Preventivní kontrola PC

Zpráva

TTommikk · #1 Příspěvek od **TTommikk** » 02 zář 2019 21:03

Prosím o preventivní kontrolu logu z notebooku. Již dlouho jsem žádnou kontrolu neprováděl. Předem děkuji

TTommikk · #2 Příspěvek od **TTommikk** » 02 zář 2019 21:05

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2019
Ran by Tomáš (administrator) on TOMASPC (Hewlett-Packard HP ProBook 450 G0) (02-09-2019 22:02:12)
Running from C:\Users\Tomáš\Desktop
Loaded Profiles: Tomáš (Available Profiles: Tomáš)
Platform: Windows 8.1 Pro (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-07] (IDT, Inc.) [File not signed]
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [336672 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [94792424 2019-07-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46993264 2019-06-27] (Google LLC -> )
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Run: [HP DeskJet 5000 (NET)] => C:\Program Files\HP\HP DeskJet 5000 series\Bin\ScanToPCActivationApp.exe [4065416 2018-04-19] (Hewlett Packard -> HP Inc.)
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [7610952 2019-06-12] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_153_Plugin.exe [1456128 2018-11-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {694ee494-763c-11e7-8286-a45d36cd7354} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {69af2778-3851-11e9-82c8-a45d36cd7354} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {d3259550-3f7f-11e9-82c8-a45d36cd7354} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30796352 2018-10-24] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-09-01] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.82\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
Startup: C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2016-09-04]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2018-09-09]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01A2735B-B578-4239-A078-B33AA1CBB8FE} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2343544 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {188D854F-5582-458F-8382-8745811AA5FB} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2838920 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
Task: {1D1CB19F-B2D3-459E-87C4-48FDC0CCE3D6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6299288 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {2988BD4E-E4F9-4B77-92C6-6D26AB7FC30F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {4FC29FF9-80B9-459F-BB4D-585BB7AB2158} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
Task: {582E7CA1-0E1D-406B-BA99-4FAB5EDD578A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2174608 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {5D3EEDFA-99BF-41E2-A0DA-54DFAF329B62} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136056 2019-01-02] (HP Inc. -> HP Inc.)
Task: {5F8FEFE3-2910-4E49-A0FB-6221109B4BF8} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [39920 2018-10-24] (Garmin International, Inc. -> )
Task: {645AAAE6-3EE1-4574-B1AF-DC29D1267B5C} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_153_Plugin.exe [1456128 2018-11-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {7571E7E1-B377-41B7-A440-FF7B3F36DCD2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [13797712 2018-09-08] (Piriform Ltd -> Piriform Ltd)
Task: {75C75B4A-93C6-4A24-B9DE-6577777190A9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6299288 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {7FCA8A2B-869F-4E34-A23E-4A167B1CE8B1} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [156712 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {816606C3-417F-4B9E-AB32-5A87AF967D3D} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3956824 2017-08-16] (Synaptics Incorporated -> Synaptics Incorporated)
Task: {83CFF232-5DE2-403B-B716-B1C13E11C423} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-31] (Google Inc -> Google Inc.)
Task: {9DDC59B4-A055-4698-9753-8609202BD615} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2174608 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {9F6362ED-6EB6-4D00-BBBA-2FDD4EEDC255} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {A79CC7E9-1ACF-4EF2-8DFE-686A30E0F4C9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [651400 2017-09-20] (Hewlett Packard -> HP Inc.)
Task: {AA07C323-2B2D-4E4E-B6AE-4C84011CCA45} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [743616 2015-12-02] (@ByELDI -> @ByELDI) [File not signed]
Task: {B2928C48-70A7-4EA5-A9E2-2B67EF1EA095} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-31] (Google Inc -> Google Inc.)
Task: {B2C805BD-0B9B-49B8-BAC2-E47EEBA1909F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367016 2019-08-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {B6C35989-EA31-4FD2-BECE-EFA921908D21} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2045832 2019-08-23] (AVAST Software s.r.o. -> AVAST Software)
Task: {C435411F-D1E4-4BA5-9B3F-8920E99E2D88} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [156712 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {DCCB49FE-FCE0-4CAE-91AD-5B2DA4B7D8BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367016 2019-08-24] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{398CC933-2364-4ECF-8C36-E25A03D70F9F}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{6FD0246E-E0CC-493D-A72F-06015BBE4AF9}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\S-1-5-21-508856505-97066582-1914413276-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-07-02] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-04-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2019-05-06] (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: it11cpe7.default
FF ProfilePath: C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\it11cpe7.default [2019-09-02]
FF Extension: (uBlock Origin) - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\it11cpe7.default\Extensions\uBlock0@raymondhill.net.xpi [2019-07-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_31_0_0_153.dll [2018-11-26] (Adobe Systems Incorporated -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-07-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_153.dll [2018-11-26] (Adobe Systems Incorporated -> )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-04-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-04-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-19] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-19] (Google Inc -> Google LLC)

Chrome:
=======
CHR HomePage: Default -> hxxp://seznam.cz/
CHR StartupUrls: Default -> "hxxp://seznam.cz/"
CHR Profile: C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default [2019-09-02]
CHR Extension: (Překladač Google) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-19]
CHR Extension: (Prezentace) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Super Netflix) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aioencjhbaolepcoappllicjebblphoc [2018-01-07]
CHR Extension: (Dokumenty) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-24]
CHR Extension: (YouTube) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-24]
CHR Extension: (uBlock Origin) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2019-08-23]
CHR Extension: (Kalendář Google) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-06]
CHR Extension: (Tabulky) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Word Online) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2016-07-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-26]
CHR Extension: (Pocket Website) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap [2016-07-24]
CHR Extension: (Google Play) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2016-07-24]
CHR Extension: (Evernote Web) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol [2016-07-24]
CHR Extension: (Rozšíření Google Keep pro Chrome) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2019-09-01]
CHR Extension: (Upravte a pošlete snímek obrazovky) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdddabjhelpilpnpgondfmehhcplpiin [2019-06-18]
CHR Extension: (Save to Pocket) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2019-08-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2019-07-03]
CHR Extension: (Gmail) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-19]
CHR Extension: (Chrome Media Router) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-23]
CHR HKU\S-1-5-21-508856505-97066582-1914413276-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255504 2015-08-31] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6570352 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [360440 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1547200 2017-10-26] (Epic Games Inc. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11568224 2019-08-24] (Microsoft Corporation -> Microsoft Corporation)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [791112 2019-06-12] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7170632 2019-06-12] (GOG Sp. z o.o. -> GOG.com)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [683296 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1006424 2013-01-23] (Hewlett-Packard Company -> Hewlett-Packard Company) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [347512 2018-12-06] (HP Inc. -> HP Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319096 2016-08-05] (Intel Corporation - pGFX -> Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [130592 2012-10-22] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166432 2012-10-22] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation)
R2 NbfcService; C:\Program Files (x86)\NoteBook FanControl\NbfcService.exe [8704 2017-05-29] (StagWare) [File not signed]
S3 PrintNotify; C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll [2896896 2017-09-29] (Microsoft Corporation) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2013-11-07] (IDT, Inc.) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246872 2017-08-16] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21645320 2015-08-31] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AMDKMDAP; C:\Windows\system32\DRIVERS\atikmpag.sys [676360 2015-08-31] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [75520 2015-08-31] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37320 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205608 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [254408 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196304 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320904 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [58168 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42496 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [169104 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88152 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1034640 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [476264 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [220632 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [380160 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
R3 HpqKbFiltr; C:\Windows\System32\drivers\HpqKbFiltr64.sys [28376 2014-05-15] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 netr28x; C:\Windows\system32\DRIVERS\netr28x.sys [2607792 2013-07-25] (Mediatek Inc. -> Ralink Technology, Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1205872 2014-06-26] (MEDIATEK INC. -> Ralink Technology, Corp.)
R3 RTL8168; C:\Windows\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
R3 STHDA; C:\Windows\system32\DRIVERS\stwrt64.sys [551936 2013-11-07] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
R1 WinRing0_1_2_0; C:\Program Files (x86)\NoteBook FanControl\WinRing0x64.sys [14544 2017-10-08] (Noriyuki MIYAZAKI -> OpenLibSys.org)
S3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [31840 2016-03-23] (Hewlett-Packard Company -> HP)
R3 WirelessButtonDriver64; C:\Windows\system32\DRIVERS\WirelessButtonDriver64.sys [31840 2016-03-23] (Hewlett-Packard Company -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-09-02 22:02 - 2019-09-02 22:04 - 000027086 _____ C:\Users\Tomáš\Desktop\FRST.txt
2019-09-02 22:01 - 2019-09-02 22:02 - 000000000 ____D C:\FRST
2019-09-02 22:01 - 2019-09-02 22:01 - 001615360 _____ (Farbar) C:\Users\Tomáš\Desktop\FRST64.exe
2019-09-01 18:09 - 2019-09-01 18:09 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2019-08-23 17:27 - 2019-08-23 17:28 - 000212992 _____ C:\Windows\system32\ClickToRun_Pipeline16

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-09-02 21:54 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-09-02 21:53 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-09-02 21:48 - 2016-07-25 20:44 - 000000000 ____D C:\ProgramData\NbfcService
2019-09-01 18:08 - 2016-07-26 10:13 - 000000000 ____D C:\Program Files\Microsoft Office
2019-09-01 17:42 - 2016-07-24 20:30 - 000003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-508856505-97066582-1914413276-1001
2019-09-01 17:37 - 2019-01-17 23:20 - 000000000 ____D C:\Users\Tomáš\AppData\Local\CrashDumps
2019-09-01 17:37 - 2016-07-31 00:14 - 000002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-09-01 17:37 - 2016-07-31 00:14 - 000002163 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-09-01 17:36 - 2017-10-08 10:58 - 000000000 ____D C:\Users\Tomáš\AppData\Roaming\NoteBookFanControl
2019-09-01 17:24 - 2016-08-18 13:45 - 000000000 ___RD C:\Users\Tomáš\Disk Google
2019-08-30 22:19 - 2013-09-30 06:20 - 001745984 _____ C:\Windows\system32\PerfStringBackup.INI
2019-08-30 22:19 - 2013-09-30 05:57 - 000739924 _____ C:\Windows\system32\perfh005.dat
2019-08-30 22:19 - 2013-09-30 05:57 - 000151610 _____ C:\Windows\system32\perfc005.dat
2019-08-30 22:19 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2019-08-30 22:17 - 2017-03-17 10:08 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2019-08-28 20:59 - 2018-09-08 23:27 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-08-28 20:59 - 2018-09-01 18:40 - 000004526 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-08-28 20:59 - 2016-07-31 00:13 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-08-28 20:59 - 2016-07-31 00:13 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-08-28 20:59 - 2016-07-29 12:39 - 000003554 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
2019-08-28 20:59 - 2016-07-26 11:36 - 000002788 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-08-28 20:59 - 2016-07-26 11:33 - 000003364 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2019-08-28 20:59 - 2016-07-25 20:21 - 000002990 _____ C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2019-08-28 20:59 - 2016-07-24 20:36 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software

==================== Files in the root of some directories ================

2018-06-03 21:27 - 2018-06-03 21:27 - 000000875 _____ () C:\Users\Tomáš\AppData\Local\recently-used.xbel

==================== FLock ================

2016-07-24 13:40 C:\Windows\CSC

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2019-08-23 17:54
==================== End of FRST.txt ============================

TTommikk · #3 Příspěvek od **TTommikk** » 02 zář 2019 21:05

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2019
Ran by Tomáš (02-09-2019 22:05:13)
Running from C:\Users\Tomáš\Desktop
Windows 8.1 Pro (Update) (X64) (2016-07-24 11:41:28)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-508856505-97066582-1914413276-500 - Administrator - Disabled)
Guest (S-1-5-21-508856505-97066582-1914413276-501 - Limited - Disabled)
Tomáš (S-1-5-21-508856505-97066582-1914413276-1001 - Administrator - Enabled) => C:\Users\Tomáš

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.153 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5094145C-9F17-8099-7F4F-E5AADD5E4065}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
ANT Drivers Installer x64 (HKLM\...\{D559687A-60C5-4786-9429-C21EC195789D}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.3.2369 - AVAST Software)
Backup and Sync from Google (HKLM\...\{768C0072-2FD2-4934-9824-B2A1E81AEA5D}) (Version: 3.45.5545.5747 - Google, Inc.)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Broadcom Bluetooth Drivers (HKLM\...\{0A1B4690-E176-4533-8058-939480AEE1D0}) (Version: 12.0.1.170 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
Elevated Installer (HKLM-x32\...\{0BF90608-2F95-4C7C-9A85-E90E0CAF4FE9}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Evernote v. 6.18.4 (HKLM-x32\...\{3E390FB8-703D-11E9-A27F-005056951CAD}) (Version: 6.18.4.8489 - Evernote Corp.)
FTL: Advanced Edition (HKLM-x32\...\1207659102_is1) (Version: 1.6.9 - GOG.com)
Garmin Express (HKLM-x32\...\{95D0EADA-5123-41C0-931A-F37946BC0E8E}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{eab4691c-4022-41cd-8d39-c3097ba62d4b}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 76.0.3809.132 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google2SRT (HKLM-x32\...\{B0A59B6D-5983-46D2-9B34-51B1C15055CD}) (Version: 0.7.5 - Google2SRT)
HP ESU for Microsoft Windows 8.1 (HKLM-x32\...\{A3876D50-4A88-4A34-92E1-5D7BC8F886E1}) (Version: 1.0.1 - Hewlett-Packard Company)
HP Hotkey Support (HKLM-x32\...\{57FA60DA-585F-456A-B80E-17D1CDD22A30}) (Version: 5.0.27.1 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{3D6FF65E-EE93-4D90-B5D7-0DC856E2AFEB}) (Version: 12.10.49.21 - HP)
HP System Default Settings (HKLM-x32\...\{987210BB-D707-48FC-88FA-4374765D108D}) (Version: 2.0.1 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6496.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.20.1337 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
KMSpico 10.2.0 10.2.0 (HKLM-x32\...\KMSpico 10.2.0 10.2.0) (Version: 10.2.0 - KMSpico)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Mediatek Bluetooth (HKLM\...\{904C579C-9366-D3B7-7F31-4879401DBD4A}) (Version: 11.0.756.0 - Mediatek)
Microsoft Office 365 ProPlus - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.11929.20254 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 67.0.4 (x64 cs) (HKLM\...\Mozilla Firefox 67.0.4 (x64 cs)) (Version: 67.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 67.0.4.7109 - Mozilla)
NoteBook FanControl (HKLM-x32\...\{21685c56-05b5-404c-a9d9-bf568d3749a0}) (Version: 1.5.3.0 - Stefan Hirschmann - StagWare)
NoteBook FanControl (HKLM-x32\...\{CE2D4D25-DF9B-4E9D-A4CB-2E4545271F70}) (Version: 1.5.3.0 - Stefan Hirschmann - StagWare) Hidden
OEM Application Profile (HKLM-x32\...\{29F5A1C9-0BC3-16E6-9384-3BC5D1CB7ACE}) (Version: 1.00.0000 - Název společnosti:)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20254 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20254 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.11929.20254 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PX Profile Update (HKLM-x32\...\{C5705DBC-3A55-986A-7114-A5F86AADDD06}) (Version: 1.00.1. - AMD) Hidden
Spotify (HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Spotify) (Version: 1.1.9.383.g9f48828e - Spotify AB)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.1 - Krzysztof Kowalczyk)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.63 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.2.0.19260 - Microsoft Corporation)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Validity Fingerprint Sensor Driver (HKLM\...\{ADAA7361-54B8-4FC8-804E-94EC6C11ED68}) (Version: 4.5.133.0 - Validity Sensors, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
Základní software zařízení HP DeskJet 5000 series (HKLM\...\{3AA0D498-49DD-44EC-8AA8-9AFC670DB249}) (Version: 44.3.2218.18109 - HP Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-508856505-97066582-1914413276-1001_Classes\CLSID\{55808EA8-81FE-43c6-AAE8-1D8149F941D3}\InprocServer32 -> C:\Program Files\SumatraPDF\PdfFilter.dll () [File not signed]
CustomCLSID: HKU\S-1-5-21-508856505-97066582-1914413276-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation - pGFX -> Intel Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-06-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-06-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-06-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-06-27] (Google LLC -> Google)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-06-27] (Google LLC -> Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\atiacm64.dll [2015-08-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2016-08-05] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2019-07-22 14:17 - 2019-07-22 14:17 - 000113664 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_ctypes.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000173568 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_elementtree.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 001800192 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_hashlib.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000032256 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_multiprocessing.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000046080 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_psutil_windows.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000047616 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_socket.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 002230784 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_ssl.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000026112 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\_yappi.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000080896 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\bz2.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 006277632 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\cello.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000014848 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\common.time34.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000007680 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\hashobjs_ext.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000301568 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\PIL._imaging.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000169472 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\pyexpat.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 001084416 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\pysqlite2._sqlite.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000548864 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\pythoncom27.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 000137728 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\pywintypes27.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 000010752 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\select.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000020992 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\thumbnails_ext.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000689664 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\unicodedata.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000118784 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\usb_ext.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000128512 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32api.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000438784 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32com.shell.shell.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000011776 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32crypt.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000023040 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32event.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000149504 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32file.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000223232 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32gui.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000048128 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32inet.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000029696 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32pdh.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000027648 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32pipe.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000044032 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32process.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000020480 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32profile.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000136192 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32security.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000026624 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\win32ts.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000034304 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\windows.conditional.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000038400 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\windows.connectivity.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000073216 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\windows.device_monitor.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000110592 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\windows.volumes.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000020480 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\windows.winwrap.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 001325056 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wx._controls_.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 001489408 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wx._core_.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 001007104 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wx._gdi_.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000103424 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wx._html2.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 000916992 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wx._misc_.pyd
2019-07-22 14:17 - 2019-07-22 14:17 - 001039872 ____N () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wx._windows_.pyd
2018-02-08 11:46 - 2018-02-08 11:46 - 000202240 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\01c9edefd921d8cc6ff89e49a08e73a6\CCC.Implementation.ni.dll
2018-02-08 11:45 - 2018-02-08 11:45 - 000301056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\3461c787048a4f135f2b524c132f38b9\CLI.Foundation.ni.dll
2018-02-08 23:38 - 2018-02-08 23:38 - 000293376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\5f4785d76bc5c8466bedf7dd1113f713\LOG.Foundation.Implementation.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000147968 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\5d802549de7a6c91fcb7221aa28b108b\LOG.Foundation.Private.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000086528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\11c0fe133a491fb802d1b5e5107c992d\LOG.Foundation.Implementation.Private.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000133120 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\0c0a4358d7b66d3d4839e21cd63d08bf\LOG.Foundation.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\b3228efdb52a6e1b804746ce141d00b3\MOM.Foundation.ni.dll
2018-02-08 23:38 - 2018-02-08 23:38 - 000390656 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\084dfefdcc8e672b61fed78e82f883aa\MOM.Implementation.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\2e190f6dfdaa8a482f0d8e519391cbe7\NEWAEM.Foundation.ni.dll
2015-08-19 14:03 - 2015-08-19 14:03 - 000005120 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\atiamcsy.dll
2017-09-24 17:16 - 2008-04-03 05:00 - 000235520 _____ (CANON INC.) [File not signed] C:\Windows\System32\CNMLM83.DLL
2017-10-08 11:54 - 2017-10-08 11:54 - 000097280 _____ (GalaSoft Laurent Bugnion @ hxxp://www.galasoft.ch) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\GalaSoft.Mv591a4917#\360312f0df26da225f5ec84c809c088e\GalaSoft.MvvmLight.Extras.ni.dll
2017-10-08 11:54 - 2017-10-08 11:54 - 000212992 _____ (GalaSoft Laurent Bugnion @ hxxp://www.galasoft.ch) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\GalaSoft.MvvmLight\7882afaee56269f44a4bd8e3d22029bf\GalaSoft.MvvmLight.ni.dll
2017-10-08 11:54 - 2017-10-08 11:54 - 000154624 _____ (hardcodet.net) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Hardcodet.W6cab32f3#\20b7093a82ad508b69619d30c81a4814\Hardcodet.Wpf.TaskbarNotification.ni.dll
2013-01-23 21:44 - 2013-01-23 21:44 - 000016216 _____ (Hewlett-Packard Company -> ) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\Interop.HPQWMIEXLib.dll
2013-01-23 21:43 - 2013-01-23 21:43 - 002452824 _____ (Hewlett-Packard Company -> Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\hputils.dll
2013-01-23 21:44 - 2013-01-23 21:44 - 000068440 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\CaslSmBios.dll
2013-01-23 21:44 - 2013-01-23 21:44 - 000524632 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\CaslWmi.dll
2016-07-25 18:55 - 2016-07-25 18:55 - 000113496 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Windows\assembly\GAC_MSIL\CaslShared\3.5.1.1__9c6f83d5b7f3d097\CaslShared.dll
2016-07-25 18:55 - 2016-07-25 18:55 - 000092504 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Windows\assembly\GAC_MSIL\hpcasl\3.5.1.1__9c6f83d5b7f3d097\hpcasl.dll
2014-05-16 10:50 - 2014-05-16 10:50 - 000006656 _____ (Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\cs\HandlersStrings.resources.dll
2013-03-26 21:12 - 2013-03-26 21:12 - 000056832 _____ (Hewlett-Packard Development Company, L.P.) [File not signed] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HP.Mobile.Shared.dll
2016-07-26 10:08 - 2016-05-21 10:19 - 000077312 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2013-08-22 14:31 - 2017-09-29 15:40 - 002896896 _____ (Microsoft Corporation) [File not signed] C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
2017-10-08 11:54 - 2017-10-08 11:54 - 000034304 _____ (Microsoft) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.P4d3ce419#\23e5651623d0525c6461fe2a7222a1dd\Microsoft.Practices.ServiceLocation.ni.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 002775040 _____ (NLog) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\NLog\4ce317f88ec4329c93b303ba50dcab03\NLog.ni.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 003042304 ____N (Python Software Foundation) [File not signed] C:\Users\TOM~1\AppData\Local\Temp\_MEI90162\python27.dll
2017-10-08 11:52 - 2017-10-08 11:52 - 000017408 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.BiosInfo\ddf5111c27f39642b0c056cf87f2192d\StagWare.BiosInfo.ni.dll
2017-10-08 11:54 - 2017-10-08 11:54 - 000036352 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.Fa1fc2d056#\cd39978e79ff598f310bddc2d1dcaf5d\StagWare.FanControl.Service.ni.dll
2017-10-08 11:52 - 2017-10-08 11:52 - 000167936 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.Fafc31ac88#\bafe100a11bb2a4789eca5894750b0fc\StagWare.FanControl.Configurations.ni.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000144384 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.FanControl\ac3416be90242299ef18e34e6008189f\StagWare.FanControl.ni.dll
2017-10-08 11:54 - 2017-10-08 11:54 - 000039424 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.Settings\2c916f31645736e86d33dfc6a741f3cc\StagWare.Settings.ni.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 000202240 ____N (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wxbase30u_net_vc90_x64.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 002831872 ____N (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wxbase30u_vc90_x64.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 001654784 ____N (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wxmsw30u_adv_vc90_x64.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 006542336 ____N (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wxmsw30u_core_vc90_x64.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 000773632 ____N (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wxmsw30u_html_vc90_x64.dll
2019-07-22 14:17 - 2019-07-22 14:17 - 000137216 ____N (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI90162\wxmsw30u_webview_vc90_x64.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\sharepoint.com -> hxxps://malgym-files.sharepoint.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2019-02-25 18:35 - 000000041 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NoteBook FanControl\
HKU\S-1-5-21-508856505-97066582-1914413276-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Prohlížeč fotografií.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\StartupApproved\Run: => "Spotify Web Helper"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{4440500E-2A2E-4CE3-A3FF-66417F819A1F}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{221C8AF3-76F6-4FBB-9257-75A3317989C6}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{159A5873-2048-470A-B6C2-F6AB45B98221}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{FF2D840F-E30B-4884-BAC4-06A50412A714}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{241603BC-3EFB-47AE-9148-367EBF2BD7AC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File
FirewallRules: [{F62FA635-7262-493E-97FC-7A3F7FC7B909}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File
FirewallRules: [{CFF3B325-EDA7-4A51-BB73-E7460E621457}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{558FEC4D-D298-4F3A-B674-DE115D047084}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E59D35AB-8D46-4BCA-9BEA-1F552D78F2F5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{72F9D536-0640-4532-926C-F5B0555B6F94}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{EECB4F31-716E-4D54-9815-D425F3644E4F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{42C88F82-A367-4C7D-BB12-592BE6FB1687}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{089C2A5B-1D73-4565-9EF0-14EE9D940AA7}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{BE5FDE4B-F25F-45BF-BF47-E1EFD82E3AF6}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B47BC18E-FB95-45E8-ACEB-F10BA7DAD658}] => (Allow) C:\Program Files\HP\HP DeskJet 5000 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{096CC848-A6D1-47B2-BF80-2D8C5FCF2515}] => (Allow) LPort=5357
FirewallRules: [{157F4C39-E9AB-4041-8002-412EFC84C986}] => (Allow) C:\Program Files\HP\HP DeskJet 5000 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{60612BCD-0DB6-4C17-A502-CFD48E0494EC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{80E0A99E-4D91-4CAD-AA12-8A3AE58A4D36}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4FEBFC1C-4B86-4C55-B953-EFBAD6784247}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{DFAA4770-8A29-4D0E-B017-A74B13C24634}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

05-07-2019 12:13:38 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212
24-08-2019 11:26:55 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:
==================
Error: (09/02/2019 09:59:12 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkQuarantineRetry

Error: (09/02/2019 09:59:06 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/02/2019 09:51:43 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Sledování výkonu objektu indexovacího modulu nebylo inicializováno, protože nejsou načteny čítače nebo nebyl otevřen sdílený objekt paměti. Tato skutečnost má vliv pouze na dostupnost čítačů výkonu. Restartujte počítač.

Kontext: aplikace , katalog SystemIndex

Error: (09/02/2019 09:51:39 PM) (Source: EventSystem) (EventID: 4622) (User: )
Description: Systém událostí modelu COM+ nemohl sdružit odběratele pro odběr {FAA70919-83EA-4F01-A582-B789A929E918}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. Výsledek HRESULT byl 800401fb.

Error: (09/01/2019 05:51:53 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/01/2019 05:51:48 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/01/2019 05:36:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: NoteBookFanControl.exe, verze: 1.4.3.0, časové razítko: 0x592c3fe6
Název chybujícího modulu: KERNELBASE.dll, verze: 6.3.9600.18895, časové razítko: 0x5a4b1cf7
Kód výjimky: 0xe0434352
Posun chyby: 0x00000000000092fc
ID chybujícího procesu: 0x2a70
Čas spuštění chybující aplikace: 0x01d560db07af270d
Cesta k chybující aplikaci: C:\Program Files (x86)\NoteBook FanControl\NoteBookFanControl.exe
Cesta k chybujícímu modulu: C:\Windows\system32\KERNELBASE.dll
ID zprávy: 552ae312-ccce-11e9-82cc-a45d36cd7354
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (09/01/2019 05:36:58 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: NoteBookFanControl.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.IO.IOException
na System.IO.__Error.WinIOError(Int32, System.String)
na System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
na System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean)
na System.IO.FileStream..ctor(System.String, System.IO.FileMode)
na StagWare.Settings.SettingsService`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].Save()
na System.Windows.Threading.DispatcherTimer.FireTick(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na NbfcClient.App.Main()

System errors:
=============
Error: (09/02/2019 09:59:16 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (09/02/2019 09:59:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (09/02/2019 09:58:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 40

Error: (09/02/2019 09:58:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 40

Error: (09/02/2019 09:58:00 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 40

Error: (09/01/2019 05:31:04 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (09/01/2019 05:31:04 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (08/30/2019 10:20:57 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

CodeIntegrity:
===================================

Date: 2018-12-16 15:22:54.482
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:54.291
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:54.100
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.907
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.679
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.492
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.304
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.117
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: Hewlett-Packard 68IRF Ver. F.66 07/14/2017
Motherboard: Hewlett-Packard 1949
Processor: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz
Percentage of memory in use: 41%
Total physical RAM: 8040.56 MB
Available physical RAM: 4717.85 MB
Total Virtual: 16232.56 MB
Available Virtual: 12014.08 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.55 GB) (Free:641.91 GB) NTFS ==>[drive with boot components (obtained from BCD)]

\\?\Volume{d44e5679-baee-11e7-8292-806e6f6e6963}\ () (Fixed) (Total:0.86 GB) (Free:0.84 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: A378BE02)
Partition 1: (Active) - (Size=930.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=883 MB) - (Type=27)

==================== End of Addition.txt ============================

#4 Příspěvek od **Conder** » 08 zář 2019 12:58

Ahoj

Tema nam zapadla, kedze si si tu sam odpovedal.

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

Uloz na plochu a ukonci vsetky programy
Spusti AdwCleaner ako spravca
Odsuhlas licencne podmienky
Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
Nechaj zaskrtnute vsetky nalezy
Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
Otvori sa log, jeho obsah sem skopiruj

TTommikk · #5 Příspěvek od **TTommikk** » 15 zář 2019 12:45

# -------------------------------
# Malwarebytes AdwCleaner 7.4.1.0
# -------------------------------
# Build: 09-04-2019
# Database: 2019-09-13.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 09-15-2019
# Duration: 00:00:06
# OS: Windows 8.1 Pro
# Cleaned: 8
# Failed: 0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\Tomáš\AppData\Roaming\Seznam.cz

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
Deleted Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\Users\Tomáš\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\Windows\System32\config\systemprofile\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner_Debug.log - [11183 octets] - [15/09/2019 13:26:46]
AdwCleaner[S00].txt - [2220 octets] - [15/09/2019 13:27:20]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

#6 Příspěvek od **Conder** » 15 zář 2019 17:13

Poprosim o obidva nove logy z FRST.

TTommikk · #7 Příspěvek od **TTommikk** » 18 zář 2019 19:02

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-09-2019
Ran by Tomáš (administrator) on TOMASPC (Hewlett-Packard HP ProBook 450 G0) (18-09-2019 19:58:23)
Running from C:\Users\Tomáš\Desktop
Loaded Profiles: Tomáš (Available Profiles: Tomáš)
Platform: Windows 8.1 Pro (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel® Trusted Connect Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Spotify AB -> Spotify Ltd) C:\Users\Tomáš\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Tomáš\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Tomáš\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Tomáš\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Tomáš\AppData\Roaming\Spotify\Spotify.exe
(StagWare) [File not signed] C:\Program Files (x86)\NoteBook FanControl\NbfcService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Validity Sensors, Inc -> Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-07] (IDT, Inc.) [File not signed]
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [336672 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [TeamsMachineUninstallerLocalAppData] => C:\Users\Tomáš\AppData\Local\Microsoft\Teams\Update.exe [1789552 2019-09-03] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM-x32\...\Run: [TeamsMachineUninstallerProgramData] => %ProgramData%\Microsoft\Teams\Update.exe --uninstall --msiUninstall --source=default
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46993264 2019-06-27] (Google LLC -> )
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Run: [HP DeskJet 5000 (NET)] => "C:\Program Files\HP\HP DeskJet 5000 series\Bin\ScanToPCActivationApp.exe" -deviceID "TH7C84B1VB:NW" -scfn "HP DeskJet 5000 (NET)" -AutoStart 1
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [7611464 2019-09-15] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Tomáš\AppData\Local\Microsoft\Teams\Update.exe [1789552 2019-09-03] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {694ee494-763c-11e7-8286-a45d36cd7354} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {69af2778-3851-11e9-82c8-a45d36cd7354} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {d3259550-3f7f-11e9-82c8-a45d36cd7354} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [30796352 2018-10-24] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-09-01] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.82\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0F607CA7-F9F5-4B7C-AC2D-29DCC84FAEAC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [157144 2019-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {0FC36F3F-FCE2-41D2-B961-A9A59A5CFB32} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2174624 2019-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {152F7048-69D5-48AA-8819-7E10B82FBCA4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6299288 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {188D854F-5582-458F-8382-8745811AA5FB} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2838920 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
Task: {1BCD32FD-A1FE-43BF-99C4-C272CEAACBFC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367016 2019-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {1EE90A21-6FA6-49D3-A408-665482C6AB94} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2174624 2019-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {2988BD4E-E4F9-4B77-92C6-6D26AB7FC30F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {4FC29FF9-80B9-459F-BB4D-585BB7AB2158} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
Task: {51B5665D-5D81-4C8A-894E-21BA66E467ED} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2345608 2019-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {5D3EEDFA-99BF-41E2-A0DA-54DFAF329B62} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
Task: {5F8FEFE3-2910-4E49-A0FB-6221109B4BF8} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [39920 2018-10-24] (Garmin International, Inc. -> )
Task: {645AAAE6-3EE1-4574-B1AF-DC29D1267B5C} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_153_Plugin.exe [1456128 2018-11-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {7571E7E1-B377-41B7-A440-FF7B3F36DCD2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [13797712 2018-09-08] (Piriform Ltd -> Piriform Ltd)
Task: {816606C3-417F-4B9E-AB32-5A87AF967D3D} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3956824 2017-08-16] (Synaptics Incorporated -> Synaptics Incorporated)
Task: {83CFF232-5DE2-403B-B716-B1C13E11C423} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-31] (Google Inc -> Google Inc.)
Task: {9F6362ED-6EB6-4D00-BBBA-2FDD4EEDC255} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {A79CC7E9-1ACF-4EF2-8DFE-686A30E0F4C9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {AA07C323-2B2D-4E4E-B6AE-4C84011CCA45} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [743616 2015-12-02] (@ByELDI -> @ByELDI) [File not signed]
Task: {B2928C48-70A7-4EA5-A9E2-2B67EF1EA095} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-07-31] (Google Inc -> Google Inc.)
Task: {B6C35989-EA31-4FD2-BECE-EFA921908D21} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [1873288 2019-09-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {D2C8AD13-7FB1-4A5B-AA83-DEE45D3994A4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6299288 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {E48B2D77-3426-408C-9594-9CF65B98E30D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367016 2019-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {FAEB4502-61A3-41E1-BFE5-BAE32B263B3D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [157144 2019-09-16] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{398CC933-2364-4ECF-8C36-E25A03D70F9F}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{6FD0246E-E0CC-493D-A72F-06015BBE4AF9}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\S-1-5-21-508856505-97066582-1914413276-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-07-02] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-04-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2019-05-06] (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: it11cpe7.default
FF ProfilePath: C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\it11cpe7.default [2019-09-06]
FF Extension: (uBlock Origin) - C:\Users\Tomáš\AppData\Roaming\Mozilla\Firefox\Profiles\it11cpe7.default\Extensions\uBlock0@raymondhill.net.xpi [2019-07-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_31_0_0_153.dll [2018-11-26] (Adobe Systems Incorporated -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-07-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_153.dll [2018-11-26] (Adobe Systems Incorporated -> )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-04-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-04-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-19] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-19] (Google Inc -> Google LLC)

Chrome:
=======
CHR HomePage: Default -> hxxp://seznam.cz/
CHR StartupUrls: Default -> "hxxp://seznam.cz/"
CHR Profile: C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default [2019-09-18]
CHR Extension: (Překladač Google) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-19]
CHR Extension: (Prezentace) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Super Netflix) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aioencjhbaolepcoappllicjebblphoc [2018-01-07]
CHR Extension: (Dokumenty) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-24]
CHR Extension: (YouTube) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-24]
CHR Extension: (uBlock Origin) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2019-09-08]
CHR Extension: (Kalendář Google) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-06]
CHR Extension: (Tabulky) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Word Online) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2016-07-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-26]
CHR Extension: (Pocket Website) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap [2016-07-24]
CHR Extension: (Google Play) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2016-07-24]
CHR Extension: (Evernote Web) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol [2016-07-24]
CHR Extension: (Rozšíření Google Keep pro Chrome) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2019-09-12]
CHR Extension: (Upravte a pošlete snímek obrazovky) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdddabjhelpilpnpgondfmehhcplpiin [2019-09-03]
CHR Extension: (Save to Pocket) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2019-08-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2019-09-18]
CHR Extension: (Gmail) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-19]
CHR Extension: (Chrome Media Router) - C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-23]
CHR HKU\S-1-5-21-508856505-97066582-1914413276-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255504 2015-08-31] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6570352 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [360440 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1547200 2017-10-26] (Epic Games Inc. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11568144 2019-08-30] (Microsoft Corporation -> Microsoft Corporation)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [791624 2019-09-15] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7170632 2019-06-12] (GOG Sp. z o.o. -> GOG.com)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [683296 2014-05-16] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1006424 2013-01-23] (Hewlett-Packard Company -> Hewlett-Packard Company) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319096 2016-08-05] (Intel Corporation - pGFX -> Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [130592 2012-10-22] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166432 2012-10-22] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation)
R2 NbfcService; C:\Program Files (x86)\NoteBook FanControl\NbfcService.exe [8704 2017-05-29] (StagWare) [File not signed]
S3 PrintNotify; C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll [2896896 2017-09-29] (Microsoft Corporation) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2013-11-07] (IDT, Inc.) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246872 2017-08-16] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S2 HPSupportSolutionsFrameworkService; "C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21645320 2015-08-31] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AMDKMDAP; C:\Windows\system32\DRIVERS\atikmpag.sys [676360 2015-08-31] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [75520 2015-08-31] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37320 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205608 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [254408 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196304 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320904 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [58168 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42496 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [168896 2019-09-18] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88152 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1034640 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [476264 2019-04-14] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [220632 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [380160 2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
R3 HpqKbFiltr; C:\Windows\System32\drivers\HpqKbFiltr64.sys [28376 2014-05-15] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 netr28x; C:\Windows\system32\DRIVERS\netr28x.sys [2607792 2013-07-25] (Mediatek Inc. -> Ralink Technology, Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1205872 2014-06-26] (MEDIATEK INC. -> Ralink Technology, Corp.)
R3 RTL8168; C:\Windows\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
R3 STHDA; C:\Windows\system32\DRIVERS\stwrt64.sys [551936 2013-11-07] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
R1 WinRing0_1_2_0; C:\Program Files (x86)\NoteBook FanControl\WinRing0x64.sys [14544 2017-10-08] (Noriyuki MIYAZAKI -> OpenLibSys.org)
S3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [31840 2016-03-23] (Hewlett-Packard Company -> HP)
R3 WirelessButtonDriver64; C:\Windows\system32\DRIVERS\WirelessButtonDriver64.sys [31840 2016-03-23] (Hewlett-Packard Company -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-09-18 19:58 - 2019-09-18 19:59 - 000032623 _____ C:\Users\Tomáš\Desktop\FRST.txt
2019-09-18 19:58 - 2019-09-18 19:58 - 000000000 ____D C:\Users\Tomáš\Desktop\FRST-OlderVersion
2019-09-15 22:13 - 2019-09-15 22:14 - 033493784 _____ C:\Users\Tomáš\Downloads\Brukner, Filip - Vetší poetický slovník.pdf
2019-09-15 20:44 - 2019-09-15 20:45 - 042601683 _____ C:\Users\Tomáš\Downloads\Rut - Menší poetický slovník v příkladech.PDF
2019-09-15 20:21 - 2019-09-15 20:21 - 000350441 _____ C:\Users\Tomáš\Downloads\VY_32_INOVACE_6_CJ_16_Test__basnicke_prostredky.pdf
2019-09-15 13:26 - 2019-09-15 13:30 - 000000000 ____D C:\AdwCleaner
2019-09-15 11:47 - 2019-09-15 11:48 - 007622344 _____ (Malwarebytes) C:\Users\Tomáš\Desktop\adwcleaner_7.4.1.exe
2019-09-12 22:50 - 2019-09-12 22:52 - 070082072 _____ C:\Users\Tomáš\Downloads\DJ5000_Basicx64_44.4.2678.exe
2019-09-12 22:34 - 2019-09-12 22:34 - 006757456 _____ C:\Users\Tomáš\Downloads\HPEasyStart_10_0_4029_14.exe
2019-09-11 21:42 - 2019-09-11 21:42 - 000065512 _____ C:\Users\Tomáš\Downloads\SOUHRNNÉ POUČENÍ O SLOHU.pptx
2019-09-03 17:27 - 2019-09-15 12:01 - 000000000 ____D C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2019-09-03 17:27 - 2019-09-03 17:27 - 000000000 ____D C:\Users\Tomáš\AppData\Roaming\Microsoft Teams
2019-09-03 17:25 - 2019-09-03 17:27 - 000000000 ____D C:\Users\Tomáš\AppData\Local\SquirrelTemp
2019-09-02 22:01 - 2019-09-18 19:58 - 001615360 _____ (Farbar) C:\Users\Tomáš\Desktop\FRST64.exe
2019-09-02 22:01 - 2019-09-18 19:58 - 000000000 ____D C:\FRST
2019-08-23 17:27 - 2019-08-23 17:28 - 000212992 _____ C:\Windows\system32\ClickToRun_Pipeline16

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-09-18 19:42 - 2019-06-18 22:22 - 000000000 ____D C:\Users\Tomáš\AppData\Roaming\Spotify
2019-09-18 19:42 - 2019-06-18 22:22 - 000000000 ____D C:\Users\Tomáš\AppData\Local\Spotify
2019-09-18 19:42 - 2018-09-08 23:27 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-09-18 19:42 - 2018-09-01 18:40 - 000004526 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-09-18 19:42 - 2016-07-31 00:13 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-09-18 19:42 - 2016-07-31 00:13 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-09-18 19:42 - 2016-07-29 12:39 - 000003554 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
2019-09-18 19:42 - 2016-07-26 11:36 - 000002788 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-09-18 19:42 - 2016-07-26 11:33 - 000003364 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2019-09-18 19:42 - 2016-07-25 20:21 - 000002990 _____ C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2019-09-18 19:42 - 2016-07-24 20:36 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2019-09-18 18:58 - 2017-10-27 00:09 - 000168896 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2019-09-16 19:42 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-09-16 19:40 - 2016-07-26 10:13 - 000000000 ____D C:\Program Files\Microsoft Office
2019-09-16 00:04 - 2016-07-25 20:44 - 000000000 ____D C:\ProgramData\NbfcService
2019-09-15 17:57 - 2016-07-24 20:30 - 000003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-508856505-97066582-1914413276-1001
2019-09-15 15:15 - 2016-07-24 13:43 - 000000000 ___DO C:\Users\Tomáš\SkyDrive
2019-09-15 13:46 - 2016-08-18 13:45 - 000000000 ___RD C:\Users\Tomáš\Disk Google
2019-09-15 13:44 - 2016-07-25 18:09 - 000000000 __SHD C:\Users\Tomáš\IntelGraphicsProfiles
2019-09-15 13:36 - 2013-09-30 06:20 - 001745984 _____ C:\Windows\system32\PerfStringBackup.INI
2019-09-15 13:36 - 2013-09-30 05:57 - 000739924 _____ C:\Windows\system32\perfh005.dat
2019-09-15 13:36 - 2013-09-30 05:57 - 000151610 _____ C:\Windows\system32\perfc005.dat
2019-09-15 13:36 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2019-09-15 13:31 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-09-15 13:30 - 2016-07-25 00:22 - 000000000 ____D C:\Users\Tomáš\AppData\Roaming\Hewlett-Packard
2019-09-15 13:30 - 2016-07-24 21:24 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2019-09-15 13:20 - 2018-07-10 16:52 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2019-09-15 13:13 - 2019-01-17 23:20 - 000000000 ____D C:\Users\Tomáš\AppData\Local\CrashDumps
2019-09-15 13:13 - 2018-09-10 22:45 - 000000000 ____D C:\ProgramData\HP
2019-09-15 13:13 - 2017-04-02 11:38 - 000000000 ____D C:\Program Files (x86)\HP
2019-09-12 23:04 - 2016-07-24 13:41 - 000000000 ____D C:\Users\Tomáš\AppData\Local\Packages
2019-09-12 22:52 - 2018-09-10 22:45 - 000000000 ____D C:\Users\Tomáš\AppData\Roaming\HP_Easy_Start
2019-09-12 22:21 - 2013-08-22 15:25 - 000262144 _____ C:\Windows\system32\config\BBI
2019-09-10 19:41 - 2017-10-08 10:58 - 000000000 ____D C:\Users\Tomáš\AppData\Roaming\NoteBookFanControl
2019-09-06 18:23 - 2017-06-29 00:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-09-06 18:23 - 2016-08-01 11:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-09-06 18:22 - 2017-07-10 11:15 - 000000000 ____D C:\Users\Tomáš\AppData\LocalLow\Mozilla
2019-09-02 21:53 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-09-01 17:37 - 2016-07-31 00:14 - 000002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-09-01 17:37 - 2016-07-31 00:14 - 000002163 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-08-30 22:17 - 2017-03-17 10:08 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update

==================== Files in the root of some directories ================

2018-06-03 21:27 - 2018-06-03 21:27 - 000000875 _____ () C:\Users\Tomáš\AppData\Local\recently-used.xbel

==================== FLock ================

2016-07-24 13:40 C:\Windows\CSC

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2019-09-16 19:34
==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-09-2019
Ran by Tomáš (18-09-2019 20:00:02)
Running from C:\Users\Tomáš\Desktop
Windows 8.1 Pro (Update) (X64) (2016-07-24 11:41:28)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-508856505-97066582-1914413276-500 - Administrator - Disabled)
Guest (S-1-5-21-508856505-97066582-1914413276-501 - Limited - Disabled)
Tomáš (S-1-5-21-508856505-97066582-1914413276-1001 - Administrator - Enabled) => C:\Users\Tomáš

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.153 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{5094145C-9F17-8099-7F4F-E5AADD5E4065}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
ANT Drivers Installer x64 (HKLM\...\{D559687A-60C5-4786-9429-C21EC195789D}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.3.2369 - AVAST Software)
Backup and Sync from Google (HKLM\...\{768C0072-2FD2-4934-9824-B2A1E81AEA5D}) (Version: 3.45.5545.5747 - Google, Inc.)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Broadcom Bluetooth Drivers (HKLM\...\{0A1B4690-E176-4533-8058-939480AEE1D0}) (Version: 12.0.1.170 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
Elevated Installer (HKLM-x32\...\{0BF90608-2F95-4C7C-9A85-E90E0CAF4FE9}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Evernote v. 6.18.4 (HKLM-x32\...\{3E390FB8-703D-11E9-A27F-005056951CAD}) (Version: 6.18.4.8489 - Evernote Corp.)
FTL: Advanced Edition (HKLM-x32\...\1207659102_is1) (Version: 1.6.9 - GOG.com)
Garmin Express (HKLM-x32\...\{95D0EADA-5123-41C0-931A-F37946BC0E8E}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{eab4691c-4022-41cd-8d39-c3097ba62d4b}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 76.0.3809.132 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google2SRT (HKLM-x32\...\{B0A59B6D-5983-46D2-9B34-51B1C15055CD}) (Version: 0.7.5 - Google2SRT)
HP ESU for Microsoft Windows 8.1 (HKLM-x32\...\{A3876D50-4A88-4A34-92E1-5D7BC8F886E1}) (Version: 1.0.1 - Hewlett-Packard Company)
HP Hotkey Support (HKLM-x32\...\{57FA60DA-585F-456A-B80E-17D1CDD22A30}) (Version: 5.0.27.1 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{3D6FF65E-EE93-4D90-B5D7-0DC856E2AFEB}) (Version: 12.10.49.21 - HP)
HP System Default Settings (HKLM-x32\...\{987210BB-D707-48FC-88FA-4374765D108D}) (Version: 2.0.1 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6496.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.20.1337 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.41 - Irfan Skiljan)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
KMSpico 10.2.0 10.2.0 (HKLM-x32\...\KMSpico 10.2.0 10.2.0) (Version: 10.2.0 - KMSpico)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Mediatek Bluetooth (HKLM\...\{904C579C-9366-D3B7-7F31-4879401DBD4A}) (Version: 11.0.756.0 - Mediatek)
Microsoft Office 365 ProPlus - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.11929.20300 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 67.0.4 (x64 cs) (HKLM\...\Mozilla Firefox 67.0.4 (x64 cs)) (Version: 67.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 67.0.4.7109 - Mozilla)
NoteBook FanControl (HKLM-x32\...\{21685c56-05b5-404c-a9d9-bf568d3749a0}) (Version: 1.5.3.0 - Stefan Hirschmann - StagWare)
NoteBook FanControl (HKLM-x32\...\{CE2D4D25-DF9B-4E9D-A4CB-2E4545271F70}) (Version: 1.5.3.0 - Stefan Hirschmann - StagWare) Hidden
OEM Application Profile (HKLM-x32\...\{29F5A1C9-0BC3-16E6-9384-3BC5D1CB7ACE}) (Version: 1.00.0000 - Název společnosti:)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PX Profile Update (HKLM-x32\...\{C5705DBC-3A55-986A-7114-A5F86AADDD06}) (Version: 1.00.1. - AMD) Hidden
Spotify (HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\Spotify) (Version: 1.1.15.448.g00fba0e3 - Spotify AB)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.1 - Krzysztof Kowalczyk)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.63 - Synaptics Incorporated)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Validity Fingerprint Sensor Driver (HKLM\...\{ADAA7361-54B8-4FC8-804E-94EC6C11ED68}) (Version: 4.5.133.0 - Validity Sensors, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-508856505-97066582-1914413276-1001_Classes\CLSID\{55808EA8-81FE-43c6-AAE8-1D8149F941D3}\InprocServer32 -> C:\Program Files\SumatraPDF\PdfFilter.dll () [File not signed]
CustomCLSID: HKU\S-1-5-21-508856505-97066582-1914413276-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation - pGFX -> Intel Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-06-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-06-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-06-27] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-06-27] (Google LLC -> Google)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-06-27] (Google LLC -> Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\atiacm64.dll [2015-08-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2016-08-05] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-31] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2019-09-15 13:45 - 2019-09-15 13:45 - 000113664 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_ctypes.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000173568 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_elementtree.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 001800192 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_hashlib.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000032256 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_multiprocessing.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000046080 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_psutil_windows.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000047616 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_socket.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 002230784 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_ssl.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000026112 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\_yappi.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000080896 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\bz2.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 006277632 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\cello.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000014848 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\common.time34.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000007680 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\hashobjs_ext.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000301568 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\PIL._imaging.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000169472 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\pyexpat.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 001084416 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\pysqlite2._sqlite.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000548864 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\pythoncom27.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 000137728 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\pywintypes27.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 000010752 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\select.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000020992 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\thumbnails_ext.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000689664 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\unicodedata.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000118784 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\usb_ext.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000128512 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32api.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000438784 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32com.shell.shell.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000011776 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32crypt.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000023040 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32event.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000149504 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32file.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000223232 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32gui.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000048128 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32inet.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000029696 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32pdh.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000027648 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32pipe.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000044032 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32process.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000020480 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32profile.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000136192 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32security.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000026624 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\win32ts.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000034304 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\windows.conditional.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000038400 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\windows.connectivity.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000073216 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\windows.device_monitor.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000110592 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\windows.volumes.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000020480 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\windows.winwrap.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 001325056 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wx._controls_.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 001489408 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wx._core_.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 001007104 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wx._gdi_.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000103424 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wx._html2.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 000916992 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wx._misc_.pyd
2019-09-15 13:45 - 2019-09-15 13:45 - 001039872 _____ () [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wx._windows_.pyd
2018-02-08 11:43 - 2018-02-08 11:43 - 000032256 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\A4.Foundation\4ca053ea6ad12f7a3acf8574dd262804\A4.Foundation.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\842f19506907b19f7d1123ddde8da6f0\AEM.Actions.CCAA.Shared.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\131b5e91804254d94ea50aca6879be94\AEM.Plugin.EEU.Shared.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\2885c77d2b3572c1117ffac283d89303\AEM.Plugin.Hotkeys.Shared.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000016384 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.54d8abe3#\ce35c0ffba1f547eaea3a9a882ae5503\AEM.Plugin.DPPE.Shared.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000280064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\09974c993bd4a1f3123677444104dcc5\AEM.Plugin.Source.Kit.Server.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\5ce4c8b0b9bba47bc5e6aaefde0f8018\AEM.Plugin.WinMessages.Shared.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\dc8059ba2ccd7543213c662a5b224db4\AEM.Plugin.REG.Shared.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\5a03f54b177ede24a7210099b470f075\AEM.Plugin.GD.Shared.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000013824 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\77c17079d910ef6e9b34a8db8f3a47dd\AEM.Server.Shared.ni.dll
2018-02-08 11:45 - 2018-02-08 11:45 - 000271360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Server\ef8ed4353f7b36c97e32243b59f62081\AEM.Server.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\APM.Foundation\6330fd9ba4e1c15cbe02dea07dc41102\APM.Foundation.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000123392 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ATICCCom\ae772963a408c50c4cec849ccd5fb9b6\ATICCCom.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000202240 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\01c9edefd921d8cc6ff89e49a08e73a6\CCC.Implementation.ni.dll
2018-02-08 23:35 - 2018-02-08 23:35 - 000153600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.21d2ac78#\46dd21a40ae5c76cedd2981bc672b5cd\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.ni.dll
2018-02-08 23:28 - 2018-02-08 23:28 - 000126976 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\b1c82cc1d57fc0e8b1b3a90bf2cbf527\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000026624 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\9bf789d866ddc8d2bc665e6434b3dbfa\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000045568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\c13cb3f749eb8cea399387110b4939c3\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000105984 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\b96afaf76c5d9eca8338b37f9dc3d0f0\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2018-02-08 23:35 - 2018-02-08 23:35 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.46819220#\c3b04660c3002c501d3f3aa6c2093689\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\afd4f9cbca3895f4ced96db7bfcbe073\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2018-02-08 23:31 - 2018-02-08 23:31 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\c0152281e1bac5adef1fa90feb79d424\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2018-02-08 23:35 - 2018-02-08 23:35 - 000074240 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.59a12d95#\00f276899072fc1872e11d6810f3d230\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000265216 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.73911eb5#\3fd28541dcd6775242a7de31545ed697\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll
2018-02-08 23:28 - 2018-02-08 23:28 - 000361984 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\488e6a99e4f0c2c334332bd7278c8da8\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\c2f2dd2538955110d90a907ff7dff46a\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000743424 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\bf131e97419a2b4ae065c953bf94b4af\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000447488 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\2c74c3e701dcc877dac829a797cf96a4\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2018-02-08 23:31 - 2018-02-08 23:31 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\172a58f758df8b06ca80af4fe2ef8831\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2018-02-08 23:32 - 2018-02-08 23:32 - 000057344 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\40563c9e40816eb05834886a4ef868b9\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\794d767865b981d684e8447739df751e\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2018-02-08 23:33 - 2018-02-08 23:33 - 000148480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.abe74207#\bd08ee60d8b7ce9f32edbb0b5dcdf4b7\CLI.Aspect.MultiVPU2.Graphics.Shared.ni.dll
2018-02-08 23:28 - 2018-02-08 23:28 - 000464896 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\9c57de6b0fa63108a2a8973b0089a436\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000067584 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\bf04a8c2f74344622936f7d0cf6ead55\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2018-02-08 23:34 - 2018-02-08 23:34 - 000342528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\841c6263ff56a405a27d862a794cea60\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\ac5f0712e800319751056b7d697a27c9\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000095232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4f2f79c#\6c00b088bab0c2b5adcb165424b33878\CLI.Aspect.CrossFireX.Graphics.Dashboard.ni.dll
2018-02-08 23:33 - 2018-02-08 23:33 - 000274944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\beda23d2cb66298ec586665912e5a6d3\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 003320320 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\921bdb4ab83c7858f7f655836292e54c\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000047104 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\b20cc8cf8ce9d8ac0b7a31e66eef5a68\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\56d9fdb52a1b5fba0d1249492d74f072\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000053248 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\14841ca810a85f3d8f1e5eb2b37e76ad\CLI.Caste.A4.Runtime.ni.dll
2018-02-08 11:47 - 2018-02-08 11:47 - 000046080 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\774502fbd0a096c2507de2d00b33d5e7\CLI.Caste.A4.Shared.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000027648 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\6ec6395371b7238f0cf9a25dcbe9da3d\CLI.Caste.A4.Dashboard.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000046080 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\781b24158624f3b253235bdcd04b1623\CLI.Caste.Fuel.Shared.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000311808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\8e04122e785d7eafb29c808cb9ef96c4\CLI.Caste.Fuel.Runtime.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000027648 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\fea5335b9be35c6e43020382235f9c42\CLI.Caste.Fuel.Dashboard.ni.dll
2018-02-08 23:31 - 2018-02-08 23:31 - 000038400 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\83a7836e9e492ce792f2e99a9a31caec\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2018-02-08 23:27 - 2018-02-08 23:27 - 001547776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\4098e16256de4f567f0767a5f6571365\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000579584 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\e0ed9e26b1152ffda28dd235af704265\CLI.Caste.Graphics.Dashboard.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000046080 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\c0477c3ef465796010d740bb7d999a5b\CLI.Caste.HydraVision.Runtime.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\bbfec79b5a9c52e9308accd0b03eb295\CLI.Caste.HydraVision.Shared.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\716a0feba1e467ae4d63f0a2ef4c4e29\CLI.Caste.HydraVision.Dashboard.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\e6d304b03856ff4e9c3f8aa688080ced\CLI.Caste.Platform.Shared.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\5364318939cded57ab3246999ccf15d7\CLI.Caste.Platform.Runtime.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000024576 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\d0b8abb839fdfd634ab2e49451437661\CLI.Caste.Platform.Dashboard.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\9df173665ef8e68a23a08aa0d9e5f63a\CLI.Component.Runtime.Shared.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000902144 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone26c9c557#\85de606a8ae1190056b08b782c70c5b1\CLI.Component.Systemtray.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000170496 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\1044b7ff65783861851aee579b5d5379\CLI.Component.Dashboard.ProfileManager2.ni.dll
2018-02-08 23:26 - 2018-02-08 23:26 - 000152576 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\4aa462ccf917792c45af3a98ea688559\CLI.Component.Runtime.Shared.Private.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\856933c0fa751efd6ae764a08d9c3b8b\CLI.Component.Runtime.Extension.EEU.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 001606656 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\12ab26dbacc2fa779f1d0b78b045dcf4\CLI.Component.Dashboard.Shared.Private.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000019968 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\7ac5152fbffcc0e44c2d2441c3442888\CLI.Component.Client.Shared.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000086528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\2b9bd6412799bfae911966372a4df5be\CLI.Component.Dashboard.Shared.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000490496 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Component.Eeu\e36185c6bf989ccb1eb2cf1ff0714508\CLI.Component.Eeu.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000090112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\2af47fe817f2ab488a0374026d5dbff0\CLI.Foundation.Private.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000061952 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\ab26c36bbf527050abddbe43c1578e17\CLI.Foundation.XManifest.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000091648 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\bb7720029eb055da0f92f3756d319236\CLI.Foundation.CoreAudioAPI.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 001065472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\cb589323508dc55a5ede6942167bfc18\CLI.Foundation.Client.ni.dll
2018-02-08 11:45 - 2018-02-08 11:45 - 000301056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\3461c787048a4f135f2b524c132f38b9\CLI.Foundation.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\e6c4a590e4bdafd75ad099fdc1aecc01\DEM.Foundation.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000117248 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\1e03423a2b25b5e462e175ae8063433c\DEM.Graphics.I0601.ni.dll
2018-02-08 11:44 - 2018-02-08 11:44 - 000015872 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\64e648748b4227db490adae2b627a285\DEM.Graphics.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\9aa99a450d60fb0fbffdc51c6ee9a1e6\Fuel.Foundation.ni.dll
2018-02-08 23:38 - 2018-02-08 23:38 - 000293376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\5f4785d76bc5c8466bedf7dd1113f713\LOG.Foundation.Implementation.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000147968 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\5d802549de7a6c91fcb7221aa28b108b\LOG.Foundation.Private.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000086528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\11c0fe133a491fb802d1b5e5107c992d\LOG.Foundation.Implementation.Private.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000133120 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\0c0a4358d7b66d3d4839e21cd63d08bf\LOG.Foundation.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\b3228efdb52a6e1b804746ce141d00b3\MOM.Foundation.ni.dll
2018-02-08 23:38 - 2018-02-08 23:38 - 000390656 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\084dfefdcc8e672b61fed78e82f883aa\MOM.Implementation.ni.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\2e190f6dfdaa8a482f0d8e519391cbe7\NEWAEM.Foundation.ni.dll
2015-08-19 14:03 - 2015-08-19 14:03 - 000005120 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\atiamcsy.dll
2018-02-08 11:43 - 2018-02-08 11:43 - 000898560 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\990cdde735751cd767b437ba030e5b34\ADL.Foundation.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000258560 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\APM.Server\4e94916e1c9cb2ef1ab11f6aaed24a0e\APM.Server.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000780800 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.79734f7a#\3d579dfbf4fc9bdbf4e0f232da2c83b5\CLI.Aspect.PowerXpress.Graphics.Runtime.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000357888 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b3da5a8f#\6acd19d3895ee6d20113780aec4b3a92\CLI.Aspect.PowerXpress.Graphics.Shared.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000592896 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4846ba2#\ca545cc56c30104d942c38e9c03879f1\CLI.Aspect.PowerXpress.Graphics.Dashboard.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 007967744 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\bc5b110f553e48fc3bc0a88dbe4bcf10\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000135680 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\d5dff1059f05862c5a0a4112d338e4cd\CLI.Component.Client.Shared.Private.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000231936 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\760a25b320a0f333cfd1f2ef5602df40\CLI.Component.Runtime.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000920576 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\13333e56b1049591486c31adae136a9b\CLI.Component.Dashboard.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000011776 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0702\da330e2619cdd3395ea358a0fa648024\DEM.Graphics.I0702.ni.dll
2018-02-08 23:31 - 2018-02-08 23:31 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\47465b7c5c60546b41b33aff29e44069\DEM.Graphics.I0709.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0710\4d9d2c23e3489313db06a9e1cfc7159d\DEM.Graphics.I0710.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\307449e2f2288d7a4978cfb67b576c9e\DEM.Graphics.I0712.ni.dll
2018-02-08 23:29 - 2018-02-08 23:29 - 000018944 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\d6f2507fda7cbdc5b4bb156814b88ac7\DEM.Graphics.I0804.ni.dll
2018-02-08 23:36 - 2018-02-08 23:36 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0901\33a81ba300f51f71e1460197b75e5be4\DEM.Graphics.I0901.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 000036352 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\8c92743e9b554a6955b04b22abaef351\DEM.Graphics.I1010.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 001136640 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\0557a9c72866d1af3050cb4e14b41a4f\Localization.Foundation.Private.ni.dll
2018-02-08 23:38 - 2018-02-08 23:38 - 000244736 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\f7ebb70a144d9d3f2fe92a8edac3f4da\ResourceManagement.Foundation.Implementation.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\b36bf7adb625562f8922a8a7b832b6fb\ResourceManagement.Foundation.Private.ni.dll
2018-02-08 23:27 - 2018-02-08 23:27 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\036ac620a278fa7284e13dcd5bda82bd\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2018-02-08 11:46 - 2018-02-08 11:46 - 002862080 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\dc123e14c9674546a8ab5560b835102e\CLI.Caste.Graphics.Shared.ni.dll
2018-02-08 23:37 - 2018-02-08 23:37 - 003277824 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\db227dd554fad35712e064d7d5c2cd8c\CLI.Caste.Graphics.Runtime.ni.dll
2017-09-24 17:16 - 2008-04-03 05:00 - 000235520 _____ (CANON INC.) [File not signed] C:\Windows\System32\CNMLM83.DLL
2013-01-23 21:44 - 2013-01-23 21:44 - 000016216 _____ (Hewlett-Packard Company -> ) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\Interop.HPQWMIEXLib.dll
2013-01-23 21:43 - 2013-01-23 21:43 - 002452824 _____ (Hewlett-Packard Company -> Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\hputils.dll
2013-01-23 21:44 - 2013-01-23 21:44 - 000068440 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\CaslSmBios.dll
2013-01-23 21:44 - 2013-01-23 21:44 - 000524632 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Program Files (x86)\Hewlett-Packard\Shared\CaslWmi.dll
2016-07-25 18:55 - 2016-07-25 18:55 - 000113496 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Windows\assembly\GAC_MSIL\CaslShared\3.5.1.1__9c6f83d5b7f3d097\CaslShared.dll
2016-07-25 18:55 - 2016-07-25 18:55 - 000092504 _____ (Hewlett-Packard Company -> Hewlett-Packard Development Company L.P.) [File not signed] C:\Windows\assembly\GAC_MSIL\hpcasl\3.5.1.1__9c6f83d5b7f3d097\hpcasl.dll
2013-03-26 21:12 - 2013-03-26 21:12 - 000056832 _____ (Hewlett-Packard Development Company, L.P.) [File not signed] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HP.Mobile.Shared.dll
2016-07-26 10:08 - 2016-05-21 10:19 - 000077312 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2013-08-22 14:31 - 2017-09-29 15:40 - 002896896 _____ (Microsoft Corporation) [File not signed] C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
2018-02-08 11:47 - 2018-02-08 11:47 - 000336384 _____ (Microsoft) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\3cea719585c15871e82ac1992d53c457\Microsoft.WindowsAPICodePack.ni.dll
2018-02-08 11:47 - 2018-02-08 11:47 - 002525696 _____ (Microsoft) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\a6882fa8a172b8639bb8b2335f6af6b9\Microsoft.WindowsAPICodePack.Shell.ni.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 002775040 _____ (NLog) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\NLog\4ce317f88ec4329c93b303ba50dcab03\NLog.ni.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 003042304 _____ (Python Software Foundation) [File not signed] C:\Users\TOM~1\AppData\Local\Temp\_MEI44922\python27.dll
2017-10-08 11:52 - 2017-10-08 11:52 - 000017408 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.BiosInfo\ddf5111c27f39642b0c056cf87f2192d\StagWare.BiosInfo.ni.dll
2017-10-08 11:54 - 2017-10-08 11:54 - 000036352 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.Fa1fc2d056#\cd39978e79ff598f310bddc2d1dcaf5d\StagWare.FanControl.Service.ni.dll
2017-10-08 11:52 - 2017-10-08 11:52 - 000167936 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.Fafc31ac88#\bafe100a11bb2a4789eca5894750b0fc\StagWare.FanControl.Configurations.ni.dll
2017-10-08 11:53 - 2017-10-08 11:53 - 000144384 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.FanControl\ac3416be90242299ef18e34e6008189f\StagWare.FanControl.ni.dll
2017-10-08 11:54 - 2017-10-08 11:54 - 000039424 _____ (StagWare) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\StagWare.Settings\2c916f31645736e86d33dfc6a741f3cc\StagWare.Settings.ni.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wxbase30u_net_vc90_x64.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wxbase30u_vc90_x64.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wxmsw30u_adv_vc90_x64.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wxmsw30u_core_vc90_x64.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wxmsw30u_html_vc90_x64.dll
2019-09-15 13:45 - 2019-09-15 13:45 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\Tomáš\AppData\Local\Temp\_MEI44922\wxmsw30u_webview_vc90_x64.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\sharepoint.com -> hxxps://malgym-files.sharepoint.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2019-02-25 18:35 - 000000041 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NoteBook FanControl\
HKU\S-1-5-21-508856505-97066582-1914413276-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Tomáš\AppData\Roaming\Microsoft\Windows Photo Viewer\Tapeta programu Windows Prohlížeč fotografií.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\StartupApproved\Run: => "Spotify Web Helper"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{4440500E-2A2E-4CE3-A3FF-66417F819A1F}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{221C8AF3-76F6-4FBB-9257-75A3317989C6}C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\tomáš\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [TCP Query User{159A5873-2048-470A-B6C2-F6AB45B98221}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{FF2D840F-E30B-4884-BAC4-06A50412A714}C:\users\tomáš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tomáš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{241603BC-3EFB-47AE-9148-367EBF2BD7AC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File
FirewallRules: [{F62FA635-7262-493E-97FC-7A3F7FC7B909}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe No File
FirewallRules: [{CFF3B325-EDA7-4A51-BB73-E7460E621457}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{558FEC4D-D298-4F3A-B674-DE115D047084}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E59D35AB-8D46-4BCA-9BEA-1F552D78F2F5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{72F9D536-0640-4532-926C-F5B0555B6F94}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{EECB4F31-716E-4D54-9815-D425F3644E4F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{42C88F82-A367-4C7D-BB12-592BE6FB1687}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{089C2A5B-1D73-4565-9EF0-14EE9D940AA7}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{BE5FDE4B-F25F-45BF-BF47-E1EFD82E3AF6}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{60612BCD-0DB6-4C17-A502-CFD48E0494EC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{80E0A99E-4D91-4CAD-AA12-8A3AE58A4D36}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4FEBFC1C-4B86-4C55-B953-EFBAD6784247}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{DFAA4770-8A29-4D0E-B017-A74B13C24634}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F62F57B5-1BA5-447A-9EA3-A187B5BA1F6E}] => (Allow) C:\Users\Tomáš\AppData\Local\Temp\7zS013C\HP.EasyStart.exe (HP Inc. -> HP)

==================== Restore Points =========================

15-09-2019 12:08:22 Removed Základní software zařízení HP DeskJet 5000 series
15-09-2019 13:12:29 Removed Základní software zařízení HP DeskJet 5000 series
15-09-2019 13:14:00 Removed Teams Machine-Wide Installer

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:
==================
Error: (09/15/2019 11:59:00 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Instalace dokladu o zakoupení se nezdařila. 0xC004F069
Částečný klíč Pkey=F3G7T
ACID=?
Podrobná chyba[?]

Error: (09/15/2019 03:14:13 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/15/2019 01:45:10 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (09/15/2019 01:32:52 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004F074
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/15/2019 01:13:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ScanToPCActivationApp.exe, verze: 44.4.2678.1977, časové razítko: 0x5c9088ce
Název chybujícího modulu: combase.dll, verze: 6.3.9600.18895, časové razítko: 0x5a4b0eb6
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000003b3d2
ID chybujícího procesu: 0x1494
Čas spuštění chybující aplikace: 0x01d569ac4683364f
Cesta k chybující aplikaci: C:\Program Files\HP\HP DeskJet 5000 series\Bin\ScanToPCActivationApp.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\combase.dll
ID zprávy: c721ae29-d7a9-11e9-82ce-a45d36cd7354
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (09/15/2019 11:36:39 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/14/2019 07:13:01 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/14/2019 12:15:02 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=c06b6981-d7fd-4a35-b7b4-054742b7af67;NotificationInterval=1440;Trigger=NetworkAvailable

System errors:
=============
Error: (09/18/2019 07:57:31 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Hlavní prohledávač přijal oznámení serveru od počítače HPF90D31,
který se považuje za hlavní prohledávač domény pro přenos NetBT_Tcpip_{6FD0246E-E0CC-493D-A72F-06015BBE4AF9}.
Hlavní prohledávač bude ukončen nebo bude vyvolána volba.

Error: (09/18/2019 07:37:40 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (09/18/2019 07:37:39 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (09/17/2019 08:35:58 PM) (Source: ACPI) (EventID: 13) (User: )
Description: : Integrovaný řadič neodpověděl během zadaného časového limitu. Může to znamenat chybu hardwaru nebo firmwaru integrovaného řadiče nebo že systém BIOS přistupuje k integrovanému řadiči nesprávně. Měli byste zjistit, zda výrobce počítače nemá k dispozici upgrade systému BIOS. V některých situacích může tato chyba způsobit, že počítač nebude pracovat správně.

Error: (09/17/2019 06:44:09 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (09/17/2019 06:44:09 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Ze vzdáleného koncového bodu byla přijata následující výstraha o závažné chybě. Kód výstrahy o závažné chybě definovaný protokolem TLS: 70

Error: (09/16/2019 07:34:39 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT AUTHORITY)
Description: 0x8000002a42\SystemRoot\System32\Config\RegBack\SYSTEM

Error: (09/16/2019 06:38:57 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Hlavní prohledávač přijal oznámení serveru od počítače HPF90D31,
který se považuje za hlavní prohledávač domény pro přenos NetBT_Tcpip_{6FD0246E-E0CC-493D-A72F-06015BBE4AF9}.
Hlavní prohledávač bude ukončen nebo bude vyvolána volba.

CodeIntegrity:
===================================

Date: 2018-12-16 15:22:54.482
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:54.291
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:54.100
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.907
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.679
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.492
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.304
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-12-16 15:22:53.117
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: Hewlett-Packard 68IRF Ver. F.66 07/14/2017
Motherboard: Hewlett-Packard 1949
Processor: Intel(R) Pentium(R) CPU 2020M @ 2.40GHz
Percentage of memory in use: 51%
Total physical RAM: 8040.56 MB
Available physical RAM: 3869.63 MB
Total Virtual: 16232.56 MB
Available Virtual: 10783.93 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.55 GB) (Free:642.74 GB) NTFS ==>[drive with boot components (obtained from BCD)]

\\?\Volume{d44e5679-baee-11e7-8292-806e6f6e6963}\ () (Fixed) (Total:0.86 GB) (Free:0.84 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: A378BE02)
Partition 1: (Active) - (Size=930.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=883 MB) - (Type=27)

==================== End of Addition.txt ============================

#8 Příspěvek od **Conder** » 18 zář 2019 21:30

Otvor poznamkovy blok (Win+R -> notepad -> enter)

Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files\IDT\WDM\STacSV64.exe
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico 10.2.0 10.2.0

HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {694ee494-763c-11e7-8286-a45d36cd7354} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {69af2778-3851-11e9-82c8-a45d36cd7354} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {d3259550-3f7f-11e9-82c8-a45d36cd7354} - "F:\HiSuiteDownLoader.exe" 
Task: {AA07C323-2B2D-4E4E-B6AE-4C84011CCA45} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [743616 2015-12-02] (@ByELDI -> @ByELDI) [File not signed]
C:\Program Files\KMSpico
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico 10.2.0 10.2.0
HKU\S-1-5-21-508856505-97066582-1914413276-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - <no Path/update_url>
S2 HPSupportSolutionsFrameworkService; "C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe" [X]
2019-09-18 19:58 - 2019-09-18 19:58 - 000000000 ____D C:\Users\Tomáš\Desktop\FRST-OlderVersion
ShellIconOverlayIdentifiers: [   OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} =>  -> No File
ShellIconOverlayIdentifiers: [   OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
ShellIconOverlayIdentifiers: [   OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
ShellIconOverlayIdentifiers: [   OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} =>  -> No File
ShellIconOverlayIdentifiers: [   OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} =>  -> No File
ShellIconOverlayIdentifiers: [   OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> No File
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> No File
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> No File

Hosts:
EmptyTemp:
End

Uloz na plochu s nazvom fixlist.txt
Spusti znovu FRST a klikni na Fix
Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

TTommikk · #9 Příspěvek od **TTommikk** » 23 zář 2019 21:11

Fix result of Farbar Recovery Scan Tool (x64) Version: 18-09-2019 01
Ran by Tomáš (18-09-2019 23:17:56) Run:1
Running from C:\Users\Tomáš\Desktop
Loaded Profiles: Tomáš (Available Profiles: Tomáš)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files\IDT\WDM\STacSV64.exe
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1

HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {694ee494-763c-11e7-8286-a45d36cd7354} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {69af2778-3851-11e9-82c8-a45d36cd7354} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-508856505-97066582-1914413276-1001\...\MountPoints2: {d3259550-3f7f-11e9-82c8-a45d36cd7354} - "F:\HiSuiteDownLoader.exe"
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
HKU\S-1-5-21-508856505-97066582-1914413276-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - <no Path/update_url>
S2 HPSupportSolutionsFrameworkService; "C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe" [X]
2019-09-18 19:58 - 2019-09-18 19:58 - 000000000 ____D C:\Users\Tom�\Desktop\FRST-OlderVersion
ShellIconOverlayIdentifiers: [ OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========

Count : 37
Average :
Sum : 16847636722
Maximum :
Minimum :
Property : Length

========= End of Powershell: =========

========================= File: C:\Program Files\IDT\WDM\STacSV64.exe ========================

C:\Program Files\IDT\WDM\STacSV64.exe
File not signed
MD5: 857693A4DA826BCD422C48114AA72B10
Creation and modification date: 2017-02-10 18:43 - 2013-11-07 01:07
Size: 000340480
Attributes: ----N
Company Name: IDT, Inc.
Internal Name: IDT PCA
Original Name: stacsv64.exe
Product: IDT PC Audio
Description: IDT PC Audio
File Version: 1.0.6496.0
Product Version: 1.0.6496.0
Copyright: Copyright © 2004 - 2009 IDT, Inc.
VirusTotal: https://www.virustotal.com/file/e6614b1 ... 563289378/

====== End of File: ======

================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1]
"Inno Setup: Setup Version"="5.5.5 (a)"
"Inno Setup: User"="Tomáš"
"Inno Setup: Language"="default"
"NoRepair"="1"
"InstallDate"="20160726"
"EstimatedSize"="16067"

=== End of ExportKey ===
================== ExportKey: ===================

"DisplayVersion"="10.2.0"
"VersionMajor"="10"
"VersionMinor"="2"
"HelpLink"="mailto:support@company.com"
"InstallDate"="20160726"
"Language"="1029"
"EstimatedSize"="3955"
"NoModify"="1"
"NoRepair"="1"

=== End of ExportKey ===
HKU\S-1-5-21-508856505-97066582-1914413276-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{694ee494-763c-11e7-8286-a45d36cd7354} => removed successfully
HKLM\Software\Classes\CLSID\{694ee494-763c-11e7-8286-a45d36cd7354} => not found
HKU\S-1-5-21-508856505-97066582-1914413276-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{69af2778-3851-11e9-82c8-a45d36cd7354} => removed successfully
HKLM\Software\Classes\CLSID\{69af2778-3851-11e9-82c8-a45d36cd7354} => not found
HKU\S-1-5-21-508856505-97066582-1914413276-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d3259550-3f7f-11e9-82c8-a45d36cd7354} => removed successfully
HKLM\Software\Classes\CLSID\{d3259550-3f7f-11e9-82c8-a45d36cd7354} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AA07C323-2B2D-4E4E-B6AE-4C84011CCA45}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA07C323-2B2D-4E4E-B6AE-4C84011CCA45}" => removed successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 => removed successfully
HKU\S-1-5-21-508856505-97066582-1914413276-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => not found
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\daanglpcpkjjlkhcbladppjphglbigam => removed successfully
HKLM\System\CurrentControlSet\Services\HPSupportSolutionsFrameworkService => removed successfully
HPSupportSolutionsFrameworkService => service removed successfully
"C:\Users\Tom�\Desktop\FRST-OlderVersion" => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKU\\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx" => not found
HKLM\Software\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => not found
"HKU\\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx" => not found
HKLM\Software\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => not found
"HKU\\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ FileSyncEx" => not found
HKLM\Software\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 18132200 B
Java, Flash, Steam htmlcache => 394224149 B
Windows/system/drivers => 12801650 B
Edge => 0 B
Chrome => 450755738 B
Firefox => 150190168 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 751972 B
NetworkService => 0 B
Tomáš => 582594295 B

RecycleBin => 79463 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 23:20:53 ====

#10 Příspěvek od **Conder** » 24 zář 2019 16:31

Plocha ma cca 15 GB, co je prilis vela. Presun vsetky subory a zlozky z plochy do dokumentov a na ploche nechaj iba odkazy/zastupcov. Prilis velka velkost plochy moze sposobit spomalenie systemu.

Ako to vyzera s PC? Su nejake problemy? Inak logy vyzeraju OK.

TTommikk · #11 Příspěvek od **TTommikk** » 29 zář 2019 11:44

Vypadá to, že vše v pohodě

#12 Příspěvek od **Conder** » 29 zář 2019 12:09

Tak este upraceme po pouzitych nastrojoch:

Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
Uloz na plochu a spusti
Nechaj oznacenu moznost "Remove disinfection tools"
Klikni na "Run"

VIRY.CZ

Preventivní kontrola PC

Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC

Re: Preventivní kontrola PC