VIRY.CZ

Zdravím,

můžete se prosím podívat, jestli nemám nějaký bug? Při psaní mi vynechávají písmena. Pokud píšu pomaleji, tak je to lepší!

Mám pocit, že to není mechanického rázu a nejsem si vědom, že bych keyboard polil apod.

Moc díky.
Štěpán.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Hraboš at 2019-10-27 19:20:27
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 50 GB (22%) free of 227 GB
Total RAM: 3894 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:20:30, on 27.10.2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
C:\Program Files\Cold Turkey\eowp.exe
C:\Program Files\Cold Turkey\eowp.exe
C:\Program Files\Cold Turkey\eowp.exe
C:\Program Files\Cold Turkey\eowp.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera_crashreporter.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Cold Turkey\CTMsgHostChrome.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\Opera\64.0.3417.73\opera.exe
C:\Program Files\trend micro\Hraboš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
O4 - HKCU\..\Run: [IrisMini] "C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DraftSight API Service - Dassault Systemes - C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.70\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HOMAG Group DiscoveryService (HomagGroupDiscoveryService) - HOMAG Group AG - C:\Program Files (x86)\Common Files\HOMAG Group\DiscoveryService\HomagGroup.Services.Discovery.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: TAO Naming Service (NamingService) - Homag Holzbearbeitungssysteme AG - C:\Windows\Homag\NT_Naming_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: TAO Notify Service (NotifyService) - Homag Holzbearbeitungssysteme AG - C:\Windows\Homag\NT_Notify_Service.exe
O23 - Service: HOMAG Group occi Server Registry Service (occisrs) - Homag Group AG - C:\Program Files (x86)\Homag Group\occi\occisrs.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Power_a17007 - Unknown owner - C:\Program Files\Cold Turkey\\ServiceHub.Power.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12704 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\Antivirus\sched.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Avira\Antivirus\avguard.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe" C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
"C:\Program Files (x86)\Common Files\HOMAG Group\DiscoveryService\HomagGroup.Services.Discovery.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\Homag\NT_Naming_Service.exe
"C:\Program Files (x86)\Homag Group\occi\occisrs.exe" -service
"C:\Program Files (x86)\Avira\Antivirus\avshadow.exe" avshadowcontrol0_0000095c
taskeng.exe {A430A8D7-D5BF-472C-A7A0-E11D9D70253C}
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files\Cold Turkey\\ServiceHub.Power.exe"
"C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
C:\Windows\Homag\NT_Notify_Service.exe
"C:\Program Files (x86)\Avira\Antivirus\avgnt.exe"
"C:\Program Files\Cold Turkey\\Cold Turkey Blocker.exe" tray
"C:\Program Files\Cold Turkey\eowp.exe" --eoim --eo_init_data=eo.ipc.temp.3600.1.2
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Cold Turkey\eowp.exe" --enable-speech-input --auto-scan-plugin --lang=cs --enable-media-stream --no-sandbox --eo_init_data=eo.ipc.temp.3600.1.5
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\Cold Turkey\eowp.exe" --type=gpu-process --no-sandbox --lang=cs --log-file="C:\Users\HRABO~1\AppData\Local\Temp\debug.log" --log-severity=disable --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0046 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2559 --gpu-driver-date=10-21-2011 --lang=cs --log-file="C:\Users\HRABO~1\AppData\Local\Temp\debug.log" --log-severity=disable --service-request-channel-token=AD82783EFDD3919D9A778F555B10FCA0 --mojo-platform-channel-handle=1180 /prefetch:2 --eo_init_data=eo.temp.3168.1
"C:\Program Files\Cold Turkey\eowp.exe" --type=renderer --no-sandbox --service-pipe-token=1A43929672D83855494B00807247686A --lang=cs --lang=cs --log-file="C:\Users\HRABO~1\AppData\Local\Temp\debug.log" --log-severity=disable --enable-speech-input --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553 --disable-accelerated-video-decode --enable-gpu-async-worker-context --service-request-channel-token=1A43929672D83855494B00807247686A --renderer-client-id=3 --mojo-platform-channel-handle=1552 /prefetch:1 --eo_init_data=eo.temp.3168.3
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files\Google\Drive\googledrivesync.exe"
"C:\Program Files\Google\Drive\googledrivesync.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
taskeng.exe {61E03223-17C8-4274-AD87-D55045E24837}

"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --ran-launcher --started-from-shortcut
"C:\Program Files\Opera\64.0.3417.73\opera_crashreporter.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=64.0.3417.73 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x5d824598,0x5d8245a8,0x5d8245b4
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=gpu-process --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --gpu-preferences=KAAAAAAAAADgAAAgAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=346130080682702907 --mojo-platform-channel-handle=1140 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=utility --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --service-sandbox-type=network --enable-quic --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --service-request-channel-token=15778348368420905008 --mojo-platform-channel-handle=1408 /prefetch:8
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14954869179014848083 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2072 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=15435195711706964451 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2124 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=464864285670902921 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2548 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14337180439399311821 --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2728 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=416820851547513632 --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2752 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=12370080216274799151 --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2792 /prefetch:1
C:\Windows\system32\cmd.exe /d /c "C:\Program Files\Cold Turkey\CTMsgHostChrome.exe" chrome-extension://efnolkfmdbinpkbnfigocgfglnhahldj/ --parent-window=0 < \\.\pipe\chrome.nativeMessaging.in.991f72460dfe85e6 > \\.\pipe\chrome.nativeMessaging.out.991f72460dfe85e6
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14210400607030471088 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2800 /prefetch:1
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9958972052418507792 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2824 /prefetch:1
"C:\Program Files\Cold Turkey\CTMsgHostChrome.exe" chrome-extension://efnolkfmdbinpkbnfigocgfglnhahldj/ --parent-window=0
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4919765358002013249 --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3104 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10004050426093632334 --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2588 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=15196609713339916547 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3152 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11835315928978018707 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=13117173601846633882 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=531937853917627220 --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4224814255617251765 --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=4998327406842722911 --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3664 /prefetch:1
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10510390020628577804 --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2740 /prefetch:1
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Opera\64.0.3417.73\opera.exe" --type=renderer --field-trial-handle=1148,16464091501820464449,3614225889484154060,131072 --disable-features=SharedArrayBuffer --lang=cs --extension-process --enable-auto-reload --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-70598-ref:DNA-70598 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17373169763660847794 --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1
"C:\Users\HRABO~1\AppData\Local\Temp\scoped_dir1336_920488809\RSITx64 (1).exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01 205416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2012-10-01 2322576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01 139368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2012-10-01 1720976]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-01-25 525312]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-06-09 2799912]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IrisMini"=C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe [2018-07-02 485120]
""= []
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-05-19 9773272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [2012-01-05 75624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2017-05-19 9773272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount]
C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2019-04-14 735336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2011-12-21 392472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iCloudDrive]
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2019-01-15 110392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iCloudServices]
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2019-01-15 67384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2019-01-18 302904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-06-07 27742168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
C:\Users\Hraboš\AppData\Roaming\Spotify\Spotify.exe [2019-10-26 21218720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\Hraboš\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2017-07-18 3062560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~1\Office\OSA9.EXE [2017-07-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^powerTouch controlCenter.lnk]
C:\PROGRA~2\HOMAGG~1\FRAMEW~1\HOMAGG~1.EXE [2017-11-08 448512]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2019-09-24 227168]
""= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-12-21 390144]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2019-10-27 19:17:29 ----D---- C:\rsit
2019-10-27 19:17:29 ----D---- C:\Program Files\trend micro
2019-10-20 20:52:53 ----D---- C:\Program Files (x86)\Free Screen Recorder
2019-10-20 20:52:34 ----D---- C:\Users\Hraboš\AppData\Roaming\obs-studio
2019-10-20 20:51:55 ----D---- C:\Program Files\obs-studio
2019-10-12 12:33:20 ----D---- C:\Program Files (x86)\Apowersoft
2019-10-12 12:29:49 ----D---- C:\Users\Hraboš\AppData\Roaming\Apowersoft

======List of files/folders modified in the last 1 month======

2019-10-27 19:20:28 ----D---- C:\Windows\Temp
2019-10-27 19:20:06 ----D---- C:\ProgramData\Cold Turkey
2019-10-27 19:18:36 ----D---- C:\Users\Hraboš\AppData\Roaming\Spotify
2019-10-27 19:17:29 ----RD---- C:\Program Files
2019-10-26 15:50:25 ----A---- C:\Windows\Brownie.ini
2019-10-26 15:20:05 ----D---- C:\Users\Hraboš\AppData\Roaming\audacity
2019-10-26 14:57:53 ----D---- C:\Windows\System32
2019-10-26 14:57:53 ----D---- C:\Windows\inf
2019-10-26 14:57:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2019-10-26 09:27:16 ----SHD---- C:\Windows\Installer
2019-10-26 09:26:58 ----D---- C:\Windows\SysWOW64
2019-10-26 09:18:16 ----D---- C:\Windows
2019-10-26 09:12:55 ----A---- C:\Windows\SYSWOW64\log.txt
2019-10-25 21:30:57 ----D---- C:\Windows\system32\config
2019-10-25 21:20:25 ----SHD---- C:\System Volume Information
2019-10-25 19:56:12 ----D---- C:\Windows\system32\Tasks
2019-10-25 19:56:12 ----D---- C:\Program Files\Opera
2019-10-21 20:21:41 ----D---- C:\Windows\system32\catroot2
2019-10-20 20:52:53 ----RD---- C:\Program Files (x86)
2019-10-12 11:54:56 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2019-10-12 11:54:50 ----D---- C:\Windows\system32\Macromed
2019-10-12 11:54:48 ----D---- C:\Windows\SYSWOW64\Macromed
2019-10-07 20:53:51 ----D---- C:\Program Files (x86)\Google
2019-10-05 18:46:22 ----D---- C:\ProgramData\Package Cache

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avdevprot;avdevprot; C:\Windows\system32\DRIVERS\avdevprot.sys [2019-06-16 68152]
R0 avusbflt;avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [2019-03-04 35376]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2019-04-14 386680]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2019-09-29 175808]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2019-03-04 36072]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2019-09-29 220128]
R2 avnetflt;avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [2017-04-10 78600]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-12-21 12310112]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-21 317440]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-03-05 1857600]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-01-25 520192]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-06-09 1451056]
S3 au70nbu5;au70nbu5; C:\Windows\system32\drivers\au70nbu5.sys []
S3 iscFlash;iscFlash; \??\C:\SwSetup\sp60864\iscflashx64.sys [2011-01-19 49216]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2017-09-07 23040]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2017-09-07 54784]
S3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2013-07-24 36864]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 ysusb64;Yamaha Steinberg USB Audio; C:\Windows\system32\drivers\ysusb64.sys [2016-04-11 147392]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2019-09-10 88136]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [2019-10-17 483408]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\Antivirus\sched.exe [2019-10-17 483408]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2018-10-16 85304]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2019-09-24 586176]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 DraftSight API Service;DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [2018-10-31 123392]
R2 HomagGroupDiscoveryService;HOMAG Group DiscoveryService; C:\Program Files (x86)\Common Files\HOMAG Group\DiscoveryService\HomagGroup.Services.Discovery.exe [2017-09-04 20992]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-29 13592]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-07-23 268824]
R2 NamingService;TAO Naming Service; C:\Windows\Homag\NT_Naming_Service.exe [2012-04-23 1615360]
R2 NotifyService;TAO Notify Service; C:\Windows\Homag\NT_Notify_Service.exe [2012-04-12 2846720]
R2 occisrs;HOMAG Group occi Server Registry Service; C:\Program Files (x86)\Homag Group\occi\occisrs.exe [2014-12-04 1316928]
R2 Power_a17007;Power_a17007; C:\Program Files\Cold Turkey\\ServiceHub.Power.exe [2018-11-02 43720]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2011-01-25 296448]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-07-23 2320920]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [2019-10-17 1209328]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [2019-09-29 500272]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2018-03-26 107592]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2018-03-26 128584]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-31 153168]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-08-17 3148128]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-04-05 317400]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2019-10-12 335416]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2019-01-10 1595400]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.70\elevation_service.exe [2019-10-20 1110512]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-31 153168]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2019-01-18 658232]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-08-17 2168672]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-07-18 1608480]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-03-26 52832]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]

-----------------EOF-----------------

Ahoj

V logu (sice RSIT log nie je az tak dokladny ako FRST, ale nutne minimum ukazuje) zatial nevidim nic skodlive ani nic co by toto malo sposobovat. Zatial odhadujem, ze sa jedna skor o HW chybu. Ak je to mozne, odporucam klavesnicu otestovat na inom PC (alebo na tomto PC vyskusat inu klavesnicu).

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Nechaj zaskrtnute vsetky nalezy
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

Díky za rychlou reakci!

Tak to je zajímavé. Odinstaloval jsem nějaké starší programy, co už nepoužívám a vypadá to, že už je to v pohodě. Pokud mám ještě nějaké viry, tak budu samozřejmě rád, když to dokončíme a zbavíme se jich

V alwarebytes jsem dal nějaké položky do karantýny, tak snad je to ok.

tady je log:

# -------------------------------
# Malwarebytes AdwCleaner 7.4.2.0
# -------------------------------
# Build: 10-21-2019
# Database: 2019-10-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 10-27-2019
# Duration: 00:00:01
# OS: Windows 7 Home Premium
# Cleaned: 8
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Conduit
Deleted HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\AlcoholAutomount
Deleted HKLM\Software\Wow6432Node\Conduit

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.HPMediaSmart Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BCE0692-FD80-49B7-89D7-C74E8713B9FF}
Deleted Preinstalled.HPMediaSmart Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MirageAgent
Deleted Preinstalled.HPMediaSmart Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
Deleted Preinstalled.HPMediaSmart Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{01FB4998-33C4-4431-85ED-079E3EEFE75D}
Deleted Preinstalled.HPMediaSmart Task C:\Windows\System32\Tasks\MIRAGEAGENT


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner_Debug.log - [28038 octets] - [27/10/2019 22:34:44]
AdwCleaner[S00].txt - [2224 octets] - [27/10/2019 22:35:07]
AdwCleaner[S01].txt - [2286 octets] - [27/10/2019 22:35:32]
AdwCleaner[S02].txt - [2347 octets] - [27/10/2019 22:35:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########

PC samozrejme mozme precistit od zbytocnosti. Poprosim o obidva logy z FRST (FRST.txt a Addition.txt) podla tohto navodu: https://forum.viry.cz/viewtopic.php?f=13&t=154679

Vedel by si povedat aj presne ake programy si odinstaloval?

Zdravím,

nějak jsem byl velmi zaneprázdněn, tak se k tomu vracím až teď...

Ty programy si bohužel už nepamatuji. Bylo toho víc a ni jsem nevěděl, na co jsou. Možná i nějaké appky atd...

Tady jsem udělal ty logy:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-11-2019
Ran by Hraboš (administrator) on HRABOSS (Hewlett-Packard HP Pavilion g6 Notebook PC) (12-11-2019 21:55:57)
Running from C:\Users\Hraboš\Desktop
Loaded Profiles: Hraboš (Available Profiles: Hraboš)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 8 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Dassault Systèmes) [File not signed] C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
(Homag Group AG -> Homag Group AG) C:\Program Files (x86)\HOMAG Group\occi\occisrs.exe
(HOMAG Group AG) [File not signed] C:\Program Files (x86)\Common Files\Homag Group\DiscoveryService\HomagGroup.Services.Discovery.exe
(Homag Holzbearbeitungssysteme AG) [File not signed] C:\Windows\Homag\NT_Naming_Service.exe
(Homag Holzbearbeitungssysteme AG) [File not signed] C:\Windows\Homag\NT_Notify_Service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Iris Technologies EOOD -> IrisTech) C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\64.0.3417.92\opera_crashreporter.exe
(Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [525312 2011-01-25] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2011-06-09] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [228728 2019-10-17] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [IrisMini] => C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe [485120 2018-07-02] (Iris Technologies EOOD -> IrisTech)
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9773272 2017-05-19] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\MountPoints2: {048c4e86-5e96-11e9-98b8-2c27d7dffe2c} - F:\STARTUP.EXE
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.97\Installer\chrmstp.exe [2019-11-06] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2019-05-03] (Adobe Inc. -> Adobe Systems, Inc.)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {32793126-3951-44CC-BD64-DE00352C5E56} - System32\Tasks\Opera scheduled Autoupdate 1511381552 => C:\Program Files\Opera\launcher.exe [1357848 2019-11-05] (Opera Software AS -> Opera Software)
Task: {7D60630D-B589-4ACF-9645-A45D232C1737} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [375416 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {7F276CDA-48ED-4A89-A8ED-E5514580CC84} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {9A8BFCFF-2454-4BEE-A508-52131C5D71BD} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2759288 2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {A165C5E1-D09F-4437-83BF-38CD4FDB905D} - System32\Tasks\{2FE79D50-B343-49BF-A6A1-65BDA6158450} => C:\Windows\system32\pcalua.exe -a C:\Users\Hraboš\Desktop\sp53663.exe -d C:\Users\Hraboš\Desktop
Task: {A1760654-2B63-4BA8-A8EE-4CEF3AC97E42} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-10-12] (Adobe Inc. -> Adobe)
Task: {A36C8C5B-DFFF-461A-AAB3-CD1AC8581E1F} - System32\Tasks\AdobeAAMUpdater-1.0-Hraboss-Hraboš => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {A90B345E-3FCF-4149-B26C-12C832AC4CD0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)
Task: {B7A78CB6-4F57-4B36-BE78-B88E925A0B47} - System32\Tasks\{41B400C2-179E-4FA6-978F-1E705DE68B88} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hraboš\Desktop\Nová složka\Pharaoh\Setup.exe" -d "C:\Users\Hraboš\Desktop\Nová složka\Pharaoh"
Task: {D20678AC-63DD-4E91-A546-8DE960EFEA15} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1642672 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2CA7ED1-F723-4F35-95B0-6825E458B1DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [7619288 2017-05-19] (Piriform Ltd -> Piriform Ltd)
Task: {D8FAA245-5EEF-4001-AC9F-E620E64FD562} - System32\Tasks\{B585841D-ED73-4599-9946-7D5618D50494} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hraboš\Desktop\sp55031 (1).exe" -d C:\Users\Hraboš\Desktop
Task: {E08CF47D-8109-403C-8D55-6AE7819E570C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_270_pepper.exe [1453112 2019-10-12] (Adobe Inc. -> Adobe)
Task: {E3A1FA23-2957-430D-8721-E96DFE52F9FE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [375416 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {F10B6999-A710-4092-B90B-1A063D017AE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{07782E82-7C1C-4EDD-9860-7834BA0FA721}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{49753BAD-4447-4E83-8027-8969D914AAB5}: [DhcpNameServer] 10.143.128.1 10.143.128.2
Tcpip\..\Interfaces\{50F6F971-7112-424C-9763-FF94B6C0EC17}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-05] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-05] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-11] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems Incorporated -> Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default [2019-11-12]
CHR Extension: (Prezentace) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-06-03]
CHR Extension: (Dokumenty) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-06-03]
CHR Extension: (Disk Google) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-06-03]
CHR Extension: (YouTube) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-06-03]
CHR Extension: (Tabulky) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-06-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-04-01]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2019-04-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-08]
CHR Extension: (Gmail) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-10-26]
CHR HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

Opera:
=======
OPR Notifications: hxxps://calendar.google.com; hxxps://www.dobre-knihy.cz
OPR Extension: (Easy Youtube Video Downloader For Opera) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\acghaimmohdiildbgkbcjfmkdgglpofi [2018-04-28]
OPR Extension: (AdBlock) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2017-06-04]
OPR Extension: (Cold Turkey) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\efnolkfmdbinpkbnfigocgfglnhahldj [2019-02-13]
OPR Extension: (HD Youtube Downloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\epmeclcefjojilkhkhlegeamnlddnphn [2018-04-28]
OPR Extension: (Night Mode Pro) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\iamhigjememoaanilbmiekcmfmpldecn [2019-08-23]
OPR Extension: (Translate) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2017-05-31]
OPR Extension: (YouTube Downloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\kclijeogghhkmenkommbnjobhnndpfba [2018-04-28]
OPR Extension: (YouTube Video and Audio Downloader (Dev Edt.)) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\khgbdhkpcapllhgfekjegcinegfhjbmi [2019-11-12]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1207984 2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [484768 2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [484768 2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [567704 2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [591872 2019-10-17] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
R2 DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [123392 2018-10-31] (Dassault Systèmes) [File not signed]
R2 HomagGroupDiscoveryService; C:\Program Files (x86)\Common Files\HOMAG Group\DiscoveryService\HomagGroup.Services.Discovery.exe [20992 2017-09-04] (HOMAG Group AG) [File not signed]
R2 NamingService; C:\Windows\Homag\NT_Naming_Service.exe [1615360 2012-04-23] (Homag Holzbearbeitungssysteme AG) [File not signed]
R2 NotifyService; C:\Windows\Homag\NT_Notify_Service.exe [2846720 2012-04-12] (Homag Holzbearbeitungssysteme AG) [File not signed]
R2 occisrs; C:\Program Files (x86)\Homag Group\occi\occisrs.exe [1316928 2014-12-04] (Homag Group AG -> Homag Group AG)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2168672 2017-08-17] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3148128 2017-08-17] (Electronic Arts, Inc. -> Electronic Arts)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [296448 2011-01-25] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [68152 2019-06-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [222680 2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [175808 2019-09-29] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36072 2019-03-04] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-04-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [35376 2019-03-04] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 iscFlash; C:\SwSetup\sp60864\iscflashx64.sys [49216 2011-01-19] (Insyde Software Corp. -> Insyde Software)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2017-09-07] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2019-04-14] (Disc Soft Ltd -> Duplex Secure Ltd.)
R3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [520192 2011-01-25] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2017-09-07] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
U3 aql94twk; C:\Windows\System32\Drivers\aql94twk.sys [0 0000-00-00] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-11-12 21:55 - 2019-11-12 21:56 - 000024391 _____ C:\Users\Hraboš\Desktop\FRST.txt
2019-11-12 21:49 - 2019-11-12 21:56 - 000000000 ____D C:\FRST
2019-11-12 21:48 - 2019-11-12 21:48 - 002260480 _____ (Farbar) C:\Users\Hraboš\Desktop\FRST64.exe
2019-10-31 18:17 - 2019-10-31 18:17 - 000081600 _____ C:\Users\Hraboš\Downloads\Vyplň-mě.pdf
2019-10-29 20:16 - 2019-10-29 20:16 - 000425310 _____ C:\Users\Hraboš\Downloads\popisky_A3.pdf
2019-10-29 20:01 - 2019-10-29 20:01 - 000055775 _____ C:\Users\Hraboš\Downloads\Barpivo_A3 (1).pdf
2019-10-29 19:54 - 2019-10-29 20:17 - 000010206 _____ C:\Users\Hraboš\Downloads\Bary-NL2019.xlsx
2019-10-27 22:34 - 2019-10-27 22:37 - 000000000 ____D C:\AdwCleaner
2019-10-27 22:33 - 2019-10-27 22:33 - 007622344 _____ (Malwarebytes) C:\Users\Hraboš\Desktop\adwcleaner_7.4.2.exe
2019-10-27 21:20 - 2019-10-27 21:20 - 000055775 _____ C:\Users\Hraboš\Downloads\Barpivo_A3.pdf
2019-10-27 19:27 - 2019-10-27 19:27 - 000000012 _____ C:\Windows\Brownie.ini
2019-10-27 19:17 - 2019-10-27 19:20 - 000000000 ____D C:\Program Files\trend micro
2019-10-27 19:17 - 2019-10-27 19:17 - 000000000 ____D C:\rsit
2019-10-26 15:04 - 2019-10-26 15:05 - 084712004 _____ C:\Users\Hraboš\Downloads\modrehory_2019_live (1).zip
2019-10-26 09:19 - 2019-10-26 09:19 - 000007336 _____ C:\Users\Hraboš\Documents\cc_20191026_101909.reg
2019-10-20 20:52 - 2019-11-11 23:07 - 000000000 ____D C:\Users\Hraboš\AppData\Roaming\obs-studio
2019-10-20 20:52 - 2019-10-20 20:57 - 000000000 ____D C:\Program Files (x86)\Free Screen Recorder
2019-10-20 20:52 - 2019-10-20 20:52 - 000605966 _____ (Nbxsoft Software Development ) C:\Users\Hraboš\Downloads\screenrecorder.exe
2019-10-20 20:52 - 2019-10-20 20:52 - 000001037 _____ C:\Users\Hraboš\Desktop\Free Screen Recorder.lnk
2019-10-20 20:52 - 2019-10-20 20:52 - 000001003 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2019-10-20 20:52 - 2019-10-20 20:52 - 000001003 _____ C:\ProgramData\Desktop\OBS Studio.lnk
2019-10-20 20:52 - 2019-10-20 20:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2019-10-20 20:52 - 2019-10-20 20:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Screen Recorder
2019-10-20 20:51 - 2019-10-20 20:52 - 000000000 ____D C:\Program Files\obs-studio
2019-10-20 20:51 - 2019-10-20 20:51 - 074969224 _____ (obsproject.com) C:\Users\Hraboš\Downloads\OBS-Studio-24.0.3-Full-Installer-x64.exe
2019-10-20 10:34 - 2019-10-20 10:34 - 000093946 _____ C:\Users\Hraboš\Downloads\A4_program_2019_FINAL.pdf
2019-10-13 19:00 - 2019-10-13 19:00 - 000274545 _____ C:\Users\Hraboš\Downloads\eTicket_73091.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-11-12 20:02 - 2009-07-14 16:18 - 000668376 _____ C:\Windows\system32\perfh005.dat
2019-11-12 20:02 - 2009-07-14 16:18 - 000141004 _____ C:\Windows\system32\perfc005.dat
2019-11-12 20:02 - 2009-07-14 06:13 - 001467946 _____ C:\Windows\system32\PerfStringBackup.INI
2019-11-12 20:02 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2019-11-12 16:36 - 2019-01-21 20:27 - 000000000 ____D C:\Users\Hraboš\AppData\Local\Spotify
2019-11-12 16:17 - 2019-01-21 20:27 - 000000000 ____D C:\Users\Hraboš\AppData\Roaming\Spotify
2019-11-12 16:05 - 2017-05-31 17:52 - 000000000 ____D C:\Users\Hraboš\AppData\Local\Adobe
2019-11-12 16:01 - 2009-07-14 05:45 - 000014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-11-12 16:01 - 2009-07-14 05:45 - 000014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-11-12 15:53 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-11-11 22:46 - 2017-05-31 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-11-11 22:45 - 2017-05-31 18:05 - 000222680 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2019-11-11 20:46 - 2017-09-23 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2019-11-11 20:34 - 2009-07-14 06:08 - 000032624 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2019-11-06 21:31 - 2018-06-03 21:47 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-11-06 21:31 - 2018-06-03 21:47 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-11-06 21:31 - 2018-06-03 21:47 - 000002183 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2019-11-06 21:25 - 2017-11-22 21:12 - 000003832 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1511381552
2019-11-06 21:25 - 2017-05-31 15:14 - 000000000 ____D C:\Program Files\Opera
2019-11-05 18:38 - 2017-05-31 15:26 - 000003388 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2019-11-05 18:38 - 2017-05-31 15:26 - 000003260 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2019-11-05 18:38 - 2017-05-31 15:26 - 000000000 ____D C:\Program Files (x86)\Google
2019-10-30 22:06 - 2017-09-18 15:47 - 000003292 _____ C:\Windows\system32\Tasks\Avira_Antivirus_Systray
2019-10-29 18:39 - 2017-05-31 17:55 - 000000000 ____D C:\ProgramData\Package Cache
2019-10-27 19:29 - 2017-05-30 18:27 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-10-27 19:28 - 2018-05-28 19:40 - 000000000 ____D C:\Users\Hraboš\AppData\Local\Deployment
2019-10-27 19:27 - 2018-06-05 15:54 - 000000034 _____ C:\Windows\SysWOW64\bd2030.dat
2019-10-27 19:27 - 2018-06-05 15:54 - 000000011 _____ C:\Windows\BRVIDEO.INI
2019-10-27 19:25 - 2018-11-11 13:03 - 000000000 ____D C:\ProgramData\Cold Turkey
2019-10-26 15:20 - 2017-06-04 20:07 - 000000000 ____D C:\Users\Hraboš\AppData\Roaming\audacity
2019-10-26 09:27 - 2017-07-02 11:58 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-10-26 09:16 - 2017-05-31 15:27 - 000000000 ___RD C:\Users\Hraboš\Disk Google
2019-10-21 21:00 - 2017-09-14 17:15 - 000000000 ____D C:\Users\Hraboš\Documents\Soubory aplikace Outlook
2019-10-15 17:07 - 2017-06-11 08:56 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task

==================== Files in the root of some directories ========

2017-01-23 16:29 - 2017-01-23 16:29 - 000977080 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\BppIf60.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60ara.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60bul.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60ces.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000108736 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60chs.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60dan.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\BppIf60DEU.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60ell.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60enu.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60esp.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60est.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60fas.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60fin.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60fra.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60heb.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60hrv.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60hun.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60ita.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000112832 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60jpn.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60lav.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60lit.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60nld.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60nor.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60pol.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60ptg.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60ron.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000121024 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60rus.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60slk.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60slv.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60sve.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000116928 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\bppif60tur.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 002123968 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\CadData60.ocx
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60ara.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60bul.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60ces.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60chs.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60dan.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\CadData60DEU.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60ell.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60enu.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60esp.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60est.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60fas.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60fin.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60fra.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60heb.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60hrv.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60hun.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60ita.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60jpn.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60lav.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60lit.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60nld.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60nor.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60pol.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60ptg.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60ron.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60rus.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60slk.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60slv.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60sve.dll
2017-01-23 16:30 - 2017-01-23 16:30 - 000059592 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\caddata60tur.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 001104056 _____ (Weeke Bohrsysteme) C:\Program Files (x86)\Common Files\MprForm.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000325824 _____ (WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\MsgLog60.ocx
2017-01-23 16:29 - 2017-01-23 16:29 - 000104640 _____ (Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\Optimize60.dll
2017-01-23 16:29 - 2017-01-23 16:29 - 000358584 _____ (Homag Group, WEEKE Bohrsysteme GmbH) C:\Program Files (x86)\Common Files\Tree60.ocx
2019-05-07 17:37 - 2019-05-07 17:37 - 000000132 _____ () C:\Users\Hraboš\AppData\Roaming\Formát PNG Adobe CC – předvolby
2019-02-25 20:22 - 2019-02-25 20:22 - 000001111 _____ () C:\Users\Hraboš\AppData\Local\gamma_ramp.reg
2017-05-30 20:15 - 2017-06-19 20:01 - 000007598 _____ () C:\Users\Hraboš\AppData\Local\Resmon.ResmonCfg
2018-11-12 17:42 - 2018-11-12 17:42 - 000000000 _____ () C:\Users\Hraboš\AppData\Local\{02F1F1E9-B946-4849-879F-C1B9EE88F307}
2019-04-08 04:49 - 2019-04-08 04:49 - 000000000 _____ () C:\Users\Hraboš\AppData\Local\{8999F826-7799-46C2-BD61-7CD9801D7D73}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2019-11-10 18:58
==================== End of FRST.txt ========================


----------------------------------------------
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2019
Ran by Hraboš (12-11-2019 21:57:00)
Running from C:\Users\Hraboš\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2017-05-30 16:40:50)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3223790122-1854364240-2541962161-500 - Administrator - Disabled)
Guest (S-1-5-21-3223790122-1854364240-2541962161-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3223790122-1854364240-2541962161-1002 - Limited - Enabled)
Hraboš (S-1-5-21-3223790122-1854364240-2541962161-1000 - Administrator - Enabled) => C:\Users\Hraboš

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.021.20049 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.270 - Adobe)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
AIDA32 v3.93 (HKLM-x32\...\AIDA32_is1) (Version: - Tamas Miklos)
AMD Catalyst Install Manager (HKLM\...\{70F55D70-7E5F-6291-4924-2F7640F19BFE}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.)
Apowersoft Online Launcher version 1.7.5 (HKLM-x32\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.5 - APOWERSOFT LIMITED)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
Avira (HKLM-x32\...\{d1005689-1fdc-458f-956d-498db20c18df}) (Version: 1.2.138.20753 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{DA7052FA-B589-48D9-BF78-0A5AC11CB59A}) (Version: 1.2.138.20753 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.1911.1648 - Avira Operations GmbH & Co. KG)
Backup and Sync from Google (HKLM\...\{93EBD8BA-7A14-4636-8F1F-E929ADF2C3A9}) (Version: 3.47.7654.0300 - Google, Inc.)
Basic FX Suite (HKLM\...\{C22B4160-10E1-409E-9407-B643D5000AF5}) (Version: 1.0.1 - Yamaha Corporation) Hidden
Basic FX Suite (HKLM-x32\...\InstallShield_{C22B4160-10E1-409E-9407-B643D5000AF5}) (Version: 1.0.1 - Yamaha Corporation)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.71.1081 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)
DraftSight 2018 SP3 x64 (HKLM\...\{EBF04C29-4524-4A5E-AC86-2D534AC3C3B9}) (Version: 18.3.0105 - Dassault Systemes)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.9.3.8190 - Steinberg Media Technologies GmbH)
ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{B18BEB15-A9DA-43D7-BAE1-C6C67484C2C0}) (Version: 5.1.1 - Hewlett-Packard)
Figma (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Figma) (Version: 65.1.0 - Figma, Inc.)
FLAC to ALAC (HKLM-x32\...\{5E34A746-E221-4263-AECF-FDACB1DA15B7}_is1) (Version: - flactoalac.com)
Free Screen Recorder v2.9 (HKLM-x32\...\Free Screen Recorder_is1) (Version: 2.9 - Nbxsoft Software Development)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 78.0.3904.97 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.341 - Google LLC) Hidden
HOMAG CNC PC8x, M01, PC86, HOMAG BXX PC86 POWERTOUCH (PC86LI) (HKLM-x32\...\{A49748A4-8828-457A-8F57-68A1DEF693A9}) (Version: 300.0.71.0 - HOMAG Group AG)
HOMAG Group CadCamCheck (HKLM-x32\...\{FECD532A-BAA4-4A0A-B360-E49C9226524A}) (Version: 1.0.2.0 - HOMAG Group AG)
HOMAG Group ConnectionManager (HKLM-x32\...\{E1E00E40-B646-4C2A-A7EF-78F423FB0D43}) (Version: 1.1.3.0 - HOMAG Group AG)
HOMAG Group Framework (HKLM-x32\...\{865B5BEF-65F3-4128-A2E7-1DDDACA7A2F7}) (Version: 1.18.5.0 - HOMAG Group AG)
HOMAG Group InstallationSuite (HKLM-x32\...\{558AB361-3356-4DD1-B658-E9F0AA72232B}) (Version: 2.0.55.0 - HOMAG Group AG)
HOMAG Group LicenseServer (HKLM-x32\...\{2748E6D6-844F-4635-A621-535C1D86FE02}) (Version: 2.3.9.6 - HOMAG Group AG)
HOMAG Group PdfView (HKLM-x32\...\{70A8624E-FC42-4188-B65A-1B6882452449}) (Version: 1.1.22.0 - HOMAG Group AG)
HOMAG Group PrjxManager (HKLM-x32\...\{1597EBBA-0119-4DBC-B508-8F5F06151DF3}) (Version: 1.0.246.0 - HOMAG Group AG)
HOMAG Group SIM_MotionClient (HKLM-x32\...\{3CE3A2E3-F293-4BCA-B43D-09142F319E87}) (Version: 1.4.111.0 - HOMAG Group AG)
HOMAG Group SIM_TimeClient (HKLM-x32\...\{1D95D0E3-9B02-4DF4-9D1C-4CBEF30EAAE4}) (Version: 1.1.110.0 - HOMAG Group AG)
HOMAG Group ToolManager (HKLM-x32\...\{1A0735A1-3FBC-4BF1-9C8F-45FF30EF5048}) (Version: 1.9.8.0 - HOMAG Group AG)
HOMAG Group Vilma (HKLM-x32\...\{6B8D3DF7-5392-4BFC-8312-C4354DD9515D}) (Version: 2.4.99.0 - HOMAG Group AG)
HOMAG Group woodNest Basic (HKLM-x32\...\{2E78D224-2C37-48EA-83E8-47D2D2F66C75}) (Version: 2.0.14.0 - HOMAG Group AG)
HOMAG Group woodWOP 7 (HKLM-x32\...\{B5E3A51C-9F7E-4020-B69A-2F279D9FDE99}) (Version: 7.1.94.15 - HOMAG Group AG)
Homag MDat PC86, M01, HOMAG BXX PC86 POWERTOUCH (PC86LI) (HKLM-x32\...\{E6F4E2BC-6892-43CC-8AD4-9BCAF16B0D16}) (Version: 1.0.28.0 - HOMAG Group AG)
HOMAG NG40PC8x, M01, PC86, HOMAG BXX PC86 POWERTOUCH (PC86LI) (HKLM-x32\...\{F3567FAD-618E-42DF-874E-6838991FA1B1}) (Version: 7.0.318.1 - HOMAG Group AG)
HOMAG SIM_Models3d, M01, HOMAG BXX PC86 POWERTOUCH (PC86LI) (HKLM-x32\...\{EE0A8651-AF84-41EB-8475-B979388D2E71}) (Version: 1.0.100.0 - HOMAG Group AG)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6324.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2559 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
Iris mini - Software for eye protection (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\IrisTech Iris mini) (Version: "0.4.0" - "IrisTech")
iTunes (HKLM\...\{8C125166-94A1-4721-84CC-C9739E6EA8A7}) (Version: 12.9.3.3 - Apple Inc.)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Live 8.2.2 (HKLM-x32\...\Live 8.2.2) (Version: - )
MediaLooks QuickTime Source 1.7.1.7 (DirectShow Filter) (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\MLQTSource) (Version: 1.7.1.7 - MediaLooks)
Microsoft .NET Framework 4.7.2 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Office 2000 Premium (HKLM-x32\...\{00000405-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4454.1004 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{46EA439E-2D16-49B6-AA80-00DE992FE7CE}) (Version: 7601 - Microsoft)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 24.0.3 - OBS Project)
Opera Stable 64.0.3417.92 (HKLM-x32\...\Opera 64.0.3417.92) (Version: 64.0.3417.92 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.4.17.36908 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PDF Settings CC (HKLM-x32\...\{1FBAE18D-4DE4-47AA-83EC-D1B046F262DC}) (Version: 12.0 - Adobe Systems Incorporated) Hidden
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Podpora aplikací Apple (64bitová) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
PrjMgr32 (HKLM-x32\...\{F1F93D17-C87B-4A22-947C-0374536A1CE6}) (Version: 1.0.73.0 - Homag Group)
Ralink RT5390 802.11b/g/n WiFi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 3.2.12.0 - Ralink)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Skype™ 7.37 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.37.103 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Spotify) (Version: 1.1.18.611.g9cc9bdc9 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Steinberg UR44 Applications (HKLM\...\{A4117569-BA6B-4A48-9664-955A6E4D75CA}) (Version: 2.1.1 - Yamaha Corporation) Hidden
Steinberg UR44 Applications (HKLM-x32\...\InstallShield_{A4117569-BA6B-4A48-9664-955A6E4D75CA}) (Version: 2.1.1 - Yamaha Corporation)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.11.0 - Synaptics Incorporated)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
woodWOP DXF Import (HKLM-x32\...\{3D3417D8-F73A-45C2-87C2-2640E295001A}) (Version: 5.0.52.3 - HOMAG Group AG)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3223790122-1854364240-2541962161-1000_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-10-24] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-10-24] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-10-24] (Google LLC -> Google)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-10-24] (Google LLC -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlex.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlEx64.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-10-24] (Google LLC -> Google)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2019-11-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2017-05-31 16:19 - 2011-04-29 23:28 - 000059904 _____ () [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2017-12-25 10:33 - 2017-12-25 10:33 - 000172544 _____ () [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\84842098d2f03a96f67a190bd3de8940\IsdiInterop.ni.dll
2017-05-31 15:42 - 2010-03-03 13:37 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2017-06-04 14:03 - 2016-10-04 15:51 - 000076800 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2017-12-25 10:33 - 2017-12-25 10:33 - 000014336 _____ (Intel Corp.) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\7087986a1294e20a2372a0c9a6ce1488\IAStorCommon.ni.dll
2017-05-31 15:42 - 2010-03-03 13:37 - 000077824 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\DTMessageLib.dll
2017-05-31 15:42 - 2010-03-03 13:32 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
2017-05-31 16:19 - 2011-04-29 23:28 - 000007168 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IAStorDataMgr.resources.dll
2017-05-31 16:19 - 2011-04-29 23:19 - 000278528 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI.dll
2017-12-25 10:33 - 2017-12-25 10:33 - 000225792 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\21a414f4855b49d2e13c5e5b5910bce3\IAStorDataMgr.ni.dll
2017-12-25 10:33 - 2017-12-25 10:33 - 000492544 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\e7e3902987fea327bf0cd6e25ef958c0\IAStorUtil.ni.dll
2018-03-26 12:58 - 2018-03-26 12:58 - 000112128 _____ (Microsoft Corporation) [File not signed] C:\Windows\Microsoft.Net\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
2017-05-05 00:14 - 2017-05-05 00:14 - 001257984 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\LIBEAY32.dll
2017-05-05 00:14 - 2017-05-05 00:14 - 000291840 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\ssleay32.dll
2018-10-31 07:34 - 2018-10-31 07:34 - 005584896 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Dassault Systemes\DraftSight\bin\Qt5Core.dll
2018-10-31 07:34 - 2018-10-31 07:34 - 001065472 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Dassault Systemes\DraftSight\bin\Qt5Network.dll
2018-10-31 07:34 - 2018-10-31 07:34 - 000193536 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\Dassault Systemes\DraftSight\bin\Qt5Xml.dll
2015-10-12 20:19 - 2015-10-12 20:19 - 000037888 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\bearer\qgenericbearer.dll
2015-10-12 20:19 - 2015-10-12 20:19 - 000039936 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\bearer\qnativewifibearer.dll
2015-10-12 20:20 - 2015-10-12 20:20 - 000991232 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\platforms\qwindows.dll
2017-12-25 13:52 - 2017-12-25 13:52 - 004621312 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Core.dll
2015-10-12 20:15 - 2015-10-12 20:15 - 004860928 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Gui.dll
2015-10-12 20:14 - 2015-10-12 20:14 - 000845312 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Network.dll
2015-10-12 20:17 - 2015-10-12 20:17 - 004420096 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Widgets.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> c:\Program Files (x86)\AMD APP\bin\x86_64;c:\Program Files (x86)\AMD APP\bin\x86;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Skype\Phone\;%SYSTEMROOT%\Homag;C:\Program Files (x86)\Smart Projects\IsoBuster
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Hraboš\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^powerTouch controlCenter.lnk => C:\Windows\pss\powerTouch controlCenter.lnk.CommonStartup
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: iCloudDrive => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
MSCONFIG\startupreg: iCloudServices => "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => C:\Users\Hraboš\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
MSCONFIG\startupreg: Spotify Web Helper => C:\Users\Hraboš\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{2251D59C-6123-47CD-9D00-8D29840003E8}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{BFD6B0F3-8E59-4D16-ADF1-04A5B6A6493B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{2C49689C-E381-45FE-A4BB-794FD64424EE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4B231A43-C255-472F-AEA6-5855457541FB}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B2A92C23-B5A7-4811-8730-F5D65530BAB6}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0C3C8861-B5DB-4E51-931B-8D7BFBB3C77B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FF761BF8-9675-471A-A951-37F1956D51E8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1C1401AB-E811-4860-A715-CF92238E19AD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{15D6377D-3B15-4A7F-A631-C43A860F35FF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{5B429952-3880-4C85-8F05-70330EB12AA7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{A0568FCB-607B-48CB-A878-7D9C49016812}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{3253DB67-0418-4BAE-BE04-ADF9BF806E46}] => (Allow) C:\Program Files\Cold Turkey\Cold Turkey Blocker.exe No File
FirewallRules: [{D5C6A90A-2ECF-4378-88DA-5DFB18FF8944}] => (Allow) C:\Program Files\Cold Turkey\Cold Turkey Blocker.exe No File
FirewallRules: [TCP Query User{9A50B0A6-FFD8-40F8-BA54-35363C562748}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{B9FCD067-CB2D-4870-92D1-E5E9A0F7EA73}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{2A3039FB-5751-46F4-8E7E-C97375979CBB}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{FB1377C4-E558-446D-823C-3FD19AA6B89E}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1C3A9F40-C5FB-4597-9CDD-B347BAB6FF20}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D349C0CB-5245-4B8D-9694-3191E692F229}] => (Allow) C:\Program Files (x86)\Homag Group\LicenseServer\LicenseServer.exe (Homag Group AG -> HOMAG Group AG)
FirewallRules: [{C683C6FD-CD74-4F09-9129-CCBE264639E5}] => (Allow) C:\Program Files (x86)\Common Files\HOMAG Group\DiscoveryService\HomagGroup.Services.Discovery.exe (HOMAG Group AG) [File not signed]
FirewallRules: [{F64C7DD8-9C02-42EF-914A-CB32044B7537}] => (Allow) C:\Program Files (x86)\HOMAG Group\Framework\HomagGroup.StarterProcess.UI.exe (HOMAG Group AG) [File not signed]
FirewallRules: [{E6647487-2244-4088-88E8-1D9A23CC274B}] => (Allow) C:\Program Files (x86)\HOMAG Group\Framework\HomagGroup.Framework.Application.UI.exe (HOMAG Group AG) [File not signed]
FirewallRules: [{20B4D5FD-20C2-4598-9865-93A59A70E902}] => (Allow) C:\Program Files (x86)\HOMAG Group\ToolManager\HomagGroup.ToolManager.Server.exe (Homag Group AG -> HOMAG Group AG)
FirewallRules: [TCP Query User{3DBE2682-16D2-4C99-B17F-84634AE89E26}C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe] => (Block) C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe (HOMAG Group AG) [File not signed]
FirewallRules: [UDP Query User{3E5B9D40-ADD8-485C-9B35-8CD006F222C1}C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe] => (Block) C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe (HOMAG Group AG) [File not signed]
FirewallRules: [TCP Query User{AEF78F13-5512-42DC-80A7-6348A70744F8}C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe] => (Block) C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe (HOMAG Group AG) [File not signed]
FirewallRules: [UDP Query User{58D8F01B-BB63-4F11-97AB-BBEA9BB01706}C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe] => (Block) C:\program files (x86)\homag group\framework\homaggroup.framework.application.office.ui.exe (HOMAG Group AG) [File not signed]
FirewallRules: [{AF0EEE33-BCE2-45B4-A617-164560ED3EF9}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{643AAC99-D20B-4931-B8A8-392141AA947B}] => (Allow) C:\Users\Hraboš\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{81BEC03C-3A47-4534-B301-EC34C461053D}] => (Allow) C:\Users\Hraboš\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{19102D5A-388D-46F0-983C-9C44D5298085}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe No File
FirewallRules: [{C26CD453-2561-4D16-9E38-09D9D4B98430}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe No File
FirewallRules: [{A3E90A59-2A79-42B5-8C3E-84083B301F2B}] => (Allow) C:\Program Files\Opera\64.0.3417.83\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{45803424-BE84-479B-80A2-76D873E0932B}] => (Allow) C:\Program Files\Opera\64.0.3417.92\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{765877D9-E263-44AE-8969-BB5A6FFEBC2C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

16-10-2019 17:33:13 Naplánovaný kontrolní bod
25-10-2019 21:20:15 Naplánovaný kontrolní bod
27-10-2019 19:28:31 Removed Bonjour
27-10-2019 19:29:02 Removed Yamaha Steinberg USB Driver
27-10-2019 22:37:46 AdwCleaner_BeforeCleaning_27/10/2019_22:37:46
07-11-2019 18:20:11 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

Name: Zařízení PCI
Description: Zařízení PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (11/12/2019 04:04:56 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (11/12/2019 03:54:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/12/2019 03:54:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/11/2019 08:35:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/11/2019 08:35:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/11/2019 03:42:35 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (11/11/2019 03:33:11 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (11/11/2019 03:33:11 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (11/12/2019 08:49:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535

Error: (11/12/2019 08:49:20 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (11/12/2019 08:49:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535

Error: (11/12/2019 08:49:20 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (11/12/2019 08:49:19 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535

Error: (11/12/2019 08:49:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (11/12/2019 08:49:20 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Protokol PNRP (Peer Name Resolution Protocol) nebylo možné spustit, protože se nezdařilo vytvoření nové identity. Kód chyby: 0x80630801.

Error: (11/12/2019 08:49:20 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Protokol PNRP (Peer Name Resolution Protocol) nebylo možné spustit, protože se nezdařilo vytvoření nové identity. Kód chyby: 0x80630801.


CodeIntegrity:
===================================

Date: 2019-04-14 10:22:49.054
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

Date: 2019-04-14 10:22:49.026
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

Date: 2019-04-13 19:53:47.534
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

Date: 2019-04-13 19:53:47.519
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

Date: 2019-04-13 17:53:46.318
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

Date: 2019-04-13 17:53:46.304
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

Date: 2019-04-13 17:43:52.505
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

Date: 2019-04-12 21:07:10.563
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\AviraSecurityCenterAgent.exe because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: Insyde F.66 01/24/2013
Motherboard: Hewlett-Packard 1668
Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Percentage of memory in use: 97%
Total physical RAM: 3893.86 MB
Available physical RAM: 80.39 MB
Total Virtual: 7785.91 MB
Available Virtual: 2767.33 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:221.46 GB) (Free:44.92 GB) NTFS
Drive d: (disk 2) (Fixed) (Total:298.09 GB) (Free:296.59 GB) NTFS
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32

\\?\Volume{314263f4-4556-11e7-9dab-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: 85171202)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=221.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=2 GB) - (Type=0C)

==========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: 7A06B2DB)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  File: C:\Windows\System32\Drivers\aql94twk.sys
  ExportKey: HKLM\System\CurrentControlSet\Services\aql94twk
  
  HKLM\...\Run: [] => [X]
  HKLM-x32\...\Run: [] => [X]
  HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [] => [X]
  HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\MountPoints2: {048c4e86-5e96-11e9-98b8-2c27d7dffe2c} - F:\STARTUP.EXE
  Task: {A165C5E1-D09F-4437-83BF-38CD4FDB905D} - System32\Tasks\{2FE79D50-B343-49BF-A6A1-65BDA6158450} => C:\Windows\system32\pcalua.exe -a C:\Users\Hraboš\Desktop\sp53663.exe -d C:\Users\Hraboš\Desktop
  Task: {B7A78CB6-4F57-4B36-BE78-B88E925A0B47} - System32\Tasks\{41B400C2-179E-4FA6-978F-1E705DE68B88} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hraboš\Desktop\Nová složka\Pharaoh\Setup.exe" -d "C:\Users\Hraboš\Desktop\Nová složka\Pharaoh"
  Task: {D8FAA245-5EEF-4001-AC9F-E620E64FD562} - System32\Tasks\{B585841D-ED73-4599-9946-7D5618D50494} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hraboš\Desktop\sp55031 (1).exe" -d C:\Users\Hraboš\Desktop
  HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
  2019-10-27 19:17 - 2019-10-27 19:20 - 000000000 ____D C:\Program Files\trend micro
  2019-10-27 19:17 - 2019-10-27 19:17 - 000000000 ____D C:\rsit
  2018-11-12 17:42 - 2018-11-12 17:42 - 000000000 _____ () C:\Users\Hraboš\AppData\Local\{02F1F1E9-B946-4849-879F-C1B9EE88F307}
  2019-04-08 04:49 - 2019-04-08 04:49 - 000000000 _____ () C:\Users\Hraboš\AppData\Local\{8999F826-7799-46C2-BD61-7CD9801D7D73}
  FirewallRules: [{3253DB67-0418-4BAE-BE04-ADF9BF806E46}] => (Allow) C:\Program Files\Cold Turkey\Cold Turkey Blocker.exe No File
  FirewallRules: [{D5C6A90A-2ECF-4378-88DA-5DFB18FF8944}] => (Allow) C:\Program Files\Cold Turkey\Cold Turkey Blocker.exe No File
  FirewallRules: [{19102D5A-388D-46F0-983C-9C44D5298085}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe No File
  FirewallRules: [{C26CD453-2561-4D16-9E38-09D9D4B98430}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe No File
  
  Hosts:
  EmptyTemp:
  End

• Klikni na Subor a potom na Ulozit
• Vpravo dole vyber kodovanie Unicode
• Subor uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Zdravím,

vkládám fiixlog po restartu:

Fix result of Farbar Recovery Scan Tool (x64) Version: 14-11-2019
Ran by Hraboš (17-11-2019 21:43:22) Run:1
Running from C:\Users\Hraboš\Desktop
Loaded Profiles: Hraboš (Available Profiles: Hraboš)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Windows\System32\Drivers\aql94twk.sys
ExportKey: HKLM\System\CurrentControlSet\Services\aql94twk

HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\MountPoints2: {048c4e86-5e96-11e9-98b8-2c27d7dffe2c} - F:\STARTUP.EXE
Task: {A165C5E1-D09F-4437-83BF-38CD4FDB905D} - System32\Tasks\{2FE79D50-B343-49BF-A6A1-65BDA6158450} => C:\Windows\system32\pcalua.exe -a C:\Users\Hraboš\Desktop\sp53663.exe -d C:\Users\Hraboš\Desktop
Task: {B7A78CB6-4F57-4B36-BE78-B88E925A0B47} - System32\Tasks\{41B400C2-179E-4FA6-978F-1E705DE68B88} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hraboš\Desktop\Nová složka\Pharaoh\Setup.exe" -d "C:\Users\Hraboš\Desktop\Nová složka\Pharaoh"
Task: {D8FAA245-5EEF-4001-AC9F-E620E64FD562} - System32\Tasks\{B585841D-ED73-4599-9946-7D5618D50494} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hraboš\Desktop\sp55031 (1).exe" -d C:\Users\Hraboš\Desktop
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
2019-10-27 19:17 - 2019-10-27 19:20 - 000000000 ____D C:\Program Files\trend micro
2019-10-27 19:17 - 2019-10-27 19:17 - 000000000 ____D C:\rsit
2018-11-12 17:42 - 2018-11-12 17:42 - 000000000 _____ () C:\Users\Hraboš\AppData\Local\{02F1F1E9-B946-4849-879F-C1B9EE88F307}
2019-04-08 04:49 - 2019-04-08 04:49 - 000000000 _____ () C:\Users\Hraboš\AppData\Local\{8999F826-7799-46C2-BD61-7CD9801D7D73}
FirewallRules: [{3253DB67-0418-4BAE-BE04-ADF9BF806E46}] => (Allow) C:\Program Files\Cold Turkey\Cold Turkey Blocker.exe No File
FirewallRules: [{D5C6A90A-2ECF-4378-88DA-5DFB18FF8944}] => (Allow) C:\Program Files\Cold Turkey\Cold Turkey Blocker.exe No File
FirewallRules: [{19102D5A-388D-46F0-983C-9C44D5298085}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe No File
FirewallRules: [{C26CD453-2561-4D16-9E38-09D9D4B98430}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe No File

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 109
Average :
Sum : 233477547
Maximum :
Minimum :
Property : Length


========= End of Powershell: =========


========================= File: C:\Windows\System32\Drivers\aql94twk.sys ========================

"C:\Windows\System32\Drivers\aql94twk.sys" => not found
====== End of File: ======

================== ExportKey: ===================

"HKLM\System\CurrentControlSet\Services\aql94twk" => not found

=== End of ExportKey ===
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{048c4e86-5e96-11e9-98b8-2c27d7dffe2c} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A165C5E1-D09F-4437-83BF-38CD4FDB905D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A165C5E1-D09F-4437-83BF-38CD4FDB905D}" => removed successfully
C:\Windows\System32\Tasks\{2FE79D50-B343-49BF-A6A1-65BDA6158450} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2FE79D50-B343-49BF-A6A1-65BDA6158450}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B7A78CB6-4F57-4B36-BE78-B88E925A0B47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7A78CB6-4F57-4B36-BE78-B88E925A0B47}" => removed successfully
C:\Windows\System32\Tasks\{41B400C2-179E-4FA6-978F-1E705DE68B88} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{41B400C2-179E-4FA6-978F-1E705DE68B88}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D8FAA245-5EEF-4001-AC9F-E620E64FD562}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8FAA245-5EEF-4001-AC9F-E620E64FD562}" => removed successfully
C:\Windows\System32\Tasks\{B585841D-ED73-4599-9946-7D5618D50494} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B585841D-ED73-4599-9946-7D5618D50494}" => removed successfully
"HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache" => removed successfully
C:\Program Files\trend micro => moved successfully
C:\rsit => moved successfully
C:\Users\Hraboš\AppData\Local\{02F1F1E9-B946-4849-879F-C1B9EE88F307} => moved successfully
C:\Users\Hraboš\AppData\Local\{8999F826-7799-46C2-BD61-7CD9801D7D73} => moved successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3253DB67-0418-4BAE-BE04-ADF9BF806E46}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D5C6A90A-2ECF-4378-88DA-5DFB18FF8944}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{19102D5A-388D-46F0-983C-9C44D5298085}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C26CD453-2561-4D16-9E38-09D9D4B98430}" => removed successfully
Could not move "C:\Windows\System32\Drivers\etc\hosts" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 27110334 B
Java, Flash, Steam htmlcache => 131415 B
Windows/system/drivers => 2292919 B
Edge => 0 B
Chrome => 388302455 B
Firefox => 0 B
Opera => 577366563 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 101036 B
systemprofile32 => 216416 B
LocalService => 348660 B
NetworkService => 349352 B
Hraboš => 101619166 B

RecycleBin => 46931567 B
EmptyTemp: => 1.1 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 17-11-2019 21:45:52)

C:\Windows\System32\Drivers\etc\hosts => Could not move
Could not restore Hosts.

==== End of Fixlog 21:45:52 ====

Ako to vyzera s PC?

Myslím, že se znatelně zrychlil, takže super! Děkuji moc!
---
Ještě mne napadlo, že ten problém s psaním textu mohlo dělat i přehřívaní, ale to nevím, jestli je vůbec možné.

Každopádně jsem si objednal alespoň stlačený vzduch na profouknutí od prachu.

Precistenie PC od prachu urcite nie je na skodu

Tak este upraceme po pouzitych nastrojoch:

• Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
• Uloz na plochu a spusti
• Nechaj oznacenu moznost "Remove disinfection tools"
• Klikni na "Run"

hotovo.

Mělo by to být v pořádku.

# DelFix v1.013 - Logfile created 19/11/2019 at 21:39:56
# Updated 17/04/2016 by Xplode
# Username : Hraboš - HRABOSS
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\Hraboš\Desktop\FRST-OlderVersion
Deleted : C:\Users\Hraboš\Desktop\Addition.txt
Deleted : C:\Users\Hraboš\Desktop\adwcleaner_7.4.2.exe
Deleted : C:\Users\Hraboš\Desktop\Fixlog.txt
Deleted : C:\Users\Hraboš\Desktop\FRST.txt
Deleted : C:\Users\Hraboš\Desktop\FRST64.exe
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

########## - EOF - ##########

Ano, toto je OK. Ak uz nie su ziadne problemy, tak to by bolo vsetko z mojej strany

Všechno vypadá v pořádku!

Díky moc!

Maj sa.

Nie je zaco, rad som pomohol