někdo mému klukovi ukradl steam účet , než začnu měnit všechny hesla na email atd... ( dokonce mu z emailu odstranili i všechno co obsahovalo slovo steam) Tak potřebuji ať to má čisté , smažte vše , i kdyby to bylo jen podezřelé. Instaluje si tu různé hacky atd, tak je to jeho problém
posílám adwcleaner a FRST po něm.
# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build: 06-29-2021
# Database: 2021-10-26.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 10-31-2021
# Duration: 00:00:05
# OS: Windows 10 Home
# Cleaned: 26
# Failed: 0
***** [ Services ] *****
Deleted WCAssistantService
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Lavasoft\Web Companion
Deleted C:\Program Files (x86)\MachinerData
Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\ProgramData\Garbage Cleaner
Deleted C:\ProgramData\Lavasoft\Web Companion
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
Deleted C:\Users\tomasek\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_MRPQ523XMEO0CM2M0N5VJ25Z3NZKGEP4
Deleted C:\Users\tomasek\AppData\Roaming\Lavasoft\Web Companion
Deleted C:\Users\tomasek\AppData\Roaming\Smart Clock
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted C:\Windows\System32\Tasks\SMART CLOCK
***** [ Registry ] *****
Deleted HKCU\Software\GCleaner
Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{721DBB1E-BC53-4B93-BC26-71703BD120C4}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Smart Clock
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{db0d9acf-3c9c-4a7f-89ea-752e3fc8660e}|DisplayIcon
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{db0d9acf-3c9c-4a7f-89ea-752e3fc8660e}|DisplayName
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{db0d9acf-3c9c-4a7f-89ea-752e3fc8660e}|UninstallString
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
Deleted me.fo
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [6856 octets] - [01/03/2021 19:16:19]
AdwCleaner[S01].txt - [6917 octets] - [01/03/2021 20:12:38]
AdwCleaner[C01].txt - [6449 octets] - [01/03/2021 20:14:15]
AdwCleaner[S02].txt - [2957 octets] - [16/05/2021 15:54:45]
AdwCleaner[C02].txt - [2910 octets] - [16/05/2021 15:55:48]
AdwCleaner[S03].txt - [4169 octets] - [31/10/2021 12:51:41]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C03].txt ##########
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-10-2021
Ran by tomasek (administrator) on DESKTOP-3JV1PF5 (31-10-2021 13:00:58)
Running from C:\Users\tomasek\Desktop
Loaded Profiles: tomasek
: Microsoft Windows 10 Home Version 21H1 19043.1288 (X64) Language: Čeština (Česko)
Default browser: "C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe" --single-argument %1
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe <13>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\AvastBrowserCrashHandler.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\AvastBrowserCrashHandler64.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastNM.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <6>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wuapihost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Opera Software AS -> Opera Software) C:\Users\tomasek\AppData\Local\Programs\Opera\assistant\browser_assistant.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [134936 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-23] (Adobe Inc. -> )
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\...\Run: [RK61] => C:\Program Files (x86)\RK\RK61\DeviceDriver.exe [1620480 2020-11-11] () [File not signed]
HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1806680 2021-10-07] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35116160 2021-10-19] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\...\Run: [Voicemod] => C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe [6330568 2021-10-14] (Voicemod Sociedad Limitada -> Voicemod)
HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\...\Run: [Opera Browser Assistant] => C:\Users\tomasek\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4105424 2021-10-14] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [5461888 2021-10-23] (Windscribe Limited -> Windscribe Limited)
HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\...\Run: [Discord] => C:\Users\tomasek\AppData\Local\Discord\Update.exe --processStart Discord.exe
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\95.0.4638.54\Installer\chrmstp.exe [2021-10-26] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\95.0.12674.55\Installer\chrmstp.exe [2021-10-27] (Avast Software s.r.o. -> AVAST Software)
Startup: C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google\RebusDrop.lnk [2021-09-02]
ShortcutTarget: RebusDrop.lnk -> C:\Users\tomasek\RebusDrop\App\RebusDrop.exe (No File)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00DCEFEF-2636-4488-A8B3-16EE3AD65CF9} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2564864 2021-10-19] (Avast Software s.r.o. -> AVAST Software)
Task: {13B50121-E1FE-452F-8755-DF0C03C90E84} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [29200512 2021-10-19] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {1FA75FDC-E5D2-4440-9040-A97E14DDE2DD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-09-25] (Google LLC -> Google LLC)
Task: {219CB4A4-8C31-4E10-97F7-0B73A9BD4689} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2484568 2021-10-07] (Overwolf Ltd -> Overwolf LTD)
Task: {2D09A541-D6DA-4F28-AE58-21DFCE0D4BE2} - System32\Tasks\bookingDesktopAppUpdateTaskMachineCore => C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2021-02-19] (bookingDesktopApp.) [File not signed]
Task: {3144313B-CD3A-443B-9944-89DCEF9BAD3F} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
Task: {3C327DF6-D29D-474A-A0DE-5FEDB6CF97FB} - System32\Tasks\services32 => C:\Users\tomasek\Services32.exe
Task: {3E6E236C-348F-499F-9A85-D858EF38D127} - System32\Tasks\Opera scheduled assistant Autoupdate 1628263185 => C:\Users\tomasek\AppData\Local\Programs\Opera\launcher.exe [46227664 2021-10-20] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\tomasek\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {495325BD-0611-494E-9CF3-51D52F2F63DC} - System32\Tasks\bookingDesktopAppUpdateTaskMachineUA => C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2021-02-19] (bookingDesktopApp.) [File not signed]
Task: {4CBD922F-134E-4824-B412-07443DC9DAA0} - System32\Tasks\CCleanerSkipUAC - tomasek => C:\Program Files\CCleaner\CCleaner.exe [29200512 2021-10-19] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {569F5295-71BB-47D1-AB69-7313B2B593E5} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4974872 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
Task: {6AC38052-6759-4FB6-8419-AA406408FA38} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1778456 2021-10-27] (Avast Software s.r.o. -> Avast Software)
Task: {6F8A71A0-7E02-4E72-B8BF-3A60BB0E6C74} - System32\Tasks\Videocard Service => C:\Users\tomasek\Documents\ClientHost.exe
Task: {7AFBBC1A-0209-45A7-8070-2A62AAC36390} - System32\Tasks\Services\Diagnostic => C:\Users\tomasek\AppData\Local\Disk\AutoIt3\AutoIt3_x64.exe -> "C:\Users\tomasek\AppData\Local\Disk\AutoIt3\Settings.au3"
Task: {A4AD5645-1782-4879-BD8C-57AE76E146AB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-10-19] (Piriform Software Ltd -> Piriform)
Task: {A738DAE6-E4CD-4455-81CA-9CAE713313F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-09-25] (Google LLC -> Google LLC)
Task: {ABC8A774-3286-4F6E-9DC5-D55753936F94} - System32\Tasks\WinManager => C:\Users\tomasek\AppData\Roaming\Windows\svchost.exe <==== ATTENTION
Task: {B928C857-D17A-430D-B8A8-A7883FC4E004} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {BF41AFA4-3048-478F-980A-1E13BCB07422} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2564864 2021-10-19] (Avast Software s.r.o. -> AVAST Software)
Task: {D473253E-AD71-43A3-979D-CD4EFA514B25} - System32\Tasks\Microsoft Windows Defender Update => C:\Program Files (x86)\BZDI\BZDI.exe
Task: {E409927A-C556-409B-919B-D6402429B072} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-3JV1PF5-tomasek => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {F2327FD2-7655-40A5-963B-ECE51465085D} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
Task: {FED5759A-2877-4CD0-B558-9642D907088F} - System32\Tasks\Opera scheduled Autoupdate 1609853199 => C:\Users\tomasek\AppData\Local\Programs\Opera\launcher.exe [46227664 2021-10-20] (Opera Software AS -> Opera Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{42d5e22c-9575-4454-8a68-21d1a84a4acf}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ded706b5-01c2-4a75-9021-93f1d6b19da9}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\tomasek\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-25]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\tomasek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-10-24]
Edge Extension: (KeyFind) - C:\Users\tomasek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nnoidofbgkmeabamdgclicncakljkoin [2021-03-25]
Edge Profile: C:\Users\tomasek\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2021-10-24]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.271.2 -> C:\Program Files\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2021-01-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.271.2 -> C:\Program Files\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2021-01-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2021-01-01] (Adobe Systems Incorporated -> )
FF Plugin-x32: @bookingdesktopapp.com/bookingDesktopApp Update;version=3 -> C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll [2021-02-19] (bookingDesktopApp.) [File not signed]
FF Plugin-x32: @bookingdesktopapp.com/bookingDesktopApp Update;version=9 -> C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll [2021-02-19] (bookingDesktopApp.) [File not signed]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\npAvastBrowserUpdate3.dll [2021-10-27] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1189.1\npAvastBrowserUpdate3.dll [2021-10-27] (Avast Software s.r.o. -> AVAST Software)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Default [2021-10-31]
CHR DefaultSearchURL: Default -> hxxps//search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (Точная погода на неделю) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkfanndldghlkndfhojpfhclgdnglfmf [2021-06-30]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-10-31]
CHR Extension: (Swift Select) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Default\Extensions\molponhobmbbinjnghgafbfampcgamln [2021-03-23]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-11]
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-10-31]
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1 [2021-10-31]
CHR DefaultSearchURL: Profile 1 -> hxxps//search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> mcafee
CHR Extension: (Překladač Google) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-08-14]
CHR Extension: (Prezentace) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-04-14]
CHR Extension: (Dokumenty) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2021-04-14]
CHR Extension: (Disk Google) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-04-14]
CHR Extension: (YouTube) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-04-14]
CHR Extension: (NavFast) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cmbkjfjekgmlimjklnijcjijbfpblgde [2021-06-01]
CHR Extension: (Tabulky) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-04-14]
CHR Extension: (Dokumenty Google offline) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-19]
CHR Extension: (Search Manager) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gnplhahbcoldbildffdchneaepapccbn [2021-04-14]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2021-10-27]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-10-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-14]
CHR Extension: (Gmail) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-04-14]
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2 [2021-10-16]
CHR DefaultSearchURL: Profile 2 -> hxxps//www.searchmr.com/?q={searchTerms}
CHR DefaultSuggestURL: Profile 2 -> hxxps//searchmr.com/?s={searchTerms}
CHR Extension: (Prezentace) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-04-14]
CHR Extension: (Dokumenty) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2021-04-14]
CHR Extension: (Disk Google) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-04-14]
CHR Extension: (YouTube) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-04-14]
CHR Extension: (Tabulky) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-04-14]
CHR Extension: (Dokumenty Google offline) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-06]
CHR Extension: (Search Manager) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gnplhahbcoldbildffdchneaepapccbn [2021-04-14]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-14]
CHR Extension: (Gmail) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-04-14]
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 3 [2021-10-30]
CHR DefaultSearchURL: Profile 3 -> hxxps//www.searchmr.com/?q={searchTerms}
CHR DefaultSuggestURL: Profile 3 -> hxxps//searchmr.com/?s={searchTerms}
CHR Extension: (Prezentace) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-06-24]
CHR Extension: (Tabulky) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-06-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-28]
CHR Extension: (Search Manager) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gnplhahbcoldbildffdchneaepapccbn [2021-06-24]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-10-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-06-24]
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4 [2021-10-31]
CHR DefaultSearchURL: Profile 4 -> hxxps//www.searchmr.com/?q={searchTerms}
CHR DefaultSuggestURL: Profile 4 -> hxxps//searchmr.com/?s={searchTerms}
CHR Extension: (Prezentace) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-08-10]
CHR Extension: (Tabulky) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-08-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-23]
CHR Extension: (Search Manager) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gnplhahbcoldbildffdchneaepapccbn [2021-08-10]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-10-23]
CHR Extension: (TubeBuddy) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\mhkhmbddkmdggbhaaaodilponhnccicb [2021-10-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-10]
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5 [2021-10-31]
CHR DefaultSearchURL: Profile 5 -> hxxps//search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Profile 5 -> mcafee
CHR Extension: (Prezentace) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-10-19]
CHR Extension: (Dokumenty) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2021-10-19]
CHR Extension: (Disk Google) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-19]
CHR Extension: (YouTube) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-10-19]
CHR Extension: (Tabulky) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-10-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-19]
CHR Extension: (Search Manager) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\gnplhahbcoldbildffdchneaepapccbn [2021-10-19]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-10-24]
CHR Extension: (Grammarly for Chrome) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2021-10-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-19]
CHR Extension: (Gmail) - C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-19]
CHR Profile: C:\Users\tomasek\AppData\Local\Google\Chrome\User Data\System Profile [2021-10-31]
CHR HKU\S-1-5-21-2880034797-3857021402-3440946435-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gkfanndldghlkndfhojpfhclgdnglfmf] - hxxps//chrome.google.com/webstore/detail/gkfanndldghlkndfhojpfhclgdnglfmf
CHR HKLM-x32\...\Chrome\Extension: [gnplhahbcoldbildffdchneaepapccbn]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR Profile: C:\Users\tomasek\AppData\Roaming\Opera Software\Opera Stable [2021-10-31]
OPR DefaultSuggestURL: Opera Stable -> hxxps//www.google.com/complete/search?client=o ... utEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\tomasek\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-10-26]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\tomasek\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-08-06]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8376400 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [680728 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [427800 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193872 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\95.0.12674.55\elevation_service.exe [1812296 2021-10-19] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8894752 2021-01-30] (BattlEye Innovations e.K. -> )
S2 bookingdesktopapp; C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2021-02-19] (bookingDesktopApp.) [File not signed]
S3 bookingdesktopappm; C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2021-02-19] (bookingDesktopApp.) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2484568 2021-10-07] (Overwolf Ltd -> Overwolf LTD)
S3 Rockstar Service; D:\GTAV\Launcher\RockstarService.exe [2219416 2021-06-04] (Rockstar Games, Inc. -> Rockstar Games)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [1300352 2021-10-23] (Windscribe Limited -> Windscribe Limited)
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [X]
S2 igx64; "C:\Users\tomasek\AppData\Roaming\WinShare\runchos.exe" [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [35720 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [222112 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [372232 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [250392 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [99344 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\Windows\System32\drivers\aswElam.sys [21936 2021-10-27] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [41352 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [184648 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [538992 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [107864 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [82928 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [852240 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [557664 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [214368 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316632 2021-10-27] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [284672 2021-04-16] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 CMUSBDAC; C:\Windows\system32\DRIVERS\CMUSBDAC.sys [3819744 2018-07-24] (WDKTestCert cm359,131641702659254692 -> C-MEDIA)
R3 DroidCam; C:\Windows\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
R3 DroidCamVideo; C:\Windows\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys [33784 2021-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [37200 2021-03-18] (Logitech Inc -> Logitech)
S3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [25928 2021-03-18] (Logitech Inc -> Logitech)
S3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [66896 2021-03-18] (Logitech Inc -> Logitech)
R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
S3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
R3 tapwindscribe0901; C:\Windows\System32\drivers\tapwindscribe0901.sys [57768 2021-08-13] (Windscribe Limited -> The OpenVPN Project)
R3 VBAudioVMVAIOMME; C:\Windows\System32\drivers\vbaudio_vmvaio64_win10.sys [71712 2021-01-01] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VOICEMOD_Driver; C:\Windows\system32\drivers\vmdrv.sys [48136 2021-05-13] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48520 2021-10-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [434424 2021-10-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-19] (Microsoft Windows -> Microsoft Corporation)
S3 WindscribeSplitTunnel; C:\Windows\system32\DRIVERS\WindscribeSplitTunnel.sys [35752 2021-10-23] (Windscribe Limited -> )
R3 windtun420; C:\Windows\System32\drivers\windtun420.sys [47544 2021-08-13] (Windscribe Limited -> WireGuard LLC)
U1 aswbdisk; no ImagePath
U3 avgbdisk; no ImagePath
U2 bddci; no ImagePath
S3 HWiNFO_152; \??\C:\Users\tomasek\AppData\Local\Temp\HWiNFO64A_152.SYS [X] <==== ATTENTION
S3 HWiNFO_155; \??\C:\Users\tomasek\AppData\Local\Temp\HWiNFO64A_155.SYS [X] <==== ATTENTION
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-31 12:59 - 2021-10-31 13:00 - 000051302 _____ C:\Users\tomasek\Desktop\Addition.txt
2021-10-31 12:58 - 2021-10-31 13:01 - 000031749 _____ C:\Users\tomasek\Desktop\FRST.txt
2021-10-31 12:53 - 2021-10-31 12:53 - 000003881 _____ C:\Users\tomasek\Desktop\AdwCleaner[C03].txt
2021-10-31 12:51 - 2021-10-31 12:51 - 008553680 _____ (Malwarebytes) C:\Users\tomasek\Desktop\adwcleaner_8.3.0.exe
2021-10-31 12:50 - 2021-10-31 12:50 - 002310656 _____ (Farbar) C:\Users\tomasek\Desktop\FRST64.exe
2021-10-30 14:41 - 2021-10-30 14:41 - 000000000 ____D C:\Users\tomasek\AppData\Local\UXP
2021-10-30 14:40 - 2021-10-30 14:40 - 000000998 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Animate 2021.lnk
2021-10-30 07:56 - 2021-10-30 08:16 - 2255205588 _____ C:\Users\tomasek\Downloads\_Getintopc.com_Adobe_Animate_v21.0.6.41649x64.rar
2021-10-30 07:54 - 2021-10-30 07:54 - 002524832 _____ (Adobe Inc.) C:\Users\tomasek\Downloads\Animate_Set-Up.exe
2021-10-29 18:45 - 2021-10-29 18:45 - 009502346 _____ C:\Users\tomasek\Downloads\Phantom fixed 1.8.zip
2021-10-29 18:27 - 2021-10-29 18:27 - 002705872 _____ ( ) C:\Users\tomasek\Downloads\Download of V3pe - Linkvertise Downloader_zlCT-k1.exe
2021-10-28 20:23 - 2021-10-28 20:23 - 000000223 _____ C:\Users\tomasek\Desktop\People Playground.url
2021-10-28 11:19 - 2021-10-28 11:19 - 038615557 _____ C:\Users\tomasek\Downloads\True Powers - Furnox VS Avellom.mp4
2021-10-28 10:53 - 2021-10-28 10:54 - 000194498 _____ C:\Users\tomasek\Downloads\All windows chords.mp4
2021-10-28 10:25 - 2021-10-28 10:25 - 013399395 _____ C:\Users\tomasek\Downloads\The Simpsons - Travel into the future couch gag.mp4
2021-10-28 09:43 - 2021-10-28 09:43 - 008920676 _____ C:\Users\tomasek\Downloads\Gravity Falls_ The Last Mablecorn - The TRUTH Between Bill and Ford.mp4
2021-10-28 09:34 - 2021-10-28 09:34 - 000064211 _____ C:\Users\tomasek\Downloads\Finger Snap Sound Effect.mp4
2021-10-28 09:26 - 2021-10-28 09:26 - 008435870 _____ C:\Users\tomasek\Downloads\Green Screen Teleport Effects _ Vanishing and Reappearing Effects 4.mp4
2021-10-28 09:08 - 2021-10-28 09:08 - 000225525 _____ C:\Users\tomasek\Downloads\Wind - Sound Effect.mp4
2021-10-27 20:11 - 2021-10-27 20:11 - 000121792 _____ C:\Users\tomasek\Downloads\2021-10-09 18-47-23.mp4.sfk
2021-10-27 11:22 - 2021-10-27 11:22 - 000012409 _____ C:\Users\tomasek\Downloads\Sigma5.zip
2021-10-27 09:46 - 2021-10-27 09:46 - 000003856 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2021-10-27 09:46 - 2021-10-27 09:46 - 000003510 _____ C:\Windows\system32\Tasks\AvastUpdateTaskMachineUA
2021-10-27 09:46 - 2021-10-27 09:46 - 000003386 _____ C:\Windows\system32\Tasks\AvastUpdateTaskMachineCore
2021-10-27 09:46 - 2021-10-27 09:46 - 000003272 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2021-10-27 09:46 - 2021-10-27 09:46 - 000002574 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2021-10-27 09:46 - 2021-10-27 09:46 - 000002539 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2021-10-27 09:46 - 2021-10-27 09:46 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2021-10-27 09:44 - 2021-10-27 09:44 - 000002124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2021-10-27 09:44 - 2021-10-27 09:44 - 000002112 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2021-10-27 09:44 - 2021-10-27 09:44 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Avast Software
2021-10-27 09:43 - 2021-10-31 12:28 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software
2021-10-27 09:43 - 2021-10-27 09:43 - 000852240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000557664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000538992 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000372232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000340248 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2021-10-27 09:43 - 2021-10-27 09:43 - 000316632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000250392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000222112 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000214368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000184648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000107864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000099344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000082928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000041352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000035720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000021936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswElam.sys
2021-10-27 09:43 - 2021-10-27 09:43 - 000003990 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2021-10-27 09:43 - 2021-10-27 09:43 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2021-10-27 09:42 - 2021-10-27 09:42 - 000234272 _____ (AVAST Software) C:\Users\tomasek\Downloads\avast_free_antivirus_setup_online (2).exe
2021-10-27 09:42 - 2021-10-27 09:42 - 000000000 ____D C:\Program Files\Avast Software
2021-10-27 09:17 - 2021-10-27 09:18 - 000000010 _____ C:\Users\tomasek\Downloads\ (2).txt
2021-10-24 20:39 - 2021-10-24 20:39 - 006882977 _____ () C:\Users\tomasek\Downloads\TechnicLauncher (1).exe
2021-10-24 15:51 - 2021-10-24 15:51 - 002878145 _____ C:\Users\tomasek\Downloads\[1.8.9] BetterKeystrokes V-1.1.0.jar
2021-10-24 15:40 - 2021-10-24 15:40 - 000000000 ____D C:\Users\tomasek\Downloads\Vape Lite
2021-10-24 15:33 - 2021-10-24 15:35 - 013860096 _____ C:\Users\tomasek\Downloads\Vape_Lite.rar
2021-10-24 13:47 - 2021-10-24 13:47 - 000644096 _____ C:\Users\tomasek\Downloads\icetea (2).exe
2021-10-24 13:33 - 2021-10-24 13:34 - 027484009 _____ C:\Users\tomasek\Downloads\§6Haunted §dPumpkin 16x (700 Sub).zip
2021-10-24 13:26 - 2021-10-28 12:52 - 000002269 _____ C:\Users\tomasek\Desktop\Discord.lnk
2021-10-24 13:26 - 2021-10-28 12:50 - 000000000 ____D C:\Users\tomasek\AppData\Local\Discord
2021-10-24 13:25 - 2021-10-24 13:26 - 070858912 _____ (Discord Inc.) C:\Users\tomasek\Downloads\DiscordSetup.exe
2021-10-24 13:25 - 2021-10-24 13:25 - 000234280 _____ (AVAST Software) C:\Users\tomasek\Downloads\avast_free_antivirus_setup_online (1).exe
2021-10-24 10:39 - 2021-10-24 10:39 - 002556620 _____ (ImpactDevelopment) C:\Users\tomasek\Downloads\ImpactInstaller-0.9.5.exe
2021-10-23 19:24 - 2021-10-23 19:24 - 001418358 _____ C:\Users\tomasek\Downloads\baritone-api-forge-1.2.15.jar
2021-10-23 16:01 - 2021-10-27 20:10 - 120626607 _____ C:\Users\tomasek\Downloads\Sight191.zip
2021-10-23 15:43 - 2021-10-25 15:33 - 000000801 _____ C:\Windows\system32\Drivers\etc\hosts.tmp
2021-10-23 12:27 - 2021-10-27 14:39 - 000000000 ____D C:\Program Files (x86)\Windscribe
2021-10-23 12:27 - 2021-10-23 12:27 - 020761984 _____ (Windscribe Limited) C:\Users\tomasek\Downloads\Windscribe (1).exe
2021-10-23 12:27 - 2021-10-23 12:27 - 000035752 _____ C:\Windows\system32\Drivers\WindscribeSplitTunnel.sys
2021-10-23 12:27 - 2021-10-23 12:27 - 000001144 _____ C:\Users\Public\Desktop\Windscribe.lnk
2021-10-23 12:27 - 2021-10-23 12:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe
2021-10-23 11:41 - 2021-10-23 11:41 - 023575619 _____ C:\Users\tomasek\Downloads\Tenacity.zip
2021-10-23 10:42 - 2021-10-23 10:42 - 000090040 _____ C:\ProgramData\agent.uninstall.1634982167.bdinstall.v2.bin
2021-10-20 17:03 - 2021-10-20 17:03 - 000076753 _____ C:\Users\tomasek\Downloads\LunatriusCore-1.12.2-1.2.0.42-universal.jar
2021-10-20 16:51 - 2021-10-20 16:51 - 000336150 _____ C:\Users\tomasek\Downloads\Schematica-1.12.2-1.8.0.169-universal.jar
2021-10-20 16:17 - 2021-10-20 16:17 - 000477186 _____ C:\Users\tomasek\Downloads\baritone-api-forge-1.6.3.jar
2021-10-20 15:42 - 2021-10-20 15:42 - 000000027 _____ C:\Windows\system32\ctc.json
2021-10-20 15:36 - 2021-10-20 15:36 - 000170352 _____ C:\ProgramData\agent.update.1634740603.bdinstall.v2.bin
2021-10-19 17:29 - 2021-10-23 10:42 - 000000000 ____D C:\storage
2021-10-19 17:29 - 2021-10-19 17:29 - 000000000 _____ C:\Users\tomasek\Desktop\2CFDA16D75AC
2021-10-19 16:41 - 2021-10-19 16:41 - 007809752 ____H C:\Users\tomasek\AppData\Roaming\kNP9HSEdVX.exe
2021-10-19 16:01 - 2019-02-22 10:28 - 000001688 _____ C:\Users\tomasek\Downloads\readme.txt
2021-10-19 16:01 - 2019-02-22 10:26 - 000048844 _____ C:\Users\tomasek\Downloads\History.txt
2021-10-19 16:01 - 2019-02-21 18:00 - 000015360 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\Uninstall.exe
2021-10-19 16:01 - 2019-02-21 17:00 - 001679360 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7z.dll
2021-10-19 16:01 - 2019-02-21 17:00 - 000867840 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7zFM.exe
2021-10-19 16:01 - 2019-02-21 17:00 - 000581632 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7zG.exe
2021-10-19 16:01 - 2019-02-21 17:00 - 000468992 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7z.exe
2021-10-19 16:01 - 2019-02-21 17:00 - 000205824 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7z.sfx
2021-10-19 16:01 - 2019-02-21 17:00 - 000186880 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7zCon.sfx
2021-10-19 16:01 - 2019-02-21 17:00 - 000078336 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7-zip.dll
2021-10-19 16:01 - 2019-02-21 17:00 - 000050688 _____ (Igor Pavlov) C:\Users\tomasek\Downloads\7-zip32.dll
2021-10-19 16:01 - 2019-02-20 12:00 - 000108074 _____ C:\Users\tomasek\Downloads\7-zip.chm
2021-10-19 16:01 - 2019-01-09 11:15 - 000003990 _____ C:\Users\tomasek\Downloads\License.txt
2021-10-19 16:01 - 2018-01-28 10:00 - 000000366 _____ C:\Users\tomasek\Downloads\descript.ion
2021-10-19 14:16 - 2021-10-19 14:16 - 000945944 _____ (www.sordum.org) C:\ProgramData\UpSys.exe
2021-10-19 14:16 - 2021-10-19 14:16 - 000000001 _____ C:\ProgramData\check.txt
2021-10-19 14:16 - 2021-10-19 14:16 - 000000000 ____D C:\ProgramData\MicrosoftNetwork
2021-10-19 12:31 - 2021-10-19 12:39 - 319041918 _____ C:\Users\tomasek\Downloads\videoplayback (4).mp4
2021-10-18 15:19 - 2021-10-18 15:19 - 000000000 ____D C:\Users\tomasek\AppData\Local\Vidmore
2021-10-18 15:18 - 2021-10-18 15:18 - 000000000 ____D C:\Program Files\Vidmore
2021-10-18 14:43 - 2021-10-18 14:43 - 000002000 _____ C:\Users\tomasek\Desktop\DaVinci Resolve.lnk
2021-10-18 14:43 - 2021-10-18 14:43 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2021-10-18 14:42 - 2021-10-18 14:42 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2021-10-16 16:08 - 2021-10-16 16:08 - 000000000 ____D C:\Users\tomasek\Documents\Blackmagic Design
2021-10-16 16:08 - 2021-10-16 16:08 - 000000000 ____D C:\Users\Public\Documents\Blackmagic Design
2021-10-16 16:08 - 2021-10-16 16:08 - 000000000 ____D C:\ProgramData\Reprise
2021-10-16 16:05 - 2021-10-16 16:05 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Blackmagic Design
2021-10-16 16:02 - 2021-10-18 14:43 - 000000000 ____D C:\Program Files\Blackmagic Design
2021-10-16 16:02 - 2021-10-16 16:02 - 000000000 ____D C:\ProgramData\Blackmagic Design
2021-10-16 16:01 - 2021-10-18 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2021-10-16 15:42 - 2021-10-16 15:59 - 2826580316 _____ C:\Users\tomasek\Downloads\_Getintopc.com_Blackmagic_Design_DaVinci_Resolve_Studio_17.3.1.0005x64.rar
2021-10-16 15:16 - 2021-10-16 15:18 - 255095714 _____ C:\Users\tomasek\Downloads\2021-10-09 18-47-23.mp4
2021-10-15 15:39 - 2021-10-15 15:40 - 010794193 _____ C:\Users\tomasek\Downloads\hello.mp4
2021-10-15 14:32 - 2021-10-15 14:56 - 000034176 _____ C:\Users\tomasek\Downloads\Untitled.mp4.sfk
2021-10-15 14:16 - 2021-10-15 14:16 - 000002464 _____ C:\Users\tomasek\Downloads\друг sound effect.mp4.sfk
2021-10-15 14:15 - 2021-10-15 14:15 - 000071270 _____ C:\Users\tomasek\Downloads\друг sound effect.mp4
2021-10-15 14:14 - 2021-10-15 14:14 - 000190395 _____ C:\Users\tomasek\Downloads\videoplayback (2).mp4
2021-10-15 14:14 - 2021-10-15 14:14 - 000018752 _____ C:\Users\tomasek\Downloads\videoplayback (2).mp4.sfk
2021-10-15 13:58 - 2021-10-15 13:58 - 000062956 _____ C:\Users\tomasek\Downloads\Mouse Click - Sound Effect (HD).mp4
2021-10-15 13:58 - 2021-10-15 13:58 - 000004160 _____ C:\Users\tomasek\Downloads\Mouse Click - Sound Effect (HD).mp4.sfk
2021-10-15 13:55 - 2021-10-15 13:55 - 000050348 _____ C:\Users\tomasek\Downloads\videoplayback.m4a
2021-10-15 13:50 - 2021-10-15 13:50 - 000011016 _____ C:\Users\tomasek\Downloads\-7D96D02E.avi.sfk
2021-10-15 13:50 - 2021-10-15 13:50 - 000007920 _____ C:\Users\tomasek\Downloads\-3A83DB9D.avi.sfk
2021-10-15 13:50 - 2021-10-15 13:50 - 000005464 _____ C:\Users\tomasek\Downloads\-B881BF7C.avi.sfk
2021-10-15 13:50 - 2021-10-15 13:50 - 000004768 _____ C:\Users\tomasek\Downloads\-08B167EB.avi.sfk
2021-10-15 13:50 - 2021-10-15 13:50 - 000003720 _____ C:\Users\tomasek\Downloads\-4C317899.avi.sfk
2021-10-15 13:50 - 2021-10-15 13:50 - 000003216 _____ C:\Users\tomasek\Downloads\-B8B56628.avi.sfk
2021-10-15 13:50 - 2021-10-15 13:50 - 000002216 _____ C:\Users\tomasek\Downloads\-02702EAD.avi.sfk
2021-10-14 17:58 - 2021-10-14 17:58 - 018616878 _____ C:\Users\tomasek\Downloads\-874946DB.avi
2021-10-14 17:55 - 2021-10-14 17:55 - 018737972 _____ C:\Users\tomasek\Downloads\-B8B56628.avi
2021-10-14 17:54 - 2021-10-14 17:54 - 015074274 _____ C:\Users\tomasek\Downloads\-02702EAD.avi
2021-10-14 17:53 - 2021-10-14 17:53 - 013634440 _____ C:\Users\tomasek\Downloads\-4C317899.avi
2021-10-14 17:53 - 2021-10-14 17:53 - 000073600 _____ C:\Users\tomasek\Downloads\VID_20211014_153152.mp4.sfk
2021-10-14 17:52 - 2021-10-14 17:52 - 027458420 _____ C:\Users\tomasek\Downloads\-08B167EB.avi
2021-10-14 17:51 - 2021-10-14 17:51 - 000017120 _____ C:\Users\tomasek\Downloads\VID_20211014_153128.mp4.sfk
2021-10-14 17:51 - 2021-10-14 17:51 - 000012992 _____ C:\Users\tomasek\Downloads\VID_20211014_153113.mp4.sfk
2021-10-14 17:49 - 2021-10-14 17:49 - 024713128 _____ C:\Users\tomasek\Downloads\-B881BF7C.avi
2021-10-14 17:48 - 2021-10-14 17:48 - 000010336 _____ C:\Users\tomasek\Downloads\VID_20211014_171443.mp4.sfk
2021-10-14 17:47 - 2021-10-14 17:47 - 036448850 _____ C:\Users\tomasek\Downloads\-3A83DB9D.avi
2021-10-14 17:46 - 2021-10-14 17:46 - 000020896 _____ C:\Users\tomasek\Downloads\VID_20211014_171410.mp4.sfk
2021-10-14 17:40 - 2021-10-14 17:40 - 046808198 _____ C:\Users\tomasek\Downloads\-7D96D02E.avi
2021-10-14 17:40 - 2021-10-14 17:40 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\avidemux
2021-10-14 17:38 - 2021-10-14 17:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2021-10-14 17:38 - 2021-10-14 17:38 - 000000000 ____D C:\Program Files (x86)\Xvid
2021-10-14 17:38 - 2017-12-08 11:01 - 000713216 _____ C:\Windows\system32\xvidcore.dll
2021-10-14 17:38 - 2017-12-08 11:01 - 000251392 _____ C:\Windows\system32\xvidvfw.dll
2021-10-14 17:38 - 2017-12-08 11:01 - 000172032 _____ C:\Windows\system32\xvid.ax
2021-10-14 17:38 - 2017-12-08 11:00 - 000148480 _____ C:\Windows\SysWOW64\xvid.ax
2021-10-14 17:38 - 2017-12-08 10:59 - 000638976 _____ C:\Windows\SysWOW64\xvidcore.dll
2021-10-14 17:38 - 2017-12-08 10:59 - 000235520 _____ C:\Windows\SysWOW64\xvidvfw.dll
2021-10-14 17:36 - 2021-10-14 17:36 - 000065024 _____ C:\Users\tomasek\Downloads\VID_20211014_171313.mp4.sfk
2021-10-14 17:35 - 2021-10-14 17:35 - 000006400 _____ C:\Users\tomasek\Downloads\VID_20211014_171258.mp4.sfk
2021-10-14 17:34 - 2020-12-18 23:48 - 000000000 ____D C:\Users\tomasek\Documents\Vegas Script Menu
2021-10-14 17:33 - 2021-10-14 17:33 - 045443040 _____ C:\Users\tomasek\Downloads\VEGAS DATA Scripts.zip
2021-10-14 17:33 - 2021-10-14 17:33 - 000000000 ____D C:\Users\tomasek\Downloads\VEGAS DATA Scripts
2021-10-14 17:05 - 2021-10-14 17:05 - 000000000 ____D C:\MediaToolkit
2021-10-14 16:17 - 2021-10-14 16:45 - 035579607 _____ C:\Users\tomasek\Downloads\VID_20211014_171410.mp4
2021-10-14 16:17 - 2021-10-14 16:17 - 108102856 _____ C:\Users\tomasek\Downloads\VID_20211014_171313.mp4
2021-10-14 16:17 - 2021-10-14 16:17 - 011381372 _____ C:\Users\tomasek\Downloads\VID_20211014_171258.mp4
2021-10-14 16:17 - 2021-10-14 16:15 - 013430827 _____ C:\Users\tomasek\Downloads\VID_20211014_171502.mp4
2021-10-14 16:17 - 2021-10-14 16:14 - 017811561 _____ C:\Users\tomasek\Downloads\VID_20211014_171443.mp4
2021-10-14 16:11 - 2021-10-14 16:11 - 000000000 ___HD C:\Users\tomasek\AppData\Roaming\elnudcjigllpcatoi
2021-10-14 14:48 - 2021-10-14 14:31 - 022224134 _____ C:\Users\tomasek\Downloads\VID_20211014_153113.mp4
2021-10-14 14:47 - 2021-10-14 14:31 - 029278803 _____ C:\Users\tomasek\Downloads\VID_20211014_153128.mp4
2021-10-14 14:45 - 2021-10-14 14:45 - 000000000 ___HD C:\Users\tomasek\AppData\Roaming\jqihqxsnbgiicdwe
2021-10-14 14:45 - 2021-10-14 14:45 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Aescripts
2021-10-14 14:45 - 2021-10-14 14:45 - 000000000 ____D C:\ProgramData\aescripts
2021-10-14 14:44 - 2019-01-27 20:29 - 000000000 ____D C:\Users\tomasek\Desktop\Datamosh_v1.1.5
2021-10-14 14:41 - 2021-10-14 14:41 - 067092536 _____ (aescripts + aeplugins) C:\Users\tomasek\Downloads\aescripts + aeplugins zxp installer (setup).exe
2021-10-14 14:41 - 2021-10-14 14:41 - 000000000 ____D C:\Users\tomasek\AppData\Local\aescripts.com
2021-10-14 14:41 - 2021-10-14 14:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZXP Installer
2021-10-14 14:41 - 2021-10-14 14:41 - 000000000 ____D C:\Program Files (x86)\aescripts + aeplugins
2021-10-14 14:35 - 2021-10-14 15:31 - 123331305 _____ C:\Users\tomasek\Downloads\VID_20211014_153152.mp4
2021-10-13 17:13 - 2021-10-13 17:13 - 001823296 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-10-13 17:13 - 2021-10-13 17:13 - 001393504 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-10-13 17:13 - 2021-10-13 17:13 - 000706536 _____ C:\Windows\system32\TextShaping.dll
2021-10-13 17:13 - 2021-10-13 17:13 - 000611960 _____ C:\Windows\SysWOW64\TextShaping.dll
2021-10-13 17:13 - 2021-10-13 17:13 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2021-10-13 17:13 - 2021-10-13 17:13 - 000570368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2021-10-13 17:13 - 2021-10-13 17:13 - 000452096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2021-10-13 17:13 - 2021-10-13 17:13 - 000449024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2021-10-13 17:13 - 2021-10-13 17:13 - 000288768 _____ C:\Windows\system32\Windows.Management.InprocObjects.dll
2021-10-13 17:13 - 2021-10-13 17:13 - 000098304 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-10-13 17:13 - 2021-10-13 17:13 - 000011495 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-10-13 17:13 - 2021-10-13 17:13 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2021-10-13 17:13 - 2021-10-13 17:13 - 000005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2021-10-13 16:56 - 2021-10-30 14:39 - 000000000 ____D C:\ProgramData\Voicemod
2021-10-13 16:56 - 2021-10-16 21:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod
2021-10-13 16:56 - 2021-10-16 21:51 - 000000000 ____D C:\Program Files\Voicemod Desktop
2021-10-13 16:56 - 2021-10-13 17:00 - 000000000 ____D C:\Users\tomasek\AppData\Local\Voicemod
2021-10-13 16:56 - 2021-10-13 16:56 - 000000904 _____ C:\Users\Public\Desktop\Voicemod.lnk
2021-10-13 13:52 - 2021-10-13 13:52 - 000000000 ___HD C:\$WinREAgent
2021-10-10 15:03 - 2021-10-10 15:13 - 3260030998 _____ C:\Users\tomasek\Downloads\VID_20211010_115352_2.avi
2021-10-10 15:02 - 2021-10-10 15:02 - 1443618444 _____ C:\Users\tomasek\Downloads\VID_20211010_115352.avi
2021-10-10 11:31 - 2021-10-10 10:55 - 033381442 _____ C:\Users\tomasek\Downloads\VID_20211010_115515.mp4
2021-10-10 10:24 - 2021-10-10 10:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare FilmoraPro
2021-10-10 10:22 - 2021-10-10 10:22 - 001153264 _____ C:\Users\tomasek\Downloads\filmorapro_setup_full5308.exe
2021-10-10 10:06 - 2021-10-10 10:20 - 000000000 ____D C:\ProgramData\Wondershare Filmora
2021-10-10 10:03 - 2021-10-10 10:03 - 001262368 _____ C:\Users\tomasek\Downloads\filmora-idco_setup_full1901 (1).exe
2021-10-08 21:51 - 2021-10-08 21:53 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\HOODLUM
2021-10-08 21:51 - 2021-10-08 21:52 - 000000000 ____D C:\Users\tomasek\AppData\Local\ForzaHorizon4
2021-10-08 21:44 - 2021-10-08 21:44 - 000001000 _____ C:\Users\tomasek\Desktop\Forza Horizon 4.lnk
2021-10-08 13:58 - 2021-10-08 13:58 - 000000320 _____ C:\Users\tomasek\AppData\Local\NjMwNzIwMjIwIDQ.corona
2021-10-06 17:27 - 2021-10-06 17:27 - 000001104 _____ C:\Users\tomasek\Desktop\WinDirStat.lnk
2021-10-06 17:27 - 2021-10-06 17:27 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat
2021-10-06 17:27 - 2021-10-06 17:27 - 000000000 ____D C:\Program Files (x86)\WinDirStat
2021-10-06 17:26 - 2021-10-06 17:27 - 000645729 _____ (WDS Team) C:\Users\tomasek\Downloads\windirstat1_1_2_setup.exe
2021-10-04 14:49 - 2021-10-04 14:49 - 000001152 _____ C:\Users\tomasek\Desktop\blender.lnk
2021-10-04 14:49 - 2021-10-04 14:49 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\blender
2021-10-04 14:49 - 2021-10-04 14:49 - 000000000 ____D C:\Program Files\Blender Foundation
2021-10-04 14:44 - 2021-10-04 14:46 - 191631360 _____ C:\Users\tomasek\Downloads\blender-2.93.4-windows-x64.msi
2021-10-03 12:25 - 2021-10-03 12:25 - 000000000 ____D C:\Users\tomasek\AppData\LocalLow\Free Lives
2021-10-03 12:21 - 2021-10-03 12:25 - 153757017 _____ C:\Users\tomasek\Downloads\STICK IT TO THE STICKMAN (Windows) V0.80A_TheSocialNetwork5.1.zip
2021-10-03 10:10 - 2021-10-03 10:10 - 000000000 ____D C:\Users\tomasek\AppData\Local\xmrig
2021-10-02 21:16 - 2021-10-02 21:16 - 000000000 ____D C:\Users\tomasek\Downloads\Adobe After Effects Auto-Save
2021-10-02 21:15 - 2021-10-02 22:12 - 001096719 _____ C:\Users\tomasek\Downloads\audio.aep
2021-10-02 20:29 - 2021-10-02 20:29 - 000017611 _____ C:\Users\tomasek\Downloads\music-logo-png-2350.html
2021-10-02 20:29 - 2021-10-02 20:29 - 000017611 _____ C:\Users\tomasek\Downloads\music-logo-png-2350 (1).html
2021-10-01 20:57 - 2021-10-01 20:57 - 006911115 _____ ( ) C:\Users\tomasek\Downloads\FFmpeg_v2.2.2_for_Audacity_on_Windows_64bit.exe
2021-10-01 20:57 - 2021-10-01 20:57 - 000000000 ____D C:\Program Files\FFmpeg For Audacity
2021-10-01 20:50 - 2021-10-01 20:51 - 070419184 _____ (Voicemod S.L. ) C:\Users\tomasek\Downloads\VoicemodSetup_2.20.0.1.exe
2021-10-01 15:14 - 2021-10-01 15:14 - 020761984 _____ (Windscribe Limited) C:\Users\tomasek\Downloads\Windscribe.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-31 13:01 - 2021-03-01 22:41 - 000000000 ____D C:\FRST
2021-10-31 12:52 - 2021-09-02 13:41 - 000000000 ____D C:\Users\tomasek\AppData\Local\Lavasoft
2021-10-31 12:52 - 2021-09-02 13:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2021-10-31 12:52 - 2021-09-02 13:40 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Lavasoft
2021-10-31 12:52 - 2021-09-02 13:40 - 000000000 ____D C:\ProgramData\Lavasoft
2021-10-31 12:52 - 2021-09-02 13:40 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2021-10-31 12:51 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-31 12:41 - 2021-08-22 17:18 - 000002258 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC - tomasek
2021-10-31 12:41 - 2021-08-21 17:17 - 000002988 _____ C:\Windows\system32\Tasks\CCleaner Update
2021-10-31 12:41 - 2021-08-21 17:17 - 000002238 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2021-10-31 12:41 - 2021-08-08 22:18 - 000003244 _____ C:\Windows\system32\Tasks\Overwolf Updater Task
2021-10-31 12:41 - 2021-08-06 16:19 - 000003784 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1628263185
2021-10-31 12:41 - 2021-07-08 22:19 - 000002512 _____ C:\Windows\system32\Tasks\Videocard Service
2021-10-31 12:41 - 2021-06-20 16:43 - 000002522 _____ C:\Windows\system32\Tasks\Microsoft Windows Defender Update
2021-10-31 12:41 - 2021-06-01 11:21 - 000002744 _____ C:\Windows\system32\Tasks\WinManager
2021-10-31 12:41 - 2021-04-17 12:32 - 000003402 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-31 12:41 - 2021-04-17 12:32 - 000003178 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-10-31 12:41 - 2021-02-19 21:08 - 000003476 _____ C:\Windows\system32\Tasks\bookingDesktopAppUpdateTaskMachineUA
2021-10-31 12:41 - 2021-02-19 21:08 - 000003252 _____ C:\Windows\system32\Tasks\bookingDesktopAppUpdateTaskMachineCore
2021-10-31 12:41 - 2021-01-21 09:44 - 000003358 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{0087AB00-A545-4531-AFE1-404CF38D4D3A}
2021-10-31 12:41 - 2021-01-05 14:26 - 000003616 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1609853199
2021-10-31 12:41 - 2021-01-01 21:59 - 000002778 _____ C:\Windows\system32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-3JV1PF5-tomasek
2021-10-31 12:41 - 2020-12-27 10:50 - 000003512 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-31 12:41 - 2020-12-27 10:50 - 000003288 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-31 12:41 - 2020-12-16 16:01 - 000003220 _____ C:\Windows\system32\Tasks\Intel PTT EK Recertification
2021-10-31 12:28 - 2021-03-16 10:37 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\discord
2021-10-31 12:19 - 2020-12-24 20:37 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-31 12:13 - 2021-01-16 10:30 - 000000000 ____D C:\Program Files (x86)\Steam
2021-10-31 11:45 - 2020-12-16 15:57 - 000000000 ____D C:\Users\tomasek\AppData\Local\D3DSCache
2021-10-31 11:33 - 2020-12-24 20:26 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\.minecraft
2021-10-31 11:12 - 2021-08-08 22:18 - 000002325 _____ C:\Users\tomasek\Desktop\CurseForge.lnk
2021-10-31 11:09 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2021-10-31 10:59 - 2019-12-07 08:07 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-10-31 10:13 - 2020-12-27 10:51 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-31 10:13 - 2020-12-27 10:51 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-10-31 10:13 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-31 10:12 - 2021-08-21 17:17 - 000000000 ____D C:\Program Files\CCleaner
2021-10-30 14:44 - 2019-12-07 15:41 - 000682184 _____ C:\Windows\system32\perfh005.dat
2021-10-30 14:44 - 2019-12-07 15:41 - 000137000 _____ C:\Windows\system32\perfc005.dat
2021-10-30 14:44 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2021-10-30 14:44 - 2019-12-07 08:12 - 001605602 _____ C:\Windows\system32\PerfStringBackup.INI
2021-10-30 14:41 - 2020-12-26 22:40 - 000000000 ____D C:\Users\tomasek\Documents\Adobe
2021-10-30 14:40 - 2020-12-26 22:37 - 000000000 ____D C:\Program Files\Adobe
2021-10-30 14:40 - 2020-12-26 22:36 - 000000000 ____D C:\Users\tomasek\AppData\Local\Adobe
2021-10-30 14:40 - 2019-12-07 08:10 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Adobe
2021-10-30 14:39 - 2021-03-16 18:33 - 000000000 ____D C:\ProgramData\Package Cache
2021-10-30 14:38 - 2021-07-23 17:33 - 000000000 ____D C:\Users\tomasek\AppData\Local\Overwolf
2021-10-30 14:38 - 2021-03-02 20:18 - 000000000 ____D C:\Users\tomasek\AppData\Local\CrashDumps
2021-10-30 14:38 - 2021-02-03 22:13 - 000000000 ____D C:\Intel
2021-10-30 14:38 - 2021-01-05 14:26 - 000000000 ____D C:\ProgramData\Avast Software
2021-10-30 14:38 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ServiceState
2021-10-30 14:38 - 2019-12-07 08:07 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-30 14:38 - 2019-12-07 08:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-10-30 14:37 - 2020-12-16 15:48 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2021-10-30 14:37 - 2019-12-07 10:03 - 000524288 _____ C:\Windows\system32\config\BBI
2021-10-29 09:21 - 2019-12-07 08:10 - 000000000 ____D C:\Users\tomasek\AppData\Local\Packages
2021-10-28 11:12 - 2020-12-24 20:47 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\audacity
2021-10-27 14:39 - 2021-08-24 14:52 - 000000000 ____D C:\Users\tomasek\Downloads\7-Zip
2021-10-27 12:07 - 2020-12-25 13:26 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\lunarclient
2021-10-27 09:46 - 2021-09-26 12:56 - 000000000 ____D C:\Users\tomasek\AppData\Local\AVAST Software
2021-10-27 09:43 - 2019-12-07 10:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2021-10-27 08:53 - 2021-03-08 17:41 - 000000000 ____D C:\Windows\Minidump
2021-10-26 13:00 - 2020-12-24 20:39 - 000002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-26 13:00 - 2020-12-24 20:39 - 000002166 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-10-25 20:44 - 2021-03-18 12:11 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\.tlauncher
2021-10-25 16:13 - 2021-05-31 17:23 - 000013115 _____ C:\Users\tomasek\AppData\Roaming\.cache~$
2021-10-25 15:27 - 2021-04-15 16:14 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\.technic
2021-10-24 21:10 - 2021-01-03 13:12 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\obs-studio
2021-10-24 13:26 - 2020-12-25 12:43 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2021-10-24 13:26 - 2020-12-25 12:43 - 000000000 ____D C:\Users\tomasek\AppData\Local\SquirrelTemp
2021-10-23 12:59 - 2021-07-23 13:02 - 000001250 _____ C:\Users\tomasek\Desktop\Roblox Studio.lnk
2021-10-23 12:59 - 2021-07-23 13:02 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2021-10-22 17:18 - 2019-12-07 08:10 - 000000000 ____D C:\Users\tomasek
2021-10-22 17:05 - 2021-01-05 14:26 - 000001415 _____ C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2021-10-20 16:06 - 2021-09-02 13:40 - 000800672 _____ (Bitdefender) C:\Windows\system32\Drivers\bddci.sys
2021-10-20 15:42 - 2021-08-13 12:07 - 000000000 ___RD C:\Users\tomasek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google
2021-10-20 15:39 - 2021-08-13 12:07 - 000000000 ____D C:\ProgramData\Data
2021-10-19 17:39 - 2021-05-31 17:12 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Process Hacker 2
2021-10-19 17:29 - 2019-12-07 10:03 - 000065536 _____ C:\Windows\system32\config\ELAM
2021-10-19 16:19 - 2021-08-13 12:07 - 000000000 ____D C:\ProgramData\Systemd
2021-10-19 14:57 - 2019-12-07 08:07 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-10-19 14:29 - 2021-08-15 17:56 - 000002424 _____ C:\Windows\system32\Tasks\services32
2021-10-19 14:16 - 2021-06-20 16:02 - 000000000 ____D C:\Users\tomasek\AppData\Local\Yandex
2021-10-18 15:14 - 2021-08-06 17:00 - 000001608 _____ C:\ProgramData\droidcam-client-options-v2
2021-10-18 15:14 - 2021-08-06 17:00 - 000000373 _____ C:\ProgramData\droidcam-settings
2021-10-16 22:51 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-10-15 21:29 - 2020-12-26 23:37 - 000000000 ____D C:\Users\tomasek\Documents\Adobe After Effects Auto-Save
2021-10-15 13:43 - 2021-08-08 22:18 - 000000000 ____D C:\Program Files (x86)\Overwolf
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\UNP
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\DiagTrack
2021-10-15 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2021-10-15 13:41 - 2019-12-07 08:07 - 000574016 _____ C:\Windows\system32\FNTCACHE.DAT
2021-10-14 17:38 - 2021-03-03 12:29 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Sony
2021-10-13 17:15 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2021-10-13 17:09 - 2020-12-26 22:30 - 000000000 ____D C:\Windows\system32\MRT
2021-10-13 17:08 - 2020-12-26 20:37 - 139806512 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-10-13 17:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\LiveKernelReports
2021-10-11 14:54 - 2021-09-30 17:21 - 000000000 ____D C:\Users\tomasek\AppData\Roaming\Badlion Client
2021-10-10 10:25 - 2021-05-13 17:44 - 000000000 ____D C:\Users\tomasek\AppData\Local\Wondershare
2021-10-10 10:25 - 2021-04-07 15:15 - 000000000 ____D C:\Users\tomasek\AppData\Local\cache
2021-10-10 10:25 - 2021-01-07 14:27 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2021-10-10 10:24 - 2021-01-07 14:28 - 000000000 ____D C:\Program Files\Wondershare
2021-10-10 10:20 - 2021-08-21 18:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2021-10-10 09:28 - 2021-09-30 17:21 - 000000000 ____D C:\Program Files\Badlion Client
2021-10-09 11:01 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\NDF
2021-10-03 14:08 - 2021-01-24 10:56 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-01 20:59 - 2021-01-01 19:17 - 000000000 ____D C:\Users\tomasek\Documents\Audacity
==================== Files in the root of some directories ========
2021-06-20 16:51 - 2021-07-09 13:22 - 000000004 _____ () C:\ProgramData\lock.dat
2021-06-20 16:52 - 2021-07-09 13:22 - 000000004 _____ () C:\ProgramData\rc.dat
2021-06-20 16:51 - 2021-06-20 16:51 - 000000008 _____ () C:\ProgramData\ts.dat
2021-10-19 14:16 - 2021-10-19 14:16 - 000945944 _____ (www.sordum.org) C:\ProgramData\UpSys.exe
2021-05-31 17:23 - 2021-10-25 16:13 - 000013115 _____ () C:\Users\tomasek\AppData\Roaming\.cache~$
2021-02-22 19:07 - 2021-02-23 11:28 - 2257350816 _____ () C:\Users\tomasek\AppData\Roaming\2.txt
2021-02-22 19:07 - 2021-02-23 09:38 - 1570849912 _____ () C:\Users\tomasek\AppData\Roaming\3.txt
2021-02-22 19:07 - 2021-02-22 19:13 - 1437435000 _____ () C:\Users\tomasek\AppData\Roaming\4.txt
2021-02-22 19:07 - 2021-02-22 19:13 - 1437435000 _____ () C:\Users\tomasek\AppData\Roaming\5.txt
2021-02-22 19:07 - 2021-02-22 19:13 - 1437435000 _____ () C:\Users\tomasek\AppData\Roaming\6.txt
2021-02-22 19:07 - 2021-02-22 19:13 - 1437435000 _____ () C:\Users\tomasek\AppData\Roaming\7.txt
2021-02-22 19:07 - 2021-02-22 19:13 - 1437435000 _____ () C:\Users\tomasek\AppData\Roaming\8.txt
2021-02-22 19:07 - 2021-02-22 19:13 - 1437435000 _____ () C:\Users\tomasek\AppData\Roaming\9.txt
2021-03-12 21:14 - 2021-03-12 21:14 - 000000000 _____ () C:\Users\tomasek\AppData\Roaming\90e410a49ea95c18085aaf88ebbf8100.tmp
2021-07-08 23:20 - 2021-07-08 23:20 - 000000064 _____ () C:\Users\tomasek\AppData\Roaming\changzhi_leidian.data
2021-09-26 17:20 - 2021-09-26 17:20 - 000000002 _____ () C:\Users\tomasek\AppData\Roaming\ExplorerFavorites.txt
2021-02-20 08:41 - 2021-02-20 09:04 - 000000209 _____ () C:\Users\tomasek\AppData\Roaming\jjv5conf.json
2021-10-19 16:41 - 2021-10-19 16:41 - 007809752 ____H () C:\Users\tomasek\AppData\Roaming\kNP9HSEdVX.exe
2021-01-03 13:28 - 2021-01-03 13:28 - 000000015 _____ () C:\Users\tomasek\AppData\Roaming\obs-virtualcam.txt
2021-06-17 09:01 - 2021-06-17 09:26 - 000004699 _____ () C:\Users\tomasek\AppData\Roaming\VoiceMeeterDefault.xml
2021-08-25 17:48 - 2021-08-25 17:48 - 000000034 ___SH () C:\Users\tomasek\AppData\Local\BFEBFBFF000906EC92917F88
2020-12-16 15:57 - 2021-04-09 22:33 - 001065984 _____ () C:\Users\tomasek\AppData\Local\file__0.localstorage
2021-02-20 19:58 - 2021-09-02 13:40 - 000000049 _____ () C:\Users\tomasek\AppData\Local\link.txt
2021-10-08 13:58 - 2021-10-08 13:58 - 000000320 _____ () C:\Users\tomasek\AppData\Local\NjMwNzIwMjIwIDQ.corona
2021-02-18 12:50 - 2021-02-19 21:56 - 000016438 _____ () C:\Users\tomasek\AppData\Local\partner.bmp
==================== FLock ==============================
2021-10-19 14:16 C:\ProgramData\MicrosoftNetwork
2021-02-20 00:35 C:\Users\tomasek\AppData\Local\Disk
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Děkuji
Přispějete na provoz fóra?