Stránka 1 z 1

Zpomalený start Windows

Napsal: 13 lis 2018 09:40
od Dreddrew
Dobrý den,

moc prosím o kontrolu logu, notebook se občas zasekne při startu win nebo nenastartuje vůbec,

Děkuju moc

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11.11.2018
Ran by Ondrej (administrator) on DESKTOP-V6SAKP4 (13-11-2018 09:36:07)
Running from C:\Users\Lenovo\Desktop
Loaded Profiles: Lenovo & Ondrej (Available Profiles: Ondřej & Lenovo & Honza & Ondrej)
Platform: Windows 10 Home Version 1803 17134.376 (X64) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(AMD) C:\Windows\System32\DriverStore\FileRepository\c0333764.inf_amd64_239226e8c322a98d\B333740\atiesrxx.exe
(AMD) C:\Windows\System32\DriverStore\FileRepository\c0333764.inf_amd64_239226e8c322a98d\B333740\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(OSBASE) C:\Windows\System32\ddmgr.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
() C:\Program Files (x86)\NordVPN\nordvpn-service.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe
(NordVPN) C:\Program Files (x86)\NordVPN\NordVPN.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Lenovo\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe
(Adobe Inc.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Duet, Inc.) C:\Program Files\Kairos\Duet Display\duet.exe
(Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [919768 2014-11-20] (Conexant Systems, Inc.)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [5166872 2016-08-04] (Realtek semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [177928 2018-11-10] (ESET)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2410968 2018-09-13] (Adobe Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1871344 2018-09-20] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Duet Display] => C:\Program Files\Kairos\Duet Display\duet.exe [2106360 2018-03-13] (Duet, Inc.)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [3682968 2018-07-09] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [5878256 2018-10-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [3003344 2018-09-11] (NordVPN)
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46459080 2018-10-04] ()
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19476424 2018-11-06] (Piriform Software Ltd)
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\MountPoints2: {acbdf852-b121-11e8-8a50-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\MountPoints2: {cb644dd2-b669-11e8-8a54-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [3003344 2018-09-11] (NordVPN)
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19476424 2018-11-06] (Piriform Software Ltd)
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\...\RunOnce: [NetworkResetPostReboot] => netsh.exe trace postreset
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\...\MountPoints2: {cb644dd2-b669-11e8-8a54-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [AdobeBridge] => [X]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ipMIDI Trial Monitor.lnk [2018-04-21]
ShortcutTarget: ipMIDI Trial Monitor.lnk -> C:\Program Files (x86)\nerds.de\ipMIDI Trial\IPMidiMon.exe (nerds.de)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LoopBeAudio Trial Monitor.lnk [2018-04-22]
ShortcutTarget: LoopBeAudio Trial Monitor.lnk -> C:\Program Files (x86)\nerds.de\LoopBeAudio Trial\loopBeAudio.exe (nerds.de)
Startup: C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2018-09-07]
ShortcutTarget: EvernoteClipper.lnk -> C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{be76e764-8107-4021-9c58-4ffbaa06de03}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d38130c5-41c7-4e00-a640-b485bf4538ba}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-10-25] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-02-02] (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-02-02] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-02-02] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-02-02] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-02-02] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-02-02] (Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-05] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-05] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-05] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-05] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 23uclgw1.default
FF ProfilePath: C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default [2018-11-13]
FF Homepage: Mozilla\Firefox\Profiles\23uclgw1.default -> google.com/
FF Extension: (Disconnect) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\2.0@disconnect.me.xpi [2018-09-17]
FF Extension: (Push to Kindle) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\jid0-GokC6R49cBZciOKniufAR4QKFWc@jetpack.xpi [2018-09-17]
FF Extension: (Privacy Badger) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2018-09-17]
FF Extension: (NordVPN Proxy Extension - Privacy & Security) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\nordvpnproxy@nordvpn.com.xpi [2018-09-17]
FF Extension: (User search study) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\search-nudges@shield.mozilla.org.xpi [2018-09-17] [Legacy]
FF Extension: (LastPass: Free Password Manager) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\support@lastpass.com.xpi [2018-09-17]
FF Extension: (Reader) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\{20068ab2-1901-4140-9f3c-81207d4dacc4}.xpi [2018-09-17]
FF Extension: (Adblock Plus) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Roaming\Mozilla\Firefox\Profiles\23uclgw1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-09-17]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-09-20]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-09-13] (Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-09-08] (Microsoft Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2018-01-08] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-20] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-09-13] (Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default [2018-11-13]
CHR Extension: (Slides) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-11-13]
CHR Extension: (Docs) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-11-13]
CHR Extension: (Google Drive) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-11-13]
CHR Extension: (YouTube) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-13]
CHR Extension: (Adobe Acrobat) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-11-13]
CHR Extension: (Sheets) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-11-13]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-11-13]
CHR Extension: (Gmail) - C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-11-13]
CHR HKU\S-1-5-21-248813295-3706206607-1631636604-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818136 2018-09-13] (Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated)
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\c0333764.inf_amd64_239226e8c322a98d\B333740\atiesrxx.exe [505224 2018-09-26] (AMD)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9667872 2018-10-24] (Microsoft Corporation)
R2 ddmgr; C:\WINDOWS\system32\ddmgr.exe [1691072 2018-03-13] (OSBASE)
S3 DuetUpdater; C:\Program Files\Kairos\Duet Display\DuetUpdater.exe [902136 2018-03-21] (Kairos)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2302152 2018-11-10] (ESET)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [190784 2018-08-23] () [File not signed]
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [184064 2016-12-12] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373680 2017-05-26] (Intel Corporation)
R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [437200 2018-09-11] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [328344 2018-07-09] (Sandboxie Holdings, LLC)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [23920 2017-12-12] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255608 2016-06-01] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107136 2018-09-21] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0333764.inf_amd64_239226e8c322a98d\B333740\atikmdag.sys [47112064 2018-09-26] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0333764.inf_amd64_239226e8c322a98d\B333740\atikmpag.sys [587656 2018-09-26] (Advanced Micro Devices, Inc.)
R4 ddkmd; C:\WINDOWS\system32\drivers\ddkmd.sys [295248 2018-03-13] (OSBASE)
R0 ddkmdldr; C:\WINDOWS\System32\drivers\ddkmdldr.sys [31568 2018-03-13] (OSBASE)
R3 duetbus; C:\WINDOWS\System32\drivers\duetbus.sys [32512 2017-09-20] (Duet, Inc.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [143448 2018-11-10] (ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [107896 2018-11-10] (ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15872 2018-03-05] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [188832 2018-11-10] (ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [50144 2018-11-10] (ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [82304 2018-11-10] (ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [109864 2018-11-10] (ESET)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2018-08-23] (Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2018-08-23] (Huawei Technologies Co., Ltd.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [230656 2016-12-12] (Intel Corporation)
R3 ipMIDI; C:\WINDOWS\system32\drivers\ipmidi.sys [23040 2013-01-31] (nerds.de)
R3 LoopBeAu; C:\WINDOWS\system32\drivers\loopBeAu.sys [22528 2015-08-14] (nerds.de)
S3 Microsoft_Bluetooth_AvrcpTransport; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [46592 2018-04-12] (Microsoft Corporation)
R3 NETwNb64; C:\WINDOWS\system32\DRIVERS\Netwbw02.sys [3525896 2016-11-09] (Intel Corporation)
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-07-22] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [410880 2015-07-03] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3127576 2016-08-04] (Realtek Semiconductor Corp.)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [228176 2018-07-09] (Sandboxie Holdings, LLC)
R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (The OpenVPN Project)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-13 09:34 - 2018-11-13 09:34 - 000053443 _____ C:\Users\Lenovo\Desktop\Addition.txt
2018-11-13 09:33 - 2018-11-13 09:36 - 000023892 _____ C:\Users\Lenovo\Desktop\FRST.txt
2018-11-13 09:33 - 2018-11-13 09:36 - 000000000 ____D C:\FRST
2018-11-13 09:32 - 2018-11-13 09:32 - 002415616 _____ (Farbar) C:\Users\Lenovo\Downloads\FRST64.exe
2018-11-13 09:32 - 2018-11-13 09:32 - 002415616 _____ (Farbar) C:\Users\Lenovo\Desktop\FRST64.exe
2018-11-13 09:26 - 2018-11-13 09:27 - 000000000 ____D C:\Plocha
2018-11-13 09:26 - 2018-11-13 09:26 - 000003084 _____ C:\Users\Ondrej.DESKTOP-V6SAKP4\Documents\cc_20181113_092622.reg
2018-11-13 09:24 - 2018-11-13 09:24 - 000000000 ____D C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Daedalic Entertainment
2018-11-13 09:22 - 2018-11-13 09:23 - 000000000 ____D C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Steam
2018-11-13 09:19 - 2018-11-13 09:19 - 000018472 _____ C:\Users\Ondrej.DESKTOP-V6SAKP4\Documents\cc_20181113_091909.reg
2018-11-13 09:15 - 2018-11-13 09:15 - 018071560 _____ (Piriform Software Ltd) C:\Users\Lenovo\Downloads\ccsetup549.exe
2018-11-07 16:49 - 2018-11-07 16:49 - 000000000 ____D C:\Users\Lenovo\AppData\Local\IsolatedStorage
2018-11-07 15:36 - 2018-11-07 15:36 - 000660211 _____ C:\Users\Lenovo\Downloads\wpml-string-translation.2.8.8.zip
2018-11-07 15:35 - 2018-11-07 15:35 - 005495274 _____ C:\Users\Lenovo\Downloads\sitepress-multilingual-cms.4.0.8.zip
2018-11-07 00:21 - 2018-10-21 14:00 - 021386368 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-11-07 00:21 - 2018-10-21 14:00 - 001639560 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-11-07 00:21 - 2018-10-21 14:00 - 001516120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-11-07 00:21 - 2018-10-21 14:00 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-11-07 00:21 - 2018-10-21 14:00 - 000396304 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2018-11-07 00:21 - 2018-10-21 13:59 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-11-07 00:21 - 2018-10-21 13:59 - 000236728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-11-07 00:21 - 2018-10-21 13:46 - 013572096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-11-07 00:21 - 2018-10-21 13:46 - 004393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-11-07 00:21 - 2018-10-21 13:46 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-11-07 00:21 - 2018-10-21 13:45 - 012709888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-11-07 00:21 - 2018-10-21 13:45 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-11-07 00:21 - 2018-10-21 13:44 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2018-11-07 00:21 - 2018-10-21 13:44 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2018-11-07 00:21 - 2018-10-21 13:43 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-11-07 00:21 - 2018-10-21 13:43 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2018-11-07 00:21 - 2018-10-21 13:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2018-11-07 00:21 - 2018-10-21 13:42 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2018-11-07 00:21 - 2018-10-21 13:42 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-11-07 00:21 - 2018-10-21 13:42 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2018-11-07 00:21 - 2018-10-21 13:42 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2018-11-07 00:21 - 2018-10-21 13:42 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2018-11-07 00:21 - 2018-10-21 13:41 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-11-07 00:21 - 2018-10-21 13:41 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-11-07 00:21 - 2018-10-21 13:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2018-11-07 00:21 - 2018-10-21 13:41 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-11-07 00:21 - 2018-10-21 12:38 - 001322376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-11-07 00:21 - 2018-10-21 12:38 - 000662312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-11-07 00:21 - 2018-10-21 12:38 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-11-07 00:21 - 2018-10-21 12:38 - 000221216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2018-11-07 00:21 - 2018-10-21 12:37 - 020381808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-11-07 00:21 - 2018-10-21 12:37 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-11-07 00:21 - 2018-10-21 12:28 - 012501504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-11-07 00:21 - 2018-10-21 12:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2018-11-07 00:21 - 2018-10-21 12:26 - 011902464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-11-07 00:21 - 2018-10-21 12:24 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-11-07 00:21 - 2018-10-21 12:23 - 002892288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-11-07 00:21 - 2018-10-21 12:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2018-11-07 00:21 - 2018-10-21 12:23 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2018-11-07 00:21 - 2018-10-21 12:22 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-11-07 00:21 - 2018-10-21 12:22 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2018-11-07 00:21 - 2018-10-21 10:29 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-11-07 00:21 - 2018-10-21 09:44 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-11-07 00:21 - 2018-10-21 08:54 - 001035240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-11-07 00:21 - 2018-10-21 08:53 - 000272200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-11-07 00:21 - 2018-10-21 08:53 - 000269128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-11-07 00:21 - 2018-10-21 08:48 - 005602456 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-11-07 00:21 - 2018-10-21 08:47 - 001221128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-11-07 00:21 - 2018-10-21 08:47 - 001062712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-11-07 00:21 - 2018-10-21 08:47 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-11-07 00:21 - 2018-10-21 08:47 - 000566776 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-11-07 00:21 - 2018-10-21 08:47 - 000368440 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2018-11-07 00:21 - 2018-10-21 08:47 - 000135208 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-11-07 00:21 - 2018-10-21 08:47 - 000076304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2018-11-07 00:21 - 2018-10-21 08:46 - 009089544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-11-07 00:21 - 2018-10-21 08:46 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-11-07 00:21 - 2018-10-21 08:46 - 007432136 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-11-07 00:21 - 2018-10-21 08:46 - 002824712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-11-07 00:21 - 2018-10-21 08:46 - 000717112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2018-11-07 00:21 - 2018-10-21 08:46 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-11-07 00:21 - 2018-10-21 08:46 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-11-07 00:21 - 2018-10-21 08:46 - 000560136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-11-07 00:21 - 2018-10-21 08:46 - 000497864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2018-11-07 00:21 - 2018-10-21 08:46 - 000413200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-11-07 00:21 - 2018-10-21 08:46 - 000171024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-11-07 00:21 - 2018-10-21 08:45 - 003283512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-11-07 00:21 - 2018-10-21 08:45 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-11-07 00:21 - 2018-10-21 08:45 - 001946208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-11-07 00:21 - 2018-10-21 08:45 - 001456728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-11-07 00:21 - 2018-10-21 08:45 - 001257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-11-07 00:21 - 2018-10-21 08:45 - 001140472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-11-07 00:21 - 2018-10-21 08:45 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-11-07 00:21 - 2018-10-21 08:45 - 000982400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-11-07 00:21 - 2018-10-21 08:45 - 000885968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-11-07 00:21 - 2018-10-21 08:45 - 000793096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-11-07 00:21 - 2018-10-21 08:45 - 000607136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-11-07 00:21 - 2018-10-21 08:45 - 000185120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-11-07 00:21 - 2018-10-21 08:45 - 000175624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2018-11-07 00:21 - 2018-10-21 08:45 - 000139792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2018-11-07 00:21 - 2018-10-21 08:45 - 000058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2018-11-07 00:21 - 2018-10-21 08:30 - 025855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-11-07 00:21 - 2018-10-21 08:28 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-11-07 00:21 - 2018-10-21 08:22 - 022714880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-11-07 00:21 - 2018-10-21 08:22 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-11-07 00:21 - 2018-10-21 08:22 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-11-07 00:21 - 2018-10-21 08:22 - 004384768 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-11-07 00:21 - 2018-10-21 08:21 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-11-07 00:21 - 2018-10-21 08:21 - 001589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2018-11-07 00:21 - 2018-10-21 08:21 - 000123424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-11-07 00:21 - 2018-10-21 08:20 - 003397120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-11-07 00:21 - 2018-10-21 08:20 - 000424000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2018-11-07 00:21 - 2018-10-21 08:20 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2018-11-07 00:21 - 2018-10-21 08:20 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2018-11-07 00:21 - 2018-10-21 08:20 - 000141312 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2018-11-07 00:21 - 2018-10-21 08:20 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 006569536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 006039560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 002487088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 001620776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 001130768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000567048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2018-11-07 00:21 - 2018-10-21 08:19 - 000505616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-11-07 00:21 - 2018-10-21 08:19 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2018-11-07 00:21 - 2018-10-21 08:19 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2018-11-07 00:21 - 2018-10-21 08:19 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcpAppSvc.dll
2018-11-07 00:21 - 2018-10-21 08:19 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys
2018-11-07 00:21 - 2018-10-21 08:19 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 002738688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2DP.sys
2018-11-07 00:21 - 2018-10-21 08:18 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2018-11-07 00:21 - 2018-10-21 08:18 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 007577088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-11-07 00:21 - 2018-10-21 08:17 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll
2018-11-07 00:21 - 2018-10-21 08:17 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2018-11-07 00:21 - 2018-10-21 08:16 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-11-07 00:21 - 2018-10-21 08:16 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-11-07 00:21 - 2018-10-21 08:16 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-11-07 00:21 - 2018-10-21 08:16 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-11-07 00:21 - 2018-10-21 08:16 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2018-11-07 00:21 - 2018-10-21 08:16 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-11-07 00:21 - 2018-10-21 08:15 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2018-11-07 00:21 - 2018-10-21 08:15 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-11-07 00:21 - 2018-10-21 08:15 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-11-07 00:21 - 2018-10-21 08:15 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2018-11-07 00:21 - 2018-10-21 08:15 - 000743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL
2018-11-07 00:21 - 2018-10-21 08:15 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-11-07 00:21 - 2018-10-21 08:14 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-11-07 00:21 - 2018-10-21 08:14 - 001034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2018-11-07 00:21 - 2018-10-21 08:14 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-11-07 00:21 - 2018-10-21 08:14 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2018-11-07 00:21 - 2018-10-21 08:11 - 022017024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-11-07 00:21 - 2018-10-21 08:09 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-11-07 00:21 - 2018-10-21 08:07 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-11-07 00:21 - 2018-10-21 08:04 - 019403776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-11-07 00:21 - 2018-10-21 08:02 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-11-07 00:21 - 2018-10-21 08:02 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-11-07 00:21 - 2018-10-21 08:02 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2018-11-07 00:21 - 2018-10-21 08:01 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2018-11-07 00:21 - 2018-10-21 08:01 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2018-11-07 00:21 - 2018-10-21 08:00 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-11-07 00:21 - 2018-10-21 08:00 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-11-07 00:21 - 2018-10-21 08:00 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2018-11-07 00:21 - 2018-10-21 07:59 - 005777920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-11-07 00:21 - 2018-10-21 07:59 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2018-11-07 00:21 - 2018-10-21 07:59 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2018-11-07 00:21 - 2018-10-21 07:59 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-11-07 00:21 - 2018-10-21 07:58 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-11-07 00:21 - 2018-10-21 07:58 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2018-11-07 00:21 - 2018-10-21 07:58 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-11-07 00:21 - 2018-10-21 07:58 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2018-11-07 00:21 - 2018-10-21 07:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-11-07 00:21 - 2018-10-21 07:57 - 002611200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2018-11-07 00:21 - 2018-10-21 07:57 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2018-11-07 00:21 - 2018-10-21 07:56 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2018-11-07 00:21 - 2018-10-21 07:56 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2018-11-07 00:21 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls
2018-11-07 00:21 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2018-11-07 00:21 - 2018-10-21 06:59 - 000001314 _____ C:\WINDOWS\system32\tcbres.wim
2018-11-07 00:21 - 2018-04-28 05:02 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-11-06 09:52 - 2018-11-06 09:52 - 000383221 _____ C:\Users\Lenovo\Downloads\Vydana faktura - 20180044.pdf
2018-11-06 09:13 - 2018-11-06 09:13 - 000385619 _____ C:\Users\Lenovo\Downloads\Vydana faktura - 20180043.pdf
2018-11-06 09:13 - 2018-11-06 09:13 - 000382624 _____ C:\Users\Lenovo\Downloads\Vydana faktura - 20180042.pdf
2018-11-06 09:00 - 2018-11-06 09:00 - 000000000 ____D C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\ElevatedDiagnostics
2018-11-05 09:17 - 2018-11-05 09:17 - 000001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CC 2019.lnk
2018-11-05 09:13 - 2018-11-05 09:13 - 000001047 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CC 2019.lnk
2018-11-05 09:11 - 2018-11-05 09:11 - 000001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2019.lnk
2018-11-05 09:03 - 2018-11-05 09:03 - 000001151 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2019.lnk
2018-11-05 08:59 - 2018-11-05 08:59 - 000002380 _____ C:\Users\Lenovo\Desktop\Evernote.lnk
2018-11-05 08:59 - 2018-11-05 08:59 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Evernote
2018-11-05 08:58 - 2018-11-05 08:58 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2019.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000002559 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000002553 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000002530 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000002525 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000002486 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2018-11-03 21:33 - 2018-11-03 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2018-10-31 09:12 - 2018-10-31 09:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2018-10-31 09:08 - 2018-10-31 11:58 - 000000000 ____D C:\xampp
2018-10-31 09:04 - 2018-10-31 09:06 - 127465320 _____ (Bitnami) C:\Users\Lenovo\Downloads\xampp-win32-7.1.23-0-VC14-installer.exe
2018-10-26 09:52 - 2018-10-26 09:55 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Photolemur 3
2018-10-26 09:52 - 2018-10-26 09:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photolemur 3
2018-10-26 09:51 - 2018-10-26 09:51 - 000000000 ____D C:\Program Files\Skylum
2018-10-25 14:50 - 2018-10-25 14:57 - 335428960 _____ (Skylum) C:\Users\Lenovo\Downloads\Photolemur3_Setup.exe
2018-10-22 09:47 - 2018-10-22 09:47 - 000000000 ____D C:\Users\Lenovo\AppData\LocalLow\Pathea Games
2018-10-22 09:40 - 2018-10-22 09:40 - 000753664 _____ C:\Users\Lenovo\Documents\Web Sqadra Sua.muse
2018-10-20 12:02 - 2018-10-20 12:02 - 000874661 _____ (VOB Computersysteme GmbH) C:\Users\Lenovo\Downloads\ASAPI.exe
2018-10-20 12:02 - 2018-10-20 12:02 - 000522682 _____ C:\Users\Lenovo\Downloads\aspi_471a2.exe
2018-10-20 12:02 - 2018-10-20 12:02 - 000000000 ____D C:\Users\ONDREJ~1~DES
2018-10-20 12:02 - 1998-10-29 15:45 - 000306688 _____ (InstallShield Software Corporation) C:\WINDOWS\IsUninst.exe
2018-10-20 12:01 - 2018-10-20 12:01 - 000015150 _____ C:\Users\Ondrej.DESKTOP-V6SAKP4\Documents\cc_20181020_130142.reg
2018-10-20 12:00 - 2018-10-20 12:00 - 000063014 _____ C:\Users\Ondrej.DESKTOP-V6SAKP4\Documents\cc_20181020_130053.reg
2018-10-20 11:58 - 2018-11-13 09:17 - 000003936 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-10-20 11:58 - 2018-11-13 09:17 - 000000000 ____D C:\Program Files\CCleaner
2018-10-20 11:58 - 2018-10-20 11:58 - 000002872 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-10-20 11:58 - 2018-10-20 11:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-10-20 11:57 - 2018-10-20 11:57 - 016794816 _____ (Piriform Ltd) C:\Users\Lenovo\Downloads\ccsetup547pro.exe
2018-10-20 10:53 - 2018-10-20 10:53 - 007736890 _____ C:\Users\Lenovo\Downloads\Sken 20. 10. 2018 (1).pdf
2018-10-20 10:42 - 2018-10-20 10:42 - 000001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition CC 2019.lnk
2018-10-20 10:36 - 2018-10-20 10:36 - 000001106 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic CC.lnk
2018-10-20 00:34 - 2018-10-20 00:34 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2019.lnk
2018-10-20 00:27 - 2018-10-20 00:27 - 000001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2019.lnk
2018-10-18 17:00 - 2018-10-18 17:02 - 075335524 _____ C:\Users\Lenovo\Downloads\[Elissa_Wolfson,_Margaret_A._Barker]_Audubon_Birdh(b-ok.xyz).pdf
2018-10-18 16:57 - 2018-10-18 16:57 - 017329075 _____ C:\Users\Lenovo\Downloads\[Billie_Browner]_Build_Your_Own_Backyard_Birdhouse(b-ok.xyz).pdf
2018-10-18 16:26 - 2018-10-18 16:26 - 000211923 _____ C:\Users\Lenovo\Downloads\RET Template Word-4.dotx
2018-10-18 09:30 - 2018-10-18 09:30 - 000287319 _____ C:\Users\Lenovo\Downloads\mlejn_loga.zip
2018-10-18 08:42 - 2018-10-18 08:42 - 000216458 _____ C:\Users\Lenovo\Downloads\4_Obecné_dokumenty__Informace_k_prepisu_smlouvy_na_noveho_klienta.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-13 09:29 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-11-13 09:25 - 2018-09-17 13:14 - 000000000 ____D C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Packages
2018-11-13 09:25 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-11-13 09:23 - 2018-05-25 11:26 - 000000000 ____D C:\Program Files (x86)\Steam
2018-11-13 09:21 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-11-13 09:18 - 2018-03-05 19:34 - 000000000 ____D C:\Users\Lenovo\AppData\LocalLow\Mozilla
2018-11-13 09:17 - 2018-07-07 18:58 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-13 09:17 - 2018-07-07 18:58 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-11-13 09:12 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-13 09:08 - 2018-05-25 13:15 - 001689050 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-13 09:08 - 2018-04-12 16:50 - 000720558 _____ C:\WINDOWS\system32\perfh005.dat
2018-11-13 09:08 - 2018-04-12 16:50 - 000148624 _____ C:\WINDOWS\system32\perfc005.dat
2018-11-13 09:07 - 2018-03-07 12:12 - 000000000 ___RD C:\Users\Lenovo\Disk Google
2018-11-13 09:07 - 2018-03-06 01:34 - 000000000 ___RD C:\Users\Lenovo\Creative Cloud Files
2018-11-13 09:07 - 2018-03-06 01:26 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Adobe
2018-11-13 09:02 - 2018-05-28 21:35 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\duet
2018-11-13 09:01 - 2018-05-25 13:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-11-13 09:01 - 2018-05-25 13:07 - 000000000 ____D C:\Users\Lenovo
2018-11-13 09:01 - 2018-05-25 13:05 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-11-13 09:01 - 2018-03-05 19:34 - 000002004 _____ C:\WINDOWS\Sandboxie.ini
2018-11-13 09:01 - 2018-03-05 19:16 - 000000000 __SHD C:\Users\Lenovo\IntelGraphicsProfiles
2018-11-13 09:01 - 2018-03-05 18:19 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-10 16:02 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\OCR
2018-11-10 16:02 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-11-10 14:56 - 2018-01-19 15:32 - 000143448 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2018-11-10 14:56 - 2018-01-19 15:32 - 000109864 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2018-11-10 14:56 - 2018-01-19 15:31 - 000188832 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2018-11-10 14:56 - 2018-01-19 15:31 - 000107896 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2018-11-10 14:56 - 2018-01-19 15:31 - 000082304 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2018-11-10 14:56 - 2018-01-19 15:31 - 000050144 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2018-11-07 20:22 - 2018-04-11 22:04 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2018-11-07 20:06 - 2018-03-09 19:59 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\vlc
2018-11-07 12:06 - 2018-03-05 19:16 - 000000000 ___RD C:\Users\Lenovo\3D Objects
2018-11-07 12:06 - 2018-03-05 18:28 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-11-07 12:05 - 2018-05-25 13:05 - 000419616 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-11-07 00:41 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-11-07 00:41 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-11-07 00:41 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-11-07 00:41 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-11-07 00:41 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-11-07 00:41 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-11-06 11:25 - 2018-07-17 20:38 - 000000000 ____D C:\ProgramData\Packages
2018-11-06 11:25 - 2018-03-05 19:39 - 000000000 ____D C:\Users\Lenovo\AppData\Local\PlaceholderTileLogoFolder
2018-11-06 11:25 - 2018-03-05 19:16 - 000000000 ____D C:\Users\Lenovo\AppData\Local\Packages
2018-11-06 09:07 - 2018-03-05 18:19 - 000000000 ____D C:\Intel
2018-11-06 08:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-11-05 10:31 - 2018-03-05 19:34 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-11-05 10:31 - 2018-03-05 19:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-11-05 09:21 - 2018-03-06 01:34 - 000000000 ____D C:\Program Files\Adobe
2018-11-05 09:17 - 2018-03-05 19:16 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\Adobe
2018-11-05 09:03 - 2018-03-30 17:11 - 000000000 ____D C:\Users\Public\Documents\Adobe
2018-11-05 08:58 - 2018-03-06 01:37 - 000000000 ____D C:\Program Files\Common Files\Adobe
2018-11-05 08:36 - 2018-03-05 20:07 - 000000000 ____D C:\Users\Lenovo\AppData\Local\LenovoServiceBridge
2018-11-05 08:36 - 2018-03-05 19:34 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-11-03 21:32 - 2018-03-05 19:48 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-10-31 10:59 - 2018-08-20 15:41 - 000001480 _____ C:\Users\Lenovo\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2018-10-26 09:51 - 2018-03-05 18:21 - 000000000 ____D C:\ProgramData\Package Cache
2018-10-25 11:06 - 2018-09-15 11:38 - 000000000 ____D C:\Users\Lenovo\AppData\Local\D3DSCache
2018-10-25 09:37 - 2018-03-06 02:12 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2018-10-23 10:10 - 2018-04-23 11:38 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\MusicBee
2018-10-23 07:52 - 2018-03-07 12:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2018-10-22 09:40 - 2018-05-20 21:40 - 000001424 _____ C:\Users\Lenovo\Documents\MuseLog.txt
2018-10-20 16:20 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-10-20 11:59 - 2018-05-20 21:46 - 000000000 ___DC C:\WINDOWS\Panther
2018-10-20 00:27 - 2018-03-30 16:01 - 000000000 ____D C:\Users\Lenovo\Documents\Adobe
2018-10-20 00:27 - 2018-03-06 01:28 - 000000000 ____D C:\ProgramData\Adobe
2018-10-20 00:24 - 2018-09-18 14:32 - 000000000 ____D C:\Users\Lenovo\AppData\Roaming\com.adobe.AdobeMuseCC.2018.1
2018-10-19 08:00 - 2018-05-25 13:13 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-248813295-3706206607-1631636604-1002
2018-10-19 08:00 - 2018-05-25 13:07 - 000002390 _____ C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-10-19 08:00 - 2018-03-05 19:17 - 000000000 ___RD C:\Users\Lenovo\OneDrive
2018-10-18 13:38 - 2018-09-07 07:32 - 000000000 ____D C:\Users\Lenovo\Evernote
2018-10-18 09:46 - 2018-08-12 19:26 - 000000033 _____ C:\Users\Lenovo\AppData\Roaming\AdobeWLCMCache.dat

Some files in TEMP:
====================
2018-11-13 09:25 - 2018-11-13 09:25 - 000116224 _____ () C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Temp\uninst1.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-25 13:05

==================== End of FRST.txt ============================

Zpomalený start Windows

Napsal: 13 lis 2018 09:42
od Dreddrew
Ještě jsem zapoměl přidat Addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11.11.2018
Ran by Ondrej (13-11-2018 09:36:49)
Running from C:\Users\Lenovo\Desktop
Windows 10 Home Version 1803 17134.376 (X64) (2018-05-25 12:14:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-248813295-3706206607-1631636604-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-248813295-3706206607-1631636604-503 - Limited - Disabled)
Guest (S-1-5-21-248813295-3706206607-1631636604-501 - Limited - Disabled)
Honza (S-1-5-21-248813295-3706206607-1631636604-1060 - Limited - Enabled) => C:\Users\Honza
Lenovo (S-1-5-21-248813295-3706206607-1631636604-1002 - Limited - Enabled) => C:\Users\Lenovo
Ondrej (S-1-5-21-248813295-3706206607-1631636604-1117 - Administrator - Enabled) => C:\Users\Ondrej.DESKTOP-V6SAKP4
Ondřej (S-1-5-21-248813295-3706206607-1631636604-1001 - Administrator - Enabled) => C:\Users\Ondřej
WDAGUtilityAccount (S-1-5-21-248813295-3706206607-1631636604-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 18.01 (x64) (HKLM\...\7-Zip) (Version: 18.01 - Igor Pavlov)
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 19.008.20080 - Adobe Systems Incorporated)
Adobe Audition CC 2018 (HKLM-x32\...\AUDT_11_1_1) (Version: 11.1.1 - Adobe Systems Incorporated)
Adobe Audition CC 2019 (HKLM-x32\...\AUDT_12_0) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Bridge CC 2018 (HKLM-x32\...\KBRG_8_1) (Version: 8.1 - Adobe Systems Incorporated)
Adobe Bridge CC 2019 (HKLM-x32\...\KBRG_9_0_1) (Version: 9.0.1 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.7.0.400 - Adobe Systems Incorporated)
Adobe Dreamweaver CC 2019 (HKLM-x32\...\DRWV_19_0) (Version: 19.0 - Adobe Systems Incorporated)
Adobe Illustrator CC 2019 (HKLM-x32\...\ILST_23_0_1) (Version: 23.0.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2018 (HKLM-x32\...\IDSN_13_1) (Version: 13.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2019 (HKLM-x32\...\IDSN_14_0) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_8_0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2019 (HKLM-x32\...\AME_13_0_1) (Version: 13.0.1 - Adobe Systems Incorporated)
Adobe Muse CC 2018 (HKLM-x32\...\MUSE_2018_1_0) (Version: 2018.1.0.266 - Adobe Systems Incorporated)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_6) (Version: 19.1.6 - Adobe Systems Incorporated)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0) (Version: 20.0.0 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2019 (HKLM-x32\...\PPRO_13_0_1) (Version: 13.0.1 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 18.9.3 - Advanced Micro Devices, Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Atom (HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\atom) (Version: 1.26.0 - GitHub Inc.)
Backup and Sync from Google (HKLM\...\{608EBDC6-D18A-4CF6-AD54-EE6B71D29065}) (Version: 3.43.1584.4446 - Google, Inc.)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{15EEB07A-3FB9-FA4C-8EFF-697728CB1E5C}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{4C608ED2-535B-2119-3661-9E6F7DDB600F}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{9005C809-497A-FD45-CB96-76A3338E35B9}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{D84300A6-72F1-5771-B3B1-8FC71184AB38}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{56D13277-FA9F-2842-682D-DD7298973585}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{8D0C7788-D519-7B65-36F6-D0D21296F173}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{930FD2C7-D026-197D-94E4-CB5917CE7420}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{086D11E3-9CA4-DBEF-2B48-5A2EFFD53145}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{D0C1EAB6-92F1-EE91-04C2-5947EE150593}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{A63E3031-0522-18C6-F18F-7EE80973315F}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{A2966D0F-43BB-116D-C9C7-49612FBFD0AE}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{57EAA61A-CD02-DF34-0839-2549F57A334C}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{AA477FD2-347B-1732-5D8C-AF35AF1B9703}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{BBFC5953-2CB9-5932-1D47-52E4AA99737B}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{01E7D692-D785-743F-5A55-F00162D26A1C}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{5D8BA452-1264-7D13-E4EC-8236EC5B83FE}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{F49BA906-83DA-3F5A-5B24-03C8DE2A3936}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{5A466CAA-F071-D9EF-A799-EF63552DBE70}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{D7DC4DDB-3E0D-6F79-4258-4A461654B689}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{ACDFF800-6015-BEEC-8A27-7B1A80915273}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{A28B1FC5-3947-9D39-7FE5-A3CB18E16358}) (Version: 2016.0628.2138.37120 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.49 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.27.55 - Conexant)
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
Duet Display (HKLM\...\{B9D777DC-1130-4D6F-B274-A94488E31A2D}) (Version: 1.5.1.5 - Kairos) Hidden
Duet Display (HKLM\...\Duet Display 1.5.1.5) (Version: 1.5.1.5 - Kairos)
ESET Security (HKLM\...\{B489BC2D-0079-4631-97BF-CA2378299D43}) (Version: 11.0.159.9 - ESET, spol. s r.o.)
Evernote v. 6.16.4 (HKLM-x32\...\{69BDFB62-DE11-11E8-B2A0-005056951CAD}) (Version: 6.16.4.8094 - Evernote Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.102 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
HiSuite (HKLM-x32\...\Hi Suite) (Version: 8.0.1.302 - )
ipMIDI Trial - Ethernet MIDI Port (HKLM-x32\...\ipMIDI Trial) (Version: 1.9.1 - nerds.de)
Jack (HKLM-x32\...\Jack) (Version: - )
Lenovo Service Bridge (HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 4.0.6.0 - Lenovo)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.07.0070 - Lenovo)
LoopBeAudio Trial - Internal Audio Ports (HKLM-x32\...\LoopBeAudio Trial) (Version: 1.2 - nerds.de)
Master of Magic (HKLM-x32\...\GOGPACKMASTEROFMAGIC_is1) (Version: 2.0.0.20 - GOG.com)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.11001.20074 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\OneDriveSetup.exe) (Version: 18.172.0826.0010 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-248813295-3706206607-1631636604-1117\...\OneDriveSetup.exe) (Version: 18.151.0729.0006 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
Mozilla Firefox 63.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 63.0.1 (x64 en-US)) (Version: 63.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla)
MuseScore 2 (HKLM-x32\...\{7D01160E-D30F-4E88-8872-4A0A0A782E2E}) (Version: 2.3.2 - Werner Schweer and Others)
MusicBee 3.1 (HKLM-x32\...\MusicBee) (Version: 3.1 - Steven Mayall)
NordVPN (HKLM-x32\...\{CFCB0189-C54E-4FDF-9D27-F2D886DEFE18}) (Version: 6.17.6 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.17.6) (Version: 6.17.6 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden
Photolemur 3 (HKLM\...\{35D09934-A0D9-4F49-8E9D-A0352CB45BE0}) (Version: 1.0.0.2148 - Skylum) Hidden
Photolemur 3 (HKLM-x32\...\{721b31d4-b0af-4fbe-8e8a-83759aa3558c}) (Version: 1.0.0.2148 - Skylum)
Podpora aplikací Apple (64bitová) (HKLM\...\{C2651553-6CA3-4822-B2E6-BC4ACA6E0EA2}) (Version: 4.3.1 - Apple Inc.)
qBittorrent 4.1.2 (HKLM-x32\...\qBittorrent) (Version: 4.1.2 - The qBittorrent project)
Sandboxie 5.26 (64-bit) (HKLM\...\Sandboxie) (Version: 5.26 - Sandboxie Holdings, LLC)
Software602 Form Filler (HKLM-x32\...\{9210AEE3-6ECB-4271-A125-1039E94A6A51}) (Version: 4.75 - Software602 a.s.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Theme Hospital (HKLM-x32\...\1207659026_is1) (Version: 2.1.0.8 - GOG.com)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN)
XAMPP (HKLM-x32\...\xampp) (Version: 7.1.23-0 - Bitnami)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-248813295-3706206607-1631636604-1002_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-1A069473058F}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
CustomCLSID: HKU\S-1-5-21-248813295-3706206607-1631636604-1002_Classes\CLSID\{53B2AC1B-7B81-47FC-8D3B-595CDE21D0BA}\InprocServer32 -> C:\Users\Lenovo\AppData\Local\Apps\Evernote\Evernote\EvernoteCCx64.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
CustomCLSID: HKU\S-1-5-21-248813295-3706206607-1631636604-1002_Classes\CLSID\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}\InprocServer32 -> C:\Users\Lenovo\AppData\Local\Apps\Evernote\Evernote\EvernoteIEx64.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
CustomCLSID: HKU\S-1-5-21-248813295-3706206607-1631636604-1002_Classes\CLSID\{93c503ec-b307-4339-bca2-37fe3b4836e8}\InprocServer32 -> C:\Users\Lenovo\AppData\Local\Apps\Evernote\Evernote\EvernoteOLShim64.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-10-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-10-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-10-04] (Google)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-11-10] (ESET)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-10-04] (Google)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-11-10] (ESET)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-10-04] (Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2018-09-25] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-05-26] (Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2018-11-10] (ESET)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0782BA6D-CD74-465D-AEB1-85C1781901BB} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [2018-09-25] (Advanced Micro Devices, Inc.)
Task: {19040F73-C178-4C69-B86C-6CBF40D890C1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-03] (Microsoft Corporation)
Task: {19ECD656-06CC-4697-A6CB-120241A2956F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-11-06] (Piriform Software Ltd)
Task: {2D42769F-AE8C-4557-9391-EA5B6344C935} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-03] (Microsoft Corporation)
Task: {315B993B-CF47-402E-9EBC-65E10E88CF7C} - System32\Tasks\DuetUpdater => C:\Program Files\Kairos\Duet Display\DuetUpdater.exe [2018-03-21] (Kairos)
Task: {3847BACE-0A8D-4F93-B158-2E1F05663022} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2018-09-25] (Advanced Micro Devices, Inc.)
Task: {3E96E3A9-8C34-41C3-A8BF-F8899BBD8B1B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-03] (Microsoft Corporation)
Task: {4DBD2A44-B792-4087-B707-3BD0B01EDF12} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {53478C86-0C64-4736-9CE0-C0ED259FCD42} - System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-V6SAKP4-Lenovo => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated)
Task: {591B0343-C498-49E5-AD44-6F54D14604A3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
Task: {62AAFBE7-C8C7-4F57-B14F-6B3367013905} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2017-12-12] ()
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {674401C3-D952-43D5-ADF7-391DAAB4C1F6} - System32\Tasks\S-1-5-21-248813295-3706206607-1631636604-1002\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation)
Task: {6B68DD20-AA64-4747-844B-5EB1BFDCDAC1} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-03] (Microsoft Corporation)
Task: {987C0B7B-D2DF-49F9-B8A4-1E811AD2E2DB} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2017-12-12] ()
Task: {A66308B6-0C79-43F8-BD62-2014EF453761} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation)
Task: {B3C692CF-7B49-4E9F-A8EF-7AC5BFAD8B3F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-11-06] (Piriform Ltd)
Task: {BCEA6ADF-6D0C-4A3D-9851-7E583B25522D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-11-03] (Microsoft Corporation)
Task: {BE322FC4-E2D4-4CAA-BE0B-39B7C77B896B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
Task: {C9FD8ACF-A964-4F4E-B2CF-5B66A4CBC8B4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation)
Task: {CFB25DCD-D8A7-4C35-AF35-9D15F03A1573} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-V6SAKP4-Lenovo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2018-04-10] (Adobe Systems Incorporated)
Task: {CFCF449E-DF5B-4E17-B9C1-1ACBB0E80B98} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-248813295-3706206607-1631636604-1002 => C:\Users\Lenovo\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [2018-04-03] (Lenovo Group Limited)
Task: {D4AFB5D9-68AA-466A-8AA1-B1B3F5DAC860} - System32\Tasks\AdobeGCInvoker-1.0-DESKTOP-V6SAKP4-Ondřej => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2016-04-22 00:07 - 2016-04-22 00:07 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-04-22 00:07 - 2016-04-22 00:07 - 001337144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-08-23 13:42 - 2018-08-23 13:42 - 000190784 _____ () C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
2018-09-11 12:10 - 2018-09-11 12:10 - 000437200 _____ () C:\Program Files (x86)\NordVPN\nordvpn-service.exe
2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-02-10 01:12 - 2018-03-05 19:47 - 000614848 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2017-05-26 04:11 - 2017-05-26 04:11 - 000401840 _____ () C:\WINDOWS\system32\igfxTray.exe
2018-11-07 00:21 - 2018-10-21 08:15 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-04-24 21:07 - 2018-04-24 21:07 - 000015360 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.DLL
2018-04-24 21:07 - 2018-04-24 21:07 - 002519040 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2018-03-05 18:20 - 2010-10-26 11:40 - 000049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
2018-10-04 18:44 - 2018-10-04 18:44 - 046459080 _____ () C:\Program Files\Google\Drive\googledrivesync.exe
2018-11-13 09:02 - 2018-11-13 09:02 - 000113664 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_ctypes.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000080896 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\bz2.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 001792512 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_hashlib.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000128512 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32api.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000137728 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\pywintypes27.dll
2018-11-13 09:02 - 2018-11-13 09:02 - 000548864 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\pythoncom27.dll
2018-11-13 09:02 - 2018-11-13 09:02 - 000689664 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\unicodedata.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000438784 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32com.shell.shell.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 001489408 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\wx._core_.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 001007104 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\wx._gdi_.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 001039872 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\wx._windows_.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 001325056 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\wx._controls_.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000916992 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\wx._misc_.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 001084416 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\pysqlite2._sqlite.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000149504 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32file.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000136192 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32security.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000007680 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\hashobjs_ext.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000020992 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\thumbnails_ext.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000118784 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\usb_ext.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000047616 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_socket.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 002224640 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_ssl.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000014848 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\common.time34.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000023040 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32event.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000034304 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\windows.conditional.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000020480 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\windows.winwrap.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000110080 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\windows.volumes.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000223232 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32gui.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000173568 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_elementtree.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000169472 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\pyexpat.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000048128 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32inet.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000103424 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\wx._html2.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000046080 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_psutil_windows.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000633272 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\windows._cacheinvalidation.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000011776 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32crypt.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000301568 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\PIL._imaging.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000032256 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_multiprocessing.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 005752320 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\cello.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000026112 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\_yappi.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000044032 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32process.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000027648 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32pipe.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000010752 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\select.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000029696 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32pdh.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000038400 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\windows.connectivity.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000073216 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\windows.device_monitor.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000020480 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32profile.pyd
2018-11-13 09:02 - 2018-11-13 09:02 - 000026624 _____ () C:\Users\Lenovo\AppData\Local\Temp\_MEI99882\win32ts.pyd
2017-01-11 12:28 - 2017-01-11 12:28 - 000503808 _____ () C:\WINDOWS\SYSTEM32\turbojpeg.dll
2018-09-12 14:53 - 2018-09-12 14:53 - 037821384 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
2018-10-23 10:03 - 2018-10-23 10:06 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll
2018-11-13 09:11 - 2018-11-13 09:12 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ChakraBridge.dll
2018-11-13 09:11 - 2018-11-13 09:12 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll
2018-11-13 09:11 - 2018-11-13 09:12 - 010873344 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\LibWrapper.dll
2018-11-13 09:11 - 2018-11-13 09:12 - 002834432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\skypert.dll
2018-11-13 09:11 - 2018-11-13 09:12 - 000685568 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-11-13 09:11 - 2018-11-13 09:12 - 000183808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2018-11-06 17:14 - 2018-11-06 17:14 - 000090576 _____ () C:\Program Files\CCleaner\lang\lang-1029.dll
2018-09-03 06:48 - 2018-10-10 05:17 - 001056032 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\SDL2.dll
2018-09-03 06:48 - 2018-09-23 01:00 - 102804768 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libcef.dll
2018-09-03 06:48 - 2018-09-23 01:00 - 004866336 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libglesv2.dll
2018-09-03 06:48 - 2018-09-23 01:00 - 000116000 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libegl.dll
2018-05-24 13:45 - 2018-05-24 13:45 - 000250368 _____ () C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2018-11-01 14:04 - 2018-11-01 14:04 - 000676576 _____ () C:\Users\Lenovo\AppData\Local\Apps\Evernote\Evernote\tidy.dll
2018-07-31 09:57 - 2018-07-31 09:57 - 081764304 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2018-07-31 09:57 - 2018-07-31 09:57 - 002257360 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\swiftshader\libglesv2.dll
2018-07-31 09:57 - 2018-07-31 09:57 - 000110552 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\swiftshader\libegl.dll
2015-03-17 01:34 - 2015-03-17 01:34 - 000010240 _____ () C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\cs_cz\acrotray.cze
2018-09-24 18:24 - 2018-09-24 18:24 - 000142888 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\fs-ext\build\Release\fs-ext.node
2018-09-24 18:24 - 2018-09-24 18:24 - 000278056 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2018-09-24 18:24 - 2018-09-24 18:24 - 000142888 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ref\build\Release\binding.node
2018-09-24 18:24 - 2018-09-24 18:24 - 000152616 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ffi\build\Release\ffi_bindings.node
2018-09-24 18:24 - 2018-09-24 18:24 - 000097320 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2018-09-24 18:24 - 2018-09-24 18:24 - 000110120 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\idle-gc\build\Release\idle-gc.node
2018-10-17 09:38 - 2018-10-17 09:38 - 000142872 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\fs-ext\build\Release\fs-ext.node
2018-10-17 09:38 - 2018-10-17 09:38 - 000142360 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\ref\build\Release\binding.node
2018-10-17 09:38 - 2018-10-17 09:38 - 000150552 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\ffi\build\Release\ffi_bindings.node
2018-10-17 09:37 - 2018-10-17 09:37 - 000271384 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2018-10-17 09:37 - 2018-10-17 09:37 - 000097816 _____ () C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2018-10-17 09:38 - 2018-10-17 09:38 - 000122392 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\bufferutil\build\Release\bufferutil.node
2018-10-17 09:38 - 2018-10-17 09:38 - 000110104 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\idle-gc\build\Release\idle-gc.node
2018-05-25 11:28 - 2018-10-10 05:17 - 000878880 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2018-05-25 11:28 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2018-05-25 11:28 - 2018-10-13 02:59 - 002647840 _____ () C:\Program Files (x86)\Steam\video.dll
2018-05-25 11:28 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2018-05-25 11:28 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2018-05-25 11:28 - 2017-12-20 02:43 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
2018-05-25 11:28 - 2017-12-20 02:43 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
2018-05-25 11:28 - 2017-12-20 02:43 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
2018-05-25 11:28 - 2017-12-20 02:43 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
2018-05-25 11:28 - 2017-12-20 02:43 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
2018-05-25 11:28 - 2018-10-13 02:59 - 001023776 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2018-05-25 11:28 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-03-05 17:40 - 2018-03-05 17:39 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-248813295-3706206607-1631636604-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Lenovo\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\StartupFolder: => "ipMIDI Trial Monitor.lnk"
HKLM\...\StartupApproved\StartupFolder: => "LoopBeAudio Trial Monitor.lnk"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B21F26E0-FB78-4DDC-9F4F-CDDDA0E5D5E3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DA4311E9-B45C-4DEC-8DEA-917DD918FC5E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ADF6A876-4E83-43D8-93C1-70CEFE808D94}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe
FirewallRules: [{DEB28D22-D2FC-4311-B594-ABB8EC905105}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe
FirewallRules: [{A7D6263F-AFF6-49D4-BC5A-C87C6555491D}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{965738BF-FA74-439B-8CD4-1207A9A5B44F}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{AF04AB2E-EB69-419C-80EC-0841A5B486AB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3DE2BC53-5EF1-46CA-8825-7000B2610A97}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{1430DD9B-17F6-4691-A5A1-F31B483C53CB}] => (Allow) C:\Program Files\Kairos\Duet Display\duet.exe
FirewallRules: [{7082AEC6-508C-405E-93F9-7ADE1BEC9739}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gemini Rue\gemini_rue_pc.exe
FirewallRules: [{8C0070EA-395A-4D0C-9A25-E07343AF9388}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gemini Rue\gemini_rue_pc.exe
FirewallRules: [{1BF84447-C63B-4304-BAD8-E0919AE593DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gemini Rue\winsetup.exe
FirewallRules: [{C53E1140-EC10-480B-BBBF-616D27F474EF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gemini Rue\winsetup.exe
FirewallRules: [{CFA53D8D-B945-487B-9C6E-E0E6A832AB1B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deponia\deponia.exe
FirewallRules: [{824EEEC3-E72C-40DB-9DC4-1E4024D892D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deponia\deponia.exe
FirewallRules: [{AD28633C-356A-4BF9-98E9-21623A449EB4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deponia\VisionaireConfigurationTool.exe
FirewallRules: [{9863F518-5583-4840-BB89-12ADAC49093D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deponia\VisionaireConfigurationTool.exe
FirewallRules: [{0D2DA6D9-88A9-41BC-A5BE-07394D0E36A8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{3231D20B-70AB-492F-81CB-51C7452973A0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{F13606C8-2397-4560-8DF9-9EDDD31D3666}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{5011D486-BEA0-46FA-BBBA-A97AE3C32483}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe
FirewallRules: [{0AB5CB1E-78A8-4D4E-BF03-E809E34D6C1B}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe
FirewallRules: [{789D06F3-EA96-4D6C-AEAB-EA8E11430C71}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{02F93958-12E7-4C38-B18D-D88BE1C692D3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{5341C35D-2F04-4AE5-84BC-D49F107873F8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{3D746D99-FE31-4F8C-A71B-04FABA1EA889}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{B9A93E52-8949-4190-BFCF-F59D969D2BB7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{E67177CC-521E-448B-BAA4-C4A87D3BB58C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{FBD64205-2071-4950-BA85-33A6C8132F59}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{C0187A70-9091-446A-8968-F407CB6EE58F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.92.390.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{955659D9-2049-403C-89DC-8AF496938DC3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F4F8AFD9-43CF-4980-8100-FFF2837CD638}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{7094CE8A-1831-4570-BD69-7DF163475709}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/13/2018 09:29:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AcrobatNotificationClient.exe, verze: 0.0.0.0, časové razítko: 0x5b98afbd
Název chybujícího modulu: combase.dll, verze: 10.0.17134.112, časové razítko: 0xcdc43ef4
Kód výjimky: 0xc000027b
Posun chyby: 0x0005e0a1
ID chybujícího procesu: 0x1b30
Čas spuštění chybující aplikace: 0x01d47b2772bece3e
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\combase.dll
ID zprávy: 210d6bd6-6b3f-466f-b7ad-faaf2e6d0aa2
Úplný název chybujícího balíčku: AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r
ID aplikace související s chybujícím balíčkem: App

Error: (11/13/2018 09:08:20 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (11/13/2018 09:02:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: NordVPN.exe, verze: 6.17.6.0, časové razítko: 0x5b97a292
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.17134.319, časové razítko: 0x1e206b26
Kód výjimky: 0xe0434352
Posun chyby: 0x000000000003a388
ID chybujícího procesu: 0x25d8
Čas spuštění chybující aplikace: 0x01d47b2727026fcd
Cesta k chybující aplikaci: C:\Program Files (x86)\NordVPN\NordVPN.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 7579485b-56d6-4f65-82fc-dfefc164b831
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/13/2018 09:02:02 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: NordVPN.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.Xml.XmlException
na System.Xml.XmlTextReaderImpl.Throw(System.Exception)
na System.Xml.XmlTextReaderImpl.ParseText(Int32 ByRef, Int32 ByRef, Int32 ByRef)
na System.Xml.XmlTextReaderImpl.ParseText()
na System.Xml.XmlTextReaderImpl.ParseElementContent()
na System.Xml.XmlTextReaderImpl.Skip()
na System.Configuration.XmlUtil.StrictSkipToNextElement(System.Configuration.ExceptionAction)
na System.Configuration.BaseConfigurationRecord.ScanSectionsRecursive(System.Configuration.XmlUtil, System.String, Boolean, System.String, System.Configuration.OverrideModeSetting, Boolean)
na System.Configuration.BaseConfigurationRecord.ScanSectionsRecursive(System.Configuration.XmlUtil, System.String, Boolean, System.String, System.Configuration.OverrideModeSetting, Boolean)
na System.Configuration.BaseConfigurationRecord.ScanSections(System.Configuration.XmlUtil)
na System.Configuration.BaseConfigurationRecord.InitConfigFromFile()

Informace o výjimce: System.Configuration.ConfigurationErrorsException
na System.Configuration.ConfigurationSchemaErrors.ThrowIfErrors(Boolean)
na System.Configuration.BaseConfigurationRecord.ThrowIfParseErrors(System.Configuration.ConfigurationSchemaErrors)
na System.Configuration.ClientConfigurationSystem.OnConfigRemoved(System.Object, System.Configuration.Internal.InternalConfigEventArgs)

Informace o výjimce: System.Configuration.ConfigurationErrorsException
na System.Configuration.ClientConfigurationSystem.OnConfigRemoved(System.Object, System.Configuration.Internal.InternalConfigEventArgs)
na System.Configuration.Internal.InternalConfigRoot.OnConfigRemoved(System.Configuration.Internal.InternalConfigEventArgs)
na System.Configuration.Internal.InternalConfigRoot.RemoveConfigImpl(System.String, System.Configuration.BaseConfigurationRecord)
na System.Configuration.BaseConfigurationRecord.GetSectionRecursive(System.String, Boolean, Boolean, Boolean, Boolean, System.Object ByRef, System.Object ByRef)
na System.Configuration.BaseConfigurationRecord.GetSection(System.String)
na System.Configuration.ConfigurationManager.GetSection(System.String)
na System.Configuration.ClientSettingsStore.ReadSettings(System.String, Boolean)
na System.Configuration.LocalFileSettingsProvider.GetPropertyValues(System.Configuration.SettingsContext, System.Configuration.SettingsPropertyCollection)
na System.Configuration.SettingsBase.GetPropertiesFromProvider(System.Configuration.SettingsProvider)
na System.Configuration.SettingsBase.GetPropertyValueByName(System.String)
na System.Configuration.SettingsBase.get_Item(System.String)
na System.Configuration.ApplicationSettingsBase.GetPropertyValue(System.String)
na System.Configuration.ApplicationSettingsBase.get_Item(System.String)
na WindowsApp.Properties.Settings.get_AppFirstRun()
na NordVpn.Infrastructure.Settings.NetApplicationSettingsRepository.Load()
na NordVpn.Infrastructure.Settings.CachedSettingsRepository.Load()
na NordVpn.Settings.Storage.AutoCorrectingSettingsDecorator.Load()
na NordVpn.AppBootstrapper+<OnStartup>d__4.MoveNext()
na System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.DispatcherOperation.InvokeImpl()
na System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
na System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
na MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)
na System.Windows.Threading.DispatcherOperation.Invoke()
na System.Windows.Threading.Dispatcher.ProcessQueue()
na System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
na System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
na System.Windows.Application.RunDispatcher(System.Object)
na System.Windows.Application.RunInternal(System.Windows.Window)
na NordVpn.App+<Run>d__4.MoveNext()
na System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
na System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(System.Threading.Tasks.Task)
na NordVpn.App.Main(System.String[])

Error: (11/10/2018 03:06:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program svchost.exe verze 10.0.17134.1 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 98c

Čas spuštění: 01d478fc77892142

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\System32\svchost.exe

ID hlášení: 51a572a4-04b6-4f9a-835b-47a283707c45

Úplný název balíčku s chybou:

ID aplikace související s balíčkem s chybou:

Error: (11/10/2018 02:54:54 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (11/07/2018 01:15:37 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program LockApp.exe verze 10.0.17134.1 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 1098

Čas spuštění: 01d4768ff2878759

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe

ID hlášení: 776d8e24-a91d-4fe6-a321-7f5c0dc0847f

Úplný název balíčku s chybou: Microsoft.LockApp_10.0.17134.1_neutral__cw5n1h2txyewy

ID aplikace související s balíčkem s chybou: WindowsDefaultLockScreen

Error: (11/07/2018 12:09:03 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0


System errors:
=============
Error: (11/13/2018 09:26:29 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-V6SAKP4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-V6SAKP4\Lenovo (SID: S-1-5-21-248813295-3706206607-1631636604-1002) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/13/2018 09:23:32 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-V6SAKP4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-V6SAKP4\Ondrej (SID: S-1-5-21-248813295-3706206607-1631636604-1117) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/13/2018 09:23:23 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-V6SAKP4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-V6SAKP4\Lenovo (SID: S-1-5-21-248813295-3706206607-1631636604-1002) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/13/2018 09:23:17 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-V6SAKP4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-V6SAKP4\Ondrej (SID: S-1-5-21-248813295-3706206607-1631636604-1117) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/13/2018 09:22:40 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-V6SAKP4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-V6SAKP4\Ondrej (SID: S-1-5-21-248813295-3706206607-1631636604-1117) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/13/2018 09:18:02 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-V6SAKP4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-V6SAKP4\Ondrej (SID: S-1-5-21-248813295-3706206607-1631636604-1117) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/13/2018 09:17:51 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-V6SAKP4)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli DESKTOP-V6SAKP4\Ondrej (SID: S-1-5-21-248813295-3706206607-1631636604-1117) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (11/13/2018 09:16:52 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.


CodeIntegrity:
===================================

Date: 2018-08-09 19:14:38.713
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-09 19:14:38.706
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-09 19:14:38.614
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-09 19:14:38.606
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-09 19:14:38.529
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-09 19:14:38.521
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-09 19:14:38.303
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2018-08-09 19:14:38.260
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ehdrv.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz
Percentage of memory in use: 45%
Total physical RAM: 8106.46 MB
Available physical RAM: 4435.04 MB
Total Virtual: 11306.71 MB
Available Virtual: 7627.33 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:202.99 GB) (Free:5.54 GB) NTFS

\\?\Volume{373d27bf-6514-4659-95ff-d14e7e0b1ec3}\ () (Fixed) (Total:0.44 GB) (Free:0.42 GB) NTFS
\\?\Volume{220af551-2272-4439-a012-e9653822a875}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{0fba950f-209c-4086-9b9c-31568cb8293a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

Re: Zpomalený start Windows

Napsal: 13 lis 2018 13:00
od Rudy
Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Re: Zpomalený start Windows

Napsal: 14 lis 2018 09:11
od Dreddrew
AdwCleaner žádnou havěť nenašel,

nabízí základní opravu, mám jí spustit?

Díky


# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-11-12.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 11-14-2018
# Duration: 00:00:35
# OS: Windows 10 Home
# Scanned: 32065
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Re: Zpomalený start Windows

Napsal: 14 lis 2018 10:25
od Rudy
Když nic nenašel není třeba spouštět opravu. Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {591B0343-C498-49E5-AD44-6F54D14604A3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
Task: {BE322FC4-E2D4-4CAA-BE0B-39B7C77B896B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
C:\Users\Lenovo\AppData\Local\Temp
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\MountPoints2: {acbdf852-b121-11e8-8a50-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\MountPoints2: {cb644dd2-b669-11e8-8a54-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\...\MountPoints2: {cb644dd2-b669-11e8-8a54-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [AdobeBridge] => [X]
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Temp

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Zpomalený start Windows

Napsal: 14 lis 2018 10:45
od Dreddrew
Zapoměl jsem spustit FRST jako správce, vadí to?

Díky

Fix result of Farbar Recovery Scan Tool (x64) Version: 11.11.2018
Ran by Lenovo (14-11-2018 10:38:15) Run:1
Running from C:\Users\Lenovo\Desktop
Loaded Profiles: Lenovo & Ondrej (Available Profiles: Ondřej & Lenovo & Honza & Ondrej)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {591B0343-C498-49E5-AD44-6F54D14604A3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
Task: {BE322FC4-E2D4-4CAA-BE0B-39B7C77B896B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-07] (Google Inc.)
C:\Users\Lenovo\AppData\Local\Temp
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\MountPoints2: {acbdf852-b121-11e8-8a50-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\...\MountPoints2: {cb644dd2-b669-11e8-8a54-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\...\MountPoints2: {cb644dd2-b669-11e8-8a54-f4066981e5bf} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-18\...\Run: [AdobeBridge] => [X]
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Temp

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => could not remove. Access Denied.
"HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}" => not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{591B0343-C498-49E5-AD44-6F54D14604A3} => could not remove. Access Denied.
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => could not remove. Access Denied.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE322FC4-E2D4-4CAA-BE0B-39B7C77B896B} => could not remove. Access Denied.
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => could not remove. Access Denied.
C:\Users\Lenovo\AppData\Local\Temp => moved successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => could not remove
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{acbdf852-b121-11e8-8a50-f4066981e5bf} => removed successfully
"HKLM\Software\Classes\CLSID\{acbdf852-b121-11e8-8a50-f4066981e5bf}" => not found
HKU\S-1-5-21-248813295-3706206607-1631636604-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cb644dd2-b669-11e8-8a54-f4066981e5bf} => removed successfully
"HKLM\Software\Classes\CLSID\{cb644dd2-b669-11e8-8a54-f4066981e5bf}" => not found
HKU\S-1-5-21-248813295-3706206607-1631636604-1117\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cb644dd2-b669-11e8-8a54-f4066981e5bf} => could not remove. Access Denied.
"HKLM\Software\Classes\CLSID\{cb644dd2-b669-11e8-8a54-f4066981e5bf}" => not found
"HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge" => could not remove
Could not move "C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat" => Scheduled to move on reboot.
"C:\Users\Ondrej.DESKTOP-V6SAKP4\AppData\Local\Temp" => not found

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 140824490 B
Java, Flash, Steam htmlcache => 241994881 B
Windows/system/drivers => 0 B
Edge => 2581308 B
Chrome => 348486899 B
Firefox => 320121170 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
Ondřej => 64434930 B
Lenovo => 606026 B
Honza => 0 B
Ondrej.DESKTOP-V6SAKP4 => 0 B

RecycleBin => 437628277 B
EmptyTemp: => 1.4 GB temporary data Removed.

================================

Re: Zpomalený start Windows

Napsal: 14 lis 2018 12:59
od Rudy
Smazáno. Nastala nějaká změna?

Re: Zpomalený start Windows

Napsal: 14 lis 2018 13:35
od Dreddrew
Start systému je trochu rychlejší,
stále ale trvá cca 1:40, než se ukáže přihlašovací okno

Re: Zpomalený start Windows

Napsal: 14 lis 2018 16:07
od Rudy
Zkuste defragmentovat disk.

Re: Zpomalený start Windows

Napsal: 14 lis 2018 17:32
od Dreddrew
Disk mám SSD a měl by být podle Crystal Disk i v pořádku

Re: Zpomalený start Windows

Napsal: 14 lis 2018 18:09
od Rudy
OK.
Jak velký je adresář C:\Users\Lenovo\Desktop?

Re: Zpomalený start Windows

Napsal: 14 lis 2018 18:12
od Dreddrew
24Mb

Re: Zpomalený start Windows

Napsal: 14 lis 2018 19:03
od Rudy
To je OK. Zkuste otevřít MSconfig přes příkazový řádek příkazem msconfig a na záložkách "Služby" a "Po spuštění" odstraňte zatržítka u všech ne-microsoftích položek s vyjímkou ovladačů a bezpečnostního softwaru. Nastavení uložte a restartujte.

Re: Zpomalený start Windows

Napsal: 14 lis 2018 19:19
od Dreddrew
Start systému se zrychlil asi na 30vteřin, perfektní! Díky

Vypínání systému pořád trvá 1:20, ale to už není asi nutné tolik řešit

Re: Zpomalený start Windows

Napsal: 14 lis 2018 19:57
od Rudy
S vypínáním toho asi moc nesvedeme, pouze mne napadá defragmentace registry pomocí https://www.stahuj.cz/utility_a_ostatni ... ry-defrag/ . Nemusí to ale pomoci. Nemáte zač! :)