Prosím o kontrolu logu problém při prohlížení netu

[Antusek]

Prosím o kontrolu logu z FRST jestli tam nemám nějakou havěť. Mám od prosince nový PC s Windows 10 a v prohlížečích Firefox i Google chrome mám zapnutý blokovač reklam uBloc Origin. Také používám Aviru a Zone Alarm, který byl záhadně vypnut. Již zapnutý a když jsem chtěl spustit FRST, tak řval zase windows defender. Problém spočívá v tom, že při prohlížení netu se mi tam po kliknutí na odkaz i třeba dnes třeba zadáním adresy vašich stránek objevila nevyžádaná erotická reklama i když mám zapnutý uBlock Origin a při prohlížení netu se na konkrétních novinových stránkách (střípky ze světa) neobjeví názvy článků po kliknutí na odkaz. Jen to problikne. Asi tam mám nějakou havěť. Posílám logy z FRST a díky za další rady. RSIT jsem již na vašich stránkách nenašel ( v odkazu je bílá obrazovka). Nevyžádaná erotická reklama v novém okně se teď v 16:53 objevila i když jsem klikl do textu, abych opravil chybu.


Pošlu to na několik částí neb je to moc dlouhé.

[Antusek]

1. část.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-01-2020
Ran by Admin (administrator) on DESKTOP-1U0LM3C (31-01-2020 16:31:13)
Running from D:\Aviry
Loaded Profiles: Admin (Available Profiles: Admin)
Platform: Windows 10 Home Version 1909 18363.592 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

( GoldDay Corp) [File not signed] C:\Users\Admin\AppData\Roaming\view\view.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Systems Inc.) [File not signed] D:\Programy\Adobe\Adobe Acrobat Distiller 5.0\Distillr\AcroTray.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) D:\Fotoeditory\Adobe Photoshop Elements 11\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(ASUSTeK Computer Inc. -> ) C:\Windows\System32\AsusUpdateCheck.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\protectedservice.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\sched.exe
(Geek Software GmbH -> Geek Software GmbH) D:\Programy\PDF24\pdf24.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett Packard -> Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Check Point Software Technologies Ltd. -> ) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) D:\Aviry\CheckPoint\ZoneAlarm\zatray.exe
(LAVASOFT SOFTWARE CANADA INC -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(LAVASOFT SOFTWARE CANADA INC -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\updater-ws.exe
(pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\ws.exe
(Piriform Software Ltd -> Piriform Ltd) D:\Aviry\CCleaner\CCleaner64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files (x86)\Opera\assistant\browser_assistant.exe [2785304 2020-01-28] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Run: [] => [X]
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Run: [CCleaner Smart Cleaning] => D:\Aviry\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [7938648 2020-01-27] (LAVASOFT SOFTWARE CANADA INC -> Lavasoft)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Run: [view] => C:\Users\Admin\AppData\Roaming\view\viewU.exe [96768 2020-01-20] ( GoldDay Corp) [File not signed]
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe [33792 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [4615616 2019-11-29] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-16] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acrobat Assistant.lnk [2019-11-27]
ShortcutTarget: Acrobat Assistant.lnk -> D:\Programy\Adobe\Adobe Acrobat Distiller 5.0\Distillr\AcroTray.exe (Adobe Systems Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2019-11-26]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {26F6B29D-8041-4014-A8B1-887015FC39CD} - System32\Tasks\Opera scheduled assistant Autoupdate 1580117963 => C:\Program Files (x86)\Opera\launcher.exe [1350680 2020-01-22] (Opera Software AS -> Opera Software)
Task: {30515FA6-F9ED-44C5-8EFA-8506DAE5A0F2} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-1U0LM3C-Admin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {31F2F915-2C43-4B33-A791-0F6B2BF361B1} - System32\Tasks\Opera scheduled Autoupdate 1574800406 => C:\Program Files (x86)\Opera\launcher.exe [1350680 2020-01-22] (Opera Software AS -> Opera Software)
Task: {41F43FA7-7199-4F51-8BB7-6C396C188626} - System32\Tasks\CCleanerSkipUAC => D:\Aviry\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {45D3064C-3490-40EA-A308-48CC75246022} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-26] (Google Inc -> Google Inc.)
Task: {4B8E12BC-E294-4E07-9C09-959F3158EF36} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [647168 2020-01-09] () [File not signed]
Task: {6D0F4719-6443-4675-A203-79D1F80F2BD1} - System32\Tasks\Avira_Antivirus_Systray => D:\Aviry\Avira\Antivirus\avgnt.exe [2757672 2019-11-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {7779BAF8-BF64-49D0-8002-DDA951387D28} - System32\Tasks\AutoKMSDaily => C:\Windows\AutoKMS.exe [647168 2020-01-09] () [File not signed]
Task: {A2F90269-7FCF-4E16-80C5-2D2E52571D0D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {B01B9418-6846-4E2E-A1D2-A7B9F27667D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-26] (Google Inc -> Google Inc.)
Task: {B3F8FF2A-AF7C-41B7-A3DF-C3DD0781737E} - System32\Tasks\CCleaner Update => D:\Aviry\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {BB9C4A9E-8903-42A2-9BCF-77E08E69BE01} - System32\Tasks\klcp_update => D:\Prográmky\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1724928 2019-11-16] () [File not signed]
Task: {E948ECFF-5A89-46DA-AE8D-EFA7EF4E35F1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {FFDCBDCA-7CFB-4740-B675-7E5A751731CC} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-11-26] (AVAST Software s.r.o. -> AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\Windows\AutoKMS.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{266e809c-ac84-4a9e-b962-f5e47fcf4ea6}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-722231672-965411127-3486821242-1001 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
BHO: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
Toolbar: HKLM-x32 - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)

FireFox:
========
FF DefaultProfile: kc08x7df.default
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default [2020-01-31]
FF NewTab: Mozilla\Firefox\Profiles\kc08x7df.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10092__200127
FF Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default\Extensions\uBlock0@raymondhill.net.xpi [2019-11-27]
FF Extension: (Mozilla Official) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default\Extensions\{14553439-2741-4e9d-b474-784f336f58c9} [2020-01-27] [not signed]
FF HKLM\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Extension: (PDF Architect 7 Creator) - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi [2019-10-02]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-12-02] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2020-01-31]
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-01-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-26]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-17]

Opera:
=======
OPR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2019-11-28]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor10.0; D:\Fotoeditory\Adobe Photoshop Elements 11\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-14] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
S2 AntiVirMailService; D:\Aviry\Avira\Antivirus\avmailc7.exe [1210168 2019-12-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; D:\Aviry\Avira\Antivirus\ProtectedService.exe [535352 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; D:\Aviry\Avira\Antivirus\sched.exe [484768 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Aviry\Avira\Antivirus\avguard.exe [484768 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; D:\Aviry\Avira\Antivirus\avwebg7.exe [574848 2020-01-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [768408 2020-01-31] (ASUSTeK Computer Inc. -> )
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [617520 2020-01-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
U2 CPEFR; C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe [2825976 2019-11-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 CpSbaCipolla; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33016 2019-10-29] (Check Point Software Technologies Ltd. -> )
R2 CpSbaUpdater; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33016 2019-10-29] (Check Point Software Technologies Ltd. -> )
S3 Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Office14\GROOVE.EXE [30963576 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R3 PDF Architect 7; C:\Program Files\PDF Architect 7\ws.exe [2579752 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 7 Creator; C:\Program Files\PDF Architect 7\creator\common\creator-ws.exe [692008 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 7 Update Service; C:\Program Files\PDF Architect 7\updater-ws.exe [1832232 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF24; D:\Programy\PDF24\pdf24.exe [487048 2019-10-21] (Geek Software GmbH -> Geek Software GmbH)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RemediationService; C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe [18168 2019-11-04] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 TESvc; C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe [301304 2019-11-04] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 vsmon; D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe [4501544 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [28760 2020-01-27] (LAVASOFT SOFTWARE CANADA INC -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-11-26] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-11-26] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZA NET ICM Service; C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe [40304 2019-02-07] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 ZAARUpdateService; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe [51936 2019-11-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 ZAPrivacyService; D:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies, Ltd.)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [45832 2019-10-01] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [24424 2016-08-12] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 AMDPCIDev; C:\Windows\System32\drivers\AMDPCIDev.sys [31592 2018-04-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [243048 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\Windows\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [207784 2019-12-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [197176 2019-09-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [46704 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [89736 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 cpbak; C:\Windows\System32\DRIVERS\cpbak.sys [66848 2019-11-05] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R1 CPEPMon; C:\Windows\System32\DRIVERS\CPEPMon.sys [110880 2019-11-05] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-18] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-18] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 dot4usb; C:\Windows\system32\DRIVERS\dot4usb.sys [49056 2012-10-18] (Hewlett-Packard Company -> Microsoft Corporation)
R1 epnetflt; C:\Windows\system32\drivers\epnetflt.sys [130336 2019-10-06] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R1 epregflt; C:\Windows\system32\drivers\epregflt.sys [132176 2019-05-01] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R2 ISWKL; C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\bin\ISWKL.sys [65264 2019-08-12] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_db678424d2641c3d\nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)
R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [461240 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-11-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [351968 2019-11-26] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-11-26] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; no ImagePath
U3 iswSvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Three months (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-01-31 16:30 - 2020-01-31 16:31 - 000000000 ____D C:\FRST
2020-01-31 15:29 - 2020-01-31 15:29 - 000000000 _____ C:\Windows\cpepmon.mlf
2020-01-30 09:19 - 2020-01-30 09:19 - 001363429 _____ C:\Users\Admin\Downloads\VID-20170114-WA0003.mp4
2020-01-28 00:17 - 2020-01-28 00:17 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Temp
2020-01-27 23:49 - 2020-01-27 23:49 - 000000000 ____D C:\Users\Admin\AppData\Roaming\view
2020-01-27 23:49 - 2020-01-27 23:49 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\view
2020-01-27 23:48 - 2020-01-28 22:45 - 000000000 ____D C:\Program Files (x86)\MachinerData
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Lavasoft
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\Users\Admin\AppData\Local\Lavasoft
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\vso
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\ProgramData\Lavasoft
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\Program Files (x86)\vso
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2020-01-27 22:42 - 2020-01-27 22:42 - 000000000 ____D C:\Users\Admin\AppData\Roaming\PDF Producer
2020-01-27 21:43 - 2020-01-27 21:43 - 000001189 _____ C:\Users\Public\Desktop\Avira.lnk
2020-01-27 10:39 - 2020-01-29 10:39 - 000004194 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1580117963
2020-01-20 22:28 - 2020-01-27 23:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-01-17 14:56 - 2020-01-17 14:56 - 012381996 _____ C:\Users\Admin\Downloads\getfvid_10000000_2196253103999578_8666084806774988589_n11 (1).mp4
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Real
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\Users\Admin\AppData\Local\Real
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\ProgramData\Real
2020-01-15 19:20 - 2020-01-15 19:20 - 025900032 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 025444352 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 022627840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 019849216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 018020352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 009928208 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 008012800 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 007754752 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 007600448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 007016448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 006520480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 005913600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 003729408 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 003703296 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 003263488 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002870784 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002801152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 002716672 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 002561536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002494464 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002473976 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002305536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001985928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001835008 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001697280 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001655880 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001610752 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001458688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001399096 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 001330952 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001151816 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001106944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001098720 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001072952 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 001051664 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001020032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000921600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000896512 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnostics.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000852480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000851456 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000689664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000678712 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000673792 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000671232 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000670720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000571392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiaaut.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000542496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000432256 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000400696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000368128 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000363840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\DiagnosticLogCSP.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000321536 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV1.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000271872 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\sti_ci.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000162696 _____ (Microsoft Corporation) C:\Windows\system32\dmcmnutils.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\wiadss.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000127520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmcmnutils.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000127064 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\cryptcatsvc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000119808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadss.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000102400 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000097280 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000089536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\enterpriseresourcemanager.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enterpriseresourcemanager.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000018432 _____ (Microsoft Corporation) C:\Windows\system32\wiatrace.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiatrace.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\DMAlertListener.ProxyStub.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DMAlertListener.ProxyStub.dll
2020-01-15 19:14 - 2019-12-10 06:15 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-01-15 19:14 - 2019-12-10 05:59 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-01-15 17:59 - 2020-01-15 17:59 - 000000305 _____ C:\Users\Admin\Downloads\Část_připojené_zprávy
2020-01-13 21:59 - 2020-01-13 21:59 - 002981730 _____ C:\Users\Admin\Downloads\Na rozjezd dne,.ppsx
2020-01-10 17:33 - 2020-01-10 17:33 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2020-01-10 17:33 - 2020-01-10 17:33 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2020-01-09 18:03 - 2020-01-09 18:03 - 000000000 ____D C:\Windows\system32\Tasks\S-1-5-21-722231672-965411127-3486821242-1001
2020-01-09 17:41 - 2020-01-31 15:26 - 000078848 _____ C:\Windows\KMSEmulator.exe
2020-01-09 17:41 - 2020-01-31 15:26 - 000002820 _____ C:\Windows\system32\Tasks\AutoKMSDaily
2020-01-09 17:41 - 2020-01-31 15:26 - 000000242 _____ C:\Windows\Tasks\AutoKMSDaily.job
2020-01-09 17:41 - 2020-01-10 17:37 - 000000232 _____ C:\Windows\Tasks\AutoKMS.job
2020-01-09 17:41 - 2020-01-09 17:41 - 000647168 _____ C:\Windows\AutoKMS.exe
2020-01-09 17:41 - 2020-01-09 17:41 - 000002494 _____ C:\Windows\system32\Tasks\AutoKMS
2020-01-09 17:41 - 2020-01-09 17:41 - 000000184 _____ C:\Windows\AutoKMS.ini
2020-01-09 17:28 - 2020-01-09 17:28 - 000002752 _____ C:\Users\Admin\Desktop\Microsoft Outlook 2010.lnk
2020-01-09 17:27 - 2020-01-09 17:27 - 000002752 _____ C:\Users\Admin\Desktop\Microsoft Word 2010.lnk
2020-01-09 17:27 - 2020-01-09 17:27 - 000002704 _____ C:\Users\Admin\Desktop\Microsoft PowerPoint 2010.lnk
2020-01-09 17:26 - 2020-01-09 17:26 - 000002714 _____ C:\Users\Admin\Desktop\Microsoft Excel 2010.lnk
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\Document Themes 14
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\CLIPART
2020-01-09 17:21 - 2020-01-12 22:12 - 000000000 ____D C:\Program Files (x86)\Office14
2020-01-09 17:21 - 2020-01-09 17:35 - 000000000 ____D C:\Program Files (x86)\Stationery
2020-01-09 17:21 - 2020-01-09 17:30 - 000000000 ____D C:\Users\Admin\AppData\Local\Microsoft Help
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Windows\system32\Tasks\OfficeSoftwareProtectionPlatform
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files\Microsoft Office
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files (x86)\MEDIA
2020-01-09 17:20 - 2020-01-09 17:20 - 000000000 __RHD C:\MSOCache
2020-01-07 22:19 - 2020-01-07 22:19 - 005573613 _____ C:\Users\Admin\Downloads\vzpominky_na_stare_casy.pdf
2020-01-01 18:25 - 2020-01-01 18:25 - 009594653 _____ C:\Users\Admin\Downloads\Cina_zije.mp4
2019-12-24 14:27 - 2019-12-24 14:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BAHN 3.81
2019-12-23 21:29 - 2019-12-23 21:37 - 000007230 _____ C:\Users\Admin\Documents\Vánoční písně 2.wlmp
2019-12-18 16:42 - 2019-12-18 16:42 - 000843763 _____ C:\Users\Admin\Downloads\certifikát.pdf
2019-12-17 13:54 - 2019-12-17 13:54 - 000266201 _____ C:\Users\Admin\Downloads\NPS96953 akceptace.pdf
2019-12-17 11:55 - 2019-12-17 11:55 - 009562877 _____ C:\Users\Admin\Downloads\VID-20180515-WA0013.mp4
2019-12-14 13:31 - 2019-12-14 13:31 - 000014424 _____ C:\Users\Admin\Documents\Společenský večer pro zaměstnance MČ Praha 10 v KD Barikádníků 13.12.2019.wlmp
2019-12-13 10:29 - 2019-12-13 10:29 - 007905000 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 007278592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 007263992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 006083832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 005943296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 005764664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 004129416 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 002762296 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 002698768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 002284544 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 002147328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 002082208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001757304 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-12-13 10:29 - 2019-12-13 10:29 - 001748480 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001743888 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001647072 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001539584 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001512528 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 001451520 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 001413840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001366128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-12-13 10:29 - 2019-12-13 10:29 - 001261464 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001182448 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 001149712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 001066496 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001054864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 001006904 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000986936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 000878080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Service.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000842552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000826368 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000822416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000797112 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000774456 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000674280 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000673456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000598016 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000593128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000532480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000530944 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000524264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000513536 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000511000 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cldflt.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 000430080 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000422712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 000406480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000404480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 000342528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 000210744 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000097080 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2019-12-13 10:29 - 2019-12-13 10:29 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\autopilot.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000067112 _____ (Microsoft Corporation) C:\Windows\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\DevQueryBroker.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000032056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2019-12-13 10:29 - 2019-12-13 10:29 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\autopilotdiag.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2019-12-13 10:29 - 2019-12-13 10:29 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2019-12-11 11:19 - 2019-12-11 11:19 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Google
2019-12-09 20:52 - 2019-12-09 20:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2019-12-09 20:42 - 2019-12-09 20:52 - 000000770 _____ C:\Users\Public\Desktop\PDF24.lnk
2019-12-09 20:42 - 2019-12-09 20:42 - 000000000 ____D C:\Users\Admin\AppData\Local\PDF24
2019-12-09 20:03 - 2019-12-09 20:03 - 000000000 ____D C:\Users\Admin\AppData\Local\calibre-ebook.com
2019-12-09 20:03 - 2019-12-09 20:03 - 000000000 ____D C:\Users\Admin\AppData\Local\cache
2019-12-09 19:41 - 2019-12-09 20:03 - 000000000 ____D C:\Users\Admin\AppData\Local\calibre-cache
2019-12-09 19:40 - 2019-12-09 20:13 - 000000000 ____D C:\Users\Admin\Knihovna Calibre
2019-12-09 19:40 - 2019-12-09 20:06 - 000000000 ____D C:\Users\Admin\AppData\Roaming\calibre
2019-12-09 19:39 - 2019-12-09 19:39 - 000000758 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2019-12-09 19:39 - 2019-12-09 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2019-12-09 19:22 - 2019-12-09 19:22 - 000296269 _____ C:\Users\Admin\Documents\Studie_vyvolencovy_kryci_legendy_Hitler.mobi
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\text z knížky_soubory
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\Skenovat1_soubory
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\referátem_soubory
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\mobrany C_soubory
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\Informační-báze-KSB_v2_02.12.2015
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\FLVtoMP4.co
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\DVDVideoSoft
2019-12-09 19:18 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\Calibre knihovna
2019-12-09 19:18 - 2019-12-08 22:27 - 000810543 _____ C:\Users\Admin\Documents\Studie_vyvolencovy_kryci_legendy_Hitler.pdf
2019-12-09 19:18 - 2016-05-05 19:17 - 006943666 _____ C:\Users\Admin\Documents\AllatRa_Anastasia_Novych_cz.pdf
2019-12-09 19:18 - 2016-03-08 19:56 - 000077915 _____ C:\Users\Admin\Documents\Dovolená na ostrově Mauricius 3.2.-14.2.2016.wlmp
2019-12-09 19:18 - 2015-12-25 12:03 - 000803774 _____ C:\Users\Admin\Documents\Kuras - Jak zabít civilizaci 2015.pdf
2019-12-09 19:18 - 2015-12-17 18:40 - 076755341 _____ C:\Users\Admin\Documents\Informační-báze-KSB_v2_02.12.2015.zip
2019-12-09 19:18 - 2015-12-04 19:58 - 000052099 _____ C:\Users\Admin\Documents\Slavnostní akademie.wlmp
2019-12-09 19:18 - 2015-10-16 18:25 - 000171008 _____ C:\Users\Admin\Documents\metadata.db
2019-12-09 19:18 - 2015-10-16 18:25 - 000013164 _____ C:\Users\Admin\Documents\metadata_db_prefs_backup.json
2019-12-09 19:18 - 2015-10-16 14:19 - 022899366 _____ C:\Users\Admin\Documents\cesky-krtek-v-cia.pdf
2019-12-09 19:18 - 2015-10-16 14:19 - 022899366 _____ C:\Users\Admin\Documents\cesky-krtek-v-cia (1).pdf
2019-12-09 19:18 - 2015-10-16 14:19 - 014065965 _____ C:\Users\Admin\Documents\cesky-krtek-v-cia (1).mobi
2019-12-09 19:18 - 2015-10-16 14:14 - 014065965 _____ C:\Users\Admin\Documents\cesky-krtek-v-cia.mobi
2019-12-09 19:18 - 2015-10-16 13:11 - 001233065 _____ C:\Users\Admin\Documents\cesky-krtek-v-cia-auto_preview.mobi
2019-12-09 19:18 - 2015-10-16 10:09 - 000357478 _____ C:\Users\Admin\Documents\Nastal čas o Stalinovi pohovořit (1).pdf
2019-12-09 19:18 - 2015-10-16 10:08 - 000357478 _____ C:\Users\Admin\Documents\Nastal čas o Stalinovi pohovořit.pdf
2019-12-09 19:18 - 2015-07-20 18:52 - 000076482 _____ C:\Users\Admin\Documents\15 Světová gymnaestráda v Helsinkách 2015.wlmp
2019-12-09 19:18 - 2015-06-09 19:13 - 000045134 _____ C:\Users\Admin\Documents\Sokolské Brno 2015.wlmp
2019-12-09 19:18 - 2015-05-12 20:11 - 000005288 _____ C:\Users\Admin\Documents\brozurka_list_2.htm
2019-12-09 19:18 - 2015-04-09 08:17 - 000080066 _____ C:\Users\Admin\Documents\Kaddáfího závěť.pdf
2019-12-09 19:18 - 2015-04-06 19:39 - 000058263 _____ C:\Users\Admin\Documents\Nové stanice pražského metra na lince A v úseku Dejvická - Nemocnice Motol 6.4.2015.wlmp
2019-12-09 19:18 - 2015-04-02 09:27 - 000228432 _____ C:\Users\Admin\Documents\usa po válce - v Čsr.pdf
2019-12-09 19:18 - 2015-01-22 21:23 - 001920565 _____ C:\Users\Admin\Documents\Co_ne_smite vedet.pdf
2019-12-09 19:18 - 2014-12-31 22:15 - 000000000 ____D C:\Users\Admin\Documents\HP Photosmart Projects
2019-12-09 19:18 - 2014-12-12 18:16 - 000562962 _____ C:\Users\Admin\Documents\pohadky-vypravec.pdf
2019-12-09 19:18 - 2014-09-18 14:31 - 000179526 _____ C:\Users\Admin\Documents\Internet Mutějovice 2014-2015.pdf
2019-12-09 19:18 - 2014-07-01 07:56 - 000334699 _____ C:\Users\Admin\Documents\protokoly.pdf
2019-12-09 19:18 - 2014-06-19 14:36 - 000167831 _____ C:\Users\Admin\Documents\voucher-164088.pdf
2019-12-09 19:18 - 2014-04-22 18:53 - 000095410 _____ C:\Users\Admin\Documents\cc_20140422_195332.reg
2019-12-09 19:18 - 2014-04-17 20:15 - 000211224 _____ C:\Users\Admin\Documents\Dovolená na Bali 2014.wlmp
2019-12-09 19:18 - 2014-04-17 07:23 - 000760499 _____ C:\Users\Admin\Documents\KmotrMrázek.pdf
2019-12-09 19:18 - 2014-04-14 08:46 - 000431654 _____ C:\Users\Admin\Documents\217957280-Historie-USAID.pdf
2019-12-09 19:18 - 2014-01-15 10:43 - 002401655 _____ C:\Users\Admin\Documents\Alternativni_medicina_Hert.pdf
2019-12-09 19:18 - 2014-01-05 11:01 - 019111211 _____ C:\Users\Admin\Documents\Existence_01_2014.pdf
2019-12-09 19:18 - 2013-12-27 09:50 - 012274634 _____ C:\Users\Admin\Documents\NACISTICKÉ-KOŘENY-BRUSELSKÉ-EU.pdf
2019-12-09 19:18 - 2013-11-23 11:17 - 004714232 _____ C:\Users\Admin\Documents\DOKUMENTY,-KTERÉ-V-ČT-NEUVIDÍTE!!!.rar
2019-12-09 19:18 - 2013-05-21 16:59 - 000022697 _____ C:\Users\Admin\Documents\KT8D5.wlmp
2019-12-09 19:18 - 2013-05-13 12:56 - 001101568 _____ C:\Users\Admin\Documents\Martin-Herzán----Totalitní-světovláda.pdf
2019-12-09 19:18 - 2013-05-09 15:47 - 000020718 _____ C:\Users\Admin\Documents\cc_20130509_164751.reg
2019-12-09 19:18 - 2013-03-12 16:26 - 000006726 _____ C:\Users\Admin\Documents\Skenovat13-03-12 1625.htm
2019-12-09 19:18 - 2013-02-19 16:37 - 000055777 _____ C:\Users\Admin\Documents\Přelety_hlasování.odt
2019-12-09 19:18 - 2013-01-06 19:50 - 000018286 _____ C:\Users\Admin\Documents\text z knížky.htm
2019-12-09 19:18 - 2013-01-06 18:53 - 000073072 _____ C:\Users\Admin\Documents\referátem vystoupil sám.tif
2019-12-09 19:18 - 2013-01-06 18:52 - 000003209 _____ C:\Users\Admin\Documents\referátem vystoupil sám.htm
2019-12-09 19:18 - 2013-01-06 18:42 - 000016806 _____ C:\Users\Admin\Documents\mobrany Cepičkou Za.htm
2019-12-09 19:18 - 2012-12-07 21:11 - 000012932 _____ C:\Users\Admin\Documents\Augustin Očenášek - 1.část.htm
2019-12-09 19:18 - 2012-12-07 20:34 - 000006223 _____ C:\Users\Admin\Documents\Augustin Očenášek - 2.část.htm
2019-12-09 19:18 - 2012-05-27 11:20 - 000000000 ____D C:\Users\Admin\Documents\ForceField Shared Files
2019-12-08 09:21 - 2019-12-08 09:21 - 001760928 _____ C:\Users\Admin\Downloads\AutentickeFotky.pdf
2019-12-07 11:21 - 2019-12-11 22:25 - 000130104 _____ C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2019-12-05 22:06 - 2019-12-05 22:06 - 000244912 _____ C:\Users\Admin\Downloads\Střelený divoč����k 545 kg.pdf
2019-12-05 10:48 - 2019-12-05 14:56 - 000031301 _____ C:\Users\Admin\Documents\Společné setkání účastníků 16. WG 2019 v Praze Tyršově domě a Michnově paláci 30.11.2019.wlmp
2019-12-03 17:56 - 2019-12-03 17:56 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2019-12-03 17:56 - 2019-10-04 16:55 - 000286416 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2019-12-03 17:56 - 2019-10-04 16:55 - 000286416 _____ C:\Windows\system32\vulkaninfo.exe
2019-12-03 17:56 - 2019-10-04 16:55 - 000260304 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2019-12-03 17:56 - 2019-10-04 16:55 - 000260304 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2019-12-03 17:56 - 2019-10-04 16:54 - 011059640 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2019-12-03 17:56 - 2019-10-04 16:54 - 009492896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2019-12-03 17:56 - 2019-10-04 16:54 - 001006800 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2019-12-03 17:56 - 2019-10-04 16:54 - 001006800 _____ C:\Windows\system32\vulkan-1.dll
2019-12-03 17:56 - 2019-10-04 16:54 - 000870096 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2019-12-03 17:56 - 2019-10-04 16:54 - 000870096 _____ C:\Windows\SysWOW64\vulkan-1.dll
2019-12-03 17:56 - 2019-10-04 16:54 - 000552328 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2019-12-03 17:56 - 2019-10-04 16:54 - 000456632 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 002041784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 001721816 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6443200.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 001543424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 001472200 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 001468504 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6443200.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 001164160 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 001135816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000914336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000810456 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000676824 _____ C:\Windows\system32\nvofapi64.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000656344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000633728 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000544160 _____ C:\Windows\SysWOW64\nvofapi.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000523520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2019-12-03 17:56 - 2019-10-04 16:53 - 000055448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2019-12-03 17:56 - 2019-10-04 16:52 - 040412760 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2019-12-03 17:56 - 2019-10-04 16:52 - 035269832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2019-12-03 17:56 - 2019-10-04 16:52 - 020194712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2019-12-03 17:56 - 2019-10-04 16:52 - 017471576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2019-12-03 17:56 - 2019-10-04 16:52 - 005425808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2019-12-03 17:56 - 2019-10-04 16:52 - 004768160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2019-12-03 17:56 - 2019-10-04 16:51 - 004342528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2019-12-02 21:36 - 2019-12-02 21:36 - 000000000 ____D C:\Users\Admin\AppData\Roaming\NVIDIA
2019-12-02 21:36 - 2019-12-02 21:36 - 000000000 ____D C:\Users\Admin\AppData\Roaming\LibreOffice
2019-12-02 21:36 - 2019-12-02 21:36 - 000000000 ____D C:\Users\Admin\AppData\Local\NVIDIA
2019-12-02 21:33 - 2019-12-02 21:33 - 000000922 _____ C:\Users\Public\Desktop\LibreOffice 6.3.lnk
2019-12-02 21:33 - 2019-12-02 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 6.3
2019-11-29 23:11 - 2019-11-29 23:11 - 014816256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 009711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 007195648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 006435840 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 006232576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 005501952 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 005112320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 004578816 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 004307968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 004150272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AI.MachineLearning.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 003967920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 003791360 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 003752960 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 003742544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 003487232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 003371928 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 002988344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 002956472 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 002772272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 002703872 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 002586816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 002576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 002399232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcGenral.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 002258848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001974824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 001916984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001866272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001856512 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001691648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001394168 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001348096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001283072 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001257472 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001189376 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001171704 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001154656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 001059840 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 001007616 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000982840 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000975872 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000892696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000874936 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000844800 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000832000 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000822072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000811536 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000768528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000768488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000700416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BTAGService.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000679152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000638264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000632320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000618496 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000606720 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000599552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000598528 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000586768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000517432 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000516544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000514576 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000513336 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000496640 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.FileExplorer.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000477712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-11-29 23:11 - 2019-11-29 23:11 - 000477184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000466928 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000461320 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000455168 _____ (Microsoft Corporation) C:\Windows\system32\upnphost.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000453632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000452920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000443904 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000415544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000404904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000401920 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000382976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000381952 _____ (Microsoft Corporation) C:\Windows\system32\AppLockerCSP.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000380944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000380928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcLayers.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000375720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000372752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000358400 _____ (Microsoft Corporation) C:\Windows\system32\AcGenral.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnphost.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000324624 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\AcLayers.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000283648 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000251512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000249856 _____ (Gracenote, Inc.) C:\Windows\SysWOW64\gnsdk_fp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\IndexedDbLegacy.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000225280 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2019-11-29 23:11 - 2019-11-29 23:11 - 000220472 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000219136 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\DiagSvc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000202552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\accessibilitycpl.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000199480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000193800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000189440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2019-11-29 23:11 - 2019-11-29 23:11 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IndexedDbLegacy.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000164776 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000164368 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000159232 _____ (Microsoft Corporation) C:\Windows\system32\srpapi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000136536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\omadmapi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwbase.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\WinHvPlatform.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000122880 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000113160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Utilman.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EaseOfAccessDialog.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000093496 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcXtrnal.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000084488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhvr.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000084488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2019-11-29 23:11 - 2019-11-29 23:11 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sethc.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000073024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\udhisapi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2019-11-29 23:11 - 2019-11-29 23:11 - 000066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AtBroker.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000061240 _____ (Microsoft Corporation) C:\Windows\system32\hvhostsvc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\AxInstUI.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\reg.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\udhisapi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000047616 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\upnpcont.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000036368 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnpcont.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000033280 _____ (Microsoft Corporation) C:\Windows\system32\posetup.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000028344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\appidtel.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000024792 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000021304 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000020352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\applockerfltr.sys
2019-11-29 23:11 - 2019-11-29 23:11 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\AcXtrnal.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDJPN.DLL
2019-11-29 23:11 - 2019-11-29 23:11 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\pacjsworker.exe
2019-11-29 23:11 - 2019-11-29 23:11 - 000009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbd106.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2019-11-29 23:11 - 2019-11-29 23:11 - 000005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2019-11-29 23:11 - 2019-11-29 23:11 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2019-11-29 23:11 - 2019-11-29 23:11 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2019-11-29 23:10 - 2019-11-29 23:11 - 001726480 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 017787904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 007849424 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 006227104 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 006166016 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 005890048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AI.MachineLearning.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 004615616 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 004140544 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 004047360 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 004005888 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 003591208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 003387392 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 003105792 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 003084800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 002871848 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 002126112 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 002120704 _____ (Microsoft Corporation) C:\Windows\system32\WpcDesktopMonSvc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 002114048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001942528 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001920512 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001687040 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001428992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 001413912 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001259416 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 001094656 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001070080 _____ (Microsoft Corporation) C:\Windows\system32\BTAGService.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001069064 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 001027000 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000913920 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000911824 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000874536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000765440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000747320 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000708096 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntimewindows.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000704000 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntime.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000657424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000649728 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000642560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000604984 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000589592 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000563712 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000552448 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000551736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Vid.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000534528 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.UserService.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000524800 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000522176 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000492032 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000465208 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000446464 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000441144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000416016 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000359424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\MbbCx.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000350720 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SpeechPrivacy.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000322504 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000292664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000291256 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000280064 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000278016 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000277504 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\UpdateDeploymentProvider.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000239104 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000235008 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000204816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000184832 _____ (Microsoft Corporation) C:\Windows\system32\AarSvc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000175616 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000162304 _____ (Microsoft Corporation) C:\Windows\system32\fwbase.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000132608 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000129024 _____ (Microsoft Corporation) C:\Windows\system32\UtcDecoderHost.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationControlCSP.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000118272 _____ (Microsoft Corporation) C:\Windows\system32\EaseOfAccessDialog.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2019-11-29 23:10 - 2019-11-29 23:10 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000105488 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2019-11-29 23:10 - 2019-11-29 23:10 - 000088568 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\ApiSetHost.AppExecutionAlias.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\AtBroker.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000071480 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\audioresourceregistrar.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000047208 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthMini.SYS
2019-11-29 23:10 - 2019-11-29 23:10 - 000027648 _____ (Microsoft Corporation) C:\Windows\system32\wscisvif.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\wscproxystub.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\dstokenclean.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2019-11-29 23:10 - 2019-11-29 23:10 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\wscadminui.exe
2019-11-29 23:10 - 2019-11-29 23:10 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tier2punctuations.dll
2019-11-28 18:27 - 2019-11-28 18:27 - 000003634 _____ C:\Windows\system32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-1U0LM3C-Admin
2019-11-28 18:26 - 2019-11-28 18:27 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2019-11-28 17:43 - 2019-11-28 17:43 - 000000740 _____ C:\Users\Admin\Desktop\ReNamer.lnk
2019-11-28 16:52 - 2019-12-03 17:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-11-28 16:52 - 2019-11-28 16:52 - 000000000 ____D C:\Program Files (x86)\MSECache
2019-11-27 22:50 - 2019-11-05 14:03 - 000066848 _____ (Check Point Software Technologies) C:\Windows\system32\Drivers\cpbak.sys
2019-11-27 21:27 - 2019-11-27 21:28 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Adobe
2019-11-27 21:21 - 2019-11-27 21:21 - 000000895 _____ C:\Users\Admin\intlname.ols
2019-11-27 21:16 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2019-11-27 21:16 - 2019-11-27 21:16 - 000001447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2019-11-27 21:16 - 2019-11-27 21:16 - 000001378 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2019-11-27 21:16 - 2019-11-27 21:16 - 000000000 ____D C:\Windows\cs
2019-11-27 21:07 - 2019-11-27 21:16 - 000000000 ____D C:\Program Files (x86)\Windows Live
2019-11-27 21:06 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-11-27 21:06 - 2019-12-14 13:03 - 000000000 ____D C:\Users\Admin\AppData\Local\Windows Live
2019-11-27 21:06 - 2019-11-27 21:06 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2019-11-27 21:06 - 2019-11-27 21:06 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-11-27 21:06 - 2019-11-27 21:06 - 000000000 ____D C:\Program Files\MSBuild
2019-11-27 21:05 - 2019-03-01 17:31 - 001166488 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2019-11-27 21:05 - 2019-03-01 17:31 - 000124568 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2019-11-27 21:05 - 2019-03-01 17:31 - 000035592 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2019-11-27 21:05 - 2019-02-05 18:41 - 000778912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2019-11-27 21:05 - 2019-02-05 18:41 - 000103072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-11-27 21:05 - 2019-02-05 18:41 - 000035592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2019-11-27 19:49 - 2019-11-27 19:49 - 000000692 _____ C:\Users\Public\Desktop\rajče průvodce.lnk
2019-11-27 19:49 - 2019-11-27 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\rajce
2019-11-27 11:41 - 2019-11-27 11:41 - 000181024 _____ (Check Point Software Technologies) C:\Windows\system32\Drivers\epklib.sys
2019-11-27 11:27 - 2019-11-27 11:27 - 000268589 _____ C:\Windows\system32\Drivers\cposfw.xml
2019-11-27 02:11 - 2019-11-27 02:16 - 000000173 _____ C:\Users\Admin\Desktop\Mail.ru.url
2019-11-27 02:07 - 2019-11-27 02:07 - 000000000 ____D C:\Users\Admin\Documents\ZPS8
2019-11-27 02:07 - 2019-11-27 02:07 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Zoner
2019-11-27 02:05 - 2019-11-27 02:05 - 000000780 _____ C:\Users\Public\Desktop\Zoner Photo Studio 8.lnk
2019-11-27 02:05 - 2019-11-27 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoner Photo Studio 8
2019-11-27 01:56 - 2020-01-31 16:20 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Mozilla
2019-11-27 01:55 - 2019-11-27 01:55 - 000000000 ____D C:\Program Files\Common Files\Adobe
2019-11-27 01:53 - 2019-11-27 01:53 - 000001667 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Elements 10.lnk
2019-11-27 01:53 - 2019-11-27 01:53 - 000001663 _____ C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk
2019-11-27 01:53 - 2010-03-19 03:00 - 000055856 ____N (Sonic Solutions) C:\Windows\system32\Drivers\PxHlpa64.sys
2019-11-27 01:53 - 2009-10-20 03:00 - 000010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdralw2k.sys
2019-11-27 01:53 - 2009-10-20 03:00 - 000010224 ____N (Sonic Solutions) C:\Windows\system32\Drivers\cdr4_xp.sys
2019-11-27 01:37 - 2019-11-27 01:56 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Mozilla
2019-11-27 01:37 - 2019-11-27 01:37 - 000000000 ____D C:\Users\Admin\AppData\Local\Mozilla
2019-11-27 01:03 - 2020-01-30 22:49 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2019-11-27 00:45 - 2019-11-27 00:45 - 000000732 _____ C:\Users\Public\Desktop\WinRAR.lnk
2019-11-27 00:45 - 2019-11-27 00:45 - 000000732 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2019-11-27 00:45 - 2019-11-27 00:45 - 000000000 ____D C:\Users\Admin\AppData\Roaming\WinRAR
2019-11-27 00:45 - 2019-11-27 00:45 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-11-27 00:45 - 2019-11-27 00:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-11-27 00:25 - 2020-01-19 17:23 - 000057378 _____ C:\Windows\ATMREG.ATM
2019-11-27 00:22 - 2019-11-27 00:22 - 000001249 _____ C:\Users\Admin\Desktop\PageMaker 7.0.lnk
2019-11-27 00:21 - 2019-11-27 00:21 - 000001173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Distiller 5.0.lnk
2019-11-27 00:21 - 2001-03-15 08:18 - 000065536 _____ C:\Windows\SysWOW64\adistres.dll
2019-11-27 00:21 - 2001-03-15 08:18 - 000020584 _____ (Adobe Systems Incorporated.) C:\Windows\SysWOW64\PdfPorts.dll
2019-11-27 00:20 - 2019-12-09 19:18 - 000000000 ____D C:\Users\Admin\Documents\My eBooks
2019-11-27 00:20 - 2019-11-27 00:20 - 000000000 ____D C:\Users\Admin\AppData\Roaming\InterTrust
2019-11-27 00:19 - 2019-11-27 00:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2019-11-27 00:19 - 2001-04-11 13:03 - 000565760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvcp50.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000401484 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvcrtd.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000210944 _____ C:\Windows\SysWOW64\Msvcrt10.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfcans32.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000133392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfco30.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000094285 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvcirtd.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000087392 _____ (Twain Working Group) C:\Windows\Twain.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000069632 _____ (Twain Working Group) C:\Windows\Twunk_32.exe
2019-11-27 00:19 - 2001-04-11 13:03 - 000048560 _____ (Twain Working Group) C:\Windows\Twunk_16.exe
2019-11-27 00:19 - 2001-04-11 13:03 - 000033424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Urlcache.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\W95fiber.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfcuia32.dll
2019-11-27 00:19 - 2001-04-11 13:02 - 000322832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfc30.dll
2019-11-27 00:19 - 2001-04-11 13:02 - 000212480 _____ (Eastman Kodak) C:\Windows\Pcdlib32.dll
2019-11-27 00:19 - 2001-04-11 13:02 - 000032792 _____ (Eastman Kodak Company) C:\Windows\Spwhpt.dll
2019-11-27 00:15 - 1998-10-29 15:45 - 000306688 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2019-11-27 00:12 - 2020-01-09 17:35 - 000000000 ____D C:\Windows\SHELLNEW
2019-11-27 00:12 - 2020-01-09 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2019-11-27 00:12 - 2019-11-27 00:12 - 000000798 _____ C:\Users\Public\Desktop\MS Powerpoint.lnk
2019-11-27 00:12 - 2019-11-27 00:12 - 000000793 _____ C:\Users\Public\Desktop\MS WORD.lnk
2019-11-27 00:12 - 2019-11-27 00:12 - 000000785 _____ C:\Users\Public\Desktop\MS EXCEL.lnk
2019-11-27 00:12 - 2019-11-27 00:12 - 000000000 ____D C:\Windows\PCHEALTH
2019-11-26 23:55 - 2019-11-27 00:13 - 000000384 _____ C:\Windows\ODBC.INI
2019-11-26 23:41 - 2020-01-24 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2019-11-26 23:41 - 2019-11-26 23:41 - 000001379 _____ C:\Users\Public\Desktop\Skype.lnk
2019-11-26 23:41 - 2019-11-26 23:41 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2019-11-26 23:18 - 2019-11-26 23:18 - 000000000 ____D C:\Users\Admin\AppData\Local\Logitech® Webcam Software
2019-11-26 23:15 - 2019-11-26 23:24 - 000001713 _____ C:\Users\Public\Desktop\Logitech Webcam Software .lnk
2019-11-26 23:15 - 2019-11-26 23:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2019-11-26 23:15 - 2019-11-26 23:15 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Leadertech
2019-11-26 23:15 - 2019-11-26 23:15 - 000000000 ____D C:\ProgramData\LogiShrd
2019-11-26 23:15 - 2019-11-26 23:15 - 000000000 ____D C:\Program Files\Common Files\logishrd
2019-11-26 22:57 - 2019-11-26 22:57 - 000000405 _____ C:\Users\Admin\Desktop\Control Panel (2).lnk
2019-11-26 22:43 - 2019-11-26 22:43 - 000000000 ____D C:\Users\Admin\AppData\Local\HP
2019-11-26 22:41 - 2019-11-26 22:41 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Macromedia
2019-11-26 22:39 - 2019-11-26 22:43 - 000000000 ____D C:\Users\Admin\AppData\Roaming\HP
2019-11-26 22:39 - 2019-11-26 22:39 - 000000000 ____D C:\ProgramData\WEBREG
2019-11-26 22:37 - 2019-12-04 08:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\HpUpdate
2019-11-26 22:37 - 2019-11-26 22:37 - 000001434 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Centrum řešení HP.lnk
2019-11-26 22:37 - 2019-11-26 22:37 - 000001428 _____ C:\Users\Public\Desktop\Centrum řešení HP.lnk
2019-11-26 22:37 - 2019-11-26 22:37 - 000001314 _____ C:\Users\Public\Desktop\Nakupujte spotřební materiál HP.lnk
2019-11-26 22:37 - 2019-11-26 22:37 - 000001056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registrace I.R.I.S. OCR.lnk
2019-11-26 22:37 - 2019-11-26 22:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2019-11-26 22:37 - 2019-11-26 22:37 - 000000000 ____D C:\ProgramData\HP Product Assistant
2019-11-26 22:36 - 2019-11-26 22:37 - 000000000 ____D C:\Program Files (x86)\HP
2019-11-26 22:35 - 2019-11-26 22:38 - 000202568 _____ C:\Windows\hpoins28.dat
2019-11-26 22:35 - 2012-09-26 16:48 - 000000584 ____N C:\Windows\hpomdl28.dat
2019-11-26 22:35 - 2009-07-08 11:51 - 000938496 _____ (Hewlett-Packard) C:\Windows\system32\hpowiax7.dll
2019-11-26 22:35 - 2009-07-08 11:51 - 000740864 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpotscl6.dll
2019-11-26 22:35 - 2009-07-08 11:51 - 000551424 _____ (Hewlett-Packard) C:\Windows\system32\hppldcoi.dll
2019-11-26 22:35 - 2009-07-08 11:51 - 000505344 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpovst15.dll
2019-11-26 22:26 - 2019-11-26 22:26 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2019-11-26 22:26 - 2012-10-18 21:52 - 003867040 _____ C:\Windows\system32\PortChanger.exe
2019-11-26 22:26 - 2012-10-18 21:52 - 000151968 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\Dot4.sys
2019-11-26 22:26 - 2012-10-18 21:52 - 000049056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dot4usb.sys
2019-11-26 22:26 - 2012-10-18 21:52 - 000027040 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\Dot4Prt.sys
2019-11-26 22:22 - 2019-11-26 22:38 - 000000000 ____D C:\ProgramData\HP
2019-11-26 22:20 - 2019-11-26 22:20 - 000000736 _____ C:\Users\Public\Desktop\Recuva.lnk
2019-11-26 22:20 - 2019-11-26 22:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2019-11-26 22:10 - 2019-11-26 22:10 - 000000000 ____D C:\Users\Admin\AppData\Local\pdfforge
2019-11-26 22:04 - 2019-11-26 22:04 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2019-11-26 22:02 - 2019-11-26 22:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\ABBYY
2019-11-26 22:02 - 2019-11-26 22:02 - 000000000 ____D C:\Users\Admin\AppData\Local\ABBYY
2019-11-26 22:01 - 2019-12-21 15:57 - 000000000 ____D C:\Users\Admin\AppData\Roaming\PDF Architect 7
2019-11-26 21:55 - 2020-01-27 23:36 - 000000000 ____D C:\ProgramData\ABBYY
2019-11-26 21:49 - 2019-12-22 08:43 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-11-26 21:49 - 2019-11-30 10:11 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2019-11-26 21:49 - 2019-11-26 21:49 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2019-11-26 21:49 - 2019-11-26 21:49 - 000000000 ____D C:\Program Files (x86)\Adobe
2019-11-26 21:48 - 2019-11-29 08:57 - 000000000 ____D C:\ProgramData\Adobe
2019-11-26 21:47 - 2019-11-30 10:11 - 000000000 ____D C:\Users\Admin\AppData\Local\Adobe
2019-11-26 21:47 - 2019-11-26 21:47 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software
2019-11-26 21:47 - 2019-11-26 21:47 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2019-11-26 21:46 - 2019-11-26 22:01 - 000000000 ____D C:\ProgramData\PDF Architect 7
2019-11-26 21:46 - 2019-11-26 22:01 - 000000000 ____D C:\ProgramData\AVAST Software
2019-11-26 21:46 - 2019-11-26 21:46 - 000001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 7.lnk
2019-11-26 21:46 - 2019-11-26 21:46 - 000000841 _____ C:\Users\Public\Desktop\PDF Architect 7.lnk
2019-11-26 21:46 - 2019-11-26 21:46 - 000000000 ____D C:\Users\Admin\Documents\PDF Architect
2019-11-26 21:46 - 2019-11-26 21:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 7
2019-11-26 21:46 - 2019-11-26 21:46 - 000000000 ____D C:\Program Files\PDF Architect 7
2019-11-26 21:46 - 2019-11-26 21:46 - 000000000 ____D C:\Program Files (x86)\PDF Architect 7
2019-11-26 21:42 - 2019-11-20 12:16 - 000001319 _____ C:\Users\Admin\Desktop\Internet Explorer.lnk
2019-11-26 21:34 - 2020-01-27 23:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-11-26 21:34 - 2020-01-21 08:42 - 000001211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-11-26 21:34 - 2019-11-27 01:56 - 000000000 ____D C:\ProgramData\Mozilla
2019-11-26 21:34 - 2019-11-26 21:34 - 000001199 _____ C:\Users\Public\Desktop\Firefox.lnk
2019-11-26 21:33 - 2020-01-27 10:39 - 000003970 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1574800406
2019-11-26 21:33 - 2020-01-27 10:39 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2019-11-26 21:33 - 2020-01-27 10:39 - 000000000 ____D C:\Program Files (x86)\Opera
2019-11-26 21:33 - 2019-11-26 21:33 - 000001204 _____ C:\Users\Public\Desktop\Prohlížeč Opera.lnk
2019-11-26 21:33 - 2019-11-26 21:33 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Opera Software
2019-11-26 21:33 - 2019-11-26 21:33 - 000000000 ____D C:\Users\Admin\AppData\Local\Opera Software
2019-11-26 21:30 - 2020-01-16 22:14 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-11-26 21:30 - 2020-01-16 22:14 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-11-26 21:30 - 2020-01-09 17:34 - 000004194 _____ C:\Windows\system32\Tasks\CCleaner Update
2019-11-26 21:30 - 2019-12-13 22:07 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2019-11-26 21:30 - 2019-12-13 22:07 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2019-11-26 21:30 - 2019-11-26 22:39 - 000000000 ____D C:\Users\Admin\AppData\Local\Google
2019-11-26 21:30 - 2019-11-26 21:35 - 000000000 ____D C:\Program Files (x86)\Google
2019-11-26 21:30 - 2019-11-26 21:30 - 000002872 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2019-11-26 21:30 - 2019-11-26 21:30 - 000000698 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-11-26 21:30 - 2019-11-26 21:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-11-26 21:25 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2019-11-26 21:25 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2019-11-26 21:25 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2019-11-26 21:25 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2019-11-26 21:25 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2019-11-26 21:25 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2019-11-26 21:25 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2019-11-26 21:25 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2019-11-26 21:25 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2019-11-26 21:25 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2019-11-26 21:25 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2019-11-26 21:25 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2019-11-26 21:25 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2019-11-26 21:25 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2019-11-26 21:25 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2019-11-26 21:25 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2019-11-26 21:25 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2019-11-26 21:25 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2019-11-26 21:25 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2019-11-26 21:25 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2019-11-26 21:25 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2019-11-26 21:25 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2019-11-26 21:25 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2019-11-26 21:25 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2019-11-26 21:25 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2019-11-26 21:25 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2019-11-26 21:25 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2019-11-26 21:25 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2019-11-26 21:25 - 2008-10-10 04:52 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2019-11-26 21:25 - 2008-10-10 04:52 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2019-11-26 21:25 - 2008-10-10 04:52 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2019-11-26 21:25 - 2008-10-10 04:52 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2019-11-26 21:25 - 2008-10-10 04:52 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2019-11-26 21:25 - 2008-10-10 04:52 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2019-11-26 21:25 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2019-11-26 21:25 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2019-11-26 21:25 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2019-11-26 21:25 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2019-11-26 21:25 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2019-11-26 21:25 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2019-11-26 21:25 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2019-11-26 21:25 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2019-11-26 21:25 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

[Antusek]

2. část.
2019-11-26 21:25 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2019-11-26 21:25 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2019-11-26 21:25 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2019-11-26 21:25 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2019-11-26 21:25 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2019-11-26 21:25 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2019-11-26 21:25 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2019-11-26 21:25 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2019-11-26 21:25 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2019-11-26 21:25 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2019-11-26 21:25 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2019-11-26 21:25 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2019-11-26 21:25 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2019-11-26 21:25 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2019-11-26 21:25 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2019-11-26 21:25 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2019-11-26 21:25 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2019-11-26 21:25 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2019-11-26 21:25 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2019-11-26 21:25 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2019-11-26 21:25 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2019-11-26 21:25 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2019-11-26 21:25 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2019-11-26 21:25 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2019-11-26 21:25 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2019-11-26 21:25 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2019-11-26 21:25 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2019-11-26 21:25 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2019-11-26 21:25 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2019-11-26 21:25 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2019-11-26 21:25 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2019-11-26 21:25 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2019-11-26 21:25 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2019-11-26 21:25 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2019-11-26 21:25 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2019-11-26 21:25 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2019-11-26 21:25 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2019-11-26 21:25 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2019-11-26 21:25 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2019-11-26 21:25 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2019-11-26 21:25 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2019-11-26 21:25 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2019-11-26 21:25 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2019-11-26 21:25 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2019-11-26 21:25 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2019-11-26 21:25 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2019-11-26 21:25 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2019-11-26 21:25 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2019-11-26 21:25 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2019-11-26 21:25 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2019-11-26 21:25 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2019-11-26 21:25 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2019-11-26 21:25 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2019-11-26 21:25 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2019-11-26 21:25 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2019-11-26 21:25 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2019-11-26 21:25 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2019-11-26 21:25 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2019-11-26 21:25 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2019-11-26 21:25 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2019-11-26 21:25 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2019-11-26 21:25 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2019-11-26 21:25 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2019-11-26 21:25 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2019-11-26 21:25 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2019-11-26 21:25 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2019-11-26 21:25 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2019-11-26 21:25 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2019-11-26 21:25 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2019-11-26 21:25 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2019-11-26 21:25 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2019-11-26 21:25 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2019-11-26 21:25 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2019-11-26 21:25 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2019-11-26 21:25 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2019-11-26 21:25 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2019-11-26 21:25 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2019-11-26 21:25 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2019-11-26 21:25 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2019-11-26 21:25 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2019-11-26 21:25 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2019-11-26 21:25 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2019-11-26 21:25 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2019-11-26 21:25 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2019-11-26 21:25 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2019-11-26 21:25 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2019-11-26 21:25 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2019-11-26 21:25 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2019-11-26 21:25 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2019-11-26 21:25 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2019-11-26 21:25 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2019-11-26 21:25 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2019-11-26 21:25 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2019-11-26 21:25 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2019-11-26 21:25 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2019-11-26 21:25 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2019-11-26 21:25 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2019-11-26 21:25 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2019-11-26 21:25 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2019-11-26 21:25 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2019-11-26 21:25 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2019-11-26 21:25 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2019-11-26 21:25 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2019-11-26 21:25 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2019-11-26 21:25 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2019-11-26 21:25 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2019-11-26 21:25 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2019-11-26 21:24 - 2019-11-26 21:25 - 000000000 ____D C:\Windows\SysWOW64\directx
2019-11-26 21:24 - 2019-11-26 21:24 - 000003274 _____ C:\Windows\system32\Tasks\klcp_update
2019-11-26 21:24 - 2019-11-26 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2019-11-26 21:24 - 2015-10-24 18:00 - 000112128 _____ C:\Windows\SysWOW64\ff_vfw.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000794112 _____ C:\Windows\system32\xvidcore.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000694784 _____ C:\Windows\SysWOW64\xvidcore.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000311296 _____ C:\Windows\system32\xvidvfw.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000284672 _____ C:\Windows\SysWOW64\xvidvfw.dll
2019-11-26 21:23 - 2017-07-30 12:50 - 003850240 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2019-11-26 21:23 - 2017-07-30 12:50 - 003799552 _____ (x264vfw project) C:\Windows\system32\x264vfw64.dll
2019-11-26 21:23 - 2015-02-25 18:27 - 000473088 _____ (hxxp://www.mp3dev.org/) C:\Windows\SysWOW64\lameACM.acm
2019-11-26 21:23 - 2012-07-21 12:55 - 000180736 _____ (fccHandler) C:\Windows\system32\ac3acm.acm
2019-11-26 21:23 - 2012-07-21 12:54 - 000122880 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2019-11-26 21:23 - 2012-05-21 23:48 - 000000415 _____ C:\Windows\SysWOW64\lame_acm.xml
2019-11-26 21:23 - 2011-12-07 19:37 - 000148992 _____ ( ) C:\Windows\system32\lagarith.dll
2019-11-26 21:23 - 2011-12-07 19:32 - 000216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2019-11-26 21:23 - 2005-01-22 01:53 - 000055296 _____ C:\Windows\system32\huffyuv.dll
2019-11-26 21:23 - 2004-05-18 20:16 - 000039936 _____ (Disappearing Inc.) C:\Windows\SysWOW64\huffyuv.dll
2019-11-26 20:40 - 2019-11-26 20:40 - 000000000 ____D C:\Users\Admin\AppData\Local\CEF
2019-11-26 20:25 - 2019-11-27 22:50 - 000000000 ____D C:\Program Files (x86)\CheckPoint
2019-11-26 20:25 - 2019-11-27 20:42 - 000440928 _____ C:\Windows\system32\Drivers\vsconfig.xml
2019-11-26 20:25 - 2019-11-26 20:25 - 000000493 _____ C:\Users\Public\Desktop\ZoneAlarm Security.lnk
2019-11-26 20:25 - 2019-11-26 20:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point
2019-11-26 20:25 - 2019-11-26 20:25 - 000000000 _____ C:\Windows\system32\Drivers\etc\lmhosts
2019-11-26 20:24 - 2020-01-01 14:17 - 000000000 ____D C:\ProgramData\CheckPoint
2019-11-26 20:21 - 2019-12-06 19:45 - 000207784 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2019-11-26 20:21 - 2019-11-26 20:21 - 000003318 _____ C:\Windows\system32\Tasks\Avira_Antivirus_Systray
2019-11-26 20:21 - 2019-11-26 20:21 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2019-11-26 20:21 - 2019-09-19 09:07 - 000197176 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2019-11-26 20:21 - 2019-06-07 14:09 - 000078936 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avdevprot.sys
2019-11-26 20:21 - 2019-03-20 18:50 - 000089736 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2019-11-26 20:21 - 2019-03-20 18:50 - 000046704 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2019-11-26 20:21 - 2019-03-20 18:50 - 000045472 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avusbflt.sys
2019-11-26 20:21 - 2019-03-20 18:50 - 000022336 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avelam.sys
2019-11-26 20:17 - 2020-01-27 21:43 - 000000000 ____D C:\ProgramData\Package Cache
2019-11-26 20:17 - 2020-01-27 21:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-11-26 20:17 - 2019-11-26 20:21 - 000000000 ____D C:\ProgramData\Avira
2019-11-26 20:17 - 2019-11-26 20:17 - 000000000 ____D C:\Program Files (x86)\Avira
2019-11-26 20:14 - 2019-11-26 20:14 - 000000000 ___HD C:\Users\Admin\MicrosoftEdgeBackups
2019-11-26 20:09 - 2020-01-15 19:24 - 000000000 ____D C:\Windows\system32\MRT
2019-11-26 20:09 - 2020-01-15 19:22 - 120202352 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-11-26 20:07 - 2019-11-26 20:07 - 000748816 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Public\Documents\Obrázky
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Public\Documents\Hudba
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Public\Documents\Filmy
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Šablony
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Poslední
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Okolní síť
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Dokumenty
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Documents\Obrázky
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Documents\Hudba
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Documents\Filmy
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\Data aplikací
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Šablony
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Soubory cookie
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Poslední
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Okolní tiskárny
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Okolní síť
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Nabídka Start
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Dokumenty
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Documents\Obrázky
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Documents\Hudba
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Documents\Filmy
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\Data aplikací
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\ProgramData\Šablony
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\ProgramData\Plocha
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\ProgramData\Dokumenty
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\ProgramData\Data aplikací
2019-11-20 19:05 - 2019-11-20 19:05 - 000000000 _SHDL C:\Documents and Settings
2019-11-20 19:04 - 2020-01-31 15:26 - 000807280 _____ C:\Windows\system32\wpbbin.exe
2019-11-20 19:04 - 2020-01-31 15:26 - 000768408 _____ C:\Windows\system32\AsusUpdateCheck.exe
2019-11-20 19:04 - 2020-01-31 15:26 - 000730552 _____ C:\Windows\system32\FNTCACHE.DAT
2019-11-20 19:04 - 2020-01-31 15:26 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-11-20 19:04 - 2020-01-31 13:58 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-11-20 19:04 - 2019-11-26 20:13 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-11-20 19:04 - 2019-11-20 19:04 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2019-11-20 19:04 - 2019-11-20 19:04 - 000000000 ____D C:\Windows\ServiceProfiles
2019-11-20 19:04 - 2019-11-20 12:19 - 000000000 ____D C:\ProgramData\ASUS
2019-11-20 19:03 - 2019-11-27 02:27 - 000000000 ____D C:\Windows\Panther
2019-11-20 12:21 - 2019-11-26 23:41 - 000000000 ____D C:\ProgramData\Packages
2019-11-20 12:21 - 2019-11-20 12:21 - 000000000 ____D C:\Users\Admin\AppData\Local\Comms
2019-11-20 12:18 - 2020-01-15 19:41 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-722231672-965411127-3486821242-1001
2019-11-20 12:18 - 2020-01-15 19:41 - 000000000 ___RD C:\Users\Admin\OneDrive
2019-11-20 12:18 - 2019-12-26 10:00 - 000000000 ____D C:\Users\Admin\AppData\Local\PlaceholderTileLogoFolder
2019-11-20 12:17 - 2019-11-26 20:14 - 000000000 ____D C:\Users\Admin\AppData\Local\MicrosoftEdge
2019-11-20 12:17 - 2019-11-20 12:19 - 000000000 ____D C:\Program Files (x86)\ASUS
2019-11-20 12:17 - 2019-11-20 12:17 - 001164200 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\AsusDownloadAgent.exe
2019-11-20 12:17 - 2019-11-20 12:17 - 000366592 _____ C:\Windows\system32\syncas.dll
2019-11-20 12:17 - 2019-11-20 12:17 - 000333224 _____ () C:\Windows\system32\AsusDownLoadLicense.exe
2019-11-20 12:17 - 2019-11-20 12:17 - 000001450 _____ C:\Users\Admin\Desktop\Microsoft Edge.lnk
2019-11-20 12:17 - 2019-11-20 12:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-11-20 12:16 - 2019-12-25 13:28 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2019-11-20 12:16 - 2019-12-13 11:33 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-11-20 12:16 - 2019-12-13 11:33 - 000000000 ___RD C:\Users\Admin\3D Objects
2019-11-20 12:16 - 2019-11-28 18:27 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Adobe
2019-11-20 12:16 - 2019-11-27 19:59 - 000000000 ____D C:\Users\Admin\AppData\Local\VirtualStore
2019-11-20 12:16 - 2019-11-20 12:49 - 000000000 ____D C:\Users\Admin\AppData\Local\Publishers
2019-11-20 12:16 - 2019-11-20 12:16 - 000000000 ____D C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform
2019-11-20 12:15 - 2020-01-18 20:55 - 000000000 ____D C:\Users\Admin
2019-11-20 12:15 - 2020-01-15 19:41 - 000002361 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-11-20 12:15 - 2019-11-20 12:15 - 000000020 ___SH C:\Users\Admin\ntuser.ini
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Šablony
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Soubory cookie
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Poslední
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Okolní tiskárny
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Okolní síť
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Nabídka Start
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Dokumenty
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Documents\Obrázky
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Documents\Hudba
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Documents\Filmy
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\Data aplikací
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-11-20 12:15 - 2019-11-20 12:15 - 000000000 _SHDL C:\Users\Admin\AppData\Local\Data aplikací
2019-11-20 12:13 - 2020-01-31 15:30 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2019-11-20 12:13 - 2019-10-02 23:17 - 005434736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2019-11-20 12:13 - 2019-10-02 23:17 - 002637624 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2019-11-20 12:13 - 2019-10-02 23:17 - 001767464 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2019-11-20 12:13 - 2019-10-02 23:17 - 000650608 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2019-11-20 12:13 - 2019-10-02 23:17 - 000451056 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2019-11-20 12:13 - 2019-10-02 23:17 - 000124784 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2019-11-20 12:13 - 2019-10-02 23:17 - 000083440 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2019-11-20 12:13 - 2019-09-28 03:03 - 008716712 _____ C:\Windows\system32\nvcoproc.bin
2019-11-20 12:12 - 2020-01-31 15:26 - 000000000 ____D C:\ProgramData\NVIDIA
2019-11-20 12:12 - 2019-12-03 21:19 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2019-11-20 12:12 - 2019-12-03 17:57 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2019-11-20 12:12 - 2019-12-03 17:57 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2019-11-20 12:12 - 2019-10-04 16:53 - 001690960 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2019-11-20 12:12 - 2019-10-04 16:53 - 000237208 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2019-11-20 12:12 - 2019-10-04 16:51 - 005087024 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2019-11-20 12:12 - 2019-10-04 16:32 - 000052612 _____ C:\Windows\system32\nvinfo.pb
2019-11-20 12:12 - 2019-10-02 23:12 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2019-11-20 12:09 - 2019-11-20 12:09 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_amdpsp_01011.Wdf
2019-11-20 12:09 - 2019-10-07 03:55 - 002874368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2019-11-20 12:08 - 2019-11-20 12:08 - 000000000 ____D C:\Windows\minidump
2019-11-05 13:34 - 2019-11-05 13:34 - 000110880 _____ (Check Point Software Technologies) C:\Windows\system32\Drivers\CPEPMon.sys

==================== Three months (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-01-31 15:30 - 2019-03-19 12:55 - 000716944 _____ C:\Windows\system32\perfh005.dat
2020-01-31 15:30 - 2019-03-19 12:55 - 000145024 _____ C:\Windows\system32\perfc005.dat
2020-01-31 15:30 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2020-01-31 15:28 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-01-31 15:25 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-01-31 11:29 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-01-31 11:29 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2020-01-31 11:27 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2020-01-30 09:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\NDF
2020-01-23 18:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\FxsTmp
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ___SD C:\Windows\system32\UNP
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SystemResources
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\bcastdvr
2020-01-12 22:12 - 2019-03-19 05:49 - 000000202 _____ C:\Windows\win.ini
2020-01-10 17:33 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

==================== SigCheckExt =========================

2010-07-23 09:55 - 2010-07-23 09:55 - 000032768 _____ (Hewlett-Packard Company) C:\Windows\system32\hpbmiapi.dll
2010-07-23 09:55 - 2010-07-23 09:55 - 000033280 _____ (Hewlett-Packard Company) C:\Windows\system32\hpboid.dll
2010-07-23 09:55 - 2010-07-23 09:55 - 000009216 _____ (Hewlett-Packard Company) C:\Windows\system32\hpboidps.dll
2010-07-23 09:55 - 2010-07-23 09:55 - 000057344 _____ (Hewlett-Packard Company) C:\Windows\system32\hpbpro.dll
2010-07-23 09:55 - 2010-07-23 09:55 - 000009728 _____ (Hewlett-Packard Company) C:\Windows\system32\hpbprops.dll
2010-01-19 15:12 - 2010-01-19 15:12 - 000070144 _____ (Hewlett-Packard) C:\Windows\system32\HPBWSDR.DLL
2009-11-27 12:15 - 2009-11-27 12:15 - 000228864 _____ (hp) C:\Windows\system32\hplbddrv.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000079872 _____ (Hewlett-Packard) C:\Windows\system32\HPZidr12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000071680 _____ (Hewlett-Packard) C:\Windows\system32\HPZinw12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000089600 _____ (Hewlett-Packard) C:\Windows\system32\HPZipm12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000054784 _____ (Hewlett-Packard) C:\Windows\system32\HPZipr12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000045056 _____ (Hewlett-Packard) C:\Windows\system32\hpzipt12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000030208 _____ (Hewlett-Packard) C:\Windows\system32\hpzisn12.dll
2019-11-26 21:23 - 2005-01-22 01:53 - 000055296 _____ C:\Windows\system32\huffyuv.dll
2019-11-26 21:23 - 2011-12-07 19:37 - 000148992 _____ ( ) C:\Windows\system32\lagarith.dll
2019-11-20 12:17 - 2019-11-20 12:17 - 000366592 _____ C:\Windows\system32\syncas.dll
2019-11-26 21:23 - 2017-07-30 12:50 - 003799552 _____ (x264vfw project) C:\Windows\system32\x264vfw64.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000794112 _____ C:\Windows\system32\xvidcore.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000311296 _____ C:\Windows\system32\xvidvfw.dll
2020-01-09 17:41 - 2020-01-09 17:41 - 000647168 _____ C:\Windows\AutoKMS.exe
2019-11-27 00:15 - 1998-10-29 15:45 - 000306688 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2020-01-09 17:41 - 2020-01-31 15:26 - 000078848 _____ C:\Windows\KMSEmulator.exe
2019-11-27 00:19 - 2001-04-11 13:02 - 000212480 _____ (Eastman Kodak) C:\Windows\Pcdlib32.dll
2019-11-27 00:19 - 2001-04-11 13:02 - 000032792 _____ (Eastman Kodak Company) C:\Windows\Spwhpt.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000087392 _____ (Twain Working Group) C:\Windows\Twain.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000048560 _____ (Twain Working Group) C:\Windows\Twunk_16.exe
2019-11-27 00:19 - 2001-04-11 13:03 - 000069632 _____ (Twain Working Group) C:\Windows\Twunk_32.exe
2019-11-27 00:21 - 2001-03-15 08:18 - 000065536 _____ C:\Windows\SysWOW64\adistres.dll
2019-11-26 21:24 - 2015-10-24 18:00 - 000112128 _____ C:\Windows\SysWOW64\ff_vfw.dll
2010-08-06 11:13 - 2010-08-06 11:13 - 000050688 _____ (Hewlett-Packard) C:\Windows\SysWOW64\HPZidr12.dll
2010-08-06 11:13 - 2010-08-06 11:13 - 000034816 _____ (Hewlett-Packard) C:\Windows\SysWOW64\HPZipr12.dll
2019-11-26 21:23 - 2004-05-18 20:16 - 000039936 _____ (Disappearing Inc.) C:\Windows\SysWOW64\huffyuv.dll
2019-11-26 21:23 - 2011-12-07 19:32 - 000216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2019-11-27 00:19 - 2001-04-11 13:02 - 000322832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfc30.dll
1999-03-26 16:59 - 1999-03-26 16:59 - 000053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC42CSY.DLL
2019-11-27 00:19 - 2001-04-11 13:03 - 000133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfcans32.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000133392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfco30.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mfcuia32.dll
1999-05-19 15:58 - 1999-05-19 15:58 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPRPCS.DLL
2000-05-11 13:06 - 2000-05-11 13:06 - 000397312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSRDO20.DLL
2000-05-24 06:45 - 2000-05-24 06:45 - 000118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
1998-08-09 19:07 - 1998-08-09 19:07 - 000094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTKPRP.DLL
2019-11-27 00:19 - 2001-04-11 13:03 - 000094285 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvcirtd.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000565760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvcp50.dll
2011-04-29 12:27 - 2011-04-29 12:27 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2011-04-29 17:01 - 2011-04-29 17:01 - 000348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000210944 _____ C:\Windows\SysWOW64\Msvcrt10.dll
2019-11-27 00:19 - 2001-04-11 13:03 - 000401484 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msvcrtd.dll
2011-04-29 15:41 - 2011-04-29 15:41 - 001230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4.dll
2011-04-29 15:41 - 2011-04-29 15:41 - 000082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4r.dll
2019-11-27 00:21 - 2001-03-15 08:18 - 000020584 _____ (Adobe Systems Incorporated.) C:\Windows\SysWOW64\PdfPorts.dll
2000-04-03 17:52 - 2000-04-03 17:52 - 000151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RDOCURS.DLL
1998-03-25 05:54 - 1998-03-25 05:54 - 000015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SCP32.DLL
2019-11-27 00:19 - 2001-04-11 13:03 - 000033424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Urlcache.dll
1999-11-25 02:40 - 1999-11-25 02:40 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBAME.DLL
2019-11-27 00:19 - 2001-04-11 13:03 - 000006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\W95fiber.dll
2002-08-21 05:13 - 2002-08-21 05:13 - 000189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WISPTIS.EXE
2019-11-26 21:23 - 2017-07-30 12:50 - 003850240 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000694784 _____ C:\Windows\SysWOW64\xvidcore.dll
2019-11-26 21:23 - 2018-01-28 11:00 - 000284672 _____ C:\Windows\SysWOW64\xvidvfw.dll

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


==================== BCD ================================

Firmware Boot Manager
---------------------
identifier {fwbootmgr}
displayorder {bootmgr}
{be4b6a2d-0bbf-11ea-b2e3-be64b8d29bc6}
{be4b6a2e-0bbf-11ea-b2e3-be64b8d29bc6}
timeout 1

Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale cs-CZ
inherit {globalsettings}
default {current}
resumeobject {be4b6a31-0bbf-11ea-b2e3-be64b8d29bc6}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Firmware Application (101fffff)
-------------------------------
identifier {be4b6a2d-0bbf-11ea-b2e3-be64b8d29bc6}
description Hard Drive

Firmware Application (101fffff)
-------------------------------
identifier {be4b6a2e-0bbf-11ea-b2e3-be64b8d29bc6}
description CD/DVD Drive

Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \Windows\system32\winload.efi
description Windows 10
locale cs-CZ
inherit {bootloadersettings}
recoverysequence {be4b6a33-0bbf-11ea-b2e3-be64b8d29bc6}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \Windows
resumeobject {be4b6a31-0bbf-11ea-b2e3-be64b8d29bc6}
nx OptIn
bootmenupolicy Standard

Windows Boot Loader
-------------------
identifier {be4b6a33-0bbf-11ea-b2e3-be64b8d29bc6}
device ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{be4b6a34-0bbf-11ea-b2e3-be64b8d29bc6}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale cs-cz
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{be4b6a34-0bbf-11ea-b2e3-be64b8d29bc6}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes

Resume from Hibernate
---------------------
identifier {be4b6a31-0bbf-11ea-b2e3-be64b8d29bc6}
device partition=C:
path \Windows\system32\winresume.efi
description Windows Resume Application
locale cs-CZ
inherit {resumeloadersettings}
recoverysequence {be4b6a33-0bbf-11ea-b2e3-be64b8d29bc6}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No

Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostika pam�ti syst�mu Windows
locale cs-CZ
inherit {globalsettings}
badmemoryaccess Yes

EMS Settings
------------
identifier {emssettings}
bootems No

Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Local

RAM Defects
-----------
identifier {badmemory}

Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}

Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}

Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200

Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}

Device options
--------------
identifier {be4b6a34-0bbf-11ea-b2e3-be64b8d29bc6}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume1
ramdisksdipath \Recovery\WindowsRE\boot.sdi

==================== End of FRST.txt ========================

[Antusek]

3. část
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2020
Ran by Admin (31-01-2020 16:33:17)
Running from D:\Aviry
Windows 10 Home Version 1909 18363.592 (X64) (2019-11-20 11:08:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Admin (S-1-5-21-722231672-965411127-3486821242-1001 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-722231672-965411127-3486821242-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-722231672-965411127-3486821242-503 - Limited - Disabled)
Guest (S-1-5-21-722231672-965411127-3486821242-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-722231672-965411127-3486821242-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {88AE6B46-DC3C-455A-A21B-085F285A3546}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {8D637332-9C08-995E-98D7-8237936B0E9F}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.021.20061 - Adobe Systems Incorporated)
Adobe PageMaker 7.0 (HKLM-x32\...\Adobe PageMaker 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Photoshop Elements 10 (HKLM-x32\...\Adobe Photoshop Elements 10) (Version: 10.0 - Adobe Systems Incorporated)
Avira (HKLM-x32\...\{59bab6b1-f615-42c3-9614-8dc338ac8ed4}) (Version: 1.2.143.109 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{82B6E5B0-3F76-446B-9FDE-0200B5B36B37}) (Version: 1.2.143.109 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.2001.1707 - Avira Operations GmbH & Co. KG)
BAHN 3.81r1 (HKLM-x32\...\BAHN381r1_is1) (Version: 3.81 - JBSS Chemnitz/Dresden)
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
calibre 64bit (HKLM\...\{C9FD7BFF-6054-449C-BCDB-C2A0B43516A7}) (Version: 4.5.0 - Kovid Goyal)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (HKLM-x32\...\{CFA33E6D-2D7D-4785-8025-974398E940D1}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden
Elements 10 Organizer (HKLM-x32\...\{22D3A614-482C-444A-932C-9DA1B8ECDFD2}) (Version: 10.0 - Název společnosti:) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
F4200 (HKLM-x32\...\{C86E1E36-6D30-4834-9C85-5501F31F7BB4}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{8C925017-72A8-4C4A-AF21-84901E26638F}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Check Point SBA (HKLM\...\{C8325D51-E514-475B-AFF2-550C3527E563}) (Version: 86.5.9511 - Check Point Software Technologies Ltd.) Hidden
K-Lite Mega Codec Pack 15.2.6 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.2.6 - KLCP)
LibreOffice 6.3.3.2 (HKLM\...\{4DACF7A7-C851-4943-A63D-3CAE495C48E0}) (Version: 6.3.3.2 - The Document Foundation)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Main service (HKLM-x32\...\{EF758C50-5FA2-4B0A-86D3-8B65B176BC53}) (Version: - )
MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Language Pack 2010 - Czech/èeština (HKLM-x32\...\Office14.OMUI.cs-cz) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0006 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 72.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 72.0.2 (x64 cs)) (Version: 72.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 70.0.1 - Mozilla)
NVIDIA Ovladač HD audia 1.3.38.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.16 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 432.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 432.00 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Opera Stable 66.0.3515.44 (HKLM-x32\...\Opera 66.0.3515.44) (Version: 66.0.3515.44 - Opera Software)
Ovládací panel NVIDIA 432.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 432.00 - NVIDIA Corporation) Hidden
PDF Architect 7 (HKLM-x32\...\PDF Architect 7) (Version: 7.1.13.1755 - pdfforge GmbH)
PDF Architect 7 Create Module (HKLM\...\{B600CC13-8F68-4D44-8867-93490894FAE5}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 Edit Module (HKLM\...\{BA2C2671-B379-4101-A21C-4C549671FC8D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 View Module (HKLM\...\{E947A304-6110-4CFE-98AD-E6909072E87D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF24 Creator 9.0.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PSE10 STI Installer (HKLM-x32\...\{11D08055-939C-432b-98C3-E072478A0CD7}) (Version: 10.0 - Adobe Systems Incorporated) Hidden
rajče průvodce verze 1.59.45.260 (HKLM-x32\...\rajče.net_is1) (Version: - rajče.net)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 32-Bit Edition (HKLM-x32\...\{90140000-0100-0405-0000-0000000FF1CE}_Office14.OMUI.cs-cz_{1FCBAAF2-0321-4986-8DAE-5F2891EC6E8E}) (Version: - Microsoft)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype verze 8.55 (HKLM-x32\...\Skype_is1) (Version: 8.55 - Skype Technologies S.A.)
SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
view (HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\view) (Version: 1.55 - GoldDay Corp)
VSO Inspector 2.0.2 (HKLM-x32\...\VSO Inspector_is1) (Version: - VSO-Software SARL)
Web Companion (HKLM-x32\...\{7a43009c-6777-4d96-adc2-831d05c90abd}) (Version: 4.9.2159.4024 - Lavasoft)
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
ZoneAlarm Anti-Ransomware (HKLM-x32\...\{0B8C3231-9818-4CB9-8213-4AB839836791}) (Version: 1.002.1006 - Check Point Software) Hidden
ZoneAlarm Firewall (HKLM-x32\...\{18FE6943-D33D-42F5-99D5-0ED22F633E32}) (Version: 15.6.121.18102 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Free Firewall (HKLM-x32\...\ZoneAlarm Free Firewall) (Version: 15.6.121.18102 - Check Point)
ZoneAlarm Security (HKLM-x32\...\{881E7A8C-9C4B-4D14-B390-EAFBA278CF45}) (Version: 15.6.121.18102 - Check Point Software Technologies Ltd.) Hidden
Zoner Photo Studio 8 (HKLM-x32\...\Zoner Photo Studio 8_is1) (Version: - ZONER software)

Packages:
=========
ASUS Grid (Beta) -> C:\Program Files\WindowsApps\B9ECED6F.133F79A42C6_1.0.14.0_x64__qmba6cd70vzyy [2019-11-20] (ASUSTeK COMPUTER INC.)
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.4.7.0_x86__kgqvnymyfvs32 [2020-01-12] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.29.4.0_x86__kgqvnymyfvs32 [2020-01-26] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-12-25] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-11-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-11-26] (Microsoft Corporation) [MS Ad]
Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_3.9.12130.0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Studios) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.34.20074.0_x64__8wekyb3d8bbwe [2020-01-16] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-13] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0 [2020-01-31] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-722231672-965411127-3486821242-1001_Classes\CLSID\{B0EEFB45-D1D5-6100-7B21-7585C295AC69}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6723984 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Office14\GROOVEEX.DLL [4222864 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [PDFArchitect7_ManagerExt] -> {21989F59-B260-4302-90C3-E51740E03639} => C:\Program Files\PDF Architect 7\context-menu.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => D:\Aviry\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => D:\Aviry\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\system32\huffyuv.dll [55296 2005-01-22] () [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [148992 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\system32\xvidvfw.dll [311296 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\SysWOW64\huffyuv.dll [39936 2004-05-18] (Disappearing Inc.) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284672 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.lameacm] => C:\Windows\SysWOW64\lameACM.acm [473088 2015-02-25] (hxxp://www.mp3dev.org/) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-11-04 15:09 - 2019-11-04 15:09 - 000059392 _____ () [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\SA\dict-vectorizer.dll
2009-11-17 22:58 - 2009-11-17 22:58 - 000342656 _____ (Hewlett Packard -> Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqmif08.dll
2009-11-17 22:58 - 2009-11-17 22:58 - 000559232 _____ (Hewlett Packard -> Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
2012-05-27 16:44 - 2012-05-27 16:44 - 000032256 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpotra08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000934400 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsem08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000012288 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqstp08.rsc
2011-04-29 19:08 - 2011-04-29 19:08 - 000048128 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.rsc
2010-08-06 11:15 - 2010-08-06 11:15 - 000054784 _____ (Hewlett-Packard) [File not signed] C:\Windows\SYSTEM32\hpzipr12.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000513536 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000055296 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphnt32.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000067072 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphnt64.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000020480 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphusr32.dll
2019-07-25 10:52 - 2019-07-25 10:52 - 000986112 _____ (Microsoft Corporation) [File not signed] D:\Aviry\CheckPoint\ZoneAlarm\dbghelp.dll
2019-11-10 11:38 - 2019-11-10 11:38 - 001124352 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\SQLite\System.Data.SQLite.dll
2018-12-10 10:29 - 2018-12-10 10:29 - 000438272 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Program Files\PDF Architect 7\libcurl.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-722231672-965411127-3486821242-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\Pictures\Saved Pictures\M104 - Sombrero.bmp
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3F60A5E6-326B-4D15-A51D-52B43BF1ABC4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D53AC4E9-924B-48B4-A6E6-95AF36DAFFDE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B089ECCD-20EB-4D16-B8AF-1D4489D9D0B8}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{1C57980D-0A0C-43A0-986F-014867AF8077}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{927F259B-AC23-45ED-BD19-6C0580DD3502}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{C1710658-90E6-4741-B02E-F5D096497718}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{13FD4DA9-5757-49F9-987F-7641F63CD5D5}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{09D0FD54-F9E5-4E9B-B5EC-8C5985AB222F}] => (Allow) LPort=2869
FirewallRules: [{63FD2332-F2D6-45A0-8793-C7410883EF3D}] => (Allow) LPort=1900
FirewallRules: [{9613ED42-B080-4100-B926-181EECF996C8}] => (Allow) C:\Program Files (x86)\Opera\65.0.3467.78\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{B1066463-F801-44E9-A76F-8650057FE7B9}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ABCAB01E-49FE-4C83-A2C7-843DE4194198}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{87F08FF4-AAB0-4911-9194-EB67A27D0ED3}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D33BCFB3-EA54-4BD5-954B-45F544174DFE}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD11C171-19E0-4EFD-9913-9F563B0EE8AF}] => (Allow) C:\Program Files (x86)\Office14\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{98E8879A-38BA-483B-89F0-5514BB3FAC00}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EE403C6C-2ED9-4B10-85D1-BDBF155012D1}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F734B721-4232-451F-A5E9-157E6393D7F1}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BB112F68-6520-4872-B8B2-0B0CACB9CA23}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1E57676E-0170-42AF-A121-C142686822E4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2514E751-3685-4B49-8DD3-37616BE45B6A}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6AB2BF7E-3896-4B1B-A2BE-D7D37BF0FB21}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FD1B87C3-9AF6-4F8F-8F22-1EBBA34B1E98}] => (Allow) C:\Program Files (x86)\Opera\66.0.3515.44\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{82853DEF-9A70-4CA4-A710-EE1D9A6E31AD}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷楶睥攮數 No File
FirewallRules: [{E3D8594B-28BB-4C81-BB40-4996B7FD8756}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷档潲敭牤癩牥攮數 No File
FirewallRules: [{F19C8B75-34AE-4368-A1B1-76A3AB3724F3}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷桃潲敭䅜灰楬慣楴湯䍜牨浯⹥硥e No File
FirewallRules: [{31D2ECEC-BBBA-4AA4-B172-E8DE5FCFE3A3}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷楶睥⹕硥e No File
FirewallRules: [{200D12C5-6D10-48F2-8B09-BD7BF4C096B1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5F2CB13D-9C1E-46F0-A011-2BBE83644B87}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{06D51213-8937-440D-BD37-5D2DD41F5315}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{809B4C5C-8C64-40AF-8950-58FEC7A1C568}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{04B82AB2-7311-4DFD-97BC-25BB38395148}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{650CCD15-C19B-4AE3-BFD4-71A26EEB4E92}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5CE7F475-C8FD-4A67-AD86-00553CAFF74C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B228C24B-EE1C-45C5-AEA6-71176ADE74DF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

==================== Restore Points =========================

09-01-2020 17:15:51 Installed Microsoft Office Professional Plus 2010
12-01-2020 22:12:21 Windows Update
24-01-2020 17:12:37 Naplánovaný kontrolní bod
27-01-2020 22:44:41 Removed ABBYY PDF Transformer+.
31-01-2020 11:26:47 Windows Update

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (01/31/2020 04:21:36 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY)
Description: Velikost požadované vyrovnávací paměti je větší než velikost vyrovnávací paměti předané do funkce Collect knihovny DLL rozšiřitelných čítačů C:\Windows\System32\perfts.dll pro službu LSM. Velikost dané vyrovnávací paměti: 21832; požadovaná velikost: 27520.

Error: (01/31/2020 11:30:49 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\Windows\system32\sysmain.dll (kód chyby Win32 126).

Error: (01/30/2020 06:28:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x148c
Čas spuštění chybující aplikace: 0x01d5d788763c85ee
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: c73db94b-4865-4e49-bb03-33f62be40181
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/30/2020 04:45:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x378c
Čas spuštění chybující aplikace: 0x01d5d77cf2a48cf8
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: dadac0ff-f798-43e5-8370-bc013b0e3479
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/30/2020 10:39:56 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\Windows\system32\sysmain.dll (kód chyby Win32 126).

Error: (01/29/2020 09:14:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x75c
Čas spuštění chybující aplikace: 0x01d5d6d5f4c873d0
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 5cc04fd9-27ae-44f5-b6dc-3b28f035c117
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/29/2020 02:27:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: viewU.exe, verze: 1.0.0.0, časové razítko: 0x5e25a022
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.18362.535, časové razítko: 0x50cc8d5a
Kód výjimky: 0xe0434352
Posun chyby: 0x000000000003a839
ID chybujícího procesu: 0x2410
Čas spuštění chybující aplikace: 0x01d5d69084af3c7a
Cesta k chybující aplikaci: C:\Users\Admin\AppData\Roaming\view\viewU.exe
Cesta k chybujícímu modulu: C:\Windows\System32\KERNELBASE.dll
ID zprávy: 3b145542-c825-4c87-9883-6d39cfd10754
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/29/2020 02:27:04 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: viewU.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Net.WebException
na System.Net.WebClient.UploadDataInternal(System.Uri, System.String, Byte[], System.Net.WebRequest ByRef)
na System.Net.WebClient.UploadString(System.Uri, System.String, System.String)
na viewU.WorkWithNetwork.PstLg(System.String, Int32, Int32, Int32, System.String, System.String, System.String)
na viewU.Program.Lg(System.String)
na viewU.Program.Main()


System errors:
=============
Error: (01/31/2020 03:30:36 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby CPEFR bylo dosaženo časového limitu (60000 ms).

Error: (01/31/2020 03:25:44 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba AsusUpdateCheck se po přijetí pokynu pro vypnutí neukončila správně.

Error: (01/30/2020 10:49:02 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-1U0LM3C)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (01/29/2020 10:46:41 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-1U0LM3C)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (01/28/2020 11:56:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1U0LM3C)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/28/2020 11:56:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1U0LM3C)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/28/2020 11:56:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1U0LM3C)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (01/28/2020 11:56:11 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1U0LM3C)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.


Windows Defender:
===================================
Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.558
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.558
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

CodeIntegrity:
===================================

Date: 2020-01-31 16:28:07.346
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Windows signing level requirements.

Date: 2020-01-31 16:18:07.525
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Windows signing level requirements.

Date: 2020-01-31 15:28:27.541
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Windows signing level requirements.

Date: 2020-01-31 15:28:27.538
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Windows signing level requirements.

Date: 2020-01-31 15:28:27.530
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Windows signing level requirements.

Date: 2020-01-31 15:27:48.090
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-01-31 15:27:48.086
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-01-31 15:27:48.083
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2901 10/16/2019
Motherboard: ASUSTeK COMPUTER INC. ROG STRIX B450-F GAMING
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 35%
Total physical RAM: 8124.13 MB
Available physical RAM: 5224.71 MB
Total Virtual: 9404.13 MB
Available Virtual: 5937.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.84 GB) (Free:184.15 GB) NTFS
Drive d: (Místní disk) (Fixed) (Total:931.5 GB) (Free:687.83 GB) NTFS

\\?\Volume{d6458fe6-83f6-4935-9c1d-28a7f72e381b}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.09 GB) NTFS
\\?\Volume{b5a6f67e-0283-4ca7-8508-df1d94760cbf}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: 39AE08EB)

Partition: GPT.

==================== End of Addition.txt =======================

[Conder]

Ahoj

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Nechaj zaskrtnute vsetky nalezy
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

[Antusek]

Je to divné. Nezobrazuje se vaše odpověď. Jen poznámka pod čarou, co tam máte.
Moc děkuji za další rady.

[Antusek]

Udělal jsem mezitím scan Malwarebytesem a našlo to přes 6000 malwarů, které jsem dal do karantény a smazal. Snad to nenapáchalo nějaké neplechy.Teď počkám na vaše další rady a pak budu postupovat dále.
Dík.

[Conder]

Text prispevku je normalne vidno, skus pouzit iny prehliadac alebo iny PC.

Poprosim o logy z Malwarebytes. Ak si este nepouzil AdwCleaner, pouzi aj ten (podla predchadzajuceho prispevku). Nasledne poprosim aj o nove logy z FRST.

[Antusek]

Díky. Už se mi to normálně zobrazilo. Nejspíše pomohlo pročištění Malwarebytes. Až provedu další krok, tak sem vložím výsledek.

[Antusek]

Posílám log. Také mí to hlásí (viz. obrázek), že vaše stránky nejsou bezpečné jestli chci přejít na bezpečnější. To se děje při každém kliknutí na vašich stránkách. Dám rozšířená nastavení a pak spustit a dostanu se k vám. To je divné. Díky za další rady. Doufám, že to není nějaká závažnější havěť, která by se mohla šířit dál.


# -------------------------------
# Malwarebytes AdwCleaner 8.0.2.0
# -------------------------------
# Build: 01-27-2020
# Database: 2020-01-24.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-02-2020
# Duration: 00:00:04
# OS: Windows 10 Home
# Cleaned: 27
# Failed: 0


***** [ Services ] *****

Deleted WCAssistantService

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Lavasoft\Web Companion
Deleted C:\Program Files (x86)\mypopupblocker
Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\ProgramData\Lavasoft\Web Companion
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
Deleted C:\Users\Admin\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
Deleted C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion

***** [ Files ] *****

Deleted C:\Users\Admin\Desktop\Mail.Ru.url
Deleted C:\Windows\Temp\WebCompanion.zip

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
Deleted HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
Deleted HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
Deleted HKLM\Software\Classes\Installer\Features\AB3DC63D3FA77F043973607CC236B422
Deleted HKLM\Software\Classes\Installer\Products\AB3DC63D3FA77F043973607CC236B422
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AB3DC63D3FA77F043973607CC236B422
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|DisplayIcon
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|DisplayName
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|UninstallString
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{D36CD3BA-7AF3-40F7-9337-06C72C634B22}
Deleted HKLM\Software\Wow6432Node\\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\.DEFAULT\Software\Mozilla\NativeMessagingHosts\com.webcompanion.native
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4198 octets] - [02/02/2020 19:08:14]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[Conder]

Tato chyba so zabezpecenim bola tentokrat na nasej strane (vyprsany certifikat), uz by vsak mala byt opravena.

Poprosim este o logy z Malwarebytes (mali by byt vlavo v casti v Zpravy). Nasledne este vytvor a posli nove logy z FRST.

[Antusek]

Posílám logy z Malwerbytes AdwCleaner. Zpravy tam nemám jen Soubor protokolu a jsou tam dva. Teď jdu udělat FRST a pak vložím další log. Dík za další rady.

# -------------------------------
# Malwarebytes AdwCleaner 8.0.2.0
# -------------------------------
# Build: 01-27-2020
# Database: 2020-01-24.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-02-2020
# Duration: 00:00:04
# OS: Windows 10 Home
# Cleaned: 27
# Failed: 0


***** [ Services ] *****

Deleted WCAssistantService

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Lavasoft\Web Companion
Deleted C:\Program Files (x86)\mypopupblocker
Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\ProgramData\Lavasoft\Web Companion
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
Deleted C:\Users\Admin\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
Deleted C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion

***** [ Files ] *****

Deleted C:\Users\Admin\Desktop\Mail.Ru.url
Deleted C:\Windows\Temp\WebCompanion.zip

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
Deleted HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
Deleted HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
Deleted HKLM\Software\Classes\Installer\Features\AB3DC63D3FA77F043973607CC236B422
Deleted HKLM\Software\Classes\Installer\Products\AB3DC63D3FA77F043973607CC236B422
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AB3DC63D3FA77F043973607CC236B422
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|DisplayIcon
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|DisplayName
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|UninstallString
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{D36CD3BA-7AF3-40F7-9337-06C72C634B22}
Deleted HKLM\Software\Wow6432Node\\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\.DEFAULT\Software\Mozilla\NativeMessagingHosts\com.webcompanion.native
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4198 octets] - [02/02/2020 19:08:14]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

# -------------------------------
# Malwarebytes AdwCleaner 8.0.2.0
# -------------------------------
# Build: 01-27-2020
# Database: 2020-01-24.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 02-02-2020
# Duration: 00:00:17
# OS: Windows 10 Home
# Scanned: 34824
# Detected: 27


***** [ Services ] *****

PUP.Optional.Legacy WCAssistantService

***** [ Folders ] *****

PUP.Optional.MyPopUpBlocker C:\Program Files (x86)\mypopupblocker
PUP.Optional.WebCompanion C:\Program Files (x86)\Lavasoft\Web Companion
PUP.Optional.WebCompanion C:\ProgramData\Application Data\Lavasoft\Web Companion
PUP.Optional.WebCompanion C:\ProgramData\Lavasoft\Web Companion
PUP.Optional.WebCompanion C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
PUP.Optional.WebCompanion C:\Users\Admin\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
PUP.Optional.WebCompanion C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion

***** [ Files ] *****

PUP.Optional.Mail.Ru C:\Users\Admin\Desktop\Mail.Ru.url
PUP.Optional.WebCompanion C:\Windows\Temp\WebCompanion.zip

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Adware.Heuristic HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|DisplayIcon
PUP.Adware.Heuristic HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|DisplayName
PUP.Adware.Heuristic HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1e7e990f-1221-4b83-a260-7a5f0f812808}|UninstallString
PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
PUP.Optional.MyPopUpBlocker HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
PUP.Optional.MyPopUpBlocker HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
PUP.Optional.MyPopUpBlocker HKLM\Software\Classes\Installer\Features\AB3DC63D3FA77F043973607CC236B422
PUP.Optional.MyPopUpBlocker HKLM\Software\Classes\Installer\Products\AB3DC63D3FA77F043973607CC236B422
PUP.Optional.MyPopUpBlocker HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AB3DC63D3FA77F043973607CC236B422
PUP.Optional.MyPopUpBlocker HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{D36CD3BA-7AF3-40F7-9337-06C72C634B22}
PUP.Optional.MyPopUpBlocker HKLM\Software\Wow6432Node\\Mozilla\Firefox\Extensions|{7bb202fa-9247-49c6-898c-ce0d36bc44e3}
PUP.Optional.WebCompanion HKCU\Software\Lavasoft\Web Companion
PUP.Optional.WebCompanion HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion HKLM\Software\Wow6432Node\Lavasoft\Web Companion
PUP.Optional.WebCompanion HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion HKU\.DEFAULT\Software\Mozilla\NativeMessagingHosts\com.webcompanion.native
PUP.Optional.WebCompanion HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

[Antusek]

Posílám logy z FRST.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-02-2020 02
Ran by Admin (administrator) on DESKTOP-1U0LM3C (02-02-2020 20:17:10)
Running from D:\Aviry
Loaded Profiles: Admin (Available Profiles: Admin)
Platform: Windows 10 Home Version 1909 18363.592 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Systems Inc.) [File not signed] D:\Programy\Adobe\Adobe Acrobat Distiller 5.0\Distillr\AcroTray.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) D:\Fotoeditory\Adobe Photoshop Elements 11\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(ASUSTeK Computer Inc. -> ) C:\Windows\System32\AsusUpdateCheck.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\protectedservice.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\sched.exe
(Geek Software GmbH -> Geek Software GmbH) D:\Programy\PDF24\pdf24.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett Packard -> Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Check Point Software Technologies Ltd. -> ) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) D:\Aviry\CheckPoint\ZoneAlarm\zatray.exe
(Malwarebytes Inc -> Malwarebytes) D:\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) D:\Aviry\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\updater-ws.exe
(pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\ws.exe
(Piriform Software Ltd -> Piriform Ltd) D:\Aviry\CCleaner\CCleaner64.exe
(Softland SRL -> Microsoft) C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe
Failed to access process -> Pm70.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files (x86)\Opera\assistant\browser_assistant.exe [2785304 2020-01-28] (Opera Software AS -> Opera Software)
HKLM-x32\...\Run: [ZoneAlarm] => D:\Aviry\CheckPoint\ZoneAlarm\zatray.exe [326448 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Run: [] => [X]
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Run: [CCleaner Smart Cleaning] => D:\Aviry\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe [33792 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [4615616 2019-11-29] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-16] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Avira.lnk [2020-02-02]
ShortcutTarget: Avira.lnk -> C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acrobat Assistant.lnk [2020-01-31]
ShortcutTarget: Acrobat Assistant.lnk -> D:\Programy\Adobe\Adobe Acrobat Distiller 5.0\Distillr\AcroTray.exe (Adobe Systems Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2019-11-26]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1BE40A9B-3D3C-46F1-98D0-2F0443256942} - System32\Tasks\doPDF 10 Telemetry => C:\Program Files\Softland\novaPDF 10\Driver\GoogleAnalytics.exe [51504 2020-01-22] (Softland SRL -> )
Task: {26F6B29D-8041-4014-A8B1-887015FC39CD} - System32\Tasks\Opera scheduled assistant Autoupdate 1580117963 => C:\Program Files (x86)\Opera\launcher.exe [1350680 2020-01-22] (Opera Software AS -> Opera Software)
Task: {30515FA6-F9ED-44C5-8EFA-8506DAE5A0F2} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-1U0LM3C-Admin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {31F2F915-2C43-4B33-A791-0F6B2BF361B1} - System32\Tasks\Opera scheduled Autoupdate 1574800406 => C:\Program Files (x86)\Opera\launcher.exe [1350680 2020-01-22] (Opera Software AS -> Opera Software)
Task: {3E71E1A5-2EFB-4D64-9774-A612A75B9C91} - System32\Tasks\doPDF 10 Update => C:\Program Files\Softland\novaPDF 10\Driver\UpdateApplication.exe [98608 2020-01-22] (Softland SRL -> )
Task: {41F43FA7-7199-4F51-8BB7-6C396C188626} - System32\Tasks\CCleanerSkipUAC => D:\Aviry\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {45D3064C-3490-40EA-A308-48CC75246022} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-26] (Google Inc -> Google Inc.)
Task: {6D0F4719-6443-4675-A203-79D1F80F2BD1} - System32\Tasks\Avira_Antivirus_Systray => D:\Aviry\Avira\Antivirus\avgnt.exe [2757672 2019-11-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {98AED33B-F8AF-4B63-A24A-A0B3C9CC1457} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {B01B9418-6846-4E2E-A1D2-A7B9F27667D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-26] (Google Inc -> Google Inc.)
Task: {B3F8FF2A-AF7C-41B7-A3DF-C3DD0781737E} - System32\Tasks\CCleaner Update => D:\Aviry\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {BB9C4A9E-8903-42A2-9BCF-77E08E69BE01} - System32\Tasks\klcp_update => D:\Prográmky\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1724928 2019-11-16] () [File not signed]
Task: {E948ECFF-5A89-46DA-AE8D-EFA7EF4E35F1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {FFDCBDCA-7CFB-4740-B675-7E5A751731CC} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-11-26] (AVAST Software s.r.o. -> AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{266e809c-ac84-4a9e-b962-f5e47fcf4ea6}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
BHO: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
Toolbar: HKLM-x32 - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)

FireFox:
========
FF DefaultProfile: kc08x7df.default
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default [2020-02-02]
FF user.js: detected! => C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default\user.js [2020-01-31]
FF NewTab: Mozilla\Firefox\Profiles\kc08x7df.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10092__200127
FF Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default\Extensions\uBlock0@raymondhill.net.xpi [2019-11-27]
FF HKLM\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Extension: (PDF Architect 7 Creator) - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi [2019-10-02]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-13] (Google LLC -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-12-02] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2020-02-02]
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-01-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-26]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-31]

Opera:
=======
OPR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2019-11-28]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor10.0; D:\Fotoeditory\Adobe Photoshop Elements 11\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-14] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
S2 AntiVirMailService; D:\Aviry\Avira\Antivirus\avmailc7.exe [1210168 2019-12-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; D:\Aviry\Avira\Antivirus\ProtectedService.exe [535352 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; D:\Aviry\Avira\Antivirus\sched.exe [484768 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Aviry\Avira\Antivirus\avguard.exe [484768 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; D:\Aviry\Avira\Antivirus\avwebg7.exe [574848 2020-01-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [768408 2020-02-02] (ASUSTeK Computer Inc. -> )
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [617520 2020-01-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
U2 CPEFR; C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe [2825976 2019-11-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 CpSbaCipolla; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33016 2019-10-29] (Check Point Software Technologies Ltd. -> )
R2 CpSbaUpdater; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33016 2019-10-29] (Check Point Software Technologies Ltd. -> )
R3 MBAMService; D:\Aviry\Malwarebytes\Anti-Malware\mbamservice.exe [6960640 2020-01-31] (Malwarebytes Inc -> Malwarebytes)
S3 Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Office14\GROOVE.EXE [30963576 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NovaPdf10Server; C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe [52528 2020-01-22] (Softland SRL -> Microsoft)
R3 PDF Architect 7; C:\Program Files\PDF Architect 7\ws.exe [2579752 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 7 Creator; C:\Program Files\PDF Architect 7\creator\common\creator-ws.exe [692008 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 7 Update Service; C:\Program Files\PDF Architect 7\updater-ws.exe [1832232 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF24; D:\Programy\PDF24\pdf24.exe [487048 2019-10-21] (Geek Software GmbH -> Geek Software GmbH)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RemediationService; C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe [18168 2019-11-04] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 TESvc; C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe [301304 2019-11-04] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 vsmon; D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe [4501544 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-11-26] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-11-26] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZA NET ICM Service; C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe [40304 2019-02-07] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 ZAARUpdateService; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe [51936 2019-11-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 ZAPrivacyService; D:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies, Ltd.)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [45832 2019-10-01] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [24424 2016-08-12] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 AMDPCIDev; C:\Windows\System32\drivers\AMDPCIDev.sys [31592 2018-04-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [243048 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\Windows\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [207784 2019-12-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [197176 2019-09-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [46704 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [89736 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 cpbak; C:\Windows\System32\DRIVERS\cpbak.sys [66848 2019-11-05] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R1 CPEPMon; C:\Windows\System32\DRIVERS\CPEPMon.sys [110880 2019-11-05] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-18] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-18] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 dot4usb; C:\Windows\system32\DRIVERS\dot4usb.sys [49056 2012-10-18] (Hewlett-Packard Company -> Microsoft Corporation)
R1 epnetflt; C:\Windows\system32\drivers\epnetflt.sys [130336 2019-10-06] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R1 epregflt; C:\Windows\system32\drivers\epregflt.sys [132176 2019-05-01] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R2 ISWKL; C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\bin\ISWKL.sys [65264 2019-08-12] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [214496 2020-02-02] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2020-01-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-02-02] (Malwarebytes Inc -> Malwarebytes)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_db678424d2641c3d\nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)
R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [461240 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-11-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [351968 2019-11-26] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-11-26] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; no ImagePath
U3 iswSvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-02 20:12 - 2020-02-02 20:12 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-02-02 20:12 - 2020-02-02 20:12 - 000214496 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-02-02 19:13 - 2020-02-02 19:13 - 000000000 _____ C:\Windows\cpepmon.mlf
2020-02-02 19:07 - 2020-02-02 19:08 - 000000000 ____D C:\AdwCleaner
2020-02-02 13:55 - 2020-02-02 13:55 - 000043268 _____ C:\Users\Admin\Documents\Ples ke 150. výročí T.J. Sokol Praha Vršovice 1.2.2020.wlmp
2020-02-02 09:38 - 2020-02-02 09:38 - 000227244 _____ C:\Users\Admin\Downloads\Hluboká pravda z ��st lékaře vojenské nemocnice.pdf
2020-01-31 20:46 - 2020-01-31 20:46 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000003688 _____ C:\Windows\system32\Tasks\doPDF 10 Update
2020-01-31 20:45 - 2020-01-31 20:45 - 000003674 _____ C:\Windows\system32\Tasks\doPDF 10 Telemetry
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\Users\Admin\AppData\Local\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\ProgramData\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 10
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\Program Files\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\Program Files (x86)\Softland
2020-01-31 20:03 - 2020-01-31 20:06 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Wondershare
2020-01-31 20:03 - 2020-01-31 20:03 - 000000000 ____D C:\Users\Admin\AppData\Local\Wondershare
2020-01-31 20:02 - 2020-01-31 20:06 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-01-31 19:10 - 2020-01-31 19:10 - 000000000 ____D C:\Users\Admin\AppData\Roaming\PrimoPDF
2020-01-31 19:08 - 2020-01-31 19:10 - 000000000 ____D C:\Program Files (x86)\Nitro PDF
2020-01-31 19:08 - 2015-09-01 14:41 - 000095008 _____ C:\Windows\system32\Primomonnt.dll
2020-01-31 19:01 - 2020-01-31 19:01 - 000000000 ____D C:\Users\Admin\AppData\Roaming\inst
2020-01-31 18:52 - 2020-01-31 18:52 - 002326656 _____ C:\Windows\cadkasdeinst01.exe
2020-01-31 18:52 - 2020-01-31 18:52 - 000000000 ____D C:\Users\Admin\AppData\Roaming\CAD-KAS
2020-01-31 16:58 - 2020-01-31 16:59 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-01-31 16:58 - 2020-01-31 16:59 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2020-01-31 16:58 - 2020-01-31 16:59 - 000000927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\Users\Admin\AppData\Local\mbamtray
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\Users\Admin\AppData\Local\mbam
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-01-31 16:30 - 2020-02-02 20:17 - 000000000 ____D C:\FRST
2020-01-30 09:19 - 2020-01-30 09:19 - 001363429 _____ C:\Users\Admin\Downloads\VID-20170114-WA0003.mp4
2020-01-28 00:17 - 2020-01-28 00:17 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Temp
2020-01-27 23:49 - 2020-01-31 21:17 - 000000000 ____D C:\Users\Admin\AppData\Roaming\view
2020-01-27 23:49 - 2020-01-27 23:49 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\view
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\Users\Admin\AppData\Local\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\ProgramData\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\vso
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\Program Files (x86)\vso
2020-01-27 22:42 - 2020-01-27 22:42 - 000000000 ____D C:\Users\Admin\AppData\Roaming\PDF Producer
2020-01-27 21:43 - 2020-01-27 21:43 - 000001189 _____ C:\Users\Public\Desktop\Avira.lnk
2020-01-27 10:39 - 2020-01-29 10:39 - 000004194 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1580117963
2020-01-22 11:06 - 2020-01-22 11:06 - 000018944 _____ (Softland) C:\Windows\system32\novamn10.dll
2020-01-22 11:06 - 2020-01-22 11:06 - 000015872 _____ (Softland) C:\Windows\system32\novami10.dll
2020-01-20 22:28 - 2020-01-27 23:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-01-17 14:56 - 2020-01-17 14:56 - 012381996 _____ C:\Users\Admin\Downloads\getfvid_10000000_2196253103999578_8666084806774988589_n11 (1).mp4
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Real
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\Users\Admin\AppData\Local\Real
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\ProgramData\Real
2020-01-15 19:20 - 2020-01-15 19:20 - 025900032 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 025444352 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 022627840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 019849216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 018020352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 009928208 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 008012800 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 007754752 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 007600448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 007016448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 006520480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 005913600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 003729408 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 003703296 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 003263488 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002870784 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002801152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 002716672 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 002561536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002494464 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002473976 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 002305536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001985928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001835008 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001697280 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001655880 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001610752 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001458688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001399096 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 001330952 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001151816 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001106944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001098720 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001072952 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 001051664 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001020032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000921600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000896512 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnostics.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000852480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000851456 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000689664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000678712 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000673792 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000671232 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000670720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000571392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiaaut.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000542496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000432256 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000400696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000368128 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000363840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\DiagnosticLogCSP.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000321536 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV1.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000271872 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\sti_ci.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000162696 _____ (Microsoft Corporation) C:\Windows\system32\dmcmnutils.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\wiadss.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000127520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmcmnutils.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000127064 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\cryptcatsvc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000119808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadss.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000102400 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000097280 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000089536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\enterpriseresourcemanager.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enterpriseresourcemanager.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000018432 _____ (Microsoft Corporation) C:\Windows\system32\wiatrace.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiatrace.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\DMAlertListener.ProxyStub.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DMAlertListener.ProxyStub.dll
2020-01-15 19:14 - 2019-12-10 06:15 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-01-15 19:14 - 2019-12-10 05:59 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-01-15 17:59 - 2020-01-15 17:59 - 000000305 _____ C:\Users\Admin\Downloads\Část_připojené_zprávy
2020-01-13 21:59 - 2020-01-13 21:59 - 002981730 _____ C:\Users\Admin\Downloads\Na rozjezd dne,.ppsx
2020-01-10 17:33 - 2020-01-10 17:33 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2020-01-10 17:33 - 2020-01-10 17:33 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2020-01-09 18:03 - 2020-01-09 18:03 - 000000000 ____D C:\Windows\system32\Tasks\S-1-5-21-722231672-965411127-3486821242-1001
2020-01-09 17:41 - 2020-01-09 17:41 - 000000184 _____ C:\Windows\AutoKMS.ini
2020-01-09 17:28 - 2020-01-09 17:28 - 000002752 _____ C:\Users\Admin\Desktop\Microsoft Outlook 2010.lnk
2020-01-09 17:27 - 2020-01-09 17:27 - 000002752 _____ C:\Users\Admin\Desktop\Microsoft Word 2010.lnk
2020-01-09 17:27 - 2020-01-09 17:27 - 000002704 _____ C:\Users\Admin\Desktop\Microsoft PowerPoint 2010.lnk
2020-01-09 17:26 - 2020-01-09 17:26 - 000002714 _____ C:\Users\Admin\Desktop\Microsoft Excel 2010.lnk
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\Document Themes 14
2020-01-09 17:22 - 2020-01-09 17:22 - 000000000 ____D C:\Program Files (x86)\CLIPART
2020-01-09 17:21 - 2020-01-31 20:17 - 000000000 ____D C:\Program Files (x86)\Office14
2020-01-09 17:21 - 2020-01-09 17:35 - 000000000 ____D C:\Program Files (x86)\Stationery
2020-01-09 17:21 - 2020-01-09 17:30 - 000000000 ____D C:\Users\Admin\AppData\Local\Microsoft Help
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Windows\system32\Tasks\OfficeSoftwareProtectionPlatform
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files\Microsoft Office
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2020-01-09 17:21 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files (x86)\MEDIA
2020-01-09 17:20 - 2020-01-09 17:20 - 000000000 __RHD C:\MSOCache
2020-01-07 22:19 - 2020-01-07 22:19 - 005573613 _____ C:\Users\Admin\Downloads\vzpominky_na_stare_casy.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-02 20:10 - 2019-11-27 01:03 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2020-02-02 19:14 - 2019-11-20 12:13 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2020-02-02 19:14 - 2019-03-19 12:55 - 000716944 _____ C:\Windows\system32\perfh005.dat
2020-02-02 19:14 - 2019-03-19 12:55 - 000145024 _____ C:\Windows\system32\perfc005.dat
2020-02-02 19:14 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2020-02-02 19:12 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-02 19:09 - 2019-11-20 19:04 - 000807280 _____ C:\Windows\system32\wpbbin.exe
2020-02-02 19:09 - 2019-11-20 19:04 - 000768408 _____ C:\Windows\system32\AsusUpdateCheck.exe
2020-02-02 19:09 - 2019-11-20 19:04 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-02-02 19:09 - 2019-11-20 12:12 - 000000000 ____D C:\ProgramData\NVIDIA
2020-02-02 19:09 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-02-02 19:07 - 2019-11-27 01:56 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Mozilla
2020-02-02 11:54 - 2019-11-20 19:04 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-01-31 21:32 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2020-01-31 21:17 - 2019-11-20 19:04 - 000738920 _____ C:\Windows\system32\FNTCACHE.DAT
2020-01-31 20:45 - 2019-11-26 20:17 - 000000000 ____D C:\ProgramData\Package Cache
2020-01-31 20:17 - 2019-11-27 00:21 - 000001173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Distiller 5.0.lnk
2020-01-31 19:58 - 2019-11-20 12:16 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2020-01-31 19:47 - 2019-11-26 21:49 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2020-01-31 19:47 - 2019-11-26 21:49 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-01-31 19:47 - 2019-11-26 21:49 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2020-01-31 19:28 - 2019-11-26 21:55 - 000000000 ____D C:\ProgramData\ABBYY
2020-01-31 16:59 - 2019-12-09 20:03 - 000000000 ____D C:\Users\Admin\AppData\Local\cache
2020-01-31 16:58 - 2019-03-19 05:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-01-31 11:29 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-01-31 11:27 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2020-01-30 09:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\NDF
2020-01-27 23:09 - 2019-11-26 21:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-01-27 21:43 - 2019-11-26 20:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2020-01-27 10:39 - 2019-11-26 21:33 - 000003970 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1574800406
2020-01-27 10:39 - 2019-11-26 21:33 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2020-01-27 10:39 - 2019-11-26 21:33 - 000000000 ____D C:\Program Files (x86)\Opera
2020-01-24 10:47 - 2019-11-26 23:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-01-23 18:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\FxsTmp
2020-01-21 08:42 - 2019-11-26 21:34 - 000001211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-01-19 17:23 - 2019-11-27 00:25 - 000057378 _____ C:\Windows\ATMREG.ATM
2020-01-18 20:55 - 2019-11-20 12:15 - 000000000 ____D C:\Users\Admin
2020-01-16 22:14 - 2019-11-26 21:30 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-16 22:14 - 2019-11-26 21:30 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-01-15 19:41 - 2019-11-20 12:18 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-722231672-965411127-3486821242-1001
2020-01-15 19:41 - 2019-11-20 12:18 - 000000000 ___RD C:\Users\Admin\OneDrive
2020-01-15 19:41 - 2019-11-20 12:15 - 000002361 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ___SD C:\Windows\system32\UNP
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SystemResources
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\bcastdvr
2020-01-15 19:24 - 2019-11-26 20:09 - 000000000 ____D C:\Windows\system32\MRT
2020-01-15 19:22 - 2019-11-26 20:09 - 120202352 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-01-12 22:12 - 2019-03-19 05:49 - 000000202 _____ C:\Windows\win.ini
2020-01-10 17:33 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-01-09 17:35 - 2019-11-27 00:12 - 000000000 ____D C:\Windows\SHELLNEW
2020-01-09 17:34 - 2019-11-26 21:30 - 000004194 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-01-09 17:22 - 2019-11-27 21:16 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2020-01-09 17:22 - 2019-11-27 21:06 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-01-09 17:22 - 2019-11-27 00:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-02-2020 02
Ran by Admin (02-02-2020 20:18:40)
Running from D:\Aviry
Windows 10 Home Version 1909 18363.592 (X64) (2019-11-20 11:08:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Admin (S-1-5-21-722231672-965411127-3486821242-1001 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-722231672-965411127-3486821242-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-722231672-965411127-3486821242-503 - Limited - Disabled)
Guest (S-1-5-21-722231672-965411127-3486821242-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-722231672-965411127-3486821242-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {88AE6B46-DC3C-455A-A21B-085F285A3546}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {8D637332-9C08-995E-98D7-8237936B0E9F}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.021.20061 - Adobe Systems Incorporated)
Adobe PageMaker 7.0 (HKLM-x32\...\Adobe PageMaker 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Photoshop Elements 10 (HKLM-x32\...\Adobe Photoshop Elements 10) (Version: 10.0 - Adobe Systems Incorporated)
Avira (HKLM-x32\...\{59bab6b1-f615-42c3-9614-8dc338ac8ed4}) (Version: 1.2.143.109 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{82B6E5B0-3F76-446B-9FDE-0200B5B36B37}) (Version: 1.2.143.109 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.2001.1707 - Avira Operations GmbH & Co. KG)
BAHN 3.81r1 (HKLM-x32\...\BAHN381r1_is1) (Version: 3.81 - JBSS Chemnitz/Dresden)
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
calibre 64bit (HKLM\...\{C9FD7BFF-6054-449C-BCDB-C2A0B43516A7}) (Version: 4.5.0 - Kovid Goyal)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (HKLM-x32\...\{CFA33E6D-2D7D-4785-8025-974398E940D1}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden
doPDF (HKLM\...\{2CBA4673-9199-49C7-831D-79C3206813BD}) (Version: 10.6.122 - Softland) Hidden
doPDF 10 (HKLM-x32\...\{352315dd-a81c-4612-a5d8-508e51fe30ab}) (Version: 10.6.122 - Softland)
doPDF 10 add-in for Microsoft Office (x64) (HKLM\...\{064F8223-4848-4562-B77E-997C3E74E749}) (Version: 10.6.122 - Softland)
doPDF 10 add-in for Microsoft Office (x86) (HKLM-x32\...\{705BC7F6-DE19-4764-A8C2-0162DC824AB9}) (Version: 10.6.122 - Softland)
doPDF 10 Printer Driver (HKLM\...\{1A09B3A6-2622-480B-820B-6E6A3B9BB9CB}) (Version: 10.6.122 - Softland)
Elements 10 Organizer (HKLM-x32\...\{22D3A614-482C-444A-932C-9DA1B8ECDFD2}) (Version: 10.0 - Název společnosti:) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
F4200 (HKLM-x32\...\{C86E1E36-6D30-4834-9C85-5501F31F7BB4}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{8C925017-72A8-4C4A-AF21-84901E26638F}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Check Point SBA (HKLM\...\{C8325D51-E514-475B-AFF2-550C3527E563}) (Version: 86.5.9511 - Check Point Software Technologies Ltd.) Hidden
K-Lite Mega Codec Pack 15.2.6 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.2.6 - KLCP)
LibreOffice 6.3.3.2 (HKLM\...\{4DACF7A7-C851-4943-A63D-3CAE495C48E0}) (Version: 6.3.3.2 - The Document Foundation)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Language Pack 2010 - Czech/èeština (HKLM-x32\...\Office14.OMUI.cs-cz) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0006 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 72.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 72.0.2 (x64 cs)) (Version: 72.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 70.0.1 - Mozilla)
NVIDIA Ovladač HD audia 1.3.38.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.16 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 432.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 432.00 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Opera Stable 66.0.3515.44 (HKLM-x32\...\Opera 66.0.3515.44) (Version: 66.0.3515.44 - Opera Software)
Ovládací panel NVIDIA 432.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 432.00 - NVIDIA Corporation) Hidden
PDF Architect 7 (HKLM-x32\...\PDF Architect 7) (Version: 7.1.13.1755 - pdfforge GmbH)
PDF Architect 7 Create Module (HKLM\...\{B600CC13-8F68-4D44-8867-93490894FAE5}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 Edit Module (HKLM\...\{BA2C2671-B379-4101-A21C-4C549671FC8D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 View Module (HKLM\...\{E947A304-6110-4CFE-98AD-E6909072E87D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF24 Creator 9.0.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PSE10 STI Installer (HKLM-x32\...\{11D08055-939C-432b-98C3-E072478A0CD7}) (Version: 10.0 - Adobe Systems Incorporated) Hidden
rajče průvodce verze 1.59.45.260 (HKLM-x32\...\rajče.net_is1) (Version: - rajče.net)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 32-Bit Edition (HKLM-x32\...\{90140000-0100-0405-0000-0000000FF1CE}_Office14.OMUI.cs-cz_{1FCBAAF2-0321-4986-8DAE-5F2891EC6E8E}) (Version: - Microsoft)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype verze 8.55 (HKLM-x32\...\Skype_is1) (Version: 8.55 - Skype Technologies S.A.)
SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
VSO Inspector 2.0.2 (HKLM-x32\...\VSO Inspector_is1) (Version: - VSO-Software SARL)
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
ZoneAlarm Anti-Ransomware (HKLM-x32\...\{0B8C3231-9818-4CB9-8213-4AB839836791}) (Version: 1.002.1006 - Check Point Software) Hidden
ZoneAlarm Firewall (HKLM-x32\...\{18FE6943-D33D-42F5-99D5-0ED22F633E32}) (Version: 15.6.121.18102 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Free Firewall (HKLM-x32\...\ZoneAlarm Free Firewall) (Version: 15.6.121.18102 - Check Point)
ZoneAlarm Security (HKLM-x32\...\{881E7A8C-9C4B-4D14-B390-EAFBA278CF45}) (Version: 15.6.121.18102 - Check Point Software Technologies Ltd.) Hidden
Zoner Photo Studio 8 (HKLM-x32\...\Zoner Photo Studio 8_is1) (Version: - ZONER software)

Packages:
=========
ASUS Grid (Beta) -> C:\Program Files\WindowsApps\B9ECED6F.133F79A42C6_1.0.14.0_x64__qmba6cd70vzyy [2019-11-20] (ASUSTeK COMPUTER INC.)
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.4.7.0_x86__kgqvnymyfvs32 [2020-01-12] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.29.4.0_x86__kgqvnymyfvs32 [2020-01-26] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-12-25] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-11-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-11-26] (Microsoft Corporation) [MS Ad]
Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_3.9.12130.0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Studios) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.34.20074.0_x64__8wekyb3d8bbwe [2020-01-16] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-13] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0 [2020-01-31] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-722231672-965411127-3486821242-1001_Classes\CLSID\{B0EEFB45-D1D5-6100-7B21-7585C295AC69}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6723984 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Office14\GROOVEEX.DLL [4222864 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [PDFArchitect7_ManagerExt] -> {21989F59-B260-4302-90C3-E51740E03639} => C:\Program Files\PDF Architect 7\context-menu.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Aviry\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => D:\Aviry\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Aviry\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => D:\Aviry\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\system32\huffyuv.dll [55296 2005-01-22] () [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [148992 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\system32\xvidvfw.dll [311296 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\SysWOW64\huffyuv.dll [39936 2004-05-18] (Disappearing Inc.) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284672 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.lameacm] => C:\Windows\SysWOW64\lameACM.acm [473088 2015-02-25] (hxxp://www.mp3dev.org/) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2019-11-27 00:19 - 2001-06-18 02:59 - 000094208 _____ ( Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\EpsImport.dll
2019-11-27 00:19 - 2001-06-18 02:28 - 000073728 _____ ( Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\InitBravo.dll
2019-11-27 00:19 - 2001-06-18 03:28 - 000073728 _____ ( Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\InitPM7Bravo.dll
2019-11-04 15:09 - 2019-11-04 15:09 - 000059392 _____ () [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\SA\dict-vectorizer.dll
2019-11-27 00:19 - 2001-06-18 02:26 - 000086016 _____ () [File not signed] D:\Programy\Adobe\PageMaker 7.0\Aoln.dll
2019-11-27 00:19 - 2001-06-18 02:18 - 000064512 _____ () [File not signed] D:\Programy\Adobe\PageMaker 7.0\MAIPM6.dll
2019-11-27 00:19 - 2001-06-18 02:19 - 003444736 _____ () [File not signed] D:\Programy\Adobe\PageMaker 7.0\MPS.dll
2019-11-27 00:19 - 2001-06-18 02:19 - 000167936 _____ () [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\Linguist\Prx\PRXLNG1.DLL
2019-11-27 00:19 - 2001-06-18 02:19 - 000011776 _____ () [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\Linguist\Prx\USENGLSH\Prxlng1.RSL
2019-11-27 00:19 - 2001-06-18 02:35 - 000663552 _____ () [File not signed] D:\Programy\Adobe\PageMaker 7.0\Vamp.dll
2019-11-27 00:19 - 2001-06-18 02:37 - 000147456 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\ALDCL6.dll
2019-11-27 00:19 - 2001-06-18 02:30 - 000081920 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\ALDFS32.dll
2019-11-27 00:19 - 2001-06-18 02:43 - 000421888 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\aldim4.dll
2019-11-27 00:19 - 2001-06-18 02:30 - 000077824 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\ALDVM32.dll
2019-11-27 00:19 - 2001-06-18 02:39 - 000278528 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\GEng32.dll
2019-11-27 00:19 - 2001-06-18 02:19 - 000069632 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\PM7OPP.dll
2019-11-27 00:19 - 2001-06-18 03:48 - 000323584 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\PMExt.dll
2019-11-27 00:19 - 2001-06-18 03:44 - 000184320 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RBENG.dll
2019-11-27 00:19 - 2001-06-18 03:45 - 000102400 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\SwitchB\DFLTCMSG\DFLTCMSG.SWB
2019-11-27 00:19 - 2001-06-18 02:30 - 000020480 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\USENGLSH\ALDFSR32.RSL
2019-11-27 00:19 - 2001-06-18 02:43 - 000020480 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\USENGLSH\ALDIM4RS.RSL
2019-11-27 00:19 - 2001-06-18 03:43 - 000045056 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\USENGLSH\ALDRBRES.RSL
2019-11-27 00:19 - 2001-06-18 03:45 - 000032768 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\USENGLSH\DFLTRES.RSL
2019-11-27 00:19 - 2001-06-18 03:43 - 000020480 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\USENGLSH\inlng1.rsl
2019-11-27 00:19 - 2001-06-19 22:50 - 000978944 _____ (Adobe Systems Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\RSRC\USENGLSH\PM70.RSL
2019-11-27 00:19 - 2001-06-18 02:18 - 000017920 _____ (Adobe Systems Incorporated.) [File not signed] D:\Programy\Adobe\PageMaker 7.0\MF.dll
2019-11-27 00:19 - 2001-06-18 02:18 - 000446464 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\ACE.dll
2019-11-27 00:19 - 2001-06-18 02:18 - 001859584 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\AGM.dll
2019-11-27 00:19 - 2001-06-18 02:18 - 000147456 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\BIB.dll
2019-11-27 00:19 - 2001-06-18 02:18 - 001441792 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\CoolType.dll
2019-11-27 00:19 - 2001-06-18 02:19 - 000434176 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\PM7ACE.dll
2019-11-27 00:19 - 2001-06-18 02:19 - 001781760 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\PM7AGM.dll
2019-11-27 00:19 - 2001-06-18 02:19 - 000188529 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\PM7BIB.dll
2019-11-27 00:19 - 2001-06-18 02:19 - 001347584 _____ (Adobe Systems, Incorporated) [File not signed] D:\Programy\Adobe\PageMaker 7.0\PM7CoolType.dll
2009-11-17 22:58 - 2009-11-17 22:58 - 000342656 _____ (Hewlett Packard -> Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqmif08.dll
2009-11-17 22:58 - 2009-11-17 22:58 - 000559232 _____ (Hewlett Packard -> Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
2012-05-27 16:44 - 2012-05-27 16:44 - 000032256 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpotra08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000934400 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsem08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000012288 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqstp08.rsc
2011-04-29 19:08 - 2011-04-29 19:08 - 000048128 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.rsc
2010-08-06 11:15 - 2010-08-06 11:15 - 000054784 _____ (Hewlett-Packard) [File not signed] C:\Windows\SYSTEM32\hpzipr12.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000398336 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000513536 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000055296 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphnt32.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000067072 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphnt64.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000020480 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphusr32.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000019968 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphusr64.dll
2019-07-25 10:52 - 2019-07-25 10:52 - 000986112 _____ (Microsoft Corporation) [File not signed] D:\Aviry\CheckPoint\ZoneAlarm\dbghelp.dll
2019-11-10 11:38 - 2019-11-10 11:38 - 001124352 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\SQLite\System.Data.SQLite.dll
2020-01-22 11:06 - 2020-01-22 11:06 - 000018944 _____ (Softland) [File not signed] C:\Windows\System32\novamn10.dll
2018-12-10 10:29 - 2018-12-10 10:29 - 000438272 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Program Files\PDF Architect 7\libcurl.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\localhost -> localhost

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-722231672-965411127-3486821242-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\Pictures\Saved Pictures\M104 - Sombrero.bmp
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3F60A5E6-326B-4D15-A51D-52B43BF1ABC4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D53AC4E9-924B-48B4-A6E6-95AF36DAFFDE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B089ECCD-20EB-4D16-B8AF-1D4489D9D0B8}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{1C57980D-0A0C-43A0-986F-014867AF8077}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{927F259B-AC23-45ED-BD19-6C0580DD3502}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{C1710658-90E6-4741-B02E-F5D096497718}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{13FD4DA9-5757-49F9-987F-7641F63CD5D5}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{09D0FD54-F9E5-4E9B-B5EC-8C5985AB222F}] => (Allow) LPort=2869
FirewallRules: [{63FD2332-F2D6-45A0-8793-C7410883EF3D}] => (Allow) LPort=1900
FirewallRules: [{9613ED42-B080-4100-B926-181EECF996C8}] => (Allow) C:\Program Files (x86)\Opera\65.0.3467.78\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{B1066463-F801-44E9-A76F-8650057FE7B9}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ABCAB01E-49FE-4C83-A2C7-843DE4194198}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{87F08FF4-AAB0-4911-9194-EB67A27D0ED3}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D33BCFB3-EA54-4BD5-954B-45F544174DFE}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD11C171-19E0-4EFD-9913-9F563B0EE8AF}] => (Allow) C:\Program Files (x86)\Office14\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{98E8879A-38BA-483B-89F0-5514BB3FAC00}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EE403C6C-2ED9-4B10-85D1-BDBF155012D1}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F734B721-4232-451F-A5E9-157E6393D7F1}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BB112F68-6520-4872-B8B2-0B0CACB9CA23}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1E57676E-0170-42AF-A121-C142686822E4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2514E751-3685-4B49-8DD3-37616BE45B6A}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6AB2BF7E-3896-4B1B-A2BE-D7D37BF0FB21}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FD1B87C3-9AF6-4F8F-8F22-1EBBA34B1E98}] => (Allow) C:\Program Files (x86)\Opera\66.0.3515.44\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{82853DEF-9A70-4CA4-A710-EE1D9A6E31AD}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷楶睥攮數 No File
FirewallRules: [{E3D8594B-28BB-4C81-BB40-4996B7FD8756}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷档潲敭牤癩牥攮數 No File
FirewallRules: [{F19C8B75-34AE-4368-A1B1-76A3AB3724F3}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷桃潲敭䅜灰楬慣楴湯䍜牨浯⹥硥e No File
FirewallRules: [{31D2ECEC-BBBA-4AA4-B172-E8DE5FCFE3A3}] => (Allow) 㩃啜敳獲䅜浤湩䅜灰慄慴剜慯業杮癜敩屷楶睥⹕硥e No File
FirewallRules: [{200D12C5-6D10-48F2-8B09-BD7BF4C096B1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5F2CB13D-9C1E-46F0-A011-2BBE83644B87}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{06D51213-8937-440D-BD37-5D2DD41F5315}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{809B4C5C-8C64-40AF-8950-58FEC7A1C568}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{04B82AB2-7311-4DFD-97BC-25BB38395148}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{650CCD15-C19B-4AE3-BFD4-71A26EEB4E92}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5CE7F475-C8FD-4A67-AD86-00553CAFF74C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B228C24B-EE1C-45C5-AEA6-71176ADE74DF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D9603B5C-325E-4237-BC4E-91DCA55B90A1}] => (Allow) LPort=8501
FirewallRules: [{7059C7E5-30C1-4084-A8C6-CA7C0AB13286}] => (Allow) LPort=8501

==================== Restore Points =========================

12-01-2020 22:12:21 Windows Update
24-01-2020 17:12:37 Naplánovaný kontrolní bod
27-01-2020 22:44:41 Removed ABBYY PDF Transformer+.
31-01-2020 11:26:47 Windows Update

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (02/02/2020 08:10:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x43c
Čas spuštění chybující aplikace: 0x01d5d9fc2eeb65fd
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 64b73e8c-a110-4b09-8bae-bb8dc9586058
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/02/2020 07:12:03 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY)
Description: Velikost požadované vyrovnávací paměti je větší než velikost vyrovnávací paměti předané do funkce Collect knihovny DLL rozšiřitelných čítačů C:\Windows\System32\perfts.dll pro službu LSM. Velikost dané vyrovnávací paměti: 24312; požadovaná velikost: 28256.

Error: (02/02/2020 05:07:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x22ac
Čas spuštění chybující aplikace: 0x01d5d9e29fb2effc
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 695fc1f0-db8b-4377-a1fb-dc03249e1328
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/02/2020 04:18:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x2e74
Čas spuštění chybující aplikace: 0x01d5d9d7ed5ed20f
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: e351c0ad-fc7a-413b-9c95-e5991788e728
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/02/2020 11:18:43 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\Windows\system32\sysmain.dll (kód chyby Win32 126).

Error: (01/31/2020 09:11:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: mbamtray.exe, verze: 4.0.0.524, časové razítko: 0x5e2b64a0
Název chybujícího modulu: Qt5Core.dll, verze: 5.13.2.0, časové razítko: 0x5e13651a
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000020d435
ID chybujícího procesu: 0x1f28
Čas spuštění chybující aplikace: 0x01d5d87103122017
Cesta k chybující aplikaci: D:\Aviry\Malwarebytes\Anti-Malware\mbamtray.exe
Cesta k chybujícímu modulu: D:\Aviry\Malwarebytes\Anti-Malware\Qt5Core.dll
ID zprávy: 052c1391-9d9f-4ff0-a84a-b6c214e5b73f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/31/2020 08:45:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: MsiExec.exe, verze: 5.0.18362.1, časové razítko: 0x589bbffb
Název chybujícího modulu: MSI4F31.tmp, verze: 0.0.0.0, časové razítko: 0x5e2813a7
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000002c798
ID chybujícího procesu: 0x2758
Čas spuštění chybující aplikace: 0x01d5d86f02017235
Cesta k chybující aplikaci: C:\Windows\System32\MsiExec.exe
Cesta k chybujícímu modulu: C:\Windows\Installer\MSI4F31.tmp
ID zprávy: d9f05d7f-42c8-4b80-8668-d96d8d0c236e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (01/31/2020 08:45:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: MsiExec.exe, verze: 5.0.18362.1, časové razítko: 0x589bbffb
Název chybujícího modulu: MSID913.tmp, verze: 0.0.0.0, časové razítko: 0x5e2813a7
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000002c798
ID chybujícího procesu: 0x174c
Čas spuštění chybující aplikace: 0x01d5d86eeffccaa3
Cesta k chybující aplikaci: C:\Windows\System32\MsiExec.exe
Cesta k chybujícímu modulu: C:\Windows\Installer\MSID913.tmp
ID zprávy: 5ae4a83b-a4df-4b5f-bc24-75dd715d780f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (02/02/2020 07:14:09 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby CPEFR bylo dosaženo časového limitu (60000 ms).

Error: (02/02/2020 07:08:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba PDF24 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (02/02/2020 07:08:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Check Point Endpoint EFR byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 500 milisekund: Restartovat službu.

Error: (02/02/2020 07:08:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Check Point SandBlast Agent Threat Emulation byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 500 milisekund: Restartovat službu.

Error: (02/02/2020 07:08:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avira Service Host byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 10000 milisekund: Restartovat službu.

Error: (02/02/2020 07:08:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Check Point Endpoint Remediation byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 500 milisekund: Restartovat službu.

Error: (02/02/2020 07:08:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba novaPDF 10 Server byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (02/02/2020 07:08:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba PDF Architect 7 Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
===================================
Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.558
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

Date: 2019-11-26 20:03:39.558
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.

CodeIntegrity:
===================================

Date: 2020-02-02 20:12:42.802
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-02 20:12:42.799
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-02 20:12:42.796
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-02 20:12:42.792
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-02 20:12:42.788
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-02 20:12:42.785
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-02 20:12:42.780
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-02 20:12:42.776
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2901 10/16/2019
Motherboard: ASUSTeK COMPUTER INC. ROG STRIX B450-F GAMING
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 37%
Total physical RAM: 8124.13 MB
Available physical RAM: 5048.63 MB
Total Virtual: 9404.13 MB
Available Virtual: 5755.35 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.84 GB) (Free:182.37 GB) NTFS
Drive d: (Místní disk) (Fixed) (Total:931.5 GB) (Free:659.27 GB) NTFS

\\?\Volume{d6458fe6-83f6-4935-9c1d-28a7f72e381b}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.09 GB) NTFS
\\?\Volume{b5a6f67e-0283-4ca7-8508-df1d94760cbf}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: 39AE08EB)

Partition: GPT.

==================== End of Addition.txt =======================

[Conder]

To predtym su vsak iba logy z AdwCleaneru. V PC je nainstalovany aj iny program s nazvom Malwarebytes (to je iny program ako AdwCleaner, aj ked su od rovnakej firmy). Log zo skenu Malwarebytes sa da ziskat takto: otvor Malwarebytes, klikni na Vyhledavac, hore klikni na kartu Zpravy, dvojklikom otvor log a klikni na Export a nasledne na Kopirovat do schranky. Takto skopirovany log nasledne vloz do dalsieho prispevku. Ak tam bude tych logov viac, posli vsetky z nich.

[Antusek]

Dík. Uz je mi to jasné. Posílám oba dva logy. Protože je to hodně záznamů, pošlu na několik částí.

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 31.01.20
Čas skenování: 21:11
Logovací soubor: e0b8a88c-4465-11ea-840c-049226d34c5e.json

-Informace o softwaru-
Verze: 4.0.4.49
Verze komponentů: 1.0.810
Aktualizovat verzi balíku komponent: 1.0.18498
Licence: Bezplatná

-Systémová informace-
OS: Windows 10 (Build 18362.592)
CPU: x64
Systém souborů: NTFS
Uživatel: DESKTOP-1U0LM3C\Admin

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 302412
Zjištěné hrozby: 6853
Hrozby umístěné do karantény: 6853
Uplynulý čas: 2 min, 23 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 2
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\chromedriver.exe, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\view.exe, V karanténě, 2634, 593744, , , ,

Modul: 2
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\chromedriver.exe, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\view.exe, V karanténě, 2634, 593744, , , ,

Klíč registru: 12
PUP.Optional.InstallCore, HKU\S-1-5-21-722231672-965411127-3486821242-1001\SOFTWARE\CSASTATS\ic, V karanténě, 485, 586068, 1.0.18498, , ame,
PUP.Optional.SearchYa, HKU\S-1-5-21-722231672-965411127-3486821242-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{993F5746-4C15-42BC-99C1-064A1764271B}, V karanténě, 410, 242794, 1.0.18498, , ame,
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, V karanténě, 6971, 252393, 1.0.18498, , ame,
Trojan.CrthRazy, HKLM\SOFTWARE\WOW6432NODE\Machiner, V karanténě, 3157, 676882, 1.0.18498, , ame,
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, V karanténě, 6971, 252393, 1.0.18498, , ame,
Adware.Yelloader, HKU\S-1-5-21-722231672-965411127-3486821242-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\view, V karanténě, 2634, 593744, , , ,
CrackTool.Agent.Keygen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\AutoKMS, V karanténě, 7641, 89405, , , ,
CrackTool.Agent.Keygen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{4B8E12BC-E294-4E07-9C09-959F3158EF36}, V karanténě, 7641, 89405, , , ,
CrackTool.Agent.Keygen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\BOOT\{4B8E12BC-E294-4E07-9C09-959F3158EF36}, V karanténě, 7641, 89405, , , ,
CrackTool.Agent.Keygen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\AutoKMSDaily, V karanténě, 7641, 89405, , , ,
CrackTool.Agent.Keygen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{7779BAF8-BF64-49D0-8002-DDA951387D28}, V karanténě, 7641, 89405, , , ,
CrackTool.Agent.Keygen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{7779BAF8-BF64-49D0-8002-DDA951387D28}, V karanténě, 7641, 89405, , , ,

Hodnota v registru: 5
PUP.Optional.SearchYa, HKU\S-1-5-21-722231672-965411127-3486821242-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{993F5746-4C15-42BC-99C1-064A1764271B}|DISPLAYNAME, V karanténě, 410, 242794, 1.0.18498, , ame,
Adware.GoldDay, HKU\S-1-5-21-722231672-965411127-3486821242-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VIEW|PUBLISHER, V karanténě, 6684, 573027, 1.0.18498, , ame,
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DISABLEAUTOUPDATECHECKSCHECKBOXVALUE, V karanténě, 6971, 252393, 1.0.18498, , ame,
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DISABLEAUTOUPDATECHECKSCHECKBOXVALUE, V karanténě, 6971, 252393, 1.0.18498, , ame,
Adware.Yelloader, HKU\S-1-5-21-722231672-965411127-3486821242-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|view, V karanténě, 2634, 593744, , , ,

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 96
Trojan.CrthRazy, C:\PROGRAM FILES (X86)\MACHINERDATA, V karanténě, 3157, 676766, 1.0.18498, , ame,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\85a9dccf-8bb2-43c7-b001-37c7732420c8\index-dir, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\CacheStorage\17c2987fba3de778f08a17fab94fe807531debe2\4f6df0c1-2913-40b1-a192-9e344fea7dac\index-dir, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\CacheStorage\17c2987fba3de778f08a17fab94fe807531debe2\4f6df0c1-2913-40b1-a192-9e344fea7dac, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\85a9dccf-8bb2-43c7-b001-37c7732420c8, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\CacheStorage\17c2987fba3de778f08a17fab94fe807531debe2, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\IndexedDB\https_www.contrareplica.mx_0.indexeddb.leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\IndexedDB\https_engage.wixapps.net_0.indexeddb.leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\IndexedDB\https_www.thesun.co.uk_0.indexeddb.leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\IndexedDB\https_www.google.com_0.indexeddb.leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\IndexedDB\https_picante.today_0.indexeddb.leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\blob_storage\3183ebaa-a442-46dc-8acc-06cf4ccaae69, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\ScriptCache\index-dir, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.com.br_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.com.mx_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.com.au_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.co.in_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.co.uk_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.com_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.ca_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.de_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.es_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.fr_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.it_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases\https_www.google.nl_0, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Site Characteristics Database, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\data_reduction_proxy_leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\CacheStorage, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Subresource Filter\Unindexed Rules, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\ScriptCache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\002\t\Paths, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\001\t\Paths, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Code Cache\js\index-dir, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker\Database, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Application Cache\Cache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\000\t\Paths, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Platform Notifications, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Local Storage\leveldb, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\VisualElements, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\Origins, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\default_apps, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\InterventionPolicyDatabase, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\001\t, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\003\t, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\002\t, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\000\t, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Application Cache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Extensions, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\MEIPreload, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\000, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\001, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\002, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Extension Rules, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Session Storage, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System\003, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\CertificateTransparency, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Extension State, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Service Worker, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\BudgetDatabase, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\ThirdPartyModuleList32, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Local Storage, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\CertificateRevocation, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Code Cache\js, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\blob_storage, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\ShaderCache\GPUCache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Media Cache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\File System, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Code Cache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Subresource Filter, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\databases, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\SSLErrorAssistant, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\IndexedDB, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Crashpad\reports, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\GPUCache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\FileTypePolicies, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\BrowserMetrics, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\SetupMetrics, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\Dictionaries, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default\Cache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\OriginTrials, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\PepperFlash, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\ShaderCache, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\WidevineCdm, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\MEIPreload, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\SwReporter, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Crashpad, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\Default, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile\pnacl, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\NewProfile, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Update, V karanténě, 2634, 593744, , , ,
Trojan.CrthRazy.Generic, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm, V karanténě, 14947, 676732, , , ,
Trojan.CrthRazy.Generic, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PKEDCJKDEFGPDELPBCMBMEOMCJBEEMFM, V karanténě, 14947, 676732, 1.0.18498, , ame,
Trojan.CrthRazy.E.Generic, C:\USERS\ADMIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\KC08X7DF.DEFAULT\EXTENSIONS\{14553439-2741-4E9D-B474-784F336F58C9}, V karanténě, 14925, 689343, 1.0.18498, , ame,

Soubor: 6736
Adware.Yelloader, C:\USERS\ADMIN\APPDATA\ROAMING\VIEW\VIEWU.EXE, V karanténě, 2634, 593744, 1.0.18498, , ame,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\default_apps\docs.crx, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\default_apps\drive.crx, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\default_apps\external_extensions.json, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\default_apps\gmail.crx, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\default_apps\youtube.crx, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Extensions\external_extensions.json, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\am.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\ar.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\bg.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\bn.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\ca.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\cs.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\da.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\de.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\el.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\en-GB.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\en-US.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader, C:\Users\Admin\AppData\Roaming\view\Chrome\Application\73.0.3683.75\Locales\es-419.pak, V karanténě, 2634, 593744, , , ,
Adware.Yelloader,