VIRY.CZ

Zdravím, asi pred týždňom som chcel zmeniť AV na bitdefender ale bola to chyba lebo som stiahol vírus, ktorý mi teraz začína kryptovať všetky súbory a do každej zložky generuje tento .txt súbor
*****FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS*****

Attention!

All your files, documents, photos, databases and other important files are encrypted and have the extension: .SSKLK

The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.


The server with your key is in a closed network TOR. You can get there by the following ways:

----------------------------------------------------------------------------------------

| 0. Download Tor browser - https://www.torproject.org/

| 1. Install Tor browser
| 2. Open Tor Browser
| 3. Open link in TOR browser: http://gandcrabmfe6mnef.onion/748f79570d86165
| 4. Follow the instructions on this page

----------------------------------------------------------------------------------------


On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free.

+ logy

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15.11.2018
Ran by Roman (administrator) on ROMAN (17-11-2018 11:13:20)
Running from C:\Users\Roman\Downloads
Loaded Profiles: Roman (Available Profiles: Roman)
Platform: Windows 10 Home Version 1803 17134.407 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avpui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
() C:\Windows\System32\igfxTray.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe
(Google) C:\Users\Roman\AppData\Local\Google\Chrome\User Data\SwReporter\35.180.200\software_reporter_tool.exe
(Google) C:\Users\Roman\AppData\Local\Google\Chrome\User Data\SwReporter\35.180.200\software_reporter_tool.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google) C:\Users\Roman\AppData\Local\Google\Chrome\User Data\SwReporter\35.180.200\software_reporter_tool.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.)
HKLM\...\Run: [RtsFT] => c:\windows\RTFTrack.exe [5462528 2017-08-10] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [IgfxTray] => C:\windows\system32\igfxtray.exe [405416 2015-09-04] ()
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15794160 2013-10-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80368 2013-10-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [CL-22-D0932C92-273D-4FB0-AFCD-F8D0D9DA396B] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-22-D0932C92-273D-4FB0-AFCD-F8D0D9DA396B\setuplauncher.exe" /run:Installer.exe /args:"/step=install-auto /upgrade"
HKLM\...\Run: [AdobeAAMUpdater-1.0] => c:\program files (x86)\common files\adobe\oobe\pdapp\uwa\updaterstartuputility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3500056 2017-11-01] (Adobe Systems Inc.)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1179184 2016-10-27] (CyberGhost S.R.L.)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [5263040 2018-02-16] (Disc Soft Ltd)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [uTorrent] => C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe [1738936 2018-11-17] (BitTorrent Inc.)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\MountPoints2: {df68de65-65b8-11e8-bf79-f82fa8ff3ca4} - "H:\HTC_Sync_Manager_PC.exe"
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-2536812190-3338290056-2629826729-1001] => socks=127.0.0.1:9050
Tcpip\Parameters: [DhcpNameServer] 217.23.254.124 217.23.254.125
Tcpip\..\Interfaces\{45bd8caa-2d25-4bb6-8173-f286d6fbfc01}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{45bd8caa-2d25-4bb6-8173-f286d6fbfc01}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{50062e8a-e2a7-41ff-bfde-fa1ca045f30b}: [NameServer] 195.146.128.62 195.146.132.58
Tcpip\..\Interfaces\{b62920ae-6893-45b0-ad76-ae2942be429b}: [DhcpNameServer] 217.23.254.124 217.23.254.125
Tcpip\..\Interfaces\{bc8a5303-49a0-4257-9d8e-b4cb28d4f36e}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{d0f67747-cdbe-476a-826a-42508ce18013}: [DhcpNameServer] 93.115.31.198 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> DefaultScope {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2018-02-14] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2018-02-14] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi => not found
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi [2018-11-17]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Roman\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_148.dll [2018-11-13] ()
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_148.dll [2018-11-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1228198.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-16] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-02-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2536812190-3338290056-2629826729-1001: @acestream.net/acestreamplugin,version=3.1.16.3.1 -> C:\Users\Roman\AppData\Roaming\ACEStream\player\npace_plugin.dll [2017-01-13] (Innovative Digital Technologies)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR DefaultSearchURL: Default -> hxxps://pandasecurity.mystart.com/results.php?pr=vmn&id=pandasafeweb&v=1_0_chromeextension_unknown__&searchfeed=web&hsimp=yhs-panda1&ent=ch_ss&q={searchTerms}
CHR DefaultSearchKeyword: Default -> safeWeb
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default [2018-11-17]
CHR Extension: (Prezentácie) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Kaspersky Protection) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\amkpcclbbgegoafihnpgomddadjhcadd [2018-11-17]
CHR Extension: (Dokumenty) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-04]
CHR Extension: (Adblock Plus) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-11-16]
CHR Extension: (Google Search) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Adobe Acrobat) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-06]
CHR Extension: (Video Downloader professional) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2018-04-11]
CHR Extension: (Tabuľky) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Video Downloader Free) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc [2018-11-16]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-15]
CHR Extension: (Page Ruler) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlpkojjdgbllmedoapgfodplfhcbnbpn [2018-07-06]
CHR Extension: (Ace Script) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2017-10-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-05]
CHR Extension: (Gmail) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-29]
CHR Extension: (Chrome Media Router) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-09]
CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated)
R2 AVP19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe [619640 2018-02-28] (AO Kaspersky Lab)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3480768 2018-02-16] (Disc Soft Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [361376 2015-09-04] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-16] (Intel Corporation)
S3 klvssbridge64_19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\vssbridge64.exe [416560 2018-11-17] (AO Kaspersky Lab)
R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (AO Kaspersky Lab)
S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-08-24] (Lenovo)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2159424 2018-03-15] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3028808 2018-03-15] (Electronic Arts)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1284032 2018-07-31] (Bitdefender)
R2 SAService; C:\WINDOWS\system32\SAsrv.exe [427224 2015-04-18] (Conexant Systems, Inc.)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [282200 2018-01-02] (Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1809.2-0\NisSrv.exe [3847376 2018-10-14] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1809.2-0\MsMpEng.exe [114200 2018-10-14] (Microsoft Corporation)
S2 BDAuxSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdauxsrv_config.json" [X]
S2 BDProtSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdprotsrv_config.json" [X]
S2 bdredline; "C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe" [X]
S3 Survarium Update Service; "C:\Program Files (x86)\Survarium\game\binaries\x86\survarium_service.exe" "Survarium" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [105208 2018-08-27] (Advanced Micro Devices, Inc.)
R3 ApkbfiltrService; C:\WINDOWS\System32\drivers\Apkbfiltr.sys [31016 2015-07-23] (Alps Electric Co., Ltd.)
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1292296 2018-10-17] (BitDefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [153160 2018-10-15] (Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [45728 2018-10-17] (© Bitdefender SRL)
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [243400 2018-01-27] (AO Kaspersky Lab)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-05-06] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-05-06] (Disc Soft Ltd)
R3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [32840 2017-08-09] (ELAN Microelectronic Corp.)
S3 HtcVCom32; C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-09-09] (REALiX(tm))
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [72904 2017-12-27] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [122560 2018-02-02] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [87752 2018-07-20] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29208 2017-03-30] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [220360 2018-11-17] (AO Kaspersky Lab)
R1 KLHK; C:\WINDOWS\System32\drivers\klhk.sys [1193160 2018-11-17] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP19.0.0\Bases\klids.sys [180984 2018-11-17] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1112264 2018-11-17] (AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57032 2018-02-12] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [58048 2018-01-15] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [83496 2017-12-11] (AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50648 2017-05-30] (AO Kaspersky Lab)
R3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [45784 2017-11-29] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [48080 2018-02-12] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [236488 2018-11-17] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2018-11-17] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [258864 2018-11-17] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [109248 2018-11-17] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [177848 2018-11-17] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [100552 2018-02-17] (AO Kaspersky Lab)
R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [161080 2018-07-20] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [203968 2018-02-24] (AO Kaspersky Lab)
S3 Microsoft_Bluetooth_AvrcpTransport; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [46592 2018-04-12] (Microsoft Corporation)
S3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2016-12-21] (SoftEther Corporation)
S3 PcaSp60; C:\Windows\SysWOW64\DRIVERS\PcaSp60.sys [38912 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-09] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3230720 2017-08-10] (Realtek Semiconductor Corp.)
R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-03-07] (SoftEther Corporation)
S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [54840 2017-12-20] (Synaptics Incorporated)
S3 tapSF0901; C:\WINDOWS\System32\drivers\tapSF0901.sys [39104 2015-07-31] (Spotflux, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46184 2018-10-14] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [352424 2018-10-14] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60584 2018-10-14] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2016-12-21] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2016-12-21] (Zemana Ltd.)
S0 b06bdrv; System32\drivers\bxvbda.sys [X]
S0 Ignis; system32\DRIVERS\ignis.sys [X]
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error(1) reading file: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje balíka Microsoft Office "
2018-11-17 11:13 - 2018-11-17 11:14 - 000033050 _____ C:\Users\Roman\Downloads\FRST.txt
2018-11-17 11:12 - 2018-11-17 11:13 - 000000000 ____D C:\FRST
2018-11-17 11:11 - 2018-11-17 11:11 - 002416128 _____ (Farbar) C:\Users\Roman\Downloads\FRST64.exe
2018-11-17 10:53 - 2018-11-17 11:13 - 000095462 _____ C:\WINDOWS\ZAM.krnl.trace
2018-11-17 10:53 - 2018-11-17 11:13 - 000058563 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2018-11-17 10:44 - 2018-11-17 10:44 - 000258864 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2018-11-17 10:44 - 2018-11-17 10:44 - 000003392 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2018-11-17 10:44 - 2018-11-17 10:44 - 000000000 ____D C:\Program Files\Common Files\AV
2018-11-17 10:43 - 2018-11-17 10:43 - 000236488 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2018-11-17 10:43 - 2018-11-17 10:43 - 000177848 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2018-11-17 10:43 - 2018-11-17 10:43 - 000109248 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2018-11-17 10:43 - 2018-11-17 10:43 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2018-11-17 10:43 - 2018-11-17 10:43 - 000001248 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk
2018-11-17 10:43 - 2018-11-17 10:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2018-11-17 10:42 - 2018-11-17 10:42 - 000002222 _____ C:\Users\Public\Desktop\Safe Money.lnk
2018-11-17 10:42 - 2018-11-17 10:42 - 000002198 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2018-11-17 10:42 - 2018-11-17 10:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2018-11-17 10:41 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2018-11-17 10:40 - 2018-11-17 10:43 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2018-11-17 10:40 - 2018-11-17 10:40 - 001193160 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2018-11-17 10:40 - 2018-11-17 10:40 - 001112264 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2018-11-17 10:40 - 2018-11-17 10:40 - 000220360 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2018-11-17 10:40 - 2018-11-17 10:40 - 000152360 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\klhkum.dll
2018-11-17 10:34 - 2018-11-17 10:35 - 000000000 ____D C:\Users\Roman\Downloads\Kaspersky Internet Security 2019 v19.0.0.1088 + Crack [CracksMind]
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Roman\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Roman\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Roman\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Public\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Public\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Public\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\Desktop\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\Desktop\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\Desktop\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\AppData\LocalLow\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Users\admin\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Users\admin\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Users\admin\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Program Files\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Program Files (x86)\SSKLK-DECRYPT.txt
2018-11-16 19:36 - 2018-11-16 19:36 - 000008690 _____ C:\Users\SSKLK-DECRYPT.txt
2018-11-16 19:34 - 2018-11-16 19:34 - 000000000 ____D C:\Users\Roman\Documents\TotalAV
2018-11-16 19:34 - 2018-11-16 19:34 - 000000000 ____D C:\ProgramData\SecuritySuite
2018-11-16 19:31 - 2018-11-16 19:31 - 018314760 _____ C:\Users\Roman\Downloads\TotalAV_Setup.exe
2018-11-16 19:30 - 2018-11-16 19:30 - 000008690 _____ C:\SSKLK-DECRYPT.txt
2018-11-16 19:28 - 2018-11-17 11:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Survarium
2018-11-16 19:28 - 2018-11-16 19:28 - 000000000 ____D C:\Users\Roman\AppData\Local\Survarium
2018-11-16 19:27 - 2018-11-17 11:06 - 000000000 ____D C:\Program Files (x86)\Survarium
2018-11-16 19:25 - 2018-11-16 19:32 - 000000000 ____D C:\Users\Roman\Downloads\Panda Antivirus Pro v3.1.0.6 Pre-Activated 2018
2018-11-16 19:12 - 2018-11-16 19:12 - 000075536 _____ C:\ProgramData\cl.1542391913.bdinstall.bin
2018-11-16 19:12 - 2018-11-16 19:12 - 000075399 _____ C:\ProgramData\cl.1542391920.bdinstall.bin
2018-11-16 19:08 - 2018-11-16 19:08 - 000036409 _____ C:\ProgramData\dm.uninstall.1542391650.bdinstall.bin
2018-11-16 19:07 - 2018-11-16 19:07 - 000077250 _____ C:\ProgramData\cl.1542391613.bdinstall.bin
2018-11-16 19:07 - 2018-11-16 19:07 - 000075429 _____ C:\ProgramData\cl.1542391623.bdinstall.bin
2018-11-16 19:07 - 2018-11-16 19:07 - 000000000 ____D C:\ProgramData\PasswordManager.backup
2018-11-16 19:06 - 2018-11-16 19:06 - 000017714 _____ C:\ProgramData\agent.uninstall.1542391597.bdinstall.bin
2018-11-16 18:56 - 2018-11-16 18:56 - 000003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2018-11-16 18:56 - 2018-11-16 18:56 - 000003074 _____ C:\WINDOWS\System32\Tasks\StartDVR
2018-11-16 18:56 - 2018-11-16 18:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2018-11-16 18:41 - 2018-11-05 18:34 - 000835168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-11-16 18:41 - 2018-11-05 18:34 - 000179808 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-11-16 18:26 - 2018-11-16 18:26 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-16 18:25 - 2018-11-16 18:25 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2018-11-16 18:22 - 2018-11-16 18:22 - 000000000 _____ C:\WINDOWS\ativpsrm.bin
2018-11-16 17:42 - 2018-11-16 17:42 - 000003358 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2536812190-3338290056-2629826729-1001
2018-11-16 17:41 - 2018-11-16 17:42 - 000002418 _____ C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-11-14 20:03 - 2018-11-01 10:15 - 023861760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-11-14 20:03 - 2018-11-01 08:25 - 007520088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-11-14 20:03 - 2018-11-01 08:09 - 025855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-11-14 20:03 - 2018-11-01 08:01 - 022716416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-11-14 20:03 - 2018-11-01 05:47 - 006570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-11-14 20:02 - 2018-11-01 12:46 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-11-14 20:02 - 2018-11-01 12:45 - 004527776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-11-14 20:02 - 2018-11-01 12:45 - 001617320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2018-11-14 20:02 - 2018-11-01 12:45 - 001376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-11-14 20:02 - 2018-11-01 12:31 - 006602240 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-11-14 20:02 - 2018-11-01 12:29 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-11-14 20:02 - 2018-11-01 12:28 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-11-14 20:02 - 2018-11-01 12:28 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-11-14 20:02 - 2018-11-01 12:27 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-11-14 20:02 - 2018-11-01 12:27 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-11-14 20:02 - 2018-11-01 12:26 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-11-14 20:02 - 2018-11-01 12:25 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-11-14 20:02 - 2018-11-01 11:09 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-11-14 20:02 - 2018-11-01 10:59 - 005669888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-11-14 20:02 - 2018-11-01 10:56 - 011902464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-11-14 20:02 - 2018-11-01 10:54 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-11-14 20:02 - 2018-11-01 10:52 - 002892800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-11-14 20:02 - 2018-11-01 10:13 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-11-14 20:02 - 2018-11-01 08:39 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-11-14 20:02 - 2018-11-01 08:38 - 000269336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-11-14 20:02 - 2018-11-01 08:37 - 000272408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-11-14 20:02 - 2018-11-01 08:28 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-11-14 20:02 - 2018-11-01 08:28 - 001062712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-11-14 20:02 - 2018-11-01 08:28 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-11-14 20:02 - 2018-11-01 08:28 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-11-14 20:02 - 2018-11-01 08:28 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2018-11-14 20:02 - 2018-11-01 08:27 - 001017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-11-14 20:02 - 2018-11-01 08:27 - 000491200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 007432120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 003291640 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 003180080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 009089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 004404912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 002822456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-11-14 20:02 - 2018-11-01 08:25 - 002571320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001784680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001456728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-11-14 20:02 - 2018-11-01 08:25 - 001288920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 001209888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001190248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-11-14 20:02 - 2018-11-01 08:25 - 000982592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 000594224 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 000375824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-11-14 20:02 - 2018-11-01 08:25 - 000268088 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 000261000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-11-14 20:02 - 2018-11-01 08:03 - 003397120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-11-14 20:02 - 2018-11-01 08:01 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2018-11-14 20:02 - 2018-11-01 08:01 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 006031360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-11-14 20:02 - 2018-11-01 07:59 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-11-14 20:02 - 2018-11-01 07:58 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 002929664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2018-11-14 20:02 - 2018-11-01 07:55 - 002738688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2018-11-14 20:02 - 2018-11-01 07:55 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2018-11-14 20:02 - 2018-11-01 07:55 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-11-14 20:02 - 2018-11-01 06:08 - 002417952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-11-14 20:02 - 2018-11-01 05:50 - 000861712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-11-14 20:02 - 2018-11-01 05:50 - 000786288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 006039064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 004790184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 002478872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 002331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 000880248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 000384520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 001379792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 001020064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 000581600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 000129304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-11-14 20:02 - 2018-11-01 05:40 - 022015488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-11-14 20:02 - 2018-11-01 05:35 - 019403776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-11-14 20:02 - 2018-11-01 05:34 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-11-14 20:02 - 2018-11-01 05:33 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-11-14 20:02 - 2018-11-01 05:33 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-11-14 20:02 - 2018-11-01 05:32 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2018-11-14 20:02 - 2018-11-01 05:31 - 005307904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 001862656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-11-14 20:02 - 2018-11-01 05:28 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-11-14 20:02 - 2018-11-01 05:28 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2018-11-14 20:02 - 2018-11-01 05:27 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-11-14 20:02 - 2018-11-01 05:26 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 021386368 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 001639560 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 001516120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-11-14 20:02 - 2018-10-21 13:59 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-11-14 20:02 - 2018-10-21 13:46 - 013572096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-11-14 20:02 - 2018-10-21 13:46 - 004393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-11-14 20:02 - 2018-10-21 13:43 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-11-14 20:02 - 2018-10-21 13:42 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2018-11-14 20:02 - 2018-10-21 13:42 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2018-11-14 20:02 - 2018-10-21 13:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2018-11-14 20:02 - 2018-10-21 12:38 - 001322376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-11-14 20:02 - 2018-10-21 12:38 - 000662312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-11-14 20:02 - 2018-10-21 12:38 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-11-14 20:02 - 2018-10-21 12:37 - 020381808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-11-14 20:02 - 2018-10-21 12:37 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-11-14 20:02 - 2018-10-21 12:28 - 012501504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-11-14 20:02 - 2018-10-21 12:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2018-11-14 20:02 - 2018-10-21 12:22 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-11-14 20:02 - 2018-10-21 08:48 - 005602456 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-11-14 20:02 - 2018-10-21 08:46 - 000717112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2018-11-14 20:02 - 2018-10-21 08:46 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-11-14 20:02 - 2018-10-21 08:46 - 000560136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-11-14 20:02 - 2018-10-21 08:46 - 000497864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2018-11-14 20:02 - 2018-10-21 08:46 - 000171024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-11-14 20:02 - 2018-10-21 08:45 - 003283512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-11-14 20:02 - 2018-10-21 08:45 - 001946208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 000607136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 000185120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 000175624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2018-11-14 20:02 - 2018-10-21 08:45 - 000139792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2018-11-14 20:02 - 2018-10-21 08:28 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-11-14 20:02 - 2018-10-21 08:22 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-11-14 20:02 - 2018-10-21 08:21 - 001589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2018-11-14 20:02 - 2018-10-21 08:20 - 000424000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2018-11-14 20:02 - 2018-10-21 08:20 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 002487088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 001620776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 001130768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 000505616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2018-11-14 20:02 - 2018-10-21 08:18 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2018-11-14 20:02 - 2018-10-21 08:18 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2018-11-14 20:02 - 2018-10-21 08:18 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-11-14 20:02 - 2018-10-21 08:17 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2018-11-14 20:02 - 2018-10-21 08:15 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2018-11-14 20:02 - 2018-10-21 08:15 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-11-14 20:02 - 2018-10-21 08:15 - 000743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL
2018-11-14 20:02 - 2018-10-21 08:14 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-11-14 20:02 - 2018-10-21 08:14 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-11-14 20:02 - 2018-10-21 08:14 - 001034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-11-14 20:02 - 2018-10-21 08:09 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-11-14 20:02 - 2018-10-21 08:02 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-11-14 20:02 - 2018-10-21 08:01 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2018-11-14 20:02 - 2018-10-21 07:58 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2018-11-14 20:02 - 2018-10-21 07:57 - 002611200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2018-11-14 20:02 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls
2018-11-14 20:02 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2018-11-14 20:01 - 2018-11-01 12:49 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-11-14 20:01 - 2018-11-01 12:32 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-11-14 20:01 - 2018-11-01 12:30 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2018-11-14 20:01 - 2018-11-01 12:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2018-11-14 20:01 - 2018-11-01 12:29 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2018-11-14 20:01 - 2018-11-01 12:28 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2018-11-14 20:01 - 2018-11-01 12:26 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-11-14 20:01 - 2018-11-01 12:26 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-11-14 20:01 - 2018-11-01 10:56 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2018-11-14 20:01 - 2018-11-01 10:56 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2018-11-14 20:01 - 2018-11-01 10:54 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-11-14 20:01 - 2018-11-01 10:53 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-11-14 20:01 - 2018-11-01 08:28 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000885968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000793080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-11-14 20:01 - 2018-11-01 08:25 - 000713472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000413720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-11-14 20:01 - 2018-11-01 08:03 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe
2018-11-14 20:01 - 2018-11-01 08:02 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll
2018-11-14 20:01 - 2018-11-01 08:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2018-11-14 20:01 - 2018-11-01 08:00 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2018-11-14 20:01 - 2018-11-01 07:58 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-11-14 20:01 - 2018-11-01 07:58 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2018-11-14 20:01 - 2018-11-01 07:54 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2018-11-14 20:01 - 2018-11-01 07:53 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2018-11-14 20:01 - 2018-11-01 06:39 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-11-14 20:01 - 2018-11-01 05:47 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-11-14 20:01 - 2018-11-01 05:31 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-11-14 20:01 - 2018-11-01 05:30 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-11-14 20:01 - 2018-11-01 05:30 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2018-11-14 20:01 - 2018-11-01 05:30 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-11-14 20:01 - 2018-11-01 05:29 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-11-14 20:01 - 2018-11-01 05:29 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2018-11-14 20:01 - 2018-11-01 05:28 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-11-14 20:01 - 2018-11-01 05:26 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2018-11-14 20:01 - 2018-11-01 05:26 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2018-11-14 20:01 - 2018-10-21 14:00 - 000396304 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2018-11-14 20:01 - 2018-10-21 13:59 - 000236728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-11-14 20:01 - 2018-10-21 13:45 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-11-14 20:01 - 2018-10-21 13:44 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2018-11-14 20:01 - 2018-10-21 13:44 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2018-11-14 20:01 - 2018-10-21 13:43 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2018-11-14 20:01 - 2018-10-21 13:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2018-11-14 20:01 - 2018-10-21 13:42 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2018-11-14 20:01 - 2018-10-21 13:42 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2018-11-14 20:01 - 2018-10-21 12:38 - 000221216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2018-11-14 20:01 - 2018-10-21 12:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2018-11-14 20:01 - 2018-10-21 12:23 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2018-11-14 20:01 - 2018-10-21 12:22 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2018-11-14 20:01 - 2018-10-21 10:29 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-11-14 20:01 - 2018-10-21 09:44 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-11-14 20:01 - 2018-10-21 08:47 - 000368440 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2018-11-14 20:01 - 2018-10-21 08:46 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-11-14 20:01 - 2018-10-21 08:45 - 000058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2018-11-14 20:01 - 2018-10-21 08:21 - 000123424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-11-14 20:01 - 2018-10-21 08:20 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2018-11-14 20:01 - 2018-10-21 08:20 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2018-11-14 20:01 - 2018-10-21 08:20 - 000141312 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2018-11-14 20:01 - 2018-10-21 08:19 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2018-11-14 20:01 - 2018-10-21 08:19 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-11-14 20:01 - 2018-10-21 08:19 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2018-11-14 20:01 - 2018-10-21 08:19 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcpAppSvc.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys
2018-11-14 20:01 - 2018-10-21 08:19 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2DP.sys
2018-11-14 20:01 - 2018-10-21 08:18 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2018-11-14 20:01 - 2018-10-21 08:16 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-11-14 20:01 - 2018-10-21 08:15 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-11-14 20:01 - 2018-10-21 08:02 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2018-11-14 20:01 - 2018-10-21 08:01 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2018-11-14 20:01 - 2018-10-21 08:00 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2018-11-14 20:01 - 2018-10-21 07:59 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2018-11-14 20:01 - 2018-10-21 07:58 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2018-11-14 20:01 - 2018-10-21 07:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-11-14 20:01 - 2018-04-28 05:02 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-11-13 19:53 - 2018-11-13 19:54 - 000150034 _____ C:\Users\Roman\Documents\cc_20181113_195352.reg
2018-11-13 19:17 - 2018-11-13 19:17 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-11-09 19:56 - 2018-09-04 23:36 - 001476904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2018-10-22 16:12 - 2018-10-22 16:12 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-17 11:15 - 2017-07-25 16:56 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-11-17 11:11 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-11-17 11:03 - 2015-07-31 16:48 - 000000000 ____D C:\Users\Roman\AppData\Roaming\uTorrent
2018-11-17 11:00 - 2018-05-25 17:14 - 003500972 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-17 11:00 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-11-17 11:00 - 2016-09-30 15:56 - 002085062 _____ C:\WINDOWS\system32\perfh01B.dat
2018-11-17 11:00 - 2016-09-30 15:56 - 000552022 _____ C:\WINDOWS\system32\perfc01B.dat
2018-11-17 10:59 - 2013-10-12 00:51 - 000000000 ____D C:\ProgramData\Energy Manager
2018-11-17 10:56 - 2018-05-25 16:53 - 005146928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-11-17 10:54 - 2018-05-25 17:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-11-17 10:53 - 2018-04-11 22:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-11-17 10:53 - 2018-04-11 22:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-11-17 10:46 - 2018-05-25 17:01 - 000000000 ____D C:\Users\Roman
2018-11-17 10:46 - 2018-03-21 22:05 - 000000000 ____D C:\Users\Roman\Desktop\MI4
2018-11-17 10:45 - 2015-07-31 17:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\WinRAR
2018-11-17 10:40 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ELAMBKUP
2018-11-17 10:37 - 2016-09-29 14:45 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2018-11-17 10:30 - 2018-05-25 16:53 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-11-16 19:54 - 2018-08-13 16:19 - 000000000 ____D C:\Users\Roman\AppData\Roaming\VMware
2018-11-16 19:54 - 2018-02-02 23:22 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Wise Care 365
2018-11-16 19:54 - 2018-01-07 08:20 - 000000000 ____D C:\Users\Roman\AppData\Roaming\YouTubeByClick
2018-11-16 19:54 - 2016-09-19 08:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\WebApp
2018-11-16 19:54 - 2016-05-25 08:05 - 000000000 ____D C:\Users\Roman\Desktop\BERSI 2.0
2018-11-16 19:54 - 2016-05-06 18:49 - 000000000 ____D C:\Users\Roman\AppData\Roaming\XMedia Recode
2018-11-16 19:54 - 2016-01-14 16:47 - 000000000 ___RD C:\Users\Roman\Creative Cloud Files
2018-11-16 19:54 - 2015-10-27 20:19 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Youtomato
2018-11-16 19:54 - 2015-09-29 12:25 - 000000000 ____D C:\Users\Roman\AppData\Roaming\vlc
2018-11-16 19:53 - 2018-05-25 17:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\TuneUp Software
2018-11-16 19:53 - 2018-03-30 14:20 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Paradoxx
2018-11-16 19:53 - 2017-11-19 20:57 - 000000000 ____D C:\Users\Roman\AppData\Roaming\SolidDocuments
2018-11-16 19:53 - 2017-05-06 22:07 - 000000000 __RHD C:\Users\Roman\AppData\Roaming\SecuROM
2018-11-16 19:53 - 2017-04-29 12:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Panda Security
2018-11-16 19:53 - 2017-03-22 17:35 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Poedit
2018-11-16 19:53 - 2016-11-23 11:10 - 000000000 ____D C:\Users\Roman\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2018-11-16 19:53 - 2016-11-03 17:50 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Skype
2018-11-16 19:53 - 2016-11-02 16:44 - 000000000 ____D C:\Users\Roman\AppData\Roaming\QuickScan
2018-11-16 19:53 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Reg
2018-11-16 19:53 - 2016-03-07 18:07 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Red Giant
2018-11-16 19:53 - 2016-02-21 16:38 - 000000000 ____D C:\Users\Roman\AppData\Roaming\PDAppFlex
2018-11-16 19:53 - 2015-11-16 19:03 - 000000000 ____D C:\Users\Roman\AppData\Roaming\PowerISO
2018-11-16 19:53 - 2015-10-25 20:51 - 000000000 ____D C:\Users\Roman\AppData\Roaming\PACE Anti-Piracy
2018-11-16 19:53 - 2015-09-07 13:45 - 000000000 ____D C:\Users\Roman\AppData\Roaming\TeamViewer
2018-11-16 19:53 - 2015-07-31 13:40 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Origin
2018-11-16 19:53 - 2015-07-30 14:42 - 000000000 ____D C:\Users\Roman\AppData\Roaming\TS3Client
2018-11-16 19:52 - 2018-07-07 10:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Nitro
2018-11-16 19:52 - 2017-09-02 11:25 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Opera Software
2018-11-16 19:52 - 2016-04-04 15:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\NVIDIA Corporation
2018-11-16 19:52 - 2015-08-18 15:55 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Mozilla
2018-11-16 19:50 - 2018-06-11 19:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HandBrake Team
2018-11-16 19:50 - 2018-06-11 19:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HandBrake
2018-11-16 19:50 - 2018-06-09 16:57 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HTC
2018-11-16 19:50 - 2018-05-25 17:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Macromedia
2018-11-16 19:50 - 2018-01-12 22:33 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Innovative Solutions
2018-11-16 19:50 - 2017-11-13 21:49 - 000000000 ____D C:\Users\Roman\AppData\Roaming\MetaQuotes
2018-11-16 19:50 - 2017-05-12 18:51 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Google
2018-11-16 19:50 - 2017-03-22 17:31 - 000000000 ____D C:\Users\Roman\AppData\Roaming\IsolatedStorage
2018-11-16 19:50 - 2017-01-02 16:22 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Mediaparts Interactive
2018-11-16 19:50 - 2016-11-09 09:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Hola
2018-11-16 19:50 - 2016-09-27 14:53 - 000000000 ____D C:\Users\Roman\AppData\Roaming\InstallShield
2018-11-16 19:50 - 2016-05-24 17:08 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Leadertech
2018-11-16 19:50 - 2016-03-07 20:40 - 000000000 ____D C:\Users\Roman\AppData\Roaming\GameRanger
2018-11-16 19:50 - 2016-01-05 12:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\library_dir
2018-11-16 19:50 - 2015-11-24 20:54 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HD Tune Pro
2018-11-16 19:50 - 2015-10-06 17:11 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Image-Line
2018-11-16 19:50 - 2015-09-09 14:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\IObit
2018-11-16 19:50 - 2015-07-29 18:22 - 000000000 ____D C:\Users\Roman\AppData\Roaming\LSC
2018-11-16 19:50 - 2015-07-29 18:18 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Intel Corporation
2018-11-16 19:50 - 2015-07-29 18:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Lenovo
2018-11-16 19:49 - 2018-07-26 17:10 - 000000000 ____D C:\Users\Roman\AppData\Roaming\dvdcss
2018-11-16 19:49 - 2018-01-02 23:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Easeware
2018-11-16 19:49 - 2017-09-02 11:21 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DRPSu
2018-11-16 19:49 - 2015-10-06 17:11 - 000000000 ____D C:\Users\Roman\AppData\Roaming\FlowStone
2018-11-16 19:49 - 2015-08-03 16:32 - 000000000 ____D C:\Users\Roman\AppData\Roaming\ESET
2018-11-16 19:49 - 2015-07-29 18:45 - 000000000 ____D C:\Users\Roman\AppData\Roaming\FileZilla
2018-11-16 19:48 - 2018-07-07 10:41 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Downloaded Installations
2018-11-16 19:48 - 2018-05-22 16:23 - 000000000 ____D C:\Users\Roman\AppData\Roaming\audacity
2018-11-16 19:48 - 2018-05-12 15:00 - 000000000 ____D C:\Users\Roman\AppData\Roaming\ATI
2018-11-16 19:48 - 2018-01-07 08:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\ByClick
2018-11-16 19:48 - 2017-09-02 12:16 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DRPNPS
2018-11-16 19:48 - 2017-09-02 11:40 - 000000000 ____D C:\Users\Roman\AppData\Roaming\AVAST Software
2018-11-16 19:48 - 2017-09-02 11:24 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DriverPack Notifier
2018-11-16 19:48 - 2017-05-06 22:23 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DAEMON Tools Lite
2018-11-16 19:48 - 2016-11-24 15:23 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Bitcoin
2018-11-16 19:48 - 2016-10-08 14:47 - 000000000 ____D C:\Users\Roman\AppData\Roaming\AVG
2018-11-16 19:48 - 2016-09-05 12:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DonationCoder
2018-11-16 19:48 - 2016-06-27 18:58 - 000000653 _____ C:\Users\Roman\AppData\Roaming\D2Info0.ssklk
2018-11-16 19:48 - 2016-06-27 18:58 - 000000548 _____ C:\Users\Roman\AppData\Roaming\DofusAppId0_1.ssklk
2018-11-16 19:48 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Dofus
2018-11-16 19:48 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\app
2018-11-16 19:48 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\AnkamaCertificates
2018-11-16 19:48 - 2016-02-14 21:59 - 000000000 ____D C:\Users\Roman\AppData\Roaming\com.betradar.scouttrainingplatform.videoplayer
2018-11-16 19:48 - 2016-01-14 16:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\BitTorrent
2018-11-16 19:48 - 2016-01-12 15:30 - 000000672 _____ C:\Users\Roman\AppData\Roaming\Adobe Formát PNG CS6 – předvolby.ssklk
2018-11-16 19:48 - 2015-11-18 23:34 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Apple Computer
2018-11-16 19:48 - 2015-09-05 22:46 - 000000000 ____D C:\Users\Roman\AppData\Roaming\BANDISOFT
2018-11-16 19:48 - 2015-08-03 13:18 - 000000000 ____D C:\Users\Roman\AppData\Roaming\CyberLink
2018-11-16 19:48 - 2015-07-29 18:15 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Adobe
2018-11-16 19:44 - 2015-08-09 14:02 - 000000000 ____D C:\Users\Roman\AppData\Roaming\ACEStream
2018-11-16 19:42 - 2018-08-27 18:11 - 000000000 ____D C:\Users\Roman\.fontconfig
2018-11-16 19:42 - 2018-04-29 11:51 - 000000000 ____D C:\Users\Roman\.android
2018-11-16 19:42 - 2018-04-12 00:38 - 000000000 __RHD C:\Users\Public\Libraries
2018-11-16 19:42 - 2018-02-19 21:49 - 000000000 ____D C:\Users\Public\Documents\Catch!
2018-11-16 19:42 - 2017-07-17 12:21 - 000000000 ____D C:\Users\admin\AppData\Roaming\FileZilla
2018-11-16 19:42 - 2017-07-17 12:14 - 000000000 ____D C:\Users\admin\AppData\Roaming\Skype
2018-11-16 19:42 - 2017-07-17 12:14 - 000000000 ____D C:\Users\admin\AppData\LocalLow\pandasecuritytb
2018-11-16 19:42 - 2017-07-17 12:13 - 000000000 ___RD C:\Users\admin\OneDrive
2018-11-16 19:42 - 2017-07-17 12:12 - 000000000 ____D C:\Users\admin\AppData\Local\Publishers
2018-11-16 19:42 - 2017-07-17 12:11 - 000000729 _____ C:\Users\admin\Desktop\Lenovo Telephony Start Now.url.ssklk
2018-11-16 19:42 - 2017-07-17 12:11 - 000000560 ___SH C:\Users\admin\ntuser.ini.ssklk
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 __SHD C:\Users\admin\IntelGraphicsProfiles
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Roaming\TuneUp Software
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Roaming\Macromedia
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Roaming\Adobe
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\VirtualStore
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\TileDataLayer
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\Packages
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin
2018-11-16 19:42 - 2017-05-06 22:23 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2018-11-16 19:42 - 2017-02-13 21:39 - 000000000 ____D C:\Users\Roman\.TeamSpeak 3
2018-11-16 19:42 - 2017-01-02 16:22 - 000000000 ____D C:\Users\Public\Mediaparts Interactive
2018-11-16 19:42 - 2016-11-09 17:38 - 000000000 ____D C:\Users\Roman\.LSC
2018-11-16 19:42 - 2016-10-11 20:09 - 000000000 ____D C:\Users\Default\AppData\Local\AVG
2018-11-16 19:42 - 2016-10-11 20:09 - 000000000 ____D C:\Users\Default User\AppData\Local\AVG
2018-11-16 19:42 - 2016-10-11 19:56 - 000000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2018-11-16 19:42 - 2016-10-11 19:56 - 000000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2018-11-16 19:42 - 2016-09-08 17:28 - 000000000 ____D C:\Users\Roman\.QtWebEngineProcess
2018-11-16 19:42 - 2016-09-08 17:28 - 000000000 ____D C:\Users\Roman\.Origin
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2018-11-16 19:42 - 2016-06-27 18:24 - 000220749 _____ C:\Users\Roman\AppData\Localtransition_999474725f51ea2a6e3ae18c28ecc59b.ini.ssklk
2018-11-16 19:42 - 2016-04-04 16:21 - 000000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs
2018-11-16 19:42 - 2015-11-16 18:58 - 000000000 ____D C:\Users\Public\CyberLink
2018-11-16 19:42 - 2015-10-30 07:28 - 000000000 ____D C:\Users\Default.migrated
2018-11-16 19:42 - 2015-08-09 17:51 - 000000000 ___RD C:\Users\Roman\3D Objects
2018-11-16 19:42 - 2015-08-09 14:03 - 000000000 ____D C:\Users\Roman\AppData\Roaming\.ACEStream
2018-11-16 19:42 - 2015-07-30 03:08 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-11-16 19:42 - 2013-10-12 00:41 - 000000729 _____ C:\Users\Default\Desktop\Lenovo Telephony Start Now.url.ssklk
2018-11-16 19:42 - 2013-10-12 00:41 - 000000729 _____ C:\Users\Default User\Desktop\Lenovo Telephony Start Now.url.ssklk
2018-11-16 19:41 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\Microsoft Help
2018-11-16 19:40 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\Google
2018-11-16 19:39 - 2017-07-17 12:51 - 000000000 ____D C:\Users\admin\AppData\Local\CrashDumps
2018-11-16 19:39 - 2017-07-17 12:33 - 000000000 ____D C:\Users\admin\AppData\Local\Comms
2018-11-16 19:39 - 2017-07-17 12:21 - 000000000 ____D C:\Users\admin\AppData\Local\FileZilla
2018-11-16 19:39 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\ConnectedDevicesPlatform
2018-11-16 19:38 - 2018-06-09 16:54 - 000000000 ____D C:\Temp
2018-11-16 19:38 - 2018-04-12 00:38 - 000000000 ____D C:\PerfLogs
2018-11-16 19:38 - 2018-01-12 22:33 - 000000000 ____D C:\My Drivers
2018-11-16 19:38 - 2017-08-31 12:37 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2018-11-16 19:38 - 2017-08-31 12:37 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2018-11-16 19:38 - 2017-08-31 12:34 - 000000000 __RHD C:\MSOCache
2018-11-16 19:38 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\AVG
2018-11-16 19:38 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\AMD
2018-11-16 19:38 - 2017-03-22 17:30 - 000000000 ____D C:\Spacekace
2018-11-16 19:38 - 2016-11-09 09:24 - 000000931 _____ C:\setup.log.ssklk
2018-11-16 19:38 - 2016-11-02 13:03 - 000000000 ____D C:\Intel
2018-11-16 19:38 - 2015-12-13 21:41 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2018-11-16 19:38 - 2013-10-12 00:44 - 000000000 __SHD C:\UserGuidePDF
2018-11-16 19:36 - 2018-10-14 15:32 - 000000000 ____D C:\CIMTEMP
2018-11-16 19:36 - 2018-01-12 23:03 - 000000000 ____D C:\AMD
2018-11-16 19:36 - 2017-07-17 12:14 - 000000000 ____D C:\Bandicam
2018-11-16 19:36 - 2016-11-02 17:26 - 000036487 _____ C:\bdlog.txt.ssklk
2018-11-16 19:36 - 2015-08-25 16:07 - 000000000 ____D C:\ATF
2018-11-16 19:30 - 2016-10-08 14:44 - 000000000 ___HD C:\$AVG
2018-11-16 19:18 - 2018-10-14 14:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2018-11-16 19:16 - 2016-11-02 16:51 - 000000000 ____D C:\Program Files\Bitdefender
2018-11-16 18:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-11-16 18:31 - 2017-11-12 13:08 - 000000000 ____D C:\Program Files\AMD
2018-11-16 18:31 - 2015-11-18 23:04 - 000000000 ____D C:\ProgramData\Package Cache
2018-11-16 18:26 - 2015-07-31 13:19 - 000000000 __SHD C:\Users\Roman\IntelGraphicsProfiles
2018-11-16 17:42 - 2015-07-30 18:09 - 000000000 ___RD C:\Users\Roman\OneDrive
2018-11-16 17:22 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-16 17:18 - 2015-07-29 18:23 - 000000000 ____D C:\Users\Roman\AppData\Local\Adobe
2018-11-16 17:14 - 2017-09-29 19:36 - 000000000 ____D C:\Program Files\rempl
2018-11-14 20:33 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-11-14 20:32 - 2015-07-29 20:48 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-11-14 20:26 - 2015-07-29 20:48 - 137810048 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-11-14 19:44 - 2015-07-29 18:19 - 000002284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-14 19:44 - 2015-07-29 18:19 - 000002243 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-11-13 19:51 - 2018-05-20 20:43 - 000000000 ___DC C:\WINDOWS\Panther
2018-11-13 19:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ModemLogs
2018-11-13 19:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-11-13 19:51 - 2015-07-30 10:25 - 000000000 ____D C:\Users\Roman\AppData\Local\CrashDumps
2018-11-13 19:49 - 2015-08-10 14:14 - 000000000 ____D C:\Program Files (x86)\Steam
2018-11-13 19:45 - 2018-02-02 22:18 - 000000000 ____D C:\Program Files (x86)\Razer
2018-11-13 19:45 - 2016-11-09 15:20 - 000000000 ____D C:\ProgramData\Razer
2018-11-13 19:44 - 2016-11-09 15:22 - 000000000 ____D C:\Users\Roman\AppData\Local\Razer
2018-11-13 19:43 - 2018-07-07 10:47 - 000000000 ____D C:\Program Files\Nitro
2018-11-13 19:40 - 2017-12-13 22:18 - 000000000 ____D C:\Users\Roman\AppData\Local\Packages
2018-11-13 19:36 - 2015-10-06 17:11 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2018-11-13 19:36 - 2015-10-06 17:11 - 000000000 ____D C:\Program Files\Image-Line
2018-11-13 19:36 - 2015-10-06 17:08 - 000000000 ____D C:\Program Files (x86)\Image-Line
2018-11-13 19:32 - 2016-05-24 17:04 - 000000000 ____D C:\Program Files (x86)\EA Sports
2018-11-13 19:24 - 2015-07-31 13:41 - 000000000 ____D C:\Program Files (x86)\Origin Games
2018-11-13 19:24 - 2015-07-31 13:36 - 000000000 ____D C:\ProgramData\Electronic Arts
2018-11-13 19:23 - 2016-06-27 18:23 - 000000000 ____D C:\Users\Roman\AppData\Local\Ankama
2018-11-13 19:19 - 2016-04-05 18:16 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-11-13 19:03 - 2018-08-13 16:16 - 000000000 ____D C:\ProgramData\VMware
2018-11-13 18:51 - 2016-08-25 11:46 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2018-11-13 18:50 - 2018-05-25 17:39 - 000000000 ____D C:\Users\Roman\AppData\Local\D3DSCache
2018-11-13 18:10 - 2018-05-25 17:28 - 000004580 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-11-13 18:09 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-11-13 18:09 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-11-13 17:12 - 2018-05-25 17:28 - 000004568 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-11-12 17:08 - 2017-02-14 21:47 - 000000000 ____D C:\Users\Roman\AppData\LocalLow\AMD
2018-11-05 17:26 - 2016-11-09 17:33 - 000000000 ____D C:\Users\Roman\AppData\Local\LenovoServiceBridge
2018-10-27 15:20 - 2017-11-12 14:18 - 000000000 ___HD C:\_acestream_cache_
2018-10-24 16:16 - 2018-07-10 17:27 - 000000000 ____D C:\ProgramData\Packages
2018-10-18 16:25 - 2016-11-02 16:57 - 000000000 ____D C:\ProgramData\BDLogging
2018-10-18 16:23 - 2016-04-02 18:18 - 000000000 ____D C:\Users\Roman\AppData\Local\IE Tab

==================== Files in the root of some directories =======

2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ () C:\Program Files\SSKLK-DECRYPT.txt
2018-10-14 08:58 - 2018-10-14 08:58 - 000334840 _____ (Lua.org) C:\Program Files (x86)\lua5.1.dll
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ () C:\Program Files (x86)\SSKLK-DECRYPT.txt
2018-10-14 08:58 - 2018-10-14 08:58 - 001390080 _____ (Indigo Rose Corporation) C:\Program Files (x86)\uninstall.exe
2016-01-12 15:30 - 2018-11-16 19:48 - 000000672 _____ () C:\Users\Roman\AppData\Roaming\Adobe Formát PNG CS6 – předvolby.ssklk
2016-06-27 18:58 - 2018-11-16 19:48 - 000000653 _____ () C:\Users\Roman\AppData\Roaming\D2Info0.ssklk
2016-06-27 18:58 - 2018-11-16 19:48 - 000000548 _____ () C:\Users\Roman\AppData\Roaming\DofusAppId0_1.ssklk
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ () C:\Users\Roman\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:50 - 2018-11-16 19:50 - 000008690 _____ () C:\Users\Roman\AppData\Roaming\Microsoft\SSKLK-DECRYPT.txt
2016-09-05 12:52 - 2016-09-05 12:52 - 000000058 _____ () C:\Users\Roman\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2018-10-15 15:59 - 2018-10-15 15:59 - 000000000 _____ () C:\Users\Roman\AppData\Local\oobelibMkey.log
2016-01-26 10:41 - 2016-01-26 10:41 - 000000017 _____ () C:\Users\Roman\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
2018-11-16 19:27 - 2018-11-16 19:27 - 002575888 _____ () C:\Users\Roman\AppData\Local\Temp\1992814158.exe
2018-11-16 19:27 - 2018-11-16 19:27 - 000594432 _____ (soil~PLANE~special~EFFORT~happen~RESENT:) C:\Users\Roman\AppData\Local\Temp\604247843.exe
2018-11-16 19:27 - 2018-11-16 19:27 - 000003072 _____ () C:\Users\Roman\AppData\Local\Temp\972036644.exe
2018-11-13 19:23 - 2018-08-07 13:02 - 006456928 _____ (Ankama Studio) C:\Users\Roman\AppData\Local\Temp\Ank45F5.tmp.exe
2018-11-16 06:14 - 2018-11-16 06:14 - 009364708 _____ () C:\Users\Roman\AppData\Local\Temp\setup.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-25 16:53

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15.11.2018
Ran by Roman (17-11-2018 11:16:39)
Running from C:\Users\Roman\Downloads
Windows 10 Home Version 1803 17134.407 (X64) (2018-05-25 16:31:08)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2536812190-3338290056-2629826729-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2536812190-3338290056-2629826729-503 - Limited - Disabled)
Guest (S-1-5-21-2536812190-3338290056-2629826729-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2536812190-3338290056-2629826729-1006 - Limited - Enabled)
Roman (S-1-5-21-2536812190-3338290056-2629826729-1001 - Administrator - Enabled) => C:\Users\Roman
WDAGUtilityAccount (S-1-5-21-2536812190-3338290056-2629826729-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\uTorrent) (Version: 3.5.4.44846 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
Ace Stream Media 3.1.16.3.1 (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\AceStream) (Version: 3.1.16.3.1 - Ace Stream Media) <==== ATTENTION
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 19.008.20081 - Adobe Systems Incorporated)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.23 - Adobe Systems)
Adobe After Effects CC 2015 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F0}) (Version: 13.7.1 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 26.0.0.127 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.6.0.248 - Adobe Systems Incorporated)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.148 - Adobe Systems Incorporated)
Adobe Flash Player 31 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 31.0.0.148 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2015 (HKLM-x32\...\{0FAC7130-BEC5-47A5-8813-1D339B8326ED}) (Version: 9.2.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Premiere Pro CS6 (HKLM-x32\...\{7176B973-6011-43C1-AEBC-2D73FE7C6982}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\Adobe Shockwave Player) (Version: 10.2.0.22 - Adobe Systems, Inc.)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2018.1010.1801.32425 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 18.10.1 - Advanced Micro Devices, Inc.)
AMD System Monitor (HKLM-x32\...\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}) (Version: 1.0.9 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS RT-N12LX Wireless Router Utilities (HKLM-x32\...\{BAC6FEB3-D5F4-4627-BCA1-18F914FC6C17}) (Version: 4.2.1.2 - ASUS)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.1.419 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 22.0.10.78 - Bitdefender)
bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{3A8008D5-C834-1CA9-68CB-E9F49F0AB120}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{1D89886C-1BC7-978A-7790-BDF741552029}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{C2E207A0-6375-140A-3170-50737EB32D29}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{FF8A9A91-1E72-EE4A-04DA-6E7F65CB626D}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{78B5E5BC-C2B2-3439-0750-C9FC7AAE173B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{28B38E4C-1FCC-0AB9-F2CE-7079DF8CF8A5}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{6CD61388-4F40-E91A-17A1-E821F0BB92E1}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{F38E5A65-9C76-3757-9D69-672FACA088D4}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{884596CF-79B1-13A0-7334-563BB3A75F45}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{223D250A-AABB-A9AA-7D07-7FA086D7BF62}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{994B3C1F-F48C-B29E-D88A-06322D70B45C}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{7C42C52E-DFF2-8BD6-5134-DCB5FBB8A5EE}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{3372CE65-1178-B53F-C228-254C7F7F118F}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{80C20F9B-C28F-E3ED-726C-86BFC24EEE3B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{16FC5B97-5AC3-056E-1A1B-FF36B790575E}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{D955A619-B0BA-FB07-0590-675FA7A127CF}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{686AF1D4-4D23-8115-9968-FE32775067C8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{168E9C24-F28F-D630-74BB-4F4D66CFC871}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{66F96B6D-33A7-938C-2910-CA9C76E00742}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{59546E97-8B2F-0F51-5191-BF19438164A8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.7.1.0342 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
Dolby Config (HKLM\...\DOLBY Config) (Version: 1.0.0.0 - Conexant Systems)
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
Energy Manager (HKLM-x32\...\{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.28 - Lenovo) Hidden
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.28 - Lenovo)
EZkeys Player 64-bit (HKLM\...\{35E5BAC5-47A5-449C-9244-C40659362DCF}) (Version: 1.1.1 - Toontrack)
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Fotogaléria (HKLM-x32\...\{5B87607E-E781-49C5-9891-80990E45BCA1}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameRanger (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\GameRanger) (Version: - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.102 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
GPU Temp version 1.0 (HKLM-x32\...\{8C8711FD-0FC8-4801-B33E-ED19BB0350B1}_is1) (Version: 1.0 - gputemp.com)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4279 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Kaspersky Internet Security (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.6600 - Broadcom Corporation)
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10230 - Realtek Semiconductor Corp.)
Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo PowerDVD10 (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.)
Lenovo Service Bridge (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 4.0.6.5 - Lenovo)
Lenovo Solution Center (HKLM\...\{558E50EE-5E2D-479A-A455-8A826191583B}) (Version: 3.3.004.00 - Lenovo)
Lenovo YouCam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo_Wireless_Driver (HKLM-x32\...\{5D642A72-8194-4A22-80DA-11FE610CCA8E}) (Version: 6.30.223.75 - Lenovo)
Microsoft Office 2016 Professional Plus (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\OneDriveSetup.exe) (Version: 18.192.0920.0015 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{650c9b4a-60ec-4e4e-8d8e-32d85ce3b7c5}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM-x32\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movavi Video Converter 18 Premium (HKLM-x32\...\Movavi Video Converter 18 Premium) (Version: 18.1.0 - Movavi)
Movie Maker (HKLM-x32\...\{0CD05078-D4F3-4006-8726-B01E10A89B28}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 57.0 (x64 sk) (HKLM\...\Mozilla Firefox 57.0 (x64 sk)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla)
Nástroje kontroly pravopisu pro Microsoft Office 2016 – čeština (HKLM\...\{90160000-001F-0405-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2016 - slovenčina (HKLM\...\{90160000-001F-041B-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
OEM Application Profile (HKLM-x32\...\{C89A97B6-F991-EBB5-77B7-927BCF420EBE}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.14.38647 - Electronic Arts, Inc.)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden
Poedit (HKLM-x32\...\{68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1) (Version: 1.8.12 - Vaclav Slavik)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version: - PokerStars.eu)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
PX Profile Update (HKLM-x32\...\{0CBC1600-74DC-961B-E97E-4CC7E452CD1A}) (Version: 1.00.1. - AMD) Hidden
PX Profile Update (HKLM-x32\...\{39E352BE-8C58-06FC-8046-1546392C83B6}) (Version: 1.00.1. - AMD) Hidden
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.19 - Qualcomm Atheros Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31233 - Realtek Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.39044 - Realtek Semiconductor Corp.)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.9.7.36 - Red Giant, LLC)
RivaTuner Statistics Server 7.0.2 (HKLM-x32\...\RTSS) (Version: 7.0.2 - Unwinder)
Smart View (HKLM-x32\...\{1800D8A5-F7B2-4C20-868E-1CF55CBBDF21}) (Version: 1.0.0.0 - Samsung )
SopCast 3.9.6 (HKLM-x32\...\SopCast) (Version: 3.9.6 - www.sopcast.com)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SWF File Player (HKLM-x32\...\{6A86F611-906C-422D-B34A-103662CBC195}_is1) (Version: - swffileplayer.com)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TNod User & Password Finder (HKLM\...\TNod) (Version: 1.6.4.0 - Tukero[X]Team)
Trapcode Suite v13.0.1 (HKLM-x32\...\{DFD2DC6B-C634-4C1C-81CC-5EF852E71CEE}_is1) (Version: 13.0.1 - Red Giant, LLC)
Update for Skype for Business 2016 (KB4011725) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{E4EFE857-B051-4AB1-80A7-A0279FB2B33C}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB4011725) 64-Bit Edition (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}_Office16.PROPLUS_{E4EFE857-B051-4AB1-80A7-A0279FB2B33C}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB4011725) 64-Bit Edition (HKLM\...\{90160000-012B-041B-1000-0000000FF1CE}_Office16.PROPLUS_{E4EFE857-B051-4AB1-80A7-A0279FB2B33C}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C5FDDED7-DEC7-48B4-AFD8-DFB8A0FD199A}) (Version: 2.51.0.0 - Microsoft Corporation)
UserGuide (HKLM-x32\...\{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo) Hidden
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.3 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.51.0 (HKLM\...\VulkanRT1.0.51.0) (Version: 1.0.51.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0) (Version: 1.0.54.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0-2) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-4) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Windows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
YouTube By Click (HKLM-x32\...\{466A9654-03BB-4AEE-975E-935FF341D382}) (Version: 2.2.77 - ByClick) Hidden
YouTube By Click (HKLM-x32\...\YouTube By Click 2.2.77) (Version: 2.2.77 - ByClick)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-F7B3E42E758B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
CustomCLSID: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => -> No File
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-10-08] (Power Software Ltd)
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers1: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-02-16] (Disc Soft Ltd)
ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-02-16] (Disc Soft Ltd)
ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-10-08] (Power Software Ltd)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2018-10-10] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-09-04] (Intel Corporation)
ContextMenuHandlers5: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-10-08] (Power Software Ltd)
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers6: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0091065B-FBF5-4E3C-AA32-920BF609E94D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_148_pepper.exe [2018-11-13] (Adobe Systems Incorporated)
Task: {023D6065-0AAF-441B-896B-9149EC873DFA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {036132C2-7384-4CB8-9357-B531A286C374} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {12EE7A55-0957-4BC4-A9CA-31C32941D465} - System32\Tasks\Driver Booster SkipUAC (Roman) => C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DriverBooster.exe
Task: {1D129931-7373-404C-AD21-580B23A8B4BC} - System32\Tasks\Start Driver Reviver for ROMAN@Roman(logon) => C:\Program Files\ReviverSoft\Driver Reviver\DriverReviver.exe
Task: {1E35DC15-CA9C-4661-8E85-1C66AB8E78EA} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2016-08-24] (Lenovo)
Task: {241A1B00-86FF-4EE5-9FAD-EFFBAEA90B05} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-kn1gu4@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {286DA532-E58E-4621-A545-734FC5404F97} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {2D8BD2EB-7DAB-4A58-8E09-CD31A7BDA0AC} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {37F67C8C-7C99-498D-8491-B8E05B15AD73} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe
Task: {3F9922DB-CC3E-4D9D-B1DB-8A75EDBFB3FC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {45889F3D-2FD2-40B6-B8EB-923E8AF90484} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {503B909C-A65E-4E49-9E57-D93A5242BAF6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {58AF5C79-D5F8-4396-8DDB-29755C215DF4} - System32\Tasks\S-1-5-21-2536812190-3338290056-2629826729-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation)
Task: {59484049-14C7-4C21-801D-BCCEC4BCAF3B} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe <==== ATTENTION
Task: {5B8D072F-2E80-4755-9E76-57D0066D1DD5} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
Task: {5C771CEA-72B1-4A6D-90CC-088F51155B5D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {5CDE35F1-A0FA-4BEE-959A-350D68B4E3DC} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {5D174F9A-81B0-4CFD-A0D8-8F6DA165B7EE} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_148_Plugin.exe [2018-11-13] (Adobe Systems Incorporated)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {66DDD030-B7A7-410E-AA7B-EE8703DB7B37} - \WPD\SqmUpload_S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {6B89C48D-FF1B-4D9F-86B7-B2EF9DF95534} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-11-13] (Adobe Systems Incorporated)
Task: {6D94D3E0-B6E5-42BA-B490-868C97354B51} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {6E4F7581-69D4-4869-BE67-36D2959CB201} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2018-01-02] (Synaptics Incorporated)
Task: {78868FA2-3175-4628-8946-359C79E2507A} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [2018-11-17] (AO Kaspersky Lab)
Task: {7A8133A6-694A-481D-B14F-399875A8B1CE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {7B0F34E2-4364-4C91-8E19-C641FBA08063} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2018-07-31] (Bitdefender)
Task: {7D64CD72-E152-4790-BD9B-FA07289E24AE} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {7FF925D2-90C2-4644-ACD0-CA036AD3F77C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {841568BE-A58A-43C9-B7FA-410FB2A1F0BA} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {88719681-4304-4759-AE2D-FB054D3CD8D3} - System32\Tasks\AutoPico Daily Restart => C:\Users\Roman\Desktop\affiliatewp184pack\ALL [Argument = MS OFFICE WINDOWS PERNAMEN ACTIVATOR!\AutoPico.exe /silent]
Task: {89067876-62DB-49A5-83FA-36CAAF2C93E4} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [2018-10-10] (Advanced Micro Devices, Inc.)
Task: {91C10D79-968E-4DAF-829A-3851077C0B6E} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [2016-08-24] ()
Task: {93A4FA40-DE5C-4ADF-A98D-25B897D8DA56} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-11-14] (Microsoft Corporation)
Task: {94467DDC-F15B-4593-8EBE-89525A8DA4C3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-26] (Piriform Ltd)
Task: {9651759B-FBD1-4602-B67B-3B5E040AB18E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {99CCE30A-200C-42FD-BE7F-E60385EEF52D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {9AABAC65-BE69-4D03-A6D8-FA94D219E56C} - \Optimize Start Menu Cache Files-S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {9D53D7D1-C2E1-4702-8FCB-34D979272BC4} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-08-24] (Lenovo)
Task: {A63AF620-0295-4C5A-BBAB-5716F0D2687A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {A92935C3-1767-42D1-8F1A-407869322850} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {B59DC252-2A64-4E37-8558-BBAAD296035B} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe
Task: {BBDA4643-12DF-4783-A223-5D073B830B20} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {C6EDD32C-8F91-48EA-8EC6-E0E52D208E57} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-kn1gu4@gmail.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated)
Task: {CA7A5A84-C9A2-4112-8122-0CA84517B2DE} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-08-24] (Lenovo)
Task: {D88A057F-B04C-4ED8-A9CE-9FD0D2B8A88D} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe
Task: {DBA4EC6D-BF83-4858-AFCF-72C8FFD4362E} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-2536812190-3338290056-2629826729-1001 => C:\Users\Roman\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [2018-10-29] (Lenovo Group Limited)
Task: {E4A90B9D-D198-4793-8B85-64DB77070560} - \Start Driver Reviver Update -> No File <==== ATTENTION
Task: {E89D9433-2461-4020-818E-02F52EC96313} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2018-10-10] (Advanced Micro Devices, Inc.)
Task: {F421CD84-1AC9-4C34-9DF4-DF8635C0CCC9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F6B14CFC-4448-4826-9996-6883BB7C9DBC} - \Start Driver Reviver Schedule -> No File <==== ATTENTION
Task: {F7E21266-B55A-4364-A71E-BE8C2EF4672F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\Start Driver Reviver for ROMAN@Roman(logon).job => C:\Program Files\ReviverSoft\Driver Reviver\DriverReviver.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2016-04-01 22:18 - 2016-04-01 22:18 - 000426160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-01-08 14:00 - 2018-01-08 14:00 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2018-11-14 20:02 - 2018-11-01 07:55 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-10-04 16:23 - 2018-10-04 16:23 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll
2018-11-13 19:10 - 2018-11-13 19:11 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ChakraBridge.dll
2018-11-13 19:10 - 2018-11-13 19:17 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll
2018-11-13 19:10 - 2018-11-13 19:13 - 010873344 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\LibWrapper.dll
2018-11-13 19:10 - 2018-11-13 19:17 - 002834432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\skypert.dll
2018-11-13 19:10 - 2018-11-13 19:15 - 000685568 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-10-24 16:15 - 2018-10-24 16:15 - 035118592 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-10-24 16:15 - 2018-10-24 16:15 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-10-24 16:15 - 2018-10-24 16:15 - 005987328 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 16:16 - 2017-09-26 16:16 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-10-24 16:15 - 2018-10-24 16:15 - 009064448 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntPlat.dll
2015-09-04 04:55 - 2015-09-04 04:55 - 000405416 _____ () C:\Windows\System32\igfxTray.exe
2018-11-13 19:10 - 2018-11-13 19:17 - 000183808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2018-11-14 19:44 - 2018-11-08 23:14 - 005020504 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.102\libglesv2.dll
2018-11-14 19:44 - 2018-11-08 23:14 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.102\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences [386]
AlternateDataStreams: C:\Users\Roman\Downloads\0ig101af.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\amdcleanuputility.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\autodetectutility (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\AppData\Local\2uaDOUEeTn:fP7OZ97MmBURQ8r0k [2056]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\hola.org -> hxxp://hola.org

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-23 21:50 - 2018-11-16 18:44 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Roman\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\ubuntu-trusty-14.04-wallpaper.jpg
DNS Servers: 217.23.254.124 - 217.23.254.125
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "YouCam Tray"
HKLM\...\StartupApproved\Run32: => "Intel AppUp(SM) center"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "PlaysTV"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "AceStream"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "AceUpdater"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "AceWebException"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "CyberGhost"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{34214E9D-3223-4DC1-976D-FE399A0EC75A}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
FirewallRules: [{F1B0F3F6-7754-41B2-8B02-550261A4B0BE}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{1E3691B3-3777-44A4-9CD3-768D0C3EFDFE}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{4F294E65-10FB-44B6-B5FE-2E4F4B862AA1}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{FE119C5C-7505-4C1F-A869-2972A58E6634}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{E0CD1AAF-F345-4E5F-A618-85FE1FACDDD7}] => (Allow) C:\Users\Roman\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{5878D171-BE10-4FDA-9C18-7BD7BCEB1E10}] => (Allow) C:\Users\Roman\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{BC8F4B08-F2F9-4ECC-9B5E-BEFFACE37F05}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{CD2BD730-2D74-41FF-A65C-343E3F2F6892}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{E7E14372-0E04-4B75-9946-3B4D18C3DE8E}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{18C70957-AC76-45B0-ACE9-EA3208D0D90D}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{3E4DBE40-24E5-4D2F-9766-CDCCFD796438}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{813B4570-90A2-4435-884C-1F5EA231A7C5}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [UDP Query User{966169E7-0773-4D1A-86B4-385D6DA46574}C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe] => (Allow) C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe
FirewallRules: [TCP Query User{4F95A754-A1B3-4B1C-9397-B58EC109FA15}C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe] => (Allow) C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe
FirewallRules: [UDP Query User{ED380DD7-546F-419F-A981-FC6EDC8A5896}C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe] => (Allow) C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe
FirewallRules: [TCP Query User{83B59266-D96E-4436-924E-2DEFC25260F2}C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe] => (Allow) C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe
FirewallRules: [UDP Query User{CFB07199-A34E-493F-A9D8-C66CAE9A08C3}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [TCP Query User{B8F02505-2CAE-45CF-BB17-6685C961A0AC}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [{1287E772-DD83-489E-81DC-C785C84A3506}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{0A32D93D-7B3B-40FD-9EFF-98BEB238AB19}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{FC32BA6D-FEBD-4A8C-871F-D5369C133D87}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [UDP Query User{3A11CE50-510F-4517-B594-6B3A42ED2228}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe
FirewallRules: [TCP Query User{A5BE1F14-F153-4396-935B-87305E8F9CD9}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe
FirewallRules: [UDP Query User{A41B8D8A-15BC-4ACD-B3DD-D6E7D227446A}C:\users\roman\appdata\roaming\acestream\engine\ace_engine.exe] => (Block) C:\users\roman\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [TCP Query User{2872BC6E-4677-4D17-8549-08E412E9EC27}C:\users\roman\appdata\roaming\acestream\engine\ace_engine.exe] => (Block) C:\users\roman\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [{C382AE6C-4BE1-43E3-9327-342120DCF7CF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{87D70ACA-4BB9-4253-A3A2-FB4C387DA49F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6305B0DA-DE5F-4B2D-860D-23E41BA9565A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DD1EBAA7-A8A4-4FD7-8A3B-B13167C4EECF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A8D94265-1C36-4F4C-8D7D-F923C5193BEA}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{018A8B1D-FA37-4A4A-9828-3F0FFCC00E1E}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0241B0E4-07AD-4C1C-857A-37C292C1EBC3}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{58B0ED82-2DF6-4D47-991B-8D916E26DE65}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6EED5EB2-3610-4942-A26D-F86E09D4D6FF}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8F74D033-4F19-4A0A-ADB6-65D869B154D3}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4E4E7D47-8472-42A7-A564-C4AFF33DF261}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{B4DEF635-8DB6-440B-88F5-C4F214A1FD6F}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{EA27396D-3BF6-4985-AE4E-AF34C53B000B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FBB2D49B-C19D-4A9A-A58D-CF61A508AF2E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D000C600-3A6D-41BF-8C91-D115DFFB5D84}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D36061E3-6A08-4329-A3BD-C5525E0A2284}] => (Allow) LPort=2869
FirewallRules: [{EBEABE4B-922B-4715-AE58-B541B2E3C4E0}] => (Allow) LPort=1900
FirewallRules: [{13796226-E768-46D8-9603-DF64739FAE9E}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{DEA5121C-2155-46A0-9979-537834648275}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{844BB037-07D3-41A5-B246-93C2CD4E6DA0}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{E1781A91-AA81-4CE1-AABE-8F3E252F2ED5}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{62C0CBF3-2628-4685-8E2B-25772BEE1028}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{F5858201-6C29-4A8E-A5A0-944373AFA578}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{0DD02175-2B82-4400-BD47-F2D2CDA307C8}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Discovery.exe
FirewallRules: [{0FD3BEB7-13AE-4F23-9BE0-FAAFF8AE63FC}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Discovery.exe
FirewallRules: [{8363939B-78E3-4564-A1E5-10FD0594CD69}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Rescue.exe
FirewallRules: [{AE5FE6D1-39BB-41AA-A7EE-BBBC6FDA9DE8}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Rescue.exe
FirewallRules: [{DEA717B0-9B5D-4586-873A-96B38FE70D1D}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\LiveUpdate.exe
FirewallRules: [{A83C11FB-D7F0-4170-850D-821B377ABF40}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\LiveUpdate.exe
FirewallRules: [{A4CD4225-8F91-4C21-A71F-F2E8A1152361}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\QISWizard.exe
FirewallRules: [{2B19823A-C1E6-4330-91A9-E185A36B211E}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\QISWizard.exe
FirewallRules: [{40D02A96-BDBF-43A0-9433-131698FBDFCA}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{BC1FD359-E4C2-42F9-BA07-173190DF5C87}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{023932FE-7B6E-496A-9695-3690133F012E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{6446954F-CDA3-4018-9CD8-521CE9473562}C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe
FirewallRules: [UDP Query User{888F4FE8-C778-4776-82F2-0AD82DBD9ACE}C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe
FirewallRules: [TCP Query User{47A2692E-D44B-40C9-93E1-F3C62C35AD4F}C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe
FirewallRules: [UDP Query User{8D06D218-82BE-4338-A169-D2C69638ECC7}C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe
FirewallRules: [{1FF4AA55-7FA8-436F-9263-A17CD968B28D}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_launcher.exe
FirewallRules: [{894D23CA-C8B2-4B61-8ED6-70D4B9F994F7}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe
FirewallRules: [{8871DA7C-5521-4D06-9CC9-7CF1EC70A8C0}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe
FirewallRules: [{4105A316-B85D-4B40-AEA0-E8B5D0E847A8}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe
FirewallRules: [{22E17089-2BA5-4EAC-8613-B2C140820D30}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe

==================== Restore Points =========================

02-11-2018 18:34:16 Scheduled Checkpoint
10-11-2018 13:16:40 Windows Update
13-11-2018 19:25:05 Removed FIFA 11

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/17/2018 11:17:57 AM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Produkt: Kaspersky Internet Security – Aktualizáciu KIS 2019 MP0 family (Patch c) sa nepodarilo nainštalovať. Kód chyby je 1603. Ďalšie informácie sú uvedené v súbore denníka C:\WINDOWS\TEMP\MSI5f0a3.LOG.

Error: (11/17/2018 10:58:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: RadeonSettings.exe, verzia: 10.1.2.1741, časová značka: 0x5bbe762c
Názov chybujúceho modulu: unknown, verzia: 0.0.0.0, časová značka: 0x00000000
Kód výnimky: 0xc0000005
Odstup chyby: 0x0000000000000000
Identifikácia chybujúceho procesu: 0x2078
Čas spustenia chybujúcej aplikácie: 0x01d47e5bef5c8a02
Cesta chybujúcej aplikácie: C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
Cesta chybujúceho modulu: unknown
Identifikácia hlásenia: 1fd11095-0980-4452-b988-35e3392d5636
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (11/17/2018 10:56:03 AM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed

Error: (11/17/2018 10:52:48 AM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed

Error: (11/17/2018 10:52:00 AM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (3980,D,23) SRUJet: Database C:\WINDOWS\system32\SRU\SRUDB.dat: Index AutoIncIdIndex of table {5C8CF1C7-7257-4F13-B223-970EF5939312} is corrupted (0).

Error: (11/17/2018 10:52:00 AM) (Source: ESENT) (EventID: 544) (User: )
Description: svchost (3980,D,29) SRUJet: The database page read from the file "C:\WINDOWS\system32\SRU\SRUDB.dat" at offset 20451328 (0x0000000001381000) (database page 4992 (0x1380)) for 4096 (0x00001000) bytes failed verification due to a persisted lost flush detection timestamp mismatch. The read operation will fail with error -1119 (0xfffffba1).

The flush state on database page 4992 (0x1380) was 1 while the flush state on flush map page 0 (0x0) was 3.

If this condition persists, restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Error: (11/17/2018 10:52:00 AM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (3980,D,11) SRUJet: A bad page link (error -338) has been detected in a B-Tree (ObjectId: 29, PgnoRoot: 4015) of database C:\WINDOWS\system32\SRU\SRUDB.dat (4591 => 4651, 4992).

Error: (11/17/2018 10:52:00 AM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (3980,D,11) SRUJet: A bad page link (error -338) has been detected in a B-Tree (ObjectId: 29, PgnoRoot: 4015) of database C:\WINDOWS\system32\SRU\SRUDB.dat (4591 => 4651, 4992).


System errors:
=============
Error: (11/17/2018 11:15:52 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 11:14:41 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 11:07:38 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Remediation Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 0 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (11/17/2018 11:07:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Remediation Service sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 0 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (11/17/2018 11:05:58 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 11:05:46 AM) (Source: DCOM) (EventID: 10010) (User: ROMAN)
Description: The server windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel did not register with DCOM within the required timeout.

Error: (11/17/2018 11:04:07 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 11:02:09 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Správca stiahnutých máp sa pri spustení zablokovala.


Windows Defender:
===================================
Date: 2018-10-14 15:55:03.092
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.277.1050.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15300.6
Error code: 0x8024402c
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

CodeIntegrity:
===================================

Date: 2018-11-16 18:48:23.033
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-11-13 19:07:30.921
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:07:30.907
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:07:24.566
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:07:24.557
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:06:39.647
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:06:39.631
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:06:22.621
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz
Percentage of memory in use: 65%
Total physical RAM: 6056.27 MB
Available physical RAM: 2084.09 MB
Total Virtual: 9896.27 MB
Available Virtual: 5329 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:888.24 GB) (Free:647.97 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.44 GB) NTFS

\\?\Volume{544f315c-f4c8-48e7-9b1b-48b5d9f40e70}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.67 GB) NTFS
\\?\Volume{3a634fd5-d606-4b0a-a07b-7af7ca94be02}\ () (Fixed) (Total:0.97 GB) (Free:0.46 GB) NTFS
\\?\Volume{e9a3640e-c62a-479e-b325-32d49cac6880}\ () (Fixed) (Total:0.44 GB) (Free:0.1 GB) NTFS
\\?\Volume{71f42a59-c0e9-433e-ad42-dc05f1badb55}\ (PBR_DRV) (Fixed) (Total:14.53 GB) (Free:3.44 GB) NTFS
\\?\Volume{69267c0e-72b4-4560-b327-a25805f3cec0}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 639F9589)

Partition: GPT.

==================== End of Addition.txt ============================

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build: 09-25-2018
# Database: 2018-11-14.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 11-17-2018
# Duration: 00:00:15
# OS: Windows 10 Home
# Cleaned: 70
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\UNINSTALL NEXUS
Deleted C:\Users\Roman\AppData\Roaming\IObit\Advanced SystemCare V8
Deleted C:\ProgramData\IObit\Advanced SystemCare
Deleted C:\Program Files (x86)\IObit\Advanced SystemCare
Deleted C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
Deleted C:\Users\Roman\AppData\LocalLow\IObit\Advanced SystemCare
Deleted C:\Users\Roman\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Users\Roman\AppData\Roaming\DRPSu
Deleted C:\Users\Roman\AppData\Roaming\DriverPack Notifier
Deleted C:\Users\Roman\AppData\Local\FileViewPro
Deleted C:\Users\Roman\Documents\TotalAV
Deleted C:\Users\admin\AppData\LocalLow\pandasecuritytb
Deleted C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ace Stream Media
Deleted C:\_acestream_cache_
Deleted C:\Users\Roman\AppData\LocalLow\.acestream
Deleted C:\Users\Roman\AppData\Roaming\.acestream
Deleted C:\Users\Roman\AppData\Roaming\acestream
Deleted C:\Program Files\Hola
Deleted C:\Users\Roman\AppData\Roaming\Hola

***** [ Files ] *****

Deleted C:\Users\Roman\Downloads\TOTALAV_SETUP.EXE

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\Tasks\START DRIVER REVIVER FOR ROMAN@ROMAN(LOGON).JOB
Deleted C:\Windows\System32\Tasks\START DRIVER REVIVER FOR ROMAN@ROMAN(LOGON)

***** [ Registry ] *****

Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D129931-7373-404C-AD21-580B23A8B4BC}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Start Driver Reviver for ROMAN@Roman(logon)
Deleted HKCU\Software\Classes\acestream
Deleted HKCU\Software\RegisteredApplications|AceStream
Deleted HKLM\Software\Wow6432Node\IObit\RealTimeProtector
Deleted HKLM\Software\Wow6432Node\IObit\Advanced SystemCare
Deleted HKLM\Software\Wow6432Node\IOBIT\ASC
Deleted HKCU\Software\drpsu
Deleted HKLM\Software\Wow6432Node\drpsu
Deleted HKLM\Software\drpsu
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|AceWebException
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|AceUpdater
Deleted HKU\S-1-5-18\Software\Hola
Deleted HKU\.DEFAULT\Software\Hola
Deleted HKLM\Software\Hola
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AceStream
Deleted HKCU\Software\AceStream
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hola.org
Deleted HKCU\Software\Classes\DVD\shell\PlayWithACEStream
Deleted HKCU\Software\Classes\AudioCD\shell\PlayWithACEStream
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayVideoFilesOnArrival
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayVCDMovieOnArrival
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlaySVCDMovieOnArrival
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayMusicFilesOnArrival
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayDVDMovieOnArrival
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayDVDAudioOnArrival
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayCDAudioOnArrival
Deleted HKCU\SOFTWARE\Classes\Applications\ace_player.exe
Deleted HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tslive
Deleted HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acestream
Deleted HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acemedia
Deleted HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acelive
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{79690976-ED6E-403C-BBBA-F8928B5EDE17}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{2872BC6E-4677-4D17-8549-08E412E9EC27}C:\users\roman\appdata\roaming\acestream\engine\ace_engine.exe
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{A41B8D8A-15BC-4ACD-B3DD-D6E7D227446A}C:\users\roman\appdata\roaming\acestream\engine\ace_engine.exe
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5878D171-BE10-4FDA-9C18-7BD7BCEB1E10}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{E0CD1AAF-F345-4E5F-A618-85FE1FACDDD7}
Deleted HKCU\Software\Classes\.acestream
Deleted HKLM\Software\Classes\.acestream
Deleted HKCU\Software\Classes\.tslive
Deleted HKCU\Software\Classes\.acemedia
Deleted HKCU\Software\Classes\.acelive
Deleted HKLM\SOFTWARE\Mozilla\NativeMessagingHosts\com.totalav.passwordvaultassistant
Deleted HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.totalav.passwordvaultassistant

***** [ Chromium (and derivatives) ] *****

Deleted mfhnkgpdlogbknkhlgdjlejeljbhflim
Deleted Panda Safe Web

***** [ Chromium URLs ] *****

Deleted Softonic EN
Deleted Softonic EN

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [7762 octets] - [17/11/2018 13:06:43]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Dejte nové logy FRST+Addirion.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15.11.2018
Ran by Roman (administrator) on ROMAN (17-11-2018 17:29:45)
Running from C:\Users\Roman\Downloads
Loaded Profiles: Roman (Available Profiles: Roman)
Platform: Windows 10 Home Version 1803 17134.407 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\MsMpEng.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1810.5-0\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
() C:\Windows\System32\igfxTray.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avpui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Lenovo Group Limited) C:\Users\Roman\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.)
HKLM\...\Run: [RtsFT] => c:\windows\RTFTrack.exe [5462528 2017-08-10] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [IgfxTray] => C:\windows\system32\igfxtray.exe [405416 2015-09-04] ()
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15794160 2013-10-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80368 2013-10-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [CL-22-D0932C92-273D-4FB0-AFCD-F8D0D9DA396B] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-22-D0932C92-273D-4FB0-AFCD-F8D0D9DA396B\setuplauncher.exe" /run:Installer.exe /args:"/step=install-auto /upgrade"
HKLM\...\Run: [AdobeAAMUpdater-1.0] => c:\program files (x86)\common files\adobe\oobe\pdapp\uwa\updaterstartuputility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3500056 2017-11-01] (Adobe Systems Inc.)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1179184 2016-10-27] (CyberGhost S.R.L.)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [5263040 2018-02-16] (Disc Soft Ltd)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Run: [uTorrent] => C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe [1738936 2018-11-17] (BitTorrent Inc.)
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\MountPoints2: {df68de65-65b8-11e8-bf79-f82fa8ff3ca4} - "H:\HTC_Sync_Manager_PC.exe"
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-2536812190-3338290056-2629826729-1001] => socks=127.0.0.1:9050
Tcpip\Parameters: [DhcpNameServer] 217.23.254.124 217.23.254.125
Tcpip\..\Interfaces\{45bd8caa-2d25-4bb6-8173-f286d6fbfc01}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{45bd8caa-2d25-4bb6-8173-f286d6fbfc01}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{50062e8a-e2a7-41ff-bfde-fa1ca045f30b}: [NameServer] 195.146.128.62 195.146.132.58
Tcpip\..\Interfaces\{b62920ae-6893-45b0-ad76-ae2942be429b}: [DhcpNameServer] 217.23.254.124 217.23.254.125
Tcpip\..\Interfaces\{bc8a5303-49a0-4257-9d8e-b4cb28d4f36e}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{d0f67747-cdbe-476a-826a-42508ce18013}: [DhcpNameServer] 93.115.31.198 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> DefaultScope {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2018-02-14] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2018-02-14] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2016-04-23] (Adobe Systems Incorporated)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2018-02-14] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi => not found
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi [2018-11-17]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Roman\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_148.dll [2018-11-13] ()
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_148.dll [2018-11-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1228198.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-16] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-02-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2536812190-3338290056-2629826729-1001: @acestream.net/acestreamplugin,version=3.1.16.3.1 -> C:\Users\Roman\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default [2018-11-17]
CHR Extension: (Prezentácie) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Kaspersky Protection) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\amkpcclbbgegoafihnpgomddadjhcadd [2018-11-17]
CHR Extension: (Dokumenty) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-04]
CHR Extension: (Adblock Plus) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-11-16]
CHR Extension: (Google Search) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Adobe Acrobat) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-06]
CHR Extension: (Video Downloader professional) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2018-04-11]
CHR Extension: (Tabuľky) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Video Downloader Free) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc [2018-11-16]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-15]
CHR Extension: (Page Ruler) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlpkojjdgbllmedoapgfodplfhcbnbpn [2018-07-06]
CHR Extension: (Ace Script) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2017-10-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-05]
CHR Extension: (Gmail) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-29]
CHR Extension: (Chrome Media Router) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-09]
CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated)
R2 AVP19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe [619640 2018-02-28] (AO Kaspersky Lab)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3480768 2018-02-16] (Disc Soft Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [361376 2015-09-04] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-16] (Intel Corporation)
S3 klvssbridge64_19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\vssbridge64.exe [416560 2018-11-17] (AO Kaspersky Lab)
R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (AO Kaspersky Lab)
S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-08-24] (Lenovo)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2159424 2018-03-15] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3028808 2018-03-15] (Electronic Arts)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 SAService; C:\WINDOWS\system32\SAsrv.exe [427224 2015-04-18] (Conexant Systems, Inc.)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [282200 2018-01-02] (Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\NisSrv.exe [3917016 2018-11-17] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MsMpEng.exe [114208 2018-11-17] (Microsoft Corporation)
S2 BDAuxSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdauxsrv_config.json" [X]
S2 BDProtSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdprotsrv_config.json" [X]
S2 bdredline; "C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe" [X]
S3 Survarium Update Service; "C:\Program Files (x86)\Survarium\game\binaries\x86\survarium_service.exe" "Survarium" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [105208 2018-08-27] (Advanced Micro Devices, Inc.)
R3 ApkbfiltrService; C:\WINDOWS\System32\drivers\Apkbfiltr.sys [31016 2015-07-23] (Alps Electric Co., Ltd.)
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1292296 2018-10-17] (BitDefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [153160 2018-10-15] (Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [45728 2018-10-17] (© Bitdefender SRL)
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [243400 2018-01-27] (AO Kaspersky Lab)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-05-06] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-05-06] (Disc Soft Ltd)
R3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [32840 2017-08-09] (ELAN Microelectronic Corp.)
S3 HtcVCom32; C:\WINDOWS\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-09-09] (REALiX(tm))
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [73416 2018-11-17] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [123152 2018-11-17] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [89168 2018-11-17] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29208 2017-03-30] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [220472 2018-11-17] (AO Kaspersky Lab)
R1 KLHK; C:\WINDOWS\System32\drivers\klhk.sys [1214752 2018-11-17] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP19.0.0\Bases\klids.sys [185576 2018-11-17] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1113912 2018-11-17] (AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57032 2018-02-12] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [58048 2018-01-15] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [83496 2017-12-11] (AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50648 2017-05-30] (AO Kaspersky Lab)
S3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [45768 2018-11-17] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [48080 2018-02-12] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [238528 2018-11-17] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [100136 2018-11-17] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [289856 2018-11-17] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [110640 2018-11-17] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [193168 2018-11-17] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [100552 2018-02-17] (AO Kaspersky Lab)
R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [161080 2018-07-20] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [203968 2018-02-24] (AO Kaspersky Lab)
S3 Microsoft_Bluetooth_AvrcpTransport; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [46592 2018-04-12] (Microsoft Corporation)
S3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2016-12-21] (SoftEther Corporation)
S3 PcaSp60; C:\Windows\SysWOW64\DRIVERS\PcaSp60.sys [38912 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [420832 2017-08-09] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3230720 2017-08-10] (Realtek Semiconductor Corp.)
R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-03-07] (SoftEther Corporation)
S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [54840 2017-12-20] (Synaptics Incorporated)
S3 tapSF0901; C:\WINDOWS\System32\drivers\tapSF0901.sys [39104 2015-07-31] (Spotflux, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46184 2018-11-17] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [328696 2018-11-17] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60408 2018-11-17] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2016-12-21] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2016-12-21] (Zemana Ltd.)
S0 b06bdrv; System32\drivers\bxvbda.sys [X]
S0 Ignis; system32\DRIVERS\ignis.sys [X]
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error(1) reading file: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje balíka Microsoft Office "
2018-11-17 13:07 - 2018-11-17 17:29 - 000140223 _____ C:\WINDOWS\ZAM.krnl.trace
2018-11-17 13:07 - 2018-11-17 17:29 - 000105292 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2018-11-17 13:05 - 2018-11-17 13:07 - 000000000 ____D C:\AdwCleaner
2018-11-17 13:04 - 2018-11-17 13:04 - 007592144 _____ (Malwarebytes) C:\Users\Roman\Desktop\adwcleaner_7.2.4.0.exe
2018-11-17 11:22 - 2018-11-17 11:22 - 000025867 _____ C:\ProgramData\agent.uninstall.1542450151.bdinstall.bin
2018-11-17 11:20 - 2018-11-17 11:20 - 000289856 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2018-11-17 11:19 - 2018-11-17 13:07 - 000193168 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2018-11-17 11:19 - 2018-11-17 13:07 - 000100136 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2018-11-17 11:19 - 2018-11-17 11:19 - 000238528 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2018-11-17 11:19 - 2018-11-17 11:19 - 000110640 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2018-11-17 11:17 - 2018-11-17 11:16 - 000220472 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2018-11-17 11:17 - 2018-11-17 11:16 - 000123152 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klbackupflt.sys
2018-11-17 11:17 - 2018-11-17 11:16 - 000089168 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kldisk.sys
2018-11-17 11:17 - 2018-11-17 11:14 - 001113912 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2018-11-17 11:17 - 2018-11-17 11:14 - 000073416 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klbackupdisk.sys
2018-11-17 11:17 - 2018-11-17 11:13 - 000152960 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\klhkum.dll
2018-11-17 11:17 - 2018-11-17 11:13 - 000045768 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klpnpflt.sys
2018-11-17 11:17 - 2018-11-17 11:12 - 001214752 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2018-11-17 11:16 - 2018-11-17 11:20 - 000065567 _____ C:\Users\Roman\Downloads\Addition.txt
2018-11-17 11:13 - 2018-11-17 17:30 - 000032703 _____ C:\Users\Roman\Downloads\FRST.txt
2018-11-17 11:12 - 2018-11-17 17:29 - 000000000 ____D C:\FRST
2018-11-17 11:11 - 2018-11-17 11:11 - 002416128 _____ (Farbar) C:\Users\Roman\Downloads\FRST64.exe
2018-11-17 10:44 - 2018-11-17 10:44 - 000003392 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2018-11-17 10:44 - 2018-11-17 10:44 - 000000000 ____D C:\Program Files\Common Files\AV
2018-11-17 10:43 - 2018-11-17 10:43 - 000001248 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk
2018-11-17 10:43 - 2018-11-17 10:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2018-11-17 10:42 - 2018-11-17 10:42 - 000002222 _____ C:\Users\Public\Desktop\Safe Money.lnk
2018-11-17 10:42 - 2018-11-17 10:42 - 000002198 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2018-11-17 10:42 - 2018-11-17 10:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2018-11-17 10:41 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2018-11-17 10:40 - 2018-11-17 10:43 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2018-11-17 10:34 - 2018-11-17 10:35 - 000000000 ____D C:\Users\Roman\Downloads\Kaspersky Internet Security 2019 v19.0.0.1088 + Crack [CracksMind]
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Roman\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Roman\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Roman\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Public\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Public\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Public\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\Desktop\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default.migrated\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\Desktop\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\Default User\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\Downloads\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\Documents\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\Desktop\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ C:\Users\admin\AppData\LocalLow\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Users\admin\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Users\admin\AppData\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Users\admin\AppData\Local\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Program Files\SSKLK-DECRYPT.txt
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ C:\Program Files (x86)\SSKLK-DECRYPT.txt
2018-11-16 19:36 - 2018-11-16 19:36 - 000008690 _____ C:\Users\SSKLK-DECRYPT.txt
2018-11-16 19:34 - 2018-11-16 19:34 - 000000000 ____D C:\ProgramData\SecuritySuite
2018-11-16 19:30 - 2018-11-16 19:30 - 000008690 _____ C:\SSKLK-DECRYPT.txt
2018-11-16 19:28 - 2018-11-17 11:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Survarium
2018-11-16 19:28 - 2018-11-16 19:28 - 000000000 ____D C:\Users\Roman\AppData\Local\Survarium
2018-11-16 19:27 - 2018-11-17 11:06 - 000000000 ____D C:\Program Files (x86)\Survarium
2018-11-16 19:25 - 2018-11-16 19:32 - 000000000 ____D C:\Users\Roman\Downloads\Panda Antivirus Pro v3.1.0.6 Pre-Activated 2018
2018-11-16 19:12 - 2018-11-16 19:12 - 000075536 _____ C:\ProgramData\cl.1542391913.bdinstall.bin
2018-11-16 19:12 - 2018-11-16 19:12 - 000075399 _____ C:\ProgramData\cl.1542391920.bdinstall.bin
2018-11-16 19:08 - 2018-11-16 19:08 - 000036409 _____ C:\ProgramData\dm.uninstall.1542391650.bdinstall.bin
2018-11-16 19:07 - 2018-11-16 19:07 - 000077250 _____ C:\ProgramData\cl.1542391613.bdinstall.bin
2018-11-16 19:07 - 2018-11-16 19:07 - 000075429 _____ C:\ProgramData\cl.1542391623.bdinstall.bin
2018-11-16 19:07 - 2018-11-16 19:07 - 000000000 ____D C:\ProgramData\PasswordManager.backup
2018-11-16 18:56 - 2018-11-16 18:56 - 000003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2018-11-16 18:56 - 2018-11-16 18:56 - 000003074 _____ C:\WINDOWS\System32\Tasks\StartDVR
2018-11-16 18:56 - 2018-11-16 18:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2018-11-16 18:41 - 2018-11-05 18:34 - 000835168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-11-16 18:41 - 2018-11-05 18:34 - 000179808 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-11-16 18:26 - 2018-11-16 18:26 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-16 18:25 - 2018-11-16 18:25 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2018-11-16 18:22 - 2018-11-16 18:22 - 000000000 _____ C:\WINDOWS\ativpsrm.bin
2018-11-16 17:42 - 2018-11-16 17:42 - 000003358 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2536812190-3338290056-2629826729-1001
2018-11-16 17:41 - 2018-11-16 17:42 - 000002418 _____ C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-11-14 20:03 - 2018-11-01 10:15 - 023861760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-11-14 20:03 - 2018-11-01 08:25 - 007520088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-11-14 20:03 - 2018-11-01 08:09 - 025855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-11-14 20:03 - 2018-11-01 08:01 - 022716416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-11-14 20:03 - 2018-11-01 05:47 - 006570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-11-14 20:02 - 2018-11-01 12:46 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-11-14 20:02 - 2018-11-01 12:45 - 004527776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-11-14 20:02 - 2018-11-01 12:45 - 001617320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2018-11-14 20:02 - 2018-11-01 12:45 - 001376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-11-14 20:02 - 2018-11-01 12:31 - 006602240 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-11-14 20:02 - 2018-11-01 12:29 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-11-14 20:02 - 2018-11-01 12:28 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-11-14 20:02 - 2018-11-01 12:28 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-11-14 20:02 - 2018-11-01 12:27 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-11-14 20:02 - 2018-11-01 12:27 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-11-14 20:02 - 2018-11-01 12:26 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-11-14 20:02 - 2018-11-01 12:25 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-11-14 20:02 - 2018-11-01 11:09 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-11-14 20:02 - 2018-11-01 10:59 - 005669888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-11-14 20:02 - 2018-11-01 10:56 - 011902464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-11-14 20:02 - 2018-11-01 10:54 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-11-14 20:02 - 2018-11-01 10:52 - 002892800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-11-14 20:02 - 2018-11-01 10:13 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-11-14 20:02 - 2018-11-01 08:39 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-11-14 20:02 - 2018-11-01 08:38 - 000269336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-11-14 20:02 - 2018-11-01 08:37 - 000272408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-11-14 20:02 - 2018-11-01 08:28 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-11-14 20:02 - 2018-11-01 08:28 - 001062712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-11-14 20:02 - 2018-11-01 08:28 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-11-14 20:02 - 2018-11-01 08:28 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-11-14 20:02 - 2018-11-01 08:28 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2018-11-14 20:02 - 2018-11-01 08:27 - 001017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-11-14 20:02 - 2018-11-01 08:27 - 000491200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 007432120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 003291640 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 003180080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-11-14 20:02 - 2018-11-01 08:26 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 009089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 004404912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 002822456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-11-14 20:02 - 2018-11-01 08:25 - 002571320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001784680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001456728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-11-14 20:02 - 2018-11-01 08:25 - 001288920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 001209888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001190248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 001140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-11-14 20:02 - 2018-11-01 08:25 - 000982592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 000594224 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-11-14 20:02 - 2018-11-01 08:25 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 000375824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-11-14 20:02 - 2018-11-01 08:25 - 000268088 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-11-14 20:02 - 2018-11-01 08:25 - 000261000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-11-14 20:02 - 2018-11-01 08:03 - 003397120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-11-14 20:02 - 2018-11-01 08:01 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2018-11-14 20:02 - 2018-11-01 08:01 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 006031360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-11-14 20:02 - 2018-11-01 08:00 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-11-14 20:02 - 2018-11-01 07:59 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-11-14 20:02 - 2018-11-01 07:58 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2018-11-14 20:02 - 2018-11-01 07:58 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-11-14 20:02 - 2018-11-01 07:57 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 002929664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-11-14 20:02 - 2018-11-01 07:56 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2018-11-14 20:02 - 2018-11-01 07:55 - 002738688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2018-11-14 20:02 - 2018-11-01 07:55 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2018-11-14 20:02 - 2018-11-01 07:55 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 001023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2018-11-14 20:02 - 2018-11-01 07:54 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-11-14 20:02 - 2018-11-01 07:53 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-11-14 20:02 - 2018-11-01 06:08 - 002417952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-11-14 20:02 - 2018-11-01 05:50 - 000861712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-11-14 20:02 - 2018-11-01 05:50 - 000786288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 006039064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 004790184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 002478872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 002331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 000880248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-11-14 20:02 - 2018-11-01 05:48 - 000384520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 001379792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 001020064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 000581600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2018-11-14 20:02 - 2018-11-01 05:47 - 000129304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-11-14 20:02 - 2018-11-01 05:40 - 022015488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-11-14 20:02 - 2018-11-01 05:35 - 019403776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-11-14 20:02 - 2018-11-01 05:34 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-11-14 20:02 - 2018-11-01 05:33 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-11-14 20:02 - 2018-11-01 05:33 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-11-14 20:02 - 2018-11-01 05:32 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2018-11-14 20:02 - 2018-11-01 05:31 - 005307904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2018-11-14 20:02 - 2018-11-01 05:30 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 001862656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2018-11-14 20:02 - 2018-11-01 05:29 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-11-14 20:02 - 2018-11-01 05:28 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-11-14 20:02 - 2018-11-01 05:28 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2018-11-14 20:02 - 2018-11-01 05:27 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-11-14 20:02 - 2018-11-01 05:27 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-11-14 20:02 - 2018-11-01 05:26 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 021386368 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 001639560 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 001516120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-11-14 20:02 - 2018-10-21 14:00 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-11-14 20:02 - 2018-10-21 13:59 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-11-14 20:02 - 2018-10-21 13:46 - 013572096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-11-14 20:02 - 2018-10-21 13:46 - 004393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-11-14 20:02 - 2018-10-21 13:43 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-11-14 20:02 - 2018-10-21 13:42 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2018-11-14 20:02 - 2018-10-21 13:42 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2018-11-14 20:02 - 2018-10-21 13:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2018-11-14 20:02 - 2018-10-21 12:38 - 001322376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-11-14 20:02 - 2018-10-21 12:38 - 000662312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-11-14 20:02 - 2018-10-21 12:38 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-11-14 20:02 - 2018-10-21 12:37 - 020381808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-11-14 20:02 - 2018-10-21 12:37 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-11-14 20:02 - 2018-10-21 12:28 - 012501504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-11-14 20:02 - 2018-10-21 12:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2018-11-14 20:02 - 2018-10-21 12:22 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-11-14 20:02 - 2018-10-21 08:48 - 005602456 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-11-14 20:02 - 2018-10-21 08:46 - 000717112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2018-11-14 20:02 - 2018-10-21 08:46 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-11-14 20:02 - 2018-10-21 08:46 - 000560136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-11-14 20:02 - 2018-10-21 08:46 - 000497864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2018-11-14 20:02 - 2018-10-21 08:46 - 000171024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-11-14 20:02 - 2018-10-21 08:45 - 003283512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-11-14 20:02 - 2018-10-21 08:45 - 001946208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 000607136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 000185120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-11-14 20:02 - 2018-10-21 08:45 - 000175624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2018-11-14 20:02 - 2018-10-21 08:45 - 000139792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2018-11-14 20:02 - 2018-10-21 08:28 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-11-14 20:02 - 2018-10-21 08:22 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-11-14 20:02 - 2018-10-21 08:21 - 001589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2018-11-14 20:02 - 2018-10-21 08:20 - 000424000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2018-11-14 20:02 - 2018-10-21 08:20 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 002487088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 001620776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 001130768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 000505616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2018-11-14 20:02 - 2018-10-21 08:19 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2018-11-14 20:02 - 2018-10-21 08:18 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2018-11-14 20:02 - 2018-10-21 08:18 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2018-11-14 20:02 - 2018-10-21 08:18 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-11-14 20:02 - 2018-10-21 08:17 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll
2018-11-14 20:02 - 2018-10-21 08:17 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-11-14 20:02 - 2018-10-21 08:16 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2018-11-14 20:02 - 2018-10-21 08:15 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2018-11-14 20:02 - 2018-10-21 08:15 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-11-14 20:02 - 2018-10-21 08:15 - 000743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL
2018-11-14 20:02 - 2018-10-21 08:14 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-11-14 20:02 - 2018-10-21 08:14 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-11-14 20:02 - 2018-10-21 08:14 - 001034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2018-11-14 20:02 - 2018-10-21 08:14 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-11-14 20:02 - 2018-10-21 08:09 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-11-14 20:02 - 2018-10-21 08:02 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-11-14 20:02 - 2018-10-21 08:01 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2018-11-14 20:02 - 2018-10-21 07:58 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2018-11-14 20:02 - 2018-10-21 07:57 - 002611200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2018-11-14 20:02 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls
2018-11-14 20:02 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2018-11-14 20:01 - 2018-11-01 12:49 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-11-14 20:01 - 2018-11-01 12:32 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-11-14 20:01 - 2018-11-01 12:30 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2018-11-14 20:01 - 2018-11-01 12:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2018-11-14 20:01 - 2018-11-01 12:29 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2018-11-14 20:01 - 2018-11-01 12:28 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2018-11-14 20:01 - 2018-11-01 12:26 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-11-14 20:01 - 2018-11-01 12:26 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-11-14 20:01 - 2018-11-01 10:56 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2018-11-14 20:01 - 2018-11-01 10:56 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2018-11-14 20:01 - 2018-11-01 10:54 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-11-14 20:01 - 2018-11-01 10:53 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-11-14 20:01 - 2018-11-01 08:28 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000885968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000793080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-11-14 20:01 - 2018-11-01 08:25 - 000713472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000413720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-11-14 20:01 - 2018-11-01 08:25 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-11-14 20:01 - 2018-11-01 08:03 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe
2018-11-14 20:01 - 2018-11-01 08:02 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll
2018-11-14 20:01 - 2018-11-01 08:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2018-11-14 20:01 - 2018-11-01 08:00 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2018-11-14 20:01 - 2018-11-01 07:59 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2018-11-14 20:01 - 2018-11-01 07:58 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-11-14 20:01 - 2018-11-01 07:58 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2018-11-14 20:01 - 2018-11-01 07:57 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2018-11-14 20:01 - 2018-11-01 07:54 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2018-11-14 20:01 - 2018-11-01 07:53 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2018-11-14 20:01 - 2018-11-01 06:39 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-11-14 20:01 - 2018-11-01 05:47 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-11-14 20:01 - 2018-11-01 05:31 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-11-14 20:01 - 2018-11-01 05:30 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-11-14 20:01 - 2018-11-01 05:30 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2018-11-14 20:01 - 2018-11-01 05:30 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-11-14 20:01 - 2018-11-01 05:29 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-11-14 20:01 - 2018-11-01 05:29 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2018-11-14 20:01 - 2018-11-01 05:28 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-11-14 20:01 - 2018-11-01 05:26 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2018-11-14 20:01 - 2018-11-01 05:26 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2018-11-14 20:01 - 2018-10-21 14:00 - 000396304 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2018-11-14 20:01 - 2018-10-21 13:59 - 000236728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-11-14 20:01 - 2018-10-21 13:45 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-11-14 20:01 - 2018-10-21 13:44 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2018-11-14 20:01 - 2018-10-21 13:44 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2018-11-14 20:01 - 2018-10-21 13:43 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2018-11-14 20:01 - 2018-10-21 13:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2018-11-14 20:01 - 2018-10-21 13:42 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2018-11-14 20:01 - 2018-10-21 13:42 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2018-11-14 20:01 - 2018-10-21 12:38 - 000221216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2018-11-14 20:01 - 2018-10-21 12:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2018-11-14 20:01 - 2018-10-21 12:23 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2018-11-14 20:01 - 2018-10-21 12:22 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2018-11-14 20:01 - 2018-10-21 10:29 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-11-14 20:01 - 2018-10-21 09:44 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-11-14 20:01 - 2018-10-21 08:47 - 000368440 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2018-11-14 20:01 - 2018-10-21 08:46 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-11-14 20:01 - 2018-10-21 08:45 - 000058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2018-11-14 20:01 - 2018-10-21 08:21 - 000123424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-11-14 20:01 - 2018-10-21 08:20 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2018-11-14 20:01 - 2018-10-21 08:20 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2018-11-14 20:01 - 2018-10-21 08:20 - 000141312 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2018-11-14 20:01 - 2018-10-21 08:19 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2018-11-14 20:01 - 2018-10-21 08:19 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-11-14 20:01 - 2018-10-21 08:19 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2018-11-14 20:01 - 2018-10-21 08:19 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcpAppSvc.dll
2018-11-14 20:01 - 2018-10-21 08:19 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys
2018-11-14 20:01 - 2018-10-21 08:19 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2018-11-14 20:01 - 2018-10-21 08:18 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2DP.sys
2018-11-14 20:01 - 2018-10-21 08:18 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2018-11-14 20:01 - 2018-10-21 08:16 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-11-14 20:01 - 2018-10-21 08:15 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-11-14 20:01 - 2018-10-21 08:02 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2018-11-14 20:01 - 2018-10-21 08:01 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2018-11-14 20:01 - 2018-10-21 08:00 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2018-11-14 20:01 - 2018-10-21 07:59 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2018-11-14 20:01 - 2018-10-21 07:58 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2018-11-14 20:01 - 2018-10-21 07:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-11-14 20:01 - 2018-04-28 05:02 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-11-13 19:53 - 2018-11-13 19:54 - 000150034 _____ C:\Users\Roman\Documents\cc_20181113_195352.reg
2018-11-13 19:17 - 2018-11-13 19:17 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-11-09 19:56 - 2018-09-04 23:36 - 001476904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2018-10-22 16:12 - 2018-10-22 16:12 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-17 16:45 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-11-17 16:08 - 2018-05-25 16:53 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-11-17 13:15 - 2018-05-25 17:14 - 003500972 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-17 13:15 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-11-17 13:15 - 2016-09-30 15:56 - 002085062 _____ C:\WINDOWS\system32\perfh01B.dat
2018-11-17 13:15 - 2016-09-30 15:56 - 000552022 _____ C:\WINDOWS\system32\perfc01B.dat
2018-11-17 13:14 - 2017-07-25 16:56 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-11-17 13:12 - 2015-07-31 16:48 - 000000000 ____D C:\Users\Roman\AppData\Roaming\uTorrent
2018-11-17 13:08 - 2018-05-25 17:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-11-17 13:07 - 2018-04-11 22:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-11-17 13:07 - 2015-09-09 14:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\IObit
2018-11-17 13:07 - 2015-09-09 14:17 - 000000000 ____D C:\Users\Roman\AppData\LocalLow\IObit
2018-11-17 13:07 - 2015-09-09 14:17 - 000000000 ____D C:\ProgramData\IObit
2018-11-17 13:07 - 2015-09-09 14:17 - 000000000 ____D C:\Program Files (x86)\IObit
2018-11-17 11:30 - 2018-03-30 13:59 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-11-17 11:20 - 2015-08-03 16:26 - 000559880 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-11-17 11:16 - 2018-03-21 22:05 - 000000000 ____D C:\Users\Roman\Desktop\MI4
2018-11-17 10:59 - 2013-10-12 00:51 - 000000000 ____D C:\ProgramData\Energy Manager
2018-11-17 10:56 - 2018-05-25 16:53 - 005146928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-11-17 10:53 - 2018-04-11 22:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-11-17 10:46 - 2018-05-25 17:01 - 000000000 ____D C:\Users\Roman
2018-11-17 10:45 - 2015-07-31 17:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\WinRAR
2018-11-17 10:40 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ELAMBKUP
2018-11-17 10:37 - 2016-09-29 14:45 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2018-11-16 19:54 - 2018-08-13 16:19 - 000000000 ____D C:\Users\Roman\AppData\Roaming\VMware
2018-11-16 19:54 - 2018-02-02 23:22 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Wise Care 365
2018-11-16 19:54 - 2018-01-07 08:20 - 000000000 ____D C:\Users\Roman\AppData\Roaming\YouTubeByClick
2018-11-16 19:54 - 2016-09-19 08:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\WebApp
2018-11-16 19:54 - 2016-05-25 08:05 - 000000000 ____D C:\Users\Roman\Desktop\BERSI 2.0
2018-11-16 19:54 - 2016-05-06 18:49 - 000000000 ____D C:\Users\Roman\AppData\Roaming\XMedia Recode
2018-11-16 19:54 - 2016-01-14 16:47 - 000000000 ___RD C:\Users\Roman\Creative Cloud Files
2018-11-16 19:54 - 2015-10-27 20:19 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Youtomato
2018-11-16 19:54 - 2015-09-29 12:25 - 000000000 ____D C:\Users\Roman\AppData\Roaming\vlc
2018-11-16 19:53 - 2018-05-25 17:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\TuneUp Software
2018-11-16 19:53 - 2018-03-30 14:20 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Paradoxx
2018-11-16 19:53 - 2017-11-19 20:57 - 000000000 ____D C:\Users\Roman\AppData\Roaming\SolidDocuments
2018-11-16 19:53 - 2017-05-06 22:07 - 000000000 __RHD C:\Users\Roman\AppData\Roaming\SecuROM
2018-11-16 19:53 - 2017-04-29 12:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Panda Security
2018-11-16 19:53 - 2017-03-22 17:35 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Poedit
2018-11-16 19:53 - 2016-11-23 11:10 - 000000000 ____D C:\Users\Roman\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2018-11-16 19:53 - 2016-11-03 17:50 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Skype
2018-11-16 19:53 - 2016-11-02 16:44 - 000000000 ____D C:\Users\Roman\AppData\Roaming\QuickScan
2018-11-16 19:53 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Reg
2018-11-16 19:53 - 2016-03-07 18:07 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Red Giant
2018-11-16 19:53 - 2016-02-21 16:38 - 000000000 ____D C:\Users\Roman\AppData\Roaming\PDAppFlex
2018-11-16 19:53 - 2015-11-16 19:03 - 000000000 ____D C:\Users\Roman\AppData\Roaming\PowerISO
2018-11-16 19:53 - 2015-10-25 20:51 - 000000000 ____D C:\Users\Roman\AppData\Roaming\PACE Anti-Piracy
2018-11-16 19:53 - 2015-09-07 13:45 - 000000000 ____D C:\Users\Roman\AppData\Roaming\TeamViewer
2018-11-16 19:53 - 2015-07-31 13:40 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Origin
2018-11-16 19:53 - 2015-07-30 14:42 - 000000000 ____D C:\Users\Roman\AppData\Roaming\TS3Client
2018-11-16 19:52 - 2018-07-07 10:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Nitro
2018-11-16 19:52 - 2017-09-02 11:25 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Opera Software
2018-11-16 19:52 - 2016-04-04 15:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\NVIDIA Corporation
2018-11-16 19:52 - 2015-08-18 15:55 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Mozilla
2018-11-16 19:50 - 2018-06-11 19:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HandBrake Team
2018-11-16 19:50 - 2018-06-11 19:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HandBrake
2018-11-16 19:50 - 2018-06-09 16:57 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HTC
2018-11-16 19:50 - 2018-05-25 17:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Macromedia
2018-11-16 19:50 - 2018-01-12 22:33 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Innovative Solutions
2018-11-16 19:50 - 2017-11-13 21:49 - 000000000 ____D C:\Users\Roman\AppData\Roaming\MetaQuotes
2018-11-16 19:50 - 2017-05-12 18:51 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Google
2018-11-16 19:50 - 2017-03-22 17:31 - 000000000 ____D C:\Users\Roman\AppData\Roaming\IsolatedStorage
2018-11-16 19:50 - 2017-01-02 16:22 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Mediaparts Interactive
2018-11-16 19:50 - 2016-09-27 14:53 - 000000000 ____D C:\Users\Roman\AppData\Roaming\InstallShield
2018-11-16 19:50 - 2016-05-24 17:08 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Leadertech
2018-11-16 19:50 - 2016-03-07 20:40 - 000000000 ____D C:\Users\Roman\AppData\Roaming\GameRanger
2018-11-16 19:50 - 2016-01-05 12:01 - 000000000 ____D C:\Users\Roman\AppData\Roaming\library_dir
2018-11-16 19:50 - 2015-11-24 20:54 - 000000000 ____D C:\Users\Roman\AppData\Roaming\HD Tune Pro
2018-11-16 19:50 - 2015-10-06 17:11 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Image-Line
2018-11-16 19:50 - 2015-07-29 18:22 - 000000000 ____D C:\Users\Roman\AppData\Roaming\LSC
2018-11-16 19:50 - 2015-07-29 18:18 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Intel Corporation
2018-11-16 19:50 - 2015-07-29 18:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Lenovo
2018-11-16 19:49 - 2018-07-26 17:10 - 000000000 ____D C:\Users\Roman\AppData\Roaming\dvdcss
2018-11-16 19:49 - 2018-01-02 23:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Easeware
2018-11-16 19:49 - 2015-10-06 17:11 - 000000000 ____D C:\Users\Roman\AppData\Roaming\FlowStone
2018-11-16 19:49 - 2015-08-03 16:32 - 000000000 ____D C:\Users\Roman\AppData\Roaming\ESET
2018-11-16 19:49 - 2015-07-29 18:45 - 000000000 ____D C:\Users\Roman\AppData\Roaming\FileZilla
2018-11-16 19:48 - 2018-07-07 10:41 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Downloaded Installations
2018-11-16 19:48 - 2018-05-22 16:23 - 000000000 ____D C:\Users\Roman\AppData\Roaming\audacity
2018-11-16 19:48 - 2018-05-12 15:00 - 000000000 ____D C:\Users\Roman\AppData\Roaming\ATI
2018-11-16 19:48 - 2018-01-07 08:17 - 000000000 ____D C:\Users\Roman\AppData\Roaming\ByClick
2018-11-16 19:48 - 2017-09-02 12:16 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DRPNPS
2018-11-16 19:48 - 2017-09-02 11:40 - 000000000 ____D C:\Users\Roman\AppData\Roaming\AVAST Software
2018-11-16 19:48 - 2017-05-06 22:23 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DAEMON Tools Lite
2018-11-16 19:48 - 2016-11-24 15:23 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Bitcoin
2018-11-16 19:48 - 2016-10-08 14:47 - 000000000 ____D C:\Users\Roman\AppData\Roaming\AVG
2018-11-16 19:48 - 2016-09-05 12:52 - 000000000 ____D C:\Users\Roman\AppData\Roaming\DonationCoder
2018-11-16 19:48 - 2016-06-27 18:58 - 000000653 _____ C:\Users\Roman\AppData\Roaming\D2Info0.ssklk
2018-11-16 19:48 - 2016-06-27 18:58 - 000000548 _____ C:\Users\Roman\AppData\Roaming\DofusAppId0_1.ssklk
2018-11-16 19:48 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Dofus
2018-11-16 19:48 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\app
2018-11-16 19:48 - 2016-06-27 18:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\AnkamaCertificates
2018-11-16 19:48 - 2016-02-14 21:59 - 000000000 ____D C:\Users\Roman\AppData\Roaming\com.betradar.scouttrainingplatform.videoplayer
2018-11-16 19:48 - 2016-01-14 16:58 - 000000000 ____D C:\Users\Roman\AppData\Roaming\BitTorrent
2018-11-16 19:48 - 2016-01-12 15:30 - 000000672 _____ C:\Users\Roman\AppData\Roaming\Adobe Formát PNG CS6 – předvolby.ssklk
2018-11-16 19:48 - 2015-11-18 23:34 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Apple Computer
2018-11-16 19:48 - 2015-09-05 22:46 - 000000000 ____D C:\Users\Roman\AppData\Roaming\BANDISOFT
2018-11-16 19:48 - 2015-08-03 13:18 - 000000000 ____D C:\Users\Roman\AppData\Roaming\CyberLink
2018-11-16 19:48 - 2015-07-29 18:15 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Adobe
2018-11-16 19:42 - 2018-08-27 18:11 - 000000000 ____D C:\Users\Roman\.fontconfig
2018-11-16 19:42 - 2018-04-29 11:51 - 000000000 ____D C:\Users\Roman\.android
2018-11-16 19:42 - 2018-04-12 00:38 - 000000000 __RHD C:\Users\Public\Libraries
2018-11-16 19:42 - 2018-02-19 21:49 - 000000000 ____D C:\Users\Public\Documents\Catch!
2018-11-16 19:42 - 2017-07-17 12:21 - 000000000 ____D C:\Users\admin\AppData\Roaming\FileZilla
2018-11-16 19:42 - 2017-07-17 12:14 - 000000000 ____D C:\Users\admin\AppData\Roaming\Skype
2018-11-16 19:42 - 2017-07-17 12:13 - 000000000 ___RD C:\Users\admin\OneDrive
2018-11-16 19:42 - 2017-07-17 12:12 - 000000000 ____D C:\Users\admin\AppData\Local\Publishers
2018-11-16 19:42 - 2017-07-17 12:11 - 000000729 _____ C:\Users\admin\Desktop\Lenovo Telephony Start Now.url.ssklk
2018-11-16 19:42 - 2017-07-17 12:11 - 000000560 ___SH C:\Users\admin\ntuser.ini.ssklk
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 __SHD C:\Users\admin\IntelGraphicsProfiles
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Roaming\TuneUp Software
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Roaming\Macromedia
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Roaming\Adobe
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\VirtualStore
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\TileDataLayer
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\Packages
2018-11-16 19:42 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin
2018-11-16 19:42 - 2017-05-06 22:23 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2018-11-16 19:42 - 2017-02-13 21:39 - 000000000 ____D C:\Users\Roman\.TeamSpeak 3
2018-11-16 19:42 - 2017-01-02 16:22 - 000000000 ____D C:\Users\Public\Mediaparts Interactive
2018-11-16 19:42 - 2016-11-09 17:38 - 000000000 ____D C:\Users\Roman\.LSC
2018-11-16 19:42 - 2016-10-11 20:09 - 000000000 ____D C:\Users\Default\AppData\Local\AVG
2018-11-16 19:42 - 2016-10-11 20:09 - 000000000 ____D C:\Users\Default User\AppData\Local\AVG
2018-11-16 19:42 - 2016-10-11 19:56 - 000000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2018-11-16 19:42 - 2016-10-11 19:56 - 000000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2018-11-16 19:42 - 2016-09-08 17:28 - 000000000 ____D C:\Users\Roman\.QtWebEngineProcess
2018-11-16 19:42 - 2016-09-08 17:28 - 000000000 ____D C:\Users\Roman\.Origin
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2018-11-16 19:42 - 2016-08-02 22:04 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2018-11-16 19:42 - 2016-06-27 18:24 - 000220749 _____ C:\Users\Roman\AppData\Localtransition_999474725f51ea2a6e3ae18c28ecc59b.ini.ssklk
2018-11-16 19:42 - 2016-04-04 16:21 - 000000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs
2018-11-16 19:42 - 2015-11-16 18:58 - 000000000 ____D C:\Users\Public\CyberLink
2018-11-16 19:42 - 2015-10-30 07:28 - 000000000 ____D C:\Users\Default.migrated
2018-11-16 19:42 - 2015-08-09 17:51 - 000000000 ___RD C:\Users\Roman\3D Objects
2018-11-16 19:42 - 2015-07-30 03:08 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-11-16 19:42 - 2013-10-12 00:41 - 000000729 _____ C:\Users\Default\Desktop\Lenovo Telephony Start Now.url.ssklk
2018-11-16 19:42 - 2013-10-12 00:41 - 000000729 _____ C:\Users\Default User\Desktop\Lenovo Telephony Start Now.url.ssklk
2018-11-16 19:41 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\Microsoft Help
2018-11-16 19:40 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\Google
2018-11-16 19:39 - 2017-07-17 12:51 - 000000000 ____D C:\Users\admin\AppData\Local\CrashDumps
2018-11-16 19:39 - 2017-07-17 12:33 - 000000000 ____D C:\Users\admin\AppData\Local\Comms
2018-11-16 19:39 - 2017-07-17 12:21 - 000000000 ____D C:\Users\admin\AppData\Local\FileZilla
2018-11-16 19:39 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\ConnectedDevicesPlatform
2018-11-16 19:38 - 2018-06-09 16:54 - 000000000 ____D C:\Temp
2018-11-16 19:38 - 2018-04-12 00:38 - 000000000 ____D C:\PerfLogs
2018-11-16 19:38 - 2018-01-12 22:33 - 000000000 ____D C:\My Drivers
2018-11-16 19:38 - 2017-08-31 12:37 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2018-11-16 19:38 - 2017-08-31 12:37 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2018-11-16 19:38 - 2017-08-31 12:34 - 000000000 __RHD C:\MSOCache
2018-11-16 19:38 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\AVG
2018-11-16 19:38 - 2017-07-17 12:11 - 000000000 ____D C:\Users\admin\AppData\Local\AMD
2018-11-16 19:38 - 2017-03-22 17:30 - 000000000 ____D C:\Spacekace
2018-11-16 19:38 - 2016-11-09 09:24 - 000000931 _____ C:\setup.log.ssklk
2018-11-16 19:38 - 2016-11-02 13:03 - 000000000 ____D C:\Intel
2018-11-16 19:38 - 2015-12-13 21:41 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2018-11-16 19:38 - 2013-10-12 00:44 - 000000000 __SHD C:\UserGuidePDF
2018-11-16 19:36 - 2018-10-14 15:32 - 000000000 ____D C:\CIMTEMP
2018-11-16 19:36 - 2018-01-12 23:03 - 000000000 ____D C:\AMD
2018-11-16 19:36 - 2017-07-17 12:14 - 000000000 ____D C:\Bandicam
2018-11-16 19:36 - 2016-11-02 17:26 - 000036487 _____ C:\bdlog.txt.ssklk
2018-11-16 19:36 - 2015-08-25 16:07 - 000000000 ____D C:\ATF
2018-11-16 19:30 - 2016-10-08 14:44 - 000000000 ___HD C:\$AVG
2018-11-16 19:18 - 2018-10-14 14:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2018-11-16 19:16 - 2016-11-02 16:51 - 000000000 ____D C:\Program Files\Bitdefender
2018-11-16 18:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-11-16 18:33 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-11-16 18:31 - 2017-11-12 13:08 - 000000000 ____D C:\Program Files\AMD
2018-11-16 18:31 - 2015-11-18 23:04 - 000000000 ____D C:\ProgramData\Package Cache
2018-11-16 18:26 - 2015-07-31 13:19 - 000000000 __SHD C:\Users\Roman\IntelGraphicsProfiles
2018-11-16 17:42 - 2015-07-30 18:09 - 000000000 ___RD C:\Users\Roman\OneDrive
2018-11-16 17:22 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-16 17:18 - 2015-07-29 18:23 - 000000000 ____D C:\Users\Roman\AppData\Local\Adobe
2018-11-16 17:14 - 2017-09-29 19:36 - 000000000 ____D C:\Program Files\rempl
2018-11-14 20:33 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-11-14 20:32 - 2015-07-29 20:48 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-11-14 20:26 - 2015-07-29 20:48 - 137810048 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-11-14 19:44 - 2015-07-29 18:19 - 000002284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-14 19:44 - 2015-07-29 18:19 - 000002243 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-11-13 19:51 - 2018-05-20 20:43 - 000000000 ___DC C:\WINDOWS\Panther
2018-11-13 19:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ModemLogs
2018-11-13 19:51 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-11-13 19:51 - 2015-07-30 10:25 - 000000000 ____D C:\Users\Roman\AppData\Local\CrashDumps
2018-11-13 19:49 - 2015-08-10 14:14 - 000000000 ____D C:\Program Files (x86)\Steam
2018-11-13 19:45 - 2018-02-02 22:18 - 000000000 ____D C:\Program Files (x86)\Razer
2018-11-13 19:45 - 2016-11-09 15:20 - 000000000 ____D C:\ProgramData\Razer
2018-11-13 19:44 - 2016-11-09 15:22 - 000000000 ____D C:\Users\Roman\AppData\Local\Razer
2018-11-13 19:43 - 2018-07-07 10:47 - 000000000 ____D C:\Program Files\Nitro
2018-11-13 19:40 - 2017-12-13 22:18 - 000000000 ____D C:\Users\Roman\AppData\Local\Packages
2018-11-13 19:36 - 2015-10-06 17:11 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2018-11-13 19:36 - 2015-10-06 17:11 - 000000000 ____D C:\Program Files\Image-Line
2018-11-13 19:36 - 2015-10-06 17:08 - 000000000 ____D C:\Program Files (x86)\Image-Line
2018-11-13 19:32 - 2016-05-24 17:04 - 000000000 ____D C:\Program Files (x86)\EA Sports
2018-11-13 19:24 - 2015-07-31 13:41 - 000000000 ____D C:\Program Files (x86)\Origin Games
2018-11-13 19:24 - 2015-07-31 13:36 - 000000000 ____D C:\ProgramData\Electronic Arts
2018-11-13 19:23 - 2016-06-27 18:23 - 000000000 ____D C:\Users\Roman\AppData\Local\Ankama
2018-11-13 19:19 - 2016-04-05 18:16 - 000000000 ____D C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-11-13 19:03 - 2018-08-13 16:16 - 000000000 ____D C:\ProgramData\VMware
2018-11-13 18:51 - 2016-08-25 11:46 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2018-11-13 18:50 - 2018-05-25 17:39 - 000000000 ____D C:\Users\Roman\AppData\Local\D3DSCache
2018-11-13 18:10 - 2018-05-25 17:28 - 000004580 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-11-13 18:09 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-11-13 18:09 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-11-13 17:12 - 2018-05-25 17:28 - 000004568 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-11-12 17:08 - 2017-02-14 21:47 - 000000000 ____D C:\Users\Roman\AppData\LocalLow\AMD
2018-11-05 17:26 - 2016-11-09 17:33 - 000000000 ____D C:\Users\Roman\AppData\Local\LenovoServiceBridge
2018-10-24 16:16 - 2018-07-10 17:27 - 000000000 ____D C:\ProgramData\Packages
2018-10-18 16:25 - 2016-11-02 16:57 - 000000000 ____D C:\ProgramData\BDLogging
2018-10-18 16:23 - 2016-04-02 18:18 - 000000000 ____D C:\Users\Roman\AppData\Local\IE Tab

==================== Files in the root of some directories =======

2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ () C:\Program Files\SSKLK-DECRYPT.txt
2018-10-14 08:58 - 2018-10-14 08:58 - 000334840 _____ (Lua.org) C:\Program Files (x86)\lua5.1.dll
2018-11-16 19:38 - 2018-11-16 19:38 - 000008690 _____ () C:\Program Files (x86)\SSKLK-DECRYPT.txt
2018-10-14 08:58 - 2018-10-14 08:58 - 001390080 _____ (Indigo Rose Corporation) C:\Program Files (x86)\uninstall.exe
2016-01-12 15:30 - 2018-11-16 19:48 - 000000672 _____ () C:\Users\Roman\AppData\Roaming\Adobe Formát PNG CS6 – předvolby.ssklk
2016-06-27 18:58 - 2018-11-16 19:48 - 000000653 _____ () C:\Users\Roman\AppData\Roaming\D2Info0.ssklk
2016-06-27 18:58 - 2018-11-16 19:48 - 000000548 _____ () C:\Users\Roman\AppData\Roaming\DofusAppId0_1.ssklk
2018-11-16 19:42 - 2018-11-16 19:42 - 000008690 _____ () C:\Users\Roman\AppData\Roaming\SSKLK-DECRYPT.txt
2018-11-16 19:50 - 2018-11-16 19:50 - 000008690 _____ () C:\Users\Roman\AppData\Roaming\Microsoft\SSKLK-DECRYPT.txt
2016-09-05 12:52 - 2016-09-05 12:52 - 000000058 _____ () C:\Users\Roman\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2018-10-15 15:59 - 2018-10-15 15:59 - 000000000 _____ () C:\Users\Roman\AppData\Local\oobelibMkey.log
2016-01-26 10:41 - 2016-01-26 10:41 - 000000017 _____ () C:\Users\Roman\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
2018-11-13 19:23 - 2018-08-07 13:02 - 006456928 _____ (Ankama Studio) C:\Users\Roman\AppData\Local\Temp\Ank45F5.tmp.exe
2018-11-16 06:14 - 2018-11-16 06:14 - 009364708 _____ () C:\Users\Roman\AppData\Local\Temp\setup.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-25 16:53

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15.11.2018
Ran by Roman (17-11-2018 17:31:02)
Running from C:\Users\Roman\Downloads
Windows 10 Home Version 1803 17134.407 (X64) (2018-05-25 16:31:08)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2536812190-3338290056-2629826729-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2536812190-3338290056-2629826729-503 - Limited - Disabled)
Guest (S-1-5-21-2536812190-3338290056-2629826729-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2536812190-3338290056-2629826729-1006 - Limited - Enabled)
Roman (S-1-5-21-2536812190-3338290056-2629826729-1001 - Administrator - Enabled) => C:\Users\Roman
WDAGUtilityAccount (S-1-5-21-2536812190-3338290056-2629826729-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Internet Security (Disabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Kaspersky Internet Security (Disabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\uTorrent) (Version: 3.5.4.44846 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 19.008.20081 - Adobe Systems Incorporated)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.23 - Adobe Systems)
Adobe After Effects CC 2015 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F0}) (Version: 13.7.1 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 26.0.0.127 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.6.0.248 - Adobe Systems Incorporated)
Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.148 - Adobe Systems Incorporated)
Adobe Flash Player 31 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 31.0.0.148 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2015 (HKLM-x32\...\{0FAC7130-BEC5-47A5-8813-1D339B8326ED}) (Version: 9.2.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Premiere Pro CS6 (HKLM-x32\...\{7176B973-6011-43C1-AEBC-2D73FE7C6982}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\Adobe Shockwave Player) (Version: 10.2.0.22 - Adobe Systems, Inc.)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2018.1010.1801.32425 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 18.10.1 - Advanced Micro Devices, Inc.)
AMD System Monitor (HKLM-x32\...\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}) (Version: 1.0.9 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS RT-N12LX Wireless Router Utilities (HKLM-x32\...\{BAC6FEB3-D5F4-4627-BCA1-18F914FC6C17}) (Version: 4.2.1.2 - ASUS)
Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.1.419 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{3A8008D5-C834-1CA9-68CB-E9F49F0AB120}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{1D89886C-1BC7-978A-7790-BDF741552029}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{C2E207A0-6375-140A-3170-50737EB32D29}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{FF8A9A91-1E72-EE4A-04DA-6E7F65CB626D}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{78B5E5BC-C2B2-3439-0750-C9FC7AAE173B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{28B38E4C-1FCC-0AB9-F2CE-7079DF8CF8A5}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{6CD61388-4F40-E91A-17A1-E821F0BB92E1}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{F38E5A65-9C76-3757-9D69-672FACA088D4}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{884596CF-79B1-13A0-7334-563BB3A75F45}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{223D250A-AABB-A9AA-7D07-7FA086D7BF62}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{994B3C1F-F48C-B29E-D88A-06322D70B45C}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{7C42C52E-DFF2-8BD6-5134-DCB5FBB8A5EE}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{3372CE65-1178-B53F-C228-254C7F7F118F}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{80C20F9B-C28F-E3ED-726C-86BFC24EEE3B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{16FC5B97-5AC3-056E-1A1B-FF36B790575E}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{D955A619-B0BA-FB07-0590-675FA7A127CF}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{686AF1D4-4D23-8115-9968-FE32775067C8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{168E9C24-F28F-D630-74BB-4F4D66CFC871}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{66F96B6D-33A7-938C-2910-CA9C76E00742}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{59546E97-8B2F-0F51-5191-BF19438164A8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.7.1.0342 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
Dolby Config (HKLM\...\DOLBY Config) (Version: 1.0.0.0 - Conexant Systems)
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
Energy Manager (HKLM-x32\...\{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.28 - Lenovo) Hidden
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.28 - Lenovo)
EZkeys Player 64-bit (HKLM\...\{35E5BAC5-47A5-449C-9244-C40659362DCF}) (Version: 1.1.1 - Toontrack)
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Fotogaléria (HKLM-x32\...\{5B87607E-E781-49C5-9891-80990E45BCA1}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameRanger (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\GameRanger) (Version: - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.102 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
GPU Temp version 1.0 (HKLM-x32\...\{8C8711FD-0FC8-4801-B33E-ED19BB0350B1}_is1) (Version: 1.0 - gputemp.com)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4279 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Kaspersky Internet Security (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.6600 - Broadcom Corporation)
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10230 - Realtek Semiconductor Corp.)
Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo PowerDVD10 (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.)
Lenovo Service Bridge (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 4.0.6.5 - Lenovo)
Lenovo Solution Center (HKLM\...\{558E50EE-5E2D-479A-A455-8A826191583B}) (Version: 3.3.004.00 - Lenovo)
Lenovo YouCam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo_Wireless_Driver (HKLM-x32\...\{5D642A72-8194-4A22-80DA-11FE610CCA8E}) (Version: 6.30.223.75 - Lenovo)
Microsoft Office 2016 Professional Plus (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\OneDriveSetup.exe) (Version: 18.192.0920.0015 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{650c9b4a-60ec-4e4e-8d8e-32d85ce3b7c5}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM-x32\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movavi Video Converter 18 Premium (HKLM-x32\...\Movavi Video Converter 18 Premium) (Version: 18.1.0 - Movavi)
Movie Maker (HKLM-x32\...\{0CD05078-D4F3-4006-8726-B01E10A89B28}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 57.0 (x64 sk) (HKLM\...\Mozilla Firefox 57.0 (x64 sk)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla)
Nástroje kontroly pravopisu pro Microsoft Office 2016 – čeština (HKLM\...\{90160000-001F-0405-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2016 - slovenčina (HKLM\...\{90160000-001F-041B-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
OEM Application Profile (HKLM-x32\...\{C89A97B6-F991-EBB5-77B7-927BCF420EBE}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.14.38647 - Electronic Arts, Inc.)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden
Poedit (HKLM-x32\...\{68EB2C37-083A-4303-B5D8-41FA67E50B8F}_is1) (Version: 1.8.12 - Vaclav Slavik)
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version: - PokerStars.eu)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
PX Profile Update (HKLM-x32\...\{0CBC1600-74DC-961B-E97E-4CC7E452CD1A}) (Version: 1.00.1. - AMD) Hidden
PX Profile Update (HKLM-x32\...\{39E352BE-8C58-06FC-8046-1546392C83B6}) (Version: 1.00.1. - AMD) Hidden
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.19 - Qualcomm Atheros Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31233 - Realtek Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.39044 - Realtek Semiconductor Corp.)
Red Giant Link (HKLM-x32\...\{10F82E5B-B611-4C65-8F29-666A9EC5680A}_is1) (Version: 1.9.7.36 - Red Giant, LLC)
RivaTuner Statistics Server 7.0.2 (HKLM-x32\...\RTSS) (Version: 7.0.2 - Unwinder)
Smart View (HKLM-x32\...\{1800D8A5-F7B2-4C20-868E-1CF55CBBDF21}) (Version: 1.0.0.0 - Samsung )
SopCast 3.9.6 (HKLM-x32\...\SopCast) (Version: 3.9.6 - www.sopcast.com)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SWF File Player (HKLM-x32\...\{6A86F611-906C-422D-B34A-103662CBC195}_is1) (Version: - swffileplayer.com)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TNod User & Password Finder (HKLM\...\TNod) (Version: 1.6.4.0 - Tukero[X]Team)
Trapcode Suite v13.0.1 (HKLM-x32\...\{DFD2DC6B-C634-4C1C-81CC-5EF852E71CEE}_is1) (Version: 13.0.1 - Red Giant, LLC)
Update for Skype for Business 2016 (KB4011725) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{E4EFE857-B051-4AB1-80A7-A0279FB2B33C}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB4011725) 64-Bit Edition (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}_Office16.PROPLUS_{E4EFE857-B051-4AB1-80A7-A0279FB2B33C}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB4011725) 64-Bit Edition (HKLM\...\{90160000-012B-041B-1000-0000000FF1CE}_Office16.PROPLUS_{E4EFE857-B051-4AB1-80A7-A0279FB2B33C}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C5FDDED7-DEC7-48B4-AFD8-DFB8A0FD199A}) (Version: 2.51.0.0 - Microsoft Corporation)
UserGuide (HKLM-x32\...\{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo) Hidden
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.15 - Lenovo)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.3 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.51.0 (HKLM\...\VulkanRT1.0.51.0) (Version: 1.0.51.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0) (Version: 1.0.54.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0-2) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-4) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Windows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
YouTube By Click (HKLM-x32\...\{466A9654-03BB-4AEE-975E-935FF341D382}) (Version: 2.2.77 - ByClick) Hidden
YouTube By Click (HKLM-x32\...\YouTube By Click 2.2.77) (Version: 2.2.77 - ByClick)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-F7B3E42E758B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
CustomCLSID: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => -> No File
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-10-08] (Power Software Ltd)
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers1: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-02-16] (Disc Soft Ltd)
ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-02-16] (Disc Soft Ltd)
ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-10-08] (Power Software Ltd)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2018-10-10] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-09-04] (Intel Corporation)
ContextMenuHandlers5: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-11-17] (AO Kaspersky Lab)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-10-08] (Power Software Ltd)
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers6: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0091065B-FBF5-4E3C-AA32-920BF609E94D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_148_pepper.exe [2018-11-13] (Adobe Systems Incorporated)
Task: {023D6065-0AAF-441B-896B-9149EC873DFA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {036132C2-7384-4CB8-9357-B531A286C374} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {12EE7A55-0957-4BC4-A9CA-31C32941D465} - System32\Tasks\Driver Booster SkipUAC (Roman) => C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DriverBooster.exe
Task: {1E35DC15-CA9C-4661-8E85-1C66AB8E78EA} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2016-08-24] (Lenovo)
Task: {241A1B00-86FF-4EE5-9FAD-EFFBAEA90B05} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-kn1gu4@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {286DA532-E58E-4621-A545-734FC5404F97} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {2D8BD2EB-7DAB-4A58-8E09-CD31A7BDA0AC} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {3795993D-FDB7-4B05-BB9A-F9EB13809796} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-17] (Microsoft Corporation)
Task: {37F67C8C-7C99-498D-8491-B8E05B15AD73} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe
Task: {3F9922DB-CC3E-4D9D-B1DB-8A75EDBFB3FC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {44FF7765-AE4B-4279-B4AF-2F96A63B0095} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-17] (Microsoft Corporation)
Task: {45889F3D-2FD2-40B6-B8EB-923E8AF90484} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {503B909C-A65E-4E49-9E57-D93A5242BAF6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {58AF5C79-D5F8-4396-8DDB-29755C215DF4} - System32\Tasks\S-1-5-21-2536812190-3338290056-2629826729-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation)
Task: {59484049-14C7-4C21-801D-BCCEC4BCAF3B} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe <==== ATTENTION
Task: {5B8D072F-2E80-4755-9E76-57D0066D1DD5} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
Task: {5C771CEA-72B1-4A6D-90CC-088F51155B5D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {5CDE35F1-A0FA-4BEE-959A-350D68B4E3DC} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {5D174F9A-81B0-4CFD-A0D8-8F6DA165B7EE} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_148_Plugin.exe [2018-11-13] (Adobe Systems Incorporated)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {66DDD030-B7A7-410E-AA7B-EE8703DB7B37} - \WPD\SqmUpload_S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {6B89C48D-FF1B-4D9F-86B7-B2EF9DF95534} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-11-13] (Adobe Systems Incorporated)
Task: {6D94D3E0-B6E5-42BA-B490-868C97354B51} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {6E4F7581-69D4-4869-BE67-36D2959CB201} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2018-01-02] (Synaptics Incorporated)
Task: {78868FA2-3175-4628-8946-359C79E2507A} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [2018-11-17] (AO Kaspersky Lab)
Task: {7A8133A6-694A-481D-B14F-399875A8B1CE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {7D64CD72-E152-4790-BD9B-FA07289E24AE} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {7FF925D2-90C2-4644-ACD0-CA036AD3F77C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)
Task: {82CCF414-5717-4B3E-82C6-B9CE27EE1C6E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-17] (Microsoft Corporation)
Task: {841568BE-A58A-43C9-B7FA-410FB2A1F0BA} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {88719681-4304-4759-AE2D-FB054D3CD8D3} - System32\Tasks\AutoPico Daily Restart => C:\Users\Roman\Desktop\affiliatewp184pack\ALL [Argument = MS OFFICE WINDOWS PERNAMEN ACTIVATOR!\AutoPico.exe /silent]
Task: {89067876-62DB-49A5-83FA-36CAAF2C93E4} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [2018-10-10] (Advanced Micro Devices, Inc.)
Task: {91C10D79-968E-4DAF-829A-3851077C0B6E} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [2016-08-24] ()
Task: {93A4FA40-DE5C-4ADF-A98D-25B897D8DA56} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-11-14] (Microsoft Corporation)
Task: {94467DDC-F15B-4593-8EBE-89525A8DA4C3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-26] (Piriform Ltd)
Task: {9651759B-FBD1-4602-B67B-3B5E040AB18E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {99CCE30A-200C-42FD-BE7F-E60385EEF52D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {9AABAC65-BE69-4D03-A6D8-FA94D219E56C} - \Optimize Start Menu Cache Files-S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {9D53D7D1-C2E1-4702-8FCB-34D979272BC4} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-08-24] (Lenovo)
Task: {A3F27B52-DF42-4B37-99EE-E9BCD01EA6B5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MpCmdRun.exe [2018-11-17] (Microsoft Corporation)
Task: {A63AF620-0295-4C5A-BBAB-5716F0D2687A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {A92935C3-1767-42D1-8F1A-407869322850} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {B59DC252-2A64-4E37-8558-BBAAD296035B} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe
Task: {BBDA4643-12DF-4783-A223-5D073B830B20} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {C6EDD32C-8F91-48EA-8EC6-E0E52D208E57} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-kn1gu4@gmail.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated)
Task: {CA7A5A84-C9A2-4112-8122-0CA84517B2DE} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2016-08-24] (Lenovo)
Task: {D88A057F-B04C-4ED8-A9CE-9FD0D2B8A88D} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe
Task: {DBA4EC6D-BF83-4858-AFCF-72C8FFD4362E} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-2536812190-3338290056-2629826729-1001 => C:\Users\Roman\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [2018-10-29] (Lenovo Group Limited)
Task: {E4A90B9D-D198-4793-8B85-64DB77070560} - \Start Driver Reviver Update -> No File <==== ATTENTION
Task: {E89D9433-2461-4020-818E-02F52EC96313} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2018-10-10] (Advanced Micro Devices, Inc.)
Task: {F421CD84-1AC9-4C34-9DF4-DF8635C0CCC9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F6B14CFC-4448-4826-9996-6883BB7C9DBC} - \Start Driver Reviver Schedule -> No File <==== ATTENTION
Task: {F7E21266-B55A-4364-A71E-BE8C2EF4672F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2016-04-01 22:18 - 2016-04-01 22:18 - 000426160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-11-14 20:02 - 2018-11-01 07:55 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-10-04 16:23 - 2018-10-04 16:23 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll
2018-11-13 19:10 - 2018-11-13 19:11 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ChakraBridge.dll
2018-11-13 19:10 - 2018-11-13 19:17 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll
2018-11-13 19:10 - 2018-11-13 19:13 - 010873344 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\LibWrapper.dll
2018-11-13 19:10 - 2018-11-13 19:17 - 002834432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\skypert.dll
2018-11-13 19:10 - 2018-11-13 19:15 - 000685568 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2018-10-24 16:15 - 2018-10-24 16:15 - 035118592 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-10-24 16:15 - 2018-10-24 16:15 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-10-24 16:15 - 2018-10-24 16:15 - 005987328 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 16:16 - 2017-09-26 16:16 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-10-24 16:15 - 2018-10-24 16:15 - 009064448 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntPlat.dll
2018-01-08 14:00 - 2018-01-08 14:00 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2015-09-04 04:55 - 2015-09-04 04:55 - 000405416 _____ () C:\Windows\System32\igfxTray.exe
2018-11-13 19:10 - 2018-11-13 19:17 - 000183808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2018-11-14 19:44 - 2018-11-08 23:14 - 005020504 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.102\libglesv2.dll
2018-11-14 19:44 - 2018-11-08 23:14 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\70.0.3538.102\libegl.dll
2018-11-13 19:14 - 2018-11-13 19:18 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2018-11-13 19:14 - 2018-11-13 19:17 - 066031104 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-11-12 14:17 - 2017-11-12 14:18 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2018-11-09 19:58 - 2018-11-09 20:02 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2018-11-09 19:58 - 2018-11-09 19:59 - 003715072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2018-11-09 19:58 - 2018-11-09 20:02 - 000036352 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll
2018-08-23 07:41 - 2018-08-23 07:42 - 002480640 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\opencv_imgproc320.dll
2018-08-23 07:41 - 2018-08-23 07:42 - 002280960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\opencv_core320.dll
2018-04-05 10:11 - 2018-04-05 13:15 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2018-11-13 19:14 - 2018-11-13 19:18 - 014097920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2018-11-09 19:58 - 2018-11-09 19:59 - 003569152 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2018-11-13 19:14 - 2018-11-13 19:15 - 002863616 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2018-08-31 13:34 - 2018-08-31 13:35 - 000973312 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-07-26 18:55 - 2018-07-26 18:56 - 004584960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences [386]
AlternateDataStreams: C:\Users\Roman\Downloads\0ig101af.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\amdcleanuputility.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\autodetectutility (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\AppData\Local\2uaDOUEeTn:fP7OZ97MmBURQ8r0k [2056]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-23 21:50 - 2018-11-16 18:44 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Roman\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\ubuntu-trusty-14.04-wallpaper.jpg
DNS Servers: 217.23.254.124 - 217.23.254.125
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "YouCam Tray"
HKLM\...\StartupApproved\Run32: => "Intel AppUp(SM) center"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "PlaysTV"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "AceStream"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\StartupApproved\Run: => "CyberGhost"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{34214E9D-3223-4DC1-976D-FE399A0EC75A}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
FirewallRules: [{F1B0F3F6-7754-41B2-8B02-550261A4B0BE}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{1E3691B3-3777-44A4-9CD3-768D0C3EFDFE}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{4F294E65-10FB-44B6-B5FE-2E4F4B862AA1}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{FE119C5C-7505-4C1F-A869-2972A58E6634}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{BC8F4B08-F2F9-4ECC-9B5E-BEFFACE37F05}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{CD2BD730-2D74-41FF-A65C-343E3F2F6892}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{E7E14372-0E04-4B75-9946-3B4D18C3DE8E}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{18C70957-AC76-45B0-ACE9-EA3208D0D90D}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{3E4DBE40-24E5-4D2F-9766-CDCCFD796438}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{813B4570-90A2-4435-884C-1F5EA231A7C5}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [UDP Query User{966169E7-0773-4D1A-86B4-385D6DA46574}C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe] => (Allow) C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe
FirewallRules: [TCP Query User{4F95A754-A1B3-4B1C-9397-B58EC109FA15}C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe] => (Allow) C:\program files\adobe\adobe premiere pro cs6\adobe premiere pro.exe
FirewallRules: [UDP Query User{ED380DD7-546F-419F-A981-FC6EDC8A5896}C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe] => (Allow) C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe
FirewallRules: [TCP Query User{83B59266-D96E-4436-924E-2DEFC25260F2}C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe] => (Allow) C:\users\roman\appdata\roaming\bittorrent\updates\7.10.0_43917.exe
FirewallRules: [UDP Query User{CFB07199-A34E-493F-A9D8-C66CAE9A08C3}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [TCP Query User{B8F02505-2CAE-45CF-BB17-6685C961A0AC}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [{1287E772-DD83-489E-81DC-C785C84A3506}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{0A32D93D-7B3B-40FD-9EFF-98BEB238AB19}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{FC32BA6D-FEBD-4A8C-871F-D5369C133D87}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [UDP Query User{3A11CE50-510F-4517-B594-6B3A42ED2228}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe
FirewallRules: [TCP Query User{A5BE1F14-F153-4396-935B-87305E8F9CD9}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe
FirewallRules: [{C382AE6C-4BE1-43E3-9327-342120DCF7CF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{87D70ACA-4BB9-4253-A3A2-FB4C387DA49F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6305B0DA-DE5F-4B2D-860D-23E41BA9565A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DD1EBAA7-A8A4-4FD7-8A3B-B13167C4EECF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A8D94265-1C36-4F4C-8D7D-F923C5193BEA}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{018A8B1D-FA37-4A4A-9828-3F0FFCC00E1E}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0241B0E4-07AD-4C1C-857A-37C292C1EBC3}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{58B0ED82-2DF6-4D47-991B-8D916E26DE65}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6EED5EB2-3610-4942-A26D-F86E09D4D6FF}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8F74D033-4F19-4A0A-ADB6-65D869B154D3}] => (Allow) C:\Users\Roman\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4E4E7D47-8472-42A7-A564-C4AFF33DF261}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{B4DEF635-8DB6-440B-88F5-C4F214A1FD6F}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{EA27396D-3BF6-4985-AE4E-AF34C53B000B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FBB2D49B-C19D-4A9A-A58D-CF61A508AF2E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D000C600-3A6D-41BF-8C91-D115DFFB5D84}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D36061E3-6A08-4329-A3BD-C5525E0A2284}] => (Allow) LPort=2869
FirewallRules: [{EBEABE4B-922B-4715-AE58-B541B2E3C4E0}] => (Allow) LPort=1900
FirewallRules: [{13796226-E768-46D8-9603-DF64739FAE9E}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{DEA5121C-2155-46A0-9979-537834648275}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{844BB037-07D3-41A5-B246-93C2CD4E6DA0}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{E1781A91-AA81-4CE1-AABE-8F3E252F2ED5}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{62C0CBF3-2628-4685-8E2B-25772BEE1028}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{F5858201-6C29-4A8E-A5A0-944373AFA578}] => (Allow) C:\Users\Roman\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{0DD02175-2B82-4400-BD47-F2D2CDA307C8}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Discovery.exe
FirewallRules: [{0FD3BEB7-13AE-4F23-9BE0-FAAFF8AE63FC}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Discovery.exe
FirewallRules: [{8363939B-78E3-4564-A1E5-10FD0594CD69}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Rescue.exe
FirewallRules: [{AE5FE6D1-39BB-41AA-A7EE-BBBC6FDA9DE8}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\Rescue.exe
FirewallRules: [{DEA717B0-9B5D-4586-873A-96B38FE70D1D}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\LiveUpdate.exe
FirewallRules: [{A83C11FB-D7F0-4170-850D-821B377ABF40}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\LiveUpdate.exe
FirewallRules: [{A4CD4225-8F91-4C21-A71F-F2E8A1152361}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\QISWizard.exe
FirewallRules: [{2B19823A-C1E6-4330-91A9-E185A36B211E}] => (Allow) C:\Program Files (x86)\ASUS\RT-N12LX Wireless Router Utilities\QISWizard.exe
FirewallRules: [{40D02A96-BDBF-43A0-9433-131698FBDFCA}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{BC1FD359-E4C2-42F9-BA07-173190DF5C87}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{023932FE-7B6E-496A-9695-3690133F012E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{6446954F-CDA3-4018-9CD8-521CE9473562}C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe
FirewallRules: [UDP Query User{888F4FE8-C778-4776-82F2-0AD82DBD9ACE}C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x32\pcsftool.exe
FirewallRules: [TCP Query User{47A2692E-D44B-40C9-93E1-F3C62C35AD4F}C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe
FirewallRules: [UDP Query User{8D06D218-82BE-4338-A169-D2C69638ECC7}C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe] => (Allow) C:\users\roman\appdata\local\temp\rarsfx0\x64\pcsftool.exe
FirewallRules: [{1FF4AA55-7FA8-436F-9263-A17CD968B28D}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_launcher.exe
FirewallRules: [{894D23CA-C8B2-4B61-8ED6-70D4B9F994F7}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe
FirewallRules: [{8871DA7C-5521-4D06-9CC9-7CF1EC70A8C0}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe
FirewallRules: [{4105A316-B85D-4B40-AEA0-E8B5D0E847A8}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe
FirewallRules: [{22E17089-2BA5-4EAC-8613-B2C140820D30}] => (Allow) C:\Program Files (x86)\Survarium\temp\survarium_updater.exe

==================== Restore Points =========================

10-11-2018 13:16:40 Windows Update
13-11-2018 19:25:05 Removed FIFA 11

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/17/2018 05:31:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (3476,D,23) SRUJet: Database C:\WINDOWS\system32\SRU\SRUDB.dat: Index AutoIncIdIndex of table {5C8CF1C7-7257-4F13-B223-970EF5939312} is corrupted (0).

Error: (11/17/2018 05:31:00 PM) (Source: ESENT) (EventID: 544) (User: )
Description: svchost (3476,D,29) SRUJet: The database page read from the file "C:\WINDOWS\system32\SRU\SRUDB.dat" at offset 20451328 (0x0000000001381000) (database page 4992 (0x1380)) for 4096 (0x00001000) bytes failed verification due to a persisted lost flush detection timestamp mismatch. The read operation will fail with error -1119 (0xfffffba1).

The flush state on database page 4992 (0x1380) was 1 while the flush state on flush map page 0 (0x0) was 3.

If this condition persists, restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Error: (11/17/2018 05:31:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (3476,D,11) SRUJet: A bad page link (error -338) has been detected in a B-Tree (ObjectId: 29, PgnoRoot: 4015) of database C:\WINDOWS\system32\SRU\SRUDB.dat (4591 => 4651, 4992).

Error: (11/17/2018 05:31:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (3476,D,11) SRUJet: A bad page link (error -338) has been detected in a B-Tree (ObjectId: 29, PgnoRoot: 4015) of database C:\WINDOWS\system32\SRU\SRUDB.dat (4591 => 4651, 4992).

Error: (11/17/2018 05:31:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (3476,D,22) SRUJet: A bad page link (error -338) has been detected in a B-Tree (ObjectId: 29, PgnoRoot: 4015) of database C:\WINDOWS\system32\SRU\SRUDB.dat (4591 => 4651, 4992).

Error: (11/17/2018 05:30:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (3476,D,23) SRUJet: Database C:\WINDOWS\system32\SRU\SRUDB.dat: Index AutoIncIdIndex of table {5C8CF1C7-7257-4F13-B223-970EF5939312} is corrupted (0).

Error: (11/17/2018 05:30:00 PM) (Source: ESENT) (EventID: 544) (User: )
Description: svchost (3476,D,29) SRUJet: The database page read from the file "C:\WINDOWS\system32\SRU\SRUDB.dat" at offset 20451328 (0x0000000001381000) (database page 4992 (0x1380)) for 4096 (0x00001000) bytes failed verification due to a persisted lost flush detection timestamp mismatch. The read operation will fail with error -1119 (0xfffffba1).

The flush state on database page 4992 (0x1380) was 1 while the flush state on flush map page 0 (0x0) was 3.

If this condition persists, restore the database from a previous backup. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Error: (11/17/2018 05:30:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (3476,D,11) SRUJet: A bad page link (error -338) has been detected in a B-Tree (ObjectId: 29, PgnoRoot: 4015) of database C:\WINDOWS\system32\SRU\SRUDB.dat (4591 => 4651, 4992).


System errors:
=============
Error: (11/17/2018 04:08:57 PM) (Source: bcbtums) (EventID: 1026) (User: )
Description: Failed initializing BT device, failed RAM patch download.

Error: (11/17/2018 01:27:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 01:24:02 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 01:13:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 01:13:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 01:13:06 PM) (Source: DCOM) (EventID: 10016) (User: ROMAN)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user Roman\Roman SID (S-1-5-21-2536812190-3338290056-2629826729-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 01:11:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (11/17/2018 01:11:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spustenie služby Bitdefender RedLine Service zlyhalo kvôli nasledujúcej chybe:
The system cannot find the file specified.


Windows Defender:
===================================
Date: 2018-10-14 15:55:03.092
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.277.1050.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15300.6
Error code: 0x8024402c
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.

CodeIntegrity:
===================================

Date: 2018-11-16 18:48:23.033
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2018-11-13 19:07:30.921
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:07:30.907
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:07:24.566
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:07:24.557
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:06:39.647
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:06:39.631
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-11-13 19:06:22.621
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz
Percentage of memory in use: 36%
Total physical RAM: 6056.27 MB
Available physical RAM: 3863.93 MB
Total Virtual: 9896.27 MB
Available Virtual: 7285.67 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:888.24 GB) (Free:648.76 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.44 GB) NTFS

\\?\Volume{544f315c-f4c8-48e7-9b1b-48b5d9f40e70}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.67 GB) NTFS
\\?\Volume{3a634fd5-d606-4b0a-a07b-7af7ca94be02}\ () (Fixed) (Total:0.97 GB) (Free:0.46 GB) NTFS
\\?\Volume{e9a3640e-c62a-479e-b325-32d49cac6880}\ () (Fixed) (Total:0.44 GB) (Free:0.1 GB) NTFS
\\?\Volume{71f42a59-c0e9-433e-ad42-dc05f1badb55}\ (PBR_DRV) (Fixed) (Total:14.53 GB) (Free:3.44 GB) NTFS
\\?\Volume{69267c0e-72b4-4560-b327-a25805f3cec0}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 639F9589)

Partition: GPT.

==================== End of Addition.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => -> No File
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers1: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers6: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
Task: {023D6065-0AAF-441B-896B-9149EC873DFA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {036132C2-7384-4CB8-9357-B531A286C374} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {286DA532-E58E-4621-A545-734FC5404F97} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {2D8BD2EB-7DAB-4A58-8E09-CD31A7BDA0AC} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe
Task: {3F9922DB-CC3E-4D9D-B1DB-8A75EDBFB3FC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {503B909C-A65E-4E49-9E57-D93A5242BAF6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {59484049-14C7-4C21-801D-BCCEC4BCAF3B} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe <==== ATTENTION
Task: {5C771CEA-72B1-4A6D-90CC-088F51155B5D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {5CDE35F1-A0FA-4BEE-959A-350D68B4E3DC} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {66DDD030-B7A7-410E-AA7B-EE8703DB7B37} - \WPD\SqmUpload_S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {6D94D3E0-B6E5-42BA-B490-868C97354B51} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {7D64CD72-E152-4790-BD9B-FA07289E24AE} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {9AABAC65-BE69-4D03-A6D8-FA94D219E56C} - \Optimize Start Menu Cache Files-S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {A63AF620-0295-4C5A-BBAB-5716F0D2687A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {A92935C3-1767-42D1-8F1A-407869322850} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {BBDA4643-12DF-4783-A223-5D073B830B20} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {E4A90B9D-D198-4793-8B85-64DB77070560} - \Start Driver Reviver Update -> No File <==== ATTENTION
Task: {F6B14CFC-4448-4826-9996-6883BB7C9DBC} - \Start Driver Reviver Schedule -> No File <==== ATTENTION
Task: {F7E21266-B55A-4364-A71E-BE8C2EF4672F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
AlternateDataStreams: C:\Windows:nlsPreferences [386]
AlternateDataStreams: C:\Users\Roman\Downloads\0ig101af.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\amdcleanuputility.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\autodetectutility (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\AppData\Local\2uaDOUEeTn:fP7OZ97MmBURQ8r0k [2056]
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\MountPoints2: {df68de65-65b8-11e8-bf79-f82fa8ff3ca4} - "H:\HTC_Sync_Manager_PC.exe"
GroupPolicy: Restriction ? <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> DefaultScope {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1228198.dll [No File]
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF Plugin HKU\S-1-5-21-2536812190-3338290056-2629826729-1001: @acestream.net/acestreamplugin,version=3.1.16.3.1 -> C:\Users\Roman\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]
S2 BDAuxSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdauxsrv_config.json" [X]
S2 BDProtSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdprotsrv_config.json" [X]
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1292296 2018-10-17] (BitDefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [153160 2018-10-15] (Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [45728 2018-10-17] (© Bitdefender SRL)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2016-12-21] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2016-12-21] (Zemana Ltd.)
S0 b06bdrv; System32\drivers\bxvbda.sys [X]
C:\WINDOWS\ZAM.krnl.trace
C:\WINDOWS\ZAM_Guard.krnl.trace
C:\Users\Roman\AppData\Local\Temp

EmptyTemp:
End

Uložte do C:\Users\Roman\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte. V logu jsem našel zbytka po BitDefenderu. Proskenujte PC tímto programenm: https://www.bitdefender.com/uninstall/

Fix result of Farbar Recovery Scan Tool (x64) Version: 15.11.2018
Ran by Roman (17-11-2018 17:59:32) Run:1
Running from C:\Users\Roman\Downloads
Loaded Profiles: Roman (Available Profiles: Roman)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => -> No File
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers1: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers6: [UAContextMenu] -> {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => -> No File
Task: {023D6065-0AAF-441B-896B-9149EC873DFA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {036132C2-7384-4CB8-9357-B531A286C374} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {286DA532-E58E-4621-A545-734FC5404F97} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {2D8BD2EB-7DAB-4A58-8E09-CD31A7BDA0AC} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe
Task: {3F9922DB-CC3E-4D9D-B1DB-8A75EDBFB3FC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {503B909C-A65E-4E49-9E57-D93A5242BAF6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {59484049-14C7-4C21-801D-BCCEC4BCAF3B} - System32\Tasks\Red Giant Link => C:\Program Files\Red Giant Link\Red Giant Link.exe <==== ATTENTION
Task: {5C771CEA-72B1-4A6D-90CC-088F51155B5D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-29] (Google Inc.)
Task: {5CDE35F1-A0FA-4BEE-959A-350D68B4E3DC} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {66DDD030-B7A7-410E-AA7B-EE8703DB7B37} - \WPD\SqmUpload_S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {6D94D3E0-B6E5-42BA-B490-868C97354B51} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {7D64CD72-E152-4790-BD9B-FA07289E24AE} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {9AABAC65-BE69-4D03-A6D8-FA94D219E56C} - \Optimize Start Menu Cache Files-S-1-5-21-2536812190-3338290056-2629826729-1001 -> No File <==== ATTENTION
Task: {A63AF620-0295-4C5A-BBAB-5716F0D2687A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {A92935C3-1767-42D1-8F1A-407869322850} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {BBDA4643-12DF-4783-A223-5D073B830B20} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {E4A90B9D-D198-4793-8B85-64DB77070560} - \Start Driver Reviver Update -> No File <==== ATTENTION
Task: {F6B14CFC-4448-4826-9996-6883BB7C9DBC} - \Start Driver Reviver Schedule -> No File <==== ATTENTION
Task: {F7E21266-B55A-4364-A71E-BE8C2EF4672F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
AlternateDataStreams: C:\Windows:nlsPreferences [386]
AlternateDataStreams: C:\Users\Roman\Downloads\0ig101af.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\amdcleanuputility.exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\Downloads\autodetectutility (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Roman\AppData\Local\2uaDOUEeTn:fP7OZ97MmBURQ8r0k [2056]
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\...\MountPoints2: {df68de65-65b8-11e8-bf79-f82fa8ff3ca4} - "H:\HTC_Sync_Manager_PC.exe"
GroupPolicy: Restriction ? <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> DefaultScope {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
SearchScopes: HKU\S-1-5-21-2536812190-3338290056-2629826729-1001 -> {E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} URL =
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => not found
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1228198.dll [No File]
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF Plugin HKU\S-1-5-21-2536812190-3338290056-2629826729-1001: @acestream.net/acestreamplugin,version=3.1.16.3.1 -> C:\Users\Roman\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File]
S2 BDAuxSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdauxsrv_config.json" [X]
S2 BDProtSrv; "C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" "settings\services\configs\bdprotsrv_config.json" [X]
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1292296 2018-10-17] (BitDefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [153160 2018-10-15] (Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [45728 2018-10-17] (� Bitdefender SRL)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2016-12-21] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2016-12-21] (Zemana Ltd.)
S0 b06bdrv; System32\drivers\bxvbda.sys [X]
C:\WINDOWS\ZAM.krnl.trace
C:\WINDOWS\ZAM_Guard.krnl.trace
C:\Users\Roman\AppData\Local\Temp

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncBackedUp => removed successfully
HKLM\Software\Classes\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncPending => removed successfully
HKLM\Software\Classes\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncRoot => removed successfully
HKLM\Software\Classes\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncShared => removed successfully
HKLM\Software\Classes\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\SugarSync => removed successfully
HKLM\Software\Classes\CLSID\{305BC11B-5175-492B-B569-866547FCDA40} => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UAContextMenu => removed successfully
HKLM\Software\Classes\CLSID\{A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\UAContextMenu => removed successfully
HKLM\Software\Classes\CLSID\{A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\SugarSync => removed successfully
HKLM\Software\Classes\CLSID\{305BC11B-5175-492B-B569-866547FCDA40} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\UAContextMenu => removed successfully
HKLM\Software\Classes\CLSID\{A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{023D6065-0AAF-441B-896B-9149EC873DFA}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{023D6065-0AAF-441B-896B-9149EC873DFA}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{036132C2-7384-4CB8-9357-B531A286C374}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{036132C2-7384-4CB8-9357-B531A286C374}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{286DA532-E58E-4621-A545-734FC5404F97}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{286DA532-E58E-4621-A545-734FC5404F97}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2D8BD2EB-7DAB-4A58-8E09-CD31A7BDA0AC}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D8BD2EB-7DAB-4A58-8E09-CD31A7BDA0AC}" => removed successfully
C:\WINDOWS\System32\Tasks\KMSAutoNet => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KMSAutoNet" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3F9922DB-CC3E-4D9D-B1DB-8A75EDBFB3FC}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F9922DB-CC3E-4D9D-B1DB-8A75EDBFB3FC}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{503B909C-A65E-4E49-9E57-D93A5242BAF6}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{503B909C-A65E-4E49-9E57-D93A5242BAF6}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{59484049-14C7-4C21-801D-BCCEC4BCAF3B}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{59484049-14C7-4C21-801D-BCCEC4BCAF3B}" => removed successfully
C:\WINDOWS\System32\Tasks\Red Giant Link => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Red Giant Link" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5C771CEA-72B1-4A6D-90CC-088F51155B5D}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C771CEA-72B1-4A6D-90CC-088F51155B5D}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5CDE35F1-A0FA-4BEE-959A-350D68B4E3DC}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CDE35F1-A0FA-4BEE-959A-350D68B4E3DC}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{66DDD030-B7A7-410E-AA7B-EE8703DB7B37}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66DDD030-B7A7-410E-AA7B-EE8703DB7B37}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-2536812190-3338290056-2629826729-1001" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6D94D3E0-B6E5-42BA-B490-868C97354B51}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6D94D3E0-B6E5-42BA-B490-868C97354B51}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7D64CD72-E152-4790-BD9B-FA07289E24AE}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D64CD72-E152-4790-BD9B-FA07289E24AE}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9AABAC65-BE69-4D03-A6D8-FA94D219E56C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AABAC65-BE69-4D03-A6D8-FA94D219E56C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimize Start Menu Cache Files-S-1-5-21-2536812190-3338290056-2629826729-1001" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A63AF620-0295-4C5A-BBAB-5716F0D2687A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A63AF620-0295-4C5A-BBAB-5716F0D2687A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A92935C3-1767-42D1-8F1A-407869322850}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A92935C3-1767-42D1-8F1A-407869322850}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BBDA4643-12DF-4783-A223-5D073B830B20}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BBDA4643-12DF-4783-A223-5D073B830B20}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E4A90B9D-D198-4793-8B85-64DB77070560}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4A90B9D-D198-4793-8B85-64DB77070560}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Start Driver Reviver Update" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F6B14CFC-4448-4826-9996-6883BB7C9DBC}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6B14CFC-4448-4826-9996-6883BB7C9DBC}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Start Driver Reviver Schedule" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F7E21266-B55A-4364-A71E-BE8C2EF4672F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7E21266-B55A-4364-A71E-BE8C2EF4672F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
C:\Windows => ":nlsPreferences" ADS removed successfully
C:\Users\Roman\Downloads\0ig101af.exe => ":BDU" ADS removed successfully
C:\Users\Roman\Downloads\amdcleanuputility.exe => ":BDU" ADS removed successfully
C:\Users\Roman\Downloads\autodetectutility (1).exe => ":BDU" ADS removed successfully
C:\Users\Roman\AppData\Local\2uaDOUEeTn => ":fP7OZ97MmBURQ8r0k" ADS removed successfully
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File) => Error: No automatic fix found for this entry.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{df68de65-65b8-11e8-bf79-f82fa8ff3ca4} => removed successfully
HKLM\Software\Classes\CLSID\{df68de65-65b8-11e8-bf79-f82fa8ff3ca4} => not found
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
"HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} => removed successfully
HKLM\Software\Classes\CLSID\{E00039AE-DF6E-4C14-AA63-FBB7A6ACBAE1} => not found
"HKLM\Software\Mozilla\Firefox\Extensions\\bdwtwe@bitdefender.com" => removed successfully
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\bdwtwe@bitdefender.com" => removed successfully
"HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com" => removed successfully
HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10 => removed successfully
HKU\S-1-5-21-2536812190-3338290056-2629826729-1001\Software\MozillaPlugins\@acestream.net/acestreamplugin,version=3.1.16.3.1 => removed successfully
"C:\Users\Roman\AppData\Roaming\ACEStream\player\npace_plugin.dll" => not found
HKLM\System\CurrentControlSet\Services\BDAuxSrv => removed successfully
BDAuxSrv => service removed successfully
HKLM\System\CurrentControlSet\Services\BDProtSrv => removed successfully
BDProtSrv => service removed successfully
atc => Unable to stop service.
HKLM\System\CurrentControlSet\Services\atc => removed successfully
atc => service removed successfully
BdDci => Unable to stop service.
HKLM\System\CurrentControlSet\Services\BdDci => removed successfully
BdDci => service removed successfully
bdprivmon => Unable to stop service.
HKLM\System\CurrentControlSet\Services\bdprivmon => removed successfully
bdprivmon => service removed successfully
ZAM => Unable to stop service.
HKLM\System\CurrentControlSet\Services\ZAM => removed successfully
ZAM => service removed successfully
ZAM_Guard => Unable to stop service.
HKLM\System\CurrentControlSet\Services\ZAM_Guard => removed successfully
ZAM_Guard => service removed successfully
HKLM\System\CurrentControlSet\Services\b06bdrv => removed successfully
b06bdrv => service removed successfully
C:\WINDOWS\ZAM.krnl.trace => moved successfully
C:\WINDOWS\ZAM_Guard.krnl.trace => moved successfully
C:\Users\Roman\AppData\Local\Temp => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 164364555 B
Java, Flash, Steam htmlcache => 715352380 B
Windows/system/drivers => 168616788 B
Edge => 14894 B
Chrome => 847946715 B
Firefox => 822518 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 16370 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 14934 B
LocalService => 0 B
NetworkService => 18236 B
NetworkService => 0 B
Roman => 4833341 B

RecycleBin => 2954390 B
EmptyTemp: => 1.8 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 18:02:50 ====

OK. Nastala nějaká změna?

Ono zmena ani nemá asi aká, pretože mi to zakódovalo asi 4 priečinky na ploche s fotkami, ktoré mám aj tak zálohované a nejako ich nepotrebujem, tak som ich hneď zmazal. O súbory mi až tak nejde, toto je starší ntbk, len sa bojím skôr o nejaké ukradnutie hesiel do mailov a podobne. Myslite, že sa to nejako dá cez tento ransomware, alebo to len čisto zakóduje súbory ? ... Už dávnejšie som chcel aj preinštalovať celý win. Pomôže to, alebo sa mám niečoho báť ?

Ransomware pouze zakóduje soubory (hlavně dokumenty). Pokud nejsou zálohovány, můžete o ně definitivně přijít, ne na každý ransomware existuje dekódování. Reinstal OS ho určitě zničí, nezapisuje se do startovacích sektorů.

Ok, tak ďakujem za pomoc

Nemáte zač!