013-03-04] (HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. -> )
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-10-20] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2019-11-03] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-10-20] <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2019-11-03] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default [2020-06-29]
CHR Notifications: Default -> hxxps://keep.google.com; hxxps://www.facebook.com
CHR StartupUrls: Default -> "hxxp://www.auto.cz/"
CHR Extension: (ProxFlow) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2020-06-11]
CHR Extension: (YouTube WATCHED. Classic View) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aendhplcpcfjlebhcjfiapmoaiekpkba [2020-01-12]
CHR Extension: (Dokumenty) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-21]
CHR Extension: (Disk Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-08]
CHR Extension: (uBlock Origin) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-05-30]
CHR Extension: (Vyhledávání Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2020-05-17]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2018-07-27]
CHR Extension: (Session Buddy) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2020-05-10]
CHR Extension: (Adobe Acrobat) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-06-23]
CHR Extension: (Tabs Outliner) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl [2020-04-30]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2020-05-10]
CHR Extension: (Bitdefender Wallet) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2019-12-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-30]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-06-14]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-05-30]
CHR Extension: (Flash® Player for YouTube™) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lajdkhdcndkniopfefocbgbkofflagpm [2017-07-23]
CHR Extension: (Linkclump) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2020-06-23]
CHR Extension: (Clickable Links) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2016-05-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-18]
CHR Extension: (Gmail) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-24]
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\System Profile [2017-04-09]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
Opera:
=======
OPR StartupUrls: "hxxps://www.idnes.cz/","hxxps://www.seznam.cz/" ... vodajstvi/"
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-10-07] (Bitdefender SRL -> Bitdefender)
R2 btwdins; C:\Program Files\ASUS\Bluetooth Software\btwdins.exe [960368 2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe [8704 2019-09-29] (GuinpinSoft inc) [File not signed] [File is in use]
R2 Chemtable Startup Checking; C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe [9924368 2018-09-03] (Konstantin Polyakov IP -> Chemtable Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11096432 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [120392 2020-03-27] (Bitdefender SRL -> Bitdefender)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2020-02-25] (Mixbyte Inc -> Freemake)
R2 FreemakeVideoCapture; E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [17792 2019-05-17] (Mixbyte Inc -> Ellora Assets Corp.)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] [File is in use]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129336 2013-01-31] (Intel Corporation -> Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21256 2018-04-20] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [463856 2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1352120 2020-03-27] (Bitdefender SRL -> Bitdefender)
U3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-27] (Elaborate Bytes) [File not signed] [File is in use]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
R2 SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [384072 2013-10-09] (Synology Inc. -> )
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [170328 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2014-02-25] (Synology Inc. -> ) [File not signed] [File is in use]
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; "E:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE" /auditservice [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Co., Ltd. -> AnvSoft Inc.)
R0 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2106424 2020-06-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [757240 2020-06-23] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-02-14] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96616 2020-05-26] (Bitdefender SRL -> BitDefender)
R2 ei2c; C:\windows\system32\drivers\ei2c.sys [20784 2014-05-01] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-29] (Elaborate Bytes AG) [File not signed] [File is in use]
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-06-28] (Malwarebytes Corporation -> Malwarebytes)
R0 EUDSKCP; C:\WINDOWS\System32\drivers\EuDskCp.sys [74184 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R1 EUEUMDK; C:\WINDOWS\system32\drivers\EuEumDk.sys [23496 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [453344 2020-06-23] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2019-06-03] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\System32\DRIVERS\ignis.sys [196392 2019-09-16] (Bitdefender SRL -> Bitdefender)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-04-07] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [44448 2014-10-12] (EATON POWER QUALITY SAS -> hxxp://libusb-win32.sourceforge.net)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73368 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [131728 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
S3 MDA_NTDRV; C:\WINDOWS\system32\MDA_NTDRV.sys [21208 2013-02-25] (北京铠信神州科技有限责任公司 -> )
R2 mi2c; C:\windows\system32\drivers\mi2c.sys [20784 2016-07-27] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [551936 2014-01-05] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [638368 2020-05-04] (Bitdefender SRL -> Bitdefender)
R1 UimBus; C:\WINDOWS\System32\drivers\uimbus.sys [109504 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
R1 Uim_DEVIM; C:\WINDOWS\System32\drivers\uimdevim.sys [46016 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation -> Intel Corporation)
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-29 20:23 - 2020-06-29 20:23 - 002291712 _____ (Farbar) C:\Users\Milan\Desktop\FRST64.exe
2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion
2020-06-28 11:05 - 2020-06-28 11:05 - 000131728 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000073368 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000001943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-06-28 10:58 - 2020-06-28 10:58 - 000000000 ____D C:\Malwarebytes
2020-06-28 10:32 - 2020-06-28 10:32 - 001287032 _____ (CPUID, Inc. ) C:\Users\Milan\Downloads\hwmonitor_1.41.exe
2020-06-28 10:31 - 2020-06-28 10:31 - 001214288 _____ ( ) C:\Users\Milan\Downloads\hwmonitor_1.32.exe
2020-06-28 10:31 - 2020-06-28 10:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2020-06-28 10:31 - 2020-06-28 10:31 - 000000000 ____D C:\Program Files\CPUID
2020-06-28 09:47 - 2020-06-28 09:47 - 000001670 _____ C:\Users\Milan\Desktop\AdwCleaner[C00].txt
2020-06-28 09:40 - 2020-06-28 09:40 - 008402608 _____ (Malwarebytes) C:\Users\Milan\Desktop\adwcleaner_8.0.5.exe
2020-06-27 23:54 - 2020-06-29 20:23 - 000046192 _____ C:\Users\Milan\Desktop\FRST.txt
2020-06-27 23:54 - 2020-06-27 23:54 - 000050160 _____ C:\Users\Milan\Desktop\Addition.txt
2020-06-27 23:53 - 2020-06-27 23:54 - 000050157 _____ C:\Users\Milan\Downloads\Addition.txt
2020-06-27 23:52 - 2020-06-27 23:54 - 000078005 _____ C:\Users\Milan\Downloads\FRST.txt
2020-06-27 23:51 - 2020-06-29 20:23 - 000000000 ____D C:\FRST
2020-06-27 23:38 - 2020-06-27 23:38 - 000680512 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-27 19:05 - 2020-06-27 19:05 - 064618056 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.1.1929.45.x64.exe
2020-06-27 09:43 - 2020-06-27 09:43 - 000000000 ___HD C:\Users\Milan\.opera
2020-06-26 22:23 - 2020-06-26 22:23 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2020-06-26 22:22 - 2020-06-26 22:22 - 013547840 _____ (GuinpinSoft inc) C:\Users\Milan\Downloads\Setup_MakeMKV_v1.15.1.exe
2020-06-26 20:51 - 2020-06-26 20:51 - 000000000 ___HD C:\Users\Milan\Downloads\.opera
2020-06-26 20:13 - 2020-06-26 20:13 - 000000000 ___HD C:\Program Files (x86)\.opera
2020-06-26 18:14 - 2020-06-26 18:14 - 002294440 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup (1).exe
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ C:\Program Files (x86)\installation_status.json
2020-06-26 18:14 - 2020-06-26 18:14 - 000003980 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1593188087
2020-06-26 18:14 - 2020-06-26 18:14 - 000001083 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\Assets
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\69.0.3686.36
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ C:\Program Files (x86)\Resources.pri
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\opera autoupdate
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Program Files (x86)\opera autoupdate
2020-06-24 22:36 - 2020-06-24 22:39 - 000214102 _____ C:\Users\Milan\Downloads\Optimalizace trati, SŽ.pdf
2020-06-24 21:12 - 2020-06-24 21:12 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-06-24 18:22 - 2020-06-24 18:22 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2020-06-24 18:21 - 2020-06-24 18:21 - 041626504 _____ (DiskInternals Research) C:\Users\Milan\Downloads\Partition_Recovery.exe
2020-06-24 11:02 - 2020-06-24 11:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-06-24 11:01 - 2020-06-24 11:02 - 041824168 _____ C:\Users\Milan\Downloads\vlc-3.0.11-win64.exe
2020-06-24 10:34 - 2020-06-24 10:35 - 207277528 _____ (Logitech Inc.) C:\Users\Milan\Downloads\Options_8.20.329.exe
2020-06-24 10:33 - 2020-06-24 10:32 - 000114344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-06-24 10:31 - 2020-06-24 10:31 - 002066568 _____ (Oracle Corporation) C:\Users\Milan\Downloads\chromeinstall-8u251.exe
2020-06-23 22:45 - 2020-06-23 22:45 - 000001716 _____ C:\Users\Milan\Desktop\Games – zástupce.lnk
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\Program Files (x86)\Auslogics
2020-06-23 22:21 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\Downloads\opera autoupdate
2020-06-23 20:41 - 2020-06-23 20:41 - 009936128 _____ (Resplendence Software Projects Sp. ) C:\Users\Milan\Downloads\whocrashedSetup.exe
2020-06-23 20:41 - 2020-06-23 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2020-06-23 20:39 - 2020-06-23 20:39 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TVDownloader
2020-06-23 20:32 - 2020-06-23 20:32 - 008612792 _____ (ALTAP) C:\Users\Milan\Downloads\as40x64.exe
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json.backup
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ C:\Program Files (x86)\server_tracking_data
2020-06-23 20:27 - 2020-06-26 18:13 - 000000000 ____D C:\Program Files (x86)\68.0.3618.173
2020-06-23 20:27 - 2020-06-23 20:27 - 002464864 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup.exe
2020-06-23 19:57 - 2020-06-29 20:00 - 000000304 _____ C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job
2020-06-23 19:57 - 2020-06-23 19:57 - 000002856 _____ C:\WINDOWS\system32\Tasks\Synology Data Replicator 3-HP-Milan
2020-06-23 18:16 - 2020-06-23 18:16 - 000000000 ___HD C:\Users\Milan\Desktop\DEATH DEALER (CAN)
2020-06-23 17:46 - 2020-06-23 17:46 - 000000787 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:45 - 2020-06-23 17:45 - 003419088 _____ C:\Users\Milan\Downloads\winrar-x64-590cz.exe
2020-06-23 17:42 - 2020-06-23 17:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoReDo
2020-06-23 17:41 - 2020-06-23 17:41 - 043786040 _____ (DRD Systems, Inc. ) C:\Users\Milan\Downloads\VRDTVSH264-5-4-84-771a.exe
2020-06-23 17:28 - 2020-06-23 17:28 - 000000000 ____D C:\Program Files\Basilisk
2020-06-23 17:25 - 2020-06-23 17:25 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer (1).exe
2020-06-23 17:20 - 2020-06-23 17:20 - 000003244 _____ C:\WINDOWS\system32\Tasks\Kerish Doctor
2020-06-23 17:19 - 2020-06-23 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerish Doctor
2020-06-23 17:19 - 2019-10-21 08:50 - 000061560 _____ (Kerish Products) C:\WINDOWS\SysWOW64\GPUTemp.dll
2020-06-23 17:17 - 2020-06-23 17:17 - 044625960 _____ (Kerish Products ) C:\Users\Milan\Downloads\Kerish_Doctor_4.80.exe
2020-06-23 17:08 - 2020-06-23 17:08 - 000000833 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2020-06-23 17:07 - 2020-06-23 17:07 - 004432054 _____ (foobar2000.org) C:\Users\Milan\Downloads\foobar2000_v1.5.4.exe
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\Users\Public\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\ProgramData\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 6.4
2020-06-23 16:39 - 2020-06-23 17:15 - 000001545 _____ C:\Users\Milan\Desktop\NOVINKY.lnk
2020-06-23 16:38 - 2020-06-23 16:44 - 313282560 _____ C:\Users\Milan\Downloads\LibreOffice_6.4.4_Win_x64.msi
2020-06-23 15:39 - 2020-06-23 15:40 - 092168968 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Milan\Downloads\ashampoo_backup_2020_12.06_sm.exe
2020-06-23 15:28 - 2020-06-23 17:15 - 000000729 _____ C:\Users\Milan\Desktop\DVD.lnk
2020-06-23 15:22 - 2020-06-23 15:22 - 027169792 _____ (GOM & Company) C:\Users\Milan\Downloads\GOMPLAYERGLOBALSETUP_CHROME.EXE
2020-06-23 15:22 - 2020-06-23 15:22 - 000000284 _____ C:\nsispromotion_log.txt
2020-06-23 15:18 - 2020-06-23 15:18 - 003571616 _____ C:\Users\Milan\Downloads\mp3tagv301setup.exe
2020-06-23 15:15 - 2020-06-23 15:15 - 000001561 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\burningstudio21.exe.lnk
2020-06-23 14:10 - 2020-06-23 14:10 - 002106424 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000757240 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000453344 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-06-23 12:50 - 2020-06-23 12:50 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer.exe
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\tmp
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Recuva
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Macrorit
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\SuperBird
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Secunia
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Seagate
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Omron Healthcare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Novel Games
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\FlashGet Network
2020-06-21 20:34 - 2020-06-21 20:34 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (2).pdf
2020-06-21 20:33 - 2020-06-21 20:33 - 000237213 _____ C:\Users\Milan\Downloads\D.1.2.1.5 Detaily.pdf.pdf
2020-06-18 18:19 - 2020-06-18 18:19 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (1).pdf
2020-06-18 18:18 - 2020-06-18 18:18 - 001701635 _____ C:\Users\Milan\Downloads\1394_001.pdf
2020-06-16 23:11 - 2020-06-01 20:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-16 23:11 - 2020-06-01 20:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-16 23:07 - 2020-06-02 07:18 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-16 23:07 - 2020-06-02 06:50 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-16 23:07 - 2020-06-02 06:44 - 001489408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:43 - 001464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2020-06-16 23:07 - 2020-06-02 06:35 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-16 23:07 - 2020-06-02 06:27 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:25 - 001204736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2020-06-16 23:07 - 2020-06-02 05:59 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-16 23:07 - 2020-06-02 05:47 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-16 23:07 - 2020-05-30 04:54 - 004168192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-16 23:07 - 2020-05-30 04:30 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-16 23:07 - 2020-05-30 03:41 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-16 23:07 - 2020-05-30 03:23 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-16 23:07 - 2020-05-28 01:06 - 022364856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-16 23:07 - 2020-05-28 01:06 - 019796328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-16 23:07 - 2020-05-20 17:25 - 001384648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 007362312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-16 23:07 - 2020-05-20 17:21 - 002170784 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001662512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001062344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 001135696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 000806200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 14:48 - 025755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-06-16 23:07 - 2020-05-20 14:27 - 002911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-06-16 23:07 - 2020-05-20 14:25 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 005499392 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 000785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-16 23:07 - 2020-05-20 13:56 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-16 23:07 - 2020-05-20 13:52 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 13:50 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 13:46 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 13:44 - 001124800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001560272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001214720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 000548440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000614056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 015478784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 13:35 - 002132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 13:34 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-16 23:07 - 2020-05-20 13:26 - 001756672 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 13:23 - 004859392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-06-16 23:07 - 2020-05-20 13:12 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-06-16 23:07 - 2020-05-20 13:01 - 000801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-16 23:07 - 2020-05-20 13:00 - 020291584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-16 23:07 - 2020-05-20 12:53 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 12:44 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-16 23:07 - 2020-05-20 12:40 - 002304000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-06-16 23:07 - 2020-05-20 12:34 - 000653824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-16 23:07 - 2020-05-20 12:21 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-16 23:07 - 2020-05-20 12:18 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 12:16 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 12:14 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 12:11 - 004111872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-06-16 23:07 - 2020-05-20 12:08 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 12:06 - 013861888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-16 23:07 - 2020-05-20 12:06 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-16 23:07 - 2020-05-20 12:01 - 001494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 11:50 - 004387328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-06-16 23:07 - 2020-05-20 11:47 - 001341952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-06-16 23:07 - 2020-05-20 11:46 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-16 23:07 - 2020-05-13 19:49 - 001368592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-06-16 23:07 - 2020-05-13 03:23 - 000414624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-16 23:07 - 2020-05-13 03:23 - 000373888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-16 23:07 - 2020-05-13 01:37 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-12 11:47 - 000466840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-16 23:07 - 2020-05-12 11:46 - 000415240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-16 23:07 - 2020-05-12 08:42 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-10 11:24 - 001311768 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-16 23:07 - 2020-05-10 06:36 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-06-16 23:07 - 2020-05-10 06:23 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 06:20 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-16 23:07 - 2020-05-10 06:15 - 003331584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-16 23:07 - 2020-05-10 06:03 - 001040384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-16 23:07 - 2020-05-10 05:56 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 05:53 - 003640320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-16 23:07 - 2020-05-10 05:53 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-16 23:07 - 2020-05-10 05:47 - 000936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-16 23:07 - 2020-05-10 05:25 - 001085952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2020-06-16 23:07 - 2020-05-10 05:23 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-06-16 23:07 - 2020-05-10 05:17 - 014533120 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-16 23:07 - 2020-05-10 05:09 - 012880384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-16 23:07 - 2020-05-01 16:17 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-16 23:07 - 2020-05-01 16:15 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001737520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001500888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-06-13 17:20 - 2020-06-13 17:20 - 000000000 ____D C:\Users\Milan\Documents\Ashampoo Burning Studio 21
2020-06-12 21:18 - 2020-06-12 21:18 - 000002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-11 10:37 - 2020-06-11 10:37 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-02 23:20 - 2020-06-02 23:20 - 000011608 _____ C:\Users\Milan\Downloads\e1af1ca0dfadad6a8e69540c5d445aa9e4970ec9.dlc
2020-05-30 13:01 - 2020-06-27 21:06 - 000001161 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2020-05-30 13:01 - 2020-06-16 21:30 - 000000374 _____ C:\Users\Milan\.vivaldi_reporting_data
2020-05-30 13:01 - 2020-05-30 13:01 - 000000000 ____D C:\Users\Milan\AppData\Local\Vivaldi
2020-05-30 12:59 - 2020-05-30 13:00 - 063187528 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.0.1874.38.x64.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-29 20:07 - 2020-05-08 20:50 - 000473834 ____H C:\Users\Milan\drlog.txt
2020-06-29 19:20 - 2014-04-29 21:30 - 000000000 ____D C:\Users\Milan\Documents\Soubory aplikace Outlook
2020-06-29 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-06-29 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-06-29 15:31 - 2014-03-18 17:33 - 000024112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-29 15:31 - 2014-03-18 16:54 - 000018184 _____ C:\WINDOWS\system32\perfh005.dat
2020-06-29 15:31 - 2014-03-18 16:54 - 000007220 _____ C:\WINDOWS\system32\perfc005.dat
2020-06-29 15:31 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2020-06-28 23:41 - 2014-05-05 21:22 - 000000000 ____D C:\Hobby-téka
2020-06-28 15:39 - 2016-10-14 18:11 - 000000000 ____D C:\Users\Milan\AppData\Roaming\DesktopOK
2020-06-28 15:03 - 2014-04-30 21:23 - 000000000 ____D C:\Users\Milan\Desktop\NÁSTROJE
2020-06-28 11:36 - 2014-04-28 21:19 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2134351818-1356353880-2322332928-1001
2020-06-28 10:58 - 2019-07-07 21:21 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-06-28 10:07 - 2016-11-21 23:06 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\Mozilla
2020-06-28 10:02 - 2014-04-29 21:48 - 000000000 ____D C:\Users\Milan\AppData\Local\JDownloader v2.0
2020-06-28 09:48 - 2017-10-26 20:17 - 000003648 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-06-28 09:47 - 2014-04-29 01:24 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2020-06-28 09:46 - 2014-04-20 01:12 - 000000000 ____D C:\ProgramData\NVIDIA
2020-06-28 09:46 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-28 09:42 - 2015-09-11 17:35 - 000000000 ____D C:\AdwCleaner
2020-06-27 23:38 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM
2020-06-27 09:43 - 2014-04-29 20:29 - 000000000 ____D C:\Users\Milan
2020-06-26 18:57 - 2015-09-03 20:46 - 000000000 ____D C:\Users\Milan\AppData\Local\CrashDumps
2020-06-26 18:13 - 2014-05-18 20:15 - 000000000 ____D C:\Program Files (x86)\Opera
2020-06-24 20:54 - 2014-04-30 22:13 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-24 20:25 - 2014-05-04 19:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\XnViewMP
2020-06-24 10:36 - 2018-08-17 18:47 - 000000000 ____D C:\Users\Milan\AppData\Local\Deployment
2020-06-24 10:36 - 2018-07-27 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-06-24 10:35 - 2018-07-27 22:17 - 000000000 ____D C:\Program Files\Logitech
2020-06-24 10:33 - 2018-01-18 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-06-24 10:33 - 2015-07-18 12:03 - 000000000 ____D C:\Program Files (x86)\Java
2020-06-24 10:28 - 2017-04-08 14:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\MusicBee
2020-06-23 20:33 - 2020-04-27 19:40 - 000000801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Altap Salamander (x64).lnk
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Mp3tag
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2020-06-23 17:43 - 2014-04-20 01:17 - 000000000 ____D C:\ProgramData\Temp
2020-06-23 17:42 - 2015-05-06 22:04 - 000000000 ____D C:\Users\Milan\AppData\Roaming\VideoReDo-TVSuite5
2020-06-23 17:28 - 2019-06-18 20:03 - 000000873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Basilisk.lnk
2020-06-23 17:19 - 2020-04-07 02:00 - 000000000 ____D C:\Program Files (x86)\Kerish Doctor
2020-06-23 17:08 - 2014-12-24 20:37 - 000000000 ____D C:\Users\Milan\AppData\Roaming\foobar2000
2020-06-23 15:53 - 2020-02-01 21:28 - 000000000 ____D C:\Users\Milan\AppData\Local\Ashampoo Backup
2020-06-23 15:41 - 2014-04-29 22:03 - 000000000 ____D C:\ProgramData\Ashampoo
2020-06-23 15:24 - 2017-04-06 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM
2020-06-23 15:24 - 2014-04-30 21:30 - 000000881 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2020-06-23 13:11 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-06-23 09:49 - 2017-10-07 17:29 - 000000000 ____D C:\UsbFix
2020-06-23 09:49 - 2014-05-11 16:34 - 000000000 ____D C:\Program Files (x86)\Canon
2020-06-23 09:49 - 2014-05-11 13:26 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2020-06-23 09:49 - 2014-04-30 22:12 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-23 09:49 - 2014-04-30 21:33 - 000000000 ____D C:\The KMPlayer
2020-06-23 09:49 - 2014-04-29 21:24 - 000000000 ____D C:\inetpub
2020-06-23 09:49 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\System
2020-06-22 20:30 - 2020-02-02 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AweClone 2.6
2020-06-22 20:30 - 2019-12-24 14:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hasleo WinToHDD
2020-06-22 20:30 - 2018-09-12 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Premium
2020-06-22 20:30 - 2018-09-10 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint 7
2020-06-22 20:30 - 2018-05-26 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Dude
2020-06-22 20:30 - 2017-05-22 22:15 - 000000000 ____D C:\ProgramData\Vso
2020-06-22 20:30 - 2017-05-09 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2020-06-22 20:30 - 2014-11-23 23:05 - 000000000 ____D C:\Users\Milan\Desktop\HRY
2020-06-22 20:30 - 2014-11-21 13:53 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-11-21 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-06-29 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2020-06-22 20:30 - 2014-04-30 21:33 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2020-06-20 08:46 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2020-06-20 00:26 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-16 23:10 - 2013-08-22 17:36 - 000000000 ___RD C:\WINDOWS\ToastData
2020-06-16 23:10 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2020-06-16 23:09 - 2018-05-26 15:06 - 000000000 ____D C:\Users\Milan\AppData\Roaming\GlarySoft
2020-06-16 23:02 - 2018-05-26 15:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-06-16 23:02 - 2014-04-28 21:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-06-14 10:54 - 2020-04-17 18:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\vlc
2020-06-13 15:53 - 2014-04-28 21:31 - 000000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-06-09 20:21 - 2016-04-08 11:21 - 000004480 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-06-09 20:21 - 2014-09-10 21:27 - 000004372 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-06-09 20:04 - 2018-03-13 23:21 - 000004516 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-05 19:02 - 2014-04-20 01:18 - 000000000 ____D C:\ProgramData\install_clap
2020-06-05 19:02 - 2013-09-25 21:07 - 000000000 ____D C:\SWSETUP
2020-06-03 19:46 - 2014-04-28 21:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Adobe
2020-06-02 08:10 - 2014-03-18 17:24 - 002476032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
==================== Files in the root of some directories ========
2017-10-07 17:25 - 2017-10-07 17:25 - 000195296 ____N () C:\Users\Milan\comcat5.dll
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ () C:\Program Files (x86)\installation_status.json
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json.backup
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ () C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ () C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ () C:\Program Files (x86)\Resources.pri
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ () C:\Program Files (x86)\server_tracking_data
2017-08-02 20:18 - 2017-08-02 20:20 - 000099384 ____N () C:\Users\Milan\AppData\Roaming\inst.exe
2017-08-02 20:18 - 2017-08-02 20:20 - 000007859 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.cat
2017-08-02 20:18 - 2017-08-02 20:20 - 000001167 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.inf
2017-08-02 20:18 - 2017-08-02 20:20 - 000000033 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.log
2017-08-02 20:18 - 2017-08-02 20:20 - 000082816 ____N (VSO Software) C:\Users\Milan\AppData\Roaming\pcouffin.sys
2018-10-07 20:41 - 2018-10-07 20:41 - 000000000 ____N () C:\Users\Milan\AppData\Local\oobelibMkey.log
2014-11-21 02:36 - 2014-11-21 02:36 - 000000017 ____N () C:\Users\Milan\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2020-06-23 16:09
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-06-2020
Ran by Milan (29-06-2020 20:24:11)
Running from C:\Users\Milan\Desktop
Windows 8.1 (Update) (X64) (2014-04-29 18:34:23)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2134351818-1356353880-2322332928-500 - Administrator - Disabled)
Guest (S-1-5-21-2134351818-1356353880-2322332928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2134351818-1356353880-2322332928-1005 - Limited - Enabled)
Milan (S-1-5-21-2134351818-1356353880-2322332928-1001 - Administrator - Enabled) => C:\Users\Milan
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.)
Aktualizace NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.) Hidden
Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.)
Altap Salamander 4.0 (x64) (HKLM\...\Altap Salamander 4.0 (x64)) (Version: 4.0 - ALTAP)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{62CB44B2-8007-DBB2-1CBA-5CB7309EB3C3}) (Version: 10.1.17134.12 - Microsoft) Hidden
Ashampoo Burning Studio 21 (HKLM-x32\...\{91B33C97-3390-FD9A-8E0F-3F6BA7865E46}_is1) (Version: 21.5.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 15 (HKLM-x32\...\{0A11EA01-E0CE-916E-BC94-74670FA71836}_is1) (Version: 15.1.0 - Ashampoo GmbH & Co. KG)
ASUS Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.5000 - ASUS)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 9.4.0.0 - Auslogics Labs Pty Ltd)
Autorun Organizer verze 3.02 (HKLM-x32\...\Autorun Organizer_is1) (Version: 3.02 - ChemTable Software)
Basilisk 52.9.2020.06.10 (x64 en-US) (HKLM\...\Basilisk 52.9.2020.06.10 (x64 en-US)) (Version: 52.9.2020.06.10 - Moonchild Productions)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.24.36 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.20.114 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG7100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series) (Version: 1.01 - Canon Inc.)
Canon MG7100 series On-screen Manual (HKLM-x32\...\Canon MG7100 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
CD/Spectrum Pro (HKLM-x32\...\CDSpectrum Pro) (Version: CDSPro v2006.0204 - Synthesoft Corporation)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
CrystalDiskInfo 8.4.2 (64-bit) (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6522 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.3003 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4016 - CyberLink Corp.)
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.2011 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DiskInternals Partition Recovery (HKLM-x32\...\DiskInternals Partition Recovery) (Version: 8.0.1 - DiskInternals Research)
Driver Easy 5.6.14 (HKLM\...\DriverEasy_is1) (Version: 5.6.14 - Easeware)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
EO - ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #8) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #3 (HKLM-x32\...\ST6UNST #10) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #4 (HKLM-x32\...\ST6UNST #11) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #5 (HKLM-x32\...\ST6UNST #15) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) (HKLM-x32\...\ST6UNST #13) (Version: - )
EO - ActiveX (HKLM-x32\...\ST6UNST #3) (Version: - )
e-Saver version 3.1 (HKLM-x32\...\{C97CA73D-E96B-4B42-830E-D0F7BD780FB8}_is1) (Version: 3.1 - AOC)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Fonts version 1.0 (HKLM-x32\...\{95E6D335-B7B1-445B-9B58-64818030390E}_is1) (Version: 1.0 - MSTech (Modern Software Technology))
foobar2000 v1.5.4 (HKLM-x32\...\foobar2000) (Version: 1.5.4 - Peter Pawlowski)
Fotogaléria (HKLM-x32\...\{9093B0D5-EA59-4C9E-A2E3-CC130138DFCD}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Freemake Audio Converter verze 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Freemake Video Converter verze 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Mixbyte Inc.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.54.5318 - GOM & Company)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.116 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
HARDiNFO 8 PRO (HKLM\...\{708C3C8B-A637-4AF5-9749-8F2914CA6B23}) (Version: 8.0 - Ultimate Systems) Hidden
HARDiNFO 8 PRO (HKLM-x32\...\HARDiNFO 8 PRO) (Version: 8.0 - Ultimate Systems)
Hewlett-Packard ACLM.NET v1.2.2.1 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HOBBY-téka 4.00 (HKLM-x32\...\HOBBY-téka 4.00) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #16) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #18) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #19) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #12) (Version: - )
HOBBY-téka ActiveX (HKLM-x32\...\ST6UNST #7) (Version: - )
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP Quick Start (HKLM-x32\...\{574F0207-8E98-46CD-8F79-318348C98C46}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6668.4491 - Hewlett-Packard)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
HWiNFO64 Version 4.36 (HKLM\...\HWiNFO64_is1) (Version: 4.36 - Martin Malík - REALiX)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6435.0 - IDT)
i-Menu version 4.1.3 (HKLM-x32\...\{0121C0BD-363C-4B1D-8B64-FE7681A37D0A}_is1) (Version: 4.1.3 - AOC)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.40 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.40 - Dominik Reichl)
Kerish Doctor 2020 (HKLM-x32\...\{EF70A54F-E09E-4570-8F21-C7674CDDB5B6}_is1) (Version: 4.80 - Kerish Products)
Kits Configuration Installer (HKLM-x32\...\{6F502640-B753-C101-FFA5-B38C3FA5B29A}) (Version: 10.1.17134.12 - Microsoft) Hidden
LibreOffice 6.4.4.2 (HKLM\...\{F00C391B-6092-40E7-9ECD-144933865571}) (Version: 6.4.4.2 - The Document Foundation)
LockHunter 3.3, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.20.329 - Logitech)
Logitech SetPoint 6.69 (HKLM\...\sp6) (Version: 6.69.126 - Logitech)
MakeMKV v1.15.1 (HKLM-x32\...\MakeMKV) (Version: v1.15.1 - GuinpinSoft inc)
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Mediaport (HKLM-x32\...\Mediaport) (Version: - )
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft .NET Framework 4.7.2 SDK (HKLM-x32\...\{229FC339-A2DE-46C7-8AB7-E64BD2FD9592}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{90FBABBB-0CFC-469F-971F-0A1F11F5AF2E}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.12430.20264 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MKVToolNix 40.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 40.0.0 - Moritz Bunkus)
Monkey's Audio (HKLM-x32\...\Monkey's Audio_is1) (Version: - )
Movie Maker (HKLM-x32\...\{8E6E8CBB-8E58-493C-943F-4664F5F2FEDB}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{9EDF46F0-2D4E-4C00-B2B6-0660666E9F60}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{A035950F-15BA-41C0-9D8F-165FC0536012}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 66.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 66.0.2 (x64 cs)) (Version: 66.0.2 - Mozilla)
Mozilla Firefox 77.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 77.0.1 (x64 en-US)) (Version: 77.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0.2 - Mozilla)
MSI Development Tools (HKLM-x32\...\{1E406B46-65F4-91CE-65DA-DB66D5443B68}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
MSTech Folder Icon Pro (HKLM-x32\...\{C8483ED0-185F-45D7-9AC4-DD751942B9ED}) (Version: 2.9.3.750 - MSTech (Modern Software Technology))
MultiCommander (x64) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MultiCommander x64) (Version: 8.3.0.2469 - Mathias Svensson)
Nero CoverDesigner (HKLM-x32\...\{12391E45-23F7-4DEA-ABAE-2CA69CA87D92}) (Version: 12.0.02300 - Nero AG)
NVIDIA Ovladač 3D Vision 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.73 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.73 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OCCT 4.4.0 (HKLM-x32\...\OCCT) (Version: 4.4.0 - Ocbase.com)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Omron Health Management Software (HKLM-x32\...\{E01DFD45-F13A-4F12-AC38-8EEE2163E52E}) (Version: 1.60.0003 - Omron Healthcare)
Opera Stable 69.0.3686.36 (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Opera 69.0.3686.36) (Version: 69.0.3686.36 - Opera Software)
Ovládací panel NVIDIA 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.73 - NVIDIA Corporation) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM\...\{14EEF044-2FC6-40AA-9285-F430B3D90EF6}) (Version: 17.10.2.5049 - Paragon Software) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM-x32\...\{f541ba6a-92bf-466b-b956-5efa58ffe017}) (Version: 17.10.2.5049 - Paragon Software GmbH)
Paragon UIM (HKLM\...\{06B4D67B-9ECB-41E5-B4C1-92F529BB703D}) (Version: 24.65.0.487 - Paragon Software) Hidden
PeaZip 6.6.0 (HKLM-x32\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.6.0 - Giorgio Tani)
PeaZip 6.8.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.8.0 - Giorgio Tani)
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30153 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.0.6208 - CyberLink Corp.) Hidden
Registrace uživatele zařízení Canon MG7100 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG7100 series) (Version: - Canon Inc.)
Relax-KEŠ ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #9) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #1) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #2) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #4) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #6 (HKLM-x32\...\ST6UNST #6) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #7 (HKLM-x32\...\ST6UNST #17) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #14) (Version: - )
Relax-KEŠ ActiveX (HKLM-x32\...\ST6UNST #5) (Version: - )
SDK ARM Additions (HKLM-x32\...\{346B2C02-CC0D-6E09-8B9D-CAA2821473CF}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{825784BB-114D-ADB3-B65F-E1EB2A63C3BC}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK Debuggers (HKLM-x32\...\{8238CD59-617A-FE41-8AB4-A88AF3160849}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Soft Organizer verze 7.52 (HKLM-x32\...\Soft Organizer_is1) (Version: 7.52 - ChemTable Software)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - )
Synology Data Replicator 3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TechniPort Plus Beta (HKLM-x32\...\TechniPort Plus Beta) (Version: 0.9.5.4_beta - TechniSat)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
TotalAudioConverter (HKLM-x32\...\Total Audio Converter_is1) (Version: 5.1 - Softplicity, Inc.)
TVDownloader (HKLM-x32\...\TVDownloader) (Version: 1.18.0.0 - XPloRR)
Universal CRT Extension SDK (HKLM-x32\...\{18ABFDF6-23D9-87E6-015E-FFE3C7F153D5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{0D6B41AF-D117-8944-A059-3F9346A896C5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{B6273353-8B54-1F89-1A16-5940925104CE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{BA6F1D53-C3F2-F9D5-80CE-CEF608E36AD3}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{6E43CA0C-046E-4F38-A0A2-3B1BA139B661}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{775886B8-DEE1-CB20-8A94-FC09FA54ECF6}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Unlocker (HKLM-x32\...\{5577A25D-E4FE-4BFB-A660-E0D766BC4EDD}) (Version: 1.9.2 - ajua Custom Installers)
VDownloader 4.5.2902 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited)
VideoReDo TVSuite Version 5.4.84.771 (HKLM-x32\...\VideoReDo5_is1) (Version: - DRD Systems, Inc.)
Vivaldi (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Vivaldi) (Version: 3.1.1929.45 - Vivaldi Technologies AS.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
VSO Media Player 1.6.12.521 (HKLM-x32\...\{59F1E8E6-60EC-4CC1-8C72-E0F38E585215}_is1) (Version: 1.6.12.521 - VSO Software)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Web Components (HKLM-x32\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: - )
WhoCrashed 6.65 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
WinAppDeploy (HKLM-x32\...\{5AD4A604-B476-1578-2A20-6B02FC6258BE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Mobile Connectivity Tools 10.0.15254.0 - Desktop x86 (HKLM-x32\...\{833F02C5-2C39-49F6-BD64-91D351081274}) (Version: 10.1.15254.1 - Microsoft Corporation)
Windows SDK AddOn (HKLM-x32\...\{E77C2F78-6089-48F8-89DF-DDF2850DFFD9}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17134.12 (HKLM-x32\...\{5f83ccda-0498-4b97-a298-16a642bf49f2}) (Version: 10.1.17134.12 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{389D182F-0ADA-5C7E-FF32-2573A821592C}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{C3776B36-B34E-00E2-3009-95A6F1870B58}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{965D1746-D94A-49B9-2A48-A14914CA3B57}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{84C6B91B-67DA-DDE3-86F1-87A3E307E8C1}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{3755CD99-C62E-3312-DDD3-29A4F259270D}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{729DA966-8590-2C1F-2178-16C1D32FD7FD}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{F1C18506-3168-A9D9-E2D9-D23A512A326E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{4095D263-6A13-78D3-DEDA-AA3452011F6E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{C3243E23-2EB6-4419-2692-40944923B112}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WPT Redistributables (HKLM-x32\...\{F28E1B8B-1F92-80AF-710B-3E0191A25917}) (Version: 10.1.17134.12 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{711802CA-302C-6805-6D1F-D5CEF535F15E}) (Version: 10.1.17134.12 - Microsoft) Hidden
XnViewMP 0.64 (HKLM\...\XnViewMP_is1) (Version: 0.64 - Gougelet Pierre-e)
XYplorer 15.90 (HKLM-x32\...\XYplorer) (Version: 15.90 - Donald Lessau)
Packages:
=========
Box for Windows 8 -> C:\Program Files\WindowsApps\134D4F5B.Box_2.1.4.4_neutral__2qk4zy5s3qmee [2018-02-18] (Box, Inc.)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-03-07] (Canon Inc.)
HP Registration -> C:\Program Files\WindowsApps\AD2F1837.HPRegistration_1.2.1.166_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
Hry -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Hudba -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview_1.0.9431.0_neutral__8wekyb3d8bbwe [2018-02-18] (Rozšíření Microsoft Platform)
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.Preview.1_1.0.9345.0_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Windows Library for JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview.Internal_1.0.9385.3_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Finance -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Gurmánský svět -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Norton Studio -> C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp [2018-02-18] (Symantec Corporation)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2018-02-18] (Skype) [MS Ad]
Video -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Výběr prohlížeče -> C:\WINDOWS\BrowserChoice [2014-04-29] (Microsoft Corporation)
Začínáme se systémem Windows 8 -> C:\Program Files\WindowsApps\AD2F1837.GettingStartedwithWindows8_1.6.0.0_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> E:\Program Files (x86)\Vivaldi\Application\3.1.1929.45\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6722448 2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers1: [TotalConverter] -> {280CFDE1-1354-4431-92F3-03073BA593FB} => C:\Program Files (x86)\TotalAudioConverter\axTotalConverter64.dll [2014-03-14] (Softplicity) [File not signed] [File is in use]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers4: [FolderIconProMnu] -> {ee6b78fb-091b-3896-8982-9987a45d50bb} => E:\Program Files (x86)\MSTech Folder Icon Pro\FolderIconProMnu.DLL [2019-03-02] (MSTech (Modern Software Technology)) [File not signed] [File is in use]
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> C:\ProgramData\Ashampoo\YourDeals.exe () -> hxxp://linktarget.ashampoo.com/linktarget/?target=marketplace&edition=eid=15445&utm_medium=desktop&x-pos=Metro
==================== Loaded Modules (Whitelisted) =============
2020-06-28 10:02 - 2020-06-28 10:02 - 004078962 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll
2020-06-28 10:02 - 2020-06-28 10:02 - 000566439 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll
2020-06-28 09:47 - 2020-06-28 09:47 - 000192512 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\Temp\sfamcc00001.dll
2020-06-28 09:47 - 2020-06-28 09:47 - 000158720 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\Temp\sfareca00001.dll
2020-03-27 18:50 - 2020-03-27 18:50 - 000398336 _____ (Florian Heidenreich) [File not signed] [File is in use] E:\Program Files (x86)\Mp3tagShell64.dll
2020-06-28 10:02 - 2020-06-28 10:02 - 000198144 ____N (Java(TM) Native Access (JNA)) [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\jna\jna971343832782650155.dll
2018-04-19 22:31 - 2018-04-19 22:31 - 000267776 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL
2018-02-18 18:48 - 2017-12-19 04:51 - 000874880 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2018-02-18 18:48 - 2017-12-19 04:51 - 000339072 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2013-08-07 10:49 - 2013-08-07 10:49 - 000602112 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\devctrl.dll
2013-08-06 14:52 - 2013-08-06 14:52 - 001281536 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\vssWin764.dll
2012-12-10 15:03 - 2012-12-10 15:03 - 001198080 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] [File is in use] c:\Program Files (x86)\Intel\iCLS Client\LIBEAY32.dll
2012-12-10 15:03 - 2012-12-10 15:03 - 000303104 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] [File is in use] c:\Program Files (x86)\Intel\iCLS Client\ssleay32.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2020-06-29 19:29 - 000000000 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\VDownloader;C:\Program Files\ASUS\Bluetooth Software\;C:\Program Files\ASUS\Bluetooth Software\syswow64;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\HP\HP_Orkney_Stones.jpg
DNS Servers: 109.72.0.1 - 109.72.2.30
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{B384870C-5BE3-4735-97F2-5C7F4D5C1F1E}] => (Allow) LPort=1900
FirewallRules: [{C5D7703D-8AEB-4EA2-9201-6B27121E8F5C}] => (Allow) LPort=2869
FirewallRules: [{1FD973EA-C3CE-4556-A571-2C6D7618F862}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{52661EC0-718E-4A10-B226-E402B8BA8552}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9B768B84-2E68-44C0-9C18-48ED8811FB1B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6BE5FF36-FC45-4B96-81B5-8D58DBC93DDF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0410599E-4774-431E-A310-5411BADF2955}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{33249233-4380-4407-AE78-79F3222250BF}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{946C85CF-AD28-4698-89A2-451103BA6275}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{CF42E03B-7A5F-4742-91E9-CDA2D995E37B}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{BDFF5D59-DA54-4CC6-866A-1ABD6F2BD361}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{7188B0BC-8686-4FDF-869F-2F7865AEC1DF}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{16A2A0B4-C95D-4780-A4C5-7A74105C165F}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{3CA6EE64-D75A-4954-931D-A1D239377DD5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{478BC89C-8B49-4371-9729-1F6432AAD5E9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{2D7D2949-C15C-42FD-B6B0-BD3903A6D94C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{C161A352-112A-4538-9333-830F26014802}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{7DDBA0CE-B419-4EF2-BDA1-C217CC705F17}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9144AD77-433A-4B1B-8D92-58C02259F298}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C8A1B26A-E1C3-47DB-8754-43BAD054FCD0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F566AE56-7E66-44D3-804D-4149275C4394}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BAB750B0-D53E-48EE-BE80-0BDB26C79A15}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3AE55082-D404-45CF-B593-B97A1ACB03B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F57D2F83-1AF5-4767-A155-DA1E3BB70BD8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9BAA4FA-B27F-463D-BD6F-D5E23B76F7BF}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{EB4C43AF-30CD-4477-BEBC-07F64B46BD98}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{C1F6B667-11F8-451B-BDF7-FF029BC1E9D1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{87C55617-9CED-4DDA-BAEF-B13875FDE3AF}] => (Allow) C:\Program Files (x86)\69.0.3686.36\opera.exe (Opera Software AS -> Opera Software)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe] => Enabled:Flashget3
==================== Restore Points =========================
28-06-2020 10:48:16 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (06/29/2020 08:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 07:33:29 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
Error: (06/29/2020 07:05:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 06:31:58 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
Error: (06/29/2020 06:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 05:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 04:51:12 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
Error: (06/29/2020 04:47:29 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
System errors:
=============
Error: (06/29/2020 08:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 07:05:10 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 06:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 05:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 04:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 03:56:29 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 03:28:58 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXvwgnrrhcka99admvy9fqan3zpdmgg69a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/28/2020 11:45:27 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
==================== Memory info ===========================
BIOS: AMI 80.20 03/25/2014
Motherboard: Hewlett-Packard 2AF3
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 39%
Total physical RAM: 16337.16 MB
Available physical RAM: 9955.95 MB
Total Virtual: 22993.16 MB
Available Virtual: 12689.17 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:103.83 GB) (Free:24.56 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Recovery Image) (Fixed) (Total:13.49 GB) (Free:1.6 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (DATADRIVE) (Fixed) (Total:3725.9 GB) (Free:3631.86 GB) NTFS
Drive f: (Bowling for Columbine) (CDROM) (Total:7.62 GB) (Free:0 GB) UDF
Drive h: () (Fixed) (Total:1397.26 GB) (Free:1257.67 GB) NTFS
Drive l: () (Fixed) (Total:1397.26 GB) (Free:118.68 GB) NTFS
\\?\Volume{abe04f1f-1613-40cd-8aa4-0671b7515e52}\ () (Fixed) (Total:0 GB) (Free:0 GB)
\\?\Volume{b49f7e97-af19-4680-ad83-9b7505e9a462}\ () (Fixed) (Total:0 GB) (Free:0 GB)
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 1AD3749A)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 3 (Size: 1397.3 GB) (Disk ID: 4AB79538)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==========================================================
Disk: 4 (Size: 1397.3 GB) (Disk ID: 40505CCB)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Ran by Milan (administrator) on HP (Hewlett-Packard 810-000ec) (29-06-2020 20:23:14)
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan
Platform: Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AppWork GmbH -> AppWork GmbH) C:\Users\Milan\AppData\Local\JDownloader v2.0\JDownloader2.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\ActionCenter.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabMakePortable.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabReports.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcr.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\btwdins.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <36>
(GuinpinSoft inc) [File not signed] [File is in use] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) [File not signed] [File is in use] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Josh Mayfield -> UltimateOutsider) C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe
(Konstantin Polyakov IP -> ) C:\Program Files (x86)\Autorun Organizer\Reg64Call.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Mixbyte Inc -> Ellora Assets Corp.) E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Mixbyte Inc -> Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(Nenad Hrg SoftwareOK) [File not signed] [File is in use] C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(OOO AMA -> Kerish Products) C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Synology Inc. -> ) [File not signed] [File is in use] C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Synology Inc. -> ) C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
(Synology Inc. -> Synology Inc.) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Vivaldi Technologies AS -> Vivaldi Technologies AS) E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe [4559944 2016-01-24] (Josh Mayfield -> UltimateOutsider)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [549032 2020-06-23] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2019-01-30] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2020-04-27] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [DesktopOK] => C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe [233472 2016-10-13] (Nenad Hrg SoftwareOK) [File not signed] [File is in use]
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Data Replicator 3] => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Vivaldi Update Notifier] => E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe [1859656 2020-06-24] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG7100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBR.DLL [30208 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG7100 series: C:\WINDOWS\system32\CNMLMBR.DLL [391168 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\ASUS\Bluetooth Software\\BtwCP.dll [2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-08-12]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ASUS\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
BootExecute: autocheck autochk * sdnclean64.exe
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00A5A0B1-7556-4B18-B57E-038D8295F470} - System32\Tasks\Paragon Job (Back up partitions or disks to virtual containers) - {46beb899-e93a-43e0-491f-d9ff47346787} => C:\Program Files\Paragon Software\Hard Disk Manager 25 Anniversary LE\program\hdmengine_scriptsapp.exe [3537304 2019-11-22] (Paragon Software GmbH -> Paragon Software)
Task: {010157E6-86DD-4E1E-918F-B76D3128A5EF} - System32\Tasks\Kerish Doctor => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe [4904568 2020-06-18] (OOO AMA -> Kerish Products)
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {085B11DD-C1FF-4C59-988E-A3C0242FD180} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {0DA1BF58-DF15-468B-A92B-6AFF87379E22} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {12B9E8E0-063D-4A4D-80A6-2EE1AA903C9D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {17FD829C-813D-4D47-9688-332A6A5708B2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-téka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {2F5317B0-40DA-4281-9DB9-5D225BC8DC55} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1448832 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {40159E94-CCBF-466B-9FC0-8E3DEF3B9641} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4E7A0467-C9EE-40F1-A464-2B9134922C68} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {50701EEC-28E8-4637-93A1-ACEA149D8127} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {5E3E78EF-2FAF-458B-A22C-0AAEBCCEE74B} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag on Milan logon => C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe [3452280 2020-06-23] (Auslogics Labs Pty Ltd -> Auslogics)
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {67991882-52F0-4C8B-965E-31052A068347} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {6B519139-51D6-44D1-B396-483F551B4663} - System32\Tasks\Speedfan => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> )
Task: {6C24ED94-C837-4CE9-8ECF-7C48CF522415} - System32\Tasks\Synology Data Replicator 3-HP-Milan => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {77A64781-67AB-4B9F-97C1-829AAB06DD81} - System32\Tasks\Opera scheduled Autoupdate 1593188087 => C:\Program Files (x86)\launcher.exe [1509400 2020-06-22] (Opera Software AS -> Opera Software) <==== ATTENTION
Task: {7B7B2178-7A07-45BC-B2C1-819DAA6C17E4} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {930B96B9-27A0-4403-9751-03D727568671} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {9B80A8C1-CE2A-4B69-8BB0-7E8AFFDAC3FE} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2020-03-27] (Bitdefender SRL -> Bitdefender)
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A66240ED-7854-408B-BE4C-421A219F6205} - System32\Tasks\Autorun Organizer => C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe [10810816 2018-10-26] (Konstantin Polyakov IP -> Chemtable Software)
Task: {BE479DF2-7A43-4673-9831-1A968F6C2D71} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1A80A88-FAD6-4409-AE0E-BEA26ED8DDF2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C3EC7682-92EC-444E-80D8-C598376C1D42} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [3203480 2016-02-26] (Symantec Corporation -> Symantec Corporation)
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {D92C0A54-9000-44C5-8046-6C401EC688BB} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {E31E94EA-8ADB-42A9-BF83-812F81DCD152} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_pepper.exe [1454648 2020-06-09] (Adobe Inc. -> Adobe)
Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
Task: {FA8A9E9A-8A1B-4CA4-99AB-E7953BC61EBD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 109.72.0.1 109.72.2.30
Tcpip\..\Interfaces\{E2641B9C-4257-42E8-B3E4-FA4A8C923E89}: [DhcpNameServer] 109.72.0.1 109.72.2.30
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: kje70kdo.default
FF DefaultProfile: daneqr12.default-1581870394713
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default [2020-06-29]
FF user.js: detected! => C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js [2015-03-10]
FF DownloadDir: C:\Users\Milan\Desktop
FF Homepage: Mozilla\Firefox\Profiles\kje70kdo.default -> about:blank
FF Session Restore: Mozilla\Firefox\Profiles\kje70kdo.default -> is enabled.
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2020-06-13]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2020-06-13]
FF Extension: (Restart) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\Restart@schuzak.jp.xpi [2017-03-13] [Legacy]
FF Extension: (Session Sync) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\session-sync@gabrielivanica.com.xpi [2020-03-25]
FF Extension: (Youtube Watchmarker) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\yourect@coderect.com.xpi [2020-04-27]
FF Extension: (Linkification) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}.xpi [2015-07-26] [Legacy] [not signed]
FF Extension: (Video DownloadHelper) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-30]
FF Extension: (No Name) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-04-01]
FF Extension: (YouTube Flash Video Player) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi [2018-02-11]
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 [2020-06-28]
FF Homepage: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> about:home
FF Session Restore: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> is enabled.
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-05-04] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-05-17] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2019-02-26] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> E:\Program Files (x86)\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.) [File not signed] [File is in use]
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) [File not signed] [File is in use]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google Inc -> Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2016-02-29] (Nero AG -> Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2013-03-04] (HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. -> )
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-10-20] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2019-11-03] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-10-20] <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2019-11-03] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default [2020-06-29]
CHR Notifications: Default -> hxxps://keep.google.com; hxxps://www.facebook.com
CHR StartupUrls: Default -> "hxxp://www.auto.cz/"
CHR Extension: (ProxFlow) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2020-06-11]
CHR Extension: (YouTube WATCHED. Classic View) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aendhplcpcfjlebhcjfiapmoaiekpkba [2020-01-12]
CHR Extension: (Dokumenty) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-21]
CHR Extension: (Disk Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-08]
CHR Extension: (uBlock Origin) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-05-30]
CHR Extension: (Vyhledávání Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2020-05-17]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2018-07-27]
CHR Extension: (Session Buddy) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2020-05-10]
CHR Extension: (Adobe Acrobat) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-06-23]
CHR Extension: (Tabs Outliner) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl [2020-04-30]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2020-05-10]
CHR Extension: (Bitdefender Wallet) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2019-12-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-30]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-06-14]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-05-30]
CHR Extension: (Flash® Player for YouTube™) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lajdkhdcndkniopfefocbgbkofflagpm [2017-07-23]
CHR Extension: (Linkclump) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2020-06-23]
CHR Extension: (Clickable Links) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2016-05-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-18]
CHR Extension: (Gmail) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-24]
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\System Profile [2017-04-09]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
Opera:
=======
OPR StartupUrls: "hxxps://www.idnes.cz/","hxxps://www.seznam.cz/" ... vodajstvi/"
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-10-07] (Bitdefender SRL -> Bitdefender)
R2 btwdins; C:\Program Files\ASUS\Bluetooth Software\btwdins.exe [960368 2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe [8704 2019-09-29] (GuinpinSoft inc) [File not signed] [File is in use]
R2 Chemtable Startup Checking; C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe [9924368 2018-09-03] (Konstantin Polyakov IP -> Chemtable Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11096432 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [120392 2020-03-27] (Bitdefender SRL -> Bitdefender)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2020-02-25] (Mixbyte Inc -> Freemake)
R2 FreemakeVideoCapture; E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [17792 2019-05-17] (Mixbyte Inc -> Ellora Assets Corp.)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] [File is in use]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129336 2013-01-31] (Intel Corporation -> Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21256 2018-04-20] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [463856 2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1352120 2020-03-27] (Bitdefender SRL -> Bitdefender)
U3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-27] (Elaborate Bytes) [File not signed] [File is in use]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
R2 SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [384072 2013-10-09] (Synology Inc. -> )
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [170328 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2014-02-25] (Synology Inc. -> ) [File not signed] [File is in use]
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; "E:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE" /auditservice [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Co., Ltd. -> AnvSoft Inc.)
R0 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2106424 2020-06-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [757240 2020-06-23] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-02-14] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96616 2020-05-26] (Bitdefender SRL -> BitDefender)
R2 ei2c; C:\windows\system32\drivers\ei2c.sys [20784 2014-05-01] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-29] (Elaborate Bytes AG) [File not signed] [File is in use]
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-06-28] (Malwarebytes Corporation -> Malwarebytes)
R0 EUDSKCP; C:\WINDOWS\System32\drivers\EuDskCp.sys [74184 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R1 EUEUMDK; C:\WINDOWS\system32\drivers\EuEumDk.sys [23496 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [453344 2020-06-23] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2019-06-03] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\System32\DRIVERS\ignis.sys [196392 2019-09-16] (Bitdefender SRL -> Bitdefender)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-04-07] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [44448 2014-10-12] (EATON POWER QUALITY SAS -> hxxp://libusb-win32.sourceforge.net)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73368 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [131728 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
S3 MDA_NTDRV; C:\WINDOWS\system32\MDA_NTDRV.sys [21208 2013-02-25] (北京铠信神州科技有限责任公司 -> )
R2 mi2c; C:\windows\system32\drivers\mi2c.sys [20784 2016-07-27] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [551936 2014-01-05] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [638368 2020-05-04] (Bitdefender SRL -> Bitdefender)
R1 UimBus; C:\WINDOWS\System32\drivers\uimbus.sys [109504 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
R1 Uim_DEVIM; C:\WINDOWS\System32\drivers\uimdevim.sys [46016 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation -> Intel Corporation)
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-29 20:23 - 2020-06-29 20:23 - 002291712 _____ (Farbar) C:\Users\Milan\Desktop\FRST64.exe
2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion
2020-06-28 11:05 - 2020-06-28 11:05 - 000131728 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000073368 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000001943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-06-28 10:58 - 2020-06-28 10:58 - 000000000 ____D C:\Malwarebytes
2020-06-28 10:32 - 2020-06-28 10:32 - 001287032 _____ (CPUID, Inc. ) C:\Users\Milan\Downloads\hwmonitor_1.41.exe
2020-06-28 10:31 - 2020-06-28 10:31 - 001214288 _____ ( ) C:\Users\Milan\Downloads\hwmonitor_1.32.exe
2020-06-28 10:31 - 2020-06-28 10:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2020-06-28 10:31 - 2020-06-28 10:31 - 000000000 ____D C:\Program Files\CPUID
2020-06-28 09:47 - 2020-06-28 09:47 - 000001670 _____ C:\Users\Milan\Desktop\AdwCleaner[C00].txt
2020-06-28 09:40 - 2020-06-28 09:40 - 008402608 _____ (Malwarebytes) C:\Users\Milan\Desktop\adwcleaner_8.0.5.exe
2020-06-27 23:54 - 2020-06-29 20:23 - 000046192 _____ C:\Users\Milan\Desktop\FRST.txt
2020-06-27 23:54 - 2020-06-27 23:54 - 000050160 _____ C:\Users\Milan\Desktop\Addition.txt
2020-06-27 23:53 - 2020-06-27 23:54 - 000050157 _____ C:\Users\Milan\Downloads\Addition.txt
2020-06-27 23:52 - 2020-06-27 23:54 - 000078005 _____ C:\Users\Milan\Downloads\FRST.txt
2020-06-27 23:51 - 2020-06-29 20:23 - 000000000 ____D C:\FRST
2020-06-27 23:38 - 2020-06-27 23:38 - 000680512 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-27 19:05 - 2020-06-27 19:05 - 064618056 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.1.1929.45.x64.exe
2020-06-27 09:43 - 2020-06-27 09:43 - 000000000 ___HD C:\Users\Milan\.opera
2020-06-26 22:23 - 2020-06-26 22:23 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2020-06-26 22:22 - 2020-06-26 22:22 - 013547840 _____ (GuinpinSoft inc) C:\Users\Milan\Downloads\Setup_MakeMKV_v1.15.1.exe
2020-06-26 20:51 - 2020-06-26 20:51 - 000000000 ___HD C:\Users\Milan\Downloads\.opera
2020-06-26 20:13 - 2020-06-26 20:13 - 000000000 ___HD C:\Program Files (x86)\.opera
2020-06-26 18:14 - 2020-06-26 18:14 - 002294440 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup (1).exe
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ C:\Program Files (x86)\installation_status.json
2020-06-26 18:14 - 2020-06-26 18:14 - 000003980 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1593188087
2020-06-26 18:14 - 2020-06-26 18:14 - 000001083 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\Assets
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\69.0.3686.36
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ C:\Program Files (x86)\Resources.pri
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\opera autoupdate
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Program Files (x86)\opera autoupdate
2020-06-24 22:36 - 2020-06-24 22:39 - 000214102 _____ C:\Users\Milan\Downloads\Optimalizace trati, SŽ.pdf
2020-06-24 21:12 - 2020-06-24 21:12 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-06-24 18:22 - 2020-06-24 18:22 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2020-06-24 18:21 - 2020-06-24 18:21 - 041626504 _____ (DiskInternals Research) C:\Users\Milan\Downloads\Partition_Recovery.exe
2020-06-24 11:02 - 2020-06-24 11:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-06-24 11:01 - 2020-06-24 11:02 - 041824168 _____ C:\Users\Milan\Downloads\vlc-3.0.11-win64.exe
2020-06-24 10:34 - 2020-06-24 10:35 - 207277528 _____ (Logitech Inc.) C:\Users\Milan\Downloads\Options_8.20.329.exe
2020-06-24 10:33 - 2020-06-24 10:32 - 000114344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-06-24 10:31 - 2020-06-24 10:31 - 002066568 _____ (Oracle Corporation) C:\Users\Milan\Downloads\chromeinstall-8u251.exe
2020-06-23 22:45 - 2020-06-23 22:45 - 000001716 _____ C:\Users\Milan\Desktop\Games – zástupce.lnk
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\Program Files (x86)\Auslogics
2020-06-23 22:21 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\Downloads\opera autoupdate
2020-06-23 20:41 - 2020-06-23 20:41 - 009936128 _____ (Resplendence Software Projects Sp. ) C:\Users\Milan\Downloads\whocrashedSetup.exe
2020-06-23 20:41 - 2020-06-23 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2020-06-23 20:39 - 2020-06-23 20:39 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TVDownloader
2020-06-23 20:32 - 2020-06-23 20:32 - 008612792 _____ (ALTAP) C:\Users\Milan\Downloads\as40x64.exe
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json.backup
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ C:\Program Files (x86)\server_tracking_data
2020-06-23 20:27 - 2020-06-26 18:13 - 000000000 ____D C:\Program Files (x86)\68.0.3618.173
2020-06-23 20:27 - 2020-06-23 20:27 - 002464864 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup.exe
2020-06-23 19:57 - 2020-06-29 20:00 - 000000304 _____ C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job
2020-06-23 19:57 - 2020-06-23 19:57 - 000002856 _____ C:\WINDOWS\system32\Tasks\Synology Data Replicator 3-HP-Milan
2020-06-23 18:16 - 2020-06-23 18:16 - 000000000 ___HD C:\Users\Milan\Desktop\DEATH DEALER (CAN)
2020-06-23 17:46 - 2020-06-23 17:46 - 000000787 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:45 - 2020-06-23 17:45 - 003419088 _____ C:\Users\Milan\Downloads\winrar-x64-590cz.exe
2020-06-23 17:42 - 2020-06-23 17:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoReDo
2020-06-23 17:41 - 2020-06-23 17:41 - 043786040 _____ (DRD Systems, Inc. ) C:\Users\Milan\Downloads\VRDTVSH264-5-4-84-771a.exe
2020-06-23 17:28 - 2020-06-23 17:28 - 000000000 ____D C:\Program Files\Basilisk
2020-06-23 17:25 - 2020-06-23 17:25 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer (1).exe
2020-06-23 17:20 - 2020-06-23 17:20 - 000003244 _____ C:\WINDOWS\system32\Tasks\Kerish Doctor
2020-06-23 17:19 - 2020-06-23 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerish Doctor
2020-06-23 17:19 - 2019-10-21 08:50 - 000061560 _____ (Kerish Products) C:\WINDOWS\SysWOW64\GPUTemp.dll
2020-06-23 17:17 - 2020-06-23 17:17 - 044625960 _____ (Kerish Products ) C:\Users\Milan\Downloads\Kerish_Doctor_4.80.exe
2020-06-23 17:08 - 2020-06-23 17:08 - 000000833 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2020-06-23 17:07 - 2020-06-23 17:07 - 004432054 _____ (foobar2000.org) C:\Users\Milan\Downloads\foobar2000_v1.5.4.exe
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\Users\Public\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\ProgramData\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 6.4
2020-06-23 16:39 - 2020-06-23 17:15 - 000001545 _____ C:\Users\Milan\Desktop\NOVINKY.lnk
2020-06-23 16:38 - 2020-06-23 16:44 - 313282560 _____ C:\Users\Milan\Downloads\LibreOffice_6.4.4_Win_x64.msi
2020-06-23 15:39 - 2020-06-23 15:40 - 092168968 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Milan\Downloads\ashampoo_backup_2020_12.06_sm.exe
2020-06-23 15:28 - 2020-06-23 17:15 - 000000729 _____ C:\Users\Milan\Desktop\DVD.lnk
2020-06-23 15:22 - 2020-06-23 15:22 - 027169792 _____ (GOM & Company) C:\Users\Milan\Downloads\GOMPLAYERGLOBALSETUP_CHROME.EXE
2020-06-23 15:22 - 2020-06-23 15:22 - 000000284 _____ C:\nsispromotion_log.txt
2020-06-23 15:18 - 2020-06-23 15:18 - 003571616 _____ C:\Users\Milan\Downloads\mp3tagv301setup.exe
2020-06-23 15:15 - 2020-06-23 15:15 - 000001561 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\burningstudio21.exe.lnk
2020-06-23 14:10 - 2020-06-23 14:10 - 002106424 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000757240 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000453344 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-06-23 12:50 - 2020-06-23 12:50 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer.exe
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\tmp
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Recuva
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Macrorit
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\SuperBird
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Secunia
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Seagate
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Omron Healthcare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Novel Games
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\FlashGet Network
2020-06-21 20:34 - 2020-06-21 20:34 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (2).pdf
2020-06-21 20:33 - 2020-06-21 20:33 - 000237213 _____ C:\Users\Milan\Downloads\D.1.2.1.5 Detaily.pdf.pdf
2020-06-18 18:19 - 2020-06-18 18:19 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (1).pdf
2020-06-18 18:18 - 2020-06-18 18:18 - 001701635 _____ C:\Users\Milan\Downloads\1394_001.pdf
2020-06-16 23:11 - 2020-06-01 20:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-16 23:11 - 2020-06-01 20:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-16 23:07 - 2020-06-02 07:18 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-16 23:07 - 2020-06-02 06:50 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-16 23:07 - 2020-06-02 06:44 - 001489408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:43 - 001464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2020-06-16 23:07 - 2020-06-02 06:35 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-16 23:07 - 2020-06-02 06:27 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:25 - 001204736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2020-06-16 23:07 - 2020-06-02 05:59 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-16 23:07 - 2020-06-02 05:47 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-16 23:07 - 2020-05-30 04:54 - 004168192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-16 23:07 - 2020-05-30 04:30 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-16 23:07 - 2020-05-30 03:41 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-16 23:07 - 2020-05-30 03:23 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-16 23:07 - 2020-05-28 01:06 - 022364856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-16 23:07 - 2020-05-28 01:06 - 019796328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-16 23:07 - 2020-05-20 17:25 - 001384648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 007362312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-16 23:07 - 2020-05-20 17:21 - 002170784 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001662512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001062344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 001135696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 000806200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 14:48 - 025755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-06-16 23:07 - 2020-05-20 14:27 - 002911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-06-16 23:07 - 2020-05-20 14:25 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 005499392 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 000785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-16 23:07 - 2020-05-20 13:56 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-16 23:07 - 2020-05-20 13:52 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 13:50 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 13:46 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 13:44 - 001124800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001560272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001214720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 000548440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000614056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 015478784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 13:35 - 002132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 13:34 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-16 23:07 - 2020-05-20 13:26 - 001756672 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 13:23 - 004859392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-06-16 23:07 - 2020-05-20 13:12 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-06-16 23:07 - 2020-05-20 13:01 - 000801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-16 23:07 - 2020-05-20 13:00 - 020291584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-16 23:07 - 2020-05-20 12:53 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 12:44 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-16 23:07 - 2020-05-20 12:40 - 002304000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-06-16 23:07 - 2020-05-20 12:34 - 000653824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-16 23:07 - 2020-05-20 12:21 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-16 23:07 - 2020-05-20 12:18 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 12:16 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 12:14 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 12:11 - 004111872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-06-16 23:07 - 2020-05-20 12:08 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 12:06 - 013861888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-16 23:07 - 2020-05-20 12:06 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-16 23:07 - 2020-05-20 12:01 - 001494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 11:50 - 004387328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-06-16 23:07 - 2020-05-20 11:47 - 001341952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-06-16 23:07 - 2020-05-20 11:46 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-16 23:07 - 2020-05-13 19:49 - 001368592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-06-16 23:07 - 2020-05-13 03:23 - 000414624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-16 23:07 - 2020-05-13 03:23 - 000373888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-16 23:07 - 2020-05-13 01:37 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-12 11:47 - 000466840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-16 23:07 - 2020-05-12 11:46 - 000415240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-16 23:07 - 2020-05-12 08:42 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-10 11:24 - 001311768 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-16 23:07 - 2020-05-10 06:36 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-06-16 23:07 - 2020-05-10 06:23 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 06:20 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-16 23:07 - 2020-05-10 06:15 - 003331584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-16 23:07 - 2020-05-10 06:03 - 001040384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-16 23:07 - 2020-05-10 05:56 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 05:53 - 003640320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-16 23:07 - 2020-05-10 05:53 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-16 23:07 - 2020-05-10 05:47 - 000936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-16 23:07 - 2020-05-10 05:25 - 001085952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2020-06-16 23:07 - 2020-05-10 05:23 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-06-16 23:07 - 2020-05-10 05:17 - 014533120 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-16 23:07 - 2020-05-10 05:09 - 012880384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-16 23:07 - 2020-05-01 16:17 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-16 23:07 - 2020-05-01 16:15 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001737520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001500888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-06-13 17:20 - 2020-06-13 17:20 - 000000000 ____D C:\Users\Milan\Documents\Ashampoo Burning Studio 21
2020-06-12 21:18 - 2020-06-12 21:18 - 000002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-11 10:37 - 2020-06-11 10:37 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-02 23:20 - 2020-06-02 23:20 - 000011608 _____ C:\Users\Milan\Downloads\e1af1ca0dfadad6a8e69540c5d445aa9e4970ec9.dlc
2020-05-30 13:01 - 2020-06-27 21:06 - 000001161 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2020-05-30 13:01 - 2020-06-16 21:30 - 000000374 _____ C:\Users\Milan\.vivaldi_reporting_data
2020-05-30 13:01 - 2020-05-30 13:01 - 000000000 ____D C:\Users\Milan\AppData\Local\Vivaldi
2020-05-30 12:59 - 2020-05-30 13:00 - 063187528 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.0.1874.38.x64.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-06-29 20:07 - 2020-05-08 20:50 - 000473834 ____H C:\Users\Milan\drlog.txt
2020-06-29 19:20 - 2014-04-29 21:30 - 000000000 ____D C:\Users\Milan\Documents\Soubory aplikace Outlook
2020-06-29 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-06-29 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-06-29 15:31 - 2014-03-18 17:33 - 000024112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-29 15:31 - 2014-03-18 16:54 - 000018184 _____ C:\WINDOWS\system32\perfh005.dat
2020-06-29 15:31 - 2014-03-18 16:54 - 000007220 _____ C:\WINDOWS\system32\perfc005.dat
2020-06-29 15:31 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2020-06-28 23:41 - 2014-05-05 21:22 - 000000000 ____D C:\Hobby-téka
2020-06-28 15:39 - 2016-10-14 18:11 - 000000000 ____D C:\Users\Milan\AppData\Roaming\DesktopOK
2020-06-28 15:03 - 2014-04-30 21:23 - 000000000 ____D C:\Users\Milan\Desktop\NÁSTROJE
2020-06-28 11:36 - 2014-04-28 21:19 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2134351818-1356353880-2322332928-1001
2020-06-28 10:58 - 2019-07-07 21:21 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-06-28 10:07 - 2016-11-21 23:06 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\Mozilla
2020-06-28 10:02 - 2014-04-29 21:48 - 000000000 ____D C:\Users\Milan\AppData\Local\JDownloader v2.0
2020-06-28 09:48 - 2017-10-26 20:17 - 000003648 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-06-28 09:47 - 2014-04-29 01:24 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2020-06-28 09:46 - 2014-04-20 01:12 - 000000000 ____D C:\ProgramData\NVIDIA
2020-06-28 09:46 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-28 09:42 - 2015-09-11 17:35 - 000000000 ____D C:\AdwCleaner
2020-06-27 23:38 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM
2020-06-27 09:43 - 2014-04-29 20:29 - 000000000 ____D C:\Users\Milan
2020-06-26 18:57 - 2015-09-03 20:46 - 000000000 ____D C:\Users\Milan\AppData\Local\CrashDumps
2020-06-26 18:13 - 2014-05-18 20:15 - 000000000 ____D C:\Program Files (x86)\Opera
2020-06-24 20:54 - 2014-04-30 22:13 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-24 20:25 - 2014-05-04 19:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\XnViewMP
2020-06-24 10:36 - 2018-08-17 18:47 - 000000000 ____D C:\Users\Milan\AppData\Local\Deployment
2020-06-24 10:36 - 2018-07-27 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-06-24 10:35 - 2018-07-27 22:17 - 000000000 ____D C:\Program Files\Logitech
2020-06-24 10:33 - 2018-01-18 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-06-24 10:33 - 2015-07-18 12:03 - 000000000 ____D C:\Program Files (x86)\Java
2020-06-24 10:28 - 2017-04-08 14:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\MusicBee
2020-06-23 20:33 - 2020-04-27 19:40 - 000000801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Altap Salamander (x64).lnk
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Mp3tag
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2020-06-23 17:43 - 2014-04-20 01:17 - 000000000 ____D C:\ProgramData\Temp
2020-06-23 17:42 - 2015-05-06 22:04 - 000000000 ____D C:\Users\Milan\AppData\Roaming\VideoReDo-TVSuite5
2020-06-23 17:28 - 2019-06-18 20:03 - 000000873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Basilisk.lnk
2020-06-23 17:19 - 2020-04-07 02:00 - 000000000 ____D C:\Program Files (x86)\Kerish Doctor
2020-06-23 17:08 - 2014-12-24 20:37 - 000000000 ____D C:\Users\Milan\AppData\Roaming\foobar2000
2020-06-23 15:53 - 2020-02-01 21:28 - 000000000 ____D C:\Users\Milan\AppData\Local\Ashampoo Backup
2020-06-23 15:41 - 2014-04-29 22:03 - 000000000 ____D C:\ProgramData\Ashampoo
2020-06-23 15:24 - 2017-04-06 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM
2020-06-23 15:24 - 2014-04-30 21:30 - 000000881 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2020-06-23 13:11 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-06-23 09:49 - 2017-10-07 17:29 - 000000000 ____D C:\UsbFix
2020-06-23 09:49 - 2014-05-11 16:34 - 000000000 ____D C:\Program Files (x86)\Canon
2020-06-23 09:49 - 2014-05-11 13:26 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2020-06-23 09:49 - 2014-04-30 22:12 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-23 09:49 - 2014-04-30 21:33 - 000000000 ____D C:\The KMPlayer
2020-06-23 09:49 - 2014-04-29 21:24 - 000000000 ____D C:\inetpub
2020-06-23 09:49 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\System
2020-06-22 20:30 - 2020-02-02 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AweClone 2.6
2020-06-22 20:30 - 2019-12-24 14:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hasleo WinToHDD
2020-06-22 20:30 - 2018-09-12 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Premium
2020-06-22 20:30 - 2018-09-10 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint 7
2020-06-22 20:30 - 2018-05-26 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Dude
2020-06-22 20:30 - 2017-05-22 22:15 - 000000000 ____D C:\ProgramData\Vso
2020-06-22 20:30 - 2017-05-09 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2020-06-22 20:30 - 2014-11-23 23:05 - 000000000 ____D C:\Users\Milan\Desktop\HRY
2020-06-22 20:30 - 2014-11-21 13:53 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-11-21 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-06-29 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2020-06-22 20:30 - 2014-04-30 21:33 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2020-06-20 08:46 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2020-06-20 00:26 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-16 23:10 - 2013-08-22 17:36 - 000000000 ___RD C:\WINDOWS\ToastData
2020-06-16 23:10 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2020-06-16 23:09 - 2018-05-26 15:06 - 000000000 ____D C:\Users\Milan\AppData\Roaming\GlarySoft
2020-06-16 23:02 - 2018-05-26 15:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-06-16 23:02 - 2014-04-28 21:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-06-14 10:54 - 2020-04-17 18:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\vlc
2020-06-13 15:53 - 2014-04-28 21:31 - 000000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-06-09 20:21 - 2016-04-08 11:21 - 000004480 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-06-09 20:21 - 2014-09-10 21:27 - 000004372 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-06-09 20:04 - 2018-03-13 23:21 - 000004516 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-05 19:02 - 2014-04-20 01:18 - 000000000 ____D C:\ProgramData\install_clap
2020-06-05 19:02 - 2013-09-25 21:07 - 000000000 ____D C:\SWSETUP
2020-06-03 19:46 - 2014-04-28 21:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Adobe
2020-06-02 08:10 - 2014-03-18 17:24 - 002476032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
==================== Files in the root of some directories ========
2017-10-07 17:25 - 2017-10-07 17:25 - 000195296 ____N () C:\Users\Milan\comcat5.dll
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ () C:\Program Files (x86)\installation_status.json
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json.backup
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ () C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ () C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ () C:\Program Files (x86)\Resources.pri
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ () C:\Program Files (x86)\server_tracking_data
2017-08-02 20:18 - 2017-08-02 20:20 - 000099384 ____N () C:\Users\Milan\AppData\Roaming\inst.exe
2017-08-02 20:18 - 2017-08-02 20:20 - 000007859 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.cat
2017-08-02 20:18 - 2017-08-02 20:20 - 000001167 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.inf
2017-08-02 20:18 - 2017-08-02 20:20 - 000000033 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.log
2017-08-02 20:18 - 2017-08-02 20:20 - 000082816 ____N (VSO Software) C:\Users\Milan\AppData\Roaming\pcouffin.sys
2018-10-07 20:41 - 2018-10-07 20:41 - 000000000 ____N () C:\Users\Milan\AppData\Local\oobelibMkey.log
2014-11-21 02:36 - 2014-11-21 02:36 - 000000017 ____N () C:\Users\Milan\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2020-06-23 16:09
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-06-2020
Ran by Milan (29-06-2020 20:24:11)
Running from C:\Users\Milan\Desktop
Windows 8.1 (Update) (X64) (2014-04-29 18:34:23)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2134351818-1356353880-2322332928-500 - Administrator - Disabled)
Guest (S-1-5-21-2134351818-1356353880-2322332928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2134351818-1356353880-2322332928-1005 - Limited - Enabled)
Milan (S-1-5-21-2134351818-1356353880-2322332928-1001 - Administrator - Enabled) => C:\Users\Milan
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.)
Aktualizace NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.) Hidden
Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.)
Altap Salamander 4.0 (x64) (HKLM\...\Altap Salamander 4.0 (x64)) (Version: 4.0 - ALTAP)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{62CB44B2-8007-DBB2-1CBA-5CB7309EB3C3}) (Version: 10.1.17134.12 - Microsoft) Hidden
Ashampoo Burning Studio 21 (HKLM-x32\...\{91B33C97-3390-FD9A-8E0F-3F6BA7865E46}_is1) (Version: 21.5.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 15 (HKLM-x32\...\{0A11EA01-E0CE-916E-BC94-74670FA71836}_is1) (Version: 15.1.0 - Ashampoo GmbH & Co. KG)
ASUS Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.5000 - ASUS)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 9.4.0.0 - Auslogics Labs Pty Ltd)
Autorun Organizer verze 3.02 (HKLM-x32\...\Autorun Organizer_is1) (Version: 3.02 - ChemTable Software)
Basilisk 52.9.2020.06.10 (x64 en-US) (HKLM\...\Basilisk 52.9.2020.06.10 (x64 en-US)) (Version: 52.9.2020.06.10 - Moonchild Productions)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.24.36 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.20.114 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG7100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series) (Version: 1.01 - Canon Inc.)
Canon MG7100 series On-screen Manual (HKLM-x32\...\Canon MG7100 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
CD/Spectrum Pro (HKLM-x32\...\CDSpectrum Pro) (Version: CDSPro v2006.0204 - Synthesoft Corporation)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
CrystalDiskInfo 8.4.2 (64-bit) (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6522 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.3003 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4016 - CyberLink Corp.)
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.2011 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DiskInternals Partition Recovery (HKLM-x32\...\DiskInternals Partition Recovery) (Version: 8.0.1 - DiskInternals Research)
Driver Easy 5.6.14 (HKLM\...\DriverEasy_is1) (Version: 5.6.14 - Easeware)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
EO - ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #8) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #3 (HKLM-x32\...\ST6UNST #10) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #4 (HKLM-x32\...\ST6UNST #11) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #5 (HKLM-x32\...\ST6UNST #15) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) (HKLM-x32\...\ST6UNST #13) (Version: - )
EO - ActiveX (HKLM-x32\...\ST6UNST #3) (Version: - )
e-Saver version 3.1 (HKLM-x32\...\{C97CA73D-E96B-4B42-830E-D0F7BD780FB8}_is1) (Version: 3.1 - AOC)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Fonts version 1.0 (HKLM-x32\...\{95E6D335-B7B1-445B-9B58-64818030390E}_is1) (Version: 1.0 - MSTech (Modern Software Technology))
foobar2000 v1.5.4 (HKLM-x32\...\foobar2000) (Version: 1.5.4 - Peter Pawlowski)
Fotogaléria (HKLM-x32\...\{9093B0D5-EA59-4C9E-A2E3-CC130138DFCD}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Freemake Audio Converter verze 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Freemake Video Converter verze 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Mixbyte Inc.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.54.5318 - GOM & Company)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.116 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
HARDiNFO 8 PRO (HKLM\...\{708C3C8B-A637-4AF5-9749-8F2914CA6B23}) (Version: 8.0 - Ultimate Systems) Hidden
HARDiNFO 8 PRO (HKLM-x32\...\HARDiNFO 8 PRO) (Version: 8.0 - Ultimate Systems)
Hewlett-Packard ACLM.NET v1.2.2.1 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HOBBY-téka 4.00 (HKLM-x32\...\HOBBY-téka 4.00) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #16) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #18) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #19) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #12) (Version: - )
HOBBY-téka ActiveX (HKLM-x32\...\ST6UNST #7) (Version: - )
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP Quick Start (HKLM-x32\...\{574F0207-8E98-46CD-8F79-318348C98C46}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6668.4491 - Hewlett-Packard)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
HWiNFO64 Version 4.36 (HKLM\...\HWiNFO64_is1) (Version: 4.36 - Martin Malík - REALiX)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6435.0 - IDT)
i-Menu version 4.1.3 (HKLM-x32\...\{0121C0BD-363C-4B1D-8B64-FE7681A37D0A}_is1) (Version: 4.1.3 - AOC)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.40 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.40 - Dominik Reichl)
Kerish Doctor 2020 (HKLM-x32\...\{EF70A54F-E09E-4570-8F21-C7674CDDB5B6}_is1) (Version: 4.80 - Kerish Products)
Kits Configuration Installer (HKLM-x32\...\{6F502640-B753-C101-FFA5-B38C3FA5B29A}) (Version: 10.1.17134.12 - Microsoft) Hidden
LibreOffice 6.4.4.2 (HKLM\...\{F00C391B-6092-40E7-9ECD-144933865571}) (Version: 6.4.4.2 - The Document Foundation)
LockHunter 3.3, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.20.329 - Logitech)
Logitech SetPoint 6.69 (HKLM\...\sp6) (Version: 6.69.126 - Logitech)
MakeMKV v1.15.1 (HKLM-x32\...\MakeMKV) (Version: v1.15.1 - GuinpinSoft inc)
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Mediaport (HKLM-x32\...\Mediaport) (Version: - )
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft .NET Framework 4.7.2 SDK (HKLM-x32\...\{229FC339-A2DE-46C7-8AB7-E64BD2FD9592}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{90FBABBB-0CFC-469F-971F-0A1F11F5AF2E}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.12430.20264 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MKVToolNix 40.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 40.0.0 - Moritz Bunkus)
Monkey's Audio (HKLM-x32\...\Monkey's Audio_is1) (Version: - )
Movie Maker (HKLM-x32\...\{8E6E8CBB-8E58-493C-943F-4664F5F2FEDB}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{9EDF46F0-2D4E-4C00-B2B6-0660666E9F60}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{A035950F-15BA-41C0-9D8F-165FC0536012}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 66.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 66.0.2 (x64 cs)) (Version: 66.0.2 - Mozilla)
Mozilla Firefox 77.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 77.0.1 (x64 en-US)) (Version: 77.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0.2 - Mozilla)
MSI Development Tools (HKLM-x32\...\{1E406B46-65F4-91CE-65DA-DB66D5443B68}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
MSTech Folder Icon Pro (HKLM-x32\...\{C8483ED0-185F-45D7-9AC4-DD751942B9ED}) (Version: 2.9.3.750 - MSTech (Modern Software Technology))
MultiCommander (x64) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MultiCommander x64) (Version: 8.3.0.2469 - Mathias Svensson)
Nero CoverDesigner (HKLM-x32\...\{12391E45-23F7-4DEA-ABAE-2CA69CA87D92}) (Version: 12.0.02300 - Nero AG)
NVIDIA Ovladač 3D Vision 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.73 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.73 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OCCT 4.4.0 (HKLM-x32\...\OCCT) (Version: 4.4.0 - Ocbase.com)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Omron Health Management Software (HKLM-x32\...\{E01DFD45-F13A-4F12-AC38-8EEE2163E52E}) (Version: 1.60.0003 - Omron Healthcare)
Opera Stable 69.0.3686.36 (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Opera 69.0.3686.36) (Version: 69.0.3686.36 - Opera Software)
Ovládací panel NVIDIA 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.73 - NVIDIA Corporation) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM\...\{14EEF044-2FC6-40AA-9285-F430B3D90EF6}) (Version: 17.10.2.5049 - Paragon Software) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM-x32\...\{f541ba6a-92bf-466b-b956-5efa58ffe017}) (Version: 17.10.2.5049 - Paragon Software GmbH)
Paragon UIM (HKLM\...\{06B4D67B-9ECB-41E5-B4C1-92F529BB703D}) (Version: 24.65.0.487 - Paragon Software) Hidden
PeaZip 6.6.0 (HKLM-x32\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.6.0 - Giorgio Tani)
PeaZip 6.8.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.8.0 - Giorgio Tani)
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30153 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.0.6208 - CyberLink Corp.) Hidden
Registrace uživatele zařízení Canon MG7100 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG7100 series) (Version: - Canon Inc.)
Relax-KEŠ ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #9) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #1) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #2) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #4) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #6 (HKLM-x32\...\ST6UNST #6) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #7 (HKLM-x32\...\ST6UNST #17) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #14) (Version: - )
Relax-KEŠ ActiveX (HKLM-x32\...\ST6UNST #5) (Version: - )
SDK ARM Additions (HKLM-x32\...\{346B2C02-CC0D-6E09-8B9D-CAA2821473CF}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{825784BB-114D-ADB3-B65F-E1EB2A63C3BC}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK Debuggers (HKLM-x32\...\{8238CD59-617A-FE41-8AB4-A88AF3160849}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Soft Organizer verze 7.52 (HKLM-x32\...\Soft Organizer_is1) (Version: 7.52 - ChemTable Software)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - )
Synology Data Replicator 3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TechniPort Plus Beta (HKLM-x32\...\TechniPort Plus Beta) (Version: 0.9.5.4_beta - TechniSat)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
TotalAudioConverter (HKLM-x32\...\Total Audio Converter_is1) (Version: 5.1 - Softplicity, Inc.)
TVDownloader (HKLM-x32\...\TVDownloader) (Version: 1.18.0.0 - XPloRR)
Universal CRT Extension SDK (HKLM-x32\...\{18ABFDF6-23D9-87E6-015E-FFE3C7F153D5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{0D6B41AF-D117-8944-A059-3F9346A896C5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{B6273353-8B54-1F89-1A16-5940925104CE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{BA6F1D53-C3F2-F9D5-80CE-CEF608E36AD3}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{6E43CA0C-046E-4F38-A0A2-3B1BA139B661}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{775886B8-DEE1-CB20-8A94-FC09FA54ECF6}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Unlocker (HKLM-x32\...\{5577A25D-E4FE-4BFB-A660-E0D766BC4EDD}) (Version: 1.9.2 - ajua Custom Installers)
VDownloader 4.5.2902 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited)
VideoReDo TVSuite Version 5.4.84.771 (HKLM-x32\...\VideoReDo5_is1) (Version: - DRD Systems, Inc.)
Vivaldi (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Vivaldi) (Version: 3.1.1929.45 - Vivaldi Technologies AS.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
VSO Media Player 1.6.12.521 (HKLM-x32\...\{59F1E8E6-60EC-4CC1-8C72-E0F38E585215}_is1) (Version: 1.6.12.521 - VSO Software)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Web Components (HKLM-x32\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: - )
WhoCrashed 6.65 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
WinAppDeploy (HKLM-x32\...\{5AD4A604-B476-1578-2A20-6B02FC6258BE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Mobile Connectivity Tools 10.0.15254.0 - Desktop x86 (HKLM-x32\...\{833F02C5-2C39-49F6-BD64-91D351081274}) (Version: 10.1.15254.1 - Microsoft Corporation)
Windows SDK AddOn (HKLM-x32\...\{E77C2F78-6089-48F8-89DF-DDF2850DFFD9}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17134.12 (HKLM-x32\...\{5f83ccda-0498-4b97-a298-16a642bf49f2}) (Version: 10.1.17134.12 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{389D182F-0ADA-5C7E-FF32-2573A821592C}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{C3776B36-B34E-00E2-3009-95A6F1870B58}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{965D1746-D94A-49B9-2A48-A14914CA3B57}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{84C6B91B-67DA-DDE3-86F1-87A3E307E8C1}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{3755CD99-C62E-3312-DDD3-29A4F259270D}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{729DA966-8590-2C1F-2178-16C1D32FD7FD}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{F1C18506-3168-A9D9-E2D9-D23A512A326E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{4095D263-6A13-78D3-DEDA-AA3452011F6E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{C3243E23-2EB6-4419-2692-40944923B112}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WPT Redistributables (HKLM-x32\...\{F28E1B8B-1F92-80AF-710B-3E0191A25917}) (Version: 10.1.17134.12 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{711802CA-302C-6805-6D1F-D5CEF535F15E}) (Version: 10.1.17134.12 - Microsoft) Hidden
XnViewMP 0.64 (HKLM\...\XnViewMP_is1) (Version: 0.64 - Gougelet Pierre-e)
XYplorer 15.90 (HKLM-x32\...\XYplorer) (Version: 15.90 - Donald Lessau)
Packages:
=========
Box for Windows 8 -> C:\Program Files\WindowsApps\134D4F5B.Box_2.1.4.4_neutral__2qk4zy5s3qmee [2018-02-18] (Box, Inc.)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-03-07] (Canon Inc.)
HP Registration -> C:\Program Files\WindowsApps\AD2F1837.HPRegistration_1.2.1.166_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
Hry -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Hudba -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview_1.0.9431.0_neutral__8wekyb3d8bbwe [2018-02-18] (Rozšíření Microsoft Platform)
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.Preview.1_1.0.9345.0_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Windows Library for JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview.Internal_1.0.9385.3_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Finance -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Gurmánský svět -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Norton Studio -> C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp [2018-02-18] (Symantec Corporation)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2018-02-18] (Skype) [MS Ad]
Video -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Výběr prohlížeče -> C:\WINDOWS\BrowserChoice [2014-04-29] (Microsoft Corporation)
Začínáme se systémem Windows 8 -> C:\Program Files\WindowsApps\AD2F1837.GettingStartedwithWindows8_1.6.0.0_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> E:\Program Files (x86)\Vivaldi\Application\3.1.1929.45\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6722448 2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers1: [TotalConverter] -> {280CFDE1-1354-4431-92F3-03073BA593FB} => C:\Program Files (x86)\TotalAudioConverter\axTotalConverter64.dll [2014-03-14] (Softplicity) [File not signed] [File is in use]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers4: [FolderIconProMnu] -> {ee6b78fb-091b-3896-8982-9987a45d50bb} => E:\Program Files (x86)\MSTech Folder Icon Pro\FolderIconProMnu.DLL [2019-03-02] (MSTech (Modern Software Technology)) [File not signed] [File is in use]
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> C:\ProgramData\Ashampoo\YourDeals.exe () -> hxxp://linktarget.ashampoo.com/linktarget/?target=marketplace&edition=eid=15445&utm_medium=desktop&x-pos=Metro
==================== Loaded Modules (Whitelisted) =============
2020-06-28 10:02 - 2020-06-28 10:02 - 004078962 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll
2020-06-28 10:02 - 2020-06-28 10:02 - 000566439 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll
2020-06-28 09:47 - 2020-06-28 09:47 - 000192512 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\Temp\sfamcc00001.dll
2020-06-28 09:47 - 2020-06-28 09:47 - 000158720 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\Temp\sfareca00001.dll
2020-03-27 18:50 - 2020-03-27 18:50 - 000398336 _____ (Florian Heidenreich) [File not signed] [File is in use] E:\Program Files (x86)\Mp3tagShell64.dll
2020-06-28 10:02 - 2020-06-28 10:02 - 000198144 ____N (Java(TM) Native Access (JNA)) [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\jna\jna971343832782650155.dll
2018-04-19 22:31 - 2018-04-19 22:31 - 000267776 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL
2018-02-18 18:48 - 2017-12-19 04:51 - 000874880 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2018-02-18 18:48 - 2017-12-19 04:51 - 000339072 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2013-08-07 10:49 - 2013-08-07 10:49 - 000602112 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\devctrl.dll
2013-08-06 14:52 - 2013-08-06 14:52 - 001281536 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\vssWin764.dll
2012-12-10 15:03 - 2012-12-10 15:03 - 001198080 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] [File is in use] c:\Program Files (x86)\Intel\iCLS Client\LIBEAY32.dll
2012-12-10 15:03 - 2012-12-10 15:03 - 000303104 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] [File is in use] c:\Program Files (x86)\Intel\iCLS Client\ssleay32.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2020-06-29 19:29 - 000000000 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\VDownloader;C:\Program Files\ASUS\Bluetooth Software\;C:\Program Files\ASUS\Bluetooth Software\syswow64;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\HP\HP_Orkney_Stones.jpg
DNS Servers: 109.72.0.1 - 109.72.2.30
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{B384870C-5BE3-4735-97F2-5C7F4D5C1F1E}] => (Allow) LPort=1900
FirewallRules: [{C5D7703D-8AEB-4EA2-9201-6B27121E8F5C}] => (Allow) LPort=2869
FirewallRules: [{1FD973EA-C3CE-4556-A571-2C6D7618F862}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{52661EC0-718E-4A10-B226-E402B8BA8552}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9B768B84-2E68-44C0-9C18-48ED8811FB1B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6BE5FF36-FC45-4B96-81B5-8D58DBC93DDF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0410599E-4774-431E-A310-5411BADF2955}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{33249233-4380-4407-AE78-79F3222250BF}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{946C85CF-AD28-4698-89A2-451103BA6275}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{CF42E03B-7A5F-4742-91E9-CDA2D995E37B}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{BDFF5D59-DA54-4CC6-866A-1ABD6F2BD361}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{7188B0BC-8686-4FDF-869F-2F7865AEC1DF}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{16A2A0B4-C95D-4780-A4C5-7A74105C165F}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{3CA6EE64-D75A-4954-931D-A1D239377DD5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{478BC89C-8B49-4371-9729-1F6432AAD5E9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{2D7D2949-C15C-42FD-B6B0-BD3903A6D94C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{C161A352-112A-4538-9333-830F26014802}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{7DDBA0CE-B419-4EF2-BDA1-C217CC705F17}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9144AD77-433A-4B1B-8D92-58C02259F298}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C8A1B26A-E1C3-47DB-8754-43BAD054FCD0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F566AE56-7E66-44D3-804D-4149275C4394}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BAB750B0-D53E-48EE-BE80-0BDB26C79A15}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3AE55082-D404-45CF-B593-B97A1ACB03B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F57D2F83-1AF5-4767-A155-DA1E3BB70BD8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9BAA4FA-B27F-463D-BD6F-D5E23B76F7BF}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{EB4C43AF-30CD-4477-BEBC-07F64B46BD98}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{C1F6B667-11F8-451B-BDF7-FF029BC1E9D1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{87C55617-9CED-4DDA-BAEF-B13875FDE3AF}] => (Allow) C:\Program Files (x86)\69.0.3686.36\opera.exe (Opera Software AS -> Opera Software)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe] => Enabled:Flashget3
==================== Restore Points =========================
28-06-2020 10:48:16 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (06/29/2020 08:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 07:33:29 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
Error: (06/29/2020 07:05:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 06:31:58 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
Error: (06/29/2020 06:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 05:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.
Error: (06/29/2020 04:51:12 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
Error: (06/29/2020 04:47:29 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).
System errors:
=============
Error: (06/29/2020 08:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 07:05:10 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 06:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 05:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 04:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 03:56:29 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/29/2020 03:28:58 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXvwgnrrhcka99admvy9fqan3zpdmgg69a.mca se v daném časovém limitu neregistroval u služby DCOM.
Error: (06/28/2020 11:45:27 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.
==================== Memory info ===========================
BIOS: AMI 80.20 03/25/2014
Motherboard: Hewlett-Packard 2AF3
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 39%
Total physical RAM: 16337.16 MB
Available physical RAM: 9955.95 MB
Total Virtual: 22993.16 MB
Available Virtual: 12689.17 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:103.83 GB) (Free:24.56 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Recovery Image) (Fixed) (Total:13.49 GB) (Free:1.6 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (DATADRIVE) (Fixed) (Total:3725.9 GB) (Free:3631.86 GB) NTFS
Drive f: (Bowling for Columbine) (CDROM) (Total:7.62 GB) (Free:0 GB) UDF
Drive h: () (Fixed) (Total:1397.26 GB) (Free:1257.67 GB) NTFS
Drive l: () (Fixed) (Total:1397.26 GB) (Free:118.68 GB) NTFS
\\?\Volume{abe04f1f-1613-40cd-8aa4-0671b7515e52}\ () (Fixed) (Total:0 GB) (Free:0 GB)
\\?\Volume{b49f7e97-af19-4680-ad83-9b7505e9a462}\ () (Fixed) (Total:0 GB) (Free:0 GB)
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 1AD3749A)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 3 (Size: 1397.3 GB) (Disk ID: 4AB79538)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==========================================================
Disk: 4 (Size: 1397.3 GB) (Disk ID: 40505CCB)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Re: Občasné problémy s PC
Otvor poznamkovy blok (Win+R -> notepad -> enter)
- Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:
Kód: Vybrat vše
Start CloseProcesses: CreateRestorePoint: PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe CMD: dir "C:\Program Files (x86)\Norton Internet Security" File: C:\Program Files (x86)\launcher.exe File: C:\Windows\SysWOW64\Drivers\RegKill.sys HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe" Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-téka\setup\setup.exe Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html" HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File CMD: type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js" CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X] S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION U2 SBKUPNT; no ImagePath 2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284] AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916] AlternateDataStreams: C:\ProgramData\Temp:66633281 [159] AlternateDataStreams: C:\ProgramData\Temp:93433455 [960] Hosts: EmptyTemp: End - Uloz na plochu s nazvom fixlist.txt
- Spusti znovu FRST a klikni na Fix
- Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
- Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: Občasné problémy s PC
Fix result of Farbar Recovery Scan Tool (x64) Version: 30-06-2020
Ran by Milan (02-07-2020 22:12:59) Run:1
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
CMD: dir "C:\Program Files (x86)\Norton Internet Security"
File: C:\Program Files (x86)\launcher.exe
File: C:\Windows\SysWOW64\Drivers\RegKill.sys
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-t�ka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
CMD: type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js"
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath
2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]
Hosts:
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========
Count : 437
Average :
Sum : 4096186786
Maximum :
Minimum :
Property : Length
========= End of Powershell: =========
========================= File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe ========================
"C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe" => not found
====== End of File: ======
========= dir "C:\Program Files (x86)\Norton Internet Security" =========
Volume in drive C is Windows
Volume Serial Number is D462-9877
Directory of C:\Program Files (x86)
File Not Found
========= End of CMD: =========
========================= File: C:\Program Files (x86)\launcher.exe ========================
C:\Program Files (x86)\launcher.exe
File is digitally signed
MD5: B347B6D1E8C2938047EF9A2B85B46ECF
Creation and modification date: 2020-06-26 18:14 - 2020-06-22 07:54
Size: 001509400
Attributes: ----A
Company Name: Opera Software AS -> Opera Software
Internal Name: Opera
Original Name:
Product: Opera Internet Browser
Description: Opera Internet Browser
File Version: 69.0.3686.36
Product Version: 69.0.3686.36
Copyright: Copyright Opera Software 2020
VirusTotal: https://www.virustotal.com/gui/file/3f0 ... 1593438414
====== End of File: ======
========================= File: C:\Windows\SysWOW64\Drivers\RegKill.sys ========================
C:\Windows\SysWOW64\Drivers\RegKill.sys
File not signed
MD5: 27CE3D4C589E5FAE38EA0BD0FDFA3FD6
Creation and modification date: 2002-11-27 23:46 - 2002-11-27 23:46
Size: 000006400
Attributes: ----A
Company Name: Elaborate Bytes
Internal Name: regkill.sys
Original Name: regkill.sys
Product: DVD Region Killer
Description: DVD RegionKiller Lower Filter Driver
File Version: 2, 7, 0, 0
Product Version: 2, 7, 0, 0
Copyright: Copyright (C) 2001, 2002 Elaborate Bytes, Oliver Kastl
VirusTotal: https://www.virustotal.com/gui/file/5dc ... 1409515899
====== End of File: ======
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{50c52b16-ce04-11e6-bf53-9cb654eb78ff} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{01598504-C068-41F2-9DBF-6DC9A666BD69}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01598504-C068-41F2-9DBF-6DC9A666BD69}" => removed successfully
C:\WINDOWS\System32\Tasks\Norton Internet Security\Norton Error Analyzer => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Internet Security\Norton Error Analyzer" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1BB17350-5FEA-4A28-ACC0-CED43D5F3853}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BB17350-5FEA-4A28-ACC0-CED43D5F3853}" => removed successfully
C:\WINDOWS\System32\Tasks\Abelssoft\AntiLogger_3 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Abelssoft\AntiLogger_3" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1C649324-7B0A-4177-9C88-39CCD54A2D7D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C649324-7B0A-4177-9C88-39CCD54A2D7D}" => removed successfully
C:\WINDOWS\System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{20983F87-D24B-452D-BFA8-3455683056DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20983F87-D24B-452D-BFA8-3455683056DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38D8CF00-F9DA-4219-8C9D-0568DB73C874}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38D8CF00-F9DA-4219-8C9D-0568DB73C874}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4983B6D6-CC17-450B-9EB9-86B8422798E9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4983B6D6-CC17-450B-9EB9-86B8422798E9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{76184C1E-CB03-400D-A813-82EE8F22D629}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76184C1E-CB03-400D-A813-82EE8F22D629}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9BB07B71-845F-4D15-B1C5-7F4D9E087F4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9BB07B71-845F-4D15-B1C5-7F4D9E087F4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9D7BDA2F-BA50-4356-BC34-DD59D58222D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D7BDA2F-BA50-4356-BC34-DD59D58222D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A62E4628-0E01-4916-A6AA-030ADFCC4A83}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A62E4628-0E01-4916-A6AA-030ADFCC4A83}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D2C6C099-82D8-4286-96FB-94344BD0BD62}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D2C6C099-82D8-4286-96FB-94344BD0BD62}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F728CB27-EFF5-4C61-9B99-4F9F8E672E9D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F728CB27-EFF5-4C61-9B99-4F9F8E672E9D}" => removed successfully
C:\WINDOWS\System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F0469B35-26F4-48B9-92A0-94F30953612B}" => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} => removed successfully
========= type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js" =========
user_pref("browser.sessionstore.resume_session_once", true);
user_pref("browser.sessionstore.resume_session_once", true);
========= End of CMD: =========
HKLM\SOFTWARE\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => removed successfully
HKLM\System\CurrentControlSet\Services\CLVirtualBus01 => removed successfully
CLVirtualBus01 => service removed successfully
HKLM\System\CurrentControlSet\Services\MFE_RR => removed successfully
MFE_RR => service removed successfully
HKLM\System\CurrentControlSet\Services\SBKUPNT => removed successfully
SBKUPNT => service removed successfully
C:\Users\Milan\Desktop\FRST-OlderVersion => moved successfully
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" => removed successfully
HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{B5A7F190-DDA6-4420-B3BA-52453494E6CD} => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayExcluded => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayPending => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayProtected => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
C:\ProgramData\Temp => ":0888F409" ADS removed successfully
C:\ProgramData\Temp => ":3440EB47" ADS removed successfully
C:\ProgramData\Temp => ":66633281" ADS removed successfully
C:\ProgramData\Temp => ":93433455" ADS removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 91181009 B
Java, Flash, Steam htmlcache => 1690 B
Windows/system/drivers => 5110271 B
Edge => 0 B
Chrome => 811882552 B
Firefox => 33686137 B
Opera => 154407846 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 163926 B
systemprofile32 => 164054 B
LocalService => 16947276 B
NetworkService => 16947276 B
Milan => 62677415 B
RecycleBin => 0 B
EmptyTemp: => 1.1 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 22:14:25 ====
Ran by Milan (02-07-2020 22:12:59) Run:1
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
CMD: dir "C:\Program Files (x86)\Norton Internet Security"
File: C:\Program Files (x86)\launcher.exe
File: C:\Windows\SysWOW64\Drivers\RegKill.sys
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-t�ka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
CMD: type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js"
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath
2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]
Hosts:
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========
Count : 437
Average :
Sum : 4096186786
Maximum :
Minimum :
Property : Length
========= End of Powershell: =========
========================= File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe ========================
"C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe" => not found
====== End of File: ======
========= dir "C:\Program Files (x86)\Norton Internet Security" =========
Volume in drive C is Windows
Volume Serial Number is D462-9877
Directory of C:\Program Files (x86)
File Not Found
========= End of CMD: =========
========================= File: C:\Program Files (x86)\launcher.exe ========================
C:\Program Files (x86)\launcher.exe
File is digitally signed
MD5: B347B6D1E8C2938047EF9A2B85B46ECF
Creation and modification date: 2020-06-26 18:14 - 2020-06-22 07:54
Size: 001509400
Attributes: ----A
Company Name: Opera Software AS -> Opera Software
Internal Name: Opera
Original Name:
Product: Opera Internet Browser
Description: Opera Internet Browser
File Version: 69.0.3686.36
Product Version: 69.0.3686.36
Copyright: Copyright Opera Software 2020
VirusTotal: https://www.virustotal.com/gui/file/3f0 ... 1593438414
====== End of File: ======
========================= File: C:\Windows\SysWOW64\Drivers\RegKill.sys ========================
C:\Windows\SysWOW64\Drivers\RegKill.sys
File not signed
MD5: 27CE3D4C589E5FAE38EA0BD0FDFA3FD6
Creation and modification date: 2002-11-27 23:46 - 2002-11-27 23:46
Size: 000006400
Attributes: ----A
Company Name: Elaborate Bytes
Internal Name: regkill.sys
Original Name: regkill.sys
Product: DVD Region Killer
Description: DVD RegionKiller Lower Filter Driver
File Version: 2, 7, 0, 0
Product Version: 2, 7, 0, 0
Copyright: Copyright (C) 2001, 2002 Elaborate Bytes, Oliver Kastl
VirusTotal: https://www.virustotal.com/gui/file/5dc ... 1409515899
====== End of File: ======
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{50c52b16-ce04-11e6-bf53-9cb654eb78ff} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{01598504-C068-41F2-9DBF-6DC9A666BD69}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01598504-C068-41F2-9DBF-6DC9A666BD69}" => removed successfully
C:\WINDOWS\System32\Tasks\Norton Internet Security\Norton Error Analyzer => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Internet Security\Norton Error Analyzer" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1BB17350-5FEA-4A28-ACC0-CED43D5F3853}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BB17350-5FEA-4A28-ACC0-CED43D5F3853}" => removed successfully
C:\WINDOWS\System32\Tasks\Abelssoft\AntiLogger_3 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Abelssoft\AntiLogger_3" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1C649324-7B0A-4177-9C88-39CCD54A2D7D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C649324-7B0A-4177-9C88-39CCD54A2D7D}" => removed successfully
C:\WINDOWS\System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{20983F87-D24B-452D-BFA8-3455683056DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20983F87-D24B-452D-BFA8-3455683056DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38D8CF00-F9DA-4219-8C9D-0568DB73C874}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38D8CF00-F9DA-4219-8C9D-0568DB73C874}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4983B6D6-CC17-450B-9EB9-86B8422798E9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4983B6D6-CC17-450B-9EB9-86B8422798E9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{76184C1E-CB03-400D-A813-82EE8F22D629}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76184C1E-CB03-400D-A813-82EE8F22D629}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9BB07B71-845F-4D15-B1C5-7F4D9E087F4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9BB07B71-845F-4D15-B1C5-7F4D9E087F4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9D7BDA2F-BA50-4356-BC34-DD59D58222D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D7BDA2F-BA50-4356-BC34-DD59D58222D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A62E4628-0E01-4916-A6AA-030ADFCC4A83}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A62E4628-0E01-4916-A6AA-030ADFCC4A83}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D2C6C099-82D8-4286-96FB-94344BD0BD62}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D2C6C099-82D8-4286-96FB-94344BD0BD62}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F728CB27-EFF5-4C61-9B99-4F9F8E672E9D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F728CB27-EFF5-4C61-9B99-4F9F8E672E9D}" => removed successfully
C:\WINDOWS\System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F0469B35-26F4-48B9-92A0-94F30953612B}" => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} => removed successfully
========= type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js" =========
user_pref("browser.sessionstore.resume_session_once", true);
user_pref("browser.sessionstore.resume_session_once", true);
========= End of CMD: =========
HKLM\SOFTWARE\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => removed successfully
HKLM\System\CurrentControlSet\Services\CLVirtualBus01 => removed successfully
CLVirtualBus01 => service removed successfully
HKLM\System\CurrentControlSet\Services\MFE_RR => removed successfully
MFE_RR => service removed successfully
HKLM\System\CurrentControlSet\Services\SBKUPNT => removed successfully
SBKUPNT => service removed successfully
C:\Users\Milan\Desktop\FRST-OlderVersion => moved successfully
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" => removed successfully
HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{B5A7F190-DDA6-4420-B3BA-52453494E6CD} => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayExcluded => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayPending => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayProtected => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
C:\ProgramData\Temp => ":0888F409" ADS removed successfully
C:\ProgramData\Temp => ":3440EB47" ADS removed successfully
C:\ProgramData\Temp => ":66633281" ADS removed successfully
C:\ProgramData\Temp => ":93433455" ADS removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 91181009 B
Java, Flash, Steam htmlcache => 1690 B
Windows/system/drivers => 5110271 B
Edge => 0 B
Chrome => 811882552 B
Firefox => 33686137 B
Opera => 154407846 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 163926 B
systemprofile32 => 164054 B
LocalService => 16947276 B
NetworkService => 16947276 B
Milan => 62677415 B
RecycleBin => 0 B
EmptyTemp: => 1.1 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 22:14:25 ====
Re: Občasné problémy s PC
Plocha ma cca 4 GB, co je vela. Odporucam presunut vsetky subory a zlozky z plochy do dokumentov a na ploche nechat iba odkazy/zastupcov. Prilis velka velkost plochy moze sposobit spomalenie systemu. Spusti kontrolu integrity systemovych suborov:
- Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
- Skopiruj a spusti prikaz:
Kód: Vybrat vše
DISM.exe /Online /Cleanup-image /Restorehealth - Po dokonceni skopiruj a spusti druhy prikaz:
Kód: Vybrat vše
sfc /scannow - Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:
Kód: Vybrat vše
findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt - Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
- Restartuj PC a napis ako sa chova PC
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: Občasné problémy s PC
Zdravím, PC se zatím chová korektně. Připojuji archiv se soubory sfcdetails.txt a dism.txt
- Přílohy
-
- Desktop.rar
- (7.3 KiB) Staženo 203 x
Re: Občasné problémy s PC
Vyzera to OK. S PC uz teda nie su problemy?Este zopar tipov:
V Chrome su nainstalovane az 3 blokovace reklam (uBlock Origin, AdBlock, AdBlock Plus). Z logu nie je jasne, ci su zapnute/povolene vsetky naraz, ale ak ano, tak odporucam ponechat zapnuty len jeden z nich a ostatne zakazat alebo odinstalovat. Je zbytocnost mat zapnute vsetky, len by to spomalovalo prehliadac. Osobne mozem odporucit uBlock Origin. V PC su nainstalovane ovladace NVIDIA verzie 388.73, co je verzia stara cca 3 roky. Odporucam skontrolovat, ci nie je dostupna nova verzia ovladacov pre danu graficku kartu na https://nvidia.com/driversAbsolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: Občasné problémy s PC
Děkuji za pomoc a doporučení. Ovladače jsem aktualizoval, plochu zredukoval. PC se chová zatím dobře.
Re: Občasné problémy s PC
Tak este upraceme po pouzitych nastrojoch:
- Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
- Uloz na plochu a spusti
- Nechaj oznacenu moznost "Remove disinfection tools"
- Klikni na "Run"
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Přispějete na provoz fóra?