Preventivní kontrola

[autoprd]

Zdravím, mohu poprosit o preventivní kontrolu? Děkuji!

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-06-2019
Ran by Woytman (administrator) on DESKTOP-6KUR9TL (02-06-2019 23:07:53)
Running from C:\Users\Woytman\Downloads
Loaded Profiles: Woytman (Available Profiles: Woytman)
Platform: Windows 10 Pro Version 1803 17134.765 (X64) Language: Angličtina (Spojené státy)
Default browser not detected!
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.16\aaHMSvc.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Genesys Logic, Inc. -> ) C:\Windows\SysWOW64\UMonit.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(philandro Software GmbH -> ) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Ralink Technology Corporation -> Ralink Technology, Corp.) C:\Program Files (x86)\Tenda Wireless N Adapter\RT2870 Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269352 2019-03-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] (OOO Lightshot -> )
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3152160 2019-04-30] (Valve -> Valve Corporation)
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\Run: [Discord] => C:\Users\Woytman\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\Run: [uTorrent] => C:\Users\Woytman\AppData\Roaming\uTorrent\utorrent.exe [414656 2018-10-25] (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [735336 2019-05-03] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22488952 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\MountPoints2: {cf8f2ff9-5d99-11e9-aecf-502b73d42da7} - "F:\AutoInst.exe"
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\system32\vorbis.acm [1470976 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1554944 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\Installer\chrmstp.exe [2019-05-30] (Google LLC -> Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2019-05-03]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> )
GroupPolicy: Restriction ? <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01A75743-A639-4D1F-A50D-A40D624F38AA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-05-17] (Google Inc -> Google LLC)
Task: {0D984F8B-26B1-48CF-9128-7B3DD1BAA7A8} - System32\Tasks\update-S-1-5-21-2686244867-1535793079-1624404764-1002 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {2FCDDA14-F0BC-415D-B8CF-4F4238DA5BD7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {417E6508-E843-46C6-8C7E-766C8997BF74} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3728936 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4643E492-39A9-4B92-BC87-18F7979402C1} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 => {429BC048-379E-45E0-80E4-EB1977941B5C} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll [29360 2018-04-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {4AEF34EE-8A66-4BA1-A3A9-18B5F50606BF} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877096 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {55A7F4B7-70B9-4F15-B08F-B2ECAE8644F2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16494464 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5BA68E9F-8BD3-4BDF-AF53-3C43CEC2B438} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [72336 2019-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {62573B62-C559-4528-9136-AA80E1ABCD40} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 => {84F0FAE1-C27B-4F6F-807B-28CF6F96287D} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll [29360 2018-04-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {6E6BC03D-1736-4750-9D5D-E815C97E7E79} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877096 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {80573DB6-883B-4166-802A-4B6B615DF431} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877096 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {81D00108-CA73-45DD-B010-5F9D8FC8B0A1} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-03-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {83795B87-BDC9-4F80-A96D-48ED113712D9} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical => {DE434264-8FE9-4C0B-A83B-89EBEEBFF78E} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll [29360 2018-04-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {8DB5A9F2-5AD2-4F5B-B705-67E6F64B1249} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit.exe [68216 2019-03-24] (Genesys Logic, Inc. -> )
Task: {965D0746-CB24-41D1-AC53-0C127C16AEC0} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849448 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9C4F4ACB-5122-40E1-9D7E-99555BC2F2C1} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical => {613FBA38-A3DF-4AB8-9674-5604984A299A} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll [29360 2018-04-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {9EAAA428-91FC-4BB0-B158-2453AB6F7D12} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [590888 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AA1991D3-49A1-4C9A-B989-7C491F201D48} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {AB67637F-210A-4466-A135-8B16F75EF54D} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {AC5AD0C8-598F-4498-90E7-17B7D7248779} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {B035FE9F-E2DC-4289-9FF6-A1183E94CCC4} - \Driver Booster SkipUAC (Woytman) -> No File <==== ATTENTION
Task: {D11FF19F-0DBE-454E-8460-99A9C5ECB67A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781864 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DBE394B0-1FB3-4481-94CE-1891A56BC3FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-05-17] (Google Inc -> Google LLC)
Task: {E6B0846C-E4C9-4838-A99B-078BFEF4F1FC} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Woytman\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {EA23A4AC-3704-4D39-836F-19B355BE4981} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781864 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {ED2D379A-1737-43C7-8AB6-6FF264A91152} - System32\Tasks\KMS_VL_ALL => C:\Windows\schemas\Scripts\KMS_VL_ALL.cmd
Task: {EE493A4E-0E18-4791-86A9-8130E861028A} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {F106BEB8-1965-4EBA-8525-35AC1E1FDF62} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877096 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F4E37143-9EF2-4A68-ABFD-1393E1691C66} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849448 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FF2118A8-406E-4423-AA79-6507DA4DE199} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648232 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\update-S-1-5-21-2686244867-1535793079-1624404764-1002.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.10.1 0.0.0.0
Tcpip\..\Interfaces\{b79e559b-f704-4026-bc42-3b30ede81413}: [DhcpNameServer] 192.168.10.1 0.0.0.0

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2019-03-13] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-03-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2018-03-14] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: xnnl1xp2.default-1558040856397
FF ProfilePath: C:\Users\Woytman\AppData\Roaming\Mozilla\Firefox\Profiles\0eglhxmd.dev-edition-default [2019-06-02]
FF ProfilePath: C:\Users\Woytman\AppData\Roaming\Mozilla\Firefox\Profiles\xnnl1xp2.default-1558040856397 [2019-06-02]
FF Session Restore: Mozilla\Firefox\Profiles\xnnl1xp2.default-1558040856397 -> is enabled.
FF Extension: (Arc Theme) - C:\Users\Woytman\AppData\Roaming\Mozilla\Firefox\Profiles\xnnl1xp2.default-1558040856397\Extensions\arc-theme@afnankhan.xpi [2019-05-16]
FF Extension: (Undo Close Tab) - C:\Users\Woytman\AppData\Roaming\Mozilla\Firefox\Profiles\xnnl1xp2.default-1558040856397\Extensions\{4853d046-c5a3-436b-bc36-220fd935ee1d}.xpi [2019-05-16]
FF Extension: (No Name) - C:\Users\Woytman\AppData\Roaming\Mozilla\Firefox\Profiles\xnnl1xp2.default-1558040856397\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-05-16]
FF Extension: (Dark Fox) - C:\Users\Woytman\AppData\Roaming\Mozilla\Firefox\Profiles\xnnl1xp2.default-1558040856397\Extensions\{e7fe4ffe-f256-4f85-906d-072fdd698585}.xpi [2019-05-16]
FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2018-06-06] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-03-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-10-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-17] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-17] (Google Inc -> Google LLC)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxp://www.google.com ... duckgo.com"
CHR Profile: C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default [2019-06-02]
CHR Extension: (Prezentace) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-05-17]
CHR Extension: (Dokumenty) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-05-17]
CHR Extension: (Disk Google) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-05-17]
CHR Extension: (YouTube) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-05-17]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-05-17]
CHR Extension: (Social Blade) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2019-05-17] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION
CHR Extension: (Email Game) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehbobaphhmjpchjknfpcnlhcbkjbclge [2019-05-17]
CHR Extension: (Tabulky) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-05-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-05-17]
CHR Extension: (Morpheon Dark) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafbdhjdkjnoafhfelkjpchpaepjknad [2019-06-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-05-17]
CHR Extension: (Gmail) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-17]
CHR Extension: (Chrome Media Router) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-30]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [2935080 2019-05-31] (philandro Software GmbH -> )
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [918448 2011-10-29] (ASUSTeK Computer Inc. -> ) [File not signed]
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.16\aaHMSvc.exe [947328 2011-08-09] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] (ASUSTeK Computer Inc. -> )
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4132456 2019-05-03] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S4 ICEsoundService; C:\WINDOWS\system32\ICEsoundService64.exe [806352 2019-03-24] (ICEpower a/s -> ICEpower)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21184 2016-03-29] (Microsoft Corporation -> Microsoft Corporation)
S4 MBAMIService; C:\ProgramData\MB3Install\MBAMIService.exe [230096 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781864 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781864 2019-04-02] (NVIDIA Corporation -> NVIDIA Corporation)
R2 RaAutoInstSrv_RT2870; C:\Program Files (x86)\Tenda Wireless N Adapter\RT2870 Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe [116000 2013-12-18] (Ralink Technology Corporation -> Ralink Technology, Corp.)
S4 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5074120 2019-04-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [137216 2016-03-29] (Microsoft Corporation) [File not signed]
S2 VBoxVmService; C:\vms\VBoxVmService64.exe [127488 2017-10-19] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4413440 2019-04-06] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107160 2019-04-06] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [93240 2019-03-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [33336 2019-03-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2017-12-26] (ASUSTeK Computer Inc. -> )
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] (ASUSTeK Computer Inc. -> )
S3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4321160 2019-03-24] (Qualcomm Atheros -> Qualcomm Atheros Communications, Inc.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2019-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2019-03-25] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 GeneStor; C:\WINDOWS\system32\DRIVERS\GeneStor.sys [126168 2019-03-24] (Genesys Logic, Inc. -> GenesysLogic)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-03-24] (Martin Malik - REALiX -> REALiX(tm))
R3 netr28ux; C:\WINDOWS\system32\DRIVERS\netr28ux.sys [2244952 2015-11-19] (MEDIATEK INC. -> MediaTek Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b49751b9038af669\nvlddmkm.sys [21836032 2019-05-23] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-03-28] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-03-19] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [75600 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation)
S3 rt2870; C:\WINDOWS\system32\DRIVERS\rt2870.sys [3444568 2015-12-14] (MEDIATEK INC. -> MediaTek Inc.)
S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1138136 2019-03-24] (Realtek Semiconductor Corp. -> Realtek )
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 VBoxNetAdp; no ImagePath
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]
S1 VBoxNetLwf; \SystemRoot\system32\DRIVERS\VBoxNetLwf.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-06-02 23:07 - 2019-06-02 23:08 - 000029514 _____ C:\Users\Woytman\Downloads\FRST.txt
2019-06-02 23:07 - 2019-06-02 23:07 - 002433536 _____ (Farbar) C:\Users\Woytman\Downloads\FRST64.exe
2019-06-02 23:07 - 2019-06-02 23:07 - 000000000 ____D C:\FRST
2019-06-02 23:05 - 2019-06-02 23:05 - 000000344 _____ C:\DelFix.txt
2019-06-02 22:16 - 2019-06-02 22:26 - 000000000 ____D C:\Users\Woytman\AppData\Local\AMSDK
2019-06-02 22:15 - 2019-06-02 22:15 - 000001402 _____ C:\Users\Woytman\Desktop\Auslogics Registry Defrag.lnk
2019-06-02 22:15 - 2019-06-02 22:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2019-06-02 22:15 - 2019-06-02 22:15 - 000000000 ____D C:\ProgramData\Auslogics
2019-06-02 22:15 - 2019-06-02 22:15 - 000000000 ____D C:\Program Files (x86)\Auslogics
2019-06-02 22:08 - 2019-06-02 22:08 - 000000000 ____D C:\ProgramData\UCheck
2019-06-02 21:52 - 2019-06-02 21:52 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2019-06-02 21:49 - 2019-05-23 18:25 - 000260512 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2019-06-02 21:49 - 2019-05-23 18:25 - 000260512 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2019-06-02 21:49 - 2019-05-23 18:24 - 001007008 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2019-06-02 21:49 - 2019-05-23 18:24 - 001007008 _____ C:\WINDOWS\system32\vulkan-1.dll
2019-06-02 21:49 - 2019-05-23 18:24 - 000870304 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2019-06-02 21:49 - 2019-05-23 18:24 - 000870304 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2019-06-02 21:49 - 2019-05-23 18:24 - 000552352 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2019-06-02 21:49 - 2019-05-23 18:24 - 000457304 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2019-06-02 21:49 - 2019-05-23 18:24 - 000286624 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2019-06-02 21:49 - 2019-05-23 18:24 - 000286624 _____ C:\WINDOWS\system32\vulkaninfo.exe
2019-06-02 21:49 - 2019-05-23 18:23 - 011051968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2019-06-02 21:49 - 2019-05-23 18:23 - 009487240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2019-06-02 21:48 - 2019-05-23 18:22 - 000821120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2019-06-02 21:48 - 2019-05-23 18:22 - 000675016 _____ C:\WINDOWS\system32\nvofapi64.dll
2019-06-02 21:48 - 2019-05-23 18:22 - 000631224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2019-06-02 21:48 - 2019-05-23 18:22 - 000541904 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2019-06-02 21:48 - 2019-05-23 18:22 - 000522120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 005422040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 004759640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 002039768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 001722456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6443086.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 001542232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 001470856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 001467864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6443086.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 001162200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 001133824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 000912472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 000808408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2019-06-02 21:48 - 2019-05-23 18:21 - 000654752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2019-06-02 21:48 - 2019-05-23 18:20 - 040412576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2019-06-02 21:48 - 2019-05-23 18:20 - 035269592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2019-06-02 21:48 - 2019-05-23 18:20 - 020190808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2019-06-02 21:48 - 2019-05-23 18:20 - 017467024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2019-06-02 21:48 - 2019-05-23 18:14 - 004340480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2019-06-02 21:48 - 2019-05-23 01:39 - 000052456 _____ C:\WINDOWS\system32\nvinfo.pb
2019-06-02 21:37 - 2019-06-02 21:37 - 000001469 _____ C:\Users\Woytman\Desktop\Grand Theft Auto V.lnk
2019-05-30 22:19 - 2019-05-30 22:19 - 000000000 ____D C:\Users\Public\Documents\Catch!
2019-05-30 22:16 - 2019-05-30 22:16 - 000000000 ____D C:\Users\Woytman\ansel
2019-05-30 22:15 - 2019-05-30 22:15 - 000000000 ____D C:\WINDOWS\Panther
2019-05-19 01:54 - 2019-05-19 01:54 - 000000000 _____ C:\WINDOWS\Path.idx
2019-05-19 01:50 - 2019-05-19 01:50 - 005569024 _____ C:\WINDOWS\PE_Rom.dll
2019-05-19 01:49 - 2010-08-03 13:21 - 000014464 _____ C:\WINDOWS\SysWOW64\Drivers\AsUpIO.sys
2019-05-19 01:49 - 2008-12-02 20:05 - 000184320 _____ (ASUSTeK) C:\WINDOWS\SysWOW64\Drivers\UpdateHelper.dll
2019-05-19 01:48 - 2019-05-30 22:20 - 000000000 ____D C:\ProgramData\ASUS
2019-05-19 01:48 - 2019-05-30 22:20 - 000000000 ____D C:\Program Files (x86)\ASUS
2019-05-19 01:48 - 2019-05-19 01:48 - 000001769 _____ C:\WINDOWS\Language_trs.ini
2019-05-19 01:48 - 2017-12-26 11:58 - 000028672 _____ (ASUSTek Computer Inc.) C:\WINDOWS\SysWOW64\AsIO.dll
2019-05-19 01:48 - 2017-12-26 11:58 - 000015232 _____ C:\WINDOWS\SysWOW64\Drivers\AsIO.sys
2019-05-19 01:48 - 2008-01-04 14:34 - 000011832 ____N C:\WINDOWS\SysWOW64\Drivers\AsInsHelp64.sys
2019-05-19 01:48 - 2008-01-04 14:34 - 000010216 ____N C:\WINDOWS\SysWOW64\Drivers\AsInsHelp32.sys
2019-05-19 01:43 - 2019-05-19 01:43 - 000000000 ____D C:\Users\Woytman\Documents\OpenIV
2019-05-19 01:38 - 2019-05-19 01:38 - 000000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2019-05-19 01:16 - 2019-05-19 01:16 - 000000000 ____D C:\ProgramData\Antares
2019-05-19 01:10 - 2019-05-19 01:10 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\sys00_1_1
2019-05-19 00:53 - 2019-05-19 00:53 - 000000000 ____D C:\Users\Woytman\AppData\Local\Downloaded Installations
2019-05-19 00:52 - 2019-06-02 23:03 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\sys00_1
2019-05-19 00:52 - 2019-05-30 22:15 - 000000000 __SHD C:\vms
2019-05-19 00:52 - 2019-05-19 00:52 - 000000000 __SHD C:\Program Files\Oracle
2019-05-19 00:52 - 2019-05-19 00:52 - 000000000 ____D C:\ProgramData\Apple
2019-05-19 00:52 - 2019-05-19 00:52 - 000000000 ____D C:\Program Files\Bonjour
2019-05-19 00:52 - 2019-05-19 00:52 - 000000000 ____D C:\Program Files (x86)\Bonjour
2019-05-19 00:52 - 2018-08-14 06:58 - 000984376 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxDrv.sys
2019-05-18 23:44 - 2019-05-19 01:28 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2019-05-18 23:44 - 2019-05-19 01:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2019-05-18 23:44 - 2019-05-18 23:44 - 000000000 ____D C:\Users\Woytman\Documents\Image-Line
2019-05-18 23:44 - 2019-05-18 23:44 - 000000000 ____D C:\Program Files\Image-Line
2019-05-18 23:44 - 2019-05-18 23:44 - 000000000 ____D C:\Program Files\Common Files\VST2
2019-05-18 23:44 - 2019-05-18 23:44 - 000000000 ____D C:\Program Files\Common Files\Propellerhead Software
2019-05-18 23:42 - 2019-05-19 01:29 - 000000000 ____D C:\Program Files (x86)\Image-Line
2019-05-17 04:22 - 2019-05-17 04:22 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Google
2019-05-17 04:21 - 2019-05-30 22:19 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-05-17 04:21 - 2019-05-30 22:19 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-05-17 04:20 - 2019-05-17 04:20 - 000003472 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-05-17 04:20 - 2019-05-17 04:20 - 000003348 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-05-17 01:13 - 2019-05-17 01:13 - 000000177 _____ C:\Users\Woytman\Desktop\prik.txt
2019-05-16 23:07 - 2019-05-19 01:25 - 000000000 ____D C:\Users\Woytman\AppData\LocalLow\Mozilla
2019-05-15 04:07 - 2019-05-15 04:07 - 000000000 ____D C:\WINDOWS\PCHEALTH
2019-05-15 04:07 - 2019-05-15 04:07 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2019-05-15 04:07 - 2019-05-15 04:07 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2019-05-15 04:02 - 2019-05-15 04:02 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-05-14 21:57 - 2019-05-14 21:57 - 000000147 _____ C:\Users\Woytman\Desktop\prikazy.txt
2019-05-14 19:49 - 2019-05-03 14:14 - 000790208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2019-05-14 19:49 - 2019-05-03 14:14 - 000304144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys
2019-05-14 19:49 - 2019-05-03 14:13 - 001376472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-05-14 19:49 - 2019-05-03 14:13 - 000396088 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2019-05-14 19:49 - 2019-05-03 13:55 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2019-05-14 19:49 - 2019-05-03 13:54 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2019-05-14 19:49 - 2019-05-03 13:51 - 003613696 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-05-14 19:49 - 2019-05-03 13:50 - 004054528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-05-14 19:49 - 2019-05-03 13:43 - 001027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-05-14 19:49 - 2019-05-03 13:43 - 000662328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2019-05-14 19:49 - 2019-05-03 13:30 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2019-05-14 19:49 - 2019-05-03 13:30 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2019-05-14 19:49 - 2019-05-03 13:28 - 002882048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-05-14 19:49 - 2019-05-03 13:25 - 004055040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-05-14 19:49 - 2019-05-03 08:36 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-05-14 19:49 - 2019-05-03 08:33 - 005625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-05-14 19:49 - 2019-05-03 08:33 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-05-14 19:49 - 2019-05-03 08:33 - 001027384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-05-14 19:49 - 2019-05-03 08:33 - 000709720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2019-05-14 19:49 - 2019-05-03 08:33 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-05-14 19:49 - 2019-05-03 08:32 - 000793640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-05-14 19:49 - 2019-05-03 08:32 - 000170296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-05-14 19:49 - 2019-05-03 08:32 - 000164664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2019-05-14 19:49 - 2019-05-03 08:31 - 009084432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-05-14 19:49 - 2019-05-03 08:31 - 007436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-05-14 19:49 - 2019-05-03 08:31 - 002811192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-05-14 19:49 - 2019-05-03 08:31 - 002771256 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-05-14 19:49 - 2019-05-03 08:31 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-05-14 19:49 - 2019-05-03 08:31 - 000545808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-05-14 19:49 - 2019-05-03 08:31 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-05-14 19:49 - 2019-05-03 08:19 - 006043712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-05-14 19:49 - 2019-05-03 08:18 - 002258640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-05-14 19:49 - 2019-05-03 08:18 - 001130568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-05-14 19:49 - 2019-05-03 08:12 - 025855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-05-14 19:49 - 2019-05-03 08:05 - 022716416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-05-14 19:49 - 2019-05-03 08:02 - 004866048 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-05-14 19:49 - 2019-05-03 08:01 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-05-14 19:49 - 2019-05-03 08:00 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-05-14 19:49 - 2019-05-03 08:00 - 003400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-05-14 19:49 - 2019-05-03 08:00 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2019-05-14 19:49 - 2019-05-03 07:59 - 007593472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-05-14 19:49 - 2019-05-03 07:59 - 005788672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-05-14 19:49 - 2019-05-03 07:59 - 003710976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-05-14 19:49 - 2019-05-03 07:59 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2019-05-14 19:49 - 2019-05-03 07:59 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-05-14 19:49 - 2019-05-03 07:59 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-05-14 19:49 - 2019-05-03 07:58 - 002175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-05-14 19:49 - 2019-05-03 07:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-05-14 19:49 - 2019-05-03 07:58 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-05-14 19:49 - 2019-05-03 07:58 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2019-05-14 19:49 - 2019-05-03 07:57 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-05-14 19:49 - 2019-05-03 07:57 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-05-14 19:49 - 2019-05-03 07:57 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-05-14 19:49 - 2019-05-03 07:57 - 001295872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2019-05-14 19:49 - 2019-05-03 07:57 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-05-14 19:49 - 2019-05-03 07:57 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2019-05-14 19:49 - 2019-05-03 07:56 - 005350912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-05-14 19:49 - 2019-05-03 07:56 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-05-14 19:49 - 2019-05-03 07:55 - 003090432 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-05-14 19:49 - 2019-05-03 07:55 - 002166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-05-14 19:49 - 2019-05-03 07:54 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-05-14 19:49 - 2019-05-03 07:54 - 001628672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-05-14 19:49 - 2019-05-03 07:54 - 000961024 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-05-14 19:49 - 2019-05-03 07:54 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-05-14 19:49 - 2019-05-03 07:54 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-05-14 19:49 - 2019-05-03 07:54 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-05-14 19:49 - 2019-05-03 07:54 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-05-14 19:49 - 2019-05-03 07:54 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-05-14 19:49 - 2019-04-19 12:55 - 001634920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-05-14 19:49 - 2019-04-19 12:54 - 000720200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-05-14 19:49 - 2019-04-19 12:39 - 012754944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-05-14 19:49 - 2019-04-19 12:36 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-05-14 19:49 - 2019-04-19 12:34 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-05-14 19:49 - 2019-04-19 11:44 - 001454648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-05-14 19:49 - 2019-04-19 11:37 - 000607960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-05-14 19:49 - 2019-04-19 11:28 - 011940864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-05-14 19:49 - 2019-04-19 11:26 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-05-14 19:49 - 2019-04-19 11:25 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-05-14 19:49 - 2019-04-19 07:06 - 002571632 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-05-14 19:49 - 2019-04-19 07:06 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-05-14 19:49 - 2019-04-19 07:01 - 001982008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-05-14 19:49 - 2019-04-19 07:01 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-05-14 19:49 - 2019-04-19 06:43 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2019-05-14 19:49 - 2019-04-19 06:42 - 004384256 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-05-14 19:49 - 2019-04-19 06:39 - 000567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-05-14 19:49 - 2019-04-19 06:38 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-05-14 19:49 - 2019-04-19 06:38 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-05-14 19:49 - 2019-04-19 06:38 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-05-14 19:49 - 2019-04-19 06:37 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2019-05-14 19:49 - 2019-04-19 06:37 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-05-14 19:49 - 2019-04-19 06:37 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2019-05-14 19:49 - 2019-04-19 06:36 - 002909696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-05-14 19:49 - 2019-04-19 06:36 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2019-05-14 19:49 - 2019-04-19 06:35 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-05-14 19:49 - 2019-04-19 06:35 - 001175552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2019-05-14 19:49 - 2019-04-19 06:35 - 001156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-05-14 19:49 - 2019-04-19 06:35 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2019-05-14 19:49 - 2019-04-19 06:34 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-05-14 19:49 - 2019-04-19 06:34 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-05-14 19:49 - 2019-04-19 06:34 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-05-14 19:48 - 2019-05-03 13:52 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2019-05-14 19:48 - 2019-05-03 13:51 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-05-14 19:48 - 2019-05-03 13:50 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-05-14 19:48 - 2019-05-03 13:49 - 001288704 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2019-05-14 19:48 - 2019-05-03 13:49 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-05-14 19:48 - 2019-05-03 13:49 - 000210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2019-05-14 19:48 - 2019-05-03 13:28 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2019-05-14 19:48 - 2019-05-03 13:27 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2019-05-14 19:48 - 2019-05-03 13:26 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-05-14 19:48 - 2019-05-03 13:25 - 001471488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-05-14 19:48 - 2019-05-03 08:43 - 000177128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2019-05-14 19:48 - 2019-05-03 08:34 - 000159864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2019-05-14 19:48 - 2019-05-03 08:33 - 000568104 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-05-14 19:48 - 2019-05-03 08:33 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-05-14 19:48 - 2019-05-03 08:33 - 000063072 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2019-05-14 19:48 - 2019-05-03 08:32 - 000776784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-05-14 19:48 - 2019-05-03 08:32 - 000493880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-05-14 19:48 - 2019-05-03 08:32 - 000438984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-05-14 19:48 - 2019-05-03 08:32 - 000209208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2019-05-14 19:48 - 2019-05-03 08:31 - 007519888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-05-14 19:48 - 2019-05-03 08:31 - 001459328 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-05-14 19:48 - 2019-05-03 08:31 - 001260480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-05-14 19:48 - 2019-05-03 08:31 - 001141224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-05-14 19:48 - 2019-05-03 08:31 - 000983632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-05-14 19:48 - 2019-05-03 08:31 - 000115728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-05-14 19:48 - 2019-05-03 08:20 - 000434704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-05-14 19:48 - 2019-05-03 08:20 - 000384976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-05-14 19:48 - 2019-05-03 08:20 - 000192016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2019-05-14 19:48 - 2019-05-03 08:20 - 000146920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2019-05-14 19:48 - 2019-05-03 08:19 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-05-14 19:48 - 2019-05-03 08:19 - 000056288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll
2019-05-14 19:48 - 2019-05-03 08:18 - 006569344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-05-14 19:48 - 2019-05-03 08:10 - 022017024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-05-14 19:48 - 2019-05-03 08:02 - 019401216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-05-14 19:48 - 2019-05-03 08:00 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll
2019-05-14 19:48 - 2019-05-03 07:59 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2019-05-14 19:48 - 2019-05-03 07:59 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2019-05-14 19:48 - 2019-05-03 07:58 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2019-05-14 19:48 - 2019-05-03 07:58 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2019-05-14 19:48 - 2019-05-03 07:58 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-05-14 19:48 - 2019-05-03 07:57 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-05-14 19:48 - 2019-05-03 07:56 - 000773632 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2019-05-14 19:48 - 2019-05-03 07:56 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-05-14 19:48 - 2019-05-03 07:56 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-05-14 19:48 - 2019-05-03 07:55 - 000659968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2019-05-14 19:48 - 2019-05-03 07:54 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-05-14 19:48 - 2019-05-03 07:54 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-05-14 19:48 - 2019-05-03 07:54 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-05-14 19:48 - 2019-05-03 07:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-05-14 19:48 - 2019-05-03 07:53 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2019-05-14 19:48 - 2019-05-03 07:53 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2019-05-14 19:48 - 2019-05-03 07:53 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2019-05-14 19:48 - 2019-05-03 07:53 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2019-05-14 19:48 - 2019-05-03 06:38 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2019-05-14 19:48 - 2019-04-23 09:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-05-14 19:48 - 2019-04-23 08:14 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-05-14 19:48 - 2019-04-19 12:40 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-05-14 19:48 - 2019-04-19 12:38 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
2019-05-14 19:48 - 2019-04-19 12:38 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2019-05-14 19:48 - 2019-04-19 11:30 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2019-05-14 19:48 - 2019-04-19 07:07 - 000985400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2019-05-14 19:48 - 2019-04-19 07:06 - 000798520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2019-05-14 19:48 - 2019-04-19 07:06 - 000713264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-05-14 19:48 - 2019-04-19 07:06 - 000274232 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-05-14 19:48 - 2019-04-19 07:02 - 000831800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2019-05-14 19:48 - 2019-04-19 07:01 - 000581592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-05-14 19:48 - 2019-04-19 07:01 - 000576016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2019-05-14 19:48 - 2019-04-19 06:41 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-05-14 19:48 - 2019-04-19 06:41 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\EduPrintProv.exe
2019-05-14 19:48 - 2019-04-19 06:40 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2019-05-14 19:48 - 2019-04-19 06:40 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll
2019-05-14 19:48 - 2019-04-19 06:40 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2019-05-14 19:48 - 2019-04-19 06:40 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2019-05-14 19:48 - 2019-04-19 06:40 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2019-05-14 19:48 - 2019-04-19 06:39 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-05-14 19:48 - 2019-04-19 06:39 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll
2019-05-14 19:48 - 2019-04-19 06:39 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingASDS.dll
2019-05-14 19:48 - 2019-04-19 06:39 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-05-14 19:48 - 2019-04-19 06:39 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2019-05-14 19:48 - 2019-04-19 06:38 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-05-14 19:48 - 2019-04-19 06:38 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2019-05-14 19:48 - 2019-04-19 06:38 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2019-05-14 19:48 - 2019-04-19 06:37 - 000445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-05-14 19:48 - 2019-04-19 06:37 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2019-05-14 19:48 - 2019-04-19 06:37 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2019-05-14 19:48 - 2019-04-19 06:37 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2019-05-14 19:48 - 2019-04-19 06:36 - 001300992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2019-05-14 19:48 - 2019-04-19 06:36 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-05-14 19:48 - 2019-04-19 06:36 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2019-05-14 19:48 - 2019-04-19 06:36 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-05-14 19:48 - 2019-04-19 06:36 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2019-05-14 19:48 - 2019-04-19 06:35 - 001938944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2019-05-14 19:48 - 2019-04-19 06:35 - 000607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-05-14 19:48 - 2019-04-19 06:35 - 000535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2019-05-14 19:48 - 2019-04-19 06:35 - 000523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-05-14 19:48 - 2019-04-19 06:35 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-05-14 19:48 - 2019-04-19 06:34 - 000935936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-05-14 19:48 - 2019-04-19 06:34 - 000653312 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2019-05-14 19:48 - 2019-04-19 05:18 - 000806360 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-05-14 19:48 - 2019-04-19 05:18 - 000806360 _____ C:\WINDOWS\system32\locale.nls
2019-05-14 19:48 - 2019-04-09 03:48 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-05-14 19:48 - 2019-04-09 03:48 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-05-14 19:48 - 2019-04-09 03:48 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-05-14 19:48 - 2019-04-09 03:48 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-05-14 19:48 - 2019-04-09 03:48 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2019-05-14 19:39 - 2019-05-14 19:48 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-05-14 19:30 - 2019-05-14 19:53 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-05-14 19:07 - 2019-05-14 19:07 - 000000000 ____D C:\Users\Woytman\AppData\Local\GHISLER
2019-05-14 10:24 - 2019-05-14 10:24 - 000000000 ____D C:\Users\Woytman\AppData\Local\MAGIX
2019-05-14 10:03 - 2019-05-14 10:24 - 000000000 ____D C:\Users\Woytman\Documents\Bandicam
2019-05-14 09:39 - 2019-05-14 20:05 - 000000000 ____D C:\Users\Woytman\AppData\Local\Adobe
2019-05-14 09:39 - 2019-05-14 09:39 - 000000000 ____D C:\Users\Woytman\AppData\LocalLow\Adobe
2019-05-13 18:46 - 2019-05-13 18:46 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-05-13 18:45 - 2019-05-15 05:20 - 000000000 ____D C:\Users\Woytman\AppData\Local\PlaceholderTileLogoFolder
2019-05-13 18:45 - 2019-05-13 18:45 - 000001074 _____ C:\Users\Public\Desktop\EaseUS Data Recovery Wizard.lnk
2019-05-13 18:45 - 2019-05-13 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard
2019-05-13 18:45 - 2019-05-13 18:45 - 000000000 ____D C:\Program Files\EaseUS
2019-05-13 13:05 - 2019-05-13 13:05 - 000001091 _____ C:\Users\Woytman\Desktop\keye.txt
2019-05-12 23:56 - 2019-05-12 23:56 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\VEGAS Pro
2019-05-12 23:56 - 2019-05-12 23:56 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\MAGIX
2019-05-12 23:56 - 2019-05-12 23:56 - 000000000 ____D C:\ProgramData\VEGAS Pro
2019-05-12 23:56 - 2019-05-12 23:56 - 000000000 ____D C:\ProgramData\Magix
2019-05-10 13:40 - 2019-05-19 01:44 - 000001356 _____ C:\Users\Woytman\Desktop\Verify GTA 5 Files.lnk
2019-05-10 13:28 - 2019-05-10 13:28 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\LambdaMenu
2019-05-10 13:28 - 2019-05-10 13:28 - 000000000 ____D C:\Users\Woytman\AppData\Local\.IdentityService
2019-05-07 16:42 - 2019-05-07 16:42 - 000000000 ____D C:\Program Files (x86)\Tenda Wireless N Adapter
2019-05-07 16:42 - 2015-11-19 20:02 - 002244952 _____ (MediaTek Inc.) C:\WINDOWS\system32\Drivers\netr28ux.sys
2019-05-07 16:42 - 2015-11-19 20:02 - 000343712 _____ (Mediatek Inc.) C:\WINDOWS\system32\RaCoInstx.dll
2019-05-07 16:33 - 2017-11-09 04:57 - 001437380 ____N C:\WINDOWS\system32\Drivers\nvdrsdb.bin
2019-05-06 17:53 - 2019-05-06 17:53 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Visual Studio Code
2019-05-05 02:45 - 2019-05-05 02:45 - 000000761 _____ C:\Users\Woytman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fivem 2052019.lnk
2019-05-04 01:31 - 2019-05-04 01:31 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2019-05-04 01:31 - 2019-05-04 01:31 - 000000000 ____D C:\Users\Woytman\AppData\Local\PeerDistRepub
2019-05-04 00:23 - 2019-06-02 22:27 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-05-03 23:49 - 2019-05-03 23:49 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\DAEMON Tools Lite
2019-05-03 23:47 - 2019-05-03 23:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\DAEMON Tools Lite
2019-05-03 23:45 - 2019-06-02 22:59 - 000000000 ____D C:\Users\Woytman\AppData\Local\CrashDumps
2019-05-03 23:45 - 2019-05-31 10:39 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2019-05-03 23:45 - 2019-05-03 23:45 - 000000000 ____D C:\Users\Woytman\AppData\Local\DBG
2019-05-03 23:45 - 2019-05-03 23:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyDesk
2019-05-03 23:08 - 2019-05-03 23:08 - 000001168 _____ C:\Users\Public\Desktop\Remove Empty Directories.lnk
2019-05-03 23:08 - 2019-05-03 23:08 - 000000000 ____D C:\Users\Woytman\AppData\Local\Remove_Empty_Directories
2019-05-03 23:08 - 2019-05-03 23:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remove Empty Directories
2019-05-03 23:08 - 2019-05-03 23:08 - 000000000 ____D C:\Program Files (x86)\Remove Empty Directories

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-06-02 23:04 - 2019-04-06 19:08 - 001689050 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-06-02 23:04 - 2019-04-06 17:37 - 000715018 _____ C:\WINDOWS\system32\perfh005.dat
2019-06-02 23:04 - 2019-04-06 17:37 - 000144332 _____ C:\WINDOWS\system32\perfc005.dat
2019-06-02 23:04 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2019-06-02 23:01 - 2019-03-25 20:15 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Notepad++
2019-06-02 23:00 - 2019-03-24 17:41 - 000000000 ____D C:\ProgramData\NVIDIA
2019-06-02 22:59 - 2019-04-06 22:21 - 000000000 ____D C:\Program Files (x86)\Steam
2019-06-02 22:59 - 2019-04-06 19:06 - 000002238 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-06-02 22:58 - 2019-04-06 19:06 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-06-02 22:58 - 2019-04-06 19:00 - 000000000 ____D C:\Users\Woytman
2019-06-02 22:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Registration
2019-06-02 22:58 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-06-02 22:57 - 2019-03-24 17:34 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\uTorrent
2019-06-02 22:57 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-06-02 22:27 - 2019-03-24 17:17 - 000000000 ____D C:\Users\Woytman\AppData\Local\Packages
2019-06-02 22:26 - 2019-04-06 14:59 - 000907962 _____ C:\WINDOWS\ZAM.krnl.trace
2019-06-02 22:24 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-06-02 22:23 - 2019-04-19 20:24 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2019-06-02 22:19 - 2019-04-03 21:16 - 000001122 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2019-06-02 22:19 - 2019-04-03 21:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2019-06-02 21:56 - 2019-03-25 00:06 - 000000000 ____D C:\Users\Woytman\AppData\Local\NVIDIA Corporation
2019-06-02 21:53 - 2019-03-25 00:06 - 000000000 ____D C:\Users\Woytman\AppData\Local\NVIDIA
2019-06-02 21:41 - 2019-03-27 22:36 - 000000000 ____D C:\ProgramData\RogueKiller
2019-06-02 21:38 - 2019-04-20 22:41 - 000001106 _____ C:\Users\Woytman\Desktop\Free Screen Recorder.lnk
2019-06-02 21:38 - 2019-04-06 22:07 - 000002247 _____ C:\Users\Woytman\Desktop\Discord.lnk
2019-06-02 21:38 - 2019-04-06 20:45 - 000002122 _____ C:\Users\Woytman\Desktop\FiveM.lnk
2019-06-02 21:34 - 2019-04-06 18:55 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-06-01 21:26 - 2019-04-06 19:06 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2019-05-30 22:20 - 2019-04-03 22:44 - 000000000 ____D C:\ProgramData\Caphyon
2019-05-30 22:20 - 2019-03-26 00:09 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-05-30 22:19 - 2019-04-06 17:33 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-05-23 18:14 - 2019-03-28 22:34 - 005085672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2019-05-23 00:01 - 2019-03-24 17:41 - 005432688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2019-05-23 00:01 - 2019-03-24 17:41 - 002637808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2019-05-23 00:01 - 2019-03-24 17:41 - 001767920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2019-05-23 00:01 - 2019-03-24 17:41 - 000650608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2019-05-23 00:01 - 2019-03-24 17:41 - 000450872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2019-05-23 00:01 - 2019-03-24 17:41 - 000125240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2019-05-23 00:01 - 2019-03-24 17:41 - 000083440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2019-05-22 17:03 - 2019-03-24 17:41 - 008579232 _____ C:\WINDOWS\system32\nvcoproc.bin
2019-05-19 01:55 - 2019-04-06 19:31 - 000000000 ____D C:\Users\Woytman\AppData\Local\D3DSCache
2019-05-19 01:31 - 2019-03-24 17:41 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2019-05-18 18:19 - 2019-04-06 15:20 - 000000000 ____D C:\Program Files\rempl
2019-05-17 05:35 - 2019-04-26 23:21 - 000000600 _____ C:\Users\Woytman\AppData\Roaming\winscp.rnd
2019-05-17 05:35 - 2019-04-06 22:06 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Discord
2019-05-17 05:33 - 2019-04-19 01:09 - 038595778 _____ C:\Users\Woytman\AppData\Roaming\gta5_patch.bin
2019-05-17 05:32 - 2019-02-01 13:15 - 000000000 ____D C:\Users\Woytman\Desktop\LocNetManager
2019-05-17 04:21 - 2019-03-24 17:26 - 000000000 ____D C:\Users\Woytman\AppData\Local\Google
2019-05-17 04:20 - 2019-03-24 17:26 - 000000000 ____D C:\Program Files (x86)\Google
2019-05-16 23:07 - 2019-04-14 12:16 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Mozilla
2019-05-16 20:18 - 2019-04-06 14:57 - 000000424 _____ C:\WINDOWS\Tasks\update-sys.job
2019-05-16 20:18 - 2019-04-06 14:57 - 000000424 _____ C:\WINDOWS\Tasks\update-S-1-5-21-2686244867-1535793079-1624404764-1002.job
2019-05-16 03:47 - 2019-04-06 19:06 - 000003120 _____ C:\WINDOWS\System32\Tasks\update-S-1-5-21-2686244867-1535793079-1624404764-1002
2019-05-16 03:47 - 2019-04-06 19:06 - 000002864 _____ C:\WINDOWS\System32\Tasks\update-sys
2019-05-16 03:47 - 2019-04-06 19:06 - 000002830 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2019-05-16 03:47 - 2019-04-06 19:06 - 000002246 _____ C:\WINDOWS\System32\Tasks\KMS_VL_ALL
2019-05-16 03:46 - 2019-04-26 18:12 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\FileZilla
2019-05-16 03:18 - 2019-05-02 22:19 - 000000000 ____D C:\Users\Woytman\Documents\Fivem 2052019
2019-05-15 05:25 - 2019-04-08 18:18 - 000000000 ____D C:\Users\Woytman\AppData\Local\ElevatedDiagnostics
2019-05-15 05:20 - 2019-03-24 17:17 - 000000000 ____D C:\Users\Woytman\AppData\Local\ConnectedDevicesPlatform
2019-05-15 05:17 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-05-15 04:08 - 2019-04-10 21:12 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2019-05-15 04:06 - 2017-09-29 15:46 - 000000167 _____ C:\WINDOWS\win.ini
2019-05-15 04:03 - 2019-04-06 18:55 - 005063360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-05-15 04:02 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-05-15 04:02 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-05-15 04:02 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-05-15 04:02 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-05-15 04:02 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-05-14 21:13 - 2019-04-06 19:32 - 000000000 ____D C:\Users\Woytman\Documents\Lightshot
2019-05-14 19:39 - 2019-04-06 15:14 - 132445408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-05-14 19:39 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-05-14 19:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-05-14 19:16 - 2019-04-14 18:23 - 000000132 _____ C:\Users\Woytman\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2019-05-14 10:07 - 2019-03-26 20:38 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\vlc
2019-05-14 09:39 - 2019-03-24 17:17 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Adobe
2019-05-13 17:56 - 2019-04-06 20:45 - 000000000 ____D C:\Users\Woytman\AppData\Local\FiveM
2019-05-12 23:56 - 2019-04-07 04:33 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\VEGAS
2019-05-09 21:49 - 2019-04-06 21:36 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\CitizenFX
2019-05-08 23:13 - 2019-04-14 01:01 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\Code
2019-05-04 14:01 - 2019-04-06 19:09 - 000000000 ____D C:\ProgramData\Packages
2019-05-04 13:29 - 2019-03-25 23:34 - 000000000 ____D C:\Program Files\CCleaner
2019-05-04 01:53 - 2018-04-12 01:41 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-05-04 01:53 - 2018-04-12 01:41 - 000179816 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-05-04 01:32 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\spool
2019-05-03 23:47 - 2019-03-25 20:15 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2019-05-03 23:47 - 2019-03-25 10:42 - 000000856 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2019-05-03 23:47 - 2019-03-25 10:42 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2019-05-03 23:45 - 2019-04-01 00:26 - 000001961 _____ C:\Users\Public\Desktop\AnyDesk.lnk
2019-05-03 23:45 - 2019-04-01 00:26 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\AnyDesk
2019-05-03 23:35 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2019-05-03 23:35 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-05-03 23:35 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-05-03 23:35 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\com
2019-05-03 23:34 - 2019-04-09 22:34 - 000000000 ____D C:\ProgramData\MemoQ
2019-05-03 23:34 - 2019-04-03 20:21 - 000000000 ____D C:\ProgramData\Adobe
2019-05-03 23:34 - 2019-03-24 17:08 - 000000000 ____D C:\WINDOWS\SoftwareDistribution.old
2019-05-03 23:34 - 2018-04-12 01:41 - 000000000 ____D C:\WINDOWS\Setup
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\winevt
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\ras
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\MUI
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\com
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\security
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\InputMethod
2019-05-03 23:34 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Help
2019-05-03 23:34 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\SMI
2019-05-03 23:34 - 2017-09-29 15:46 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2019-05-03 23:28 - 2019-03-24 17:41 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-05-03 23:22 - 2019-04-09 22:34 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\MemoQ
2019-05-03 23:22 - 2019-03-29 21:55 - 000000000 ____D C:\Users\Woytman\AppData\Roaming\audacity
2019-05-03 23:21 - 2019-03-24 23:07 - 000000000 ____D C:\Users\Woytman\AppData\Local\qBittorrent
2019-05-03 23:21 - 2019-03-24 17:17 - 000000000 ____D C:\Users\Woytman\AppData\Local\Publishers
2019-05-03 23:20 - 2019-04-07 04:17 - 000000000 ____D C:\Users\Woytman\AppData\Local\Movavi
2019-05-03 23:20 - 2019-03-24 17:25 - 000000000 ____D C:\Users\Woytman\AppData\Local\MicrosoftEdge
2019-05-03 23:18 - 2019-04-03 20:23 - 000000000 ____D C:\Users\Woytman\Documents\Adobe

==================== Files in the root of some directories =======

2019-05-02 23:14 - 2019-05-02 23:22 - 000000132 _____ () C:\Users\Woytman\AppData\Roaming\Adobe Formát GIF CS6 – předvolby
2019-04-14 18:23 - 2019-05-14 19:16 - 000000132 _____ () C:\Users\Woytman\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2019-04-14 02:23 - 2019-04-14 02:23 - 000000128 ____H () C:\Users\Woytman\AppData\Roaming\ecf00c38dc807e105d881c433a6b455dd2c606b6
2019-04-19 01:09 - 2019-05-17 05:33 - 038595778 _____ () C:\Users\Woytman\AppData\Roaming\gta5_patch.bin
2019-04-19 01:09 - 2019-04-19 01:09 - 000332800 _____ () C:\Users\Woytman\AppData\Roaming\patcher.dll
2019-04-26 23:21 - 2019-05-17 05:35 - 000000600 _____ () C:\Users\Woytman\AppData\Roaming\winscp.rnd
2019-05-02 21:44 - 2019-05-02 21:46 - 000000128 _____ () C:\Users\Woytman\AppData\Local\PUTTY.RND
2019-04-06 14:57 - 2019-04-06 14:57 - 000000003 _____ () C:\Users\Woytman\AppData\Local\updater.log
2019-04-06 14:57 - 2019-04-06 14:57 - 000000425 _____ () C:\Users\Woytman\AppData\Local\UserProducts.xml

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

[autoprd]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2019
Ran by Woytman (02-06-2019 23:09:01)
Running from C:\Users\Woytman\Downloads
Windows 10 Pro Version 1803 17134.765 (X64) (2019-04-06 17:06:44)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2686244867-1535793079-1624404764-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2686244867-1535793079-1624404764-503 - Limited - Disabled)
Guest (S-1-5-21-2686244867-1535793079-1624404764-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2686244867-1535793079-1624404764-504 - Limited - Disabled)
Woytman (S-1-5-21-2686244867-1535793079-1624404764-1002 - Administrator - Enabled) => C:\Users\Woytman

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.156 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.3 (HKLM-x32\...\{3BD13111-2F32-4AB7-B9BB-16E07C9AA894}) (Version: 12.3.4.204 - Adobe Systems, Inc)
Aktualizace NVIDIA 36.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 36.0.0.0 - NVIDIA Corporation) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.1 - Sereby Corporation)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 5.1.2 - philandro Software GmbH)
Application Verifier x64 External Package (HKLM\...\{55117E45-6881-FF5B-77B2-97FFCF64D2D8}) (Version: 10.1.10586.212 - Microsoft) Hidden
Audacity 2.3.1 (HKLM-x32\...\Audacity_is1) (Version: 2.3.1 - Audacity Team)
Auslogics Registry Defrag (HKLM-x32\...\{D627784F-B3EE-44E8-96B1-9509B991EA34}_is1) (Version: 11.0.24.0 - Auslogics Labs Pty Ltd)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.55 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.10.0.0811 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\Discord) (Version: 0.0.305 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 419.67 - NVIDIA Corporation) Hidden
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
FileZilla Client 3.41.2 (HKLM-x32\...\FileZilla Client) (Version: 3.41.2 - Tim Kosse)
FiveM (HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\CitizenFX_FiveM) (Version: - The CitizenFX Collective)
Free Screen Recorder v2.9 (HKLM-x32\...\Free Screen Recorder_is1) (Version: 2.9 - Nbxsoft Software Development)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.169 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: "1.0.0.10" - Rockstar Games)
Intellisense Lang Pack Mobile Extension SDK 10.0.10586.0 (HKLM-x32\...\{AEFFC56C-3A4B-4A40-BF77-4DC2496A4781}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Kits Configuration Installer (HKLM-x32\...\{63AAA877-5536-9481-2385-28A082100D78}) (Version: 10.1.18362.1 - Microsoft) Hidden
Lightshot-5.4.0.35 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.35 - Skillbrains)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{BA62A9E2-7BB4-4D4A-8C5F-CC03C35491BD}) (Version: 4.6.00079 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{6C8591F8-C4FC-4A64-9E21-7F35F1D51D09}) (Version: 4.6.00079 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{4ffaf7b8-a84a-4813-840c-8b1f1343ae54}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{dd1e9bde-2ad6-4e92-8c07-7d4723eab8b8}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27012 (HKLM-x32\...\{427ada59-85e7-4bc8-b8d5-ebf59db60423}) (Version: 14.16.27012.6 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27012 (HKLM-x32\...\{67f67547-9693-4937-aa13-56e296bd40f6}) (Version: 14.16.27012.6 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.33.1 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 2.0.3297.403 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minimal WLPC Content (HKLM-x32\...\{5A12DC60-4F2E-5F1F-B7DD-1B957C2620D3}) (Version: 10.1.18362.1 - Microsoft) Hidden
MSI Development Tools (HKLM-x32\...\{E1A19E8F-EBA7-0CBD-F146-F71E2A55EA41}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.6.6 - Notepad++ Team)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.15 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.18.0.102 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.18.0.102 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.38.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.16 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 430.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 430.86 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OEM Test Certificates (HKLM-x32\...\{DB789F11-7F0F-C7F8-AF6F-357C44090C38}) (Version: 10.1.18362.1 - Microsoft) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenIV (HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\OpenIV) (Version: 3.1.1032 - .black/OpenIV Team)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Ovládací panel NVIDIA 430.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 430.86 - NVIDIA Corporation) Hidden
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
PuTTY release 0.71 (64-bit) (HKLM\...\{B27534DB-4F72-4F49-A3AD-5EC1B6901E5E}) (Version: 0.71.0.0 - Simon Tatham)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8581 - Realtek Semiconductor Corp.)
Remove Empty Directories version 2.2 (HKLM-x32\...\{06F25DC8-71E2-44E2-805A-F15E15B51C74}_is1) (Version: 2.2 - Jonas John)
Revo Uninstaller Pro 4.1.0 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.1.0 - VS Revo Group, Ltd.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.4.1 - Rockstar Games)
SDK ARM Additions (HKLM-x32\...\{73681F86-CD86-4208-572F-959B45430B04}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
SDK ARM Additions EULA (HKLM-x32\...\{D3C12D2F-4EF0-7D05-6D9D-6542636B12F9}) (Version: 10.1.18362.1 - Microsoft Corporations) Hidden
SDK ARM Redistributables (HKLM-x32\...\{67EE3804-9642-62BA-EBF1-B1561FB4ECBE}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
SDK Debuggers (HKLM-x32\...\{026E12C2-B6A7-C9BD-EB0D-8EFC5BA3D03D}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
SDK Debuggers ARM (HKLM-x32\...\{82E6BEFF-C8FB-1B97-3026-15C48C8FF960}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0100-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{010BF41A-4D78-40C3-90BA-117DF64A0AE2}) (Version: - Microsoft)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tenda Wireless N Adapter (HKLM-x32\...\{C31EAC1A-437C-4436-AC50-ECA85AA238B9}_is1) (Version: - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.22 - Ghisler Software GmbH)
TreeSize Free V4.3.1 (HKLM-x32\...\TreeSize Free_is1) (Version: 4.3.1 - JAM Software)
Universal CRT Extension SDK (HKLM-x32\...\{315BBDA9-CE84-D465-59F8-B9C765D953AC}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{F4E7226B-6A1C-F4D6-1109-6E1CD5B3E633}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{2268A04F-5702-C969-FA06-D4EF52E5C8DA}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{463CE323-9AD6-9DD4-24C8-649032E5CF09}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{162CBC73-EDF0-EBB8-2782-F7ABF9CE5B76}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{AF5B9C51-F99A-59CC-70F5-214E9B535EE3}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Update for Skype for Business 2015 (KB4464547) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2A5F57FD-DB91-4010-9161-93639D305C0B}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4464547) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2A5F57FD-DB91-4010-9161-93639D305C0B}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4464547) 64-Bit Edition (HKLM\...\{90150000-012B-0405-1000-0000000FF1CE}_Office15.OMUI.cs-cz_{2A5F57FD-DB91-4010-9161-93639D305C0B}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB4464547) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{2A5F57FD-DB91-4010-9161-93639D305C0B}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C3ACFCEA-240F-4DCC-A0C3-DD55FEE6C3C2}) (Version: 2.58.0.0 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{344F3227-F502-4219-9DC4-1967E586FAFA}) (Version: 2.51.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 85.1 - Ubisoft)
VEGAS Pro 16.0 (HKLM\...\{0D090E4F-12A2-11E9-A3DD-00155D6302F2}) (Version: 16.0.361 - VEGAS)
Visual Studio Community 2019 (HKLM-x32\...\531f8026) (Version: 16.0.28803.202 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
VooPoo version 1.5.1.30 (HKLM-x32\...\{63EEAD1F-3FC8-40F5-A415-E4BE098004C0}_is1) (Version: 1.5.1.30 - KunShan XW-TEC)
vs_filehandler_amd64 (HKLM-x32\...\{37D994EA-A13D-48B0-9948-062E0C350270}) (Version: 16.0.28707 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{FFE3CC65-76D3-4D54-A22E-6BDF4C21CB6E}) (Version: 16.0.28707 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{F08DA172-0777-40C6-A8BA-D0F314560BEE}) (Version: 16.0.28518 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{2DB4A4FB-3DDD-4924-AF39-3FC5EDEC335A}) (Version: 16.0.28711 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{DA2B1838-3B2E-4220-8B2E-796F4624D463}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{78FFF2DE-FA9A-2A05-374D-D8B8B16A79A3}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
Windows Driver Kit - Windows 10.0.18362.1 (HKLM-x32\...\{79b88654-f6ed-4b70-83bf-2dd5bd68a715}) (Version: 10.1.18362.1 - Microsoft Corporation)
Windows SDK AddOn (HKLM-x32\...\{75C39BA6-1D02-4BEA-844F-0EA6C4B7FA1B}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.10586.212 (HKLM-x32\...\{43d9f43d-c90b-4fdf-9dfe-ecf9990bfa2a}) (Version: 10.1.10586.212 - Microsoft Corporation)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
WinRAR Universal Crack (HKLM-x32\...\WinRAR Universal Crack) (Version: 5.50 - Crackingpatching.com Team)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{5344751D-65BA-1995-1643-880B753C4F96}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{81EC5D95-C75A-327E-C42F-6EEFD36FCFF9}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{41616D0E-0BDB-664F-F982-48D730E339FF}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{DF6D11AE-A3BA-3316-C2F7-0F56BA5FDE90}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{FA7B691F-37D3-F76F-3AEC-78A7685E83DC}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{1A6370BB-F59E-80A9-C508-EFED1C29BF1A}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{0148377B-95A0-E3CD-CA6E-D5CA11E7DB7D}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{0072A9DC-6895-BACD-6F7D-600FC7B15A1B}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - en-us (HKLM-x32\...\{74B9E6F9-1793-4E90-22A1-A42254D04453}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - Other Languages (HKLM-x32\...\{1EE3550B-B5FB-B866-C153-1C609FBC1E89}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
WinSCP 5.15.1 (HKLM-x32\...\winscp3_is1) (Version: 5.15.1 - Martin Prikryl)
WPT Redistributables (HKLM-x32\...\{E2F5BEAC-556D-61E0-D92A-B28E22F6924A}) (Version: 10.1.10586.212 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{F490B5C5-AD01-DECE-F111-EBFDBC60AE3A}) (Version: 10.1.10586.212 - Microsoft) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2686244867-1535793079-1624404764-1002_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B}\InprocServer32 -> C:\WINDOWS\System32\mscomct2.ocx (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2019-01-27] (Notepad++ -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-05-03] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2019-05-03] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-05-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2019-05-19 01:48 - 2010-06-29 10:58 - 000104448 _____ () [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.00.18\ATKEX.dll
2019-05-19 01:48 - 2019-06-02 22:58 - 000025088 _____ () [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.00.18\PEbiosinterface32.dll
2019-05-19 01:48 - 2010-08-09 21:33 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AAHM\1.00.16\ASACPI.DLL
2019-05-19 01:49 - 2010-11-30 19:40 - 000108544 _____ (ASUS) [File not signed] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsAcpi.dll
2019-05-19 01:48 - 2011-10-29 09:59 - 000918448 _____ (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
2019-05-19 01:49 - 2010-11-22 16:56 - 000677888 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\asacpiEx.dll
2019-03-28 21:45 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2016-03-29 00:02 - 2016-03-29 00:02 - 000247808 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData:iSpring Solutions [128]
AlternateDataStreams: C:\Users\All Users:iSpring Solutions [128]
AlternateDataStreams: C:\ProgramData\Application Data:iSpring Solutions [128]
AlternateDataStreams: C:\Users\Woytman\Application Data:iSpring Solutions [128]
AlternateDataStreams: C:\Users\Woytman\AppData\Roaming:iSpring Solutions [128]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-04-12 01:38 - 2019-05-13 18:45 - 000000935 ____R C:\WINDOWS\system32\drivers\etc\hosts

0.0.0.0 activation.easeus.com
0.0.0.0 track.easeus.com
0.0.0.0 easeus.com
0.0.0.0 update.easeus.com

2019-04-13 03:43 - 2019-04-21 21:11 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\PuTTY\
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.10.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: AnyDesk => 2
MSCONFIG\Services: GoogleChromeElevationService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: ICEsoundService => 2
MSCONFIG\Services: MBAMIService => 2
MSCONFIG\Services: NvContainerLocalSystem => 2
MSCONFIG\Services: NvContainerNetworkService => 3
MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2
MSCONFIG\Services: NvTelemetryContainer => 2
MSCONFIG\Services: RaAutoInstSrv_RT2870 => 2
MSCONFIG\Services: SwitchBoard => 3
HKLM\...\StartupApproved\StartupFolder: => "AnyDesk.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "Lightshot"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "OneDriveSetup"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "TBPanel"
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{87C1A7B1-1CDF-47C0-9487-EE9760B5E8EB}] => (Allow) D:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{D01F9925-A46B-4AA3-98BE-CCAF83B28CC0}] => (Allow) D:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{7D1E23A4-9E18-417D-B0EF-9A83C254A8E4}] => (Allow) C:\Users\Woytman\AppData\Roaming\uTorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{78D4DCD4-71C3-49F1-AB38-46E1D0866E1B}] => (Allow) C:\Users\Woytman\AppData\Roaming\uTorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{C56DA9EE-1A06-4F46-A20B-9D882BCF7232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A2B1A4FC-2992-47C4-9400-BA3F0C690958}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{1FF7D068-8469-47F7-8BDA-BE06BE875894}C:\users\woytman\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\woytman\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{CE5E5083-C393-481D-B209-F036B9B88AC5}C:\users\woytman\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\woytman\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{F1CDF969-F42E-4567-B939-05EAC88DAEEE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{CE7F293F-301A-4C72-8598-203E553A6268}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{3E28BEF0-38A8-46C0-B491-224A0C56CAB8}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [UDP Query User{2F935AB6-0FCF-4DF0-BB68-CDB762DB24EA}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [{4BEB7217-AAAF-4C20-883A-F47F2A28FE0C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B684DE38-0B36-4BD2-A1E5-BAFA0812D9C7}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DC017F48-38B8-4E5E-A9DE-F909569FD1E1}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E7FB99BC-56B7-4578-8528-A03D1DEE9E55}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9E4224C8-1DE4-4B99-80A3-CACC7D05E560}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{C61C2188-4938-4A7B-A22E-1AE6B774188D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{F2CBDE93-3D3A-4664-8B48-82BEFE073A74}] => (Allow) LPort=33060
FirewallRules: [{F284A108-0D83-447D-A629-8DB7318BEDDE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BB7CB141-9835-4593-87D5-8914FDE60B7C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C94DC068-BCBA-4373-B0EB-3E07D81A03F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{65D362E6-AFA4-434D-AC9D-520FE3B5D773}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6FAD1F6D-F743-4424-8B04-61AB43A123DB}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{233E1D96-3C73-48D7-B00E-E652662EBB6A}] => (Block) C:\Program Files\EaseUS\EaseUS Data Recovery Wizard\DRW.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{DE7E7297-8DBC-46F4-A723-DCE2B8304EF3}] => (Block) C:\Program Files\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [TCP Query User{6F962B76-8693-483B-BFD0-ED2F11D8EFC5}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [UDP Query User{11FF448C-C97E-4ADE-A58A-3D988D346EEC}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [{A2E55459-365B-4A68-BF56-55659EA46220}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6C7A8771-D30A-4AC8-870C-45273785C8C9}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5CADB53A-5891-4E80-86DD-A4405E9142D3}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ECA34776-8A74-46D3-AD48-7733C671EA2F}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{708920DA-48F0-4430-894A-708F2C9715AF}D:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) D:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{81BF5675-6598-4754-89F7-F15160996A34}D:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) D:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{28909299-0ABB-40B9-B6B3-D2E221F4982F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AA4D3CAB-0169-48C1-BB35-ABAD712D207A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6DC4E3B8-19E8-4C6D-ADEA-930EF21CB8A0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{EE0F88A7-DFEF-46F2-8C65-A9BEA5E5F741}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5C9FEF29-20DE-4D5B-AD9E-E929BE7D9B6F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{D98D8065-C3FF-4B4A-9D8D-CE310059BABB}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> )
FirewallRules: [{6D003F8B-A9A5-42F6-95FF-0042E8D3A874}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> )
FirewallRules: [{3C2AC7EF-0E7D-4EEE-A8AA-E924368DE657}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> )
FirewallRules: [{B5BFAAB5-33FB-404E-BAC1-75B6E9F4C622}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> )
FirewallRules: [{C2706B0C-2E93-4B86-9D3A-838D9E7009D7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> )
FirewallRules: [{A3F60658-858A-4BFD-8105-7628A0A3BC5A}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> )

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: Qualcomm Atheros AR9485 Wireless Network Adapter
Description: Qualcomm Atheros AR9485 Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Realtek PCIe GbE Family Controller
Description: Realtek PCIe GbE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: rt640x64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/02/2019 10:15:30 PM) (Source: ESENT) (EventID: 104) (User: )
Description: registry-defrag-setup (212,T,97) {E8CA2BAD-1885-4B52-B7EF-B13CC8E8A39D}: Databázový stroj zastavil instanci (0) s chybou (-1090).



Sekvence interního načasování:
[1] 0.000005 +J(0)
[2] 0.000019 +J(0) +M(C:0K, Fs:1, WS:4K # 4K, PF:0K # 0K, P:0K)
[3] 0.000004 +J(0) +M(C:0K, Fs:1, WS:4K # 4K, PF:0K # 0K, P:0K)
[4] 0.000002 +J(0)
[5] 0.000001 +J(0)
[6] 0.000015 +J(0)
[7] -
[8] 0.000003 +J(0)
[9] 0.000153 +J(0) +M(C:0K, Fs:3, WS:-40K # 12K, PF:-52K # 0K, P:-52K)
[10] -
[11] -
[12] -
[13] -
[14] 0.000278 +J(0) +M(C:0K, Fs:1, WS:4K # 0K, PF:0K # 0K, P:0K)
[15] 0.000002 +J(0)
[16] 0.000003 +J(0).

Error: (06/02/2019 10:15:30 PM) (Source: ESENT) (EventID: 536) (User: )
Description: registry-defrag-setup (212,G,15) Pokus o vytvoření dočasné databáze C:\ProgramData\Auslogics\Registry Defrag\11.x\tmp.edb selhal s chybou -1023.

Error: (06/02/2019 10:15:30 PM) (Source: ESENT) (EventID: 485) (User: )
Description: registry-defrag-setup (212,D,15) {E8CA2BAD-1885-4B52-B7EF-B13CC8E8A39D}: Pokus o odstranění souboru C:\ProgramData\Auslogics\Registry Defrag\11.x\tmp.edb selhal. Došlo k systémové chybě 3 (0x00000003): Systém nemůže nalézt uvedenou cestu. . Operace odstranění složky selže a dojde k chybě -1023 (0xfffffc01).

Error: (06/02/2019 10:15:30 PM) (Source: ESENT) (EventID: 488) (User: )
Description: registry-defrag-setup (212,D,15) {E8CA2BAD-1885-4B52-B7EF-B13CC8E8A39D}: Pokus o vytvoření souboru C:\ProgramData\Auslogics\Registry Defrag\11.x\tmp.edb selhal. Došlo k systémové chybě 3 (0x00000003): Systém nemůže nalézt uvedenou cestu. . Operace vytvoření souboru selže a dojde k chybě -1023 (0xfffffc01).

Error: (06/02/2019 10:15:30 PM) (Source: ESENT) (EventID: 485) (User: )
Description: registry-defrag-setup (212,D,15) {E8CA2BAD-1885-4B52-B7EF-B13CC8E8A39D}: Pokus o odstranění souboru C:\ProgramData\Auslogics\Registry Defrag\11.x\tmp.edb selhal. Došlo k systémové chybě 3 (0x00000003): Systém nemůže nalézt uvedenou cestu. . Operace odstranění složky selže a dojde k chybě -1023 (0xfffffc01).

Error: (06/02/2019 09:38:03 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0


System errors:
=============
Error: (06/02/2019 11:05:59 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6KUR9TL)
Description: Nastavení oprávnění application-specific neuděluje oprávnění Local Activation pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-6KUR9TL\Woytman (SID: S-1-5-21-2686244867-1535793079-1624404764-1002) z adresy LocalHost (Using LRPC) běžící v kontejneru aplikací Unavailable – SID (Unavailable). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/02/2019 11:05:05 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6KUR9TL)
Description: Nastavení oprávnění application-specific neuděluje oprávnění Local Activation pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-6KUR9TL\Woytman (SID: S-1-5-21-2686244867-1535793079-1624404764-1002) z adresy LocalHost (Using LRPC) běžící v kontejneru aplikací Unavailable – SID (Unavailable). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/02/2019 11:04:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba VBoxVmService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (06/02/2019 11:02:15 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6KUR9TL)
Description: Nastavení oprávnění application-specific neuděluje oprávnění Local Activation pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-6KUR9TL\Woytman (SID: S-1-5-21-2686244867-1535793079-1624404764-1002) z adresy LocalHost (Using LRPC) běžící v kontejneru aplikací Unavailable – SID (Unavailable). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/02/2019 10:58:38 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (06/02/2019 10:57:53 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Služba RT2870 AutoInstall Service ohlásila neplatný současný stav 0.

Error: (06/02/2019 10:24:17 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6KUR9TL)
Description: Nastavení oprávnění application-specific neuděluje oprávnění Local Activation pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-6KUR9TL\Woytman (SID: S-1-5-21-2686244867-1535793079-1624404764-1002) z adresy LocalHost (Using LRPC) běžící v kontejneru aplikací Unavailable – SID (Unavailable). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/02/2019 10:23:13 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6KUR9TL)
Description: Nastavení oprávnění application-specific neuděluje oprávnění Local Activation pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-6KUR9TL\Woytman (SID: S-1-5-21-2686244867-1535793079-1624404764-1002) z adresy LocalHost (Using LRPC) běžící v kontejneru aplikací Unavailable – SID (Unavailable). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.


CodeIntegrity:
===================================

Date: 2019-06-02 23:02:25.039
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-06-02 23:02:25.038
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-06-02 22:58:48.197
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-06-02 22:58:48.189
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-06-02 22:50:03.009
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-06-02 22:50:03.008
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-06-02 22:30:44.266
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-06-02 22:30:44.265
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 6701 07/16/2014
Motherboard: ASUSTeK COMPUTER INC. F2A55-M LK
Processor: AMD Athlon(tm) X4 750K Quad Core Processor
Percentage of memory in use: 26%
Total physical RAM: 8138.66 MB
Available physical RAM: 5976.27 MB
Total Virtual: 16330.66 MB
Available Virtual: 13921.61 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.19 GB) (Free:44.81 GB) NTFS
Drive d: () (Fixed) (Total:476.81 GB) (Free:390.86 GB) NTFS

\\?\Volume{0fbc0305-e5f7-4d29-962d-5b5b435da22e}\ (Recovery) (Fixed) (Total:0.49 GB) (Free:0.11 GB) NTFS
\\?\Volume{0fe27b06-4d31-4f7f-9bb8-790de45970da}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Protective MBR) (Size: 476.9 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (Size: 111.8 GB) (Disk ID: 5C40BF0A)

Partition: GPT.

========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 0013F027)

==================== End of Addition.txt ============================

[JaRon]

ahoj,
citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>

Kód: Vybrat vše

Start
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\MountPoints2: {cf8f2ff9-5d99-11e9-aecf-502b73d42da7} - "F:\AutoInst.exe" 
GroupPolicy: Restriction ? <==== ATTENTION
CHR Extension: (Social Blade) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2019-05-17] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
AlternateDataStreams: C:\ProgramData:iSpring Solutions [128]
AlternateDataStreams: C:\Users\All Users:iSpring Solutions [128]
AlternateDataStreams: C:\ProgramData\Application Data:iSpring Solutions [128]
AlternateDataStreams: C:\Users\Woytman\Application Data:iSpring Solutions [128]
AlternateDataStreams: C:\Users\Woytman\AppData\Roaming:iSpring Solutions [128]


EmptyTemp:
Reboot:
End

•Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[autoprd]

Fix result of Farbar Recovery Scan Tool (x64) Version: 01-06-2019
Ran by Woytman (04-06-2019 17:26:27) Run:1
Running from C:\Users\Woytman\Desktop
Loaded Profiles: Woytman (Available Profiles: Woytman)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\...\MountPoints2: {cf8f2ff9-5d99-11e9-aecf-502b73d42da7} - "F:\AutoInst.exe"
GroupPolicy: Restriction ? <==== ATTENTION
CHR Extension: (Social Blade) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2019-05-17] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
AlternateDataStreams: C:\ProgramData:iSpring Solutions [128]
AlternateDataStreams: C:\Users\All Users:iSpring Solutions [128]
AlternateDataStreams: C:\ProgramData\Application Data:iSpring Solutions [128]
AlternateDataStreams: C:\Users\Woytman\Application Data:iSpring Solutions [128]
AlternateDataStreams: C:\Users\Woytman\AppData\Roaming:iSpring Solutions [128]


EmptyTemp:
Reboot:
End
*****************

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKU\S-1-5-21-2686244867-1535793079-1624404764-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cf8f2ff9-5d99-11e9-aecf-502b73d42da7} => removed successfully
HKLM\Software\Classes\CLSID\{cf8f2ff9-5d99-11e9-aecf-502b73d42da7} => not found
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
CHR Extension: (Social Blade) - C:\Users\Woytman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2019-05-17] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION => Error: No automatic fix found for this entry.
HKLM\System\CurrentControlSet\Services\amsdk => removed successfully
amsdk => service removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => not found
C:\ProgramData => ":iSpring Solutions" ADS removed successfully
"C:\Users\All Users" => ":iSpring Solutions" ADS not found.
"C:\ProgramData\Application Data" => ":iSpring Solutions" ADS not found.
C:\Users\Woytman\Application Data => ":iSpring Solutions" ADS removed successfully
"C:\Users\Woytman\AppData\Roaming" => ":iSpring Solutions" ADS not found.

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 50896074 B
Java, Flash, Steam htmlcache => 43078469 B
Windows/system/drivers => 204337 B
Edge => 0 B
Chrome => 165810484 B
Firefox => 458752 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 9245 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
Woytman => 679310872 B

RecycleBin => 474 B
EmptyTemp: => 903.8 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 17:27:47 ====

[JaRon]

Ak nie su problemy, tak hotovo