VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2020
Ran by ondre (administrator) on DESKTOP-BG5JJNF (TOSHIBA Satellite A660) (16-02-2020 08:20:08)
Running from C:\Users\ondre\Desktop
Loaded Profiles: ondre & Janka & Ostatni (Available Profiles: ondre & Janka & Ostatni)
Platform: Windows 10 Home Version 1903 18362.356 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler64.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
(bookingDesktopApp.) [File not signed] C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe
(Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler64.exe
(HP Printing Korea Co., Ltd.) [File not signed] C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(HP Printing Korea Co., Ltd.) [File not signed] C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\msoia.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Janka\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\ondre\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\ondre\AppData\Local\Microsoft\Teams\current\Teams.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\ondre\AppData\Local\Microsoft\Teams\current\Teams.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Ostatni\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Ostatni\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\UpdateAssistant\UpdateAssistant.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\UpdateAssistant\UpdateAssistant.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DeviceCensus.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotification.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotificationUx.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotificationUx.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\usocoreworker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Samsung Electronics CO., LTD. -> ) C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TomTom International BV -> TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
0 C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1519016 2010-07-28] (TOSHIBA CORPORATION -> TOSHIBA Corporation)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [97509120 2020-01-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [AvastBrowserAutoLaunch_0CE231CE0ED3750FB84C2E31233425D0] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [411136 2015-02-09] () [File not signed]
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [47552040 2019-12-22] (Google LLC -> )
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2146536 2019-04-09] (TomTom International BV -> TomTom)
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ondre\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ondre\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\RunOnce: [Uninstall 19.232.1124.0005\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ondre\AppData\Local\Microsoft\OneDrive\19.232.1124.0005\amd64"
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\RunOnce: [Uninstall 19.232.1124.0005] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ondre\AppData\Local\Microsoft\OneDrive\19.232.1124.0005"
HKU\S-1-5-21-265624995-536550331-1996926755-1002\...\Run: [AvastBrowserAutoLaunch_5BE222AFE8AD82167FFC8C56883693CF] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-265624995-536550331-1996926755-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Janka\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-265624995-536550331-1996926755-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Janka\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-265624995-536550331-1996926755-1002\...\RunOnce: [Uninstall 19.232.1124.0005\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Janka\AppData\Local\Microsoft\OneDrive\19.232.1124.0005\amd64"
HKU\S-1-5-21-265624995-536550331-1996926755-1002\...\RunOnce: [Uninstall 19.232.1124.0005] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Janka\AppData\Local\Microsoft\OneDrive\19.232.1124.0005"
HKU\S-1-5-21-265624995-536550331-1996926755-1003\...\Run: [AvastBrowserAutoLaunch_85C5741F884D326D2E4BC6F6DAA6B5D2] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-265624995-536550331-1996926755-1003\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session --flag-switches-begin --flag-switches-end - (the data entry has 102 more characters).
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-17] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\79.0.3060.80\Installer\chrmstp.exe [2020-02-13] (AVAST Software s.r.o. -> AVAST Software)
BootExecute: autocheck autochk /m /P \Device\HarddiskVolume2autocheck autochk /p \??\C:autocheck autochk *
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1FC6EE4A-7E7F-425D-B771-6057E4CE9417} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27366472 2020-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {283D59D4-C616-4D36-BED5-32F405A99285} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
Task: {2B223DFB-966D-44BD-A441-149F1495D803} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
Task: {2CF24D9D-6FFC-46FB-BF1F-0A043CD33033} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
Task: {34FA4FC1-F4CA-4AE8-BA44-A8AEBD02B183} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-19] (AVAST Software s.r.o. -> AVAST Software)
Task: {42B5AF8D-E159-473C-AFF5-69022B776410} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27366472 2020-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5098F203-E287-4F8C-AAB9-B213E6D07605} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167704 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C70E92D-CBF6-47A1-AFA4-DE035FE688AA} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167704 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {5F8C75FA-096A-411C-B6B3-177F30C42673} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2349960 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {6CDF9DD5-1174-43EB-B926-DFF12745EAF5} - System32\Tasks\EPM Preload => C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe [1333472 2016-01-28] (Samsung Electronics CO., LTD. -> )
Task: {7116DD0A-78FA-403A-991B-16D6E244EF39} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149840 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {95919C76-C864-4D66-9D91-396C8E36898F} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
Task: {96B9EC73-A0E8-4615-97D1-E401BCEF587F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6292336 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {A8B574FF-857E-4FCA-B621-45FD7F11E7FE} - System32\Tasks\bookingDesktopAppUpdateTaskMachineCore => C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-01-02] (bookingDesktopApp.) [File not signed]
Task: {AA130AD9-02D2-44EC-B696-6DECF1E61B6A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6292336 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {AEA9AC64-AD7A-40D3-B287-2F827DB39C3C} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
Task: {B13E92A9-1472-410E-802C-7EFF11581334} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
Task: {B97DA5D8-5967-4CE9-813C-E4C153479B5B} - System32\Tasks\bookingDesktopAppUpdateTaskMachineUA => C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-01-02] (bookingDesktopApp.) [File not signed]
Task: {C014CE2E-D590-4DCD-A149-572A5122BFB7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149840 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {D00BB801-251C-4A09-BCA1-9AE64E56EC4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems)
Task: {EAACCFAA-B853-4E12-B871-7CFC032F6521} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{19c5cd92-1ab0-47af-bacf-3409add47b07}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{32d9ef43-4b60-4379-8728-c3febed71be2}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @bookingdesktopapp.com/bookingDesktopApp Update;version=3 -> C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll [2020-01-02] (bookingDesktopApp.) [File not signed]
FF Plugin-x32: @bookingdesktopapp.com/bookingDesktopApp Update;version=9 -> C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll [2020-01-02] (bookingDesktopApp.) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default [2020-02-16]
CHR Notifications: Default -> hxxps://en.softonic.com; hxxps://peetube.cc; hxxps://www.tipsport.cz; hxxps://www.tomtom.com
CHR DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> seznam.cz
CHR DefaultSuggestURL: Default -> hxxps://suggest.fulltext.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Extension: (Prezentace) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-12-31]
CHR Extension: (No-Script Suite Lite) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahnanjpbkghcdgmlchbcfoiefnifjeni [2019-07-16]
CHR Extension: (Dokumenty) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-12-31]
CHR Extension: (Disk Google) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-12-31]
CHR Extension: (YouTube) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-12-31]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-10-31]
CHR Extension: (Tabulky) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-12-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-15]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2019-02-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Gmail) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-18]
CHR Extension: (Chrome Media Router) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-15]
CHR Profile: C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-07-21]
CHR Profile: C:\Users\ondre\AppData\Local\Google\Chrome\User Data\System Profile [2019-07-21]
CHR HKU\S-1-5-21-265624995-536550331-1996926755-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-19] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\79.0.3060.80\elevation_service.exe [968552 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
S2 bookingdesktopapp; C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-01-02] (bookingDesktopApp.) [File not signed]
S3 bookingdesktopappm; C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-01-02] (bookingDesktopApp.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11597176 2020-02-05] (Microsoft Corporation -> Microsoft Corporation)
R2 Samsung Network Fax Server; C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxServer64.exe [700928 2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
R2 SamsungUPDUtilSvc; C:\WINDOWS\SysWOW64\SecUPDUtilSvc.exe [143664 2019-01-07] (Samsung Electronics CO., LTD. -> )
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-05-04] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2020-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2020-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37616 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [204824 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [274456 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [209552 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [65120 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [276952 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42736 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [161544 2019-11-02] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110320 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83792 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848432 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460448 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316528 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R3 DVB7700ALL; C:\WINDOWS\System32\Drivers\dvb7700all.sys [711168 2013-07-31] (Microsoft Windows Hardware Compatibility Publisher -> DiBcom)
R3 enecir; C:\WINDOWS\system32\DRIVERS\enecir.sys [71168 2013-11-03] (Microsoft Windows Hardware Compatibility Publisher -> ENE TECHNOLOGY INC.)
R3 enecirhid; C:\WINDOWS\system32\DRIVERS\enecirhid.sys [24064 2013-11-03] (Microsoft Windows Hardware Compatibility Publisher -> ENE TECHNOLOGY INC.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [711968 2019-06-04] (Realtek Semiconductor Corp. -> Realtek )
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [44952 2017-04-27] (Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2020-01-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2020-01-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2020-01-11] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-16 08:20 - 2020-02-16 08:29 - 000034556 _____ C:\Users\ondre\Desktop\FRST.txt
2020-02-16 08:01 - 2020-02-16 08:01 - 000000000 ____D C:\Users\ondre\AppData\Roaming\Microsoft Teams
2020-02-16 08:00 - 2020-02-16 08:00 - 002279424 _____ (Farbar) C:\Users\ondre\Downloads\FRST64 (2).exe
2020-02-16 08:00 - 2020-02-16 08:00 - 002279424 _____ (Farbar) C:\Users\ondre\Desktop\FRST64 (1).exe
2020-02-14 15:12 - 2020-02-14 15:12 - 000000000 ____D C:\Users\Ostatni\AppData\Local\Microsoft Help
2020-02-14 14:55 - 2020-02-14 14:55 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2020-02-14 14:26 - 2020-02-14 14:26 - 000002522 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002420 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002416 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2020-02-14 14:26 - 2020-02-14 12:29 - 000066696 _____ C:\WINDOWS\VIVALDII.tt2
2020-02-14 14:26 - 2020-02-14 12:29 - 000056596 _____ C:\WINDOWS\HARLOWSI.tt2
2020-02-14 14:25 - 2020-02-14 12:28 - 000076588 _____ C:\WINDOWS\ALGER.tt2
2020-02-14 14:25 - 2020-02-14 12:28 - 000047644 _____ C:\WINDOWS\BAUHS93.tt2
2020-02-14 10:52 - 2020-02-14 10:52 - 000000000 ____D C:\Program Files\Microsoft Office 15
2020-02-14 10:46 - 2020-02-14 10:48 - 005509624 _____ (Microsoft Corporation) C:\Users\Ostatni\Downloads\Setup.Def.cs-cz_O365ProPlusRetail_0d1242d3-080d-4a41-9ea3-ab07e22b22d9_TX_DB_Platform_def_b_64_.exe
2020-02-14 10:45 - 2020-02-14 10:45 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2020-02-13 12:55 - 2020-02-13 12:55 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-02-12 07:36 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-12 07:36 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-03 15:04 - 2020-02-14 15:16 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2020-02-03 14:11 - 2020-02-03 14:11 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2020-02-03 14:11 - 2020-02-03 14:11 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2020-02-03 13:10 - 2020-02-03 13:10 - 000013634 _____ C:\Users\Janka\Downloads\Evidence pracovní doby 2020 - pedagogové.xlsx
2020-02-03 12:22 - 2020-02-03 12:22 - 000000000 ____D C:\WINDOWS\system32\Tasks\OfficeSoftwareProtectionPlatform
2020-02-03 11:54 - 2020-02-14 15:16 - 000000000 ____D C:\Program Files\Microsoft Office
2020-02-03 11:54 - 2020-02-03 11:54 - 000000000 ____D C:\Users\ondre\AppData\Local\Microsoft Help
2020-02-03 11:36 - 2020-02-03 11:50 - 633319536 _____ (Microsoft Corporation) C:\Users\ondre\Downloads\microsoft-office-2010_MSOffice201064bit (1).exe
2020-02-03 10:55 - 2020-02-03 11:05 - 633319536 _____ (Microsoft Corporation) C:\Users\ondre\Downloads\microsoft-office-2010_MSOffice201064bit.exe
2020-01-31 16:41 - 2020-01-31 16:42 - 035299688 _____ (Microsoft Corporation) C:\Users\Janka\Downloads\OneDriveSetup.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-16 08:30 - 2019-10-08 06:30 - 000003462 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-02-16 08:30 - 2019-10-08 06:30 - 000003238 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-02-16 08:30 - 2019-09-23 23:34 - 000002914 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1003
2020-02-16 08:30 - 2019-09-23 23:34 - 000002914 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1002
2020-02-16 08:30 - 2019-09-23 23:34 - 000002914 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1001
2020-02-16 08:30 - 2019-09-23 23:34 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-02-16 08:26 - 2019-06-28 10:14 - 000000000 ____D C:\FRST
2020-02-16 08:25 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-16 08:02 - 2019-02-09 15:54 - 000000000 ____D C:\Users\ondre\AppData\Local\SquirrelTemp
2020-02-16 07:57 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-16 07:56 - 2018-12-31 15:41 - 000000000 ___RD C:\Users\ondre\OneDrive
2020-02-16 07:56 - 2018-12-31 15:41 - 000000000 ___RD C:\Users\ondre\OneDrive
2020-02-16 07:56 - 2018-12-31 15:41 - 000000000 ___RD C:\Users\ondre\OneDrive
2020-02-16 07:44 - 2019-03-11 11:24 - 000000000 ____D C:\Users\ondre\AppData\Local\CrashDumps
2020-02-16 07:40 - 2019-12-03 09:00 - 000000000 ___HD C:\OneDriveTemp
2020-02-16 07:40 - 2018-12-31 16:31 - 000000000 ___RD C:\Users\Janka\OneDrive
2020-02-16 07:40 - 2018-12-31 16:31 - 000000000 ___RD C:\Users\Janka\OneDrive
2020-02-16 07:40 - 2018-12-31 16:31 - 000000000 ___RD C:\Users\Janka\OneDrive
2020-02-16 07:39 - 2019-09-23 22:42 - 000000000 ____D C:\Users\ondre
2020-02-16 07:35 - 2019-09-23 22:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-02-14 17:00 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-14 15:16 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-02-14 15:12 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\System
2020-02-14 11:56 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-14 10:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-14 09:46 - 2019-09-23 23:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-02-14 09:46 - 2018-12-31 16:10 - 000073232 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll
2020-02-14 09:46 - 2018-12-31 15:04 - 000017920 _____ C:\WINDOWS\system32\rpcnetp.exe
2020-02-13 19:24 - 2018-12-31 15:06 - 000017920 _____ C:\WINDOWS\SysWOW64\rpcnetp.dll
2020-02-13 19:23 - 2018-12-31 15:04 - 000017920 _____ C:\WINDOWS\SysWOW64\rpcnetp.exe
2020-02-13 19:22 - 2019-03-19 05:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-02-13 17:20 - 2019-09-23 23:34 - 000003856 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2020-02-13 17:20 - 2019-09-23 23:34 - 000003272 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2020-02-13 17:20 - 2018-12-31 16:08 - 000002509 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2020-02-13 17:20 - 2018-12-31 16:08 - 000002474 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2020-02-13 17:09 - 2019-02-02 16:51 - 000000000 ____D C:\Install
2020-02-13 12:30 - 2019-09-23 22:42 - 000000000 ____D C:\Users\Janka
2020-02-13 12:09 - 2019-01-02 14:48 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 12:08 - 2019-01-02 14:47 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-12 07:09 - 2019-09-23 23:34 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-02-10 19:55 - 2019-09-23 22:42 - 000000000 ____D C:\Users\Ostatni
2020-02-09 18:47 - 2019-07-25 07:27 - 000000000 ____D C:\Users\ondre\AppData\Roaming\vlc
2020-02-07 15:17 - 2019-09-08 11:55 - 000000000 ____D C:\Users\ondre\AppData\Local\ElevatedDiagnostics
2020-02-05 07:19 - 2019-01-07 19:47 - 000000000 ___RD C:\Users\Ostatni\OneDrive
2020-02-05 07:19 - 2019-01-07 19:47 - 000000000 ___RD C:\Users\Ostatni\OneDrive
2020-02-05 07:19 - 2019-01-07 19:47 - 000000000 ___RD C:\Users\Ostatni\OneDrive
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-03 19:57 - 2019-01-14 16:31 - 000000000 ____D C:\Users\Ostatni\AppData\Local\CrashDumps
2020-02-03 19:25 - 2019-09-23 22:30 - 000399560 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-02-03 15:42 - 2018-12-31 10:41 - 000000167 _____ C:\WINDOWS\win.ini
2020-02-03 14:27 - 2019-04-30 09:00 - 000000000 ____D C:\Janka
2020-01-31 16:54 - 2018-12-31 16:14 - 000000000 ____D C:\Users\Janka\AppData\Local\ConnectedDevicesPlatform
2020-01-31 16:50 - 2019-01-19 13:02 - 000000000 ____D C:\Users\Janka\AppData\Local\PlaceholderTileLogoFolder
2020-01-31 16:50 - 2018-12-31 16:15 - 000000000 ____D C:\Users\Janka\AppData\Local\Packages
2020-01-30 13:14 - 2019-03-01 17:59 - 000000000 ____D C:\Users\Janka\AppData\Local\CrashDumps
2020-01-26 17:32 - 2019-02-06 14:18 - 000002084 _____ C:\Users\Public\Desktop\Google Slides.lnk
2020-01-26 17:32 - 2019-02-06 14:18 - 000002082 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2020-01-26 17:32 - 2019-02-06 14:18 - 000002072 _____ C:\Users\Public\Desktop\Google Docs.lnk
2020-01-26 17:32 - 2019-02-06 14:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-01-18 13:31 - 2019-02-06 14:26 - 000000000 ___RD C:\Users\ondre\Disk Google
2020-01-18 13:31 - 2019-02-06 14:26 - 000000000 ___RD C:\Users\ondre\Disk Google
2020-01-18 13:31 - 2019-02-06 14:26 - 000000000 ___RD C:\Users\ondre\Disk Google
2020-01-17 16:14 - 2018-12-31 15:41 - 000002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-17 16:14 - 2018-12-31 15:41 - 000002271 _____ C:\Users\Public\Desktop\Google Chrome.lnk

==================== Files in the root of some directories ========

2020-01-10 11:48 - 2020-01-10 11:48 - 000000153 _____ () C:\Users\ondre\AppData\Local\{01150414-5402-4C85-8619-1922B8314B75}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by ondre (16-02-2020 08:33:12)
Running from C:\Users\ondre\Desktop
Windows 10 Home Version 1903 18362.356 (X64) (2019-09-23 22:35:57)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-265624995-536550331-1996926755-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-265624995-536550331-1996926755-503 - Limited - Disabled)
Guest (S-1-5-21-265624995-536550331-1996926755-501 - Limited - Disabled)
Janka (S-1-5-21-265624995-536550331-1996926755-1002 - Limited - Enabled) => C:\Users\Janka
ondre (S-1-5-21-265624995-536550331-1996926755-1001 - Administrator - Enabled) => C:\Users\ondre
Ostatni (S-1-5-21-265624995-536550331-1996926755-1003 - Administrator - Enabled) => C:\Users\Ostatni
WDAGUtilityAccount (S-1-5-21-265624995-536550331-1996926755-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.012.20040 - Adobe Systems Incorporated)
Android Studio (HKLM\...\Android Studio) (Version: 3.3 - Google LLC)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 79.0.3060.80 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden
AviSynth (HKLM-x32\...\AviSynth) (Version: 2.6.0 MT - )
Backup and Sync from Google (HKLM\...\{825F60D9-2633-4D52-B2B0-5DA143433BBC}) (Version: 3.48.8668.1933 - Google, Inc.)
Balíček ovladačů pro úsporný režim (HKLM-x32\...\Samsung Eco Driver Pack) (Version: 2.01.10.00 (28.05.2015) - Samsung Electronics Co., Ltd.)
Booking (HKLM-x32\...\{13D4CD54-EA09-4FDB-B979-8B2BC0F020CA}_is1) (Version: 2.0.701 - Booking)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
DiskCheckup v3.4 (HKLM-x32\...\DiskCheckup_is1) (Version: 3.4.1003 - PassMark Software)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
EaseUS Tools M 0.3.2 (HKLM-x32\...\D72C2F7D-B75E-4641-AFBE-199B95066617_is1) (Version: - EaseUS)
FastStone Image Viewer 6.7 (HKLM-x32\...\FastStone Image Viewer) (Version: 6.7 - FastStone Soft)
FloorPlan 3D v8 (HKLM-x32\...\{93538CBE-F87E-4B79-872C-D0D098EB42EE}) (Version: 8.2 - IMSI)
FormatFactory 4.5.0.0 (HKLM-x32\...\FormatFactory) (Version: 4.5.0.0 - Free Time)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
IDA-STEP (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\IDA-STEP) (Version: 4.0.18 - LKSoftWare GmbH)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{73250D12-B600-4ED6-AFC0-10D9D8EDA745}) (Version: 7.3.2 - Intel Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Klasifikace 5.4 (HKU\S-1-5-21-265624995-536550331-1996926755-1002\...\{BE7E6DAC-7EAA-4546-BBDD-43ADDF49EA14}_is1) (Version: - JPH Software)
Microsoft Office 365 ProPlus - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.11929.20606 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-265624995-536550331-1996926755-1002\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-265624995-536550331-1996926755-1003\...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Teams) (Version: 1.3.00.362 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM-x32\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.5.0 - Mozilla)
Mozilla Thunderbird 60.5.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 60.5.0 (x86 cs)) (Version: 60.5.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20606 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20606 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.11929.20606 - Microsoft Corporation) Hidden
OnePlus USB Drivers 1.00 (HKLM-x32\...\OnePlus USB Drivers 1.00) (Version: 1.00 - OnePlus, Inc)
OpenOffice 4.1.5 (HKLM-x32\...\{2FEA9841-64DE-4FA5-A36F-1CD23E2790EB}) (Version: 4.15.9789 - Apache Software Foundation)
Ovládací panel NVIDIA 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 342.01 - NVIDIA Corporation) Hidden
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22617 - Microsoft Corporation)
Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 2.02.53 (30.05.2018) - HP Printing Korea Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 2.01.00.04 - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 2.02.28 (29.05.2018) - HP Printing Korea Co., Ltd.)
Samsung Printer Center (HKLM-x32\...\Samsung Printer Center) (Version: 1.0.0.12 - Samsung Electronics Co., Ltd.)
Samsung Printer Diagnostics (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.2.5 - Samsung Electronics Co., Ltd.)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.32 - Samsung Electronics Co., Ltd.) Hidden
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 3.31.81.01:10 - Samsung Electronics Co., Ltd.)
SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd) Hidden
STP Viewer 2.3 (HKLM-x32\...\{CECCF8B1-F595-4845-9AA6-1EC57B9BECBA}_is1) (Version: - IdeaMK)
Stylish Driver Pack (HKLM-x32\...\Samsung Stylish UI Pack) (Version: 1.01.74.00 (09.02.2015) - Samsung Electronics Co., Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.4.3.38 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.362 - Microsoft Corporation)
TomTom MyDrive Connect 4.2.5.3754 (HKLM-x32\...\MyDriveConnect) (Version: 4.2.5.3754 - TomTom)
TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.20.64 - TOSHIBA Corporation)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.21a - Ghisler Software GmbH)
Uninstall Samsung Printer Software (HKLM-x32\...\TotalUninstaller) (Version: 4.0.0.12 - Samsung Electronics CO., LTD.)
Universal Media Server (HKLM-x32\...\Universal Media Server) (Version: 9.1.0 - Universal Media Server)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM\...\{EC4F72E8-52FE-454E-B70F-DBE5C0FA44C5}) (Version: 1.20.0.0 - Microsoft Corporation) Hidden
VLC media player 1.0.5 (HKLM-x32\...\VLC media player) (Version: 1.0.5 - VideoLAN Team)
WhatsApp (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\WhatsApp) (Version: 0.3.2043 - WhatsApp)
Zobrazit uživatelskou příručku (HKLM-x32\...\View User Guide) (Version: 4.0.0.6 - )

Packages:
=========
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.1.4081.0_x64__rz1tebttyb220 [2020-01-27] (Dolby Laboratories)
Fitbit Coach -> C:\Program Files\WindowsApps\Fitbit.FitbitCoach_4.4.133.0_x64__6mqt6hf9g46tw [2019-09-24] (Fitbit)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-16] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-16] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-12] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-20] (Microsoft Corporation) [MS Ad]
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-01-07] (Samsung Electronics Co. Ltd.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-265624995-536550331-1996926755-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\ondre\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19317.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-265624995-536550331-1996926755-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\ondre\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19317.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [!NetFax0] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax1] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax2] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax3] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax4] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax5] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax6] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax7] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_105.dll [2018-11-29] (Free Time) [File not signed]
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-12-22] (Google LLC -> Google)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_105.dll [2018-11-29] (Free Time) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-12-22] (Google LLC -> Google)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2018-10-15 11:01 - 2018-10-15 11:01 - 000013312 _____ () [File not signed] C:\Program Files (x86)\MyDrive Connect\libEGL.DLL
2018-10-15 11:01 - 2018-10-15 11:01 - 001950720 _____ () [File not signed] C:\Program Files (x86)\MyDrive Connect\libGLESv2.dll
2014-09-11 16:14 - 2014-09-11 16:14 - 000218112 _____ () [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qmng.dll
2018-05-30 05:58 - 2018-05-30 05:58 - 000675328 _____ () [File not signed] C:\Program Files (x86)\Samsung\Easy Document Creator\x64\EDCAddin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000114176 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 002183680 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000035328 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000065536 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tofloat32_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000029696 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tospdif_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000088576 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_bd_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000035328 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_directory_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000033280 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_fake_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000033280 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_file_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000032256 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libaes3_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000044032 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_directx_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000045568 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libaraw_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 005726720 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libavcodec_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000047104 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libbandlimited_resampler_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000056832 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libblend_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000033792 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libcdg_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000031744 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libconverter_fixed_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000043520 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libconverter_float_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000055296 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirect3d_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000031232 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdolby_surround_decoder_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000031744 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdrawable_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000209920 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdshow_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000038400 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdts_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000178176 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstofloat32_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000031744 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstospdif_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000228352 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvdnav_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000312832 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libfaad_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000036864 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libfake_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000268800 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libflac_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000031232 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libfloat32_mixer_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 001736704 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libfreetype_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000032768 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libglobalhotkeys_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000032256 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libgrey_yuv_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000047104 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libhotkeys_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000073216 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_mmx_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000051712 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000134656 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_sse2_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000031232 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_ymga_mmx_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000030208 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_ymga_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000039424 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_mmx_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000037376 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000047616 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_sse2_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000032256 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_i420_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000037376 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_mmx_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000035840 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000046080 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_sse2_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 001732608 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibass_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000150528 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibmpeg2_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000032768 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\liblinear_resampler_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000032256 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\liblpcm_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000032768 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpymmxext_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 001232384 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libmkv_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000036864 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpeg_audio_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000130560 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpgatofixed32_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000101888 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libplaylist_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000237568 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libpng_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 010196992 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libqt4_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000031232 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libscale_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000036352 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libscaletempo_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000743936 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libschroedinger_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000033792 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libsimple_channel_mixer_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 002104320 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libskins2_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000129536 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libspeex_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000033792 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_rar_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000030720 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_record_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000233984 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libswscale_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000359424 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libtheora_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000030208 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libugly_resampler_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000050688 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libvcd_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 001190912 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libvorbis_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000063488 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libvout_directx_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000046080 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libwaveout_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 001120256 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libxml_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000030720 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuvp_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000039936 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i420_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000035840 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i422_plugin.dll
2010-01-30 23:27 - 2010-01-30 23:27 - 000077312 _____ () [File not signed] C:\Program Files (x86)\VideoLAN\VLC\plugins\libzip_plugin.dll
2014-09-08 13:38 - 2014-09-08 13:38 - 000051200 _____ () [File not signed] C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2020-02-16 07:43 - 2020-02-16 07:43 - 000114176 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_ctypes.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000173056 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_elementtree.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 001808896 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_hashlib.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000032256 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_multiprocessing.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000046080 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_psutil_windows.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000047616 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_socket.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 002241024 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_ssl.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000026112 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\_yappi.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000080896 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\bz2.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000016384 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\common.time34.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000007680 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\hashobjs_ext.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000301568 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\PIL._imaging.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000169472 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\pyexpat.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 001084416 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\pysqlite2._sqlite.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000548864 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\pythoncom27.dll
2020-02-16 07:43 - 2020-02-16 07:43 - 000137728 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\pywintypes27.dll
2020-02-16 07:43 - 2020-02-16 07:43 - 000010752 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\select.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000020992 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\thumbnails_ext.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000689664 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\unicodedata.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000119808 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\usb_ext.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000128512 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32api.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000438784 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32com.shell.shell.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000011776 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32crypt.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000023040 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32event.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000149504 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32file.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000223232 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32gui.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000048128 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32inet.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000029696 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32pdh.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000027648 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32pipe.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000044032 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32process.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000020480 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32profile.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000136192 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32security.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000026624 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\win32ts.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000034816 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\windows.conditional.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000038400 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\windows.connectivity.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000071680 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\windows.device_monitor.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000109056 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\windows.volumes.pyd
2020-02-16 07:43 - 2020-02-16 07:43 - 000020480 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\windows.winwrap.pyd
2020-02-16 07:44 - 2020-02-16 07:44 - 001325056 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wx._controls_.pyd
2020-02-16 07:44 - 2020-02-16 07:44 - 001489408 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wx._core_.pyd
2020-02-16 07:44 - 2020-02-16 07:44 - 001007104 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wx._gdi_.pyd
2020-02-16 07:44 - 2020-02-16 07:44 - 000103424 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wx._html2.pyd
2020-02-16 07:44 - 2020-02-16 07:44 - 000916992 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wx._misc_.pyd
2020-02-16 07:44 - 2020-02-16 07:44 - 001039872 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wx._windows_.pyd
2020-01-02 18:18 - 2020-01-02 18:18 - 001743360 ____T (bookingDesktopApp.) [File not signed] C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\bookingDesktopApppdate.dll
2018-11-29 01:55 - 2018-11-29 01:55 - 000302080 _____ (Free Time) [File not signed] C:\Program Files (x86)\FormatFactory\ShellEx64_105.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 000586240 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\System32\NetFaxPort64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 001050112 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxDataBase64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 001863680 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxEngine64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 000193024 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 000146944 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\PRTPROCS\x64\NetFaxProc64.dll
2020-02-14 10:52 - 2020-02-14 10:52 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-02-14 10:52 - 2020-02-14 10:52 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2020-02-14 11:38 - 2020-02-14 11:38 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AppVIsvSubsystems64.dll
2020-02-14 11:38 - 2020-02-14 11:38 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\c2r64.dll
2020-02-16 07:43 - 2020-02-16 07:43 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\python27.dll
2015-12-30 03:39 - 2015-12-30 03:39 - 000123904 _____ (Samsung Electronics Co., Ltd.) [File not signed] C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll
2018-03-27 21:33 - 2018-03-27 21:33 - 001370624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\MyDrive Connect\LIBEAY32.dll
2018-03-27 21:33 - 2018-03-27 21:33 - 000337920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\MyDrive Connect\ssleay32.dll
2018-10-15 11:11 - 2018-10-15 11:11 - 000038912 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qgenericbearer.dll
2018-10-15 11:10 - 2018-10-15 11:10 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qgif.dll
2018-10-16 11:39 - 2018-10-16 11:39 - 000033280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qicns.dll
2018-10-15 11:10 - 2018-10-15 11:10 - 000027648 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qico.dll
2018-10-15 11:12 - 2018-10-15 11:12 - 000243712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjpeg.dll
2018-10-16 11:31 - 2018-10-16 11:31 - 000021504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qsvg.dll
2018-10-16 11:38 - 2018-10-16 11:38 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtga.dll
2018-10-16 11:39 - 2018-10-16 11:39 - 000327680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtiff.dll
2018-10-16 11:38 - 2018-10-16 11:38 - 000019968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwbmp.dll
2018-10-16 11:39 - 2018-10-16 11:39 - 000400896 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwebp.dll
2018-10-15 11:12 - 2018-10-15 11:12 - 001096704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\platforms\qwindows.dll
2019-04-09 14:26 - 2019-04-09 14:26 - 004785152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Core.dll
2018-10-15 11:05 - 2018-10-15 11:05 - 004970496 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Gui.dll
2018-10-15 11:05 - 2018-10-15 11:05 - 000961024 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Network.dll
2018-10-16 11:31 - 2018-10-16 11:31 - 000264704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Svg.dll
2018-10-15 11:09 - 2018-10-15 11:09 - 004468224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Widgets.dll
2018-10-15 11:02 - 2018-10-15 11:02 - 000150016 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Xml.dll
2019-04-09 14:23 - 2019-04-09 14:23 - 000137216 _____ (TomTom) [File not signed] C:\Program Files (x86)\MyDrive Connect\DeviceNavEthernetCore.dll
2020-02-16 07:44 - 2020-02-16 07:44 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wxbase30u_net_vc90_x64.dll
2020-02-16 07:44 - 2020-02-16 07:44 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wxbase30u_vc90_x64.dll
2020-02-16 07:44 - 2020-02-16 07:44 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wxmsw30u_adv_vc90_x64.dll
2020-02-16 07:44 - 2020-02-16 07:44 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wxmsw30u_core_vc90_x64.dll
2020-02-16 07:44 - 2020-02-16 07:44 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wxmsw30u_html_vc90_x64.dll
2020-02-16 07:44 - 2020-02-16 07:44 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI158762\wxmsw30u_webview_vc90_x64.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\WINDOWS\system32\autochk.exe:BAK [11520]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-12-31 10:41 - 2019-01-04 12:27 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Android;C:\Windows\System32
HKU\S-1-5-21-265624995-536550331-1996926755-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ondre\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img1.jpg
HKU\S-1-5-21-265624995-536550331-1996926755-1002\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
HKU\S-1-5-21-265624995-536550331-1996926755-1003\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{31205EB2-6B6D-4823-B93C-4E1E3B4B3232}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom International BV -> TomTom)
FirewallRules: [{F58C84AF-D84C-4138-818F-892FA8CDF9AC}] => (Block) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [{EB5D10BA-B463-4B42-B746-AEA840E14833}] => (Block) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{7EC73A43-CD38-4370-919D-30602B21A577}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [TCP Query User{3B02F33B-6A32-420A-AA7F-6B4B3469666A}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{DA936714-B68C-4053-AC54-608DE189AA5B}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [TCP Query User{5B006D08-B951-4297-8D65-03211202CC57}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [UDP Query User{8F0C67AC-1B6F-42AD-AEF1-322EF0CEC72F}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [TCP Query User{18F09D80-5826-428E-8DB1-5E4537549D83}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [UDP Query User{C6F54BE4-E64B-4613-9B32-1D7BB390AF48}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [TCP Query User{1CE6C4C4-A710-4DA0-BA83-14D4E6A9CABB}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [UDP Query User{8EB72966-C647-4134-89A7-C2E6B849F4F9}C:\program files\android\android studio1\jre\bin\java.exe] => (Allow) C:\program files\android\android studio1\jre\bin\java.exe
FirewallRules: [TCP Query User{C218BCD2-474E-4BD4-8B2C-D85B101D3445}C:\program files\android\android studio1\jre\bin\java.exe] => (Allow) C:\program files\android\android studio1\jre\bin\java.exe
FirewallRules: [{2BAF2252-A399-4751-A84E-42D4E024DF5C}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Printer Center\SamsungPrinterCenter.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{EC6B06D9-CF90-47ED-AD86-4F1C01444314}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ScanCDLM.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{FF6D72D2-F199-47BD-8655-6E8E4ABE7D82}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon64.exe (HP Printing Korea Co., Ltd.) [File not signed]
FirewallRules: [{517A5FA0-C5FF-4FA6-8C55-A9EF6F4F175E}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon.exe (HP Printing Korea Co., Ltd.) [File not signed]
FirewallRules: [{2BED9D6A-05BA-4A31-B140-B50BA9FA33BD}] => (Allow) C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxMon64.exe (HP Printing Korea Co., Ltd.) [File not signed]
FirewallRules: [{AA059325-C42E-4C81-86E6-FADAD1C80AB6}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EasyPrinterManagerV2.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{DA26D0DE-D06F-4348-8510-41017C8E6C0A}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (Samsung Electronics CO., LTD. -> Samsung Electronics)
FirewallRules: [{F4B34061-1049-4739-A36F-CE8625807540}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2AlertList.exe (Samsung Electronics CO., LTD. -> Samsung Electronics)
FirewallRules: [{62B4E6E7-42E6-460B-AEB6-5CF27F077F63}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2Migrator.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{EAA56F2C-D402-4548-B4B0-F0315E642477}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{EC529A8F-AF5B-41E8-B678-5C680FE977AA}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{3117EF26-427A-4A92-A534-FF46EFE06987}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{B341F846-1778-4A4E-8577-E14D4EED0C82}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{476A6FE2-8A69-41FB-8666-364858121C07}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe (HP Inc. -> )
FirewallRules: [{4EEF0F06-C64F-4C56-ABB4-9860557388AC}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe (HP Inc. -> )
FirewallRules: [{A7B85B87-FE46-4FFC-978E-B5A5D5B1B213}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe (HP Inc. -> )
FirewallRules: [{8E8D25EA-F707-4855-B5E9-E9B0EA8B252A}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe (HP Inc. -> )
FirewallRules: [TCP Query User{793F76AE-5656-4CD1-9678-D4581A9C0D1A}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Allow) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [UDP Query User{BC79552A-6EEA-41B1-BE53-4FAD9887223F}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Allow) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{F321761E-6DEA-42CC-94EF-1CBF31D2A100}] => (Allow) C:\Program Files (x86)\Universal Media Server\jre-x64\bin\javaw.exe
FirewallRules: [{951BABC1-B0E2-4CB4-AE3C-D45A38D39062}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{A1E728C2-061C-4DAD-B26C-CFA7FE671292}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{A12E793C-31ED-43FF-A10B-F10E8AB618BE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{426D93A5-D071-4EF8-B8CF-CB24F7E12E4F}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{04CA4715-1917-46B0-84B9-99D662A818C2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2ED11A01-A88E-4B9C-B73D-9AD2E892D336}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6D171736-BAD6-486E-A3B9-91D8A1CF31A8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{44DB8FBF-8A2D-4A12-BFF3-B0BEE6496E40}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{49C1CB05-E76B-4526-92BA-45B802A54038}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{392070E2-2C21-4D82-8988-2B7922DB18E0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CA4F57D0-A822-4646-8520-3F74CB263D0E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CAEB7A6D-12AC-4E22-ACB0-306A454F9655}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ADA9A3D4-E7BD-4EED-95D8-EF45A4C20F1A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A07192DC-4CD7-42CA-A657-178DA0FB5619}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)
FirewallRules: [{A851A47E-C7DF-4DE5-B7B6-8B6699BA6ED7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{274DB192-6303-4458-BD6C-B59067E9B70D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA6BF20F-7831-4B86-B014-EE7786984DA5}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9DB0555E-28C3-495D-9266-59A5B3649F68}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

13-02-2020 18:26:19 Windows Update

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (02/16/2020 08:37:53 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Google Update Helper -- Error 1316. Zadaný účet již existuje.

Error: (02/16/2020 08:25:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: usocoreworker.exe, verze: 10.0.18362.356, časové razítko: 0x3ff4cf43
Název chybujícího modulu: usocoreworker.exe, verze: 10.0.18362.356, časové razítko: 0x3ff4cf43
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000000c443
ID chybujícího procesu: 0x3a64
Čas spuštění chybující aplikace: 0x01d5e49909c0a121
Cesta k chybující aplikaci: C:\Windows\System32\usocoreworker.exe
Cesta k chybujícímu modulu: C:\Windows\System32\usocoreworker.exe
ID zprávy: 05c518cb-e11d-4a86-a6bc-2f5ff4cb12e8
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/16/2020 08:19:45 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program StartMenuExperienceHost.exe verze 0.0.0.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1664

Čas spuštění: 01d5e313d9ab4d90

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe

ID hlášení: 6cbbd2c4-29a0-482c-97c8-142951bddf7e

Úplný název balíčku s chybou: Microsoft.Windows.StartMenuExperienceHost_10.0.18362.329_neutral_neutral_cw5n1h2txyewy

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Cross-thread

Error: (02/16/2020 08:12:51 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program YourPhone.exe verze 1.19123.13.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1ebc

Čas spuštění: 01d5e313f24bad1d

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19123.13.0_x64__8wekyb3d8bbwe\YourPhone.exe

ID hlášení: 5c1cd56c-5cdd-401d-8492-a0d427949c1d

Úplný název balíčku s chybou: Microsoft.YourPhone_1.19123.13.0_x64__8wekyb3d8bbwe

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (02/16/2020 07:54:08 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\WINDOWS\system32\sysmain.dll (kód chyby Win32 126).

Error: (02/16/2020 07:54:05 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY)
Description: Velikost požadované vyrovnávací paměti je větší než velikost vyrovnávací paměti předané do funkce Collect knihovny DLL rozšiřitelných čítačů C:\Windows\System32\perfts.dll pro službu LSM. Velikost dané vyrovnávací paměti: 32088; požadovaná velikost: 52360.

Error: (02/16/2020 07:49:10 AM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 28) (User: DESKTOP-BG5JJNF)
Description: Sledování změn uživatelských seznamů slov se nezdařilo: -2147023504. Kontrola pravopisu zůstane dostupná, ale nebudou ohlášeny žádné změny.

Error: (02/16/2020 07:47:14 AM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 28) (User: DESKTOP-BG5JJNF)
Description: Sledování změn uživatelských seznamů slov se nezdařilo: -2147023504. Kontrola pravopisu zůstane dostupná, ale nebudou ohlášeny žádné změny.


System errors:
=============
Error: (02/16/2020 08:32:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba bookingDesktopApp Update Service (bookingdesktopapp) byla neočekávaně ukončena. Tento stav nastal již 10krát.

Error: (02/16/2020 07:43:32 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-BG5JJNF)
Description: Nelze spustit server DCOM: Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy!CortanaUI jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147958016
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca

Error: (02/16/2020 07:43:20 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-BG5JJNF)
Description: Nelze spustit server DCOM: Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXynb3eakad12451rv00qxextfnce9sxb8.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147958016
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca

Error: (02/14/2020 08:40:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba bookingDesktopApp Update Service (bookingdesktopapp) byla neočekávaně ukončena. Tento stav nastal již 9krát.

Error: (02/14/2020 07:05:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba bookingDesktopApp Update Service (bookingdesktopapp) byla neočekávaně ukončena. Tento stav nastal již 8krát.

Error: (02/14/2020 04:49:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba bookingDesktopApp Update Service (bookingdesktopapp) byla neočekávaně ukončena. Tento stav nastal již 7krát.

Error: (02/14/2020 03:29:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba bookingDesktopApp Update Service (bookingdesktopapp) byla neočekávaně ukončena. Tento stav nastal již 6krát.

Error: (02/14/2020 02:18:43 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Služba DCOM zjistila chybu 1053 při pokusu o spuštění služby WSearch s argumenty Není k dispozici za účelem spuštění serveru:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}


Windows Defender:
===================================
Date: 2020-02-13 12:38:06.703
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2684.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16600.7
Kód chyby: 0x80240017
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2020-02-13 12:22:30.711
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2684.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16600.7
Kód chyby: 0x80240016
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

CodeIntegrity:
===================================

Date: 2020-02-16 08:31:59.023
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 08:31:59.011
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 08:31:54.678
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 08:31:54.665
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 08:30:31.164
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 08:30:31.153
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 08:30:25.926
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 08:30:25.914
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: TOSHIBA 2.20 09/14/11
Motherboard: TOSHIBA NWQAA
Processor: Intel(R) Core(TM) i7 CPU Q 740 @ 1.73GHz
Percentage of memory in use: 87%
Total physical RAM: 4026.67 MB
Available physical RAM: 522.51 MB
Total Virtual: 6842.67 MB
Available Virtual: 1556.81 MB

==================== Drives ================================

Drive c: (TI30648900A) (Fixed) (Total:454.11 GB) (Free:222.45 GB) NTFS ==>[system with boot components (obtained from drive)]

\\?\Volume{f3c09d85-0000-0000-0000-100000000000}\ (System) (Fixed) (Total:1.46 GB) (Free:0.87 GB) NTFS
\\?\Volume{f3c09d85-0000-0000-0000-c0e471000000}\ () (Fixed) (Total:0.49 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: F3C09D85)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=454.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=504 MB) - (Type=27)
Partition 4: (Not Active) - (Size=9.7 GB) - (Type=17)

==================== End of Addition.txt =======================

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Taky zdravím a děkuji za kontrolu.

# -------------------------------
# Malwarebytes AdwCleaner 8.0.2.0
# -------------------------------
# Build: 01-27-2020
# Database: 2020-01-24.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-16-2020
# Duration: 00:00:40
# OS: Windows 10 Home
# Cleaned: 3
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.lnk
Deleted C:\Users\Public\Desktop\Booking.lnk

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\csastats

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [3610 octets] - [28/06/2019 12:45:11]
AdwCleaner[C00].txt - [3304 octets] - [28/06/2019 12:46:16]
AdwCleaner[S01].txt - [2074 octets] - [16/02/2020 13:01:56]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

Dejte nové logy FRST+Addition.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2020
Ran by ondre (administrator) on DESKTOP-BG5JJNF (TOSHIBA Satellite A660) (16-02-2020 15:18:18)
Running from C:\Users\ondre\Desktop
Loaded Profiles: ondre (Available Profiles: ondre & Janka & Ostatni)
Platform: Windows 10 Home Version 1903 18362.356 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler64.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler64.exe
(HP Printing Korea Co., Ltd.) [File not signed] C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(HP Printing Korea Co., Ltd.) [File not signed] C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\msoia.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\ondre\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12430.20136.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotification.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Samsung Electronics CO., LTD. -> ) C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TomTom International BV -> TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1519016 2010-07-28] (TOSHIBA CORPORATION -> TOSHIBA Corporation)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [97509120 2020-01-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [AvastBrowserAutoLaunch_0CE231CE0ED3750FB84C2E31233425D0] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [411136 2015-02-09] () [File not signed]
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [47552040 2019-12-22] (Google LLC -> )
HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2146536 2019-04-09] (TomTom International BV -> TomTom)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-17] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\79.0.3060.80\Installer\chrmstp.exe [2020-02-13] (AVAST Software s.r.o. -> AVAST Software)
BootExecute: autocheck autochk /m /P \Device\HarddiskVolume2autocheck autochk /p \??\C:autocheck autochk *
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1FC6EE4A-7E7F-425D-B771-6057E4CE9417} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27366472 2020-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {283D59D4-C616-4D36-BED5-32F405A99285} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
Task: {2B223DFB-966D-44BD-A441-149F1495D803} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
Task: {2CF24D9D-6FFC-46FB-BF1F-0A043CD33033} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
Task: {34FA4FC1-F4CA-4AE8-BA44-A8AEBD02B183} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-19] (AVAST Software s.r.o. -> AVAST Software)
Task: {42B5AF8D-E159-473C-AFF5-69022B776410} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27366472 2020-02-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {5098F203-E287-4F8C-AAB9-B213E6D07605} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167704 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C70E92D-CBF6-47A1-AFA4-DE035FE688AA} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167704 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {5F8C75FA-096A-411C-B6B3-177F30C42673} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2349960 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {6CDF9DD5-1174-43EB-B926-DFF12745EAF5} - System32\Tasks\EPM Preload => C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe [1333472 2016-01-28] (Samsung Electronics CO., LTD. -> )
Task: {7116DD0A-78FA-403A-991B-16D6E244EF39} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149840 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {95919C76-C864-4D66-9D91-396C8E36898F} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
Task: {96B9EC73-A0E8-4615-97D1-E401BCEF587F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6292336 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {AA130AD9-02D2-44EC-B696-6DECF1E61B6A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6292336 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {AEA9AC64-AD7A-40D3-B287-2F827DB39C3C} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1858536 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
Task: {B13E92A9-1472-410E-802C-7EFF11581334} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
Task: {C014CE2E-D590-4DCD-A149-572A5122BFB7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149840 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {D00BB801-251C-4A09-BCA1-9AE64E56EC4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems)
Task: {EAACCFAA-B853-4E12-B871-7CFC032F6521} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
Task: {F88933A6-ED7B-49A8-A492-47795ADCF192} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {F88933A6-ED7B-49A8-A492-47795ADCF192} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {F88933A6-ED7B-49A8-A492-47795ADCF192} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1001" /ENABLE
Task: {F88933A6-ED7B-49A8-A492-47795ADCF192} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1002" /ENABLE
Task: {F88933A6-ED7B-49A8-A492-47795ADCF192} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1003" /ENABLE
Task: {F88933A6-ED7B-49A8-A492-47795ADCF192} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{19c5cd92-1ab0-47af-bacf-3409add47b07}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{32d9ef43-4b60-4379-8728-c3febed71be2}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2019-02-02] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default [2020-02-16]
CHR Notifications: Default -> hxxps://en.softonic.com; hxxps://peetube.cc; hxxps://www.tipsport.cz; hxxps://www.tomtom.com
CHR DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> seznam.cz
CHR DefaultSuggestURL: Default -> hxxps://suggest.fulltext.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Extension: (Prezentace) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-12-31]
CHR Extension: (No-Script Suite Lite) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahnanjpbkghcdgmlchbcfoiefnifjeni [2019-07-16]
CHR Extension: (Dokumenty) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-12-31]
CHR Extension: (Disk Google) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-12-31]
CHR Extension: (YouTube) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-12-31]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-10-31]
CHR Extension: (Tabulky) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-12-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-15]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2019-02-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Gmail) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-18]
CHR Extension: (Chrome Media Router) - C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-15]
CHR Profile: C:\Users\ondre\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-07-21]
CHR Profile: C:\Users\ondre\AppData\Local\Google\Chrome\User Data\System Profile [2019-07-21]
CHR HKU\S-1-5-21-265624995-536550331-1996926755-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-19] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-12-31] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\79.0.3060.80\elevation_service.exe [968552 2020-01-08] (AVAST Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11597176 2020-02-05] (Microsoft Corporation -> Microsoft Corporation)
R2 Samsung Network Fax Server; C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxServer64.exe [700928 2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
R2 SamsungUPDUtilSvc; C:\WINDOWS\SysWOW64\SecUPDUtilSvc.exe [143664 2019-01-07] (Samsung Electronics CO., LTD. -> )
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-05-04] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2020-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2020-01-11] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37616 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [204824 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [274456 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [209552 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [65120 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [276952 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42736 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [161544 2019-11-02] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110320 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83792 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848432 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460448 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316528 2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
R3 DVB7700ALL; C:\WINDOWS\System32\Drivers\dvb7700all.sys [711168 2013-07-31] (Microsoft Windows Hardware Compatibility Publisher -> DiBcom)
R3 enecir; C:\WINDOWS\system32\DRIVERS\enecir.sys [71168 2013-11-03] (Microsoft Windows Hardware Compatibility Publisher -> ENE TECHNOLOGY INC.)
R3 enecirhid; C:\WINDOWS\system32\DRIVERS\enecirhid.sys [24064 2013-11-03] (Microsoft Windows Hardware Compatibility Publisher -> ENE TECHNOLOGY INC.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [711968 2019-06-04] (Realtek Semiconductor Corp. -> Realtek )
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [44952 2017-04-27] (Toshiba Client Solutions Co.,Ltd. -> Toshiba Client Solutions Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2020-01-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2020-01-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2020-01-11] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-16 13:30 - 2020-02-16 13:30 - 008356016 _____ (Malwarebytes) C:\Users\ondre\Downloads\AdwCleaner (1).exe
2020-02-16 12:59 - 2020-02-16 12:59 - 008356016 _____ (Malwarebytes) C:\Users\ondre\Desktop\AdwCleaner (1).exe
2020-02-16 08:33 - 2020-02-16 14:49 - 000014085 _____ C:\Users\ondre\Desktop\Addition.txt
2020-02-16 08:20 - 2020-02-16 15:22 - 000025007 _____ C:\Users\ondre\Desktop\FRST.txt
2020-02-16 08:01 - 2020-02-16 08:01 - 000000000 ____D C:\Users\ondre\AppData\Roaming\Microsoft Teams
2020-02-16 08:00 - 2020-02-16 08:00 - 002279424 _____ (Farbar) C:\Users\ondre\Downloads\FRST64 (2).exe
2020-02-16 08:00 - 2020-02-16 08:00 - 002279424 _____ (Farbar) C:\Users\ondre\Desktop\FRST64 (1).exe
2020-02-14 15:12 - 2020-02-14 15:12 - 000000000 ____D C:\Users\Ostatni\AppData\Local\Microsoft Help
2020-02-14 14:55 - 2020-02-14 14:55 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2020-02-14 14:26 - 2020-02-14 14:26 - 000002522 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002420 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000002416 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2020-02-14 14:26 - 2020-02-14 14:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2020-02-14 10:52 - 2020-02-14 10:52 - 000000000 ____D C:\Program Files\Microsoft Office 15
2020-02-14 10:46 - 2020-02-14 10:48 - 005509624 _____ (Microsoft Corporation) C:\Users\Ostatni\Downloads\Setup.Def.cs-cz_O365ProPlusRetail_0d1242d3-080d-4a41-9ea3-ab07e22b22d9_TX_DB_Platform_def_b_64_.exe
2020-02-14 10:45 - 2020-02-14 10:45 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2020-02-13 12:55 - 2020-02-13 12:55 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-02-12 07:36 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-12 07:36 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-03 15:04 - 2020-02-14 15:16 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2020-02-03 14:11 - 2020-02-03 14:11 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2020-02-03 14:11 - 2020-02-03 14:11 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2020-02-03 13:10 - 2020-02-03 13:10 - 000013634 _____ C:\Users\Janka\Downloads\Evidence pracovní doby 2020 - pedagogové.xlsx
2020-02-03 12:22 - 2020-02-03 12:22 - 000000000 ____D C:\WINDOWS\system32\Tasks\OfficeSoftwareProtectionPlatform
2020-02-03 11:54 - 2020-02-14 15:16 - 000000000 ____D C:\Program Files\Microsoft Office
2020-02-03 11:54 - 2020-02-03 11:54 - 000000000 ____D C:\Users\ondre\AppData\Local\Microsoft Help
2020-02-03 11:36 - 2020-02-03 11:50 - 633319536 _____ (Microsoft Corporation) C:\Users\ondre\Downloads\microsoft-office-2010_MSOffice201064bit (1).exe
2020-02-03 10:55 - 2020-02-03 11:05 - 633319536 _____ (Microsoft Corporation) C:\Users\ondre\Downloads\microsoft-office-2010_MSOffice201064bit.exe
2020-01-31 16:41 - 2020-01-31 16:42 - 035299688 _____ (Microsoft Corporation) C:\Users\Janka\Downloads\OneDriveSetup.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-16 15:21 - 2019-03-11 11:24 - 000000000 ____D C:\Users\ondre\AppData\Local\CrashDumps
2020-02-16 15:20 - 2019-06-28 10:14 - 000000000 ____D C:\FRST
2020-02-16 15:13 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-16 15:12 - 2019-09-23 22:42 - 000000000 ____D C:\Users\ondre
2020-02-16 15:09 - 2019-10-08 06:30 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-02-16 15:09 - 2019-10-08 06:30 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-02-16 15:09 - 2019-09-23 23:34 - 000002854 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1003
2020-02-16 15:09 - 2019-09-23 23:34 - 000002854 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1002
2020-02-16 15:09 - 2019-09-23 23:34 - 000002854 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-265624995-536550331-1996926755-1001
2020-02-16 15:08 - 2019-09-23 23:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-02-16 15:08 - 2018-12-31 16:10 - 000073232 _____ (Absolute Software Corp.) C:\WINDOWS\SysWOW64\rpcnet.dll
2020-02-16 15:08 - 2018-12-31 15:04 - 000017920 _____ C:\WINDOWS\system32\rpcnetp.exe
2020-02-16 15:07 - 2019-09-23 22:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-02-16 14:53 - 2019-09-23 23:34 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-02-16 14:46 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-16 14:11 - 2020-01-02 18:18 - 000000000 ____D C:\Program Files (x86)\bookingDesktopApp
2020-02-16 14:11 - 2020-01-02 18:14 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2020-02-16 13:39 - 2019-03-19 05:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-02-16 13:38 - 2019-09-23 22:30 - 000484832 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-02-16 13:38 - 2018-12-31 15:06 - 000017920 _____ C:\WINDOWS\SysWOW64\rpcnetp.dll
2020-02-16 13:37 - 2018-12-31 15:04 - 000017920 _____ C:\WINDOWS\SysWOW64\rpcnetp.exe
2020-02-16 13:35 - 2019-09-23 22:42 - 000000000 ____D C:\Users\Janka
2020-02-16 13:21 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-16 10:31 - 2019-07-25 07:27 - 000000000 ____D C:\Users\ondre\AppData\Roaming\vlc
2020-02-16 08:02 - 2019-02-09 15:54 - 000000000 ____D C:\Users\ondre\AppData\Local\SquirrelTemp
2020-02-16 07:56 - 2018-12-31 15:41 - 000000000 ___RD C:\Users\ondre\OneDrive
2020-02-16 07:56 - 2018-12-31 15:41 - 000000000 ___RD C:\Users\ondre\OneDrive
2020-02-16 07:56 - 2018-12-31 15:41 - 000000000 ___RD C:\Users\ondre\OneDrive
2020-02-16 07:40 - 2019-12-03 09:00 - 000000000 ___HD C:\OneDriveTemp
2020-02-16 07:40 - 2018-12-31 16:31 - 000000000 ___RD C:\Users\Janka\OneDrive
2020-02-16 07:40 - 2018-12-31 16:31 - 000000000 ___RD C:\Users\Janka\OneDrive
2020-02-16 07:40 - 2018-12-31 16:31 - 000000000 ___RD C:\Users\Janka\OneDrive
2020-02-14 17:00 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-14 15:16 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-02-14 15:12 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\System
2020-02-14 10:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-13 17:20 - 2019-09-23 23:34 - 000003856 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2020-02-13 17:20 - 2019-09-23 23:34 - 000003272 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2020-02-13 17:20 - 2018-12-31 16:08 - 000002509 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2020-02-13 17:20 - 2018-12-31 16:08 - 000002474 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2020-02-13 17:09 - 2019-02-02 16:51 - 000000000 ____D C:\Install
2020-02-13 12:09 - 2019-01-02 14:48 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 12:08 - 2019-01-02 14:47 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-12 07:09 - 2019-09-23 23:34 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-02-10 19:55 - 2019-09-23 22:42 - 000000000 ____D C:\Users\Ostatni
2020-02-07 15:17 - 2019-09-08 11:55 - 000000000 ____D C:\Users\ondre\AppData\Local\ElevatedDiagnostics
2020-02-05 07:19 - 2019-01-07 19:47 - 000000000 ___RD C:\Users\Ostatni\OneDrive
2020-02-05 07:19 - 2019-01-07 19:47 - 000000000 ___RD C:\Users\Ostatni\OneDrive
2020-02-05 07:19 - 2019-01-07 19:47 - 000000000 ___RD C:\Users\Ostatni\OneDrive
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-03 19:57 - 2019-01-14 16:31 - 000000000 ____D C:\Users\Ostatni\AppData\Local\CrashDumps
2020-02-03 15:42 - 2018-12-31 10:41 - 000000167 _____ C:\WINDOWS\win.ini
2020-02-03 14:27 - 2019-04-30 09:00 - 000000000 ____D C:\Janka
2020-01-31 16:54 - 2018-12-31 16:14 - 000000000 ____D C:\Users\Janka\AppData\Local\ConnectedDevicesPlatform
2020-01-31 16:50 - 2019-01-19 13:02 - 000000000 ____D C:\Users\Janka\AppData\Local\PlaceholderTileLogoFolder
2020-01-31 16:50 - 2018-12-31 16:15 - 000000000 ____D C:\Users\Janka\AppData\Local\Packages
2020-01-30 13:14 - 2019-03-01 17:59 - 000000000 ____D C:\Users\Janka\AppData\Local\CrashDumps
2020-01-26 17:32 - 2019-02-06 14:18 - 000002084 _____ C:\Users\Public\Desktop\Google Slides.lnk
2020-01-26 17:32 - 2019-02-06 14:18 - 000002082 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2020-01-26 17:32 - 2019-02-06 14:18 - 000002072 _____ C:\Users\Public\Desktop\Google Docs.lnk
2020-01-26 17:32 - 2019-02-06 14:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-01-18 13:31 - 2019-02-06 14:26 - 000000000 ___RD C:\Users\ondre\Disk Google
2020-01-18 13:31 - 2019-02-06 14:26 - 000000000 ___RD C:\Users\ondre\Disk Google
2020-01-18 13:31 - 2019-02-06 14:26 - 000000000 ___RD C:\Users\ondre\Disk Google
2020-01-17 16:14 - 2018-12-31 15:41 - 000002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-17 16:14 - 2018-12-31 15:41 - 000002271 _____ C:\Users\Public\Desktop\Google Chrome.lnk

==================== Files in the root of some directories ========

2020-01-10 11:48 - 2020-01-10 11:48 - 000000153 _____ () C:\Users\ondre\AppData\Local\{01150414-5402-4C85-8619-1922B8314B75}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by ondre (16-02-2020 15:25:27)
Running from C:\Users\ondre\Desktop
Windows 10 Home Version 1903 18362.356 (X64) (2019-09-23 22:35:57)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-265624995-536550331-1996926755-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-265624995-536550331-1996926755-503 - Limited - Disabled)
Guest (S-1-5-21-265624995-536550331-1996926755-501 - Limited - Disabled)
Janka (S-1-5-21-265624995-536550331-1996926755-1002 - Limited - Enabled) => C:\Users\Janka
ondre (S-1-5-21-265624995-536550331-1996926755-1001 - Administrator - Enabled) => C:\Users\ondre
Ostatni (S-1-5-21-265624995-536550331-1996926755-1003 - Administrator - Enabled) => C:\Users\Ostatni
WDAGUtilityAccount (S-1-5-21-265624995-536550331-1996926755-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.012.20040 - Adobe Systems Incorporated)
Android Studio (HKLM\...\Android Studio) (Version: 3.3 - Google LLC)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 79.0.3060.80 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden
AviSynth (HKLM-x32\...\AviSynth) (Version: 2.6.0 MT - )
Backup and Sync from Google (HKLM\...\{825F60D9-2633-4D52-B2B0-5DA143433BBC}) (Version: 3.48.8668.1933 - Google, Inc.)
Balíček ovladačů pro úsporný režim (HKLM-x32\...\Samsung Eco Driver Pack) (Version: 2.01.10.00 (28.05.2015) - Samsung Electronics Co., Ltd.)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
DiskCheckup v3.4 (HKLM-x32\...\DiskCheckup_is1) (Version: 3.4.1003 - PassMark Software)
FastStone Image Viewer 6.7 (HKLM-x32\...\FastStone Image Viewer) (Version: 6.7 - FastStone Soft)
FloorPlan 3D v8 (HKLM-x32\...\{93538CBE-F87E-4B79-872C-D0D098EB42EE}) (Version: 8.2 - IMSI)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
IDA-STEP (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\IDA-STEP) (Version: 4.0.18 - LKSoftWare GmbH)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{73250D12-B600-4ED6-AFC0-10D9D8EDA745}) (Version: 7.3.2 - Intel Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Microsoft Office 365 ProPlus - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.11929.20606 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\Teams) (Version: 1.3.00.362 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM-x32\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.5.0 - Mozilla)
Mozilla Thunderbird 60.5.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 60.5.0 (x86 cs)) (Version: 60.5.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20606 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20606 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.11929.20606 - Microsoft Corporation) Hidden
OpenOffice 4.1.5 (HKLM-x32\...\{2FEA9841-64DE-4FA5-A36F-1CD23E2790EB}) (Version: 4.15.9789 - Apache Software Foundation)
Ovládací panel NVIDIA 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 342.01 - NVIDIA Corporation) Hidden
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22617 - Microsoft Corporation)
Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 2.02.53 (30.05.2018) - HP Printing Korea Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 2.01.00.04 - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 2.02.28 (29.05.2018) - HP Printing Korea Co., Ltd.)
Samsung Printer Center (HKLM-x32\...\Samsung Printer Center) (Version: 1.0.0.12 - Samsung Electronics Co., Ltd.)
Samsung Printer Diagnostics (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.2.5 - Samsung Electronics Co., Ltd.)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.32 - Samsung Electronics Co., Ltd.) Hidden
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 3.31.81.01:10 - Samsung Electronics Co., Ltd.)
SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd) Hidden
STP Viewer 2.3 (HKLM-x32\...\{CECCF8B1-F595-4845-9AA6-1EC57B9BECBA}_is1) (Version: - IdeaMK)
Stylish Driver Pack (HKLM-x32\...\Samsung Stylish UI Pack) (Version: 1.01.74.00 (09.02.2015) - Samsung Electronics Co., Ltd.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.4.3.38 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.362 - Microsoft Corporation)
TomTom MyDrive Connect 4.2.5.3754 (HKLM-x32\...\MyDriveConnect) (Version: 4.2.5.3754 - TomTom)
TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.20.64 - TOSHIBA Corporation)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.21a - Ghisler Software GmbH)
Uninstall Samsung Printer Software (HKLM-x32\...\TotalUninstaller) (Version: 4.0.0.12 - Samsung Electronics CO., LTD.)
Universal Media Server (HKLM-x32\...\Universal Media Server) (Version: 9.1.0 - Universal Media Server)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM\...\{EC4F72E8-52FE-454E-B70F-DBE5C0FA44C5}) (Version: 1.20.0.0 - Microsoft Corporation) Hidden
VLC media player 1.0.5 (HKLM-x32\...\VLC media player) (Version: 1.0.5 - VideoLAN Team)
WhatsApp (HKU\S-1-5-21-265624995-536550331-1996926755-1001\...\WhatsApp) (Version: 0.3.2043 - WhatsApp)
Zobrazit uživatelskou příručku (HKLM-x32\...\View User Guide) (Version: 4.0.0.6 - )

Packages:
=========
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.1.4081.0_x64__rz1tebttyb220 [2020-01-27] (Dolby Laboratories)
Fitbit Coach -> C:\Program Files\WindowsApps\Fitbit.FitbitCoach_4.4.133.0_x64__6mqt6hf9g46tw [2019-09-24] (Fitbit)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-16] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-16] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-12] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-20] (Microsoft Corporation) [MS Ad]
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-01-07] (Samsung Electronics Co. Ltd.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-265624995-536550331-1996926755-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\ondre\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19317.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-265624995-536550331-1996926755-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\ondre\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19317.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [!NetFax0] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax1] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax2] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax3] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax4] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax5] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax6] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [!NetFax7] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll [2018-05-29] (HP Printing Korea Co., Ltd.) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-12-22] (Google LLC -> Google)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-12-22] (Google LLC -> Google)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. -> AVAST Software)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2018-10-15 11:01 - 2018-10-15 11:01 - 000013312 _____ () [File not signed] C:\Program Files (x86)\MyDrive Connect\libEGL.DLL
2018-10-15 11:01 - 2018-10-15 11:01 - 001950720 _____ () [File not signed] C:\Program Files (x86)\MyDrive Connect\libGLESv2.dll
2014-09-11 16:14 - 2014-09-11 16:14 - 000218112 _____ () [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qmng.dll
2020-01-27 16:19 - 2020-01-27 16:22 - 000159744 _____ () [File not signed] C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.1.4081.0_x64__rz1tebttyb220\DAXRPCClient.dll
2020-01-27 16:19 - 2020-01-27 16:23 - 037985792 _____ () [File not signed] C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.1.4081.0_x64__rz1tebttyb220\DolbyAccess.dll
2018-12-31 17:10 - 2018-12-31 17:12 - 000948736 _____ () [File not signed] C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.1.4081.0_x64__rz1tebttyb220\e_sqlite3.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 000114176 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_ctypes.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000173056 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_elementtree.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 001808896 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_hashlib.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000032256 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_multiprocessing.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000046080 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_psutil_windows.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000047616 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_socket.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 002241024 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_ssl.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000026112 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\_yappi.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000080896 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\bz2.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000016384 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\common.time34.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000007680 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\hashobjs_ext.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000301568 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\PIL._imaging.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000169472 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\pyexpat.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 001084416 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\pysqlite2._sqlite.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000548864 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\pythoncom27.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 000137728 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\pywintypes27.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 000010752 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\select.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000020992 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\thumbnails_ext.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000689664 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\unicodedata.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000119808 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\usb_ext.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000128512 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32api.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000438784 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32com.shell.shell.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000011776 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32crypt.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000023040 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32event.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000149504 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32file.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000223232 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32gui.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000048128 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32inet.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000029696 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32pdh.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000027648 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32pipe.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000044032 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32process.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000020480 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32profile.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000136192 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32security.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000026624 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\win32ts.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000034816 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\windows.conditional.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000038400 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\windows.connectivity.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000071680 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\windows.device_monitor.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000109056 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\windows.volumes.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000020480 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\windows.winwrap.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 001325056 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wx._controls_.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 001489408 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wx._core_.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 001007104 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wx._gdi_.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000103424 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wx._html2.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 000916992 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wx._misc_.pyd
2020-02-16 15:13 - 2020-02-16 15:13 - 001039872 _____ () [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wx._windows_.pyd
2019-01-07 08:52 - 2018-05-29 19:29 - 000586240 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\System32\NetFaxPort64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 001050112 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxDataBase64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 001863680 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxEngine64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 000193024 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxShell64.dll
2019-01-07 08:52 - 2018-05-29 19:29 - 000146944 _____ (HP Printing Korea Co., Ltd.) [File not signed] C:\WINDOWS\system32\spool\PRTPROCS\x64\NetFaxProc64.dll
2020-02-14 11:38 - 2020-02-14 11:38 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\AppVIsvSubsystems64.dll
2020-02-14 11:38 - 2020-02-14 11:38 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\c2r64.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 003042816 _____ (Python Software Foundation) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\python27.dll
2015-12-30 03:39 - 2015-12-30 03:39 - 000123904 _____ (Samsung Electronics Co., Ltd.) [File not signed] C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll
2018-03-27 21:33 - 2018-03-27 21:33 - 001370624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\MyDrive Connect\LIBEAY32.dll
2018-03-27 21:33 - 2018-03-27 21:33 - 000337920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\MyDrive Connect\ssleay32.dll
2018-10-15 11:11 - 2018-10-15 11:11 - 000038912 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qgenericbearer.dll
2018-10-15 11:10 - 2018-10-15 11:10 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qgif.dll
2018-10-16 11:39 - 2018-10-16 11:39 - 000033280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qicns.dll
2018-10-15 11:10 - 2018-10-15 11:10 - 000027648 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qico.dll
2018-10-15 11:12 - 2018-10-15 11:12 - 000243712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjpeg.dll
2018-10-16 11:31 - 2018-10-16 11:31 - 000021504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qsvg.dll
2018-10-16 11:38 - 2018-10-16 11:38 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtga.dll
2018-10-16 11:39 - 2018-10-16 11:39 - 000327680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtiff.dll
2018-10-16 11:38 - 2018-10-16 11:38 - 000019968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwbmp.dll
2018-10-16 11:39 - 2018-10-16 11:39 - 000400896 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwebp.dll
2018-10-15 11:12 - 2018-10-15 11:12 - 001096704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Plugins\platforms\qwindows.dll
2019-04-09 14:26 - 2019-04-09 14:26 - 004785152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Core.dll
2018-10-15 11:05 - 2018-10-15 11:05 - 004970496 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Gui.dll
2018-10-15 11:05 - 2018-10-15 11:05 - 000961024 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Network.dll
2018-10-16 11:31 - 2018-10-16 11:31 - 000264704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Svg.dll
2018-10-15 11:09 - 2018-10-15 11:09 - 004468224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Widgets.dll
2018-10-15 11:02 - 2018-10-15 11:02 - 000150016 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\MyDrive Connect\Qt5Xml.dll
2019-04-09 14:23 - 2019-04-09 14:23 - 000137216 _____ (TomTom) [File not signed] C:\Program Files (x86)\MyDrive Connect\DeviceNavEthernetCore.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wxbase30u_net_vc90_x64.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wxbase30u_vc90_x64.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wxmsw30u_adv_vc90_x64.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wxmsw30u_core_vc90_x64.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wxmsw30u_html_vc90_x64.dll
2020-02-16 15:13 - 2020-02-16 15:13 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\ondre\AppData\Local\Temp\_MEI28882\wxmsw30u_webview_vc90_x64.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-12-31 10:41 - 2019-01-04 12:27 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Android;C:\Windows\System32
HKU\S-1-5-21-265624995-536550331-1996926755-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ondre\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{31205EB2-6B6D-4823-B93C-4E1E3B4B3232}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom International BV -> TomTom)
FirewallRules: [{F58C84AF-D84C-4138-818F-892FA8CDF9AC}] => (Block) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [{EB5D10BA-B463-4B42-B746-AEA840E14833}] => (Block) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{7EC73A43-CD38-4370-919D-30602B21A577}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [TCP Query User{3B02F33B-6A32-420A-AA7F-6B4B3469666A}C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{DA936714-B68C-4053-AC54-608DE189AA5B}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [TCP Query User{5B006D08-B951-4297-8D65-03211202CC57}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [UDP Query User{8F0C67AC-1B6F-42AD-AEF1-322EF0CEC72F}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [TCP Query User{18F09D80-5826-428E-8DB1-5E4537549D83}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [UDP Query User{C6F54BE4-E64B-4613-9B32-1D7BB390AF48}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [TCP Query User{1CE6C4C4-A710-4DA0-BA83-14D4E6A9CABB}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [UDP Query User{8EB72966-C647-4134-89A7-C2E6B849F4F9}C:\program files\android\android studio1\jre\bin\java.exe] => (Allow) C:\program files\android\android studio1\jre\bin\java.exe
FirewallRules: [TCP Query User{C218BCD2-474E-4BD4-8B2C-D85B101D3445}C:\program files\android\android studio1\jre\bin\java.exe] => (Allow) C:\program files\android\android studio1\jre\bin\java.exe
FirewallRules: [{2BAF2252-A399-4751-A84E-42D4E024DF5C}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Printer Center\SamsungPrinterCenter.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{EC6B06D9-CF90-47ED-AD86-4F1C01444314}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ScanCDLM.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{FF6D72D2-F199-47BD-8655-6E8E4ABE7D82}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon64.exe (HP Printing Korea Co., Ltd.) [File not signed]
FirewallRules: [{517A5FA0-C5FF-4FA6-8C55-A9EF6F4F175E}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon.exe (HP Printing Korea Co., Ltd.) [File not signed]
FirewallRules: [{2BED9D6A-05BA-4A31-B140-B50BA9FA33BD}] => (Allow) C:\WINDOWS\system32\spool\drivers\x64\3\NetFaxMon64.exe (HP Printing Korea Co., Ltd.) [File not signed]
FirewallRules: [{AA059325-C42E-4C81-86E6-FADAD1C80AB6}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EasyPrinterManagerV2.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{DA26D0DE-D06F-4348-8510-41017C8E6C0A}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (Samsung Electronics CO., LTD. -> Samsung Electronics)
FirewallRules: [{F4B34061-1049-4739-A36F-CE8625807540}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2AlertList.exe (Samsung Electronics CO., LTD. -> Samsung Electronics)
FirewallRules: [{62B4E6E7-42E6-460B-AEB6-5CF27F077F63}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2Migrator.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{EAA56F2C-D402-4548-B4B0-F0315E642477}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{EC529A8F-AF5B-41E8-B678-5C680FE977AA}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{3117EF26-427A-4A92-A534-FF46EFE06987}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{B341F846-1778-4A4E-8577-E14D4EED0C82}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{476A6FE2-8A69-41FB-8666-364858121C07}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe (HP Inc. -> )
FirewallRules: [{4EEF0F06-C64F-4C56-ABB4-9860557388AC}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe (HP Inc. -> )
FirewallRules: [{A7B85B87-FE46-4FFC-978E-B5A5D5B1B213}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe (HP Inc. -> )
FirewallRules: [{8E8D25EA-F707-4855-B5E9-E9B0EA8B252A}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe (HP Inc. -> )
FirewallRules: [TCP Query User{793F76AE-5656-4CD1-9678-D4581A9C0D1A}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Allow) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [UDP Query User{BC79552A-6EEA-41B1-BE53-4FAD9887223F}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Allow) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{F321761E-6DEA-42CC-94EF-1CBF31D2A100}] => (Allow) C:\Program Files (x86)\Universal Media Server\jre-x64\bin\javaw.exe
FirewallRules: [{951BABC1-B0E2-4CB4-AE3C-D45A38D39062}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe No File
FirewallRules: [{A1E728C2-061C-4DAD-B26C-CFA7FE671292}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe No File
FirewallRules: [{A12E793C-31ED-43FF-A10B-F10E8AB618BE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe No File
FirewallRules: [{426D93A5-D071-4EF8-B8CF-CB24F7E12E4F}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe No File
FirewallRules: [{04CA4715-1917-46B0-84B9-99D662A818C2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2ED11A01-A88E-4B9C-B73D-9AD2E892D336}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6D171736-BAD6-486E-A3B9-91D8A1CF31A8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{44DB8FBF-8A2D-4A12-BFF3-B0BEE6496E40}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{49C1CB05-E76B-4526-92BA-45B802A54038}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{392070E2-2C21-4D82-8988-2B7922DB18E0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CA4F57D0-A822-4646-8520-3F74CB263D0E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CAEB7A6D-12AC-4E22-ACB0-306A454F9655}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ADA9A3D4-E7BD-4EED-95D8-EF45A4C20F1A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A07192DC-4CD7-42CA-A657-178DA0FB5619}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)
FirewallRules: [{A851A47E-C7DF-4DE5-B7B6-8B6699BA6ED7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{274DB192-6303-4458-BD6C-B59067E9B70D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA6BF20F-7831-4B86-B014-EE7786984DA5}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9DB0555E-28C3-495D-9266-59A5B3649F68}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (02/16/2020 03:33:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program HxOutlook.exe verze 16.0.12430.20132 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1598

Čas spuštění: 01d5e4d5dd7a6090

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12430.20136.0_x64__8wekyb3d8bbwe\HxOutlook.exe

ID hlášení: f55c4fc5-c8f6-4666-b07e-1022aef78f36

Úplný název balíčku s chybou: microsoft.windowscommunicationsapps_16005.12430.20136.0_x64__8wekyb3d8bbwe

ID aplikace relativní podle balíčku s chybou: microsoft.windowslive.mail

Typ zablokování: Cross-thread

Error: (02/16/2020 03:32:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: backgroundTaskHost.exe, verze: 10.0.18362.1, časové razítko: 0x533f8404
Název chybujícího modulu: twinapi.appcore.dll, verze: 10.0.18362.1, časové razítko: 0x42f071ca
Kód výjimky: 0xc000027b
Posun chyby: 0x00000000000d5cc8
ID chybujícího procesu: 0xf84
Čas spuštění chybující aplikace: 0x01d5e4d5d4cf9d4a
Cesta k chybující aplikaci: C:\WINDOWS\system32\backgroundTaskHost.exe
Cesta k chybujícímu modulu: C:\Windows\System32\twinapi.appcore.dll
ID zprávy: 8bf7ddd2-0ba6-47ba-bad1-5bfb44600cda
Úplný název chybujícího balíčku: Microsoft.MicrosoftOfficeHub_18.2001.1241.0_x64__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: Microsoft.MicrosoftOfficeHub

Error: (02/16/2020 03:32:16 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3308,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (02/16/2020 03:29:41 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 28) (User: DESKTOP-BG5JJNF)
Description: Sledování změn uživatelských seznamů slov se nezdařilo: -2147023504. Kontrola pravopisu zůstane dostupná, ale nebudou ohlášeny žádné změny.

Error: (02/16/2020 03:28:25 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 28) (User: DESKTOP-BG5JJNF)
Description: Sledování změn uživatelských seznamů slov se nezdařilo: -2147023504. Kontrola pravopisu zůstane dostupná, ale nebudou ohlášeny žádné změny.

Error: (02/16/2020 03:20:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: backgroundTaskHost.exe, verze: 10.0.18362.1, časové razítko: 0x533f8404
Název chybujícího modulu: twinapi.appcore.dll, verze: 10.0.18362.1, časové razítko: 0x42f071ca
Kód výjimky: 0xc000027b
Posun chyby: 0x00000000000d5cc8
ID chybujícího procesu: 0x1874
Čas spuštění chybující aplikace: 0x01d5e4d3cf9d1b7f
Cesta k chybující aplikaci: C:\WINDOWS\system32\backgroundTaskHost.exe
Cesta k chybujícímu modulu: C:\Windows\System32\twinapi.appcore.dll
ID zprávy: f94ae165-b11e-4bf3-8543-71bf3de083f3
Úplný název chybujícího balíčku: Microsoft.MicrosoftOfficeHub_18.2001.1241.0_x64__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: Microsoft.MicrosoftOfficeHub

Error: (02/16/2020 03:20:13 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 28) (User: DESKTOP-BG5JJNF)
Description: Sledování změn uživatelských seznamů slov se nezdařilo: -2147023504. Kontrola pravopisu zůstane dostupná, ale nebudou ohlášeny žádné změny.

Error: (02/16/2020 03:14:10 PM) (Source: Microsoft-Windows-Spell-Checking) (EventID: 28) (User: DESKTOP-BG5JJNF)
Description: Sledování změn uživatelských seznamů slov se nezdařilo: -2147023504. Kontrola pravopisu zůstane dostupná, ale nebudou ohlášeny žádné změny.


System errors:
=============
Error: (02/16/2020 03:15:32 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0xe0000003): 2020-02 Kumulativní aktualizace pro Windows 10 Version 1903 pro systémy typu x64 (KB4532693).

Error: (02/16/2020 03:11:29 PM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
Description: Ve struktuře systému souborů na svazku C: bylo zjištěno poškození.

Bylo nalezeno poškození ve struktuře indexů systému souborů. Referenční číslo souboru je 0xb000000080f39. Název souboru je \Users\ondre\AppData\Roaming\Microsoft. Poškozený atribut indexu je :$I30:$INDEX_ALLOCATION.

Error: (02/16/2020 03:07:15 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT AUTHORITY)
Description: C:\Device\HarddiskVolume23

Error: (02/16/2020 03:08:14 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (14:20:51, ‎16.‎02.‎2020) bylo neočekávané.

Error: (02/16/2020 02:40:45 PM) (Source: DCOM) (EventID: 10029) (User: DESKTOP-BG5JJNF)
Description: U aktivace identifikátoru CLSID {E60687F7-01A1-40AA-86AC-DB1CBF673334} vypršel časový limit během čekání na zastavení služby wuauserv.

Error: (02/16/2020 01:51:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba bookingDesktopApp Update Service (bookingdesktopapp) byla neočekávaně ukončena. Tento stav nastal již 2krát.

Error: (02/16/2020 01:44:27 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0xe0000003): 2020-02 Kumulativní aktualizace pro Windows 10 Version 1903 pro systémy typu x64 (KB4532693).

Error: (02/16/2020 01:44:27 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0xe0000003): Aktualizace zabezpečení systému Windows 10 Version 1903 pro systémy na platformě x64 (KB4524244).


Windows Defender:
===================================
Date: 2020-02-13 12:38:06.703
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2684.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16600.7
Kód chyby: 0x80240017
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2020-02-13 12:22:30.711
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2684.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.16600.7
Kód chyby: 0x80240016
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

CodeIntegrity:
===================================

Date: 2020-02-16 15:34:26.519
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 15:34:26.509
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 15:31:04.255
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 15:31:04.241
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 15:31:03.076
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 15:31:03.061
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 15:30:30.302
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-16 15:30:30.300
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: TOSHIBA 2.20 09/14/11
Motherboard: TOSHIBA NWQAA
Processor: Intel(R) Core(TM) i7 CPU Q 740 @ 1.73GHz
Percentage of memory in use: 79%
Total physical RAM: 4026.67 MB
Available physical RAM: 809.31 MB
Total Virtual: 6714.67 MB
Available Virtual: 3322.83 MB

==================== Drives ================================

Drive c: (TI30648900A) (Fixed) (Total:454.11 GB) (Free:226.4 GB) NTFS ==>[system with boot components (obtained from drive)]

\\?\Volume{f3c09d85-0000-0000-0000-100000000000}\ (System) (Fixed) (Total:1.46 GB) (Free:0.87 GB) NTFS
\\?\Volume{f3c09d85-0000-0000-0000-c0e471000000}\ () (Fixed) (Total:0.49 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: F3C09D85)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=454.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=504 MB) - (Type=27)
Partition 4: (Not Active) - (Size=9.7 GB) - (Type=17)

==================== End of Addition.txt =======================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
C:\Users\ondre\AppData\Local\Temp
FirewallRules: [UDP Query User{DA936714-B68C-4053-AC54-608DE189AA5B}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [TCP Query User{5B006D08-B951-4297-8D65-03211202CC57}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [UDP Query User{8F0C67AC-1B6F-42AD-AEF1-322EF0CEC72F}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [TCP Query User{18F09D80-5826-428E-8DB1-5E4537549D83}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [UDP Query User{C6F54BE4-E64B-4613-9B32-1D7BB390AF48}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [TCP Query User{1CE6C4C4-A710-4DA0-BA83-14D4E6A9CABB}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [{951BABC1-B0E2-4CB4-AE3C-D45A38D39062}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe No File
FirewallRules: [{A1E728C2-061C-4DAD-B26C-CFA7FE671292}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe No File
FirewallRules: [{A12E793C-31ED-43FF-A10B-F10E8AB618BE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe No File
FirewallRules: [{426D93A5-D071-4EF8-B8CF-CB24F7E12E4F}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe No File
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {283D59D4-C616-4D36-BED5-32F405A99285} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
Task: {B13E92A9-1472-410E-802C-7EFF11581334} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
C:\Users\ondre\AppData\Local\{01150414-5402-4C85-8619-1922B8314B75}

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by ondre (16-02-2020 16:05:28) Run:2
Running from C:\Users\ondre\Desktop
Loaded Profiles: ondre (Available Profiles: ondre & Janka & Ostatni)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
C:\Users\ondre\AppData\Local\Temp
FirewallRules: [UDP Query User{DA936714-B68C-4053-AC54-608DE189AA5B}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [TCP Query User{5B006D08-B951-4297-8D65-03211202CC57}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe No File
FirewallRules: [UDP Query User{8F0C67AC-1B6F-42AD-AEF1-322EF0CEC72F}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [TCP Query User{18F09D80-5826-428E-8DB1-5E4537549D83}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe No File
FirewallRules: [UDP Query User{C6F54BE4-E64B-4613-9B32-1D7BB390AF48}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [TCP Query User{1CE6C4C4-A710-4DA0-BA83-14D4E6A9CABB}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe No File
FirewallRules: [{951BABC1-B0E2-4CB4-AE3C-D45A38D39062}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe No File
FirewallRules: [{A1E728C2-061C-4DAD-B26C-CFA7FE671292}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe No File
FirewallRules: [{A12E793C-31ED-43FF-A10B-F10E8AB618BE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe No File
FirewallRules: [{426D93A5-D071-4EF8-B8CF-CB24F7E12E4F}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe No File
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {283D59D4-C616-4D36-BED5-32F405A99285} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
Task: {B13E92A9-1472-410E-802C-7EFF11581334} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2018-12-31] (Google Inc -> Google Inc.)
C:\Users\ondre\AppData\Local\{01150414-5402-4C85-8619-1922B8314B75}

EmptyTemp:
End
*****************

Processes closed successfully.

"C:\Users\ondre\AppData\Local\Temp" folder move:

Could not move "C:\Users\ondre\AppData\Local\Temp" => Scheduled to move on reboot.

"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DA936714-B68C-4053-AC54-608DE189AA5B}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5B006D08-B951-4297-8D65-03211202CC57}C:\program files (x86)\common files\oracle\java\javapath_target_819937\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8F0C67AC-1B6F-42AD-AEF1-322EF0CEC72F}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{18F09D80-5826-428E-8DB1-5E4537549D83}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C6F54BE4-E64B-4613-9B32-1D7BB390AF48}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1CE6C4C4-A710-4DA0-BA83-14D4E6A9CABB}C:\program files (x86)\java\jre1.8.0_201\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{951BABC1-B0E2-4CB4-AE3C-D45A38D39062}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A1E728C2-061C-4DAD-B26C-CFA7FE671292}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A12E793C-31ED-43FF-A10B-F10E8AB618BE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{426D93A5-D071-4EF8-B8CF-CB24F7E12E4F}" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{283D59D4-C616-4D36-BED5-32F405A99285}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{283D59D4-C616-4D36-BED5-32F405A99285}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B13E92A9-1472-410E-802C-7EFF11581334}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B13E92A9-1472-410E-802C-7EFF11581334}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
C:\Users\ondre\AppData\Local\{01150414-5402-4C85-8619-1922B8314B75} => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 12607488 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 33795355 B
Java, Flash, Steam htmlcache => 1065 B
Windows/system/drivers => 50427642 B
Edge => 1306734 B
Chrome => 199285911 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 492480 B
NetworkService => 155718578 B
ondre => 472733815 B
Janka => 547223118 B
Ostatni => 637092892 B

RecycleBin => 0 B
EmptyTemp: => 2 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 16-02-2020 16:27:09)

C:\Users\ondre\AppData\Local\Temp => moved successfully

==== End of Fixlog 16:27:10 ====

Smazáno. Nastala nějaká změna?

Prověřím pořádně a dám vědět, zatím dík.
BTW: něco zase pošlu na provoz

Rádo se stalo a za příspěvek děkujeme!