VIRY.CZ

Ahoj ,prosím o kontrolu logu..PC načítá extra pomalu různé weby hlnavně fb...díky

Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2017-12-18 14:20:31
Microsoft Windows 10 Home
System drive C: has 9 GB (9%) free of 102 GB
Total RAM: 2806 MB (31% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:21:04, on 18/12/2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\Browny02\Brother\BrStMonW.exe
C:\Program Files\ControlCenter4\BrCtrlCntr.exe
C:\Program Files\ControlCenter4\BrCcUxSys.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\DllHost.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe
C:\WINDOWS\system32\DllHost.exe
C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\System32\RuntimeBroker.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Real\RealPlayer\update\realsched.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\System32\smartscreen.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Users\David\Downloads\RSIT.exe
C:\Program Files\trend micro\David.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\backgroundTaskHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gryfis.ic.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [SecurityHealth] %ProgramFiles%\Windows Defender\MSASCuiL.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [DSATray] C:\Program Files\Intel Driver and Support Assistant\DsaTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Syncables] C:\Program Files\syncables\syncables desktop\Syncables.exe
O4 - HKCU\..\Run: [ISM] "C:\Program Files\Common Files\Intel\Intel Software Manager\ism2.exe" --action intray
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3313380613-1349851029-4279355966-1089\..\Run: [OneDriveSetup] C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3313380613-1349851029-4279355966-1089\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files\Free Download Manager\dlall.htm
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{112e9ca8-35f3-4d98-b4fb-4457ac7b5a50}: NameServer = 217.112.162.34,217.112.160.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{112e9ca8-35f3-4d98-b4fb-4457ac7b5a50}: NameServer = 217.112.162.34,217.112.160.1
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Autodata Limited License Service - Autodata Limited - C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall Service (avast! Firewall) - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files\Browny02\BrYNSvc.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: Intel(R) Driver & Support Assistant (DSAService) - Intel - C:\Program Files\Intel Driver and Support Assistant\DSAService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) - Unknown owner - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: RealTimes Desktop Service - RealNetworks, Inc. - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
O23 - Service: RepetierServer - Unknown owner - C:\Program Files\Repetier-Server\bin\RepetierServer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 10501 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core.job - C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA.job - C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 488344]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-11-15 253344]
"ControlCenter4"=C:\Program Files\ControlCenter4\BrCcBoot.exe [2014-06-16 139776]
"BrStsMon00"=C:\Program Files\Browny02\Brother\BrStMonW.exe [2014-05-22 4513792]
"DSATray"=C:\Program Files\Intel Driver and Support Assistant\DsaTray.exe [2017-12-05 131360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2016-10-06 3576512]
"Syncables"=C:\Program Files\syncables\syncables desktop\Syncables.exe [2010-07-19 370480]
"ISM"=C:\Program Files\Common Files\Intel\Intel Software Manager\ism2.exe [2015-10-05 423064]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2017-05-19 7619288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27 1171480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\windows\AsScrPro.exe [2010-09-29 3058304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSPRP]
C:\Program Files\ASUS\APRP\APRP.EXE [2010-09-29 2018032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSWebStorage]
C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CapsHook]
AsusSender.exe C:\Program Files\EeePC\CapsHook\CapsHook.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner.exe [2017-05-19 7619288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]
C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eee Docking]
C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2010-06-10 414384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2017-03-28 1421736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11 107848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19]
C:\Program Files\Google\Chrome\Application\chrome.exe [2017-12-06 1367384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GraphicsSwitch]
AsusSender.exe C:\Program Files\Asus\GraphicsSwitch\GPUStatusMonitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H2O]
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-10-23 385024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyMon]
AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\windows\system32\hkcmd.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotkeyService]
AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotkeyService.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HTC Sync Loader]
C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\windows\system32\igfxtray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [2005-08-11 249856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-08-11 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate]
AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OOBESetup]
C:\Program Files\asus\OOBERegBackup\OOBERegBackup.exe [2009-12-11 334848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\windows\system32\igfxpers.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealDownloader]
C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05 714992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-10-17 11430504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuperHybridEngine]
AsusSender.exe C:\Program Files\EeePC\SHE\SuperHybridEngine.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynAsusAcpi]
C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 83240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1594664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center]
C:\WINDOWS\WindowsMobile\wmdc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk]
C:\windows\INSTAL~1\{AC76B~2\_SC_AC~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
C:\Program Files\MCAFEE~1\385C9A~1.150\SSSCHE~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealPlayer Cloud Service UI.lnk]
C:\Program Files\Real\REALPL~1\RPDS\Bin\RPSYST~1.EXE [2016-02-28 7493904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealTimes.lnk]
C:\Program Files\Real\REALPL~1\RPDS\Bin\RPSYST~1.EXE [2016-02-28 7493904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Jádro Plánovače úloh SolidWorks.lnk]
C:\Program Files\SOLIDW~1\SOLIDW~1\SWSCHE~1\SWBOEN~1.EXE []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\nvinit.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.siren"=sirenacm.dll
"vidc.tscc"=tsccvid.dll
"SENTINEL"=snti386.dll
"VIDC.FMVC"=fmcodec.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open -
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2030-01-01 12:41:24 ----SHD---- C:\Boot
2017-12-18 14:20:31 ----D---- C:\Program Files\trend micro
2017-12-18 14:20:30 ----D---- C:\rsit
2017-12-13 20:41:02 ----D---- C:\Program Files\Arduino
2017-12-13 20:13:10 ----D---- C:\Users\David\AppData\Roaming\Slic3r
2017-12-13 19:48:21 ----D---- C:\WINDOWS\LastGood.Tmp
2017-12-13 19:45:58 ----D---- C:\Users\David\AppData\Roaming\NVIDIA
2017-12-13 19:44:31 ----D---- C:\ProgramData\Repetier-Server
2017-12-13 19:43:41 ----D---- C:\Program Files\Repetier-Server
2017-12-13 19:38:48 ----D---- C:\Program Files\Repetier-Host
2017-12-13 19:06:09 ----A---- C:\setupRepetierHost_1_0_6.exe
2017-12-13 15:39:19 ----D---- C:\AdwCleaner
2017-12-13 14:37:40 ----SHD---- C:\$RECYCLE.BIN
2017-12-12 21:13:17 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2017-12-12 19:37:31 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-12 19:37:25 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-12-12 19:37:19 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-12-12 19:37:17 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-12-12 19:37:13 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-12-12 19:37:08 ----A---- C:\WINDOWS\system32\twinui.dll
2017-12-12 19:37:06 ----A---- C:\WINDOWS\system32\shell32.dll
2017-12-12 19:37:02 ----A---- C:\WINDOWS\system32\StartTileData.dll
2017-12-12 19:36:55 ----A---- C:\WINDOWS\explorer.exe
2017-12-12 19:36:54 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-12-12 19:36:54 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-12-12 19:36:52 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-12 19:36:52 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-12-12 19:36:51 ----A---- C:\WINDOWS\system32\sppwinob.dll
2017-12-12 19:36:50 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-12 19:36:50 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-12 19:36:50 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-12-12 19:36:49 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-12 19:36:49 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-12-12 19:36:49 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-12-12 19:36:48 ----A---- C:\WINDOWS\system32\jscript.dll
2017-12-12 19:36:48 ----A---- C:\WINDOWS\system32\InstallService.dll
2017-12-12 19:36:47 ----A---- C:\WINDOWS\system32\user32.dll
2017-12-12 19:36:47 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-12-12 19:36:47 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-12-12 19:36:46 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-12 19:36:46 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-12-12 19:36:45 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-12 19:36:45 ----A---- C:\WINDOWS\system32\pnidui.dll
2017-12-12 19:36:44 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-12-12 19:36:44 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2017-12-12 19:36:43 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-12 19:36:43 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-12-12 19:36:43 ----A---- C:\WINDOWS\system32\audiodg.exe
2017-12-12 19:36:42 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-12-12 19:36:42 ----A---- C:\WINDOWS\system32\gamingtcui.dll
2017-12-12 19:36:42 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-12-12 19:36:42 ----A---- C:\WINDOWS\system32\ci.dll
2017-12-12 19:36:41 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-12-12 19:36:41 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-12-12 19:36:41 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-12-12 19:36:41 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-12 19:36:40 ----A---- C:\WINDOWS\system32\vac.exe
2017-12-12 19:36:40 ----A---- C:\WINDOWS\system32\scrobj.dll
2017-12-12 19:36:40 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2017-12-12 19:36:40 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2017-12-12 19:36:40 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2017-12-12 19:36:40 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2017-12-12 19:36:39 ----A---- C:\WINDOWS\system32\wimserv.exe
2017-12-12 19:36:39 ----A---- C:\WINDOWS\system32\wimgapi.dll
2017-12-12 19:36:39 ----A---- C:\WINDOWS\system32\sspicli.dll
2017-12-12 19:36:39 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2017-12-12 19:36:38 ----A---- C:\WINDOWS\system32\sppsvc.exe
2017-12-12 19:36:38 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2017-12-12 19:36:38 ----A---- C:\WINDOWS\system32\cscript.exe
2017-12-12 19:36:37 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2017-12-12 19:36:37 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2017-12-12 19:36:37 ----A---- C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-12 19:36:37 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2017-12-12 19:36:37 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2017-12-12 19:36:37 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2017-12-12 19:36:37 ----A---- C:\WINDOWS\system32\drivers\bam.sys
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\wscript.exe
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\msvcrt.dll
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\msIso.dll
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\edgeIso.dll
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\bcrypt.dll
2017-12-12 19:36:36 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-12 19:36:35 ----A---- C:\WINDOWS\system32\usercpl.dll
2017-12-12 19:36:35 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-12-12 19:36:35 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-12 19:36:35 ----A---- C:\WINDOWS\system32\mispace.dll
2017-12-12 19:36:34 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-12 19:36:34 ----A---- C:\WINDOWS\system32\sppcext.dll
2017-12-12 19:36:34 ----A---- C:\WINDOWS\system32\slcext.dll
2017-12-12 19:36:34 ----A---- C:\WINDOWS\system32\itss.dll
2017-12-12 19:36:34 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-12-12 19:36:34 ----A---- C:\WINDOWS\system32\FSClient.dll
2017-12-12 19:36:34 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\schedsvc.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\PushToInstall.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\lsasrv.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\hascsp.dll
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2017-12-12 19:36:33 ----A---- C:\WINDOWS\system32\batmeter.dll
2017-12-12 19:36:32 ----A---- C:\WINDOWS\system32\tzres.dll
2017-12-12 19:36:32 ----A---- C:\WINDOWS\system32\storagewmi.dll
2017-12-12 18:15:49 ----A---- C:\WINDOWS\system32\drivers\AmUStor.sys
2017-12-12 18:15:49 ----A---- C:\WINDOWS\system32\AmUStor2.dll
2017-12-12 18:15:49 ----A---- C:\WINDOWS\system32\AmUStor.ini
2017-12-12 18:06:37 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2017-12-12 18:06:37 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2017-12-12 18:06:36 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2017-12-12 18:06:36 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2017-12-12 18:06:36 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2017-12-12 18:06:35 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2017-12-12 18:06:35 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2017-12-12 18:06:28 ----D---- C:\Program Files\Microsoft XNA
2017-12-11 19:22:10 ----A---- C:\WINDOWS\system32\drivers\L1C63x86.sys
2017-12-11 19:20:52 ----A---- C:\WINDOWS\system32\RtCamX.dll
2017-12-11 19:20:52 ----A---- C:\WINDOWS\system32\drivers\rtsuvc.sys
2017-12-11 19:20:51 ----A---- C:\WINDOWS\RtCamU.exe
2017-12-11 16:31:29 ----D---- C:\ProgramData\ProductData
2017-12-11 16:31:24 ----D---- C:\WINDOWS\IObit
2017-12-11 16:22:50 ----D---- C:\ProgramData\IObit
2017-12-11 16:22:50 ----A---- C:\WINDOWS\system32\drivers\HWiNFO32.SYS
2017-12-11 16:22:07 ----D---- C:\Users\David\AppData\Roaming\IObit
2017-12-10 00:42:00 ----D---- C:\ProgramData\Microsoft OneDrive
2017-12-10 00:01:02 ----ASH---- C:\hiberfil.sys
2017-12-09 23:43:03 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2017-12-09 23:38:56 ----D---- C:\ProgramData\USOShared
2017-12-09 23:36:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-09 23:35:16 ----A---- C:\WINDOWS\system32\nvStreaming.exe
2017-12-09 23:34:39 ----A---- C:\WINDOWS\system32\OpenCL.dll
2017-12-09 23:29:28 ----AS---- C:\WINDOWS\bootstat.dat
2017-12-09 23:28:02 ----D---- C:\WINDOWS\Prefetch
2017-12-09 23:25:38 ----D---- C:\WINDOWS\system32\SleepStudy
2017-12-09 23:25:32 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-09 23:25:30 ----ASH---- C:\swapfile.sys
2017-12-09 23:06:06 ----D---- C:\Windows.old
2017-12-09 22:26:54 ----D---- C:\Program Files\Common Files\SpeechEngines
2017-12-09 22:14:02 ----D---- C:\WINDOWS\system32\Microsoft
2017-12-09 22:14:02 ----D---- C:\WINDOWS\ServiceProfiles
2017-12-09 22:01:13 ----A---- C:\WINDOWS\system32\msvproc.dll
2017-12-09 22:01:13 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-12-09 22:01:13 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-09 22:01:13 ----A---- C:\WINDOWS\system32\evr.dll
2017-12-09 22:01:12 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-12-09 22:01:12 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2017-12-09 22:01:12 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\provtool.exe
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2017-12-09 22:01:11 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\winload.exe
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\wininet.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\winhttp.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\usocore.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\umpo.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\SRH.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\samsrv.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\d3d9.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\apphelp.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\actxprxy.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\acppage.dll
2017-12-09 22:00:54 ----A---- C:\WINDOWS\system32\aadjcsp.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\usoapi.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\services.exe
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\DictationManager.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\AcLayers.dll
2017-12-09 22:00:53 ----A---- C:\WINDOWS\system32\AcGenral.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\WwaApi.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\wuauclt.exe
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\smartscreenps.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\smartscreen.exe
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\msxml6.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\ISM.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\halmacpi.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\hal.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\dxgi.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\d3d9on12.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\d3d11.dll
2017-12-09 22:00:52 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\SpatializerApo.dll
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-09 22:00:51 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-09 21:35:54 ----D---- C:\WINDOWS\system32\XPSViewer
2017-12-09 21:35:54 ----D---- C:\WINDOWS\system32\msmq
2017-12-09 21:35:53 ----D---- C:\WINDOWS\system32\BestPractices
2017-12-09 21:35:48 ----D---- C:\Program Files\Reference Assemblies
2017-12-09 21:35:48 ----D---- C:\Program Files\MSBuild
2017-12-09 21:35:48 ----D---- C:\inetpub
2017-12-09 21:32:51 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2017-12-09 21:32:50 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-12-09 21:32:49 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-12-09 21:30:29 ----A---- C:\WINDOWS\system32\prm0009.dll
2017-12-09 21:30:27 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2017-12-09 21:30:27 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2017-12-09 20:29:56 ----ASH---- C:\pagefile.sys
2017-12-09 19:14:56 ----DC---- C:\WINDOWS\Panther
2017-12-09 18:05:59 ----D---- C:\Windows10Upgrade
2017-12-09 16:10:21 ----D---- C:\WINDOWS\SoftwareDistribution
2017-12-09 13:43:56 ----D---- C:\Program Files\Intel Corporation
2017-12-09 10:53:34 ----D---- C:\ProgramData\Intel Corporation
2017-12-09 10:53:30 ----D---- C:\Program Files\Common Files\Intel
2017-12-09 09:41:02 ----D---- C:\ProgramData\Intel
2017-12-09 09:40:56 ----D---- C:\Program Files\Intel Driver and Support Assistant
2017-12-09 09:19:59 ----A---- C:\WINDOWS\system32\drivers\iaStor.sys
2017-12-08 22:33:07 ----A---- C:\WINDOWS\system32\athw.sys
2017-12-08 19:20:10 ----A---- C:\WINDOWS\system32\drivers\aswNetSec.sys
2017-12-08 19:16:19 ----A---- C:\WINDOWS\system32\aswBoot.exe
2017-12-08 19:09:40 ----D---- C:\Program Files\Common Files\Avast Software
2017-11-20 20:59:00 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2017-11-20 20:58:56 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys

======List of files/folders modified in the last 1 month======

2017-12-18 14:20:31 ----RD---- C:\Program Files
2017-12-18 14:19:36 ----D---- C:\WINDOWS\system32\sru
2017-12-18 14:19:24 ----D---- C:\WINDOWS\Temp
2017-12-18 14:19:10 ----D---- C:\WINDOWS\system32\Tasks
2017-12-16 14:06:55 ----HD---- C:\Program Files\WindowsApps
2017-12-16 14:06:25 ----D---- C:\WINDOWS\AppReadiness
2017-12-16 14:05:49 ----D---- C:\WINDOWS\DeliveryOptimization
2017-12-14 20:06:10 ----RD---- C:\WINDOWS\Microsoft.NET
2017-12-13 21:45:31 ----D---- C:\ProgramData\Oracle
2017-12-13 20:45:14 ----D---- C:\WINDOWS\INF
2017-12-13 20:44:34 ----D---- C:\WINDOWS\system32\DriverStore
2017-12-13 20:44:34 ----D---- C:\WINDOWS\system32\CatRoot
2017-12-13 20:44:09 ----D---- C:\WINDOWS\system32\catroot2
2017-12-13 20:43:51 ----D---- C:\Windows
2017-12-13 20:03:01 ----D---- C:\ProgramData\NVIDIA
2017-12-13 20:02:53 ----D---- C:\WINDOWS\system32\drivers
2017-12-13 19:44:31 ----HD---- C:\ProgramData
2017-12-13 19:15:47 ----D---- C:\WINDOWS\system32\NDF
2017-12-13 18:48:16 ----D---- C:\WINDOWS\System32
2017-12-13 18:48:04 ----SHD---- C:\System Volume Information
2017-12-13 15:56:47 ----D---- C:\WINDOWS\system32\WDI
2017-12-13 14:49:06 ----D---- C:\WINDOWS\Logs
2017-12-12 21:13:26 ----D---- C:\WINDOWS\system32\config
2017-12-12 21:13:19 ----D---- C:\WINDOWS\WinSxS
2017-12-12 21:09:36 ----D---- C:\WINDOWS\TextInput
2017-12-12 21:09:35 ----D---- C:\WINDOWS\system32\oobe
2017-12-12 21:09:35 ----D---- C:\WINDOWS\system32\migration
2017-12-12 21:09:35 ----D---- C:\WINDOWS\system32\Dism
2017-12-12 21:09:35 ----D---- C:\WINDOWS\system32\appraiser
2017-12-12 21:09:33 ----D---- C:\WINDOWS\AppPatch
2017-12-12 20:13:43 ----D---- C:\WINDOWS\CbsTemp
2017-12-12 20:11:28 ----D---- C:\WINDOWS\system32\MRT
2017-12-12 19:48:28 ----D---- C:\WINDOWS\debug
2017-12-12 19:48:12 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-12 19:47:52 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-12-12 19:47:31 ----SHD---- C:\WINDOWS\Installer
2017-12-12 19:47:29 ----D---- C:\ProgramData\Microsoft Help
2017-12-12 18:11:31 ----D---- C:\Program Files\NVIDIA Corporation
2017-12-12 18:08:51 ----D---- C:\WINDOWS\Tasks
2017-12-12 18:08:43 ----D---- C:\WINDOWS\system32\Macromed
2017-12-12 18:07:42 ----D---- C:\ProgramData\Package Cache
2017-12-12 18:06:38 ----RD---- C:\WINDOWS\assembly
2017-12-12 18:06:28 ----D---- C:\Program Files\Common Files\microsoft shared
2017-12-11 19:21:02 ----D---- C:\WINDOWS\twain_32
2017-12-11 17:53:05 ----D---- C:\WINDOWS\system32\restore
2017-12-10 08:55:52 ----D---- C:\ProgramData\FLEXnet
2017-12-10 07:50:26 ----D---- C:\WINDOWS\appcompat
2017-12-10 00:36:38 ----HD---- C:\$GetCurrent
2017-12-10 00:35:04 ----D---- C:\Program Files\windows nt
2017-12-10 00:34:02 ----D---- C:\WINDOWS\system32\LogFiles
2017-12-10 00:18:31 ----D---- C:\WINDOWS\Registration
2017-12-10 00:15:43 ----SD---- C:\ProgramData\Microsoft
2017-12-10 00:15:12 ----D---- C:\WINDOWS\media
2017-12-10 00:14:55 ----D---- C:\WINDOWS\system32\wbem
2017-12-09 23:53:11 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-12-09 23:43:03 ----RD---- C:\Users
2017-12-09 23:38:56 ----D---- C:\ProgramData\USOPrivate
2017-12-09 23:36:14 ----SHD---- C:\Recovery
2017-12-09 23:36:12 ----D---- C:\WINDOWS\system32\Sysprep
2017-12-09 23:35:59 ----D---- C:\WINDOWS\system32\CodeIntegrity
2017-12-09 23:30:39 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-12-09 23:19:15 ----D---- C:\WINDOWS\system32\Recovery
2017-12-09 23:07:36 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2017-12-09 23:07:35 ----RSD---- C:\WINDOWS\Fonts
2017-12-09 23:07:35 ----D---- C:\WINDOWS\system32\WinBioDatabase
2017-12-09 23:07:35 ----D---- C:\WINDOWS\system32\drivers\etc
2017-12-09 23:07:33 ----D---- C:\WINDOWS\system32\zh-HK
2017-12-09 23:07:33 ----D---- C:\WINDOWS\system32\WinFast
2017-12-09 23:07:33 ----D---- C:\WINDOWS\system32\vbox
2017-12-09 23:07:33 ----D---- C:\WINDOWS\system32\SRSLabs
2017-12-09 23:07:33 ----D---- C:\WINDOWS\system32\SPReview
2017-12-09 23:07:32 ----D---- C:\WINDOWS\system32\spool
2017-12-09 23:07:30 ----D---- C:\WINDOWS\system32\RTCOM
2017-12-09 23:07:30 ----D---- C:\WINDOWS\system32\RNBOSENT
2017-12-09 23:07:30 ----D---- C:\WINDOWS\system32\Predator Software
2017-12-09 23:07:29 ----D---- C:\WINDOWS\system32\OEM
2017-12-09 23:07:29 ----D---- C:\WINDOWS\system32\Lang
2017-12-09 23:07:29 ----D---- C:\WINDOWS\system32\IME
2017-12-09 23:07:29 ----D---- C:\WINDOWS\system32\EventProviders
2017-12-09 23:07:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2017-12-09 23:07:28 ----D---- C:\WINDOWS\system32\en-US
2017-12-09 23:07:28 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2017-12-09 23:07:28 ----D---- C:\WINDOWS\system32\cs-CZ
2017-12-09 23:07:28 ----D---- C:\WINDOWS\system32\Catroot2.old
2017-12-09 23:07:28 ----D---- C:\WINDOWS\system32\Atheros_L1e
2017-12-09 23:07:28 ----D---- C:\WINDOWS\system32\Adobe
2017-12-09 23:07:27 ----D---- C:\WINDOWS\system32\17082502_stream
2017-12-09 23:07:24 ----D---- C:\WINDOWS\System
2017-12-09 23:07:24 ----D---- C:\WINDOWS\schemas
2017-12-09 23:07:24 ----D---- C:\WINDOWS\ShellNew
2017-12-09 23:07:24 ----D---- C:\WINDOWS\PolicyDefinitions
2017-12-09 23:07:17 ----D---- C:\WINDOWS\Help
2017-12-09 23:07:17 ----D---- C:\WINDOWS\Cursors
2017-12-09 23:07:17 ----D---- C:\WINDOWS\cs
2017-12-09 23:07:14 ----SHD---- C:\Program Files\Windows Sidebar
2017-12-09 23:07:14 ----AD---- C:\Program Files\UNP
2017-12-09 23:07:13 ----D---- C:\Program Files\Microsoft.NET
2017-12-09 23:07:13 ----D---- C:\Program Files\Internet Explorer
2017-12-09 23:07:13 ----D---- C:\Program Files\Intel
2017-12-09 23:07:13 ----D---- C:\Program Files\Common Files\system
2017-12-09 23:07:13 ----D---- C:\Program Files\Common Files
2017-12-09 23:05:53 ----D---- C:\WINDOWS\Setup
2017-12-09 22:28:25 ----D---- C:\WINDOWS\ehome
2017-12-09 22:27:13 ----D---- C:\Program Files\Windows Mail
2017-12-09 22:27:07 ----D---- C:\Program Files\Synaptics
2017-12-09 22:27:00 ----D---- C:\Program Files\Microsoft Games
2017-12-09 22:04:49 ----D---- C:\WINDOWS\system32\WinMetadata
2017-12-09 22:04:49 ----D---- C:\WINDOWS\system32\Boot
2017-12-09 22:04:48 ----D---- C:\WINDOWS\ShellExperiences
2017-12-09 22:04:48 ----D---- C:\WINDOWS\Provisioning
2017-12-09 22:04:48 ----D---- C:\Program Files\Windows Defender
2017-12-09 22:04:46 ----D---- C:\PerfLogs
2017-12-09 21:35:54 ----D---- C:\WINDOWS\system32\MUI
2017-12-09 21:35:54 ----D---- C:\WINDOWS\system32\inetsrv
2017-12-09 21:35:29 ----A---- C:\WINDOWS\system32\mqsnap.dll
2017-12-09 21:35:29 ----A---- C:\WINDOWS\system32\mqcertui.dll
2017-12-09 21:35:24 ----A---- C:\WINDOWS\system32\mqqm.dll
2017-12-09 21:35:24 ----A---- C:\WINDOWS\system32\mqoa.dll
2017-12-09 21:35:18 ----A---- C:\WINDOWS\system32\mqsvc.exe
2017-12-09 21:35:18 ----A---- C:\WINDOWS\system32\mqbkup.exe
2017-12-09 21:35:13 ----A---- C:\WINDOWS\system32\wamregps.dll
2017-12-09 21:35:13 ----A---- C:\WINDOWS\system32\iisrstap.dll
2017-12-09 21:35:13 ----A---- C:\WINDOWS\system32\iisreset.exe
2017-12-09 21:35:13 ----A---- C:\WINDOWS\system32\admwprox.dll
2017-12-09 21:35:10 ----A---- C:\WINDOWS\system32\mqrt.dll
2017-12-09 21:35:06 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2017-12-09 21:35:04 ----A---- C:\WINDOWS\system32\iisRtl.dll
2017-12-09 21:35:04 ----A---- C:\WINDOWS\system32\cngkeyhelper.dll
2017-12-09 21:35:04 ----A---- C:\WINDOWS\system32\ahadmin.dll
2017-12-09 21:35:03 ----A---- C:\WINDOWS\system32\mqutil.dll
2017-12-09 21:30:36 ----D---- C:\WINDOWS\OCR
2017-12-09 20:22:42 ----RASH---- C:\BOOTSECT.BAK
2017-12-09 19:14:46 ----A---- C:\WINDOWS\progress.ini
2017-12-08 20:03:58 ----AD---- C:\Program Files\Mozilla Firefox
2017-12-08 20:01:06 ----D---- C:\Program Files\Java
2017-12-08 19:58:16 ----AD---- C:\Program Files\Common Files\Adobe AIR
2017-12-02 16:44:00 ----AD---- C:\Program Files\Garmin
2017-12-01 16:42:16 ----D---- C:\WINDOWS\SoftwareDistribution.old
2017-11-20 21:14:30 ----D---- C:\Users\David\AppData\Roaming\MPC-HC
2017-11-20 21:13:16 ----AD---- C:\Program Files\Opera
2017-11-20 21:13:09 ----D---- C:\Users\David\AppData\Roaming\Opera Software
2017-11-20 21:12:03 ----D---- C:\Program Files\ASUS
2017-11-20 21:00:00 ----D---- C:\ProgramData\Malwarebytes
2017-11-20 20:57:28 ----D---- C:\Program Files\HTC
2017-11-20 20:54:51 ----D---- C:\Users\David\AppData\Roaming\HTC
2017-11-20 20:54:51 ----D---- C:\ProgramData\HTC
2017-11-20 20:53:48 ----HD---- C:\Program Files\InstallShield Installation Information
2017-11-20 20:53:39 ----D---- C:\Program Files\CyberLink
2017-11-20 20:52:40 ----AD---- C:\Program Files\Guitar Pro 5
2017-11-20 20:51:20 ----D---- C:\eLearn
2017-11-20 20:48:48 ----D---- C:\AsusVibeData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [2017-11-15 157408]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [2017-11-15 276728]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [2017-11-15 50376]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2017-11-15 70864]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2017-11-15 298360]
R0 iaStor;@oem4.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2009-06-04 330264]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-09-29 43552]
R1 AsUpIO;AsUpIO; C:\WINDOWS\system32\drivers\AsUpIO.sys [2010-03-31 11520]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2017-11-15 157176]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [2017-11-15 255616]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2017-09-18 39784]
R1 aswNetSec;aswNetSec; C:\WINDOWS\system32\drivers\aswNetSec.sys [2017-12-08 420024]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2017-11-15 99560]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2017-11-15 783136]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2017-11-15 388760]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2017-12-07 49560]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-09-29 45056]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-09-29 7680]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\system32\drivers\HWiNFO32.SYS [2017-12-11 23840]
R1 NetworkX;NetworkX; C:\WINDOWS\system32\ckldrv.sys [2006-01-10 31846]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2017-11-15 124952]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2017-11-15 150848]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-09-29 308224]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-09-29 36864]
R2 Sentinel;Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [2002-09-25 76288]
R3 adatadrv;@oem17.inf,%vusb.SVCDESC%;Autodata Protection Service; C:\WINDOWS\System32\drivers\adatadrv.sys [2009-07-01 762112]
R3 AmUStor;@oem49.inf,%AmUStor.SvcDesc%;AM USB Stroage Driver; C:\WINDOWS\system32\drivers\AmUStor.SYS [2017-12-12 75416]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63.sys [2017-09-29 6811648]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-09-29 51608]
R3 CLEDX;@oem23.inf,%SvcDesc%;Team H2O CLEDX service; C:\WINDOWS\System32\drivers\cledx.sys [2005-05-09 33792]
R3 dtlitescsibus;@oem3.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [2016-10-12 26168]
R3 dtliteusbbus;@oem40.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [2016-03-03 40504]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd32.sys [2012-03-23 4815872]
R3 kbfiltr;@oem38.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2009-07-20 13880]
R3 L1C;@oem47.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x86.sys [2017-12-11 130632]
R3 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2017-12-09 127488]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-12-09 10720832]
R3 rtsuvc;@oem46.inf,%rtsuvc.ServiceDisplayName%;Realtek USB2.0 PC Camera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2017-12-11 7091416]
R3 SNTNLUSB;@oem35.inf,%SNTNLUSB.SvcDesc%;SafeNet USB SuperPro/UltraPro/HardwareKey; C:\WINDOWS\System32\drivers\SNTNLUSB.SYS [2009-09-17 38376]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-09-29 102808]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-09-29 84376]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-09-29 56728]
S0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2016-12-09 44728]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-09-29 51608]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-09-29 54680]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2017-09-29 32152]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-09-29 13312]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-09-29 13312]
S3 aswHdsKe;aswHdsKe; \??\C:\WINDOWS\system32\drivers\aswHdsKe.sys [2017-11-03 84032]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2017-11-15 42848]
S3 AXIOM;Service for M-Audio Axiom; C:\WINDOWS\system32\DRIVERS\MAudioAxiom.sys [2010-02-19 115336]
S3 azvusb;Virtual USB Hub; C:\WINDOWS\system32\DRIVERS\azvusb.sys [2009-08-24 44544]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-09-29 27136]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-09-29 98816]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-09-29 17408]
S3 GPIO;@iaiogpio.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\WINDOWS\System32\drivers\iaiogpio.sys [2017-09-29 22016]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-09-29 38296]
S3 htcnprot;@oem18.inf,%NDISPROT_Desc%;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2012-12-07 23040]
S3 HtcVCom32;HTC Diagnostic Port; C:\WINDOWS\system32\DRIVERS\HtcVComV32.sys [2009-10-27 105984]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2017-09-29 18944]
S3 CH341SER;CH341SER; C:\WINDOWS\System32\Drivers\CH341SER.SYS [2014-11-08 39696]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-09-29 28672]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-09-29 74240]
S3 iaioi2c;@iaioi2c.inf,%Driver_Service.Desc%;Intel(R) Atom(TM) Processor I2C Controller Service; C:\WINDOWS\System32\drivers\iaioi2c.sys [2017-09-29 57856]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-09-29 30208]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHDA.sys [2011-10-18 3546664]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2017-09-29 19456]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-09-29 92672]
S3 IT9135BDA;IT9135 BDA Devices; C:\WINDOWS\System32\Drivers\IT9135BDA.sys [2010-02-03 94336]
S3 Mach3;Mach3 Pulseing Service; C:\WINDOWS\System32\Drivers\Mach3.sys [2005-10-16 103040]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-09-29 405024]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-09-29 42904]
S3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [2017-11-20 221112]
S3 MBAMWebProtection;MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [2017-11-20 75712]
S3 mod7700;DiBcom DIB7700 based TV tuner device; C:\WINDOWS\System32\Drivers\dvb7700all.sys [2009-10-21 575744]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-09-29 91648]
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2012-01-08 47360]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2017-09-29 13312]
S3 RDID1105;SD-50; C:\WINDOWS\system32\Drivers\RDWM1105.SYS [2015-07-23 156416]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2017-09-29 71680]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
R2 Autodata Limited License Service;Autodata Limited License Service; C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [2011-10-06 72704]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-11-15 281416]
R2 avast! Firewall;Avast Firewall Service; C:\Program Files\AVAST Software\Avast\afwServ.exe [2017-12-08 332368]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
R2 CDPUserSvc_460fc;CDPUserSvc_460fc; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
R2 Crypkey License;Crypkey License; C:\WINDOWS\system32\crypserv.exe [2006-09-22 69632]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
R2 DSAService;Intel(R) Driver & Support Assistant; C:\Program Files\Intel Driver and Support Assistant\DSAService.exe [2017-12-05 22304]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2017-12-09 24576]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-09-29 136312]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-09-29 136312]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-11-14 677312]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-11 2009704]
R2 OneSyncSvc_460fc;OneSyncSvc_460fc; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 RealTimes Desktop Service;RealTimes Desktop Service; C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [2016-02-28 1095440]
R2 RepetierServer;RepetierServer; C:\Program Files\Repetier-Server\bin\RepetierServer.exe [2017-08-07 6129000]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-12-09 414824]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2017-11-15 5904136]
R3 BrYNSvc;BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [2013-09-25 282112]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2017-09-29 44520]
S2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-09-29 136312]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2017-09-29 44520]
S2 RealPlayerUpdateSvc;RealPlayer Update Service; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [2016-02-03 32544]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-09-29 47224]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 DevicesFlowUserSvc_460fc;DevicesFlowUserSvc_460fc; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-09-29 64000]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2016-10-06 1135808]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2015-09-09 867080]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2017-09-22 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 Garmin Device Interaction Service;Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [2017-03-28 1099280]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 MessagingService_460fc;MessagingService_460fc; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 PimIndexMaintenanceSvc_460fc;PimIndexMaintenanceSvc_460fc; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 PrintWorkflowUserSvc_460fc;PrintWorkflowUserSvc_460fc; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-09-29 876544]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-09-29 44520]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-11-10 661504]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-12-12 272384]
S4 AsusService;Asus Launcher Service; C:\Windows\System32\AsusService.exe [2009-08-19 219136]
S4 AxiomAudioDevMon;Axiom Audio Device Monitor; C:\Program Files\M-Audio\Axiom\AudioDevMon.exe [2010-02-19 1632776]
S4 msvsmon80;Visual Studio 2005 Remote Debugger; C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2005-09-23 2799808]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 44520]

-----------------EOF-----------------

Ahoj,
Poprosim o vlozeni logu FRST.txt a Addition.txt z aplikace FRSTLauncher.exe (Farbar Recovery Scan Tool). Navod naleznes zde: https://forum.viry.cz/viewtopic.php?f=13&t=152707
Obsah Additional.txt muzes vlozit rovnou sem do vlakna.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-12-2017
Ran by David (administrator) on DAVID-PC (18-12-2017 15:11:38)
Running from C:\Users\David\Downloads
Loaded Profiles: David & UpdatusUser (Available Profiles: David & UpdatusUser & DefaultAppPool)
Platform: Microsoft Windows 10 Home Version 1709 16299.125 (X86) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Autodata Limited) C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(Intel) C:\Program Files\Intel Driver and Support Assistant\DSAService.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files\Repetier-Server\bin\RepetierServer.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [488344 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-15] (AVAST Software)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)
HKLM\...\Run: [DSATray] => C:\Program Files\Intel Driver and Support Assistant\DsaTray.exe [131360 2017-12-05] (Intel)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [3576512 2016-10-06] (Disc Soft Ltd)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [Syncables] => C:\Program Files\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [ISM] => C:\Program Files\Common Files\Intel\Intel Software Manager\ism2.exe [423064 2015-10-05] (Intel Corporation)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7619288 2017-05-19] (Piriform Ltd)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1089\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2017-09-29] (Microsoft Corporation)
AppInit_DLLs: C:\WINDOWS\system32\nvinit.dll => C:\WINDOWS\system32\nvinit.dll [158584 2016-12-09] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{112e9ca8-35f3-4d98-b4fb-4457ac7b5a50}: [NameServer] 217.112.162.34,217.112.160.1
Tcpip\..\Interfaces\{112e9ca8-35f3-4d98-b4fb-4457ac7b5a50}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{35a1075e-23d0-4d38-8129-96630e6297af}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{da395415-484d-4055-98b9-e8c3c94ee299}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gryfis.ic.cz/
Toolbar: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\TomTom\HOME\Profiles\4l66o2pu.default [2015-07-06]
FF Extension: (No Name) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default [2017-12-18]
FF Homepage: Mozilla\Firefox\Profiles\jx13vllr.default -> hxxps://www.seznam.cz/?clid=22668
FF NewTab: Mozilla\Firefox\Profiles\jx13vllr.default -> about:newtab
FF NetworkProxy: Mozilla\Firefox\Profiles\jx13vllr.default -> backup.ftp", "174.122.55.246"
FF Extension: (jid1dgnIBwQga0SIBwjetpack) - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack [2015-01-04] [Legacy] [not signed]
FF SearchPlugin: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default\searchplugins\google-avast.xml [2015-02-09]
FF SearchPlugin: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default\searchplugins\seznam-avast.xml [2015-02-15]
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-09-18] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-12-12] ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @Musicnotes.com/Musicnotes Viewer,version=1.18.9 -> C:\Program Files\Musicnotes\npmusicn.dll [2010-09-23] (Musicnotes, Inc.)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.3.100 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [2016-02-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-09-18] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-09-18] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.3.100 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll [2016-02-28] (RealPlayer)
FF Plugin: @Sibelius.com/Scorch Plugin,version=6.2.0.88 -> C:\Program Files\Musicnotes\npsibelius.dll [2010-04-08] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3313380613-1349851029-4279355966-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\David\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [No File]
FF Plugin HKU\S-1-5-21-3313380613-1349851029-4279355966-1001: @tools.google.com/Google Update;version=3 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3313380613-1349851029-4279355966-1001: @tools.google.com/Google Update;version=9 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default [2017-12-18]
CHR Extension: (Překladač Google) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-26]
CHR Extension: (iVysilani pro Chromecast) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\andeafimjbobmfgmlhhbgfdlfhppdgeb [2017-02-26]
CHR Extension: (Splendid) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdfkbdkkfmmckaadapdipihjfaacnkgd [2016-09-14]
CHR Extension: (OneTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2017-02-26]
CHR Extension: (VS Launcher) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmhicdplfejcchpmimlnohfadpimciaa [2015-09-17]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2017-10-26]
CHR Extension: (Adobe Acrobat) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-05]
CHR Extension: (Avast Passwords) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2017-12-08]
CHR Extension: (Hudba Google Play) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2017-12-08]
CHR Extension: (Instant Multilingual PDF/HTML/TXT Translator) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnhmalionocfajdkpnlhmekghnmbii [2017-12-12]
CHR Extension: (Mate Translate – translator, dictionary) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2017-12-18]
CHR Extension: (PlayTo for Chromecast™) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\jngkenaoceimiimeokpdbmejeonaaami [2016-04-18]
CHR Extension: (KIDO'Z TV) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\jokdeafnhahffanabnbjjjjmoechjklc [2016-09-14]
CHR Extension: (The Great Suspender) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg [2017-06-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-31]
CHR Extension: (Chrome Media Router) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-08]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-09-18]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AsusService; C:\Windows\System32\AsusService.exe [219136 2009-08-19] () [File not signed]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5904136 2017-11-15] (AVAST Software)
R2 Autodata Limited License Service; C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [72704 2011-10-06] (Autodata Limited) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-15] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [332368 2017-12-08] (AVAST Software)
S4 AxiomAudioDevMon; C:\Program Files\M-Audio\Axiom\AudioDevMon.exe [1632776 2010-02-19] (M-Audio)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
R2 Crypkey License; C:\WINDOWS\system32\crypserv.exe [69632 2006-09-22] (CrypKey (Canada) Ltd.) [File not signed]
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1135808 2016-10-06] (Disc Soft Ltd)
R2 DSAService; C:\Program Files\Intel Driver and Support Assistant\DSAService.exe [22304 2017-12-05] (Intel)
S3 Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
S4 msvsmon80; C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2799808 2005-09-23] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44032 2009-05-15] (Hewlett-Packard) [File not signed]
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2009704 2011-10-11] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2009-05-15] (Hewlett-Packard) [File not signed]
S2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [32544 2016-02-03] ()
R2 RealTimes Desktop Service; C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1095440 2016-02-28] (RealNetworks, Inc.)
R2 RepetierServer; C:\Program Files\Repetier-Server\bin\RepetierServer.exe [6129000 2017-08-07] ()
S4 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2004-12-13] (Ulead Systems, Inc.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [279408 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [86696 2017-09-29] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 adatadrv; C:\WINDOWS\System32\drivers\adatadrv.sys [762112 2009-07-01] (none) [File not signed]
R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [75416 2017-12-12] (Alcor Micro, Corp.)
R1 AsUpIO; C:\WINDOWS\System32\drivers\AsUpIO.sys [11520 2010-03-31] ()
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [157176 2017-11-15] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriverx.sys [255616 2017-11-15] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidshx.sys [157408 2017-11-15] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblogx.sys [276728 2017-11-15] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbunivx.sys [50376 2017-11-15] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [84032 2017-11-03] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [42848 2017-11-15] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [39784 2017-09-18] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [124952 2017-11-15] (AVAST Software)
R1 aswNetSec; C:\WINDOWS\System32\drivers\aswNetSec.sys [420024 2017-12-08] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [99560 2017-11-15] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [70864 2017-11-15] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [783136 2017-11-15] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [388760 2017-11-15] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [150848 2017-11-15] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [298360 2017-11-15] (AVAST Software)
S3 AXIOM; C:\WINDOWS\system32\DRIVERS\MAudioAxiom.sys [115336 2010-02-19] (M-Audio)
S3 azvusb; C:\WINDOWS\System32\DRIVERS\azvusb.sys [44544 2009-08-24] (AzureWave Technologies, Inc.) [File not signed]
R3 BCM43XX; C:\WINDOWS\system32\DRIVERS\bcmwl63.sys [6811648 2017-09-29] (Broadcom Corporation)
S3 CH341SER; C:\WINDOWS\System32\Drivers\CH341SER.SYS [39696 2014-11-08] (www.winchiphead.com)
R3 CLEDX; C:\WINDOWS\System32\drivers\cledx.sys [33792 2005-05-09] (Team H2O) [File not signed]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [26168 2016-10-12] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [40504 2016-03-03] (Disc Soft Ltd)
S3 HtcVCom32; C:\WINDOWS\system32\DRIVERS\HtcVComV32.sys [105984 2009-10-27] (QUALCOMM Incorporated)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2017-12-11] (REALiX(tm))
S3 IT9135BDA; C:\WINDOWS\System32\Drivers\IT9135BDA.sys [94336 2010-02-03] (ITE )
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [13880 2009-07-20] ( )
S3 Mach3; C:\WINDOWS\System32\Drivers\Mach3.sys [103040 2005-10-16] (Your Corporation) [File not signed]
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [221112 2017-11-20] (Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [75712 2017-11-20] (Malwarebytes)
S3 mod7700; C:\WINDOWS\System32\Drivers\dvb7700all.sys [575744 2009-10-21] (DiBcom)
R1 NetworkX; C:\WINDOWS\system32\ckldrv.sys [31846 2006-01-10] () [File not signed]
S0 nvpciflt; C:\WINDOWS\System32\DRIVERS\nvpciflt.sys [44728 2016-12-09] (NVIDIA Corporation)
S3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2012-01-08] (VSO Software) [File not signed]
S3 RDID1105; C:\WINDOWS\system32\Drivers\RDWM1105.SYS [156416 2015-07-23] (Roland Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [7091416 2017-12-11] (Realtek Semiconductor Corp.)
R2 Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [76288 2002-09-25] (Rainbow Technologies, Inc.) [File not signed]
R3 SNTNLUSB; C:\WINDOWS\System32\drivers\SNTNLUSB.SYS [38376 2009-09-17] (SafeNet, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37440 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [253848 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98200 2017-09-29] (Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2030-01-01 12:41 - 2017-11-10 01:14 - 000397760 __RSH C:\bootmgr
2017-12-18 15:11 - 2017-12-18 15:13 - 000022519 _____ C:\Users\David\Downloads\FRST.txt
2017-12-18 15:11 - 2017-12-18 15:11 - 000000000 ____D C:\FRST
2017-12-18 15:09 - 2017-12-18 15:10 - 001752576 _____ (Farbar) C:\Users\David\Downloads\FRST.exe
2017-12-18 14:20 - 2017-12-18 14:21 - 000000000 ____D C:\rsit
2017-12-18 14:20 - 2017-12-18 14:21 - 000000000 ____D C:\Program Files\trend micro
2017-12-18 14:19 - 2017-12-18 14:19 - 001107968 _____ C:\Users\David\Downloads\RSIT.exe
2017-12-13 21:45 - 2017-12-13 21:47 - 000000000 ____D C:\Users\David\AppData\Local\Arduino15
2017-12-13 21:45 - 2017-12-13 21:45 - 000000000 ____D C:\Users\David\Documents\Arduino
2017-12-13 20:44 - 2017-12-13 20:44 - 000001034 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk
2017-12-13 20:44 - 2017-12-13 20:44 - 000001022 _____ C:\Users\Public\Desktop\Arduino.lnk
2017-12-13 20:41 - 2017-12-13 20:43 - 000000000 ____D C:\Program Files\Arduino
2017-12-13 20:13 - 2017-12-13 20:13 - 000000000 ____D C:\Users\David\AppData\Roaming\Slic3r
2017-12-13 19:47 - 2017-12-13 19:47 - 000000000 ____D C:\Users\David\Desktop\CH340G_USB driver
2017-12-13 19:45 - 2017-12-13 19:45 - 000000000 ____D C:\Users\David\AppData\Roaming\NVIDIA
2017-12-13 19:44 - 2017-12-13 19:44 - 000000000 ____D C:\ProgramData\Repetier-Server
2017-12-13 19:44 - 2017-12-13 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Repetier-Server
2017-12-13 19:43 - 2017-12-13 19:44 - 000000000 ____D C:\Program Files\Repetier-Server
2017-12-13 19:40 - 2017-12-13 19:40 - 000001093 _____ C:\Users\Public\Desktop\Repetier-Host.lnk
2017-12-13 19:40 - 2017-12-13 19:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Repetier-Host
2017-12-13 19:38 - 2017-12-13 20:20 - 000000000 ____D C:\Users\David\AppData\Local\RepetierHost
2017-12-13 19:38 - 2017-12-13 19:40 - 000000000 ____D C:\Program Files\Repetier-Host
2017-12-13 19:22 - 2017-12-13 19:28 - 050544928 _____ (repetier ) C:\Users\David\Downloads\setupRepetierHost_2_0_5.exe
2017-12-13 19:15 - 2017-12-13 19:21 - 015409280 _____ (repetier ) C:\Users\David\Downloads\Nepotvrzeno 661042.crdownload
2017-12-13 19:13 - 2017-12-13 19:15 - 009665680 _____ (repetier ) C:\Users\David\Downloads\Nepotvrzeno 828743.crdownload
2017-12-13 19:06 - 2014-10-20 17:38 - 022545432 _____ (repetier ) C:\setupRepetierHost_1_0_6.exe
2017-12-13 15:39 - 2017-12-13 16:58 - 000000000 ____D C:\AdwCleaner
2017-12-13 15:37 - 2017-12-13 15:37 - 008172032 _____ (Malwarebytes) C:\Users\David\Downloads\AdwCleaner.exe
2017-12-13 15:32 - 2017-12-13 15:32 - 005659243 _____ (Swearware) C:\Users\David\Downloads\ComboFix (1).exe
2017-12-13 14:34 - 2017-12-13 14:34 - 000214298 _____ C:\Users\David\Downloads\winfilefolder (1).DiagCab
2017-12-12 21:13 - 2017-12-03 23:38 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-12-12 21:13 - 2017-12-03 23:38 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2017-12-12 19:37 - 2017-12-07 23:58 - 004145488 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-12-12 19:37 - 2017-12-07 23:39 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-12-12 19:37 - 2017-12-07 23:32 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-12-12 19:37 - 2017-12-07 23:23 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-12 19:37 - 2017-12-07 23:10 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-12-12 19:37 - 2017-12-07 23:10 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-12-12 19:37 - 2017-12-07 23:08 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-12-12 19:37 - 2017-12-07 23:05 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-12-12 19:36 - 2017-12-07 23:57 - 001506712 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-12-12 19:36 - 2017-12-07 23:57 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-12-12 19:36 - 2017-12-07 23:56 - 000049560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2017-12-12 19:36 - 2017-12-07 23:55 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-12 19:36 - 2017-12-07 23:37 - 006403480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-12-12 19:36 - 2017-12-07 23:37 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-12-12 19:36 - 2017-12-07 23:36 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2017-12-12 19:36 - 2017-12-07 23:36 - 000142640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-12-12 19:36 - 2017-12-07 23:35 - 000454040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-12-12 19:36 - 2017-12-07 23:35 - 000445336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-12-12 19:36 - 2017-12-07 23:34 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-12-12 19:36 - 2017-12-07 23:34 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-12-12 19:36 - 2017-12-07 23:33 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-12-12 19:36 - 2017-12-07 23:33 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-12-12 19:36 - 2017-12-07 23:33 - 000538760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-12-12 19:36 - 2017-12-07 23:33 - 000337304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-12-12 19:36 - 2017-12-07 23:32 - 000278936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-12-12 19:36 - 2017-12-07 23:32 - 000100248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2017-12-12 19:36 - 2017-12-07 23:31 - 004937224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-12-12 19:36 - 2017-12-07 23:31 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-12-12 19:36 - 2017-12-07 23:31 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-12-12 19:36 - 2017-12-07 23:31 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-12-12 19:36 - 2017-12-07 23:31 - 000456232 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-12-12 19:36 - 2017-12-07 23:31 - 000295488 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-12-12 19:36 - 2017-12-07 23:30 - 000717464 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-12-12 19:36 - 2017-12-07 23:29 - 000131992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-12-12 19:36 - 2017-12-07 23:28 - 000612736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-12-12 19:36 - 2017-12-07 23:25 - 000203672 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-12-12 19:36 - 2017-12-07 23:25 - 000108480 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-12-12 19:36 - 2017-12-07 23:21 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-12-12 19:36 - 2017-12-07 23:13 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-12-12 19:36 - 2017-12-07 23:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2017-12-12 19:36 - 2017-12-07 23:12 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2017-12-12 19:36 - 2017-12-07 23:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-12 19:36 - 2017-12-07 23:12 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscript.ocx
2017-12-12 19:36 - 2017-12-07 23:10 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2017-12-12 19:36 - 2017-12-07 23:10 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-12-12 19:36 - 2017-12-07 23:10 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-12-12 19:36 - 2017-12-07 23:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2017-12-12 19:36 - 2017-12-07 23:09 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2017-12-12 19:36 - 2017-12-07 23:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-12-12 19:36 - 2017-12-07 23:08 - 001130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2017-12-12 19:36 - 2017-12-07 23:07 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-12-12 19:36 - 2017-12-07 23:07 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-12 19:36 - 2017-12-07 23:07 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 003702784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 002022400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 002062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 001626112 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-12-12 19:36 - 2017-12-07 23:04 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 001132032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 000657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 002247168 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 001288704 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 000695808 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-12 19:36 - 2017-12-07 23:01 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-12-12 19:36 - 2017-12-07 23:00 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-12 19:36 - 2017-12-07 22:59 - 001982976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-12-12 19:36 - 2017-12-07 22:59 - 001286144 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-12 19:36 - 2017-12-07 22:59 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-12-12 18:15 - 2017-12-12 18:15 - 001077248 _____ C:\WINDOWS\system32\AmRdrIco.icl
2017-12-12 18:15 - 2017-12-12 18:15 - 000075416 _____ (Alcor Micro, Corp.) C:\WINDOWS\system32\Drivers\AmUStor.sys
2017-12-12 18:15 - 2017-12-12 18:15 - 000041952 _____ C:\WINDOWS\system32\AmUStor.ini
2017-12-12 18:15 - 2017-12-12 18:15 - 000019096 _____ (Alcor Micro, Corp.) C:\WINDOWS\system32\AmUStor2.dll
2017-12-12 18:15 - 2017-12-12 18:15 - 000000640 _____ C:\WINDOWS\system32\VendorCmd6435.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000124 _____ C:\WINDOWS\system32\VendorCmd6485_SetSSC.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000032 _____ C:\WINDOWS\system32\VendorCommand_MS1bit.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000032 _____ C:\WINDOWS\system32\VendorCmd6485.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000032 _____ C:\WINDOWS\system32\VendorCmd6465.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6485.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6420.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6366.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6362.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6361.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6339.bin
2017-12-12 18:06 - 2017-12-12 18:06 - 000000000 ____D C:\Program Files\Microsoft XNA
2017-12-12 18:06 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2017-12-12 18:06 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2017-12-12 18:06 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2017-12-12 18:06 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2017-12-12 18:06 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2017-12-12 18:06 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2017-12-12 18:06 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2017-12-11 19:22 - 2017-12-11 19:22 - 000130632 _____ (Qualcomm Atheros, Inc.) C:\WINDOWS\system32\Drivers\L1C63x86.sys
2017-12-11 19:20 - 2017-12-11 19:20 - 007091416 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\rtsuvc.sys
2017-12-11 19:20 - 2017-12-11 19:20 - 001910488 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCamU.exe
2017-12-11 19:20 - 2017-12-11 19:20 - 000418008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCamX.dll
2017-12-11 16:31 - 2017-12-13 14:33 - 000000000 ____D C:\ProgramData\ProductData
2017-12-11 16:31 - 2017-12-11 16:31 - 000000000 ____D C:\WINDOWS\IObit
2017-12-11 16:22 - 2017-12-11 16:32 - 000000000 ____D C:\Users\David\AppData\LocalLow\IObit
2017-12-11 16:22 - 2017-12-11 16:31 - 000000000 ____D C:\ProgramData\IObit
2017-12-11 16:22 - 2017-12-11 16:22 - 000023840 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO32.SYS
2017-12-11 16:22 - 2017-12-11 16:22 - 000000000 ____D C:\Users\David\AppData\Roaming\IObit
2017-12-11 16:21 - 2017-12-11 16:21 - 015719372 _____ C:\Users\David\Downloads\IObit Driver Booster 4.5 PRO (v4.5.0.527) Multilingual.rar
2017-12-11 15:55 - 2017-12-11 15:55 - 000214298 _____ C:\Users\David\Downloads\winfilefolder.DiagCab
2017-12-10 20:24 - 2017-12-10 20:24 - 000091209 _____ C:\Users\David\Downloads\536687889.PDF
2017-12-10 08:55 - 2017-12-10 08:55 - 000000000 ____D C:\Users\David\AppData\Local\Intel Corporation
2017-12-10 00:42 - 2017-12-10 00:42 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-12-10 00:40 - 2017-12-10 00:40 - 000000000 ___HD C:\Users\David\MicrosoftEdgeBackups
2017-12-10 00:38 - 2017-12-13 14:26 - 000000000 ___RD C:\Users\David\3D Objects
2017-12-10 00:37 - 2017-12-10 00:37 - 000000020 ___SH C:\Users\David\ntuser.ini
2017-12-10 00:33 - 2017-12-13 20:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-12-10 00:18 - 2017-12-10 00:33 - 000015243 _____ C:\WINDOWS\diagwrn.xml
2017-12-10 00:18 - 2017-12-10 00:33 - 000015243 _____ C:\WINDOWS\diagerr.xml
2017-12-10 00:05 - 2017-12-10 00:05 - 000000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2017-12-09 23:52 - 2017-12-09 23:52 - 000001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-12-09 23:45 - 2017-12-13 14:39 - 000000000 ____D C:\Users\David\AppData\Local\Packages
2017-12-09 23:43 - 2017-12-12 21:09 - 000000000 ____D C:\Users\David
2017-12-09 23:43 - 2017-12-12 16:22 - 000000000 ____D C:\Users\UpdatusUser
2017-12-09 23:43 - 2017-12-10 00:07 - 000000000 ____D C:\Users\DefaultAppPool
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Šablony
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Soubory cookie
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Poslední
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Okolní tiskárny
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Okolní síť
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Nabídka Start
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Dokumenty
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Documents\Obrázky
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Documents\Hudba
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Documents\Filmy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Šablony
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Soubory cookie
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Poslední
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Okolní tiskárny
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Okolní síť
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Nabídka Start
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Dokumenty
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Obrázky
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Hudba
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Filmy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Šablony
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Soubory cookie
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Poslední
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Okolní tiskárny
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Okolní síť
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Nabídka Start
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Dokumenty
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Documents\Obrázky
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Documents\Hudba
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Documents\Filmy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\AppData\Local\Data aplikací
2017-12-09 23:38 - 2017-12-09 23:38 - 000000000 ____D C:\ProgramData\USOShared
2017-12-09 23:36 - 2017-12-13 14:29 - 002154524 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-09 23:35 - 2017-12-09 23:35 - 000002080 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2017-12-09 23:35 - 2016-11-14 10:45 - 000615992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe
2017-12-09 23:34 - 2016-12-09 13:19 - 000076864 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-12-09 23:25 - 2017-12-18 15:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-12-09 23:25 - 2017-12-12 21:13 - 000440432 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-09 23:06 - 2017-12-10 00:37 - 000000000 ____D C:\Windows.old
2017-12-09 22:28 - 2017-12-09 22:28 - 000000000 ___DL C:\Users\Public\Recorded TV (1)
2017-12-09 22:26 - 2017-12-09 23:07 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-12-09 22:26 - 2017-12-09 22:26 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-12-09 22:14 - 2017-12-09 22:26 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-12-09 22:12 - 2017-12-09 22:12 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-12-09 22:01 - 2017-12-09 22:01 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 002491112 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-12-09 22:01 - 2017-12-09 22:01 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-12-09 22:01 - 2017-12-09 22:01 - 000414824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-09 22:01 - 2017-12-09 22:01 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2017-12-09 22:01 - 2017-12-09 22:01 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-12-09 22:01 - 2017-12-09 22:01 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002645504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002342400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002315776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002116504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 001995672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001859584 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 001851288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001771008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001336544 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001171456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001115704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-12-09 22:00 - 2017-12-09 22:00 - 000973648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000965016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000608664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000535448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000530152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000508848 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000434072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000368536 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000368536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000353176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000322968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000300952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000253144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000233368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000167832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000166632 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000155544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000128408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000065432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000040840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\WINDOWS\system32\msmq
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\Program Files\MSBuild
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\inetpub
2017-12-09 21:32 - 2017-09-22 18:19 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-12-09 21:32 - 2017-09-22 18:19 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-12-09 21:32 - 2017-09-22 18:19 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-12-09 21:30 - 2017-09-28 18:44 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-12-09 21:30 - 2017-09-28 18:44 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-12-09 21:30 - 2017-09-28 18:38 - 005484032 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-12-09 19:14 - 2017-12-10 08:06 - 000000000 ___DC C:\WINDOWS\Panther
2017-12-09 18:06 - 2017-12-09 18:06 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pomocník s aktualizací Windows 10.lnk
2017-12-09 18:05 - 2017-12-10 00:37 - 000000000 ____D C:\Windows10Upgrade
2017-12-09 13:43 - 2017-12-09 22:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2017-12-09 13:43 - 2017-12-09 13:43 - 000001323 _____ C:\Users\Public\Desktop\Intel Processor Diagnostic Tool.lnk
2017-12-09 13:43 - 2017-12-09 13:43 - 000000000 ____D C:\Program Files\Intel Corporation
2017-12-09 13:35 - 2017-12-10 00:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-12-09 13:30 - 2017-12-09 23:59 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 13:30 - 2017-12-09 23:45 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 13:30 - 2017-12-09 13:30 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\TileDataLayer
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\Documents\EBI
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\Documents\Bluetooth Exchange Folder
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\Documents\Asus WebStorage
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\RealNetworks
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\ASUS WebStorage
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Adobe
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\Broadcom
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\Adobe
2017-12-09 13:30 - 2010-09-29 19:58 - 000058056 _____ C:\Users\UpdatusUser\AppData\Local\GDIPFONTCACHEV1.DAT
2017-12-09 13:30 - 2010-09-29 19:58 - 000001871 _____ C:\Users\UpdatusUser\Desktop\MySyncFolder.lnk
2017-12-09 10:53 - 2017-12-09 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Software Manager
2017-12-09 10:53 - 2017-12-09 10:53 - 000000000 ____D C:\ProgramData\Intel Corporation
2017-12-09 10:53 - 2017-12-09 10:53 - 000000000 ____D C:\Program Files\Common Files\Intel
2017-12-09 10:10 - 2017-12-09 10:10 - 000000000 ____D C:\Users\David\Intel
2017-12-09 10:02 - 2017-12-09 10:02 - 000012841 _____ C:\Users\David\Downloads\Detailed-System-Report.html
2017-12-09 09:41 - 2017-12-09 09:44 - 000000000 ____D C:\ProgramData\Intel
2017-12-09 09:40 - 2017-12-09 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver and Support Assistant
2017-12-09 09:40 - 2017-12-09 17:25 - 000000000 ____D C:\Program Files\Intel Driver and Support Assistant
2017-12-09 09:39 - 2017-12-09 09:39 - 009119336 _____ (Intel) C:\Users\David\Downloads\Intel Driver and Support Assistant Installer.exe
2017-12-09 09:21 - 2017-12-09 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
2017-12-09 09:19 - 2009-06-04 18:43 - 000330264 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStor.sys
2017-12-08 22:51 - 2017-12-08 22:51 - 000000000 _____ C:\WINDOWS\Path.idx
2017-12-08 22:33 - 2009-09-09 21:30 - 000045983 _____ C:\WINDOWS\system32\netathw.cat
2017-12-08 22:33 - 2009-09-07 18:59 - 001584448 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\athw.sys
2017-12-08 20:33 - 2017-12-08 20:33 - 000000000 ____D C:\Users\David\AppData\Local\AVAST Software
2017-12-08 20:17 - 2017-12-08 20:17 - 000005440 _____ C:\Users\David\Downloads\conf (2).bin
2017-12-08 19:20 - 2017-12-08 19:20 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Internet Security.lnk
2017-12-08 19:20 - 2017-12-08 19:20 - 000002076 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk
2017-12-08 19:20 - 2017-12-08 19:15 - 000420024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys
2017-12-08 19:16 - 2017-11-15 19:08 - 000305328 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-12-08 19:09 - 2017-12-08 19:09 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2017-11-20 20:59 - 2017-11-20 20:59 - 000075712 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-11-20 20:58 - 2017-11-20 20:58 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-18 14:32 - 2017-09-29 12:52 - 000000000 ____D C:\WINDOWS\INF
2017-12-18 14:25 - 2017-09-29 12:45 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-12-18 14:24 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-12-16 14:06 - 2017-09-29 12:55 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-16 14:06 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-12-13 21:45 - 2013-12-23 10:53 - 000000000 ____D C:\ProgramData\Oracle
2017-12-13 20:03 - 2017-07-20 17:18 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-13 20:02 - 2017-09-29 06:31 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-12-13 19:51 - 2010-12-24 17:53 - 000119032 _____ C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2017-12-13 19:15 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-12-13 14:29 - 2017-09-30 13:07 - 000910900 _____ C:\WINDOWS\system32\perfh005.dat
2017-12-13 14:29 - 2017-09-30 13:07 - 000208830 _____ C:\WINDOWS\system32\perfc005.dat
2017-12-13 14:26 - 2016-04-27 05:30 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-12-12 21:09 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\TextInput
2017-12-12 21:09 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-12-12 21:09 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-12-12 21:09 - 2017-09-29 06:31 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-12-12 20:11 - 2013-08-15 20:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-12 19:48 - 2017-10-26 18:19 - 130448288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-12 19:47 - 2010-12-27 12:19 - 130448288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-12 18:11 - 2017-07-20 17:17 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-12 18:08 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-12-12 18:07 - 2015-05-10 17:50 - 000000000 ____D C:\ProgramData\Package Cache
2017-12-12 18:06 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-12-11 18:36 - 2017-09-29 06:31 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-12-11 16:02 - 2017-04-07 17:19 - 000000000 ____D C:\Users\David\AppData\Local\ElevatedDiagnostics
2017-12-10 08:55 - 2010-12-25 11:21 - 000000000 ____D C:\ProgramData\FLEXnet
2017-12-10 07:50 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\appcompat
2017-12-10 00:38 - 2016-07-24 18:44 - 000000000 ____D C:\Users\David\AppData\Local\TileDataLayer
2017-12-10 00:36 - 2016-07-23 07:32 - 000000000 ___HD C:\$GetCurrent
2017-12-10 00:35 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\windows nt
2017-12-10 00:18 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Registration
2017-12-10 00:16 - 2016-07-24 16:58 - 000021592 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-12-10 00:15 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\media
2017-12-10 00:05 - 2014-05-28 20:43 - 000002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-10 00:05 - 2014-05-28 20:43 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-12-09 23:59 - 2017-01-03 20:18 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2017-12-09 23:59 - 2016-07-25 17:34 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:59 - 2016-06-07 14:46 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-09 23:59 - 2016-01-21 14:25 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromecast
2017-12-09 23:59 - 2015-03-11 22:04 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2017-12-09 23:59 - 2015-03-11 22:04 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome
2017-12-09 23:59 - 2011-12-13 17:45 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heartofangel.com
2017-12-09 23:59 - 2011-01-01 17:27 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2017-12-09 23:59 - 2010-12-25 00:08 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2017-12-09 23:59 - 2010-12-24 17:53 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:53 - 2017-09-29 12:55 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:48 - 2014-03-09 13:08 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlayPianoTODAY
2017-12-09 23:48 - 2011-03-13 11:44 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft
2017-12-09 23:48 - 2011-02-20 13:48 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Loomer
2017-12-09 23:48 - 2011-02-14 18:48 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Arturia
2017-12-09 23:48 - 2011-02-12 14:12 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinPlug Instruments
2017-12-09 23:48 - 2011-01-08 19:51 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KORG
2017-12-09 23:44 - 2016-07-25 17:34 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 23:38 - 2017-09-29 12:55 - 000000000 ____D C:\ProgramData\USOPrivate
2017-12-09 23:36 - 2017-09-29 06:31 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-12-09 23:24 - 2017-09-29 12:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 __SHD C:\Program Files\Windows Sidebar
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\spool
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\IME
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\System
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\schemas
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Help
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Cursors
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\Common Files\system
2017-12-09 23:07 - 2017-08-25 19:15 - 000000000 ____D C:\WINDOWS\system32\17082502_stream
2017-12-09 23:07 - 2017-07-09 17:57 - 000000000 ____D C:\Program Files\UNP
2017-12-09 23:07 - 2017-05-11 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-12-09 23:07 - 2017-05-05 18:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 6
2017-12-09 23:07 - 2017-05-05 18:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream PDF Split and Merge
2017-12-09 23:07 - 2017-03-18 19:23 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-12-09 23:07 - 2017-03-18 19:23 - 000000000 ____D C:\WINDOWS\system32\Catroot2.old
2017-12-09 23:07 - 2017-03-15 18:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-12-09 23:07 - 2017-01-07 13:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cut3D 1.11
2017-12-09 23:07 - 2017-01-01 13:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2017-12-09 23:07 - 2016-10-12 19:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-12-09 23:07 - 2016-10-12 19:34 - 000000000 ____D C:\WINDOWS\system32\Adobe
2017-12-09 23:07 - 2016-10-03 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-12-09 23:07 - 2016-06-19 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3Gain
2017-12-09 23:07 - 2016-04-27 05:18 - 000000000 ____D C:\WINDOWS\ShellNew
2017-12-09 23:07 - 2016-02-28 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2017-12-09 23:07 - 2015-06-24 20:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2017-12-09 23:07 - 2015-04-02 19:28 - 000000000 ____D C:\WINDOWS\system32\vbox
2017-12-09 23:07 - 2015-03-07 23:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aspire 4.0
2017-12-09 23:07 - 2015-02-08 10:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoVCarve
2017-12-09 23:07 - 2015-02-07 19:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VCarve Pro 6.0
2017-12-09 23:07 - 2015-01-04 15:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-12-09 23:07 - 2014-12-09 04:47 - 000000000 ____D C:\WINDOWS\system32\RNBOSENT
2017-12-09 23:07 - 2014-12-08 22:59 - 000000000 ____D C:\WINDOWS\system32\Predator Software
2017-12-09 23:07 - 2014-11-26 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mechanical Calculator
2017-12-09 23:07 - 2014-11-15 10:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer
2017-12-09 23:07 - 2014-08-06 18:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD DWG to PDF Converter
2017-12-09 23:07 - 2014-07-15 18:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2017-12-09 23:07 - 2014-07-04 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2017-12-09 23:07 - 2014-02-07 22:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Playlist Editor
2017-12-09 23:07 - 2013-12-27 15:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WANSCAM
2017-12-09 23:07 - 2012-10-08 15:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2017-12-09 23:07 - 2012-03-25 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAG-COM
2017-12-09 23:07 - 2012-03-04 18:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cut2D
2017-12-09 23:07 - 2012-02-09 17:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2017-12-09 23:07 - 2011-12-18 18:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAG Info System
2017-12-09 23:07 - 2011-11-27 19:44 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2017-12-09 23:07 - 2011-11-06 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlazeDTV 6.0
2017-12-09 23:07 - 2011-06-12 15:34 - 000000000 ____D C:\WINDOWS\system32\SPReview
2017-12-09 23:07 - 2011-06-12 15:31 - 000000000 ____D C:\WINDOWS\system32\EventProviders
2017-12-09 23:07 - 2011-03-06 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Musicnotes
2017-12-09 23:07 - 2011-02-12 13:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rob Papen Albino
2017-12-09 23:07 - 2011-02-06 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProgDVB
2017-12-09 23:07 - 2011-02-05 23:11 - 000000000 ____D C:\WINDOWS\system32\WinFast
2017-12-09 23:07 - 2011-01-26 22:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Translator
2017-12-09 23:07 - 2011-01-09 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TASCAM
2017-12-09 23:07 - 2010-12-27 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2017-12-09 23:07 - 2010-12-27 12:34 - 000000000 ____D C:\WINDOWS\cs
2017-12-09 23:07 - 2010-12-25 10:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SyncroSoft Emu
2017-12-09 23:07 - 2010-12-25 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syncrosoft
2017-12-09 23:07 - 2010-12-25 09:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X3
2017-12-09 23:07 - 2010-12-25 00:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-12-09 23:07 - 2010-12-25 00:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2017-12-09 23:07 - 2010-12-24 17:58 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-12-09 23:07 - 2010-12-24 17:55 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-12-09 23:07 - 2010-09-29 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-12-09 23:07 - 2010-09-29 19:31 - 000000000 ____D C:\WINDOWS\system32\Atheros_L1e
2017-12-09 23:07 - 2010-09-29 19:27 - 000000000 ____D C:\WINDOWS\system32\Lang
2017-12-09 23:07 - 2010-09-29 19:26 - 000000000 ____D C:\Program Files\Intel
2017-12-09 23:05 - 2017-09-29 12:58 - 000000000 ____D C:\WINDOWS\Setup
2017-12-09 23:05 - 2017-09-29 12:55 - 000000000 __RHD C:\Users\Public\Libraries
2017-12-09 22:28 - 2016-08-13 19:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roland
2017-12-09 22:28 - 2015-09-09 13:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
2017-12-09 22:28 - 2014-08-26 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
2017-12-09 22:28 - 2014-03-09 13:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayPianoTODAY
2017-12-09 22:28 - 2011-03-13 11:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
2017-12-09 22:28 - 2011-02-12 13:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments B4 II
2017-12-09 22:28 - 2010-12-25 10:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase SX 3
2017-12-09 22:28 - 2010-09-29 19:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\syncables
2017-12-09 22:27 - 2017-07-20 17:18 - 000000000 ____D C:\Program Files\Synaptics
2017-12-09 22:27 - 2016-02-26 20:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kurzweil Music Systems
2017-12-09 22:27 - 2012-07-16 17:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GenieSoft
2017-12-09 22:27 - 2011-02-20 20:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GSi
2017-12-09 22:27 - 2011-02-20 20:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cakewalk
2017-12-09 22:27 - 2011-02-20 13:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Loomer
2017-12-09 22:27 - 2011-02-14 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arturia
2017-12-09 22:27 - 2011-02-12 14:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LinPlug Instruments
2017-12-09 22:27 - 2011-02-08 20:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KORG
2017-12-09 22:27 - 2011-01-09 18:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\M-Audio
2017-12-09 22:27 - 2010-12-25 10:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2017-12-09 22:27 - 2010-09-29 19:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-12-09 22:27 - 2009-07-14 05:52 - 000000000 ____D C:\Program Files\Microsoft Games
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Provisioning
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\PerfLogs
2017-12-09 21:35 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-12-09 21:35 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-12-09 21:35 - 2017-09-29 12:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-12-09 21:35 - 2017-09-29 12:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-12-09 21:35 - 2017-09-29 12:51 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-12-09 21:35 - 2017-09-29 12:50 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-12-09 21:35 - 2017-09-29 12:50 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-12-09 21:35 - 2017-09-29 12:50 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-12-09 21:35 - 2017-09-29 12:50 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-12-09 21:35 - 2017-09-29 12:49 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-12-09 21:35 - 2017-09-29 12:49 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-12-09 21:35 - 2017-09-29 12:49 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-12-09 21:30 - 2017-09-30 13:07 - 000000000 ____D C:\WINDOWS\OCR
2017-12-09 20:57 - 2016-09-18 03:56 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2017-12-09 20:22 - 2016-07-24 15:09 - 000008192 __RSH C:\BOOTSECT.BAK
2017-12-09 19:14 - 2016-07-23 08:16 - 000000036 _____ C:\WINDOWS\progress.ini
2017-12-09 13:43 - 2011-01-02 21:02 - 000000000 ____D C:\Users\David\AppData\Local\Downloaded Installations
2017-12-08 22:11 - 2016-07-24 18:56 - 000002429 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-12-08 22:11 - 2016-07-24 18:56 - 000000000 ___RD C:\Users\David\OneDrive
2017-12-08 20:03 - 2011-11-27 21:46 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-08 20:01 - 2011-03-19 10:41 - 000000000 ____D C:\Program Files\Java
2017-12-08 19:58 - 2010-09-29 19:45 - 000000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-12-08 19:20 - 2017-06-07 14:34 - 000055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-12-02 16:44 - 2014-07-15 18:59 - 000000000 ____D C:\Program Files\Garmin
2017-12-01 16:42 - 2010-12-25 08:34 - 000000000 ____D C:\WINDOWS\SoftwareDistribution.old
2017-11-30 18:20 - 2016-01-19 20:52 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-26 20:57 - 2015-02-13 23:03 - 000000000 ____D C:\Users\David\Desktop\cnc
2017-11-26 20:57 - 2013-01-19 21:01 - 000000000 ____D C:\Users\David\Desktop\kuchyň
2017-11-26 20:57 - 2011-10-21 19:10 - 000000000 ____D C:\Users\David\Octavia ll
2017-11-20 21:14 - 2017-06-28 13:22 - 000000000 ____D C:\Users\David\AppData\Roaming\MPC-HC
2017-11-20 21:13 - 2015-06-24 20:35 - 000000000 ____D C:\Users\David\AppData\Roaming\Opera Software
2017-11-20 21:13 - 2015-06-24 20:35 - 000000000 ____D C:\Users\David\AppData\Local\Opera Software
2017-11-20 21:13 - 2015-06-24 20:35 - 000000000 ____D C:\Program Files\Opera
2017-11-20 21:12 - 2010-09-29 19:40 - 000000000 ____D C:\Program Files\ASUS
2017-11-20 21:00 - 2011-02-08 18:39 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-20 20:57 - 2013-12-25 23:50 - 000000000 ____D C:\Program Files\HTC
2017-11-20 20:54 - 2013-12-25 23:56 - 000000000 ____D C:\Users\David\AppData\Roaming\HTC
2017-11-20 20:54 - 2013-12-25 23:49 - 000000000 ____D C:\ProgramData\HTC
2017-11-20 20:53 - 2010-09-29 19:43 - 000000000 ____D C:\Program Files\CyberLink
2017-11-20 20:53 - 2010-09-29 19:27 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2017-11-20 20:52 - 2011-02-19 13:51 - 000000000 ____D C:\Program Files\Guitar Pro 5
2017-11-20 20:51 - 2016-10-12 19:33 - 000000000 ____D C:\eLearn
2017-11-20 20:48 - 2010-12-26 11:04 - 000000000 ____D C:\AsusVibeData

==================== Files in the root of some directories =======

2011-04-02 19:26 - 2011-04-02 19:26 - 000002528 _____ () C:\Users\David\AppData\Roaming\$_hpcst$.hpc
2012-01-08 12:05 - 2014-12-08 18:24 - 000081920 _____ () C:\Users\David\AppData\Roaming\ezpinst.exe
2013-10-07 18:19 - 2013-10-07 18:19 - 000038436 _____ () C:\Users\David\AppData\Roaming\Hodnoty oddělené tabulátory (Windows).ADR
2012-01-08 12:05 - 2014-12-08 18:24 - 000007176 _____ () C:\Users\David\AppData\Roaming\pcouffin.cat
2012-01-08 12:05 - 2014-12-08 18:24 - 000001144 _____ () C:\Users\David\AppData\Roaming\pcouffin.inf
2012-01-08 12:07 - 2014-12-08 18:24 - 000000033 _____ () C:\Users\David\AppData\Roaming\pcouffin.log
2012-01-08 12:05 - 2014-12-08 18:24 - 000047360 _____ (VSO Software) C:\Users\David\AppData\Roaming\pcouffin.sys
2012-01-22 21:04 - 2012-01-22 21:04 - 000020835 _____ () C:\Users\David\AppData\Roaming\UserTile.png
2014-12-08 21:45 - 2016-07-14 13:05 - 000007599 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
2017-12-18 14:17 - 2017-12-01 13:37 - 000186736 _____ (RealNetworks, Inc.) C:\Users\David\AppData\Local\Temp\lowproc.exe

Some zero byte size files/folders:
==========================
C:\Windows\System32\lsprst7.dll
C:\Windows\System32\tmpPrst.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-12-09 23:25

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-12-2017
Ran by David (18-12-2017 15:16:20)
Running from C:\Users\David\Downloads
Microsoft Windows 10 Home Version 1709 16299.125 (X86) (2017-12-09 23:37:13)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3313380613-1349851029-4279355966-500 - Administrator - Disabled)
David (S-1-5-21-3313380613-1349851029-4279355966-1001 - Administrator - Enabled) => C:\Users\David
DefaultAccount (S-1-5-21-3313380613-1349851029-4279355966-503 - Limited - Disabled)
Guest (S-1-5-21-3313380613-1349851029-4279355966-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3313380613-1349851029-4279355966-1003 - Limited - Enabled)
UpdatusUser (S-1-5-21-3313380613-1349851029-4279355966-1089 - Limited - Enabled) => C:\Users\UpdatusUser
WDAGUtilityAccount (S-1-5-21-3313380613-1349851029-4279355966-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

. . . (HKLM\...\{870E5275-5457-4BBC-98C9-BFF4B70AA5D3}) (Version: 3.1.0.12 - Intel) Hidden
32 Bit HP CIO Components Installer (HKLM\...\{859D40CF-8491-44AD-8FA8-7389CB418C64}) (Version: 1.1.0 - Hewlett-Packard) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 27.0.0.124 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
ANT Drivers Installer x86 (HKLM\...\{E64F69D8-38FE-48B8-95AB-CC676FA636F1}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Arduino (HKLM\...\Arduino) (Version: 1.8.1 - Arduino LLC)
Arturia Arp2600 V v1.0 (HKLM\...\Arturia Arp2600 V v1.0) (Version: - )
ASIO4ALL (HKLM\...\ASIO4ALL) (Version: 2.10 - Michael Tippach)
Aspire 4.0 (HKLM\...\Aspire) (Version: 4.0 - Vectric)
ASUSUpdate for Eee PC (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 1.04.01 - ASUSTeK Computer Inc.)
AsusVibeCheckUpdate (HKLM\...\AsusVibeCheckUpdate_is1) (Version: - ASUSTEK)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.33 - Atheros Communications Inc.)
aTube Catcher verze 3.8 (HKLM\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Audacity 2.1.2 (HKLM\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
AutoCAD 2010 - česky (HKLM\...\{5783F2D7-8001-0405-0002-0060B0CE6BBA}) (Version: 18.0.55.0 - Autodesk) Hidden
AutoCAD 2010 - česky (HKLM\...\AutoCAD 2010 - česky) (Version: 18.0.55.0 - Autodesk)
AutoCAD DWG to PDF Converter v6.9.2 (HKLM\...\AutoCAD DWG to PDF Converter_is1) (Version: - AcroCAD Inc.)
Autodesk CAD Manager Tools (HKLM\...\{5783F2D7-0111-0409-0010-0060B0CE6BBA}) (Version: 16.0.0.65 - Autodesk)
Avast Internet Security (HKLM\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Ross-Tech USB Driver Package (05/21/2009 2.04.18) (HKLM\...\B406677FA530D213D0B10B080DCD1080AE866D39) (Version: 05/21/2009 2.04.18 - Ross-Tech)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
BlazeDTV 6.0 (HKLM\...\BlazeDTV 6.0_is1) (Version: - )
Brother MFL-Pro Suite DCP-L2520DW series (HKLM\...\{F8ECC2FD-CE2B-4ED4-BDCC-90D0D34206FD}) (Version: 1.0.2.0 - Brother Industries, Ltd.)
BS.Player PRO (HKLM\...\BSPlayerp) (Version: 2.67.1076 - AB Team, d.o.o.)
CapsHook (HKLM\...\{4B5092B6-F231-4D18-83BC-2618B729CA45}) (Version: 1.0.0.5 - AsusTek Computer)
CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)
CorelDRAW Graphics Suite X3 (HKLM\...\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}) (Version: 13.0 - Corel Corporation)
Cut2D 1.1 (HKLM\...\Cut2D) (Version: 1.1 - Vectric Limited)
Cut3D 1.11 (HKLM\...\Cut3D) (Version: 1.11 - Vectric)
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3718a - CyberLink Corp.)
CZ (HKLM\...\{CCF7074B-BE72-44E1-9CAC-3FFAC582C692}) (Version: 13.0 - Corel Corporation) Hidden
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0196 - Disc Soft Ltd)
Eee Docking 3.8.1 (HKLM\...\Eee Docking_is1) (Version: 3.8.1 - ASUSTek Computer Inc.)
EeeSplendid (HKLM\...\{6333FC29-BFE5-4024-AC78-958A1A7555D1}) (Version: 5.1.2.0011 - ASUS)
EeeSplendid (HKLM\...\{D802DD00-16A8-4A58-AFC9-020C2380ECDA}) (Version: 5.1.2.0011 - ASUS) Hidden
Elevated Installer (HKLM\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Enigma (HKLM\...\{1F145099-1224-4C5B-84F2-7AE6DC699F1A}) (Version: 1.2.0.0 - M-Audio)
Facebook Video Calling 1.2.0.287 (HKLM\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
FontNav (HKLM\...\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}) (Version: 5.0 - Corel Corporation) Hidden
FontResizer (HKLM\...\{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek) Hidden
FontResizer (HKLM\...\InstallShield_{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek)
Garmin Communicator Plugin (HKLM\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM\...\{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Google Contact Sync (HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\bb91a114638258b8) (Version: 1.9.9.10 - Heartofangel.com)
Google Chrome (HKLM\...\Google Chrome) (Version: 63.0.3239.84 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Guitar Pro 6 (HKLM\...\{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1) (Version: - Arobas Music)
Hotkey Service (HKLM\...\{71C0E38E-09F2-4386-9977-404D4F6640CD}) (Version: 1.31 - AsusTek Computer Inc.)
ChromecastApp (HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1693.0 - Google Inc.)
Icecream PDF Split and Merge verze 3.26 (HKLM\...\{95DC4DB4-99FB-4FB2-ADBD-97F194EDEB4D}_is1) (Version: 3.26 - Icecream Apps)
Intel Processor Diagnostic Tool (HKLM\...\{645CFDA5-8772-46DE-8B10-3394E0A31B09}) (Version: 4.0.0.29 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM\...\{2550a40e-aac6-4d21-9361-744d33bec573}) (Version: 3.1.0.12 - Intel)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
Jazykový balíček aplikace AutoCAD 2010 - čeština (HKLM\...\{5783F2D7-8001-0405-1002-0060B0CE6BBA}) (Version: 18.0.55.0 - Autodesk) Hidden
Junk Mail filter update (HKLM\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Mega Codec Pack 13.5.0 (HKLM\...\KLiteCodecPack_is1) (Version: 13.5.0 - KLCP)
KORG USB-MIDI Driver Tools for Windows (HKLM\...\{C962EF10-7539-477A-A0AD-F8CBD0E9F7E5}) (Version: 1.11.0050 - KORG Inc.)
Kurzweil PC3K Sound Editor 2.4.4 (HKLM\...\Kurzweil PC3K Sound Editor 2.4.4_is1) (Version: - Kurzweil Music Systems)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - )
LinPlug Albino VSTi RTAS v2.2.1 (HKLM\...\LinPlug Albino VSTi RTAS v2.2.1) (Version: - )
LinPlug Octopus VSTi v1.0 (HKLM\...\LinPlug Octopus VSTi v1.0) (Version: - )
Linplug SaxLab v1.0.2 (HKLM\...\Linplug SaxLab v1.0.2) (Version: - )
LiveUpdate (HKLM\...\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}) (Version: 1.22 - AsusTek Computer Inc.)
Mach3 Mach3VersionR2.63 (HKLM\...\Mach3 Mach3VersionR2.63) (Version: Mach3VersionR2.63 - ArtSoft CNC Software Inc.)
MakeMKV v1.10.2 (HKLM\...\MakeMKV) (Version: v1.10.2 - GuinpinSoft inc)
M-Audio Axiom Driver 1.1.1 (x86) (HKLM\...\{263D0845-6A38-4B83-ACF5-C48E0C62450B}) (Version: 1.1.1 - M-Audio)
M-Audio Reason Control Surface (HKLM\...\{F72DD596-F857-463C-AA43-647B45FCE14D}) (Version: 1.0.1 - M-Audio)
Mechanical Calculator 7 (7.7.4) (HKLM\...\Mechanical Calculator_is1) (Version: - SODEV Technology, s.r.o.)
Mesh Runtime (HKLM\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (HKLM\...\{B44F3823-52DD-45CA-A916-8B320778715D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Meta USB Driver (HKLM\...\MetaDriver) (Version: 1.0.2 - M7)
Microsoft .NET Compact Framework 3.5 (HKLM\...\{291B3A3B-F808-45B8-8113-DF232FCB6C82}) (Version: 3.5.7283 - Microsoft Corporation)
Microsoft Office 2003 Web Components (HKLM\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-007A-0405-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version: - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
MSVC90_x86 (HKLM\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Musicnotes Software Suite 1.5.3 (HKLM\...\Musicnotes Combined Installer_is1) (Version: 1.5.3 - Musicnotes Inc.)
NVIDIA Ovladač 3D Vision 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.2.19.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.19.0 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OOBERegBackup (HKLM\...\OOBERegBackup_is1) (Version: - ASUSTeK Computer Inc.)
OpenCL™ runtime for Intel® Core™ and Xeon® Processors (HKLM\...\{4A859071-30A4-401E-8C8F-8DBA0AADBEED}) (Version: 6.4.0.25 - Intel Corporation)
Overture 4.1 (HKLM\...\Overture 4.1) (Version: - )
Ovládací panel NVIDIA 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 342.01 - NVIDIA Corporation) Hidden
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
PhotoVCarve 1.1 (HKLM\...\PhotoVCarve) (Version: 1.1 - Vectric Ltd)
Pinnacle TVCenter Pro (HKLM\...\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}) (Version: - )
PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.3.0 - Prolific Technology INC)
Playlist Editor (HKLM\...\{36068588-9992-48E9-B223-5BEBB0C7A322}) (Version: 1.00.0009 - Roland Corporation)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Pomocník s aktualizací Windows 10 (HKLM\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22256 - Microsoft Corporation)
ProgDVB (HKLM\...\ProgDVB) (Version: - )
RealDownloader (HKLM\...\{13743594-F75E-491E-9EFF-203C8F8DF705}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealDownloader (HKLM\...\{48D18738-099C-4FAA-AFD9-80B592A25478}) (Version: 18.1.3.103 - RealNetworks, Inc.) Hidden
RealDownloader (HKLM\...\{f05bfa4b-0c78-4a3e-aa74-8c220b4a7782}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM\...\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (HKLM\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Repetier-Host verze 2.0.5 (HKLM\...\{1143F758-929B-4EEB-8784-46CCB622F037}_is1) (Version: 2.0.5 - repetier)
Repetier-Server (HKLM\...\Repetier-Server) (Version: 0.86.2 - Hot-World GmbH & Co. KG)
Revo Uninstaller Pro 3.0.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.2 - VS Revo Group, Ltd.)
RgcAudio z3ta Plus DXi VSTi v1.41 (HKLM\...\RgcAudio z3ta Plus DXi VSTi v1.41) (Version: - )
SafeZone Stable 4.58.2552.909 (HKLM\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
SD-50 Driver (HKLM\...\RolandRDID0105) (Version: - Roland Corporation)
Sentinel Protection Installer 7.6.1 (HKLM\...\{7B1AA2AB-ACD2-45C7-B1B1-364BEA40615F}) (Version: 7.6.1 - SafeNet, Inc.)
Sentinel System Driver (HKLM\...\Rainbow Sentinel Driver) (Version: - )
setup (HKLM\...\{7754B52E-12AD-44E5-8160-17482302D317}) (Version: 1.0.0 - Company Name)
Shell executable of Setup program 17.0.4.61 (HKLM\...\Shell executable of Setup program 17.0.4.61) (Version: 17.0.4.61 - RealNetworks, Inc.)
Skype™ 7.40 (HKLM\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
SONAR 7 Producer Edition (HKLM\...\SONAR7Producer_is1) (Version: 15.0 - Cakewalk Music Software)
Super Hybrid Engine (HKLM\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.13 - AsusTek Computer)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
syncables desktop SE (HKLM\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables)
SyncroSoft Emu (Remove only) (HKLM\...\SyncroSoft Emu) (Version: - )
Syncrosoft's License Control (HKLM\...\Syncrosoft's License Control) (Version: - Syncrosoft Hard- Und Software GmbH)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update Manager (HKLM\...\{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}) (Version: 4.60 - Corel Corporation) Hidden
UpdateService (HKLM\...\{E3AE96D6-E196-45B4-AF62-2B41998B9E37}) (Version: 1.0.0 - RealNetworks, Inc.) Hidden
US-122 MKII / US-144 MKII (HKLM\...\USB_AUDIO_DEusb-audio.deTascam) (Version: - )
USB2.0 UVC VGA WebCam (HKLM\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10252 - Realtek Semiconductor Corp.)
VAG Info System (HKLM\...\{64D24CA4-3E42-460A-B4C7-FB7A1CE1C629}) (Version: - B.J.SERVIS)
VBA (HKLM\...\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}) (Version: 6.2 - Corel Corporation) Hidden
VC80CRTRedist - 8.0.50727.6195 (HKLM\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
VCarve Pro 6.0 (HKLM\...\VCarve Pro) (Version: 6.0 - Vectric)
Vectric Shell Extensions 1.2 (HKLM\...\VectricThumbnailShellExt) (Version: - Vectric)
Video Converter 3 (HKLM\...\Video Converter 3) (Version: 3.1.10.0926b - Xilisoft)
Video Downloader (HKLM\...\{8B6202FD-3790-4DD4-B343-51736F7FF4E5}) (Version: 1.2.0 - RealNetworks) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5500 - Broadcom Corporation)
Win32DiskImager version 0.9.5 (HKLM\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Winamp (HKLM\...\Winamp) (Version: 5.66 - Nullsoft, Inc)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{068B46A0-8858-4CEB-80BC-A4AE787A05FC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinHTTrack Website Copier 3.44-4 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.44.4 - HTTrack)
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
WinZip (HKLM\...\WinZip) (Version: 11.0 (7313) - WinZip Computing LP)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0B91A74B-AD7C-4A9D-B563-29EEF9167172}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0C15D503-D017-47CE-9016-7B3F978721CC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{104846AB-42B1-4E38-A80D-136F78C3F258}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{16D51579-A30B-4C8B-A276-0FF4DC41E755}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{18907F3B-9AFB-4F87-B764-F9A4E16A21B8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{36A21736-36C2-4C11-8ACB-D4136F2B57BD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{447003B9-30BE-41ED-8A48-5822B6BEDCA3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InprocServer32 -> C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{475D839A-00BC-41F2-8489-9F1C0692BC33}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{47775DA0-E874-4EAF-A28C-20C6E2D387A0}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4955DD33-B159-11D0-8FCF-00AA006BCC59}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{49F371E1-8C5C-4D9C-9A3B-54A6827F513C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{50EF4544-AC9F-4A8E-B21B-8A26180DB13F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{53BD6B4E-3780-4693-AFC3-7161C2F3EE9C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{640167B4-59B0-47A6-B335-A6B3C0695AEA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{6F13DD2E-EBEE-4DD5-A72E-850B2087F5DD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{71F96385-DDD6-48D3-A0C1-AE06E8B055FB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{725F645B-EAED-4FC5-B1C5-D9AD0ACCBA5E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EB61E0-8672-4303-9175-F2E4C68B2E7C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EC5935-3EC3-4E94-A3F1-D2FC478521C2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{7EFC002A-071F-4CE7-B265-F4B4263D2FD2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{88D969EC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{896664F7-12E1-490F-8782-C0835AFD98FC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{934D4698-6A59-48F8-9F29-9FB30670320E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{97E467B4-98C6-4F19-9588-161B7773D6F6}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9CFC2DF3-6BA3-46EF-A836-E519E81F0EC4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{AEB16279-B750-48F1-8586-97956060175A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3743-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF7227D0-D41D-48FC-B545-8263F2CDA621}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF735767-E6DA-11CF-AB9B-00C0F00683EB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C120DE80-FDE4-49F5-A713-E902EF062B8A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D58960BA-2EF3-4910-9E34-C911B1710180}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD 2010\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E8708A5D-7F86-4E08-8597-DEF3CDAC5550}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{FE841493-835C-4FA3-B6CC-B4B2D4719848}\InprocServer32 -> no filepath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ShellIconOverlayIdentifiers: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2009-02-09] (Autodesk)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ContextMenuHandlers1: [IcecreamShellExtension] -> {A8B59160-93EA-4303-9192-AA3C64FDBE31} => C:\Program Files\Icecream PDF Split and Merge\IcecreamShell.dll [2016-02-04] (TODO: <Company name>)
ContextMenuHandlers1: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2008-09-16] ()
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2006-11-10] (WinZip Computing LP)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> [CC]{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2008-09-16] ()
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2006-11-10] (WinZip Computing LP)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2008-09-16] ()
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2006-11-10] (WinZip Computing LP)
ContextMenuHandlers1_S-1-5-21-3313380613-1349851029-4279355966-1001: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => -> No File

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {015191EA-60AF-48A1-A15A-1B1C07CCC25F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {056B08AE-49D7-445A-9949-54C6C3E0B075} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {105B2974-BF36-4C95-8F3C-246B1FA1990B} - System32\Tasks\{E2CBB101-9B91-4806-BA53-D9882CA4458E} => C:\windows\system32\pcalua.exe -a C:\Users\David\Desktop\PG7610000_Marvel_hboot_1.09.0099_2.13.401.3_0210_R.exe -d C:\Users\David\Desktop
Task: {14066148-43C7-4CAA-9DF7-56425F876892} - System32\Tasks\SafeZone scheduled Autoupdate 1457361918 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {159E755B-6C94-45E4-8183-62F7D968BE53} - System32\Tasks\{E492DCE9-CBCD-4B2E-BC5C-DEAAF6EC1571} => C:\windows\system32\pcalua.exe -a C:\Users\David\Desktop\ted\1-surfcam2003b83\SURFCAM\utils\SCRepairInstall.exe -d C:\Users\David\Desktop\ted\1-surfcam2003b83\SURFCAM\utils
Task: {1A0E58C3-F4C0-4BDE-818F-A5EC7E470010} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {20AEAA7C-6DD7-4250-B48A-9F12C50ED866} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {245F94F3-DFE1-4785-9CAD-1715BFF46DFF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core1d211f64beafe68 => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {2638A186-0C5A-438A-9BB4-5D893215EF1F} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3313380613-1349851029-4279355966-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {2820EE39-F710-4DB3-AFFC-07E7FC91B5A8} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2B252DE9-F2D1-4E85-88BA-2533F09FF64B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2017-12-08] (AVAST Software)
Task: {2BEFCD47-7413-42DA-9445-F8F461E6D891} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2D55B9E7-B892-4744-A7DD-15E1B185DF16} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {36A71AEA-CD1C-4C34-9B1F-576ACC7F3634} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA1d211f64c05384c => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {3986176B-044E-4F01-BFB2-E0A6DE06F82F} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-15] (AVAST Software)
Task: {3B67B5CC-C702-476C-A7AF-E58E16EEC9C1} - System32\Tasks\{2BA0784B-C888-43F2-82F6-9B444A92040C} => C:\windows\system32\pcalua.exe -a "C:\Users\David\AppData\Local\Temp\wz11ec\TurboCAD profesional v18.2 CZ\TurboCADProfessional18.2.exe" -d C:\Users\David\Downloads <==== ATTENTION
Task: {3ECE2621-02F6-4F08-B3F1-DBA419A401E7} - System32\Tasks\{7CBA99A7-A432-41D6-97E3-2A844ECF4E5D} => "c:\program files\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/cs/abandoninstall?page=tsBing
Task: {41CB00EB-BF3B-4C0C-ADE9-CC40E0433BCC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {470F09D1-AD1F-46FF-94AF-A146126A447F} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {48F23FBC-8F02-4ED5-8DC2-5A6A234D272C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {558EF77A-BDCB-4AA2-BC60-CA31F9214CC5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {561EF91C-8AFB-4BA2-A122-4CE2579B642E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5BC6E197-AC0A-4768-A5F1-0B2B53885E2D} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {62798374-0704-44CD-BF98-22291332FB60} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {62BF4844-F663-4386-B09A-EB105DE7E9BC} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {64D1224A-4D6F-4A7B-BE59-5940881DC181} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6A4E0C06-3985-4232-A0E5-8D1E67080601} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {6CE5279F-8A35-43A6-B398-5378A7EC7D3C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {72BADAE4-8A85-4042-B39D-5DE99641247B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {75EE6992-A0D2-45C2-AB2E-FAACB2A31A8C} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] ()
Task: {7653AFEA-91C9-4A86-960D-0DB488A024A5} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {7AF7B07E-0EB1-4126-B2EE-BC65551B4B41} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-09-01] ()
Task: {7C4B4A7F-F9CB-48AD-B41F-84A135465775} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {824EF491-6C88-4557-BBE9-465F2F052230} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {828F027A-4D49-40D0-8FC5-C94A1D1DF09A} - System32\Tasks\ReclaimerUpdateXML_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {83CBCA4E-91B5-4EE5-B277-D0FA5AAFAA4B} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-12-12] (Adobe Systems Incorporated)
Task: {8729545A-1A36-4EA8-A944-C70F6DE66200} - System32\Tasks\{9053CA6A-B7E7-41C2-BA01-947DBAF85973} => C:\windows\system32\pcalua.exe -a C:\Users\David\Desktop\crack.exe -d C:\Users\David\Desktop
Task: {8CBC88B8-FF5D-410A-BDB6-9982CBB0DD74} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {8F761A97-0C81-4263-B589-6846850ACF3C} - System32\Tasks\{A9E9225E-197B-4CC2-94B2-538F0395D4C5} => C:\windows\system32\pcalua.exe -a C:\Users\David\Downloads\PG7610000_Marvel_hboot_1.08.0099_20111216.exe -d C:\Users\David\Downloads
Task: {91715BC9-A1DB-4A36-9849-B2E397FF2094} - System32\Tasks\{6FD18B92-11DE-4F61-89E9-3060A925F7E2} => C:\windows\system32\pcalua.exe -a C:\SURFCAM\Surf2003\surfcam.exe -d C:\SURFCAM\Surf2003
Task: {A5B40A23-7EEE-4371-AD11-44CFE9FE58F6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AC6C5A04-D3C1-4CD8-AF7F-AE4652F67ACA} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {B1574C44-D5A7-4EF7-8499-853903C829DB} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B229EC04-34A1-4800-9034-978E541B19F4} - System32\Tasks\RNUpgradeHelperLogonPrompt_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {B8C3BA3F-C568-4880-B9CC-267BFEE47354} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C060F913-1313-4381-AC24-1B5A723165D0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {C0B53FC0-D62D-4C56-81A5-BE38AB0715F9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {C3B1DD32-4A8B-4EEB-80DF-C160400399EB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CE9396EB-871A-4E0F-B9F6-327E6638A0CD} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {D3057D81-9EAC-4926-8A61-AFB8AB2EAB21} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {DC2FD05B-B769-4767-84D8-BAA7D8E5723E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3313380613-1349851029-4279355966-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {E339A933-A6B8-47AA-9B15-093F4F5249C2} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {E6191421-D3FA-40F0-A6DB-DB219D8C41FD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {EB454A5D-E458-4F61-A05A-FF43D6BE17AB} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EE87AEFB-4C99-44AA-A7A0-C5DAB54156F4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EE94DF76-34E0-44D3-A960-CD7B9B9FF603} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {EE97E89A-4CCB-44FF-815F-E760E210327E} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files\AVG\AVG PC TuneUp\tuscanx.exe
Task: {F0EE83A4-4976-47DB-A803-EE812E282E03} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {F5E87A17-B3FE-4065-B741-69997792F820} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {F6FF8036-5B6B-4537-BC2B-E1E9E8EC680E} - System32\Tasks\Driver Booster SkipUAC (David) => C:\Program Files\IObit\Driver Booster\4.5.0\DriverBooster.exe
Task: {F78AB4F4-8A42-4998-A57E-DCD343641FCD} - System32\Tasks\RNUpgradeHelperResumePrompt_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {F855AA22-2927-4791-A5EF-63C5571190C2} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {FB4E5527-48DF-4F5D-A2B0-A3078318045E} - System32\Tasks\ReclaimerUpdateFiles_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {FD9458E9-C1CF-479D-B476-97C0D8177282} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)
Task: {FF58AAFE-4D97-496F-9B68-2098A188B4F8} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\David\Desktop\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\David\AppData\Local\Google\Chrome\User Data\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Hudba Google Play.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Videostream for Google Chromecast™.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=cnciopoikihiagdjbjpnocolokfelagl
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 12:49 - 2017-09-29 12:49 - 000149840 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-07-20 17:18 - 2016-11-14 12:00 - 000123448 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2012-10-08 15:16 - 2001-10-28 15:42 - 000116224 _____ () C:\WINDOWS\System32\pdfcmnnt.dll
2012-12-07 18:27 - 2012-12-07 18:27 - 000167424 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
2017-08-07 19:17 - 2017-08-07 19:17 - 006129000 _____ () C:\Program Files\Repetier-Server\bin\RepetierServer.exe
2017-01-01 13:54 - 2009-02-27 16:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2017-11-15 19:07 - 2017-11-15 19:07 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 007817728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001518592 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-11-15 19:07 - 2017-11-15 19:07 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-07-11 15:18 - 2017-07-11 15:18 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-11-15 19:08 - 2017-11-15 19:08 - 000237808 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-11-15 19:08 - 2017-11-15 19:08 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-11-15 19:07 - 2017-11-15 19:07 - 000235816 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-19 19:17 - 2017-05-19 19:17 - 000065536 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2017-12-08 14:21 - 2017-12-06 04:48 - 002195800 _____ () C:\Program Files\Google\Chrome\Application\63.0.3239.84\swiftshader\libglesv2.dll
2017-12-08 14:21 - 2017-12-06 04:48 - 000111448 _____ () C:\Program Files\Google\Chrome\Application\63.0.3239.84\swiftshader\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:66BB1E73 [147]
AlternateDataStreams: C:\ProgramData\Temp:F34493AA [320]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Classes\.scr: AutoCADScriptFile =>

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2016-07-15 12:26 - 000000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\David\Pictures\mesta_46-1920x1080.jpg
HKU\S-1-5-21-3313380613-1349851029-4279355966-1089\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 217.112.162.34 - 217.112.160.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Garmin Device Interaction Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk => C:\windows\pss\Adobe Acrobat Speed Launcher.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealPlayer Cloud Service UI.lnk => C:\windows\pss\RealPlayer Cloud Service UI.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealTimes.lnk => C:\windows\pss\RealTimes.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Jádro Plánovače úloh SolidWorks.lnk => C:\windows\pss\Jádro Plánovače úloh SolidWorks.lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\windows\AsScrPro.exe
MSCONFIG\startupreg: ASUSPRP => C:\Program Files\ASUS\APRP\APRP.EXE
MSCONFIG\startupreg: ASUSWebStorage => C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
MSCONFIG\startupreg: CapsHook => AsusSender.exe C:\Program Files\EeePC\CapsHook\CapsHook.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: CLMLServer => "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: Eee Docking => C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19 => "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: GraphicsSwitch => AsusSender.exe C:\Program Files\Asus\GraphicsSwitch\GPUStatusMonitor.exe
MSCONFIG\startupreg: H2O => C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
MSCONFIG\startupreg: HotkeyMon => AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
MSCONFIG\startupreg: HotKeysCmds => C:\windows\system32\hkcmd.exe
MSCONFIG\startupreg: HotkeyService => AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
MSCONFIG\startupreg: HTC Sync Loader => "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
MSCONFIG\startupreg: IAAnotif => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
MSCONFIG\startupreg: IgfxTray => C:\windows\system32\igfxtray.exe
MSCONFIG\startupreg: ISUSPM Startup => "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
MSCONFIG\startupreg: ISUSScheduler => "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
MSCONFIG\startupreg: LiveUpdate => AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
MSCONFIG\startupreg: OOBESetup => C:\Program Files\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files\asus\OOBERegBackup\OOBEReg.ini"
MSCONFIG\startupreg: Persistence => C:\windows\system32\igfxpers.exe
MSCONFIG\startupreg: RealDownloader => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SuperHybridEngine => AsusSender.exe C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
MSCONFIG\startupreg: SynAsusAcpi => %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: UCam_Menu => "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe
HKLM\...\StartupApproved\Run: => "DSATray"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "DivXMediaServer"
HKLM\...\StartupApproved\Run: => "RealDownloader"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "Application Restart #0"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "ISM"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "Syncables"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{77A6152C-0A09-4ABC-A6F7-E7339DBB4A24}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{ED4ED8DE-C529-483A-A78E-A5C8E1AF2210}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{0AC06A0B-3B4B-4FDE-B355-4305D1D696DA}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{56D3C9DA-8FAE-4217-9E32-242A620DE5F9}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{03E64B93-4450-42C6-964F-1199A91DFD89}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [TCP Query User{1FC484CD-C569-4A08-ACAD-D08441B70B10}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [UDP Query User{AE06B32C-7127-4C0A-AFAC-51B731A1F338}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [TCP Query User{7AF3974D-5EA6-4C86-85CE-641245E3F532}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [UDP Query User{70B6C52F-E567-4B83-99CF-052F73B7A02C}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [{0EC76436-D14E-4199-BF32-0DF8AF31EB25}] => (Allow) LPort=26675
FirewallRules: [{E92BBC6C-6B87-4B98-BD7B-533F2FDFB58F}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [TCP Query User{1871ED95-EC9D-4CF4-817B-7FC02891CF23}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{7A488796-EA20-409D-8C09-F50844EBA999}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [{816851E0-0831-4D85-AE22-5CC6D57A741D}] => (Allow) LPort=26675
FirewallRules: [TCP Query User{603CAB50-B4C1-4EE0-AC67-C1F3D2B1BAC3}C:\wanscam\wanscam.exe] => (Allow) C:\wanscam\wanscam.exe
FirewallRules: [UDP Query User{EBBB1DFB-9A79-446A-A51E-B328E2357442}C:\wanscam\wanscam.exe] => (Allow) C:\wanscam\wanscam.exe
FirewallRules: [{FB34F1D4-FF26-4E7E-A393-97C4B0C8521C}] => (Allow) LPort=26675
FirewallRules: [TCP Query User{9156660D-D1A9-4047-AF9B-4290F8F9188D}C:\wanscam\wanscam.exe] => (Block) C:\wanscam\wanscam.exe
FirewallRules: [UDP Query User{B9AB5266-A314-4300-B1CE-4F934168014C}C:\wanscam\wanscam.exe] => (Block) C:\wanscam\wanscam.exe
FirewallRules: [{D3E617C3-B68D-4A8E-857F-B9CFD7F3908A}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{15187E55-4996-43F8-9179-8236D573F236}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{8A3F82EB-58F5-4F3E-B3FB-A8A54FB62EEC}] => (Allow) C:\Windows\System32\nbirv4svr.exe
FirewallRules: [{90B0C55F-592D-4AC9-A260-AE3A7C22FB73}] => (Allow) C:\Windows\System32\nbirv4svr.exe
FirewallRules: [{A8BEC17F-D7D9-4DCC-BCB5-B37C0F55FEFE}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{A555831A-4FB4-4EB5-834B-A603B0150664}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{A73E0800-C87D-4D89-B178-633E76E43821}] => (Allow) LPort=5556
FirewallRules: [{06E9AF3F-2167-47DB-A9AB-4181301BF43F}] => (Allow) LPort=5558
FirewallRules: [{35CFD105-0F52-4306-B65D-B180DC354592}] => (Allow) LPort=26675
FirewallRules: [{EC73DD74-95D5-4FEB-B6FE-8C7E47F46008}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8D6774D3-2CDF-4EF1-99EF-AD0C9189D380}] => (Allow) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{672D3EF9-20BC-4175-9839-2AFBEDBC6176}] => (Allow) LPort=54925
FirewallRules: [{57375476-2137-487D-874D-416394F830E0}] => (Allow) C:\Program Files\Repetier-Server\bin\RepetierServer.exe
FirewallRules: [{440A471B-E7AC-402D-A603-B2E0EA868EB4}] => (Allow) C:\Program Files\Repetier-Server\bin\RepetierServer.exe

==================== Restore Points =========================

13-12-2017 18:47:11 Windows Update
18-12-2017 14:23:43 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/18/2017 02:32:52 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/18/2017 02:32:51 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/18/2017 02:32:07 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/18/2017 02:32:06 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/18/2017 02:24:05 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (12/18/2017 02:19:19 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování se nedokončilo z důvodu chyby zápisu do umístění zálohy E:\. Chyba: Umístění zálohy se nepovedlo najít nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (12/13/2017 08:33:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RealPlayerUpdateSvc.exe, verze: 0.0.0.0, časové razítko: 0x56b2bc35
Název chybujícího modulu: ntdll.dll, verze: 10.0.16299.64, časové razítko: 0x1d27c592
Kód výjimky: 0xc0000005
Posun chyby: 0x000b3e17
ID chybujícího procesu: 0xd5c
Čas spuštění chybující aplikace: 0x01d37445041f1d35
Cesta k chybující aplikaci: C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: 2d8cbe86-e452-4e0d-a8da-e4966f04c43e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (12/13/2017 07:48:03 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro C:\Users\David\Desktop\CH340G_USB driver\DRVSETUP64.exe se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (12/13/2017 06:56:48 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Generování kontextu aktivace pro E:\C Plus--\C机器--\CH340G_USB to TTL driver\CH340G_USB driver\DRVSETUP64.exe se nezdařilo.
Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="AMD64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" nelze najít.
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (12/13/2017 06:47:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RealPlayerUpdateSvc.exe, verze: 0.0.0.0, časové razítko: 0x56b2bc35
Název chybujícího modulu: ntdll.dll, verze: 10.0.16299.64, časové razítko: 0x1d27c592
Kód výjimky: 0xc0000005
Posun chyby: 0x000b3e17
ID chybujícího procesu: 0xcf8
Čas spuštění chybující aplikace: 0x01d3742b59f93044
Cesta k chybující aplikaci: C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: 90c4e15a-b315-48b9-a473-3c65f10f6fae
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (12/18/2017 02:36:05 PM) (Source: DCOM) (EventID: 10016) (User: David-PC)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli David-PC\David (SID: S-1-5-21-3313380613-1349851029-4279355966-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (12/16/2017 01:56:46 PM) (Source: DCOM) (EventID: 10016) (User: David-PC)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli David-PC\David (SID: S-1-5-21-3313380613-1349851029-4279355966-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (12/16/2017 01:56:39 PM) (Source: DCOM) (EventID: 10016) (User: David-PC)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli David-PC\David (SID: S-1-5-21-3313380613-1349851029-4279355966-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (12/14/2017 07:56:20 PM) (Source: DCOM) (EventID: 10010) (User: David-PC)
Description: Server Microsoft.Windows.Photos_2017.39101.16720.0_x86__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (12/13/2017 08:33:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba RealPlayer Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (12/13/2017 08:06:14 PM) (Source: DCOM) (EventID: 10016) (User: David-PC)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli David-PC\David (SID: S-1-5-21-3313380613-1349851029-4279355966-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (12/13/2017 08:06:08 PM) (Source: DCOM) (EventID: 10016) (User: David-PC)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli David-PC\David (SID: S-1-5-21-3313380613-1349851029-4279355966-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (12/13/2017 08:03:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba NetTcpActivator závisí na službě NetTcpPortSharing, která neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (12/13/2017 08:03:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetTcpPortSharing neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (12/13/2017 08:03:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby NetTcpPortSharing bylo dosaženo časového limitu (30000 ms).


==================== Memory info ===========================

Processor: Intel(R) Atom(TM) CPU D525 @ 1.80GHz
Percentage of memory in use: 67%
Total physical RAM: 2805.99 MB
Available physical RAM: 913.66 MB
Total Virtual: 5621.99 MB
Available Virtual: 3373 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:13.84 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:183.07 GB) (Free:11.68 GB) NTFS
Drive e: () (Removable) (Total:1.86 GB) (Free:1.33 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 11B42F68)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15 GB) - (Type=1B)
Partition 3: (Not Active) - (Size=183.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 MB) - (Type=EF)

========================================================
Disk: 1 (Size: 3.8 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

Na plose, tam kde mas umisteny FRST vytvor TXT soubor, ktery pojmenujes fixlist.txt a do nej vloz nasledujici text:

( Spusť znovu FRST a klikni na >Fix<. Po skončení akce se objeví log, který sem zkopíruj).

start
CreateRestorePoint:

CloseProcesses:

Hosts:

EmptyTemp:

HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gryfis.ic.cz/
Toolbar: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF Extension: (No Name) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF Plugin HKU\S-1-5-21-3313380613-1349851029-4279355966-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\David\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [No File]
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0B91A74B-AD7C-4A9D-B563-29EEF9167172}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0C15D503-D017-47CE-9016-7B3F978721CC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{104846AB-42B1-4E38-A80D-136F78C3F258}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{16D51579-A30B-4C8B-A276-0FF4DC41E755}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{18907F3B-9AFB-4F87-B764-F9A4E16A21B8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{36A21736-36C2-4C11-8ACB-D4136F2B57BD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{447003B9-30BE-41ED-8A48-5822B6BEDCA3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{475D839A-00BC-41F2-8489-9F1C0692BC33}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{47775DA0-E874-4EAF-A28C-20C6E2D387A0}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4955DD33-B159-11D0-8FCF-00AA006BCC59}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{49F371E1-8C5C-4D9C-9A3B-54A6827F513C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{50EF4544-AC9F-4A8E-B21B-8A26180DB13F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{53BD6B4E-3780-4693-AFC3-7161C2F3EE9C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{640167B4-59B0-47A6-B335-A6B3C0695AEA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{6F13DD2E-EBEE-4DD5-A72E-850B2087F5DD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{71F96385-DDD6-48D3-A0C1-AE06E8B055FB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{725F645B-EAED-4FC5-B1C5-D9AD0ACCBA5E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EB61E0-8672-4303-9175-F2E4C68B2E7C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EC5935-3EC3-4E94-A3F1-D2FC478521C2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{7EFC002A-071F-4CE7-B265-F4B4263D2FD2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{88D969EC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{896664F7-12E1-490F-8782-C0835AFD98FC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{934D4698-6A59-48F8-9F29-9FB30670320E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{97E467B4-98C6-4F19-9588-161B7773D6F6}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9CFC2DF3-6BA3-46EF-A836-E519E81F0EC4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{AEB16279-B750-48F1-8586-97956060175A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3743-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF7227D0-D41D-48FC-B545-8263F2CDA621}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF735767-E6DA-11CF-AB9B-00C0F00683EB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C120DE80-FDE4-49F5-A713-E902EF062B8A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D58960BA-2EF3-4910-9E34-C911B1710180}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E8708A5D-7F86-4E08-8597-DEF3CDAC5550}\InprocServer32 -> no filepath
ustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{FE841493-835C-4FA3-B6CC-B4B2D4719848}\InprocServer32 -> no filepath
ContextMenuHandlers1: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> [CC]{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_S-1-5-21-3313380613-1349851029-4279355966-1001: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => -> No File
Task: {3B67B5CC-C702-476C-A7AF-E58E16EEC9C1} - System32\Tasks\{2BA0784B-C888-43F2-82F6-9B444A92040C} => C:\windows\system32\pcalua.exe -a "C:\Users\David\AppData\Local\Temp\wz11ec\TurboCAD profesional v18.2 CZ\TurboCADProfessional18.2.exe" -d C:\Users\David\Downloads <==== ATTENTION
Task: {3ECE2621-02F6-4F08-B3F1-DBA419A401E7} - System32\Tasks\{7CBA99A7-A432-41D6-97E3-2A844ECF4E5D} => "c:\program files\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/cs/ ... age=tsBing
Task: {48F23FBC-8F02-4ED5-8DC2-5A6A234D272C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {558EF77A-BDCB-4AA2-BC60-CA31F9214CC5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {36A71AEA-CD1C-4C34-9B1F-576ACC7F3634} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA1d211f64c05384c => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {6A4E0C06-3985-4232-A0E5-8D1E67080601} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {72BADAE4-8A85-4042-B39D-5DE99641247B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {7C4B4A7F-F9CB-48AD-B41F-84A135465775} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {AC6C5A04-D3C1-4CD8-AF7F-AE4652F67ACA} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {C060F913-1313-4381-AC24-1B5A723165D0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {D3057D81-9EAC-4926-8A61-AFB8AB2EAB21} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {E339A933-A6B8-47AA-9B15-093F4F5249C2} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {E6191421-D3FA-40F0-A6DB-DB219D8C41FD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {F0EE83A4-4976-47DB-A803-EE812E282E03} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {FF58AAFE-4D97-496F-9B68-2098A188B4F8} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:66BB1E73 [147]
AlternateDataStreams: C:\ProgramData\Temp:F34493AA [320]

end

Ahoj...doufám, že je to tohle


Fix result of Farbar Recovery Scan Tool (x86) Version: 17-12-2017
Ran by David (19-12-2017 13:58:42) Run:1
Running from C:\Users\David\Downloads
Loaded Profiles: David & UpdatusUser (Available Profiles: David & UpdatusUser & DefaultAppPool)
Boot Mode: Normal

==============================================

fixlist content:
*****************
start
CreateRestorePoint:

CloseProcesses:

Hosts:

EmptyTemp:

HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gryfis.ic.cz/
Toolbar: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF Extension: (No Name) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF Plugin HKU\S-1-5-21-3313380613-1349851029-4279355966-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\David\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [No File]
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0B91A74B-AD7C-4A9D-B563-29EEF9167172}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0C15D503-D017-47CE-9016-7B3F978721CC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{104846AB-42B1-4E38-A80D-136F78C3F258}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{16D51579-A30B-4C8B-A276-0FF4DC41E755}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{18907F3B-9AFB-4F87-B764-F9A4E16A21B8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{36A21736-36C2-4C11-8ACB-D4136F2B57BD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{447003B9-30BE-41ED-8A48-5822B6BEDCA3}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{475D839A-00BC-41F2-8489-9F1C0692BC33}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{47775DA0-E874-4EAF-A28C-20C6E2D387A0}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4955DD33-B159-11D0-8FCF-00AA006BCC59}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{49F371E1-8C5C-4D9C-9A3B-54A6827F513C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{50EF4544-AC9F-4A8E-B21B-8A26180DB13F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{53BD6B4E-3780-4693-AFC3-7161C2F3EE9C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{640167B4-59B0-47A6-B335-A6B3C0695AEA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{6F13DD2E-EBEE-4DD5-A72E-850B2087F5DD}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{71F96385-DDD6-48D3-A0C1-AE06E8B055FB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{725F645B-EAED-4FC5-B1C5-D9AD0ACCBA5E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EB61E0-8672-4303-9175-F2E4C68B2E7C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EC5935-3EC3-4E94-A3F1-D2FC478521C2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{7EFC002A-071F-4CE7-B265-F4B4263D2FD2}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{88D969EC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{896664F7-12E1-490F-8782-C0835AFD98FC}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{934D4698-6A59-48F8-9F29-9FB30670320E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{97E467B4-98C6-4F19-9588-161B7773D6F6}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9CFC2DF3-6BA3-46EF-A836-E519E81F0EC4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{AEB16279-B750-48F1-8586-97956060175A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3743-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF7227D0-D41D-48FC-B545-8263F2CDA621}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF735767-E6DA-11CF-AB9B-00C0F00683EB}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C120DE80-FDE4-49F5-A713-E902EF062B8A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D58960BA-2EF3-4910-9E34-C911B1710180}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E8708A5D-7F86-4E08-8597-DEF3CDAC5550}\InprocServer32 -> no filepath
ustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{FE841493-835C-4FA3-B6CC-B4B2D4719848}\InprocServer32 -> no filepath
ContextMenuHandlers1: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> [CC]{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers1_S-1-5-21-3313380613-1349851029-4279355966-1001: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => -> No File
Task: {3B67B5CC-C702-476C-A7AF-E58E16EEC9C1} - System32\Tasks\{2BA0784B-C888-43F2-82F6-9B444A92040C} => C:\windows\system32\pcalua.exe -a "C:\Users\David\AppData\Local\Temp\wz11ec\TurboCAD profesional v18.2 CZ\TurboCADProfessional18.2.exe" -d C:\Users\David\Downloads <==== ATTENTION
Task: {3ECE2621-02F6-4F08-B3F1-DBA419A401E7} - System32\Tasks\{7CBA99A7-A432-41D6-97E3-2A844ECF4E5D} => "c:\program files\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/cs/ ... age=tsBing
Task: {48F23FBC-8F02-4ED5-8DC2-5A6A234D272C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {558EF77A-BDCB-4AA2-BC60-CA31F9214CC5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {36A71AEA-CD1C-4C34-9B1F-576ACC7F3634} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA1d211f64c05384c => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {6A4E0C06-3985-4232-A0E5-8D1E67080601} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {72BADAE4-8A85-4042-B39D-5DE99641247B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {7C4B4A7F-F9CB-48AD-B41F-84A135465775} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {AC6C5A04-D3C1-4CD8-AF7F-AE4652F67ACA} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {C060F913-1313-4381-AC24-1B5A723165D0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {D3057D81-9EAC-4926-8A61-AFB8AB2EAB21} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {E339A933-A6B8-47AA-9B15-093F4F5249C2} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {E6191421-D3FA-40F0-A6DB-DB219D8C41FD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {F0EE83A4-4976-47DB-A803-EE812E282E03} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {FF58AAFE-4D97-496F-9B68-2098A188B4F8} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:66BB1E73 [147]
AlternateDataStreams: C:\ProgramData\Temp:F34493AA [320]

end
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => value removed successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value removed successfully.
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value removed successfully.
HKLM\Software\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => not found
C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com => path removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin" => removed successfully.
C:\Users\David\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll => not found.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0B91A74B-AD7C-4A9D-B563-29EEF9167172}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0C15D503-D017-47CE-9016-7B3F978721CC}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{104846AB-42B1-4E38-A80D-136F78C3F258}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{16D51579-A30B-4C8B-A276-0FF4DC41E755}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{18907F3B-9AFB-4F87-B764-F9A4E16A21B8}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{35786D3C-B075-49B9-88DD-029876E11C01}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{36A21736-36C2-4C11-8ACB-D4136F2B57BD}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{447003B9-30BE-41ED-8A48-5822B6BEDCA3}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{475D839A-00BC-41F2-8489-9F1C0692BC33}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{47775DA0-E874-4EAF-A28C-20C6E2D387A0}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4955DD33-B159-11D0-8FCF-00AA006BCC59}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{49F371E1-8C5C-4D9C-9A3B-54A6827F513C}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{50EF4544-AC9F-4A8E-B21B-8A26180DB13F}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{53BD6B4E-3780-4693-AFC3-7161C2F3EE9C}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{640167B4-59B0-47A6-B335-A6B3C0695AEA}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{6F13DD2E-EBEE-4DD5-A72E-850B2087F5DD}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{71F96385-DDD6-48D3-A0C1-AE06E8B055FB}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{725F645B-EAED-4FC5-B1C5-D9AD0ACCBA5E}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EB61E0-8672-4303-9175-F2E4C68B2E7C}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{72EC5935-3EC3-4E94-A3F1-D2FC478521C2}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{7EFC002A-071F-4CE7-B265-F4B4263D2FD2}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{88D969EC-8B8B-4C3D-859E-AF6CD158BE0F}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{896664F7-12E1-490F-8782-C0835AFD98FC}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{934D4698-6A59-48F8-9F29-9FB30670320E}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{97E467B4-98C6-4F19-9588-161B7773D6F6}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{9CFC2DF3-6BA3-46EF-A836-E519E81F0EC4}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{AEB16279-B750-48F1-8586-97956060175A}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B54F3743-5B07-11CF-A4B0-00AA004A55E8}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF7227D0-D41D-48FC-B545-8263F2CDA621}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{BF735767-E6DA-11CF-AB9B-00C0F00683EB}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C120DE80-FDE4-49F5-A713-E902EF062B8A}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D58960BA-2EF3-4910-9E34-C911B1710180}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E8708A5D-7F86-4E08-8597-DEF3CDAC5550}" => removed successfully.
ustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> no filepath => Error: No automatic fix found for this entry.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}" => removed successfully.
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{FE841493-835C-4FA3-B6CC-B4B2D4719848}" => removed successfully.
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\SysMenuExt" => removed successfully.
HKLM\Software\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486} => not found
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C}" => removed successfully.
HKLM\Software\Classes\CLSID\[CC]{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => not found
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets" => removed successfully.
HKLM\Software\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC} => not found
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removed successfully.
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Classes\*\ShellEx\ContextMenuHandlers\SysMenuExt" => removed successfully.
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486} => not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3B67B5CC-C702-476C-A7AF-E58E16EEC9C1} => could not remove. ErrorCode1: 0x00000002
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B67B5CC-C702-476C-A7AF-E58E16EEC9C1}" => removed successfully.
C:\Windows\System32\Tasks\{2BA0784B-C888-43F2-82F6-9B444A92040C} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2BA0784B-C888-43F2-82F6-9B444A92040C}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3ECE2621-02F6-4F08-B3F1-DBA419A401E7}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3ECE2621-02F6-4F08-B3F1-DBA419A401E7}" => removed successfully.
C:\Windows\System32\Tasks\{7CBA99A7-A432-41D6-97E3-2A844ECF4E5D} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7CBA99A7-A432-41D6-97E3-2A844ECF4E5D}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{48F23FBC-8F02-4ED5-8DC2-5A6A234D272C}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48F23FBC-8F02-4ED5-8DC2-5A6A234D272C}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{558EF77A-BDCB-4AA2-BC60-CA31F9214CC5}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{558EF77A-BDCB-4AA2-BC60-CA31F9214CC5}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{36A71AEA-CD1C-4C34-9B1F-576ACC7F3634}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{36A71AEA-CD1C-4C34-9B1F-576ACC7F3634}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA1d211f64c05384c => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA1d211f64c05384c" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6A4E0C06-3985-4232-A0E5-8D1E67080601}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A4E0C06-3985-4232-A0E5-8D1E67080601}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{72BADAE4-8A85-4042-B39D-5DE99641247B}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72BADAE4-8A85-4042-B39D-5DE99641247B}" => removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7C4B4A7F-F9CB-48AD-B41F-84A135465775}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C4B4A7F-F9CB-48AD-B41F-84A135465775}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC6C5A04-D3C1-4CD8-AF7F-AE4652F67ACA}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC6C5A04-D3C1-4CD8-AF7F-AE4652F67ACA}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C060F913-1313-4381-AC24-1B5A723165D0}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C060F913-1313-4381-AC24-1B5A723165D0}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D3057D81-9EAC-4926-8A61-AFB8AB2EAB21}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3057D81-9EAC-4926-8A61-AFB8AB2EAB21}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E339A933-A6B8-47AA-9B15-093F4F5249C2}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E339A933-A6B8-47AA-9B15-093F4F5249C2}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E6191421-D3FA-40F0-A6DB-DB219D8C41FD}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6191421-D3FA-40F0-A6DB-DB219D8C41FD}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F0EE83A4-4976-47DB-A803-EE812E282E03}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F0EE83A4-4976-47DB-A803-EE812E282E03}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FF58AAFE-4D97-496F-9B68-2098A188B4F8}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF58AAFE-4D97-496F-9B68-2098A188B4F8}" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully.
C:\ProgramData\Temp => ":66BB1E73" ADS removed successfully.
C:\ProgramData\Temp => ":F34493AA" ADS removed successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 20510539 B
Java, Flash, Steam htmlcache => 988 B
Windows/system/drivers => 45056 B
Edge => 507 B
Chrome => 75958656 B
Firefox => 15596127 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 64111 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
LocalService => 0 B
NetworkService => 0 B
David => 2246336 B
UpdatusUser => 64111 B
DefaultAppPool => 64111 B

RecycleBin => 1929705 B
EmptyTemp: => 116.9 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 14:04:21 ====

ano je to spravny log.


Stáhni AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Ulož na plochu
Ukonči všechny programy
Klikni nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vlož.

nasledne tento tool MBAM: http://forum.viry.cz/viewtopic.php?f=29&t=144868
-Nainstaluj,Vyber "Vlastní sken" a klikni na "Konfigurovat sken"
V okně "Konfigurace vlastního skenu" vyber všechny pevné disky a zatrhni možnost u "Hledat rootkity"
Kliknutím na Skenovat nyní začne MBAM pracovat.

-Log zkopíruj sem.

# AdwCleaner 7.0.5.0 - Logfile created on Tue Dec 19 15:05:41 2017
# Updated on 2017/29/11 by Malwarebytes
# Database: 12-18-2017.1
# Running on Windows 10 Home (X86)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Legacy, SearchProvider found: Ask Search - websearch.ask.com
PUP.Optional.Legacy, SearchProvider found: Inbox Hledání - toolbar.inbox.com
PUP.Optional.Legacy, SearchProvider found: Slunečnice - slunecnice.cz

/!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271


*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [2376 B] - [2017/12/13 14:50:50]
C:/AdwCleaner/AdwCleaner[C1].txt - [1403 B] - [2017/12/13 15:58:4]
C:/AdwCleaner/AdwCleaner[S0].txt - [2770 B] - [2017/12/13 14:46:57]
C:/AdwCleaner/AdwCleaner[S1].txt - [1417 B] - [2017/12/13 15:56:39]


########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt ##########

Ahoj, pri scanu MBAM my vzdy tak po1hod scanovani zamrzne PC.. Budu to zkouset dal

pokud se to nepovede zkus mi dat znovu FRST log

Tak ..konecne

# AdwCleaner 7.0.5.0 - Logfile created on Tue Dec 19 15:09:50 2017
# Updated on 2017/29/11 by Malwarebytes
# Running on Windows 10 Home (X86)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

SearchProvider deleted: Ask Search - websearch.ask.com
SearchProvider deleted: Inbox Hledání - toolbar.inbox.com
SearchProvider deleted: Slunečnice - slunecnice.cz


*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [2376 B] - [2017/12/13 14:50:50]
C:/AdwCleaner/AdwCleaner[C1].txt - [1403 B] - [2017/12/13 15:58:4]
C:/AdwCleaner/AdwCleaner[S0].txt - [2770 B] - [2017/12/13 14:46:57]
C:/AdwCleaner/AdwCleaner[S1].txt - [1417 B] - [2017/12/13 15:56:39]
C:/AdwCleaner/AdwCleaner[S2].txt - [1554 B] - [2017/12/19 15:5:41]


########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt ##########





Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 19.12.17
Čas skenování: 20:38
Logovací soubor: 314ec868-e4f4-11e7-844c-bcaec509371f.json
Správce: Ano

-Informace o softwaru-
Verze: 3.3.1.2183
Verze komponentů: 1.0.262
Aktualizovat verzi balíku komponent: 1.0.3522
Licence: Bezplatný

-Systémová informace-
OS: Windows 10 (Build 16299.125)
CPU: x86
Systém souborů: NTFS
Uživatel: David-PC\David

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 396367
Zjištěné hrozby: 4
Hrozby umístěné do karantény: 4
Uplynulý čas: 26 hod, 57 min, 11 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 1
RiskWare.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VCarve Pro, V karanténě, [400], [465073],1.0.3522

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 3
HackTool.FilePatch, C:\PROGRAM FILES\CUT3D 1.11\EXEC\CUT3D_V1.110-CRACK.EXE, V karanténě, [7147], [281135],1.0.3522
RiskWare.Agent, C:\PROGRAM FILES\VCARVE PRO 6.0\UNINST.EXE, V karanténě, [400], [465073],1.0.3522
HackTool.FilePatch, D:\PROGRAMY\CNC\CUT3D_V1.1.1.1.ZIP, V karanténě, [7146], [281135],1.0.3522

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

dobre.
poprosim jeste jednou log z FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-12-2017
Ran by David (administrator) on DAVID-PC (21-12-2017 13:37:15)
Running from C:\Users\David\Downloads
Loaded Profiles: David & UpdatusUser (Available Profiles: David & UpdatusUser & DefaultAppPool)
Platform: Microsoft Windows 10 Home Version 1709 16299.125 (X86) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Autodata Limited) C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(Intel) C:\Program Files\Intel Driver and Support Assistant\DSAService.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files\Repetier-Server\bin\RepetierServer.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(C. Ghisler & Co.) C:\totalcmd\TOTALCMD.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [488344 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-15] (AVAST Software)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)
HKLM\...\Run: [DSATray] => C:\Program Files\Intel Driver and Support Assistant\DsaTray.exe [131360 2017-12-05] (Intel)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [3576512 2016-10-06] (Disc Soft Ltd)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [Syncables] => C:\Program Files\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [ISM] => C:\Program Files\Common Files\Intel\Intel Software Manager\ism2.exe [423064 2015-10-05] (Intel Corporation)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7619288 2017-05-19] (Piriform Ltd)
HKU\S-1-5-21-3313380613-1349851029-4279355966-1089\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2017-09-29] (Microsoft Corporation)
AppInit_DLLs: C:\WINDOWS\system32\nvinit.dll => C:\WINDOWS\system32\nvinit.dll [158584 2016-12-09] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{112e9ca8-35f3-4d98-b4fb-4457ac7b5a50}: [NameServer] 217.112.162.34,217.112.160.1
Tcpip\..\Interfaces\{112e9ca8-35f3-4d98-b4fb-4457ac7b5a50}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{35a1075e-23d0-4d38-8129-96630e6297af}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{da395415-484d-4055-98b9-e8c3c94ee299}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\TomTom\HOME\Profiles\4l66o2pu.default [2015-07-06]
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default [2017-12-19]
FF Homepage: Mozilla\Firefox\Profiles\jx13vllr.default -> hxxps://www.seznam.cz/?clid=22668
FF NewTab: Mozilla\Firefox\Profiles\jx13vllr.default -> about:newtab
FF NetworkProxy: Mozilla\Firefox\Profiles\jx13vllr.default -> backup.ftp", "174.122.55.246"
FF Extension: (jid1dgnIBwQga0SIBwjetpack) - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack [2015-01-04] [Legacy] [not signed]
FF SearchPlugin: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default\searchplugins\google-avast.xml [2015-02-09]
FF SearchPlugin: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\jx13vllr.default\searchplugins\seznam-avast.xml [2015-02-15]
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-09-18] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-12-12] ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (GARMIN Corp.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @Musicnotes.com/Musicnotes Viewer,version=1.18.9 -> C:\Program Files\Musicnotes\npmusicn.dll [2010-09-23] (Musicnotes, Inc.)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.3.100 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [2016-02-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-09-18] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-09-18] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.3.100 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll [2016-02-28] (RealPlayer)
FF Plugin: @Sibelius.com/Scorch Plugin,version=6.2.0.88 -> C:\Program Files\Musicnotes\npsibelius.dll [2010-04-08] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3313380613-1349851029-4279355966-1001: @tools.google.com/Google Update;version=3 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3313380613-1349851029-4279355966-1001: @tools.google.com/Google Update;version=9 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default [2017-12-21]
CHR Extension: (Překladač Google) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-26]
CHR Extension: (iVysilani pro Chromecast) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\andeafimjbobmfgmlhhbgfdlfhppdgeb [2017-02-26]
CHR Extension: (Splendid) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdfkbdkkfmmckaadapdipihjfaacnkgd [2016-09-14]
CHR Extension: (OneTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2017-02-26]
CHR Extension: (VS Launcher) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmhicdplfejcchpmimlnohfadpimciaa [2015-09-17]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2017-10-26]
CHR Extension: (Adobe Acrobat) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-05]
CHR Extension: (Avast Passwords) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2017-12-21]
CHR Extension: (Hudba Google Play) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2017-12-08]
CHR Extension: (Instant Multilingual PDF/HTML/TXT Translator) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnhmalionocfajdkpnlhmekghnmbii [2017-12-12]
CHR Extension: (Mate Translate – translator, dictionary) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2017-12-21]
CHR Extension: (PlayTo for Chromecast™) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\jngkenaoceimiimeokpdbmejeonaaami [2016-04-18]
CHR Extension: (KIDO'Z TV) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\jokdeafnhahffanabnbjjjjmoechjklc [2016-09-14]
CHR Extension: (The Great Suspender) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg [2017-06-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-31]
CHR Extension: (Chrome Media Router) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-08]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-09-18]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AsusService; C:\Windows\System32\AsusService.exe [219136 2009-08-19] () [File not signed]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5904136 2017-11-15] (AVAST Software)
R2 Autodata Limited License Service; C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [72704 2011-10-06] (Autodata Limited) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-15] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [332368 2017-12-08] (AVAST Software)
S4 AxiomAudioDevMon; C:\Program Files\M-Audio\Axiom\AudioDevMon.exe [1632776 2010-02-19] (M-Audio)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [File not signed]
R2 Crypkey License; C:\WINDOWS\system32\crypserv.exe [69632 2006-09-22] (CrypKey (Canada) Ltd.) [File not signed]
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1135808 2016-10-06] (Disc Soft Ltd)
R2 DSAService; C:\Program Files\Intel Driver and Support Assistant\DSAService.exe [22304 2017-12-05] (Intel)
S3 Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
S4 msvsmon80; C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2799808 2005-09-23] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44032 2009-05-15] (Hewlett-Packard) [File not signed]
R2 nvUpdatusService; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2009704 2011-10-11] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2009-05-15] (Hewlett-Packard) [File not signed]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [32544 2016-02-03] ()
R2 RealTimes Desktop Service; C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1095440 2016-02-28] (RealNetworks, Inc.)
R2 RepetierServer; C:\Program Files\Repetier-Server\bin\RepetierServer.exe [6129000 2017-08-07] ()
S4 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2004-12-13] (Ulead Systems, Inc.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [279408 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [86696 2017-09-29] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 adatadrv; C:\WINDOWS\System32\drivers\adatadrv.sys [762112 2009-07-01] (none) [File not signed]
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStor.SYS [75416 2017-12-12] (Alcor Micro, Corp.)
R1 AsUpIO; C:\WINDOWS\System32\drivers\AsUpIO.sys [11520 2010-03-31] ()
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [157176 2017-11-15] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriverx.sys [255616 2017-11-15] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidshx.sys [157408 2017-11-15] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblogx.sys [276728 2017-11-15] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbunivx.sys [50376 2017-11-15] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [84032 2017-11-03] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [42848 2017-11-15] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [39784 2017-09-18] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [124952 2017-11-15] (AVAST Software)
R1 aswNetSec; C:\WINDOWS\System32\drivers\aswNetSec.sys [420024 2017-12-08] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [99560 2017-11-15] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [70864 2017-11-15] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [783136 2017-11-15] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [388760 2017-11-15] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [150848 2017-11-15] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [298360 2017-11-15] (AVAST Software)
S3 AXIOM; C:\WINDOWS\system32\DRIVERS\MAudioAxiom.sys [115336 2010-02-19] (M-Audio)
S3 azvusb; C:\WINDOWS\System32\DRIVERS\azvusb.sys [44544 2009-08-24] (AzureWave Technologies, Inc.) [File not signed]
R3 BCM43XX; C:\WINDOWS\system32\DRIVERS\bcmwl63.sys [6811648 2017-09-29] (Broadcom Corporation)
S3 CH341SER; C:\WINDOWS\System32\Drivers\CH341SER.SYS [39696 2014-11-08] (www.winchiphead.com)
R3 CLEDX; C:\WINDOWS\System32\drivers\cledx.sys [33792 2005-05-09] (Team H2O) [File not signed]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [26168 2016-10-12] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [40504 2016-03-03] (Disc Soft Ltd)
S3 HtcVCom32; C:\WINDOWS\system32\DRIVERS\HtcVComV32.sys [105984 2009-10-27] (QUALCOMM Incorporated)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2017-12-11] (REALiX(tm))
S3 IT9135BDA; C:\WINDOWS\System32\Drivers\IT9135BDA.sys [94336 2010-02-03] (ITE )
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [13880 2009-07-20] ( )
S3 Mach3; C:\WINDOWS\System32\Drivers\Mach3.sys [103040 2005-10-16] (Your Corporation) [File not signed]
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [221112 2017-12-19] (Malwarebytes)
S3 mod7700; C:\WINDOWS\System32\Drivers\dvb7700all.sys [575744 2009-10-21] (DiBcom)
R1 NetworkX; C:\WINDOWS\system32\ckldrv.sys [31846 2006-01-10] () [File not signed]
S0 nvpciflt; C:\WINDOWS\System32\DRIVERS\nvpciflt.sys [44728 2016-12-09] (NVIDIA Corporation)
S3 pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [47360 2012-01-08] (VSO Software) [File not signed]
S3 RDID1105; C:\WINDOWS\system32\Drivers\RDWM1105.SYS [156416 2015-07-23] (Roland Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [7091416 2017-12-11] (Realtek Semiconductor Corp.)
R2 Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [76288 2002-09-25] (Rainbow Technologies, Inc.) [File not signed]
R3 SNTNLUSB; C:\WINDOWS\System32\drivers\SNTNLUSB.SYS [38376 2009-09-17] (SafeNet, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37440 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [253848 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98200 2017-09-29] (Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2030-01-01 12:41 - 2017-11-10 01:14 - 000397760 __RSH C:\bootmgr
2017-12-21 04:33 - 2017-12-21 04:33 - 000001927 _____ C:\Users\David\Desktop\malware.txt
2017-12-20 14:25 - 2017-12-20 14:25 - 000000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2017-12-19 16:27 - 2017-12-19 16:27 - 000002097 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-12-19 16:27 - 2017-12-19 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-12-19 16:27 - 2017-11-29 09:11 - 000059896 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-12-19 16:23 - 2017-12-19 16:24 - 083316440 _____ (Malwarebytes ) C:\Users\David\Downloads\mb3-setup-consumer-3.3.1.2183-1.0.262-1.0.3374.exe
2017-12-19 15:53 - 2017-12-19 15:53 - 008187336 _____ (Malwarebytes) C:\Users\David\Desktop\adwcleaner_7.0.5.0.exe
2017-12-19 13:58 - 2017-12-21 13:39 - 000021310 _____ C:\Users\David\Downloads\FRST.txt
2017-12-19 13:58 - 2017-12-19 14:04 - 000031830 _____ C:\Users\David\Downloads\Fixlog.txt
2017-12-19 13:58 - 2017-12-18 15:18 - 000075442 _____ C:\Users\David\Downloads\Addition.txt
2017-12-19 13:58 - 2017-12-18 15:10 - 001752576 _____ (Farbar) C:\Users\David\Downloads\FRST.exe
2017-12-18 15:11 - 2017-12-21 13:37 - 000000000 ____D C:\FRST
2017-12-18 14:20 - 2017-12-18 14:21 - 000000000 ____D C:\rsit
2017-12-18 14:20 - 2017-12-18 14:21 - 000000000 ____D C:\Program Files\trend micro
2017-12-18 14:19 - 2017-12-18 14:19 - 001107968 _____ C:\Users\David\Downloads\RSIT.exe
2017-12-13 21:45 - 2017-12-13 21:47 - 000000000 ____D C:\Users\David\AppData\Local\Arduino15
2017-12-13 21:45 - 2017-12-13 21:45 - 000000000 ____D C:\Users\David\Documents\Arduino
2017-12-13 20:44 - 2017-12-13 20:44 - 000001034 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk
2017-12-13 20:44 - 2017-12-13 20:44 - 000001022 _____ C:\Users\Public\Desktop\Arduino.lnk
2017-12-13 20:41 - 2017-12-13 20:43 - 000000000 ____D C:\Program Files\Arduino
2017-12-13 20:13 - 2017-12-13 20:13 - 000000000 ____D C:\Users\David\AppData\Roaming\Slic3r
2017-12-13 19:47 - 2017-12-13 19:47 - 000000000 ____D C:\Users\David\Desktop\CH340G_USB driver
2017-12-13 19:45 - 2017-12-13 19:45 - 000000000 ____D C:\Users\David\AppData\Roaming\NVIDIA
2017-12-13 19:44 - 2017-12-13 19:44 - 000000000 ____D C:\ProgramData\Repetier-Server
2017-12-13 19:44 - 2017-12-13 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Repetier-Server
2017-12-13 19:43 - 2017-12-13 19:44 - 000000000 ____D C:\Program Files\Repetier-Server
2017-12-13 19:40 - 2017-12-13 19:40 - 000001093 _____ C:\Users\Public\Desktop\Repetier-Host.lnk
2017-12-13 19:40 - 2017-12-13 19:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Repetier-Host
2017-12-13 19:38 - 2017-12-13 20:20 - 000000000 ____D C:\Users\David\AppData\Local\RepetierHost
2017-12-13 19:38 - 2017-12-13 19:40 - 000000000 ____D C:\Program Files\Repetier-Host
2017-12-13 19:22 - 2017-12-13 19:28 - 050544928 _____ (repetier ) C:\Users\David\Downloads\setupRepetierHost_2_0_5.exe
2017-12-13 19:15 - 2017-12-13 19:21 - 015409280 _____ (repetier ) C:\Users\David\Downloads\Nepotvrzeno 661042.crdownload
2017-12-13 19:13 - 2017-12-13 19:15 - 009665680 _____ (repetier ) C:\Users\David\Downloads\Nepotvrzeno 828743.crdownload
2017-12-13 19:06 - 2014-10-20 17:38 - 022545432 _____ (repetier ) C:\setupRepetierHost_1_0_6.exe
2017-12-13 15:39 - 2017-12-19 16:09 - 000000000 ____D C:\AdwCleaner
2017-12-13 15:37 - 2017-12-13 15:37 - 008172032 _____ (Malwarebytes) C:\Users\David\Downloads\AdwCleaner.exe
2017-12-13 15:32 - 2017-12-13 15:32 - 005659243 _____ (Swearware) C:\Users\David\Downloads\ComboFix (1).exe
2017-12-13 14:34 - 2017-12-13 14:34 - 000214298 _____ C:\Users\David\Downloads\winfilefolder (1).DiagCab
2017-12-12 21:13 - 2017-12-03 23:38 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-12-12 21:13 - 2017-12-03 23:38 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2017-12-12 19:37 - 2017-12-07 23:58 - 004145488 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-12-12 19:37 - 2017-12-07 23:39 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-12-12 19:37 - 2017-12-07 23:32 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-12-12 19:37 - 2017-12-07 23:23 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-12 19:37 - 2017-12-07 23:10 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-12-12 19:37 - 2017-12-07 23:10 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-12-12 19:37 - 2017-12-07 23:08 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-12-12 19:37 - 2017-12-07 23:05 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-12-12 19:36 - 2017-12-07 23:57 - 001506712 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-12-12 19:36 - 2017-12-07 23:57 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-12-12 19:36 - 2017-12-07 23:56 - 000049560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2017-12-12 19:36 - 2017-12-07 23:55 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-12 19:36 - 2017-12-07 23:37 - 006403480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-12-12 19:36 - 2017-12-07 23:37 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-12-12 19:36 - 2017-12-07 23:36 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2017-12-12 19:36 - 2017-12-07 23:36 - 000142640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-12-12 19:36 - 2017-12-07 23:35 - 000454040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-12-12 19:36 - 2017-12-07 23:35 - 000445336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-12-12 19:36 - 2017-12-07 23:34 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-12-12 19:36 - 2017-12-07 23:34 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-12-12 19:36 - 2017-12-07 23:33 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-12-12 19:36 - 2017-12-07 23:33 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-12-12 19:36 - 2017-12-07 23:33 - 000538760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-12-12 19:36 - 2017-12-07 23:33 - 000337304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-12-12 19:36 - 2017-12-07 23:32 - 000278936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-12-12 19:36 - 2017-12-07 23:32 - 000100248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2017-12-12 19:36 - 2017-12-07 23:31 - 004937224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-12-12 19:36 - 2017-12-07 23:31 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-12-12 19:36 - 2017-12-07 23:31 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-12-12 19:36 - 2017-12-07 23:31 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-12-12 19:36 - 2017-12-07 23:31 - 000456232 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-12-12 19:36 - 2017-12-07 23:31 - 000295488 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-12-12 19:36 - 2017-12-07 23:30 - 000717464 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-12-12 19:36 - 2017-12-07 23:29 - 000131992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-12-12 19:36 - 2017-12-07 23:28 - 000612736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-12-12 19:36 - 2017-12-07 23:25 - 000203672 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-12-12 19:36 - 2017-12-07 23:25 - 000108480 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-12-12 19:36 - 2017-12-07 23:21 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-12-12 19:36 - 2017-12-07 23:13 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-12-12 19:36 - 2017-12-07 23:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2017-12-12 19:36 - 2017-12-07 23:12 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2017-12-12 19:36 - 2017-12-07 23:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-12 19:36 - 2017-12-07 23:12 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscript.ocx
2017-12-12 19:36 - 2017-12-07 23:10 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2017-12-12 19:36 - 2017-12-07 23:10 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-12-12 19:36 - 2017-12-07 23:10 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-12-12 19:36 - 2017-12-07 23:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2017-12-12 19:36 - 2017-12-07 23:09 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2017-12-12 19:36 - 2017-12-07 23:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2017-12-12 19:36 - 2017-12-07 23:09 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-12-12 19:36 - 2017-12-07 23:08 - 001130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-12-12 19:36 - 2017-12-07 23:08 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2017-12-12 19:36 - 2017-12-07 23:07 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-12-12 19:36 - 2017-12-07 23:07 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-12 19:36 - 2017-12-07 23:07 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 003702784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 002022400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-12-12 19:36 - 2017-12-07 23:06 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 002062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-12-12 19:36 - 2017-12-07 23:05 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 001626112 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-12-12 19:36 - 2017-12-07 23:04 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 001132032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-12-12 19:36 - 2017-12-07 23:04 - 000657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 002247168 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-12-12 19:36 - 2017-12-07 23:03 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 001288704 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 000695808 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-12-12 19:36 - 2017-12-07 23:02 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-12 19:36 - 2017-12-07 23:01 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-12-12 19:36 - 2017-12-07 23:00 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-12 19:36 - 2017-12-07 22:59 - 001982976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-12-12 19:36 - 2017-12-07 22:59 - 001286144 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-12 19:36 - 2017-12-07 22:59 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-12-12 18:15 - 2017-12-12 18:15 - 001077248 _____ C:\WINDOWS\system32\AmRdrIco.icl
2017-12-12 18:15 - 2017-12-12 18:15 - 000075416 _____ (Alcor Micro, Corp.) C:\WINDOWS\system32\Drivers\AmUStor.sys
2017-12-12 18:15 - 2017-12-12 18:15 - 000041952 _____ C:\WINDOWS\system32\AmUStor.ini
2017-12-12 18:15 - 2017-12-12 18:15 - 000019096 _____ (Alcor Micro, Corp.) C:\WINDOWS\system32\AmUStor2.dll
2017-12-12 18:15 - 2017-12-12 18:15 - 000000640 _____ C:\WINDOWS\system32\VendorCmd6435.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000124 _____ C:\WINDOWS\system32\VendorCmd6485_SetSSC.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000032 _____ C:\WINDOWS\system32\VendorCommand_MS1bit.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000032 _____ C:\WINDOWS\system32\VendorCmd6485.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000032 _____ C:\WINDOWS\system32\VendorCmd6465.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6485.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6420.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6366.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6362.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6361.bin
2017-12-12 18:15 - 2017-12-12 18:15 - 000000008 _____ C:\WINDOWS\system32\CardDetect6339.bin
2017-12-12 18:06 - 2017-12-12 18:06 - 000000000 ____D C:\Program Files\Microsoft XNA
2017-12-12 18:06 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2017-12-12 18:06 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2017-12-12 18:06 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2017-12-12 18:06 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2017-12-12 18:06 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2017-12-12 18:06 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2017-12-12 18:06 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2017-12-11 19:22 - 2017-12-11 19:22 - 000130632 _____ (Qualcomm Atheros, Inc.) C:\WINDOWS\system32\Drivers\L1C63x86.sys
2017-12-11 19:20 - 2017-12-11 19:20 - 007091416 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\rtsuvc.sys
2017-12-11 19:20 - 2017-12-11 19:20 - 001910488 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtCamU.exe
2017-12-11 19:20 - 2017-12-11 19:20 - 000418008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCamX.dll
2017-12-11 16:31 - 2017-12-13 14:33 - 000000000 ____D C:\ProgramData\ProductData
2017-12-11 16:31 - 2017-12-11 16:31 - 000000000 ____D C:\WINDOWS\IObit
2017-12-11 16:22 - 2017-12-11 16:32 - 000000000 ____D C:\Users\David\AppData\LocalLow\IObit
2017-12-11 16:22 - 2017-12-11 16:31 - 000000000 ____D C:\ProgramData\IObit
2017-12-11 16:22 - 2017-12-11 16:22 - 000023840 _____ (REALiX(tm)) C:\WINDOWS\system32\Drivers\HWiNFO32.SYS
2017-12-11 16:22 - 2017-12-11 16:22 - 000000000 ____D C:\Users\David\AppData\Roaming\IObit
2017-12-11 16:21 - 2017-12-11 16:21 - 015719372 _____ C:\Users\David\Downloads\IObit Driver Booster 4.5 PRO (v4.5.0.527) Multilingual.rar
2017-12-11 15:55 - 2017-12-11 15:55 - 000214298 _____ C:\Users\David\Downloads\winfilefolder.DiagCab
2017-12-10 20:24 - 2017-12-10 20:24 - 000091209 _____ C:\Users\David\Downloads\536687889.PDF
2017-12-10 08:55 - 2017-12-10 08:55 - 000000000 ____D C:\Users\David\AppData\Local\Intel Corporation
2017-12-10 00:42 - 2017-12-10 00:42 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-12-10 00:40 - 2017-12-10 00:40 - 000000000 ___HD C:\Users\David\MicrosoftEdgeBackups
2017-12-10 00:38 - 2017-12-13 14:26 - 000000000 ___RD C:\Users\David\3D Objects
2017-12-10 00:37 - 2017-12-10 00:37 - 000000020 ___SH C:\Users\David\ntuser.ini
2017-12-10 00:33 - 2017-12-21 04:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-12-10 00:18 - 2017-12-10 00:33 - 000015243 _____ C:\WINDOWS\diagwrn.xml
2017-12-10 00:18 - 2017-12-10 00:33 - 000015243 _____ C:\WINDOWS\diagerr.xml
2017-12-10 00:05 - 2017-12-10 00:05 - 000000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2017-12-09 23:52 - 2017-12-09 23:52 - 000001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-12-09 23:45 - 2017-12-13 14:39 - 000000000 ____D C:\Users\David\AppData\Local\Packages
2017-12-09 23:43 - 2017-12-21 04:15 - 000000000 ____D C:\Users\David
2017-12-09 23:43 - 2017-12-20 14:25 - 000000000 ____D C:\Users\DefaultAppPool
2017-12-09 23:43 - 2017-12-19 19:27 - 000000000 ____D C:\Users\UpdatusUser
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Šablony
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Soubory cookie
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Poslední
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Okolní tiskárny
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Okolní síť
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Nabídka Start
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Dokumenty
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Documents\Obrázky
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Documents\Hudba
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Documents\Filmy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Šablony
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Soubory cookie
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Poslední
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Okolní tiskárny
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Okolní síť
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Nabídka Start
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Dokumenty
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Obrázky
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Hudba
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Filmy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Šablony
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Soubory cookie
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Poslední
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Okolní tiskárny
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Okolní síť
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Nabídka Start
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Dokumenty
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Documents\Obrázky
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Documents\Hudba
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Documents\Filmy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\Data aplikací
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-12-09 23:43 - 2017-12-09 23:43 - 000000000 _SHDL C:\Users\David\AppData\Local\Data aplikací
2017-12-09 23:38 - 2017-12-09 23:38 - 000000000 ____D C:\ProgramData\USOShared
2017-12-09 23:36 - 2017-12-13 14:29 - 002154524 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-09 23:35 - 2017-12-09 23:35 - 000002080 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2017-12-09 23:35 - 2016-11-14 10:45 - 000615992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe
2017-12-09 23:34 - 2016-12-09 13:19 - 000076864 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-12-09 23:25 - 2017-12-21 13:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-12-09 23:25 - 2017-12-12 21:13 - 000440432 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-09 23:06 - 2017-12-10 00:37 - 000000000 ____D C:\Windows.old
2017-12-09 22:28 - 2017-12-09 22:28 - 000000000 ___DL C:\Users\Public\Recorded TV (1)
2017-12-09 22:26 - 2017-12-09 23:07 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-12-09 22:26 - 2017-12-09 22:26 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-12-09 22:14 - 2017-12-09 22:26 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-12-09 22:12 - 2017-12-09 22:12 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-12-09 22:01 - 2017-12-09 22:01 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 002491112 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-12-09 22:01 - 2017-12-09 22:01 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-12-09 22:01 - 2017-12-09 22:01 - 000414824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-09 22:01 - 2017-12-09 22:01 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2017-12-09 22:01 - 2017-12-09 22:01 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-12-09 22:01 - 2017-12-09 22:01 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002645504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002342400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002315776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 002116504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 001995672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001859584 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 001851288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001771008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001336544 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001171456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 001115704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-12-09 22:00 - 2017-12-09 22:00 - 000973648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000965016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000608664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000535448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000530152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000508848 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000434072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000368536 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000368536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000353176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000322968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000300952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000253144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000233368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-09 22:00 - 2017-12-09 22:00 - 000167832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000166632 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000155544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000128408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000065432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2017-12-09 22:00 - 2017-12-09 22:00 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2017-12-09 22:00 - 2017-12-09 22:00 - 000040840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\WINDOWS\system32\msmq
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\Program Files\MSBuild
2017-12-09 21:35 - 2017-12-09 21:35 - 000000000 ____D C:\inetpub
2017-12-09 21:32 - 2017-09-22 18:19 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-12-09 21:32 - 2017-09-22 18:19 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-12-09 21:32 - 2017-09-22 18:19 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-12-09 21:30 - 2017-09-28 18:44 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-12-09 21:30 - 2017-09-28 18:44 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-12-09 21:30 - 2017-09-28 18:38 - 005484032 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-12-09 19:14 - 2017-12-10 08:06 - 000000000 ___DC C:\WINDOWS\Panther
2017-12-09 18:06 - 2017-12-09 18:06 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pomocník s aktualizací Windows 10.lnk
2017-12-09 18:05 - 2017-12-10 00:37 - 000000000 ____D C:\Windows10Upgrade
2017-12-09 13:43 - 2017-12-09 22:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2017-12-09 13:43 - 2017-12-09 13:43 - 000001323 _____ C:\Users\Public\Desktop\Intel Processor Diagnostic Tool.lnk
2017-12-09 13:43 - 2017-12-09 13:43 - 000000000 ____D C:\Program Files\Intel Corporation
2017-12-09 13:35 - 2017-12-10 00:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-12-09 13:30 - 2017-12-09 23:59 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 13:30 - 2017-12-09 23:45 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 13:30 - 2017-12-09 13:30 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\TileDataLayer
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\Documents\EBI
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\Documents\Bluetooth Exchange Folder
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\Documents\Asus WebStorage
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\RealNetworks
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\ASUS WebStorage
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Adobe
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\Microsoft Help
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\Broadcom
2017-12-09 13:30 - 2016-09-18 04:19 - 000000000 ____D C:\Users\UpdatusUser\AppData\Local\Adobe
2017-12-09 13:30 - 2010-09-29 19:58 - 000058056 _____ C:\Users\UpdatusUser\AppData\Local\GDIPFONTCACHEV1.DAT
2017-12-09 13:30 - 2010-09-29 19:58 - 000001871 _____ C:\Users\UpdatusUser\Desktop\MySyncFolder.lnk
2017-12-09 10:53 - 2017-12-09 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Software Manager
2017-12-09 10:53 - 2017-12-09 10:53 - 000000000 ____D C:\ProgramData\Intel Corporation
2017-12-09 10:53 - 2017-12-09 10:53 - 000000000 ____D C:\Program Files\Common Files\Intel
2017-12-09 10:10 - 2017-12-09 10:10 - 000000000 ____D C:\Users\David\Intel
2017-12-09 10:02 - 2017-12-09 10:02 - 000012841 _____ C:\Users\David\Downloads\Detailed-System-Report.html
2017-12-09 09:41 - 2017-12-09 09:44 - 000000000 ____D C:\ProgramData\Intel
2017-12-09 09:40 - 2017-12-09 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver and Support Assistant
2017-12-09 09:40 - 2017-12-09 17:25 - 000000000 ____D C:\Program Files\Intel Driver and Support Assistant
2017-12-09 09:39 - 2017-12-09 09:39 - 009119336 _____ (Intel) C:\Users\David\Downloads\Intel Driver and Support Assistant Installer.exe
2017-12-09 09:21 - 2017-12-09 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
2017-12-09 09:19 - 2009-06-04 18:43 - 000330264 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStor.sys
2017-12-08 22:51 - 2017-12-08 22:51 - 000000000 _____ C:\WINDOWS\Path.idx
2017-12-08 22:33 - 2009-09-09 21:30 - 000045983 _____ C:\WINDOWS\system32\netathw.cat
2017-12-08 22:33 - 2009-09-07 18:59 - 001584448 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\athw.sys
2017-12-08 20:33 - 2017-12-08 20:33 - 000000000 ____D C:\Users\David\AppData\Local\AVAST Software
2017-12-08 20:17 - 2017-12-08 20:17 - 000005440 _____ C:\Users\David\Downloads\conf (2).bin
2017-12-08 19:20 - 2017-12-08 19:20 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Internet Security.lnk
2017-12-08 19:20 - 2017-12-08 19:20 - 000002076 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk
2017-12-08 19:20 - 2017-12-08 19:15 - 000420024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys
2017-12-08 19:16 - 2017-11-15 19:08 - 000305328 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-12-08 19:09 - 2017-12-08 19:09 - 000000000 ____D C:\Program Files\Common Files\Avast Software

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-21 04:16 - 2017-07-20 17:18 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-21 04:16 - 2015-02-07 19:12 - 000000000 ____D C:\Program Files\VCarve Pro 6.0
2017-12-20 14:50 - 2017-09-29 12:52 - 000000000 ____D C:\WINDOWS\INF
2017-12-20 13:53 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-12-19 20:31 - 2017-11-20 20:58 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-12-19 16:26 - 2011-02-08 18:39 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-12-19 16:12 - 2017-09-29 06:31 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-12-19 14:04 - 2011-04-24 15:48 - 000000000 ____D C:\Users\David\AppData\LocalLow\Temp
2017-12-18 14:25 - 2017-09-29 12:45 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-12-18 14:24 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-12-16 14:06 - 2017-09-29 12:55 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-13 21:45 - 2013-12-23 10:53 - 000000000 ____D C:\ProgramData\Oracle
2017-12-13 19:51 - 2010-12-24 17:53 - 000119032 _____ C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2017-12-13 19:15 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-12-13 14:29 - 2017-09-30 13:07 - 000910900 _____ C:\WINDOWS\system32\perfh005.dat
2017-12-13 14:29 - 2017-09-30 13:07 - 000208830 _____ C:\WINDOWS\system32\perfc005.dat
2017-12-13 14:26 - 2016-04-27 05:30 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-12-12 21:09 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\TextInput
2017-12-12 21:09 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-12-12 21:09 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-12-12 21:09 - 2017-09-29 06:31 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-12-12 20:11 - 2013-08-15 20:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-12 19:48 - 2017-10-26 18:19 - 130448288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-12 19:47 - 2010-12-27 12:19 - 130448288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-12 18:11 - 2017-07-20 17:17 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-12 18:08 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-12-12 18:07 - 2015-05-10 17:50 - 000000000 ____D C:\ProgramData\Package Cache
2017-12-12 18:06 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-12-11 18:36 - 2017-09-29 06:31 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-12-11 16:02 - 2017-04-07 17:19 - 000000000 ____D C:\Users\David\AppData\Local\ElevatedDiagnostics
2017-12-10 08:55 - 2010-12-25 11:21 - 000000000 ____D C:\ProgramData\FLEXnet
2017-12-10 07:50 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\appcompat
2017-12-10 00:38 - 2016-07-24 18:44 - 000000000 ____D C:\Users\David\AppData\Local\TileDataLayer
2017-12-10 00:36 - 2016-07-23 07:32 - 000000000 ___HD C:\$GetCurrent
2017-12-10 00:35 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\windows nt
2017-12-10 00:18 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Registration
2017-12-10 00:16 - 2016-07-24 16:58 - 000021592 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-12-10 00:15 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\media
2017-12-10 00:05 - 2014-05-28 20:43 - 000002218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-10 00:05 - 2014-05-28 20:43 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-12-09 23:59 - 2017-01-03 20:18 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2017-12-09 23:59 - 2016-07-25 17:34 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:59 - 2016-06-07 14:46 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-09 23:59 - 2016-01-21 14:25 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromecast
2017-12-09 23:59 - 2015-03-11 22:04 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2017-12-09 23:59 - 2015-03-11 22:04 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome
2017-12-09 23:59 - 2011-12-13 17:45 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heartofangel.com
2017-12-09 23:59 - 2011-01-01 17:27 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2017-12-09 23:59 - 2010-12-25 00:08 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2017-12-09 23:59 - 2010-12-24 17:53 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:53 - 2017-09-29 12:55 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 23:50 - 2016-09-18 04:19 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2017-12-09 23:48 - 2014-03-09 13:08 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlayPianoTODAY
2017-12-09 23:48 - 2011-03-13 11:44 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft
2017-12-09 23:48 - 2011-02-20 13:48 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Loomer
2017-12-09 23:48 - 2011-02-14 18:48 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Arturia
2017-12-09 23:48 - 2011-02-12 14:12 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinPlug Instruments
2017-12-09 23:48 - 2011-01-08 19:51 - 000000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KORG
2017-12-09 23:44 - 2016-07-25 17:34 - 000000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Game Park
2017-12-09 23:38 - 2017-09-29 12:55 - 000000000 ____D C:\ProgramData\USOPrivate
2017-12-09 23:36 - 2017-09-29 06:31 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-12-09 23:24 - 2017-09-29 12:55 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 __SHD C:\Program Files\Windows Sidebar
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\spool
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\IME
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\System
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\schemas
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Help
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Cursors
2017-12-09 23:07 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\Common Files\system
2017-12-09 23:07 - 2017-08-25 19:15 - 000000000 ____D C:\WINDOWS\system32\17082502_stream
2017-12-09 23:07 - 2017-07-09 17:57 - 000000000 ____D C:\Program Files\UNP
2017-12-09 23:07 - 2017-05-11 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-12-09 23:07 - 2017-05-05 18:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 6
2017-12-09 23:07 - 2017-05-05 18:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream PDF Split and Merge
2017-12-09 23:07 - 2017-03-18 19:23 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-12-09 23:07 - 2017-03-18 19:23 - 000000000 ____D C:\WINDOWS\system32\Catroot2.old
2017-12-09 23:07 - 2017-03-15 18:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-12-09 23:07 - 2017-01-07 13:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cut3D 1.11
2017-12-09 23:07 - 2017-01-01 13:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2017-12-09 23:07 - 2016-10-12 19:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-12-09 23:07 - 2016-10-12 19:34 - 000000000 ____D C:\WINDOWS\system32\Adobe
2017-12-09 23:07 - 2016-10-03 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-12-09 23:07 - 2016-06-19 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3Gain
2017-12-09 23:07 - 2016-04-27 05:18 - 000000000 ____D C:\WINDOWS\ShellNew
2017-12-09 23:07 - 2016-02-28 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2017-12-09 23:07 - 2015-06-24 20:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2017-12-09 23:07 - 2015-04-02 19:28 - 000000000 ____D C:\WINDOWS\system32\vbox
2017-12-09 23:07 - 2015-03-07 23:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aspire 4.0
2017-12-09 23:07 - 2015-02-08 10:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoVCarve
2017-12-09 23:07 - 2015-02-07 19:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VCarve Pro 6.0
2017-12-09 23:07 - 2015-01-04 15:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-12-09 23:07 - 2014-12-09 04:47 - 000000000 ____D C:\WINDOWS\system32\RNBOSENT
2017-12-09 23:07 - 2014-12-08 22:59 - 000000000 ____D C:\WINDOWS\system32\Predator Software
2017-12-09 23:07 - 2014-11-26 19:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mechanical Calculator
2017-12-09 23:07 - 2014-11-15 10:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer
2017-12-09 23:07 - 2014-08-06 18:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD DWG to PDF Converter
2017-12-09 23:07 - 2014-07-15 18:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2017-12-09 23:07 - 2014-07-04 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2017-12-09 23:07 - 2014-02-07 22:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Playlist Editor
2017-12-09 23:07 - 2013-12-27 15:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WANSCAM
2017-12-09 23:07 - 2012-10-08 15:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2017-12-09 23:07 - 2012-03-25 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAG-COM
2017-12-09 23:07 - 2012-03-04 18:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cut2D
2017-12-09 23:07 - 2012-02-09 17:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2017-12-09 23:07 - 2011-12-18 18:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAG Info System
2017-12-09 23:07 - 2011-11-27 19:44 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2017-12-09 23:07 - 2011-11-06 16:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlazeDTV 6.0
2017-12-09 23:07 - 2011-06-12 15:34 - 000000000 ____D C:\WINDOWS\system32\SPReview
2017-12-09 23:07 - 2011-06-12 15:31 - 000000000 ____D C:\WINDOWS\system32\EventProviders
2017-12-09 23:07 - 2011-03-06 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Musicnotes
2017-12-09 23:07 - 2011-02-12 13:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rob Papen Albino
2017-12-09 23:07 - 2011-02-06 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProgDVB
2017-12-09 23:07 - 2011-02-05 23:11 - 000000000 ____D C:\WINDOWS\system32\WinFast
2017-12-09 23:07 - 2011-01-26 22:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Translator
2017-12-09 23:07 - 2011-01-09 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TASCAM
2017-12-09 23:07 - 2010-12-27 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2017-12-09 23:07 - 2010-12-27 12:34 - 000000000 ____D C:\WINDOWS\cs
2017-12-09 23:07 - 2010-12-25 10:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SyncroSoft Emu
2017-12-09 23:07 - 2010-12-25 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syncrosoft
2017-12-09 23:07 - 2010-12-25 09:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X3
2017-12-09 23:07 - 2010-12-25 00:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-12-09 23:07 - 2010-12-25 00:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2017-12-09 23:07 - 2010-12-24 17:58 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-12-09 23:07 - 2010-12-24 17:55 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-12-09 23:07 - 2010-09-29 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-12-09 23:07 - 2010-09-29 19:31 - 000000000 ____D C:\WINDOWS\system32\Atheros_L1e
2017-12-09 23:07 - 2010-09-29 19:27 - 000000000 ____D C:\WINDOWS\system32\Lang
2017-12-09 23:07 - 2010-09-29 19:26 - 000000000 ____D C:\Program Files\Intel
2017-12-09 23:05 - 2017-09-29 12:58 - 000000000 ____D C:\WINDOWS\Setup
2017-12-09 23:05 - 2017-09-29 12:55 - 000000000 __RHD C:\Users\Public\Libraries
2017-12-09 22:28 - 2016-08-13 19:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roland
2017-12-09 22:28 - 2015-09-09 13:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
2017-12-09 22:28 - 2014-08-26 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
2017-12-09 22:28 - 2014-03-09 13:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayPianoTODAY
2017-12-09 22:28 - 2011-03-13 11:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
2017-12-09 22:28 - 2011-02-12 13:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments B4 II
2017-12-09 22:28 - 2010-12-25 10:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase SX 3
2017-12-09 22:28 - 2010-09-29 19:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\syncables
2017-12-09 22:27 - 2017-07-20 17:18 - 000000000 ____D C:\Program Files\Synaptics
2017-12-09 22:27 - 2016-02-26 20:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kurzweil Music Systems
2017-12-09 22:27 - 2012-07-16 17:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GenieSoft
2017-12-09 22:27 - 2011-02-20 20:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GSi
2017-12-09 22:27 - 2011-02-20 20:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cakewalk
2017-12-09 22:27 - 2011-02-20 13:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Loomer
2017-12-09 22:27 - 2011-02-14 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arturia
2017-12-09 22:27 - 2011-02-12 14:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LinPlug Instruments
2017-12-09 22:27 - 2011-02-08 20:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KORG
2017-12-09 22:27 - 2011-01-09 18:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\M-Audio
2017-12-09 22:27 - 2010-12-25 10:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2017-12-09 22:27 - 2010-09-29 19:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-12-09 22:27 - 2009-07-14 05:52 - 000000000 ____D C:\Program Files\Microsoft Games
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\Provisioning
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-09 22:04 - 2017-09-29 12:55 - 000000000 ____D C:\PerfLogs
2017-12-09 21:35 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-12-09 21:35 - 2017-09-29 12:55 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-12-09 21:35 - 2017-09-29 12:51 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-12-09 21:35 - 2017-09-29 12:51 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-12-09 21:35 - 2017-09-29 12:51 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-12-09 21:35 - 2017-09-29 12:50 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-12-09 21:35 - 2017-09-29 12:50 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-12-09 21:35 - 2017-09-29 12:50 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-12-09 21:35 - 2017-09-29 12:50 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-12-09 21:35 - 2017-09-29 12:49 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-12-09 21:35 - 2017-09-29 12:49 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-12-09 21:35 - 2017-09-29 12:49 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-12-09 21:35 - 2017-09-29 12:49 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-12-09 21:35 - 2017-09-29 12:49 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-12-09 21:30 - 2017-09-30 13:07 - 000000000 ____D C:\WINDOWS\OCR
2017-12-09 20:57 - 2016-09-18 03:56 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2017-12-09 20:22 - 2016-07-24 15:09 - 000008192 __RSH C:\BOOTSECT.BAK
2017-12-09 19:14 - 2016-07-23 08:16 - 000000036 _____ C:\WINDOWS\progress.ini
2017-12-09 13:43 - 2011-01-02 21:02 - 000000000 ____D C:\Users\David\AppData\Local\Downloaded Installations
2017-12-08 22:11 - 2016-07-24 18:56 - 000002429 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-12-08 22:11 - 2016-07-24 18:56 - 000000000 ___RD C:\Users\David\OneDrive
2017-12-08 20:03 - 2011-11-27 21:46 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-12-08 20:01 - 2011-03-19 10:41 - 000000000 ____D C:\Program Files\Java
2017-12-08 19:58 - 2010-09-29 19:45 - 000000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-12-08 19:20 - 2017-06-07 14:34 - 000055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-12-02 16:44 - 2014-07-15 18:59 - 000000000 ____D C:\Program Files\Garmin
2017-12-01 16:42 - 2010-12-25 08:34 - 000000000 ____D C:\WINDOWS\SoftwareDistribution.old
2017-11-30 18:20 - 2016-01-19 20:52 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-26 20:57 - 2015-02-13 23:03 - 000000000 ____D C:\Users\David\Desktop\cnc
2017-11-26 20:57 - 2013-01-19 21:01 - 000000000 ____D C:\Users\David\Desktop\kuchyň
2017-11-26 20:57 - 2011-10-21 19:10 - 000000000 ____D C:\Users\David\Octavia ll

==================== Files in the root of some directories =======

2011-04-02 19:26 - 2011-04-02 19:26 - 000002528 _____ () C:\Users\David\AppData\Roaming\$_hpcst$.hpc
2012-01-08 12:05 - 2014-12-08 18:24 - 000081920 _____ () C:\Users\David\AppData\Roaming\ezpinst.exe
2013-10-07 18:19 - 2013-10-07 18:19 - 000038436 _____ () C:\Users\David\AppData\Roaming\Hodnoty oddělené tabulátory (Windows).ADR
2012-01-08 12:05 - 2014-12-08 18:24 - 000007176 _____ () C:\Users\David\AppData\Roaming\pcouffin.cat
2012-01-08 12:05 - 2014-12-08 18:24 - 000001144 _____ () C:\Users\David\AppData\Roaming\pcouffin.inf
2012-01-08 12:07 - 2014-12-08 18:24 - 000000033 _____ () C:\Users\David\AppData\Roaming\pcouffin.log
2012-01-08 12:05 - 2014-12-08 18:24 - 000047360 _____ (VSO Software) C:\Users\David\AppData\Roaming\pcouffin.sys
2012-01-22 21:04 - 2012-01-22 21:04 - 000020835 _____ () C:\Users\David\AppData\Roaming\UserTile.png
2014-12-08 21:45 - 2016-07-14 13:05 - 000007599 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
2017-12-19 15:19 - 2017-12-01 13:37 - 000186736 _____ (RealNetworks, Inc.) C:\Users\David\AppData\Local\Temp\lowproc.exe

Some zero byte size files/folders:
==========================
C:\Windows\System32\lsprst7.dll
C:\Windows\System32\tmpPrst.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-12-09 23:25

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 17-12-2017
Ran by David (21-12-2017 13:42:07)
Running from C:\Users\David\Downloads
Microsoft Windows 10 Home Version 1709 16299.125 (X86) (2017-12-09 23:37:13)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3313380613-1349851029-4279355966-500 - Administrator - Disabled)
David (S-1-5-21-3313380613-1349851029-4279355966-1001 - Administrator - Enabled) => C:\Users\David
DefaultAccount (S-1-5-21-3313380613-1349851029-4279355966-503 - Limited - Disabled)
Guest (S-1-5-21-3313380613-1349851029-4279355966-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3313380613-1349851029-4279355966-1003 - Limited - Enabled)
UpdatusUser (S-1-5-21-3313380613-1349851029-4279355966-1089 - Limited - Enabled) => C:\Users\UpdatusUser
WDAGUtilityAccount (S-1-5-21-3313380613-1349851029-4279355966-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

. . . (HKLM\...\{870E5275-5457-4BBC-98C9-BFF4B70AA5D3}) (Version: 3.1.0.12 - Intel) Hidden
32 Bit HP CIO Components Installer (HKLM\...\{859D40CF-8491-44AD-8FA8-7389CB418C64}) (Version: 1.1.0 - Hewlett-Packard) Hidden
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 27.0.0.124 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
ANT Drivers Installer x86 (HKLM\...\{E64F69D8-38FE-48B8-95AB-CC676FA636F1}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Arduino (HKLM\...\Arduino) (Version: 1.8.1 - Arduino LLC)
Arturia Arp2600 V v1.0 (HKLM\...\Arturia Arp2600 V v1.0) (Version: - )
ASIO4ALL (HKLM\...\ASIO4ALL) (Version: 2.10 - Michael Tippach)
Aspire 4.0 (HKLM\...\Aspire) (Version: 4.0 - Vectric)
ASUSUpdate for Eee PC (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 1.04.01 - ASUSTeK Computer Inc.)
AsusVibeCheckUpdate (HKLM\...\AsusVibeCheckUpdate_is1) (Version: - ASUSTEK)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.33 - Atheros Communications Inc.)
aTube Catcher verze 3.8 (HKLM\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Audacity 2.1.2 (HKLM\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
AutoCAD 2010 - česky (HKLM\...\{5783F2D7-8001-0405-0002-0060B0CE6BBA}) (Version: 18.0.55.0 - Autodesk) Hidden
AutoCAD 2010 - česky (HKLM\...\AutoCAD 2010 - česky) (Version: 18.0.55.0 - Autodesk)
AutoCAD DWG to PDF Converter v6.9.2 (HKLM\...\AutoCAD DWG to PDF Converter_is1) (Version: - AcroCAD Inc.)
Autodesk CAD Manager Tools (HKLM\...\{5783F2D7-0111-0409-0010-0060B0CE6BBA}) (Version: 16.0.0.65 - Autodesk)
Avast Internet Security (HKLM\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software)
Balíček ovladače systému Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Balíček ovladače systému Windows - Ross-Tech USB Driver Package (05/21/2009 2.04.18) (HKLM\...\B406677FA530D213D0B10B080DCD1080AE866D39) (Version: 05/21/2009 2.04.18 - Ross-Tech)
Balíček ovladače systému Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
BlazeDTV 6.0 (HKLM\...\BlazeDTV 6.0_is1) (Version: - )
Brother MFL-Pro Suite DCP-L2520DW series (HKLM\...\{F8ECC2FD-CE2B-4ED4-BDCC-90D0D34206FD}) (Version: 1.0.2.0 - Brother Industries, Ltd.)
BS.Player PRO (HKLM\...\BSPlayerp) (Version: 2.67.1076 - AB Team, d.o.o.)
CapsHook (HKLM\...\{4B5092B6-F231-4D18-83BC-2618B729CA45}) (Version: 1.0.0.5 - AsusTek Computer)
CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)
CorelDRAW Graphics Suite X3 (HKLM\...\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}) (Version: 13.0 - Corel Corporation)
Cut2D 1.1 (HKLM\...\Cut2D) (Version: 1.1 - Vectric Limited)
Cut3D 1.11 (HKLM\...\Cut3D) (Version: 1.11 - Vectric)
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3718a - CyberLink Corp.)
CZ (HKLM\...\{CCF7074B-BE72-44E1-9CAC-3FFAC582C692}) (Version: 13.0 - Corel Corporation) Hidden
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0196 - Disc Soft Ltd)
Eee Docking 3.8.1 (HKLM\...\Eee Docking_is1) (Version: 3.8.1 - ASUSTek Computer Inc.)
EeeSplendid (HKLM\...\{6333FC29-BFE5-4024-AC78-958A1A7555D1}) (Version: 5.1.2.0011 - ASUS)
EeeSplendid (HKLM\...\{D802DD00-16A8-4A58-AFC9-020C2380ECDA}) (Version: 5.1.2.0011 - ASUS) Hidden
Elevated Installer (HKLM\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Enigma (HKLM\...\{1F145099-1224-4C5B-84F2-7AE6DC699F1A}) (Version: 1.2.0.0 - M-Audio)
Facebook Video Calling 1.2.0.287 (HKLM\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
FontNav (HKLM\...\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}) (Version: 5.0 - Corel Corporation) Hidden
FontResizer (HKLM\...\{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek) Hidden
FontResizer (HKLM\...\InstallShield_{17780F99-A9DF-450B-81B3-6781B20A17A8}) (Version: 1.01.0011 - ASUSTek)
Garmin Communicator Plugin (HKLM\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM\...\{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Google Contact Sync (HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\bb91a114638258b8) (Version: 1.9.9.10 - Heartofangel.com)
Google Chrome (HKLM\...\Google Chrome) (Version: 63.0.3239.84 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Guitar Pro 6 (HKLM\...\{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1) (Version: - Arobas Music)
Hotkey Service (HKLM\...\{71C0E38E-09F2-4386-9977-404D4F6640CD}) (Version: 1.31 - AsusTek Computer Inc.)
ChromecastApp (HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1693.0 - Google Inc.)
Icecream PDF Split and Merge verze 3.26 (HKLM\...\{95DC4DB4-99FB-4FB2-ADBD-97F194EDEB4D}_is1) (Version: 3.26 - Icecream Apps)
Intel Processor Diagnostic Tool (HKLM\...\{645CFDA5-8772-46DE-8B10-3394E0A31B09}) (Version: 4.0.0.29 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM\...\{2550a40e-aac6-4d21-9361-744d33bec573}) (Version: 3.1.0.12 - Intel)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
Jazykový balíček aplikace AutoCAD 2010 - čeština (HKLM\...\{5783F2D7-8001-0405-1002-0060B0CE6BBA}) (Version: 18.0.55.0 - Autodesk) Hidden
Junk Mail filter update (HKLM\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Mega Codec Pack 13.5.0 (HKLM\...\KLiteCodecPack_is1) (Version: 13.5.0 - KLCP)
KORG USB-MIDI Driver Tools for Windows (HKLM\...\{C962EF10-7539-477A-A0AD-F8CBD0E9F7E5}) (Version: 1.11.0050 - KORG Inc.)
Kurzweil PC3K Sound Editor 2.4.4 (HKLM\...\Kurzweil PC3K Sound Editor 2.4.4_is1) (Version: - Kurzweil Music Systems)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version: - )
LinPlug Albino VSTi RTAS v2.2.1 (HKLM\...\LinPlug Albino VSTi RTAS v2.2.1) (Version: - )
LinPlug Octopus VSTi v1.0 (HKLM\...\LinPlug Octopus VSTi v1.0) (Version: - )
Linplug SaxLab v1.0.2 (HKLM\...\Linplug SaxLab v1.0.2) (Version: - )
LiveUpdate (HKLM\...\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}) (Version: 1.22 - AsusTek Computer Inc.)
Mach3 Mach3VersionR2.63 (HKLM\...\Mach3 Mach3VersionR2.63) (Version: Mach3VersionR2.63 - ArtSoft CNC Software Inc.)
MakeMKV v1.10.2 (HKLM\...\MakeMKV) (Version: v1.10.2 - GuinpinSoft inc)
Malwarebytes verze 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
M-Audio Axiom Driver 1.1.1 (x86) (HKLM\...\{263D0845-6A38-4B83-ACF5-C48E0C62450B}) (Version: 1.1.1 - M-Audio)
M-Audio Reason Control Surface (HKLM\...\{F72DD596-F857-463C-AA43-647B45FCE14D}) (Version: 1.0.1 - M-Audio)
Mechanical Calculator 7 (7.7.4) (HKLM\...\Mechanical Calculator_is1) (Version: - SODEV Technology, s.r.o.)
Mesh Runtime (HKLM\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (HKLM\...\{B44F3823-52DD-45CA-A916-8B320778715D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Meta USB Driver (HKLM\...\MetaDriver) (Version: 1.0.2 - M7)
Microsoft .NET Compact Framework 3.5 (HKLM\...\{291B3A3B-F808-45B8-8113-DF232FCB6C82}) (Version: 3.5.7283 - Microsoft Corporation)
Microsoft Office 2003 Web Components (HKLM\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-007A-0405-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version: - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
MSVC90_x86 (HKLM\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Musicnotes Software Suite 1.5.3 (HKLM\...\Musicnotes Combined Installer_is1) (Version: 1.5.3 - Musicnotes Inc.)
NVIDIA Ovladač 3D Vision 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.2.19.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.19.0 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OOBERegBackup (HKLM\...\OOBERegBackup_is1) (Version: - ASUSTeK Computer Inc.)
OpenCL™ runtime for Intel® Core™ and Xeon® Processors (HKLM\...\{4A859071-30A4-401E-8C8F-8DBA0AADBEED}) (Version: 6.4.0.25 - Intel Corporation)
Overture 4.1 (HKLM\...\Overture 4.1) (Version: - )
Ovládací panel NVIDIA 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 342.01 - NVIDIA Corporation) Hidden
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (HKLM\...\{B6190387-0036-4BEB-8D74-A0AFC5F14706}) (Version: 15.4.5722.2 - Microsoft Corporation)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
PhotoVCarve 1.1 (HKLM\...\PhotoVCarve) (Version: 1.1 - Vectric Ltd)
Pinnacle TVCenter Pro (HKLM\...\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}) (Version: - )
PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.3.0 - Prolific Technology INC)
Playlist Editor (HKLM\...\{36068588-9992-48E9-B223-5BEBB0C7A322}) (Version: 1.00.0009 - Roland Corporation)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Pomocník s aktualizací Windows 10 (HKLM\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22256 - Microsoft Corporation)
ProgDVB (HKLM\...\ProgDVB) (Version: - )
RealDownloader (HKLM\...\{13743594-F75E-491E-9EFF-203C8F8DF705}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealDownloader (HKLM\...\{48D18738-099C-4FAA-AFD9-80B592A25478}) (Version: 18.1.3.103 - RealNetworks, Inc.) Hidden
RealDownloader (HKLM\...\{f05bfa4b-0c78-4a3e-aa74-8c220b4a7782}) (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM\...\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (HKLM\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Repetier-Host verze 2.0.5 (HKLM\...\{1143F758-929B-4EEB-8784-46CCB622F037}_is1) (Version: 2.0.5 - repetier)
Repetier-Server (HKLM\...\Repetier-Server) (Version: 0.86.2 - Hot-World GmbH & Co. KG)
Revo Uninstaller Pro 3.0.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.2 - VS Revo Group, Ltd.)
RgcAudio z3ta Plus DXi VSTi v1.41 (HKLM\...\RgcAudio z3ta Plus DXi VSTi v1.41) (Version: - )
SafeZone Stable 4.58.2552.909 (HKLM\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
SD-50 Driver (HKLM\...\RolandRDID0105) (Version: - Roland Corporation)
Sentinel Protection Installer 7.6.1 (HKLM\...\{7B1AA2AB-ACD2-45C7-B1B1-364BEA40615F}) (Version: 7.6.1 - SafeNet, Inc.)
Sentinel System Driver (HKLM\...\Rainbow Sentinel Driver) (Version: - )
setup (HKLM\...\{7754B52E-12AD-44E5-8160-17482302D317}) (Version: 1.0.0 - Company Name)
Shell executable of Setup program 17.0.4.61 (HKLM\...\Shell executable of Setup program 17.0.4.61) (Version: 17.0.4.61 - RealNetworks, Inc.)
Skype™ 7.40 (HKLM\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
SONAR 7 Producer Edition (HKLM\...\SONAR7Producer_is1) (Version: 15.0 - Cakewalk Music Software)
Super Hybrid Engine (HKLM\...\{88F08F98-12BC-4613-81A2-8F9B88CFC73E}) (Version: 2.13 - AsusTek Computer)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.16.0 - Synaptics Incorporated)
syncables desktop SE (HKLM\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables)
SyncroSoft Emu (Remove only) (HKLM\...\SyncroSoft Emu) (Version: - )
Syncrosoft's License Control (HKLM\...\Syncrosoft's License Control) (Version: - Syncrosoft Hard- Und Software GmbH)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update Manager (HKLM\...\{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}) (Version: 4.60 - Corel Corporation) Hidden
UpdateService (HKLM\...\{E3AE96D6-E196-45B4-AF62-2B41998B9E37}) (Version: 1.0.0 - RealNetworks, Inc.) Hidden
US-122 MKII / US-144 MKII (HKLM\...\USB_AUDIO_DEusb-audio.deTascam) (Version: - )
USB2.0 UVC VGA WebCam (HKLM\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10252 - Realtek Semiconductor Corp.)
VAG Info System (HKLM\...\{64D24CA4-3E42-460A-B4C7-FB7A1CE1C629}) (Version: - B.J.SERVIS)
VBA (HKLM\...\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}) (Version: 6.2 - Corel Corporation) Hidden
VC80CRTRedist - 8.0.50727.6195 (HKLM\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
Vectric Shell Extensions 1.2 (HKLM\...\VectricThumbnailShellExt) (Version: - Vectric)
Video Converter 3 (HKLM\...\Video Converter 3) (Version: 3.1.10.0926b - Xilisoft)
Video Downloader (HKLM\...\{8B6202FD-3790-4DD4-B343-51736F7FF4E5}) (Version: 1.2.0 - RealNetworks) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5500 - Broadcom Corporation)
Win32DiskImager version 0.9.5 (HKLM\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Winamp (HKLM\...\Winamp) (Version: 5.66 - Nullsoft, Inc)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{068B46A0-8858-4CEB-80BC-A4AE787A05FC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinHTTrack Website Copier 3.44-4 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.44.4 - HTTrack)
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
WinZip (HKLM\...\WinZip) (Version: 11.0 (7313) - WinZip Computing LP)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InprocServer32 -> C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD 2010\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\David\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3313380613-1349851029-4279355966-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> no filepath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ShellIconOverlayIdentifiers: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2009-02-09] (Autodesk)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ContextMenuHandlers1: [IcecreamShellExtension] -> {A8B59160-93EA-4303-9192-AA3C64FDBE31} => C:\Program Files\Icecream PDF Split and Merge\IcecreamShell.dll [2016-02-04] (TODO: <Company name>)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2008-09-16] ()
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2006-11-10] (WinZip Computing LP)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2008-09-16] ()
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2006-11-10] (WinZip Computing LP)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-15] (AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2008-09-16] ()
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2006-11-10] (WinZip Computing LP)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {015191EA-60AF-48A1-A15A-1B1C07CCC25F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {056B08AE-49D7-445A-9949-54C6C3E0B075} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {105B2974-BF36-4C95-8F3C-246B1FA1990B} - System32\Tasks\{E2CBB101-9B91-4806-BA53-D9882CA4458E} => C:\windows\system32\pcalua.exe -a C:\Users\David\Desktop\PG7610000_Marvel_hboot_1.09.0099_2.13.401.3_0210_R.exe -d C:\Users\David\Desktop
Task: {14066148-43C7-4CAA-9DF7-56425F876892} - System32\Tasks\SafeZone scheduled Autoupdate 1457361918 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {159E755B-6C94-45E4-8183-62F7D968BE53} - System32\Tasks\{E492DCE9-CBCD-4B2E-BC5C-DEAAF6EC1571} => C:\windows\system32\pcalua.exe -a C:\Users\David\Desktop\ted\1-surfcam2003b83\SURFCAM\utils\SCRepairInstall.exe -d C:\Users\David\Desktop\ted\1-surfcam2003b83\SURFCAM\utils
Task: {1A0E58C3-F4C0-4BDE-818F-A5EC7E470010} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {20AEAA7C-6DD7-4250-B48A-9F12C50ED866} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {245F94F3-DFE1-4785-9CAD-1715BFF46DFF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core1d211f64beafe68 => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {2638A186-0C5A-438A-9BB4-5D893215EF1F} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3313380613-1349851029-4279355966-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {2820EE39-F710-4DB3-AFFC-07E7FC91B5A8} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2B252DE9-F2D1-4E85-88BA-2533F09FF64B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2017-12-08] (AVAST Software)
Task: {2BEFCD47-7413-42DA-9445-F8F461E6D891} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2D55B9E7-B892-4744-A7DD-15E1B185DF16} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3986176B-044E-4F01-BFB2-E0A6DE06F82F} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-15] (AVAST Software)
Task: {41CB00EB-BF3B-4C0C-ADE9-CC40E0433BCC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {470F09D1-AD1F-46FF-94AF-A146126A447F} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {561EF91C-8AFB-4BA2-A122-4CE2579B642E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5BC6E197-AC0A-4768-A5F1-0B2B53885E2D} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {62798374-0704-44CD-BF98-22291332FB60} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {62BF4844-F663-4386-B09A-EB105DE7E9BC} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {64D1224A-4D6F-4A7B-BE59-5940881DC181} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6CE5279F-8A35-43A6-B398-5378A7EC7D3C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {75EE6992-A0D2-45C2-AB2E-FAACB2A31A8C} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] ()
Task: {7653AFEA-91C9-4A86-960D-0DB488A024A5} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {7AF7B07E-0EB1-4126-B2EE-BC65551B4B41} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-09-01] ()
Task: {824EF491-6C88-4557-BBE9-465F2F052230} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {83CBCA4E-91B5-4EE5-B277-D0FA5AAFAA4B} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-12-12] (Adobe Systems Incorporated)
Task: {8729545A-1A36-4EA8-A944-C70F6DE66200} - System32\Tasks\{9053CA6A-B7E7-41C2-BA01-947DBAF85973} => C:\windows\system32\pcalua.exe -a C:\Users\David\Desktop\crack.exe -d C:\Users\David\Desktop
Task: {8CBC88B8-FF5D-410A-BDB6-9982CBB0DD74} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {8F761A97-0C81-4263-B589-6846850ACF3C} - System32\Tasks\{A9E9225E-197B-4CC2-94B2-538F0395D4C5} => C:\windows\system32\pcalua.exe -a C:\Users\David\Downloads\PG7610000_Marvel_hboot_1.08.0099_20111216.exe -d C:\Users\David\Downloads
Task: {91715BC9-A1DB-4A36-9849-B2E397FF2094} - System32\Tasks\{6FD18B92-11DE-4F61-89E9-3060A925F7E2} => C:\windows\system32\pcalua.exe -a C:\SURFCAM\Surf2003\surfcam.exe -d C:\SURFCAM\Surf2003
Task: {A5B40A23-7EEE-4371-AD11-44CFE9FE58F6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A7CD4DCA-A5CB-41C5-816A-F889C92983B7} - System32\Tasks\ReclaimerUpdateXML_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {B1574C44-D5A7-4EF7-8499-853903C829DB} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B229EC04-34A1-4800-9034-978E541B19F4} - System32\Tasks\RNUpgradeHelperLogonPrompt_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {B8B979F2-0526-4923-830B-32807A3405DE} - System32\Tasks\ReclaimerUpdateFiles_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {B8C3BA3F-C568-4880-B9CC-267BFEE47354} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C0B53FC0-D62D-4C56-81A5-BE38AB0715F9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.)
Task: {C3B1DD32-4A8B-4EEB-80DF-C160400399EB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CE9396EB-871A-4E0F-B9F6-327E6638A0CD} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {DC2FD05B-B769-4767-84D8-BAA7D8E5723E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3313380613-1349851029-4279355966-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {EB454A5D-E458-4F61-A05A-FF43D6BE17AB} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EE87AEFB-4C99-44AA-A7A0-C5DAB54156F4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EE94DF76-34E0-44D3-A960-CD7B9B9FF603} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {EE97E89A-4CCB-44FF-815F-E760E210327E} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files\AVG\AVG PC TuneUp\tuscanx.exe
Task: {F5E87A17-B3FE-4065-B741-69997792F820} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {F6FF8036-5B6B-4537-BC2B-E1E9E8EC680E} - System32\Tasks\Driver Booster SkipUAC (David) => C:\Program Files\IObit\Driver Booster\4.5.0\DriverBooster.exe
Task: {F78AB4F4-8A42-4998-A57E-DCD343641FCD} - System32\Tasks\RNUpgradeHelperResumePrompt_David => C:\Users\David\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.09\agent\rnupgagent.exe [2017-12-13] (RealNetworks, Inc.)
Task: {F855AA22-2927-4791-A5EF-63C5571190C2} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {FD9458E9-C1CF-479D-B476-97C0D8177282} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001Core.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3313380613-1349851029-4279355966-1001UA.job => C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\David\Desktop\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\David\AppData\Local\Google\Chrome\User Data\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Hudba Google Play.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Videostream for Google Chromecast™.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=cnciopoikihiagdjbjpnocolokfelagl
ShortcutWithArgument: C:\Users\David\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Spouštěč aplikací Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 12:49 - 2017-09-29 12:49 - 000149840 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-07-20 17:18 - 2016-11-14 12:00 - 000123448 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2012-10-08 15:16 - 2001-10-28 15:42 - 000116224 _____ () C:\WINDOWS\System32\pdfcmnnt.dll
2012-12-07 18:27 - 2012-12-07 18:27 - 000167424 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
2016-02-03 18:49 - 2016-02-03 18:49 - 000032544 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2016-02-03 18:48 - 2016-02-03 18:48 - 000037688 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2016-02-03 18:48 - 2016-02-03 18:48 - 000039224 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2016-02-03 18:49 - 2016-02-03 18:49 - 000037192 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll
2017-08-07 19:17 - 2017-08-07 19:17 - 006129000 _____ () C:\Program Files\Repetier-Server\bin\RepetierServer.exe
2017-01-01 13:54 - 2009-02-27 16:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2017-12-19 16:27 - 2017-11-29 09:11 - 001934792 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 007817728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-12-09 22:01 - 2017-12-09 22:01 - 001518592 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-11-15 19:07 - 2017-11-15 19:07 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-11-15 19:07 - 2017-11-15 19:07 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-07-11 15:18 - 2017-07-11 15:18 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-11-15 19:08 - 2017-11-15 19:08 - 000237808 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-11-15 19:08 - 2017-11-15 19:08 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-11-15 19:07 - 2017-11-15 19:07 - 000235816 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-12-08 14:21 - 2017-12-06 04:48 - 002195800 _____ () C:\Program Files\Google\Chrome\Application\63.0.3239.84\swiftshader\libglesv2.dll
2017-12-08 14:21 - 2017-12-06 04:48 - 000111448 _____ () C:\Program Files\Google\Chrome\Application\63.0.3239.84\swiftshader\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Software\Classes\.scr: AutoCADScriptFile =>

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2017-12-19 13:59 - 000000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\David\Pictures\mesta_46-1920x1080.jpg
HKU\S-1-5-21-3313380613-1349851029-4279355966-1089\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 217.112.162.34 - 217.112.160.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Garmin Device Interaction Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk => C:\windows\pss\Adobe Acrobat Speed Launcher.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealPlayer Cloud Service UI.lnk => C:\windows\pss\RealPlayer Cloud Service UI.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealTimes.lnk => C:\windows\pss\RealTimes.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Jádro Plánovače úloh SolidWorks.lnk => C:\windows\pss\Jádro Plánovače úloh SolidWorks.lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\windows\AsScrPro.exe
MSCONFIG\startupreg: ASUSPRP => C:\Program Files\ASUS\APRP\APRP.EXE
MSCONFIG\startupreg: ASUSWebStorage => C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
MSCONFIG\startupreg: CapsHook => AsusSender.exe C:\Program Files\EeePC\CapsHook\CapsHook.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: CLMLServer => "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: Eee Docking => C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GoogleChromeAutoLaunch_9A83AADA066CCEA6F8C613E0AB5C7E19 => "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: GraphicsSwitch => AsusSender.exe C:\Program Files\Asus\GraphicsSwitch\GPUStatusMonitor.exe
MSCONFIG\startupreg: H2O => C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
MSCONFIG\startupreg: HotkeyMon => AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
MSCONFIG\startupreg: HotKeysCmds => C:\windows\system32\hkcmd.exe
MSCONFIG\startupreg: HotkeyService => AsusSender.exe C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
MSCONFIG\startupreg: HTC Sync Loader => "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
MSCONFIG\startupreg: IAAnotif => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
MSCONFIG\startupreg: IgfxTray => C:\windows\system32\igfxtray.exe
MSCONFIG\startupreg: ISUSPM Startup => "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
MSCONFIG\startupreg: ISUSScheduler => "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
MSCONFIG\startupreg: LiveUpdate => AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
MSCONFIG\startupreg: OOBESetup => C:\Program Files\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files\asus\OOBERegBackup\OOBEReg.ini"
MSCONFIG\startupreg: Persistence => C:\windows\system32\igfxpers.exe
MSCONFIG\startupreg: RealDownloader => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SuperHybridEngine => AsusSender.exe C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
MSCONFIG\startupreg: SynAsusAcpi => %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: UCam_Menu => "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe
HKLM\...\StartupApproved\Run: => "DSATray"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "DivXMediaServer"
HKLM\...\StartupApproved\Run: => "RealDownloader"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "Application Restart #0"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "ISM"
HKU\S-1-5-21-3313380613-1349851029-4279355966-1001\...\StartupApproved\Run: => "Syncables"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{77A6152C-0A09-4ABC-A6F7-E7339DBB4A24}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{ED4ED8DE-C529-483A-A78E-A5C8E1AF2210}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{0AC06A0B-3B4B-4FDE-B355-4305D1D696DA}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{56D3C9DA-8FAE-4217-9E32-242A620DE5F9}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{03E64B93-4450-42C6-964F-1199A91DFD89}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [TCP Query User{1FC484CD-C569-4A08-ACAD-D08441B70B10}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [UDP Query User{AE06B32C-7127-4C0A-AFAC-51B731A1F338}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [TCP Query User{7AF3974D-5EA6-4C86-85CE-641245E3F532}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [UDP Query User{70B6C52F-E567-4B83-99CF-052F73B7A02C}C:\program files\syncables\syncables desktop\jre\bin\javaw.exe] => (Allow) C:\program files\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [{0EC76436-D14E-4199-BF32-0DF8AF31EB25}] => (Allow) LPort=26675
FirewallRules: [{E92BBC6C-6B87-4B98-BD7B-533F2FDFB58F}] => (Allow) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [TCP Query User{1871ED95-EC9D-4CF4-817B-7FC02891CF23}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{7A488796-EA20-409D-8C09-F50844EBA999}C:\totalcmd\totalcmd.exe] => (Allow) C:\totalcmd\totalcmd.exe
FirewallRules: [{816851E0-0831-4D85-AE22-5CC6D57A741D}] => (Allow) LPort=26675
FirewallRules: [TCP Query User{603CAB50-B4C1-4EE0-AC67-C1F3D2B1BAC3}C:\wanscam\wanscam.exe] => (Allow) C:\wanscam\wanscam.exe
FirewallRules: [UDP Query User{EBBB1DFB-9A79-446A-A51E-B328E2357442}C:\wanscam\wanscam.exe] => (Allow) C:\wanscam\wanscam.exe
FirewallRules: [{FB34F1D4-FF26-4E7E-A393-97C4B0C8521C}] => (Allow) LPort=26675
FirewallRules: [TCP Query User{9156660D-D1A9-4047-AF9B-4290F8F9188D}C:\wanscam\wanscam.exe] => (Block) C:\wanscam\wanscam.exe
FirewallRules: [UDP Query User{B9AB5266-A314-4300-B1CE-4F934168014C}C:\wanscam\wanscam.exe] => (Block) C:\wanscam\wanscam.exe
FirewallRules: [{D3E617C3-B68D-4A8E-857F-B9CFD7F3908A}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{15187E55-4996-43F8-9179-8236D573F236}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{8A3F82EB-58F5-4F3E-B3FB-A8A54FB62EEC}] => (Allow) C:\Windows\System32\nbirv4svr.exe
FirewallRules: [{90B0C55F-592D-4AC9-A260-AE3A7C22FB73}] => (Allow) C:\Windows\System32\nbirv4svr.exe
FirewallRules: [{A8BEC17F-D7D9-4DCC-BCB5-B37C0F55FEFE}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{A555831A-4FB4-4EB5-834B-A603B0150664}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{A73E0800-C87D-4D89-B178-633E76E43821}] => (Allow) LPort=5556
FirewallRules: [{06E9AF3F-2167-47DB-A9AB-4181301BF43F}] => (Allow) LPort=5558
FirewallRules: [{35CFD105-0F52-4306-B65D-B180DC354592}] => (Allow) LPort=26675
FirewallRules: [{EC73DD74-95D5-4FEB-B6FE-8C7E47F46008}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{8D6774D3-2CDF-4EF1-99EF-AD0C9189D380}] => (Allow) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{672D3EF9-20BC-4175-9839-2AFBEDBC6176}] => (Allow) LPort=54925
FirewallRules: [{57375476-2137-487D-874D-416394F830E0}] => (Allow) C:\Program Files\Repetier-Server\bin\RepetierServer.exe
FirewallRules: [{440A471B-E7AC-402D-A603-B2E0EA868EB4}] => (Allow) C:\Program Files\Repetier-Server\bin\RepetierServer.exe

==================== Restore Points =========================

13-12-2017 18:47:11 Windows Update
18-12-2017 14:23:43 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/19/2017 09:00:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RealPlayerUpdateSvc.exe, verze: 0.0.0.0, časové razítko: 0x56b2bc35
Název chybujícího modulu: ntdll.dll, verze: 10.0.16299.64, časové razítko: 0x1d27c592
Kód výjimky: 0xc0000005
Posun chyby: 0x000b3e17
ID chybujícího procesu: 0xc2c
Čas spuštění chybující aplikace: 0x01d378ffb862a827
Cesta k chybující aplikaci: C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: d536dbc8-267e-48ea-ab92-7759f1b0e3e0
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (12/19/2017 08:34:59 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/19/2017 08:34:58 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/19/2017 08:34:12 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/19/2017 08:34:11 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-3313380613-1349851029-4279355966-1001}/>.

Error: (12/19/2017 07:53:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RealPlayerUpdateSvc.exe, verze: 0.0.0.0, časové razítko: 0x56b2bc35
Název chybujícího modulu: ntdll.dll, verze: 10.0.16299.64, časové razítko: 0x1d27c592
Kód výjimky: 0xc0000005
Posun chyby: 0x000b3e17
ID chybujícího procesu: 0xbf0
Čas spuštění chybující aplikace: 0x01d378f668d0e137
Cesta k chybující aplikaci: C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: 6936f566-e572-4594-b15e-5d46bfa128f4
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (12/19/2017 04:43:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RealPlayerUpdateSvc.exe, verze: 0.0.0.0, časové razítko: 0x56b2bc35
Název chybujícího modulu: ntdll.dll, verze: 10.0.16299.64, časové razítko: 0x1d27c592
Kód výjimky: 0xc0000005
Posun chyby: 0x000b3e17
ID chybujícího procesu: 0xd8c
Čas spuštění chybující aplikace: 0x01d378dbee4f2921
Cesta k chybující aplikaci: C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: 1286c8b7-7758-4dda-b5ed-0954b9727dc7
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (12/19/2017 02:37:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RealPlayerUpdateSvc.exe, verze: 0.0.0.0, časové razítko: 0x56b2bc35
Název chybujícího modulu: ntdll.dll, verze: 10.0.16299.64, časové razítko: 0x1d27c592
Kód výjimky: 0xc0000005
Posun chyby: 0x000b3e17
ID chybujícího procesu: 0xc44
Čas spuštění chybující aplikace: 0x01d378ca436d9b9d
Cesta k chybující aplikaci: C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
Cesta k chybujícímu modulu: C:\WINDOWS\SYSTEM32\ntdll.dll
ID zprávy: e0dbe417-7495-49c7-9897-d4bbde7a4c37
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (12/19/2017 02:00:11 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x8007001f, Zařízení připojené k systému nefunguje.
.


Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (12/19/2017 01:58:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.


System errors:
=============
Error: (12/21/2017 01:44:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba RealPlayer Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (12/21/2017 01:34:26 PM) (Source: DCOM) (EventID: 10010) (User: David-PC)
Description: Server Microsoft.Windows.Photos_2017.39101.16720.0_x86__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (12/21/2017 04:23:08 AM) (Source: DCOM) (EventID: 10016) (User: David-PC)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli David-PC\David (SID: S-1-5-21-3313380613-1349851029-4279355966-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (12/21/2017 04:17:31 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba NetTcpActivator závisí na službě NetTcpPortSharing, která neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (12/21/2017 04:17:31 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetTcpPortSharing neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (12/21/2017 04:17:31 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby NetTcpPortSharing bylo dosaženo časového limitu (30000 ms).

Error: (12/19/2017 09:04:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba RealPlayer Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (12/19/2017 08:30:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba NetTcpActivator závisí na službě NetTcpPortSharing, která neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (12/19/2017 08:30:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetTcpPortSharing neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (12/19/2017 08:30:14 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby NetTcpPortSharing bylo dosaženo časového limitu (30000 ms).


CodeIntegrity:
===================================
Date: 2017-12-19 16:28:55.782
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Atom(TM) CPU D525 @ 1.80GHz
Percentage of memory in use: 64%
Total physical RAM: 2805.99 MB
Available physical RAM: 999.04 MB
Total Virtual: 5621.99 MB
Available Virtual: 2982.07 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:100 GB) (Free:12.45 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:183.07 GB) (Free:11.69 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 11B42F68)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15 GB) - (Type=1B)
Partition 3: (Not Active) - (Size=183.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=20 MB) - (Type=EF)

==================== End of Addition.txt ============================

vypada to ciste.
jak se chova pc?