Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Pomaly start PC win 7

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Pomaly start PC win 7

#1 Příspěvek od Beraji1 »

Dobrý den, prosím o kontrolu logu. Start PC trvá cca 2 minuty :?: Děkuji.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-03-2020
Ran by Šogun (administrator) on ŠOGUN-PC (Gigabyte Technology Co., Ltd. GA-970A-DS3) (22-03-2020 17:25:44)
Running from D:\Staženo z Chromu
Loaded Profiles: Šogun & UpdatusUser (Available Profiles: Šogun & UpdatusUser & Guest)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
() [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
() [File not signed] C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVerMedia Technologies, Inc. ) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\QuickStart.exe
(AVerMedia TECHNOLOGIES, Inc.) [File not signed] C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
(AVerMedia TECHNOLOGIES, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe
(AVerMedia) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
(Cole Williams Software Limited -> ) C:\Windows\SysWOW64\Codecs\TrayMenu.exe
(CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe
(ITE Tech. Inc.) [File not signed] C:\Windows\System32\IRMonitor.exe
(Macrovision Corporation -> Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
(Nullsoft, Inc.) [File not signed] C:\Program Files (x86)\Winamp\winampa.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(PandoraTV -> Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
(PandoraTV -> PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Prolific Technology Inc.) [File not signed] C:\Windows\SysWOW64\IoctlSvc.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(Xiaomi Technology Inc -> ) C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [277664 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [NBKeyScan] => C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-06-08] (Nero AG -> Nero AG)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-10-25] (Nullsoft, Inc.) [File not signed]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\Windows\SysWOW64\Codecs\CodecUACManager.exe [66192 2017-09-24] (Cole Williams Software Limited -> )
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-06-24] (Nero AG -> Nero AG)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [Google Update] => C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-21] (Google LLC -> Google LLC)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [ISUSPM] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation -> Macrovision Corporation)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [EPSON Stylus DX4000 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBEE.EXE [139264 2006-09-21] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd -> DT Soft Ltd)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [MiPhoneManager] => C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe [449464 2017-05-09] (Xiaomi Technology Inc -> )
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22256824 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: J - J:\AutoRunCD.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae8008-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae800d-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a4c12eb5-155f-11e8-856b-902b3419f66d} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a5417187-ef7f-11e1-8aa9-902b3419f66d} - J:\setup.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {e7d6446c-7527-11e3-a02e-902b3419f66d} - F:\AutoRunCD.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk [2013-10-09]
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk [2013-10-09]
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2020-02-16]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\Codecs\TrayMenu.exe (Cole Williams Software Limited -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SnugTV Quick Start.lnk [2013-10-09]
ShortcutTarget: SnugTV Quick Start.lnk -> C:\Windows\Installer\{AB3ED2E9-3F65-4689-B483-3B0F5F2C6A62}\NewShortcut1_46FEF19C05F1475DAA14D9007DC15270_2.exe (Macrovision Corporation) [File not signed]
BootExecute: autocheck autochk * sdnclean64.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0425603D-8297-4DDD-8BAE-E4327C22B4A0} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {1D83710D-446D-4A32-8897-A571CEA7FB58} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-12] (Adobe Inc. -> Adobe)
Task: {2A1883BA-E3C7-4FBB-81E5-C2A20CD94678} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {2AA52E5E-344E-46C1-AA4E-C1BF31B3AFDB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA => C:\Users\Šogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {467C78C6-9E8A-4FE8-AA52-6D15D477474E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [4747720 2014-06-27] (Safer Networking Ltd. -> Safer-Networking Ltd.)
Task: {4FC36006-D331-4E7F-9F96-7590DFEBA025} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {66951C4E-AF57-4E12-84A8-A9141A0958B6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6193080 2016-03-21] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [File not signed]
Task: {9B35B2DF-552D-441B-9B23-B238BA525EA8} - System32\Tasks\irMonitor => C:\Windows\system32\IRMonitor.exe [114688 2013-03-05] (ITE Tech. Inc.) [File not signed]
Task: {AB785260-89E1-4CC9-B750-88915023937E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3894664 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
Task: {BF36D647-8CBF-40EB-8102-21ABCBC1A095} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5753752 2016-03-21] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [File not signed]
Task: {D71F0A29-3A68-4A29-843F-E5CA0A4A659E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {EE46E1BC-976C-41ED-947E-BEE867AB5592} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18233016 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {F0CF216D-2011-4308-8360-319C4CD6CFB2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core => C:\Users\Šogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Hosts: 127.0.0.1 cap.cyberlink.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9C105C4F-2CE1-4469-A2D0-B001A652244F}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010000.10005&barid=%7B0C92DB80-0B22-11E2-98B6-902B3419F66D%7D
SearchScopes: HKLM-x32 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10005&barid={0C92DB80-0B22-11E2-98B6-902B3419F66D}
SearchScopes: HKLM-x32 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10005&barid={0C92DB80-0B22-11E2-98B6-902B3419F66D}
SearchScopes: HKU\S-1-5-21-1027388779-4279868082-974358725-1000 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10005&barid={0C92DB80-0B22-11E2-98B6-902B3419F66D}
SearchScopes: HKU\S-1-5-21-1027388779-4279868082-974358725-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10005&barid={0C92DB80-0B22-11E2-98B6-902B3419F66D}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: No Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\ssv.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\jp2ssv.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2011-10-06] (DT Soft Ltd -> )
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKLM-x32 - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKU\S-1-5-21-1027388779-4279868082-974358725-1000 -> DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2011-10-06] (DT Soft Ltd -> )
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\dtplugin\npDeployJava1.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\plugin2\npjp2.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default [2020-03-22]
CHR DownloadDir: D:\Staženo z Chromu
CHR HomePage: Default -> hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={0C92DB80-0B22-11E2-98B6-902B3419F66D}
CHR StartupUrls: Default -> "hxxp://home.sweetim.com/?crg=3.1010000.10005&barid={0C92DB80-0B22-11E2-98B6-902B3419F66D}"
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-03-21]
CHR Extension: (Website Blocker (Beta)) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib [2019-03-02]
CHR Extension: (SweetIM for Facebook) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2015-02-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-22]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-09-30]
StartMenuInternet: Google Chrome.ORO6RRUXSZNWBMBSDEQZE7VR5Q - C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] (Giga-Byte Technology -> )
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6046624 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [413472 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [348160 2009-10-30] (AVerMedia) [File not signed]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [397312 2009-12-07] () [File not signed]
R2 AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [167936 2010-05-07] (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe [72024 2017-02-07] (Google Inc -> Google Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 MySQL; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe [7599616 2009-08-18] () [File not signed]
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG -> Nero AG)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG -> Nero AG)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2016-03-16] (PandoraTV -> Pandora.TV)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-12-04] (Even Balance, Inc. -> )
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2014-10-20] (CyberLink Corp. -> CyberLink)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SnugTV Service; C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe [528384 2010-05-06] (AVerMedia Technologies, Inc.) [File not signed]
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdsata; C:\Windows\System32\DRIVERS\amdsata.sys [70200 2009-10-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R0 amdxata; C:\Windows\System32\DRIVERS\amdxata.sys [28728 2009-10-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] (Giga-Byte Technology -> )
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37864 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205576 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [271120 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [206608 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [64272 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [279360 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42976 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [175400 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110560 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84056 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [848672 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [458584 2020-03-12] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [235184 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316256 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2017-07-15] (Tages SA -> )
R3 CLMirrorDriver; C:\Windows\System32\DRIVERS\CLMirrorDriver.sys [21264 2015-09-17] (CyberLink Corp. -> CyberLink)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-08-26] (DT Soft Ltd -> DT Soft Ltd)
R3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [56960 2011-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
R3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [79104 2011-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2013-03-06] (Microsoft Windows Hardware Compatibility Publisher -> ITE )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2017-07-15] (Tages SA -> )
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
S3 nmwcd; C:\Windows\System32\drivers\ccdcmbx64.sys [19968 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\Windows\System32\drivers\ccdcmbox64.sys [27136 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S1 prodrv06; C:\Windows\SysWOW64\drivers\prodrv06.sys [53920 2004-08-09] (Protection Technology) [File not signed]
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [114016 2004-08-09] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [7040 2004-07-19] (Protection Technology) [File not signed]
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-01-04] (Disc Soft Ltd -> Duplex Secure Ltd.)
S3 upperdev; C:\Windows\System32\DRIVERS\usbser_lowerfltx64.sys [9216 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 usbfilter; C:\Windows\System32\DRIVERS\usbfilter.sys [38456 2009-12-22] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 UsbserFilt; C:\Windows\System32\DRIVERS\usbser_lowerfltjx64.sys [9216 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
U3 a3tss5pf; C:\Windows\System32\Drivers\a3tss5pf.sys [0 0000-00-00] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
U3 aiwkmnce; C:\Windows\System32\Drivers\aiwkmnce.sys [0 0000-00-00] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-22 17:25 - 2020-03-22 17:26 - 000000000 ____D C:\FRST
2020-03-22 16:39 - 2020-03-22 16:39 - 000037354 _____ C:\Users\Šogun\energy-report.html
2020-03-12 21:11 - 2020-03-22 17:19 - 000555408 _____ C:\Windows\ntbtlog.txt
2020-03-12 21:07 - 2020-03-12 21:07 - 000008300 _____ C:\Users\Šogun\Documents\cc_20200312_210750.reg
2020-03-05 19:50 - 2020-03-05 19:49 - 000368056 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2020-03-05 19:50 - 2020-03-05 19:49 - 000235184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2020-03-05 19:50 - 2020-03-05 19:49 - 000175400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-22 17:20 - 2012-08-26 13:53 - 000000000 ____D C:\ProgramData\NVIDIA
2020-03-22 17:20 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-03-22 17:01 - 2012-08-26 14:24 - 000000000 ____D C:\Program Files (x86)\GRETECH
2020-03-22 16:55 - 2009-07-14 05:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-03-22 16:55 - 2009-07-14 05:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-03-22 16:39 - 2012-08-26 13:41 - 000000000 ____D C:\Users\Šogun
2020-03-22 14:03 - 2018-04-24 13:56 - 000003870 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-03-22 14:03 - 2013-03-06 17:39 - 000003196 _____ C:\Windows\system32\Tasks\irMonitor
2020-03-22 14:03 - 2012-09-08 15:06 - 000004396 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-03-22 14:03 - 2012-08-28 17:53 - 000002772 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-03-22 14:03 - 2012-08-27 13:18 - 000003564 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA
2020-03-22 14:03 - 2012-08-27 13:18 - 000003292 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core
2020-03-22 13:48 - 2015-12-03 18:21 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2020-03-20 13:18 - 2013-01-02 22:13 - 000000000 ____D C:\Users\Šogun\AppData\Roaming\vlc
2020-03-18 15:02 - 2012-08-27 13:19 - 000002379 _____ C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-03-18 15:02 - 2012-08-27 13:19 - 000002342 _____ C:\Users\Šogun\Desktop\Google Chrome.lnk
2020-03-17 08:59 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-03-17 08:21 - 2017-03-11 08:33 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2020-03-12 21:23 - 2012-08-28 17:53 - 000000935 _____ C:\Users\Public\Desktop\CCleaner.lnk
2020-03-12 21:23 - 2012-08-28 17:53 - 000000935 _____ C:\ProgramData\Desktop\CCleaner.lnk
2020-03-12 20:53 - 2012-09-08 15:06 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-03-12 20:53 - 2012-09-08 15:06 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-03-12 20:53 - 2012-09-08 15:06 - 000000000 ____D C:\Windows\system32\Macromed
2020-03-12 20:53 - 2012-09-08 15:04 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-03-12 20:53 - 2012-08-27 21:03 - 000458584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2020-03-05 19:50 - 2012-08-27 21:02 - 000000000 ____D C:\ProgramData\AVAST Software
2020-03-05 19:49 - 2019-02-17 19:06 - 000279360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2020-03-05 19:49 - 2019-01-19 11:23 - 000271120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000206608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000064272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000037864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2020-03-05 19:49 - 2018-10-20 19:41 - 000042976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2020-03-05 19:49 - 2017-11-16 10:33 - 000205576 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2020-03-05 19:49 - 2014-10-03 15:04 - 000316256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2020-03-05 19:49 - 2014-10-03 15:04 - 000084056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2020-03-05 19:49 - 2012-08-27 21:03 - 000848672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2020-03-05 19:49 - 2012-08-27 21:03 - 000110560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2020-02-29 08:45 - 2009-07-14 16:18 - 013605754 _____ C:\Windows\system32\perfh005.dat
2020-02-29 08:45 - 2009-07-14 16:18 - 004572546 _____ C:\Windows\system32\perfc005.dat
2020-02-29 08:45 - 2009-07-14 06:13 - 000006730 _____ C:\Windows\system32\PerfStringBackup.INI

==================== Files in the root of some directories ========

2018-06-02 18:22 - 2018-06-02 18:22 - 000198884 _____ () C:\Users\Šogun\AppData\Roaming\DMGR_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2013-11-05 19:03 - 2016-11-01 19:10 - 000000021 _____ () C:\Users\Šogun\AppData\Roaming\ISOWorkshop.ini
2016-09-20 17:19 - 2016-09-20 17:19 - 000003584 _____ () C:\Users\Šogun\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-08-27 16:59 - 2012-08-27 16:59 - 000000093 _____ () C:\Users\Šogun\AppData\Local\fusioncache.dat
2016-06-19 16:20 - 2016-06-19 16:20 - 000001482 _____ () C:\Users\Šogun\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2019-12-20 11:31
==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-03-2020
Ran by Šogun (22-03-2020 17:27:11)
Running from D:\Staženo z Chromu
Windows 7 Ultimate Service Pack 1 (X64) (2012-08-26 12:40:28)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1027388779-4279868082-974358725-500 - Administrator - Disabled)
Guest (S-1-5-21-1027388779-4279868082-974358725-501 - Limited - Disabled) => C:\Users\Guest
UpdatusUser (S-1-5-21-1027388779-4279868082-974358725-1003 - Limited - Enabled) => C:\Users\UpdatusUser
Šogun (S-1-5-21-1027388779-4279868082-974358725-1000 - Administrator - Enabled) => C:\Users\Šogun

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.344 - Adobe)
Adobe Reader X (10.1.16) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Aktualizace NVIDIA 1.8.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.8.15 - NVIDIA Corporation)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Apowersoft Online Launcher verze 1.7.1 (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.1 - APOWERSOFT LIMITED)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASUS nVidia Driver (HKLM-x32\...\{1A1FA4C1-2701-401C-8CE1-FDDE45304FF5}) (Version: 1.00.0000 - ASUSTek) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
AVerMedia A827 series driver 2.0.64.126 (HKLM-x32\...\AVerMedia A827 series driver) (Version: 2.0.64.126 - AVerMedia TECHNOLOGIES, Inc.)
AVerMedia Applications (HKLM-x32\...\{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}) (Version: 1.0.4 - AVerMedia Technologies, Inc.) Hidden
AVerMedia Applications (HKLM-x32\...\InstallShield_{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}) (Version: 1.0.4 - AVerMedia Technologies, Inc.)
AVerMedia Media Center Plug-ins 2.0.7.0 (HKLM-x32\...\AVerMedia Media Center Plug-ins) (Version: 2.0.7.0 - AVerMedia TECHNOLOGIES, Inc.)
AVerTV (HKLM-x32\...\{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}) (Version: 6.0.18 - AVerMedia Technologies, Inc.) Hidden
AVerTV (HKLM-x32\...\InstallShield_{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}) (Version: 6.0.18 - AVerMedia Technologies, Inc.)
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.13.160818 - )
bwin Poker (HKLM-x32\...\bwincomPoker) (Version: - bwincom)
bwin Poker 1.0.0 (HKLM-x32\...\bwin Poker_is1) (Version: 1.0.0 - bwin)
CCleaner (HKLM\...\CCleaner) (Version: 5.64 - Piriform)
Crysis(R) (HKLM-x32\...\{000E79B7-E725-4F01-870A-C12942B7F8E4}) (Version: 1.00.0000 - Electronic Arts)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.2019.0 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd)
DAEMON Tools Toolbar (HKLM-x32\...\DAEMON Tools Toolbar) (Version: 1.1.9.0016 - DT Soft Ltd)
Dassault Systemes Software B19 (HKLM\...\Dassault Systemes B19_0) (Version: - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
DiRT (HKLM-x32\...\{57B89E30-0BBA-4F20-9F2C-8E8CDE1CEDB6}) (Version: 1.00.0000 - Codemasters)
DVB Dream version 1.7a (HKLM-x32\...\DVB Dream_is1) (Version: - )
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology) Hidden
Evidence AutoBazaru (HKLM-x32\...\{B4853FE1-17E7-43F6-9B01-2016FCABA809}) (Version: 6.0.0 - AutoSoft)
Far Cry (HKLM-x32\...\{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}) (Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (HKLM-x32\...\InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}) (Version: 1.00.0000 - Ubisoft)
Far Cry (Patch 1.3) (HKLM-x32\...\{21A127AE-2DAF-40B7-8374-34C3E629521C}) (Version: 1.00.0000 - Název společnosti:) Hidden
Far Cry (Patch 1.4) (HKLM-x32\...\{7EF15AAF-42AC-4CF6-B4B4-C4F0D1D92122}) (Version: 1.00.0000 - Název společnosti:) Hidden
Far Cry 3 v1.01 (HKLM-x32\...\Far Cry 3_is1) (Version: 1.01 - Ubisoft)
Far Cry 4 (HKLM-x32\...\Far Cry 4_is1) (Version: 1.0 - Релиз от R.G. Steamgames)
FastStone Capture 6.8 (HKLM-x32\...\FastStone Capture) (Version: 6.8 - FastStone Soft)
FormatFactory 4.2.5.0 (HKLM-x32\...\FormatFactory) (Version: 4.2.5.0 - Free Time)
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Globus CEWE fotosvet (HKLM-x32\...\Globus CEWE fotosvet) (Version: 6.4.5 - CEWE Stiftung u Co. KGaA)
Google Chrome (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Half-Life (HKLM-x32\...\Half-Life) (Version: - )
Half-Life: Opposing Force (HKLM-x32\...\Half-Life: Opposing Force) (Version: - )
HappyFoto (HKLM-x32\...\{621A70CA-32A5-4F50-A66C-C9C792580415}_is1) (Version: - Happy Foto CZ)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Hidden & Dangerous 2 (HKLM-x32\...\{83437081-8186-4F63-BD39-4BE8A691E055}) (Version: 1.02.0006 - Název společnosti:) Hidden
Hidden & Dangerous 2 (HKLM-x32\...\InstallShield_{83437081-8186-4F63-BD39-4BE8A691E055}) (Version: 1.02.0006 - Název společnosti:)
Hidden & Dangerous 2 Sabre Squadron (HKLM-x32\...\{E2222809-FDED-4C7E-8F25-2337A8F39F03}) (Version: 1.00.0000 - Illusion Softworks) Hidden
Hidden & Dangerous 2 Sabre Squadron (HKLM-x32\...\InstallShield_{E2222809-FDED-4C7E-8F25-2337A8F39F03}) (Version: 1.00.0000 - Illusion Softworks)
Chrome Remote Desktop Host (HKLM-x32\...\{88D5D9A4-48C4-4D0A-88B9-3E18661CF0D9}) (Version: 57.0.2987.37 - Google Inc.)
iCoolPlayer 1.0 (HKLM-x32\...\iCoolPlayer_is1) (Version: - Nguyen Nhat Dung)
ICQ7.7 (HKLM-x32\...\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}) (Version: 7.7 - ICQ)
Internet Explorer Toolbar 4.6 by SweetPacks (HKLM-x32\...\{774C0434-9948-4DEE-A14E-69CDD316E36C}) (Version: 4.6.0003 - SweetIM Technologies Ltd.) <==== ATTENTION
ISO Workshop 4.4 (HKLM-x32\...\ISO Workshop_is1) (Version: - Glorylogic)
Java 8 Update 172 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180172F0}) (Version: 8.0.1720.11 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kate's Video Toolkit 7.0 (HKLM-x32\...\VideoToolkit_is1) (Version: 7.0.0 - Web Solution Mart)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lepší.TV (HKLM-x32\...\{349BD5DF-877E-4892-8D54-632B13870B0F}) (Version: 1.0.0 - goNET)
Media Player Codec Pack 4.4.6 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.4.6 - Media Player Codec Pack)
Metro 2033 Redux (HKLM-x32\...\1436434037_is1) (Version: 2.0.0.2 - GOG.com)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.7 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
MIDI to MP3 Converter (HKLM-x32\...\MIDI to MP3 Converter) (Version: 2.0 - FileConv Studio)
Movavi Video Converter 14 (HKLM-x32\...\Movavi Video Converter 14) (Version: 14.3.0 - Movavi)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MySQL Server 5.1 (HKLM\...\{561AB451-B967-475C-80E0-3B6679C38B52}) (Version: 5.1.38 - MySQL AB)
Nail'd Demo (HKLM-x32\...\{D15FD5BC-0F01-48A9-8309-E550D0C2A8F9}) (Version: 1.00 - Deep Silver)
Nero 8 (HKLM-x32\...\{6D45EF03-E8EE-4355-81C3-F918CBCF1029}) (Version: 8.3.309 - Nero AG)
NewBlue Titler Pro for Windows (HKLM-x32\...\NewBlue Titler Pro for Windows) (Version: 1.0 - NewBlue)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials V for Windows (HKLM-x32\...\NewBlue Video Essentials V for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials VI for Windows (HKLM-x32\...\NewBlue Video Essentials VI for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials VII for Windows (HKLM-x32\...\NewBlue Video Essentials VII for Windows) (Version: 3.0 - NewBlue)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
NVIDIA Ovladač 3D Vision 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 301.42 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.16.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.16.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 301.42 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 301.42 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
Outlast: Whistleblower (HKLM-x32\...\T3V0bGFzdFdoaXN0bGVibG93ZXI=_is1) (Version: 1 - )
Ovládací panel NVIDIA 301.42 (HKLM\...\{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 301.42 - NVIDIA Corporation) Hidden
Pandora Service (HKLM-x32\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version: - Pandora.TV) <==== ATTENTION
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PowerDirector (HKLM\...\{2599B6F1-92AC-472C-BE60-9F17565E4938}) (Version: 11.0 - Název společnosti:) Hidden
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
QuickSFV (HKLM-x32\...\{DBDCD3AF-20E4-4E5E-80E8-B14109FE5DD9}) (Version: 3.0.0 - Totally Useful Software, Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Readon Free Internet TV and Online Radio 1.1.0.0 (HKLM-x32\...\{416F1165-010A-40EB-BF27-0490DE6E4CEF}) (Version: 1.1.0 - Readon Technology)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
S.T.A.L.K.E.R. - Call of Pripyat [v1.6.02] (HKLM-x32\...\{406FB8A4-F539-48A9-809C-F94706F9C9F6}_is1) (Version: 1.6.02 - bitComposer Games)
S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0001] (HKLM-x32\...\S.T.A.L.K.E.R. - Shadow of Chernobyl_is1) (Version: 1.0001 - THQ)
Saal Designer (HKLM-x32\...\SaalDesigner) (Version: 4.0 - )
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
SmartSound Quicktracks 5 (HKLM-x32\...\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SnugTV Station (HKLM-x32\...\{AB3ED2E9-3F65-4689-B483-3B0F5F2C6A62}) (Version: 3.3.10 - AVerMedia Technologies, Inc.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Texas Holdem Poker 3D Deluxe Edition v1 0 DeLEGiON (HKLM-x32\...\Texas Holdem Poker 3D Deluxe Edition DeLEGiON_is1) (Version: - Play+Smile Marketing GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 rc1 - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update Manager (HKLM-x32\...\{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}) (Version: 4.60 - Corel Corporation) Hidden
VBA (3821b) (HKLM-x32\...\{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden
VCRedistSetup (HKLM-x32\...\{3921A67A-5AB1-4E48-9444-C71814CF3027}) (Version: 1.0.0 - Nero AG) Hidden
VIO Player version 1.0.1 (HKLM-x32\...\{C8A17598-7F89-41EA-9876-0F89DA0B24F1}_is1) (Version: 1.0.1 - VIO)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.2 - VideoLAN)
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Winamp (HKLM-x32\...\Winamp) (Version: 5.622 - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
小米助手 (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MiPhoneManager) (Version: - 小米移动软件有限公司)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\80.0.3987.149\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ShellExecuteHooks-x32: No Name - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => -> No File
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll [2008-06-08] (Nero AG -> Nero AG)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlex.dll [2013-09-17] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlEx64.dll [2013-09-17] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\system32\prodad-codec.dll [607256 2015-09-17] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\pvmjpg30.dll [401408 2007-06-21] (Pegasus Imaging Corporation) [File not signed]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [246736 2017-06-22] (Cole Williams Software Limited -> )
HKLM\...\Drivers32: [vidc.x264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [vidc.lags] => C:\Windows\SysWOW64\lagarith.dll [230080 2016-09-21] (Cole Williams Software Limited -> )

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --app=hxxp://mmotraffic.com/catalog/goplay/1000932/MTE3NjYvLy8xMDAwOTMy/?subid=2&click_id=ddb75d38675bf4affb2a1b66f624d839f261074e --start-fullscreen
ShortcutWithArgument: C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp

==================== Loaded Modules (Whitelisted) =============

2010-01-28 16:34 - 2010-01-28 16:34 - 000151552 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libexpat.dll
2010-01-28 16:34 - 2010-01-28 16:34 - 000090624 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libgsasl.dll
2010-01-28 16:36 - 2010-01-28 16:36 - 000091136 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libXmppClient.dll
2012-09-16 18:58 - 2012-07-09 16:57 - 002090496 _____ () [File not signed] C:\Program Files (x86)\PANDORA.TV\PanService\avcodec-53.dll
2012-09-16 18:58 - 2016-03-16 17:13 - 001277952 _____ () [File not signed] C:\Program Files (x86)\PANDORA.TV\PanService\avformat-53.dll
2012-09-16 18:58 - 2011-12-06 15:19 - 000133632 _____ () [File not signed] C:\Program Files (x86)\PANDORA.TV\PanService\avutil-51.dll
2012-09-16 18:58 - 2012-03-23 09:07 - 000224768 _____ () [File not signed] C:\Program Files (x86)\PANDORA.TV\PanService\libupnp.dll
2010-01-19 12:44 - 2010-01-19 12:44 - 000027136 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AmaError.dll
2010-04-07 12:55 - 2010-04-07 12:55 - 000018944 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AVNetPass.dll
2010-02-01 16:38 - 2010-02-01 16:38 - 000073728 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\CryptoRc4.dll
2010-03-01 14:14 - 2010-03-01 14:14 - 000010752 _____ (AVerMedia Technologies, Inc. ) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\libAvndn.dll
2013-10-09 18:46 - 2010-06-18 20:41 - 000106496 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\CardID.dll
2013-10-09 18:46 - 2010-06-18 20:40 - 000364544 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\GraphMaster.dll
2010-05-06 19:32 - 2010-05-06 19:32 - 000050176 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AboutDlg.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000188928 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\Epg.dll
2010-05-06 19:31 - 2010-05-06 19:31 - 001103872 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\GraphEngine.dll
2010-05-06 19:30 - 2010-05-06 19:30 - 000009728 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\HwInfo.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000146432 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ImClient.dll
2010-05-06 19:30 - 2010-05-06 19:30 - 000088064 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ProfileMgr.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000076288 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ProgList.dll
2010-03-22 17:12 - 2010-03-22 17:12 - 000300032 _____ (AVerMedia) [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\AVeriEPG.dll
2012-09-16 18:58 - 2011-09-14 15:33 - 000086070 _____ (Open Source Software community project) [File not signed] C:\Program Files (x86)\PANDORA.TV\PanService\pthreadVC2.dll
2012-09-16 18:58 - 2016-03-16 17:13 - 000408064 _____ (Pandora TV Inc.) [File not signed] C:\Program Files (x86)\PANDORA.TV\PanService\PanStreamer.dll
2012-09-16 18:58 - 2016-03-16 17:13 - 000295424 _____ (PANDORA.TV) [File not signed] C:\Program Files (x86)\PANDORA.TV\PanService\proxy.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:05B51235 [117]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2019-01-04 11:24 - 000000854 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 cap.cyberlink.com

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files (x86)\Pinnacle\Shared Files\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{2A1E0CEC-784B-4E9D-95E7-DA1C5A955A29}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [UDP Query User{0D10A56F-22C8-4E84-B45C-2F8282439C90}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{8597DE1F-B330-42F3-9C91-1040CB71AD99}] => (Block) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{C95E7D51-F537-44BE-BB36-25C395D8A030}] => (Block) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{F726C512-5EF3-44C8-A279-7E0DC07E076B}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{C4B202DD-A506-4CD6-9077-5C8125B614B1}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{DD44F8AC-8A47-4D60-89AB-6D1F5482088A}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{C2290EBA-2D70-4542-88A7-39290FB6B362}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{F364EED5-E5B8-468C-9EBA-4987257400E8}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{69840BB6-A46B-41AF-A860-1B2C3120EBD7}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [TCP Query User{6D4BA9F7-02BC-445C-ACFF-EFAE48200064}E:\half-life_2-emporio\hl2.exe] => (Allow) E:\half-life_2-emporio\hl2.exe No File
FirewallRules: [UDP Query User{0261EDE4-AF28-43EE-ADCF-5B9ABD419485}E:\half-life_2-emporio\hl2.exe] => (Allow) E:\half-life_2-emporio\hl2.exe No File
FirewallRules: [{D8000EC6-F21A-4ED7-B242-12199297661D}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe () [File not signed]
FirewallRules: [{76D8E91E-3582-4139-AF62-725CE049D88D}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe () [File not signed]
FirewallRules: [{81B18C04-D03B-4C45-B13B-0FF45C12EAA5}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe () [File not signed]
FirewallRules: [{381F3729-0CD8-4BB2-857C-1ACE533926C0}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe () [File not signed]
FirewallRules: [{B0BF9D56-9408-49E3-881A-97305AFCAF5D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe (GSC Game World) [File not signed]
FirewallRules: [{CB93ABE6-2156-4A0D-A7CF-4E6F474244E9}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe (GSC Game World) [File not signed]
FirewallRules: [{9F59AA7B-FA95-43B2-B426-C2D4396BC20D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe (GSC Game World -> GSC Game World)
FirewallRules: [{DC8E9168-22A2-4DCF-91FE-12F79BC45E0D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe (GSC Game World -> GSC Game World)
FirewallRules: [TCP Query User{D250F3C6-0858-4919-9EEE-09475EB78061}C:\program files (x86)\codemasters\dirt\dirt.exe] => (Allow) C:\program files (x86)\codemasters\dirt\dirt.exe (Codemasters) [File not signed]
FirewallRules: [UDP Query User{A92FFAA6-ACED-4B24-9319-9E3A93F046C0}C:\program files (x86)\codemasters\dirt\dirt.exe] => (Allow) C:\program files (x86)\codemasters\dirt\dirt.exe (Codemasters) [File not signed]
FirewallRules: [{544C0CF1-D718-4441-98B7-8804A8B2FF72}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{9A3CE225-A7D8-4E18-817D-AD6D040702CF}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{DBC29E38-5C93-4BC3-B046-A379E52F0328}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe () [File not signed]
FirewallRules: [UDP Query User{EB80EB27-7BE9-4B07-B9B3-928F4C84185A}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe () [File not signed]
FirewallRules: [TCP Query User{5224692A-1097-464B-8DBD-990877136C42}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [UDP Query User{4E26C390-CDF2-47B8-BEAE-61F635453AC9}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [{E6E8611A-B5E5-438B-A0B9-E79C743F4BB4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2AF1DA29-75C0-41B4-A265-2B58F7D65FE3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{50759EC1-C4EA-43F6-B42A-451D6F7A6D23}C:\hry\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\hry\far cry 3\bin\farcry3_d3d11.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{6BC3B14D-0DF7-4E67-8722-80C86E4020D5}C:\hry\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\hry\far cry 3\bin\farcry3_d3d11.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [TCP Query User{21FF5F03-3E7A-4AAA-A90E-BE5531440434}C:\hry\far cry 3\bin\farcry3.exe] => (Allow) C:\hry\far cry 3\bin\farcry3.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{4518F04A-4DD1-4578-B183-50E4D4664BC2}C:\hry\far cry 3\bin\farcry3.exe] => (Allow) C:\hry\far cry 3\bin\farcry3.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{B9A2E7A9-3D35-407D-B34C-B0E0F673E4FB}] => (Allow) LPort=3306
FirewallRules: [TCP Query User{F476C962-3381-4ADB-94E4-FA7996A2B3E0}C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe] => (Allow) C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe () [File not signed]
FirewallRules: [UDP Query User{6EBF98FF-BECA-4EFB-8931-12A6413C2EAD}C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe] => (Allow) C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe () [File not signed]
FirewallRules: [{CD62C912-DEC8-419E-ADCD-669DA1D96429}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\ConfigWizard.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [{FC15E061-96EB-4EA6-AE07-6E16F662BBC9}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\ConfigWizard.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [TCP Query User{FA990F4F-99B2-4B1C-9D34-5EBF1004009C}D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe] => (Allow) D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe (Red Barrels Inc.) [File not signed]
FirewallRules: [UDP Query User{88078EEA-90E4-4BB0-9A11-2B79DD7D523D}D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe] => (Allow) D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe (Red Barrels Inc.) [File not signed]
FirewallRules: [TCP Query User{27C8CBC2-76FC-48F8-938C-47A673EF4F42}D:\hry_instalace\far cry 4\bin\farcry4.exe] => (Allow) D:\hry_instalace\far cry 4\bin\farcry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{85575005-C80E-4985-A0DC-FA93D396CB56}D:\hry_instalace\far cry 4\bin\farcry4.exe] => (Allow) D:\hry_instalace\far cry 4\bin\farcry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{87253BA2-16AD-4E66-BDB1-4CDFFC30F09B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{500579F7-0C68-4512-9F80-2BC86D12B3DD}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D716A72D-62A8-4A10-ADC3-C25F4B5CE8A7}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{2CB4EC55-5992-4EEC-B9B0-6C0D8CF30BD8}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{C640E3D0-4FC2-4646-9764-633CE72A2262}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{F21736BD-AE0B-45BB-B8FC-AFAAEB24C142}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{BB533AFE-47DD-4AFB-BE27-A5EBC4C11406}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe (Sony DADC Austria AG) [File not signed]
FirewallRules: [{E641DF3E-7571-422D-B3A4-1824339D96D7}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe (Sony DADC Austria AG) [File not signed]
FirewallRules: [{B8B14C33-1D2B-4D34-8D14-A9B2FE1505AF}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{01E5FF86-5367-426A-82A6-524AD3D5BCA4}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{02722EC4-C621-4E66-8398-3A354B598479}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{FCFDD288-871B-4F35-910A-389069B97208}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{7ABA7CDE-7C08-4B26-A906-67BEED243073}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{23E14894-EEAB-48E1-85F4-9F5C51156254}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{6E809804-9C07-40EB-B015-3147C24669DB}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{F525BC7B-77B0-4839-A120-953A8176AD87}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{8F771CD5-93E4-4429-A4DF-64C51203FC59}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{1858D749-B6EB-4FA2-BE67-E00A720D6B68}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{D0FE3D2A-33C3-44CA-A773-9989EDFD235A}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{65BF7B07-7C65-45F3-870C-1F268F2DB0DA}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{F42C041C-32CC-4080-8E36-987DAC0BDB7E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B0163C8D-C6AF-4299-A2A3-4CABEE8F2810}] => (Allow) LPort=2869
FirewallRules: [{5235A12C-F005-4B34-8081-35158942A28E}] => (Allow) LPort=1900
FirewallRules: [{33CEBA22-AD1A-4746-B0EC-1D9B0F486290}] => (Allow) C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneManager.exe (Xiaomi Technology Inc -> 北京小米移动软件有限公司)
FirewallRules: [{3FD3AAF3-24F8-48BA-B4A8-84D0D5EED31E}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe (Google Inc -> Google Inc.)
FirewallRules: [TCP Query User{AAC5B3C1-6617-4C1E-9AE1-B81E12DD9AED}C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe] => (Allow) C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe (Koch Media GmbH -> Techland)
FirewallRules: [UDP Query User{B2C5C61B-6EF1-4D16-80FC-D3A0BA5BC0A1}C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe] => (Allow) C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe (Koch Media GmbH -> Techland)
FirewallRules: [{4883FD33-8179-4B27-B04A-96DBDEE0D20D}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{3ABB7F9E-BFA1-40E2-A8D4-B46AE0579A20}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{93D19771-F30D-4D79-8A31-723427CFA7DE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{E070D234-711F-489A-95C2-34D3183E29BA}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [TCP Query User{8F83BA8F-8A40-419E-88BB-B5380A5E73AA}C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [UDP Query User{CE3BB32D-F380-4F03-94AD-5E8436676FB4}C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [{DD9F9D22-468E-402F-8B2D-AD1AB182BFB0}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{01BA2D8D-E0E9-47CC-8BB4-EDE647C76CF6}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{9A188DC0-C85B-49A1-A0C7-4181624C7F97}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{D8AE1283-194B-442C-8866-133DDBD5EA56}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{C76BA157-EE7B-4EAF-AE17-D77C47EDFC14}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Online Audio Recorder\Online Audio Recorder.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{1267DFF4-7C04-45E4-A86F-AB17409FD1CA}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Online Audio Recorder\Online Audio Recorder.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{905A64E4-02F9-4EAA-81B0-25B077DB873F}] => (Allow) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{1385A50B-ED82-4E38-9D49-876A178A1DDB}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [{C0DD08E3-0AE5-4681-9463-228D501F724E}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [{331CB3C8-31FE-4CCA-A2D4-56D151F9F64A}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe (PandoraTV -> PandoraTV)
FirewallRules: [{5F630C96-CF92-4043-B146-AADDBCA70948}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe (PandoraTV -> PandoraTV)
FirewallRules: [{DAFCFF43-8E4D-4E2F-831C-42D12062CDEE}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe (PandoraTV -> Pandora.TV)
FirewallRules: [{10B0B138-1AE6-46C3-8C20-5463A69181CF}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe (PandoraTV -> Pandora.TV)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============

Name: NetGroup Packet Filter Driver
Description: NetGroup Packet Filter Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: npf
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: ========================

Application errors:
==================
Error: (03/22/2020 04:45:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Explorer.EXE, verze: 6.1.7601.23537, časové razítko: 0x57c44efe
Název chybujícího modulu: DUI70.dll, verze: 6.1.7600.16385, časové razítko: 0x4a5bdf25
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000001106
ID chybujícího procesu: 0x64c
Čas spuštění chybující aplikace: 0x01d6004a94432447
Cesta k chybující aplikaci: C:\Windows\Explorer.EXE
Cesta k chybujícímu modulu: C:\Windows\system32\DUI70.dll
ID zprávy: 323c8d37-6c54-11ea-8203-902b3419f66d

Error: (03/22/2020 04:40:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: nvxdsync.exe, verze: 8.17.13.142, časové razítko: 0x4fb205d3
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.23915, časové razítko: 0x59b94ee4
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000bf3e2
ID chybujícího procesu: 0x568
Čas spuštění chybující aplikace: 0x01d6004a93316607
Cesta k chybující aplikaci: C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 650c10a3-6c53-11ea-8203-902b3419f66d

Error: (03/22/2020 02:04:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: PanProcess.exe, verze: 1.0.1.2, časové razítko: 0x506004cc
Název chybujícího modulu: PanStreamer.dll, verze: 2.0.7.38, časové razítko: 0x509c8e1f
Kód výjimky: 0xc0000005
Posun chyby: 0x0001dc74
ID chybujícího procesu: 0xbfc
Čas spuštění chybující aplikace: 0x01d600207867dff7
Cesta k chybující aplikaci: C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\PANDORA.TV\PanService\PanStreamer.dll
ID zprávy: aae6ca8b-6c3d-11ea-81dd-902b3419f66d

Error: (03/17/2020 08:34:20 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování nebylo dokončeno, protože došlo k chybě při zápisu do umístění zálohy L:\. Chyba: Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (03/17/2020 08:20:17 AM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Nelze otevřít objekt výkonu služby serveru. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/12/2020 09:19:22 PM) (Source: PerfNet) (EventID: 2002) (User: )
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/12/2020 09:19:22 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Nelze otevřít objekt výkonu služby serveru. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/10/2020 05:47:09 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Zálohování nebylo úspěšné. Chyba: Na této jednotce není dostatek místa k uložení zálohy. Uvolněte místo odstraněním straších záloh a nepotřebných dat nebo změňte nastavení zálohování. (0x81000005).


System errors:
=============
Error: (03/22/2020 05:20:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
prodrv06
prohlp02
prosync1
sfhlp01

Error: (03/22/2020 05:20:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetGroup Packet Filter Driver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (03/22/2020 05:19:58 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Načtení \SystemRoot\SysWow64\drivers\prodrv06.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.

Error: (03/22/2020 05:18:53 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
Nepodařilo se zahájit závislou službu nebo skupinu.

Error: (03/22/2020 05:18:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
Nepodařilo se zahájit závislou službu nebo skupinu.

Error: (03/22/2020 05:18:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
Nepodařilo se zahájit závislou službu nebo skupinu.

Error: (03/22/2020 05:18:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
Nepodařilo se zahájit závislou službu nebo skupinu.

Error: (03/22/2020 05:18:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba seznamu sítí závisí na službě Sledování umístění v síti (NLA), která neuspěla při spuštění v důsledku následující chyby:
Nepodařilo se zahájit závislou službu nebo skupinu.


Windows Defender:
===================================
Date: 2016-07-04 13:20:02.401
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=224633
Název:SoftwareBundler:Win32/Tillail
ID:224633
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:file:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\UACHlper.exe;file:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\UACHlperx64.exe;file:C:\Program Files (x86)\Smart File Advisor\sfa.exe;file:C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe;file:C:\Program Files (x86)\Smart File Advisor\sfa_inst.exe;file:C:\Program Files (x86)\Smart File Advisor\StartupChecker.exe;file:C:\Program Files (x86)\Smart File Advisor\unins000.dat;file:C:\Program Files (x86)\Smart File Advisor\unins000.exe;file:C:\Program Files (x86)\Smart File Advisor\unins000.msg;folder:C:\Program Files (x86)\Smart File Advisor\;folder:C:\Program Files (x86)\Smart File Advisor\Plugins\;folder:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\;process:pid:4880,ProcessStart:131121039296092267;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\SFAUpdater;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Smart File Advisor;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CU
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:C:\Windows\System32\svchost.exe

Date: 2016-07-04 13:09:20.225
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=224633
Název:SoftwareBundler:Win32/Tillail
ID:224633
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:file:C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe;process:pid:4880,ProcessStart:131121039296092267
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:C:\Windows\System32\svchost.exe

Date: 2015-11-25 06:08:15.062
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{1B403E7E-B228-4AFE-832A-75D5A84B116A}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:NT AUTHORITY\NETWORK SERVICE

Date: 2015-03-18 05:58:55.665
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{3C24CEBD-E81B-452E-9307-1416FF5CFB46}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:NT AUTHORITY\NETWORK SERVICE

CodeIntegrity:
===================================

Date: 2016-09-21 15:55:07.481
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-09-21 15:55:07.480
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-09-09 08:12:10.348
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-09 08:12:10.114
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 20:08:11.504
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 20:08:11.208
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 16:43:25.863
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 16:43:25.582
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: Award Software International, Inc. F1 01/09/2012
Motherboard: Gigabyte Technology Co., Ltd. GA-970A-DS3
Processor: AMD FX(tm)-4100 Quad-Core Processor
Percentage of memory in use: 49%
Total physical RAM: 8173.42 MB
Available physical RAM: 4156.43 MB
Total Virtual: 16345.03 MB
Available Virtual: 11897.98 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:150.16 GB) (Free:18.88 GB) NTFS
Drive d: () (Fixed) (Total:781.25 GB) (Free:12.02 GB) NTFS

\\?\Volume{75ff4ef6-ef7a-11e1-865a-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: C6610D10)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=150.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=781.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomaly start PC win 7

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Re: Pomaly start PC win 7

#3 Příspěvek od Beraji1 »

# -------------------------------
# Malwarebytes AdwCleaner 8.0.3.0
# -------------------------------
# Build: 03-03-2020
# Database: 2020-03-13.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-23-2020
# Duration: 00:00:23
# OS: Windows 7 Ultimate
# Cleaned: 92
# Failed: 2


***** [ Services ] *****

Deleted PanService

***** [ Folders ] *****

Deleted C:\Program Files (x86)\DAEMON Tools Toolbar
Deleted C:\Program Files (x86)\PANDORA.TV
Deleted C:\Program Files (x86)\SweetIM
Deleted C:\ProgramData\Ask
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
Deleted C:\ProgramData\Uniblue
Deleted C:\ProgramData\Wideblue installer
Deleted C:\ProgramData\apn
Deleted C:\Users\Šogun\AppData\Roaming\DRPSu

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

Deleted C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk

***** [ Tasks ] *****

Deleted C:\Windows\System32\Tasks\IRMONITOR

***** [ Registry ] *****

Deleted HKCU\Software\APN PIP
Deleted HKCU\Software\GotClip Downloader
Deleted HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Deleted HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{32099AAC-C132-4136-9E9A-4E364A424E17}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\drp.su
Deleted HKCU\Software\PIP
Deleted HKCU\Software\PRODUCTSETUP
Deleted HKCU\Software\Softonic
Deleted HKCU\Software\SweetIM
Deleted HKCU\Software\csastats
Deleted HKCU\Software\drpsu
Deleted HKCU\Software\dt soft\daemon tools toolbar
Deleted HKCU\Software\wscontb
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9B35B2DF-552D-441B-9B23-B238BA525EA8}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WarThunder sat
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WarThunder sun
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WarThunder24
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\irMonitor
Deleted HKLM\Software\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Deleted HKLM\Software\Classes\Installer\Features\4340C4778499EED41AE496DC3D613EC6
Deleted HKLM\Software\Classes\Installer\Products\4340C4778499EED41AE496DC3D613EC6
Deleted HKLM\Software\Classes\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Deleted HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Classes\SpeedUpMyPC
Deleted HKLM\Software\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Classes\driverscanner
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4340C4778499EED41AE496DC3D613EC6
Deleted HKLM\Software\Speedchecker Limited
Deleted HKLM\Software\Wow6432Node\InstallIQ
Deleted HKLM\Software\Wow6432Node\PIP
Deleted HKLM\Software\Wow6432Node\SweetIM
Deleted HKLM\Software\Wow6432Node\Uniblue
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Toolbar|{EEE6C35B-6118-11DC-9C72-001320C79847}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|Codec Settings UAC Manager
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{774C0434-9948-4DEE-A14E-69CDD316E36C}
Deleted HKLM\Software\Wow6432Node\drpsu
Deleted HKLM\Software\Wow6432Node\dt soft\daemon tools toolbar
Deleted HKLM\Software\Wow6432Node\systweak
Deleted HKU\S-1-5-21-1027388779-4279868082-974358725-1003\Software\drpsu
Not Deleted HKLM\Software\Microsoft\Internet Explorer\Toolbar|{32099AAC-C132-4136-9E9A-4E364A424E17}
Not Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Toolbar|{32099AAC-C132-4136-9E9A-4E364A424E17}

***** [ Chromium (and derivatives) ] *****

Deleted SweetIM for Facebook - jcdgjdiieiljkfkdcloehkohchhpekkn

***** [ Chromium URLs ] *****

Deleted http://home.sweetim.com/?crg=3.1010000. ... 2B3419F66D}
Deleted http://home.sweetim.com/?crg=3.1010000. ... 2B3419F66D}
Deleted http://home.sweetim.com/?crg=3.1010000. ... 2B3419F66D}
Deleted http://home.sweetim.com/?crg=3.1010000. ... 2B3419F66D}

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.CyberLinkService Folder C:\Program Files\CYBERLINK\SHARED FILES\PLUGIN\NEWBLUE


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [11280 octets] - [23/03/2020 11:37:35]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomaly start PC win 7

#4 Příspěvek od Rudy »

Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Re: Pomaly start PC win 7

#5 Příspěvek od Beraji1 »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-03-2020
Ran by Šogun (administrator) on ŠOGUN-PC (Gigabyte Technology Co., Ltd. GA-970A-DS3) (23-03-2020 15:23:44)
Running from D:\Staženo z Chromu
Loaded Profiles: Šogun & UpdatusUser (Available Profiles: Šogun & UpdatusUser & Guest)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
() [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
() [File not signed] C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVerMedia Technologies, Inc. ) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\QuickStart.exe
(AVerMedia TECHNOLOGIES, Inc.) [File not signed] C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
(AVerMedia TECHNOLOGIES, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe
(AVerMedia) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
(Cole Williams Software Limited -> ) C:\Windows\SysWOW64\Codecs\TrayMenu.exe
(CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe
(Macrovision Corporation -> Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
(Nullsoft, Inc.) [File not signed] C:\Program Files (x86)\Winamp\winampa.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Prolific Technology Inc.) [File not signed] C:\Windows\SysWOW64\IoctlSvc.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(Xiaomi Technology Inc -> ) C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [277664 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [NBKeyScan] => C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-06-08] (Nero AG -> Nero AG)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-10-25] (Nullsoft, Inc.) [File not signed]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-06-24] (Nero AG -> Nero AG)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [Google Update] => C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-21] (Google LLC -> Google LLC)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [ISUSPM] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation -> Macrovision Corporation)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [EPSON Stylus DX4000 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBEE.EXE [139264 2006-09-21] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd -> DT Soft Ltd)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [MiPhoneManager] => C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe [449464 2017-05-09] (Xiaomi Technology Inc -> )
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22256824 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: J - J:\AutoRunCD.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae8008-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae800d-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a4c12eb5-155f-11e8-856b-902b3419f66d} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a5417187-ef7f-11e1-8aa9-902b3419f66d} - J:\setup.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {e7d6446c-7527-11e3-a02e-902b3419f66d} - F:\AutoRunCD.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk [2013-10-09]
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk [2013-10-09]
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2020-02-16]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\Codecs\TrayMenu.exe (Cole Williams Software Limited -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SnugTV Quick Start.lnk [2013-10-09]
ShortcutTarget: SnugTV Quick Start.lnk -> C:\Windows\Installer\{AB3ED2E9-3F65-4689-B483-3B0F5F2C6A62}\NewShortcut1_46FEF19C05F1475DAA14D9007DC15270_2.exe (Macrovision Corporation) [File not signed]
BootExecute: autocheck autochk * sdnclean64.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0425603D-8297-4DDD-8BAE-E4327C22B4A0} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {1D83710D-446D-4A32-8897-A571CEA7FB58} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-12] (Adobe Inc. -> Adobe)
Task: {2A1883BA-E3C7-4FBB-81E5-C2A20CD94678} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {2AA52E5E-344E-46C1-AA4E-C1BF31B3AFDB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA => C:\Users\Šogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {467C78C6-9E8A-4FE8-AA52-6D15D477474E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [4747720 2014-06-27] (Safer Networking Ltd. -> Safer-Networking Ltd.)
Task: {4FC36006-D331-4E7F-9F96-7590DFEBA025} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {66951C4E-AF57-4E12-84A8-A9141A0958B6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6193080 2016-03-21] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [File not signed]
Task: {AB785260-89E1-4CC9-B750-88915023937E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3894664 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
Task: {BF36D647-8CBF-40EB-8102-21ABCBC1A095} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5753752 2016-03-21] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [File not signed]
Task: {D71F0A29-3A68-4A29-843F-E5CA0A4A659E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {EE46E1BC-976C-41ED-947E-BEE867AB5592} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18233016 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {F0CF216D-2011-4308-8360-319C4CD6CFB2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core => C:\Users\Šogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Hosts: 127.0.0.1 cap.cyberlink.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9C105C4F-2CE1-4469-A2D0-B001A652244F}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
SearchScopes: HKLM-x32 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
SearchScopes: HKU\S-1-5-21-1027388779-4279868082-974358725-1000 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: No Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\ssv.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\jp2ssv.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\dtplugin\npDeployJava1.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\plugin2\npjp2.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default [2020-03-23]
CHR DownloadDir: D:\Staženo z Chromu
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-03-21]
CHR Extension: (Website Blocker (Beta)) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib [2019-03-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-22]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-09-30]
StartMenuInternet: Google Chrome.ORO6RRUXSZNWBMBSDEQZE7VR5Q - C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] (Giga-Byte Technology -> )
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6046624 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [413472 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [348160 2009-10-30] (AVerMedia) [File not signed]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [397312 2009-12-07] () [File not signed]
R2 AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [167936 2010-05-07] (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe [72024 2017-02-07] (Google Inc -> Google Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 MySQL; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe [7599616 2009-08-18] () [File not signed]
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG -> Nero AG)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG -> Nero AG)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-12-04] (Even Balance, Inc. -> )
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2014-10-20] (CyberLink Corp. -> CyberLink)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SnugTV Service; C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe [528384 2010-05-06] (AVerMedia Technologies, Inc.) [File not signed]
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdsata; C:\Windows\System32\DRIVERS\amdsata.sys [70200 2009-10-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R0 amdxata; C:\Windows\System32\DRIVERS\amdxata.sys [28728 2009-10-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] (Giga-Byte Technology -> )
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37864 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205576 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [271120 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [206608 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [64272 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [279360 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42976 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [175400 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110560 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84056 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [848672 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [458584 2020-03-12] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [235184 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316256 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2017-07-15] (Tages SA -> )
R3 CLMirrorDriver; C:\Windows\System32\DRIVERS\CLMirrorDriver.sys [21264 2015-09-17] (CyberLink Corp. -> CyberLink)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-08-26] (DT Soft Ltd -> DT Soft Ltd)
R3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [56960 2011-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
R3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [79104 2011-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2013-03-06] (Microsoft Windows Hardware Compatibility Publisher -> ITE )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2017-07-15] (Tages SA -> )
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
S3 nmwcd; C:\Windows\System32\drivers\ccdcmbx64.sys [19968 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\Windows\System32\drivers\ccdcmbox64.sys [27136 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S1 prodrv06; C:\Windows\SysWOW64\drivers\prodrv06.sys [53920 2004-08-09] (Protection Technology) [File not signed]
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [114016 2004-08-09] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [7040 2004-07-19] (Protection Technology) [File not signed]
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-01-04] (Disc Soft Ltd -> Duplex Secure Ltd.)
S3 upperdev; C:\Windows\System32\DRIVERS\usbser_lowerfltx64.sys [9216 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 usbfilter; C:\Windows\System32\DRIVERS\usbfilter.sys [38456 2009-12-22] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 UsbserFilt; C:\Windows\System32\DRIVERS\usbser_lowerfltjx64.sys [9216 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
U3 awymvcx6; C:\Windows\System32\Drivers\awymvcx6.sys [0 0000-00-00] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
U3 ax7z0lzx; C:\Windows\System32\Drivers\ax7z0lzx.sys [0 0000-00-00] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-23 11:36 - 2020-03-23 11:38 - 000000000 ____D C:\AdwCleaner
2020-03-22 17:25 - 2020-03-23 15:24 - 000000000 ____D C:\FRST
2020-03-22 16:39 - 2020-03-22 16:39 - 000037354 _____ C:\Users\Šogun\energy-report.html
2020-03-12 21:11 - 2020-03-22 17:19 - 000555408 _____ C:\Windows\ntbtlog.txt
2020-03-12 21:07 - 2020-03-12 21:07 - 000008300 _____ C:\Users\Šogun\Documents\cc_20200312_210750.reg
2020-03-05 19:50 - 2020-03-05 19:49 - 000368056 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2020-03-05 19:50 - 2020-03-05 19:49 - 000235184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2020-03-05 19:50 - 2020-03-05 19:49 - 000175400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-23 11:49 - 2009-07-14 05:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-03-23 11:49 - 2009-07-14 05:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-03-23 11:43 - 2012-10-21 12:44 - 000000000 ____D C:\Users\UpdatusUser
2020-03-23 11:40 - 2012-08-26 13:53 - 000000000 ____D C:\ProgramData\NVIDIA
2020-03-23 11:40 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-03-23 11:38 - 2016-04-03 08:27 - 000002411 _____ C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk
2020-03-22 17:54 - 2018-04-24 13:56 - 000003870 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-03-22 17:54 - 2015-12-03 18:21 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2020-03-22 17:54 - 2012-09-08 15:06 - 000004396 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-03-22 17:54 - 2012-08-28 17:53 - 000002772 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-03-22 17:54 - 2012-08-27 13:18 - 000003564 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA
2020-03-22 17:54 - 2012-08-27 13:18 - 000003292 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core
2020-03-22 17:01 - 2012-08-26 14:24 - 000000000 ____D C:\Program Files (x86)\GRETECH
2020-03-22 16:39 - 2012-08-26 13:41 - 000000000 ____D C:\Users\Šogun
2020-03-20 13:18 - 2013-01-02 22:13 - 000000000 ____D C:\Users\Šogun\AppData\Roaming\vlc
2020-03-18 15:02 - 2012-08-27 13:19 - 000002379 _____ C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-03-18 15:02 - 2012-08-27 13:19 - 000002342 _____ C:\Users\Šogun\Desktop\Google Chrome.lnk
2020-03-17 08:59 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-03-17 08:21 - 2017-03-11 08:33 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2020-03-12 21:23 - 2012-08-28 17:53 - 000000935 _____ C:\Users\Public\Desktop\CCleaner.lnk
2020-03-12 21:23 - 2012-08-28 17:53 - 000000935 _____ C:\ProgramData\Desktop\CCleaner.lnk
2020-03-12 20:53 - 2012-09-08 15:06 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-03-12 20:53 - 2012-09-08 15:06 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-03-12 20:53 - 2012-09-08 15:06 - 000000000 ____D C:\Windows\system32\Macromed
2020-03-12 20:53 - 2012-09-08 15:04 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-03-12 20:53 - 2012-08-27 21:03 - 000458584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2020-03-05 19:50 - 2012-08-27 21:02 - 000000000 ____D C:\ProgramData\AVAST Software
2020-03-05 19:49 - 2019-02-17 19:06 - 000279360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2020-03-05 19:49 - 2019-01-19 11:23 - 000271120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000206608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000064272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000037864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2020-03-05 19:49 - 2018-10-20 19:41 - 000042976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2020-03-05 19:49 - 2017-11-16 10:33 - 000205576 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2020-03-05 19:49 - 2014-10-03 15:04 - 000316256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2020-03-05 19:49 - 2014-10-03 15:04 - 000084056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2020-03-05 19:49 - 2012-08-27 21:03 - 000848672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2020-03-05 19:49 - 2012-08-27 21:03 - 000110560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2020-02-29 08:45 - 2009-07-14 16:18 - 013605754 _____ C:\Windows\system32\perfh005.dat
2020-02-29 08:45 - 2009-07-14 16:18 - 004572546 _____ C:\Windows\system32\perfc005.dat
2020-02-29 08:45 - 2009-07-14 06:13 - 000006730 _____ C:\Windows\system32\PerfStringBackup.INI

==================== Files in the root of some directories ========

2018-06-02 18:22 - 2018-06-02 18:22 - 000198884 _____ () C:\Users\Šogun\AppData\Roaming\DMGR_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2013-11-05 19:03 - 2016-11-01 19:10 - 000000021 _____ () C:\Users\Šogun\AppData\Roaming\ISOWorkshop.ini
2016-09-20 17:19 - 2016-09-20 17:19 - 000003584 _____ () C:\Users\Šogun\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-08-27 16:59 - 2012-08-27 16:59 - 000000093 _____ () C:\Users\Šogun\AppData\Local\fusioncache.dat
2016-06-19 16:20 - 2016-06-19 16:20 - 000001482 _____ () C:\Users\Šogun\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-03-22 19:26
==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-03-2020
Ran by Šogun (23-03-2020 15:24:50)
Running from D:\Staženo z Chromu
Windows 7 Ultimate Service Pack 1 (X64) (2012-08-26 12:40:28)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1027388779-4279868082-974358725-500 - Administrator - Disabled)
Guest (S-1-5-21-1027388779-4279868082-974358725-501 - Limited - Disabled) => C:\Users\Guest
UpdatusUser (S-1-5-21-1027388779-4279868082-974358725-1003 - Limited - Enabled) => C:\Users\UpdatusUser
Šogun (S-1-5-21-1027388779-4279868082-974358725-1000 - Administrator - Enabled) => C:\Users\Šogun

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.344 - Adobe)
Adobe Reader X (10.1.16) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Aktualizace NVIDIA 1.8.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.8.15 - NVIDIA Corporation)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Apowersoft Online Launcher verze 1.7.1 (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.1 - APOWERSOFT LIMITED)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASUS nVidia Driver (HKLM-x32\...\{1A1FA4C1-2701-401C-8CE1-FDDE45304FF5}) (Version: 1.00.0000 - ASUSTek) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
AVerMedia A827 series driver 2.0.64.126 (HKLM-x32\...\AVerMedia A827 series driver) (Version: 2.0.64.126 - AVerMedia TECHNOLOGIES, Inc.)
AVerMedia Applications (HKLM-x32\...\{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}) (Version: 1.0.4 - AVerMedia Technologies, Inc.) Hidden
AVerMedia Applications (HKLM-x32\...\InstallShield_{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}) (Version: 1.0.4 - AVerMedia Technologies, Inc.)
AVerMedia Media Center Plug-ins 2.0.7.0 (HKLM-x32\...\AVerMedia Media Center Plug-ins) (Version: 2.0.7.0 - AVerMedia TECHNOLOGIES, Inc.)
AVerTV (HKLM-x32\...\{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}) (Version: 6.0.18 - AVerMedia Technologies, Inc.) Hidden
AVerTV (HKLM-x32\...\InstallShield_{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}) (Version: 6.0.18 - AVerMedia Technologies, Inc.)
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.13.160818 - )
bwin Poker (HKLM-x32\...\bwincomPoker) (Version: - bwincom)
bwin Poker 1.0.0 (HKLM-x32\...\bwin Poker_is1) (Version: 1.0.0 - bwin)
CCleaner (HKLM\...\CCleaner) (Version: 5.64 - Piriform)
Crysis(R) (HKLM-x32\...\{000E79B7-E725-4F01-870A-C12942B7F8E4}) (Version: 1.00.0000 - Electronic Arts)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.2019.0 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd)
Dassault Systemes Software B19 (HKLM\...\Dassault Systemes B19_0) (Version: - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
DiRT (HKLM-x32\...\{57B89E30-0BBA-4F20-9F2C-8E8CDE1CEDB6}) (Version: 1.00.0000 - Codemasters)
DVB Dream version 1.7a (HKLM-x32\...\DVB Dream_is1) (Version: - )
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology) Hidden
Evidence AutoBazaru (HKLM-x32\...\{B4853FE1-17E7-43F6-9B01-2016FCABA809}) (Version: 6.0.0 - AutoSoft)
Far Cry (HKLM-x32\...\{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}) (Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (HKLM-x32\...\InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}) (Version: 1.00.0000 - Ubisoft)
Far Cry (Patch 1.3) (HKLM-x32\...\{21A127AE-2DAF-40B7-8374-34C3E629521C}) (Version: 1.00.0000 - Název společnosti:) Hidden
Far Cry (Patch 1.4) (HKLM-x32\...\{7EF15AAF-42AC-4CF6-B4B4-C4F0D1D92122}) (Version: 1.00.0000 - Název společnosti:) Hidden
Far Cry 3 v1.01 (HKLM-x32\...\Far Cry 3_is1) (Version: 1.01 - Ubisoft)
Far Cry 4 (HKLM-x32\...\Far Cry 4_is1) (Version: 1.0 - Релиз от R.G. Steamgames)
FastStone Capture 6.8 (HKLM-x32\...\FastStone Capture) (Version: 6.8 - FastStone Soft)
FormatFactory 4.2.5.0 (HKLM-x32\...\FormatFactory) (Version: 4.2.5.0 - Free Time)
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Globus CEWE fotosvet (HKLM-x32\...\Globus CEWE fotosvet) (Version: 6.4.5 - CEWE Stiftung u Co. KGaA)
Google Chrome (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Half-Life (HKLM-x32\...\Half-Life) (Version: - )
Half-Life: Opposing Force (HKLM-x32\...\Half-Life: Opposing Force) (Version: - )
HappyFoto (HKLM-x32\...\{621A70CA-32A5-4F50-A66C-C9C792580415}_is1) (Version: - Happy Foto CZ)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Hidden & Dangerous 2 (HKLM-x32\...\{83437081-8186-4F63-BD39-4BE8A691E055}) (Version: 1.02.0006 - Název společnosti:) Hidden
Hidden & Dangerous 2 (HKLM-x32\...\InstallShield_{83437081-8186-4F63-BD39-4BE8A691E055}) (Version: 1.02.0006 - Název společnosti:)
Hidden & Dangerous 2 Sabre Squadron (HKLM-x32\...\{E2222809-FDED-4C7E-8F25-2337A8F39F03}) (Version: 1.00.0000 - Illusion Softworks) Hidden
Hidden & Dangerous 2 Sabre Squadron (HKLM-x32\...\InstallShield_{E2222809-FDED-4C7E-8F25-2337A8F39F03}) (Version: 1.00.0000 - Illusion Softworks)
Chrome Remote Desktop Host (HKLM-x32\...\{88D5D9A4-48C4-4D0A-88B9-3E18661CF0D9}) (Version: 57.0.2987.37 - Google Inc.)
iCoolPlayer 1.0 (HKLM-x32\...\iCoolPlayer_is1) (Version: - Nguyen Nhat Dung)
ICQ7.7 (HKLM-x32\...\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}) (Version: 7.7 - ICQ)
ISO Workshop 4.4 (HKLM-x32\...\ISO Workshop_is1) (Version: - Glorylogic)
Java 8 Update 172 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180172F0}) (Version: 8.0.1720.11 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kate's Video Toolkit 7.0 (HKLM-x32\...\VideoToolkit_is1) (Version: 7.0.0 - Web Solution Mart)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lepší.TV (HKLM-x32\...\{349BD5DF-877E-4892-8D54-632B13870B0F}) (Version: 1.0.0 - goNET)
Media Player Codec Pack 4.4.6 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.4.6 - Media Player Codec Pack)
Metro 2033 Redux (HKLM-x32\...\1436434037_is1) (Version: 2.0.0.2 - GOG.com)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.7 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
MIDI to MP3 Converter (HKLM-x32\...\MIDI to MP3 Converter) (Version: 2.0 - FileConv Studio)
Movavi Video Converter 14 (HKLM-x32\...\Movavi Video Converter 14) (Version: 14.3.0 - Movavi)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MySQL Server 5.1 (HKLM\...\{561AB451-B967-475C-80E0-3B6679C38B52}) (Version: 5.1.38 - MySQL AB)
Nail'd Demo (HKLM-x32\...\{D15FD5BC-0F01-48A9-8309-E550D0C2A8F9}) (Version: 1.00 - Deep Silver)
Nero 8 (HKLM-x32\...\{6D45EF03-E8EE-4355-81C3-F918CBCF1029}) (Version: 8.3.309 - Nero AG)
NewBlue Titler Pro for Windows (HKLM-x32\...\NewBlue Titler Pro for Windows) (Version: 1.0 - NewBlue)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials V for Windows (HKLM-x32\...\NewBlue Video Essentials V for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials VI for Windows (HKLM-x32\...\NewBlue Video Essentials VI for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials VII for Windows (HKLM-x32\...\NewBlue Video Essentials VII for Windows) (Version: 3.0 - NewBlue)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
NVIDIA Ovladač 3D Vision 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 301.42 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.16.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.16.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 301.42 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 301.42 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
Outlast: Whistleblower (HKLM-x32\...\T3V0bGFzdFdoaXN0bGVibG93ZXI=_is1) (Version: 1 - )
Ovládací panel NVIDIA 301.42 (HKLM\...\{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 301.42 - NVIDIA Corporation) Hidden
Pandora Service (HKLM-x32\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version: - Pandora.TV) <==== ATTENTION
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PowerDirector (HKLM\...\{2599B6F1-92AC-472C-BE60-9F17565E4938}) (Version: 11.0 - Název společnosti:) Hidden
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
QuickSFV (HKLM-x32\...\{DBDCD3AF-20E4-4E5E-80E8-B14109FE5DD9}) (Version: 3.0.0 - Totally Useful Software, Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Readon Free Internet TV and Online Radio 1.1.0.0 (HKLM-x32\...\{416F1165-010A-40EB-BF27-0490DE6E4CEF}) (Version: 1.1.0 - Readon Technology)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
S.T.A.L.K.E.R. - Call of Pripyat [v1.6.02] (HKLM-x32\...\{406FB8A4-F539-48A9-809C-F94706F9C9F6}_is1) (Version: 1.6.02 - bitComposer Games)
S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0001] (HKLM-x32\...\S.T.A.L.K.E.R. - Shadow of Chernobyl_is1) (Version: 1.0001 - THQ)
Saal Designer (HKLM-x32\...\SaalDesigner) (Version: 4.0 - )
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
SmartSound Quicktracks 5 (HKLM-x32\...\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SnugTV Station (HKLM-x32\...\{AB3ED2E9-3F65-4689-B483-3B0F5F2C6A62}) (Version: 3.3.10 - AVerMedia Technologies, Inc.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Texas Holdem Poker 3D Deluxe Edition v1 0 DeLEGiON (HKLM-x32\...\Texas Holdem Poker 3D Deluxe Edition DeLEGiON_is1) (Version: - Play+Smile Marketing GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 rc1 - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update Manager (HKLM-x32\...\{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}) (Version: 4.60 - Corel Corporation) Hidden
VBA (3821b) (HKLM-x32\...\{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden
VCRedistSetup (HKLM-x32\...\{3921A67A-5AB1-4E48-9444-C71814CF3027}) (Version: 1.0.0 - Nero AG) Hidden
VIO Player version 1.0.1 (HKLM-x32\...\{C8A17598-7F89-41EA-9876-0F89DA0B24F1}_is1) (Version: 1.0.1 - VIO)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.2 - VideoLAN)
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Winamp (HKLM-x32\...\Winamp) (Version: 5.622 - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
小米助手 (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MiPhoneManager) (Version: - 小米移动软件有限公司)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\80.0.3987.149\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ShellExecuteHooks-x32: No Name - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => -> No File
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll [2008-06-08] (Nero AG -> Nero AG)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlex.dll [2013-09-17] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlEx64.dll [2013-09-17] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\system32\prodad-codec.dll [607256 2015-09-17] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\pvmjpg30.dll [401408 2007-06-21] (Pegasus Imaging Corporation) [File not signed]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [246736 2017-06-22] (Cole Williams Software Limited -> )
HKLM\...\Drivers32: [vidc.x264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [vidc.lags] => C:\Windows\SysWOW64\lagarith.dll [230080 2016-09-21] (Cole Williams Software Limited -> )

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --app=hxxp:\\mmotraffic.com\catalog\goplay\1000932\MTE3NjYvLy8xMDAwOTMy\?subid=2&click_id=ddb75d38675bf4affb2a1b66f624d839f261074e
ShortcutWithArgument: C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp

==================== Loaded Modules (Whitelisted) =============

2010-01-28 16:34 - 2010-01-28 16:34 - 000151552 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libexpat.dll
2010-01-28 16:34 - 2010-01-28 16:34 - 000090624 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libgsasl.dll
2010-01-28 16:36 - 2010-01-28 16:36 - 000091136 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libXmppClient.dll
2010-01-19 12:44 - 2010-01-19 12:44 - 000027136 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AmaError.dll
2010-04-07 12:55 - 2010-04-07 12:55 - 000018944 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AVNetPass.dll
2010-02-01 16:38 - 2010-02-01 16:38 - 000073728 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\CryptoRc4.dll
2010-03-01 14:14 - 2010-03-01 14:14 - 000010752 _____ (AVerMedia Technologies, Inc. ) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\libAvndn.dll
2013-10-09 18:46 - 2010-06-18 20:41 - 000106496 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\CardID.dll
2013-10-09 18:46 - 2010-06-18 20:40 - 000364544 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\GraphMaster.dll
2010-05-06 19:32 - 2010-05-06 19:32 - 000050176 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AboutDlg.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000188928 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\Epg.dll
2010-05-06 19:31 - 2010-05-06 19:31 - 001103872 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\GraphEngine.dll
2010-05-06 19:30 - 2010-05-06 19:30 - 000009728 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\HwInfo.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000146432 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ImClient.dll
2010-05-06 19:30 - 2010-05-06 19:30 - 000088064 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ProfileMgr.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000076288 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ProgList.dll
2010-03-22 17:12 - 2010-03-22 17:12 - 000300032 _____ (AVerMedia) [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\AVeriEPG.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:05B51235 [117]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2019-01-04 11:24 - 000000854 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 cap.cyberlink.com

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files (x86)\Pinnacle\Shared Files\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{2A1E0CEC-784B-4E9D-95E7-DA1C5A955A29}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [UDP Query User{0D10A56F-22C8-4E84-B45C-2F8282439C90}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{8597DE1F-B330-42F3-9C91-1040CB71AD99}] => (Block) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{C95E7D51-F537-44BE-BB36-25C395D8A030}] => (Block) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{F726C512-5EF3-44C8-A279-7E0DC07E076B}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{C4B202DD-A506-4CD6-9077-5C8125B614B1}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{DD44F8AC-8A47-4D60-89AB-6D1F5482088A}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{C2290EBA-2D70-4542-88A7-39290FB6B362}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{F364EED5-E5B8-468C-9EBA-4987257400E8}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{69840BB6-A46B-41AF-A860-1B2C3120EBD7}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [TCP Query User{6D4BA9F7-02BC-445C-ACFF-EFAE48200064}E:\half-life_2-emporio\hl2.exe] => (Allow) E:\half-life_2-emporio\hl2.exe No File
FirewallRules: [UDP Query User{0261EDE4-AF28-43EE-ADCF-5B9ABD419485}E:\half-life_2-emporio\hl2.exe] => (Allow) E:\half-life_2-emporio\hl2.exe No File
FirewallRules: [{D8000EC6-F21A-4ED7-B242-12199297661D}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe () [File not signed]
FirewallRules: [{76D8E91E-3582-4139-AF62-725CE049D88D}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe () [File not signed]
FirewallRules: [{81B18C04-D03B-4C45-B13B-0FF45C12EAA5}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe () [File not signed]
FirewallRules: [{381F3729-0CD8-4BB2-857C-1ACE533926C0}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe () [File not signed]
FirewallRules: [{B0BF9D56-9408-49E3-881A-97305AFCAF5D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe (GSC Game World) [File not signed]
FirewallRules: [{CB93ABE6-2156-4A0D-A7CF-4E6F474244E9}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe (GSC Game World) [File not signed]
FirewallRules: [{9F59AA7B-FA95-43B2-B426-C2D4396BC20D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe (GSC Game World -> GSC Game World)
FirewallRules: [{DC8E9168-22A2-4DCF-91FE-12F79BC45E0D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe (GSC Game World -> GSC Game World)
FirewallRules: [TCP Query User{D250F3C6-0858-4919-9EEE-09475EB78061}C:\program files (x86)\codemasters\dirt\dirt.exe] => (Allow) C:\program files (x86)\codemasters\dirt\dirt.exe (Codemasters) [File not signed]
FirewallRules: [UDP Query User{A92FFAA6-ACED-4B24-9319-9E3A93F046C0}C:\program files (x86)\codemasters\dirt\dirt.exe] => (Allow) C:\program files (x86)\codemasters\dirt\dirt.exe (Codemasters) [File not signed]
FirewallRules: [{544C0CF1-D718-4441-98B7-8804A8B2FF72}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{9A3CE225-A7D8-4E18-817D-AD6D040702CF}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{DBC29E38-5C93-4BC3-B046-A379E52F0328}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe () [File not signed]
FirewallRules: [UDP Query User{EB80EB27-7BE9-4B07-B9B3-928F4C84185A}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe () [File not signed]
FirewallRules: [TCP Query User{5224692A-1097-464B-8DBD-990877136C42}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [UDP Query User{4E26C390-CDF2-47B8-BEAE-61F635453AC9}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [{E6E8611A-B5E5-438B-A0B9-E79C743F4BB4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2AF1DA29-75C0-41B4-A265-2B58F7D65FE3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{50759EC1-C4EA-43F6-B42A-451D6F7A6D23}C:\hry\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\hry\far cry 3\bin\farcry3_d3d11.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{6BC3B14D-0DF7-4E67-8722-80C86E4020D5}C:\hry\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\hry\far cry 3\bin\farcry3_d3d11.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [TCP Query User{21FF5F03-3E7A-4AAA-A90E-BE5531440434}C:\hry\far cry 3\bin\farcry3.exe] => (Allow) C:\hry\far cry 3\bin\farcry3.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{4518F04A-4DD1-4578-B183-50E4D4664BC2}C:\hry\far cry 3\bin\farcry3.exe] => (Allow) C:\hry\far cry 3\bin\farcry3.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{B9A2E7A9-3D35-407D-B34C-B0E0F673E4FB}] => (Allow) LPort=3306
FirewallRules: [TCP Query User{F476C962-3381-4ADB-94E4-FA7996A2B3E0}C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe] => (Allow) C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe () [File not signed]
FirewallRules: [UDP Query User{6EBF98FF-BECA-4EFB-8931-12A6413C2EAD}C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe] => (Allow) C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe () [File not signed]
FirewallRules: [{CD62C912-DEC8-419E-ADCD-669DA1D96429}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\ConfigWizard.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [{FC15E061-96EB-4EA6-AE07-6E16F662BBC9}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\ConfigWizard.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [TCP Query User{FA990F4F-99B2-4B1C-9D34-5EBF1004009C}D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe] => (Allow) D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe (Red Barrels Inc.) [File not signed]
FirewallRules: [UDP Query User{88078EEA-90E4-4BB0-9A11-2B79DD7D523D}D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe] => (Allow) D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe (Red Barrels Inc.) [File not signed]
FirewallRules: [TCP Query User{27C8CBC2-76FC-48F8-938C-47A673EF4F42}D:\hry_instalace\far cry 4\bin\farcry4.exe] => (Allow) D:\hry_instalace\far cry 4\bin\farcry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{85575005-C80E-4985-A0DC-FA93D396CB56}D:\hry_instalace\far cry 4\bin\farcry4.exe] => (Allow) D:\hry_instalace\far cry 4\bin\farcry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{87253BA2-16AD-4E66-BDB1-4CDFFC30F09B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{500579F7-0C68-4512-9F80-2BC86D12B3DD}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D716A72D-62A8-4A10-ADC3-C25F4B5CE8A7}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{2CB4EC55-5992-4EEC-B9B0-6C0D8CF30BD8}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{C640E3D0-4FC2-4646-9764-633CE72A2262}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{F21736BD-AE0B-45BB-B8FC-AFAAEB24C142}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{BB533AFE-47DD-4AFB-BE27-A5EBC4C11406}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe (Sony DADC Austria AG) [File not signed]
FirewallRules: [{E641DF3E-7571-422D-B3A4-1824339D96D7}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe (Sony DADC Austria AG) [File not signed]
FirewallRules: [{B8B14C33-1D2B-4D34-8D14-A9B2FE1505AF}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{01E5FF86-5367-426A-82A6-524AD3D5BCA4}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{02722EC4-C621-4E66-8398-3A354B598479}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{FCFDD288-871B-4F35-910A-389069B97208}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{7ABA7CDE-7C08-4B26-A906-67BEED243073}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{23E14894-EEAB-48E1-85F4-9F5C51156254}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{6E809804-9C07-40EB-B015-3147C24669DB}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{F525BC7B-77B0-4839-A120-953A8176AD87}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{8F771CD5-93E4-4429-A4DF-64C51203FC59}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{1858D749-B6EB-4FA2-BE67-E00A720D6B68}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{D0FE3D2A-33C3-44CA-A773-9989EDFD235A}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{65BF7B07-7C65-45F3-870C-1F268F2DB0DA}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{F42C041C-32CC-4080-8E36-987DAC0BDB7E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B0163C8D-C6AF-4299-A2A3-4CABEE8F2810}] => (Allow) LPort=2869
FirewallRules: [{5235A12C-F005-4B34-8081-35158942A28E}] => (Allow) LPort=1900
FirewallRules: [{33CEBA22-AD1A-4746-B0EC-1D9B0F486290}] => (Allow) C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneManager.exe (Xiaomi Technology Inc -> 北京小米移动软件有限公司)
FirewallRules: [{3FD3AAF3-24F8-48BA-B4A8-84D0D5EED31E}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe (Google Inc -> Google Inc.)
FirewallRules: [TCP Query User{AAC5B3C1-6617-4C1E-9AE1-B81E12DD9AED}C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe] => (Allow) C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe (Koch Media GmbH -> Techland)
FirewallRules: [UDP Query User{B2C5C61B-6EF1-4D16-80FC-D3A0BA5BC0A1}C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe] => (Allow) C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe (Koch Media GmbH -> Techland)
FirewallRules: [{4883FD33-8179-4B27-B04A-96DBDEE0D20D}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{3ABB7F9E-BFA1-40E2-A8D4-B46AE0579A20}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{93D19771-F30D-4D79-8A31-723427CFA7DE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{E070D234-711F-489A-95C2-34D3183E29BA}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [TCP Query User{8F83BA8F-8A40-419E-88BB-B5380A5E73AA}C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [UDP Query User{CE3BB32D-F380-4F03-94AD-5E8436676FB4}C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [{DD9F9D22-468E-402F-8B2D-AD1AB182BFB0}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{01BA2D8D-E0E9-47CC-8BB4-EDE647C76CF6}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{9A188DC0-C85B-49A1-A0C7-4181624C7F97}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{D8AE1283-194B-442C-8866-133DDBD5EA56}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{C76BA157-EE7B-4EAF-AE17-D77C47EDFC14}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Online Audio Recorder\Online Audio Recorder.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{1267DFF4-7C04-45E4-A86F-AB17409FD1CA}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Online Audio Recorder\Online Audio Recorder.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{905A64E4-02F9-4EAA-81B0-25B077DB873F}] => (Allow) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{331CB3C8-31FE-4CCA-A2D4-56D151F9F64A}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe No File
FirewallRules: [{5F630C96-CF92-4043-B146-AADDBCA70948}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe No File
FirewallRules: [{DAFCFF43-8E4D-4E2F-831C-42D12062CDEE}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe No File
FirewallRules: [{10B0B138-1AE6-46C3-8C20-5463A69181CF}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe No File
FirewallRules: [{1385A50B-ED82-4E38-9D49-876A178A1DDB}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [{C0DD08E3-0AE5-4681-9463-228D501F724E}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe (AVerMedia Technologies, Inc.) [File not signed]
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Restore Points =========================

22-03-2020 19:33:23 Naplánovaný kontrolní bod
23-03-2020 11:38:15 AdwCleaner_BeforeCleaning_23/03/2020_11:38:13

==================== Faulty Device Manager Devices ============

Name: NetGroup Packet Filter Driver
Description: NetGroup Packet Filter Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: npf
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: ========================

Application errors:
==================
Error: (03/23/2020 11:41:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: SDTray.exe, verze: 2.4.40.129, časové razítko: 0x535a51a2
Název chybujícího modulu: wship6.dll_unloaded, verze: 0.0.0.0, časové razítko: 0x4a5bdb56
Kód výjimky: 0xc0000005
Posun chyby: 0x72001414
ID chybujícího procesu: 0xcd0
Čas spuštění chybující aplikace: 0x01d600ff843f8024
Cesta k chybující aplikaci: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
Cesta k chybujícímu modulu: wship6.dll
ID zprávy: d626a01f-6cf2-11ea-a4cb-902b3419f66d

Error: (03/22/2020 07:00:01 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování nebylo dokončeno, protože došlo k chybě při zápisu do umístění zálohy L:\. Chyba: Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (03/22/2020 04:45:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Explorer.EXE, verze: 6.1.7601.23537, časové razítko: 0x57c44efe
Název chybujícího modulu: DUI70.dll, verze: 6.1.7600.16385, časové razítko: 0x4a5bdf25
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000001106
ID chybujícího procesu: 0x64c
Čas spuštění chybující aplikace: 0x01d6004a94432447
Cesta k chybující aplikaci: C:\Windows\Explorer.EXE
Cesta k chybujícímu modulu: C:\Windows\system32\DUI70.dll
ID zprávy: 323c8d37-6c54-11ea-8203-902b3419f66d

Error: (03/22/2020 04:40:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: nvxdsync.exe, verze: 8.17.13.142, časové razítko: 0x4fb205d3
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.23915, časové razítko: 0x59b94ee4
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000bf3e2
ID chybujícího procesu: 0x568
Čas spuštění chybující aplikace: 0x01d6004a93316607
Cesta k chybující aplikaci: C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 650c10a3-6c53-11ea-8203-902b3419f66d

Error: (03/22/2020 02:04:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: PanProcess.exe, verze: 1.0.1.2, časové razítko: 0x506004cc
Název chybujícího modulu: PanStreamer.dll, verze: 2.0.7.38, časové razítko: 0x509c8e1f
Kód výjimky: 0xc0000005
Posun chyby: 0x0001dc74
ID chybujícího procesu: 0xbfc
Čas spuštění chybující aplikace: 0x01d600207867dff7
Cesta k chybující aplikaci: C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\PANDORA.TV\PanService\PanStreamer.dll
ID zprávy: aae6ca8b-6c3d-11ea-81dd-902b3419f66d

Error: (03/17/2020 08:34:20 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování nebylo dokončeno, protože došlo k chybě při zápisu do umístění zálohy L:\. Chyba: Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (03/17/2020 08:20:17 AM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Nelze otevřít objekt výkonu služby serveru. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/12/2020 09:19:22 PM) (Source: PerfNet) (EventID: 2002) (User: )
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.


System errors:
=============
Error: (03/23/2020 11:41:17 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
prodrv06
prohlp02
prosync1
sfhlp01

Error: (03/23/2020 11:40:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetGroup Packet Filter Driver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (03/23/2020 11:40:09 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Načtení \SystemRoot\SysWow64\drivers\prodrv06.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.

Error: (03/23/2020 11:38:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Spybot-S&D 2 Security Center Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (03/23/2020 11:38:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba AVerScheduleService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/23/2020 11:38:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba SnugTV Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (03/23/2020 11:38:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Display Driver Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/23/2020 11:38:30 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Nero BackItUp Scheduler 3 byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
===================================
Date: 2016-07-04 13:20:02.401
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=224633
Název:SoftwareBundler:Win32/Tillail
ID:224633
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:file:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\UACHlper.exe;file:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\UACHlperx64.exe;file:C:\Program Files (x86)\Smart File Advisor\sfa.exe;file:C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe;file:C:\Program Files (x86)\Smart File Advisor\sfa_inst.exe;file:C:\Program Files (x86)\Smart File Advisor\StartupChecker.exe;file:C:\Program Files (x86)\Smart File Advisor\unins000.dat;file:C:\Program Files (x86)\Smart File Advisor\unins000.exe;file:C:\Program Files (x86)\Smart File Advisor\unins000.msg;folder:C:\Program Files (x86)\Smart File Advisor\;folder:C:\Program Files (x86)\Smart File Advisor\Plugins\;folder:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\;process:pid:4880,ProcessStart:131121039296092267;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\SFAUpdater;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Smart File Advisor;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CU
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:C:\Windows\System32\svchost.exe

Date: 2016-07-04 13:09:20.225
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=224633
Název:SoftwareBundler:Win32/Tillail
ID:224633
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:file:C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe;process:pid:4880,ProcessStart:131121039296092267
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:C:\Windows\System32\svchost.exe

Date: 2015-11-25 06:08:15.062
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{1B403E7E-B228-4AFE-832A-75D5A84B116A}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:NT AUTHORITY\NETWORK SERVICE

Date: 2015-03-18 05:58:55.665
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{3C24CEBD-E81B-452E-9307-1416FF5CFB46}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:NT AUTHORITY\NETWORK SERVICE

CodeIntegrity:
===================================

Date: 2016-09-21 15:55:07.481
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-09-21 15:55:07.480
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-09-09 08:12:10.348
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-09 08:12:10.114
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 20:08:11.504
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 20:08:11.208
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 16:43:25.863
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 16:43:25.582
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: Award Software International, Inc. F1 01/09/2012
Motherboard: Gigabyte Technology Co., Ltd. GA-970A-DS3
Processor: AMD FX(tm)-4100 Quad-Core Processor
Percentage of memory in use: 42%
Total physical RAM: 8173.42 MB
Available physical RAM: 4689.58 MB
Total Virtual: 16345.03 MB
Available Virtual: 12821.92 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:150.16 GB) (Free:17.89 GB) NTFS
Drive d: () (Fixed) (Total:781.25 GB) (Free:12.01 GB) NTFS

\\?\Volume{75ff4ef6-ef7a-11e1-865a-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: C6610D10)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=150.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=781.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomaly start PC win 7

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: J - J:\AutoRunCD.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae8008-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae800d-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a4c12eb5-155f-11e8-856b-902b3419f66d} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a5417187-ef7f-11e1-8aa9-902b3419f66d} - J:\setup.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {e7d6446c-7527-11e3-a02e-902b3419f66d} - F:\AutoRunCD.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {2AA52E5E-344E-46C1-AA4E-C1BF31B3AFDB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA => C:\Users\Šogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {F0CF216D-2011-4308-8360-319C4CD6CFB2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core => C:\Users\Šogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
SearchScopes: HKLM-x32 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
SearchScopes: HKU\S-1-5-21-1027388779-4279868082-974358725-1000 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
BHO-x32: No Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
Toolbar: HKLM - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA
C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core
C:\Users\Šogun\AppData\Roaming\ISOWorkshop.ini
C:\Users\Šogun\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Šogun\AppData\Local\fusioncache.dat
ShellExecuteHooks-x32: No Name - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => -> No File
ContextMenuHandlers1: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers3: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers4: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers5: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers6: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
AlternateDataStreams: C:\ProgramData\TEMP:05B51235 [117]
FirewallRules: [{331CB3C8-31FE-4CCA-A2D4-56D151F9F64A}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe No File
FirewallRules: [{5F630C96-CF92-4043-B146-AADDBCA70948}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe No File
FirewallRules: [{DAFCFF43-8E4D-4E2F-831C-42D12062CDEE}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe No File
FirewallRules: [{10B0B138-1AE6-46C3-8C20-5463A69181CF}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe No File
C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe

EmptyTemp:
End
Uložte do D:\Staženo z Chromu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Re: Pomaly start PC win 7

#7 Příspěvek od Beraji1 »

Dobrý den, po skončení akce se log neobjevil. Posílám proto log z následujícího scanu po vyžadovaném restartu.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-03-2020
Ran by Šogun (administrator) on ŠOGUN-PC (Gigabyte Technology Co., Ltd. GA-970A-DS3) (23-03-2020 17:26:20)
Running from D:\Staženo z Chromu
Loaded Profiles: Šogun (Available Profiles: Šogun & UpdatusUser & Guest)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
() [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
() [File not signed] C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVerMedia Technologies, Inc. ) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\QuickStart.exe
(AVerMedia TECHNOLOGIES, Inc.) [File not signed] C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
(AVerMedia TECHNOLOGIES, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe
(AVerMedia) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
(Cole Williams Software Limited -> ) C:\Windows\SysWOW64\Codecs\TrayMenu.exe
(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe
(Macrovision Corporation -> Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
(Nullsoft, Inc.) [File not signed] C:\Program Files (x86)\Winamp\winampa.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Prolific Technology Inc.) [File not signed] C:\Windows\SysWOW64\IoctlSvc.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Skype Software Sarl -> Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(Xiaomi Technology Inc -> ) C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [277664 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [NBKeyScan] => C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-06-08] (Nero AG -> Nero AG)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-10-25] (Nullsoft, Inc.) [File not signed]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-06-24] (Nero AG -> Nero AG)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [Google Update] => C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-21] (Google LLC -> Google LLC)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [ISUSPM] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation -> Macrovision Corporation)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [EPSON Stylus DX4000 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBEE.EXE [139264 2006-09-21] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd -> DT Soft Ltd)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [MiPhoneManager] => C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe [449464 2017-05-09] (Xiaomi Technology Inc -> )
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22256824 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk [2013-10-09]
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk [2013-10-09]
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2020-02-16]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\Codecs\TrayMenu.exe (Cole Williams Software Limited -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SnugTV Quick Start.lnk [2013-10-09]
ShortcutTarget: SnugTV Quick Start.lnk -> C:\Windows\Installer\{AB3ED2E9-3F65-4689-B483-3B0F5F2C6A62}\NewShortcut1_46FEF19C05F1475DAA14D9007DC15270_2.exe (Macrovision Corporation) [File not signed]
BootExecute: autocheck autochk * sdnclean64.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0425603D-8297-4DDD-8BAE-E4327C22B4A0} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {1D83710D-446D-4A32-8897-A571CEA7FB58} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-12] (Adobe Inc. -> Adobe)
Task: {2A1883BA-E3C7-4FBB-81E5-C2A20CD94678} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {467C78C6-9E8A-4FE8-AA52-6D15D477474E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [4747720 2014-06-27] (Safer Networking Ltd. -> Safer-Networking Ltd.)
Task: {4FC36006-D331-4E7F-9F96-7590DFEBA025} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {66951C4E-AF57-4E12-84A8-A9141A0958B6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6193080 2016-03-21] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [File not signed]
Task: {AB785260-89E1-4CC9-B750-88915023937E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3894664 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
Task: {BF36D647-8CBF-40EB-8102-21ABCBC1A095} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5753752 2016-03-21] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [File not signed]
Task: {D71F0A29-3A68-4A29-843F-E5CA0A4A659E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {EE46E1BC-976C-41ED-947E-BEE867AB5592} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18233016 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
Hosts: 127.0.0.1 cap.cyberlink.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9C105C4F-2CE1-4469-A2D0-B001A652244F}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\ssv.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\jp2ssv.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\dtplugin\npDeployJava1.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\plugin2\npjp2.dll [2018-05-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default [2020-03-23]
CHR DownloadDir: D:\Staženo z Chromu
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-21]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-03-21]
CHR Extension: (Website Blocker (Beta)) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib [2019-03-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-22]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Šogun\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-09-30]
StartMenuInternet: Google Chrome.ORO6RRUXSZNWBMBSDEQZE7VR5Q - C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] (Giga-Byte Technology -> )
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6046624 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [413472 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [348160 2009-10-30] (AVerMedia) [File not signed]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [397312 2009-12-07] () [File not signed]
R2 AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [167936 2010-05-07] (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe [72024 2017-02-07] (Google Inc -> Google Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 MySQL; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe [7599616 2009-08-18] () [File not signed]
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG -> Nero AG)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG -> Nero AG)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-12-04] (Even Balance, Inc. -> )
S2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2014-10-20] (CyberLink Corp. -> CyberLink)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SnugTV Service; C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe [528384 2010-05-06] (AVerMedia Technologies, Inc.) [File not signed]
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] (Microsoft Corporation -> Microsoft Corp.)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdsata; C:\Windows\System32\DRIVERS\amdsata.sys [70200 2009-10-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R0 amdxata; C:\Windows\System32\DRIVERS\amdxata.sys [28728 2009-10-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] (Giga-Byte Technology -> )
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37864 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205576 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [271120 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [206608 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [64272 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [279360 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42976 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [175400 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110560 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84056 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [848672 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [458584 2020-03-12] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [235184 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316256 2020-03-05] (Avast Software s.r.o. -> AVAST Software)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2017-07-15] (Tages SA -> )
R3 CLMirrorDriver; C:\Windows\System32\DRIVERS\CLMirrorDriver.sys [21264 2015-09-17] (CyberLink Corp. -> CyberLink)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-08-26] (DT Soft Ltd -> DT Soft Ltd)
R3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [56960 2011-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
R3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [79104 2011-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Etron Technology Inc)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2013-03-06] (Microsoft Windows Hardware Compatibility Publisher -> ITE )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2017-07-15] (Tages SA -> )
R1 LUMDriver; C:\Windows\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM)
S3 nmwcd; C:\Windows\System32\drivers\ccdcmbx64.sys [19968 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\Windows\System32\drivers\ccdcmbox64.sys [27136 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S1 prodrv06; C:\Windows\SysWOW64\drivers\prodrv06.sys [53920 2004-08-09] (Protection Technology) [File not signed]
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [114016 2004-08-09] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [7040 2004-07-19] (Protection Technology) [File not signed]
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-01-04] (Disc Soft Ltd -> Duplex Secure Ltd.)
S3 upperdev; C:\Windows\System32\DRIVERS\usbser_lowerfltx64.sys [9216 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 usbfilter; C:\Windows\System32\DRIVERS\usbfilter.sys [38456 2009-12-22] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 UsbserFilt; C:\Windows\System32\DRIVERS\usbser_lowerfltjx64.sys [9216 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
U3 a1evkrdl; C:\Windows\System32\Drivers\a1evkrdl.sys [0 0000-00-00] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
U3 aqi0g6fc; C:\Windows\System32\Drivers\aqi0g6fc.sys [0 0000-00-00] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-23 11:36 - 2020-03-23 11:38 - 000000000 ____D C:\AdwCleaner
2020-03-22 17:25 - 2020-03-23 17:26 - 000000000 ____D C:\FRST
2020-03-22 16:39 - 2020-03-22 16:39 - 000037354 _____ C:\Users\Šogun\energy-report.html
2020-03-12 21:11 - 2020-03-22 17:19 - 000555408 _____ C:\Windows\ntbtlog.txt
2020-03-12 21:07 - 2020-03-12 21:07 - 000008300 _____ C:\Users\Šogun\Documents\cc_20200312_210750.reg
2020-03-05 19:50 - 2020-03-05 19:49 - 000368056 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2020-03-05 19:50 - 2020-03-05 19:49 - 000235184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2020-03-05 19:50 - 2020-03-05 19:49 - 000175400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-03-23 17:25 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-03-23 17:24 - 2012-08-26 13:53 - 000000000 ____D C:\ProgramData\NVIDIA
2020-03-23 17:22 - 2009-07-14 05:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-03-23 17:22 - 2009-07-14 05:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-03-23 16:51 - 2018-04-24 13:56 - 000003870 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-03-23 16:51 - 2015-12-03 18:21 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2020-03-23 16:51 - 2012-09-08 15:06 - 000004396 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-03-23 16:51 - 2012-08-28 17:53 - 000002772 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-03-23 11:43 - 2012-10-21 12:44 - 000000000 ____D C:\Users\UpdatusUser
2020-03-23 11:38 - 2016-04-03 08:27 - 000002411 _____ C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk
2020-03-22 17:01 - 2012-08-26 14:24 - 000000000 ____D C:\Program Files (x86)\GRETECH
2020-03-22 16:39 - 2012-08-26 13:41 - 000000000 ____D C:\Users\Šogun
2020-03-20 13:18 - 2013-01-02 22:13 - 000000000 ____D C:\Users\Šogun\AppData\Roaming\vlc
2020-03-18 15:02 - 2012-08-27 13:19 - 000002379 _____ C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-03-18 15:02 - 2012-08-27 13:19 - 000002342 _____ C:\Users\Šogun\Desktop\Google Chrome.lnk
2020-03-17 08:59 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-03-17 08:21 - 2017-03-11 08:33 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2020-03-12 21:23 - 2012-08-28 17:53 - 000000935 _____ C:\Users\Public\Desktop\CCleaner.lnk
2020-03-12 21:23 - 2012-08-28 17:53 - 000000935 _____ C:\ProgramData\Desktop\CCleaner.lnk
2020-03-12 20:53 - 2012-09-08 15:06 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-03-12 20:53 - 2012-09-08 15:06 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-03-12 20:53 - 2012-09-08 15:06 - 000000000 ____D C:\Windows\system32\Macromed
2020-03-12 20:53 - 2012-09-08 15:04 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-03-12 20:53 - 2012-08-27 21:03 - 000458584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2020-03-05 19:50 - 2012-08-27 21:02 - 000000000 ____D C:\ProgramData\AVAST Software
2020-03-05 19:49 - 2019-02-17 19:06 - 000279360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2020-03-05 19:49 - 2019-01-19 11:23 - 000271120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000206608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000064272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2020-03-05 19:49 - 2019-01-18 17:41 - 000037864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2020-03-05 19:49 - 2018-10-20 19:41 - 000042976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2020-03-05 19:49 - 2017-11-16 10:33 - 000205576 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2020-03-05 19:49 - 2014-10-03 15:04 - 000316256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2020-03-05 19:49 - 2014-10-03 15:04 - 000084056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2020-03-05 19:49 - 2012-08-27 21:03 - 000848672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2020-03-05 19:49 - 2012-08-27 21:03 - 000110560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2020-02-29 08:45 - 2009-07-14 16:18 - 013605754 _____ C:\Windows\system32\perfh005.dat
2020-02-29 08:45 - 2009-07-14 16:18 - 004572546 _____ C:\Windows\system32\perfc005.dat
2020-02-29 08:45 - 2009-07-14 06:13 - 000006730 _____ C:\Windows\system32\PerfStringBackup.INI

==================== Files in the root of some directories ========

2018-06-02 18:22 - 2018-06-02 18:22 - 000198884 _____ () C:\Users\Šogun\AppData\Roaming\DMGR_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2013-11-05 19:03 - 2016-11-01 19:10 - 000000021 _____ () C:\Users\Šogun\AppData\Roaming\ISOWorkshop.ini
2016-09-20 17:19 - 2016-09-20 17:19 - 000003584 _____ () C:\Users\Šogun\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-08-27 16:59 - 2012-08-27 16:59 - 000000093 _____ () C:\Users\Šogun\AppData\Local\fusioncache.dat
2016-06-19 16:20 - 2016-06-19 16:20 - 000001482 _____ () C:\Users\Šogun\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-03-22 19:26
==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-03-2020
Ran by Šogun (23-03-2020 17:27:54)
Running from D:\Staženo z Chromu
Windows 7 Ultimate Service Pack 1 (X64) (2012-08-26 12:40:28)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1027388779-4279868082-974358725-500 - Administrator - Disabled)
Guest (S-1-5-21-1027388779-4279868082-974358725-501 - Limited - Disabled) => C:\Users\Guest
UpdatusUser (S-1-5-21-1027388779-4279868082-974358725-1003 - Limited - Enabled) => C:\Users\UpdatusUser
Šogun (S-1-5-21-1027388779-4279868082-974358725-1000 - Administrator - Enabled) => C:\Users\Šogun

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.344 - Adobe)
Adobe Reader X (10.1.16) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Aktualizace NVIDIA 1.8.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.8.15 - NVIDIA Corporation)
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
Apowersoft Online Launcher verze 1.7.1 (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.1 - APOWERSOFT LIMITED)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASUS nVidia Driver (HKLM-x32\...\{1A1FA4C1-2701-401C-8CE1-FDDE45304FF5}) (Version: 1.00.0000 - ASUSTek) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
AVerMedia A827 series driver 2.0.64.126 (HKLM-x32\...\AVerMedia A827 series driver) (Version: 2.0.64.126 - AVerMedia TECHNOLOGIES, Inc.)
AVerMedia Applications (HKLM-x32\...\{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}) (Version: 1.0.4 - AVerMedia Technologies, Inc.) Hidden
AVerMedia Applications (HKLM-x32\...\InstallShield_{92C41B26-EBC5-41C5-8B6F-E3EF7E57FF16}) (Version: 1.0.4 - AVerMedia Technologies, Inc.)
AVerMedia Media Center Plug-ins 2.0.7.0 (HKLM-x32\...\AVerMedia Media Center Plug-ins) (Version: 2.0.7.0 - AVerMedia TECHNOLOGIES, Inc.)
AVerTV (HKLM-x32\...\{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}) (Version: 6.0.18 - AVerMedia Technologies, Inc.) Hidden
AVerTV (HKLM-x32\...\InstallShield_{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}) (Version: 6.0.18 - AVerMedia Technologies, Inc.)
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.13.160818 - )
bwin Poker (HKLM-x32\...\bwincomPoker) (Version: - bwincom)
bwin Poker 1.0.0 (HKLM-x32\...\bwin Poker_is1) (Version: 1.0.0 - bwin)
CCleaner (HKLM\...\CCleaner) (Version: 5.64 - Piriform)
Crysis(R) (HKLM-x32\...\{000E79B7-E725-4F01-870A-C12942B7F8E4}) (Version: 1.00.0000 - Electronic Arts)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.2019.0 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd)
Dassault Systemes Software B19 (HKLM\...\Dassault Systemes B19_0) (Version: - )
Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes)
DiRT (HKLM-x32\...\{57B89E30-0BBA-4F20-9F2C-8E8CDE1CEDB6}) (Version: 1.00.0000 - Codemasters)
DVB Dream version 1.7a (HKLM-x32\...\DVB Dream_is1) (Version: - )
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.104 - Etron Technology) Hidden
Evidence AutoBazaru (HKLM-x32\...\{B4853FE1-17E7-43F6-9B01-2016FCABA809}) (Version: 6.0.0 - AutoSoft)
Far Cry (HKLM-x32\...\{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}) (Version: 1.00.0000 - Ubisoft) Hidden
Far Cry (HKLM-x32\...\InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}) (Version: 1.00.0000 - Ubisoft)
Far Cry (Patch 1.3) (HKLM-x32\...\{21A127AE-2DAF-40B7-8374-34C3E629521C}) (Version: 1.00.0000 - Název společnosti:) Hidden
Far Cry (Patch 1.4) (HKLM-x32\...\{7EF15AAF-42AC-4CF6-B4B4-C4F0D1D92122}) (Version: 1.00.0000 - Název společnosti:) Hidden
Far Cry 3 v1.01 (HKLM-x32\...\Far Cry 3_is1) (Version: 1.01 - Ubisoft)
Far Cry 4 (HKLM-x32\...\Far Cry 4_is1) (Version: 1.0 - Релиз от R.G. Steamgames)
FastStone Capture 6.8 (HKLM-x32\...\FastStone Capture) (Version: 6.8 - FastStone Soft)
FormatFactory 4.2.5.0 (HKLM-x32\...\FormatFactory) (Version: 4.2.5.0 - Free Time)
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Globus CEWE fotosvet (HKLM-x32\...\Globus CEWE fotosvet) (Version: 6.4.5 - CEWE Stiftung u Co. KGaA)
Google Chrome (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Half-Life (HKLM-x32\...\Half-Life) (Version: - )
Half-Life: Opposing Force (HKLM-x32\...\Half-Life: Opposing Force) (Version: - )
HappyFoto (HKLM-x32\...\{621A70CA-32A5-4F50-A66C-C9C792580415}_is1) (Version: - Happy Foto CZ)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Hidden & Dangerous 2 (HKLM-x32\...\{83437081-8186-4F63-BD39-4BE8A691E055}) (Version: 1.02.0006 - Název společnosti:) Hidden
Hidden & Dangerous 2 (HKLM-x32\...\InstallShield_{83437081-8186-4F63-BD39-4BE8A691E055}) (Version: 1.02.0006 - Název společnosti:)
Hidden & Dangerous 2 Sabre Squadron (HKLM-x32\...\{E2222809-FDED-4C7E-8F25-2337A8F39F03}) (Version: 1.00.0000 - Illusion Softworks) Hidden
Hidden & Dangerous 2 Sabre Squadron (HKLM-x32\...\InstallShield_{E2222809-FDED-4C7E-8F25-2337A8F39F03}) (Version: 1.00.0000 - Illusion Softworks)
Chrome Remote Desktop Host (HKLM-x32\...\{88D5D9A4-48C4-4D0A-88B9-3E18661CF0D9}) (Version: 57.0.2987.37 - Google Inc.)
iCoolPlayer 1.0 (HKLM-x32\...\iCoolPlayer_is1) (Version: - Nguyen Nhat Dung)
ICQ7.7 (HKLM-x32\...\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}) (Version: 7.7 - ICQ)
ISO Workshop 4.4 (HKLM-x32\...\ISO Workshop_is1) (Version: - Glorylogic)
Java 8 Update 172 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180172F0}) (Version: 8.0.1720.11 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kate's Video Toolkit 7.0 (HKLM-x32\...\VideoToolkit_is1) (Version: 7.0.0 - Web Solution Mart)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lepší.TV (HKLM-x32\...\{349BD5DF-877E-4892-8D54-632B13870B0F}) (Version: 1.0.0 - goNET)
Media Player Codec Pack 4.4.6 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.4.6 - Media Player Codec Pack)
Metro 2033 Redux (HKLM-x32\...\1436434037_is1) (Version: 2.0.0.2 - GOG.com)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.7 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
MIDI to MP3 Converter (HKLM-x32\...\MIDI to MP3 Converter) (Version: 2.0 - FileConv Studio)
Movavi Video Converter 14 (HKLM-x32\...\Movavi Video Converter 14) (Version: 14.3.0 - Movavi)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MySQL Server 5.1 (HKLM\...\{561AB451-B967-475C-80E0-3B6679C38B52}) (Version: 5.1.38 - MySQL AB)
Nail'd Demo (HKLM-x32\...\{D15FD5BC-0F01-48A9-8309-E550D0C2A8F9}) (Version: 1.00 - Deep Silver)
Nero 8 (HKLM-x32\...\{6D45EF03-E8EE-4355-81C3-F918CBCF1029}) (Version: 8.3.309 - Nero AG)
NewBlue Titler Pro for Windows (HKLM-x32\...\NewBlue Titler Pro for Windows) (Version: 1.0 - NewBlue)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials V for Windows (HKLM-x32\...\NewBlue Video Essentials V for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials VI for Windows (HKLM-x32\...\NewBlue Video Essentials VI for Windows) (Version: 3.0 - NewBlue)
NewBlue Video Essentials VII for Windows (HKLM-x32\...\NewBlue Video Essentials VII for Windows) (Version: 3.0 - NewBlue)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
NVIDIA Ovladač 3D Vision 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 301.42 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.16.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.16.0 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 301.42 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 301.42 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
Outlast: Whistleblower (HKLM-x32\...\T3V0bGFzdFdoaXN0bGVibG93ZXI=_is1) (Version: 1 - )
Ovládací panel NVIDIA 301.42 (HKLM\...\{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 301.42 - NVIDIA Corporation) Hidden
Pandora Service (HKLM-x32\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version: - Pandora.TV) <==== ATTENTION
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PowerDirector (HKLM\...\{2599B6F1-92AC-472C-BE60-9F17565E4938}) (Version: 11.0 - Název společnosti:) Hidden
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
QuickSFV (HKLM-x32\...\{DBDCD3AF-20E4-4E5E-80E8-B14109FE5DD9}) (Version: 3.0.0 - Totally Useful Software, Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Rapture3D 2.4.8 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Readon Free Internet TV and Online Radio 1.1.0.0 (HKLM-x32\...\{416F1165-010A-40EB-BF27-0490DE6E4CEF}) (Version: 1.1.0 - Readon Technology)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6482 - Realtek Semiconductor Corp.)
S.T.A.L.K.E.R. - Call of Pripyat [v1.6.02] (HKLM-x32\...\{406FB8A4-F539-48A9-809C-F94706F9C9F6}_is1) (Version: 1.6.02 - bitComposer Games)
S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0001] (HKLM-x32\...\S.T.A.L.K.E.R. - Shadow of Chernobyl_is1) (Version: 1.0001 - THQ)
Saal Designer (HKLM-x32\...\SaalDesigner) (Version: 4.0 - )
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
SmartSound Quicktracks 5 (HKLM-x32\...\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) Hidden
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SnugTV Station (HKLM-x32\...\{AB3ED2E9-3F65-4689-B483-3B0F5F2C6A62}) (Version: 3.3.10 - AVerMedia Technologies, Inc.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Texas Holdem Poker 3D Deluxe Edition v1 0 DeLEGiON (HKLM-x32\...\Texas Holdem Poker 3D Deluxe Edition DeLEGiON_is1) (Version: - Play+Smile Marketing GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 rc1 - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update Manager (HKLM-x32\...\{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}) (Version: 4.60 - Corel Corporation) Hidden
VBA (3821b) (HKLM-x32\...\{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}) (Version: 6.01.00.1234 - Microsoft Corporation) Hidden
VCRedistSetup (HKLM-x32\...\{3921A67A-5AB1-4E48-9444-C71814CF3027}) (Version: 1.0.0 - Nero AG) Hidden
VIO Player version 1.0.1 (HKLM-x32\...\{C8A17598-7F89-41EA-9876-0F89DA0B24F1}_is1) (Version: 1.0.1 - VIO)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.2 - VideoLAN)
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Winamp (HKLM-x32\...\Winamp) (Version: 5.622 - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
小米助手 (HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MiPhoneManager) (Version: - 小米移动软件有限公司)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\80.0.3987.149\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1027388779-4279868082-974358725-1000_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Šogun\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll [2008-06-08] (Nero AG -> Nero AG)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlex.dll [2013-09-17] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlEx64.dll [2013-09-17] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2012-05-15] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2014-06-24] (Safer Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\system32\prodad-codec.dll [607256 2015-09-17] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\pvmjpg30.dll [401408 2007-06-21] (Pegasus Imaging Corporation) [File not signed]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [246736 2017-06-22] (Cole Williams Software Limited -> )
HKLM\...\Drivers32: [vidc.x264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [vidc.lags] => C:\Windows\SysWOW64\lagarith.dll [230080 2016-09-21] (Cole Williams Software Limited -> )

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --app=hxxp:\\mmotraffic.com\catalog\goplay\1000932\MTE3NjYvLy8xMDAwOTMy\?subid=2&click_id=ddb75d38675bf4affb2a1b66f624d839f261074e
ShortcutWithArgument: C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp

==================== Loaded Modules (Whitelisted) =============

2010-01-28 16:34 - 2010-01-28 16:34 - 000151552 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libexpat.dll
2010-01-28 16:34 - 2010-01-28 16:34 - 000090624 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libgsasl.dll
2010-01-28 16:36 - 2010-01-28 16:36 - 000091136 _____ () [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\libXmppClient.dll
2010-01-19 12:44 - 2010-01-19 12:44 - 000027136 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AmaError.dll
2010-04-07 12:55 - 2010-04-07 12:55 - 000018944 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AVNetPass.dll
2010-02-01 16:38 - 2010-02-01 16:38 - 000073728 _____ () [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\CryptoRc4.dll
2010-03-01 14:14 - 2010-03-01 14:14 - 000010752 _____ (AVerMedia Technologies, Inc. ) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\libAvndn.dll
2013-10-09 18:46 - 2010-06-18 20:41 - 000106496 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\CardID.dll
2013-10-09 18:46 - 2010-06-18 20:40 - 000364544 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\Common Files\AVerMedia\dll\GraphMaster.dll
2010-05-06 19:32 - 2010-05-06 19:32 - 000050176 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\AboutDlg.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000188928 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\Epg.dll
2010-05-06 19:31 - 2010-05-06 19:31 - 001103872 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\GraphEngine.dll
2010-05-06 19:30 - 2010-05-06 19:30 - 000009728 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\HwInfo.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000146432 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ImClient.dll
2010-05-06 19:30 - 2010-05-06 19:30 - 000088064 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ProfileMgr.dll
2010-05-06 19:33 - 2010-05-06 19:33 - 000076288 _____ (AVerMedia Technologies, Inc.) [File not signed] C:\Program Files (x86)\SnugTV\SnugTV Station\ProgList.dll
2010-03-22 17:12 - 2010-03-22 17:12 - 000300032 _____ (AVerMedia) [File not signed] C:\Program Files (x86)\Common Files\SnugTV\IEPG\AVeriEPG.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2019-01-04 11:24 - 000000854 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 cap.cyberlink.com

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files (x86)\Pinnacle\Shared Files\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Šogun\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{2A1E0CEC-784B-4E9D-95E7-DA1C5A955A29}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [UDP Query User{0D10A56F-22C8-4E84-B45C-2F8282439C90}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{8597DE1F-B330-42F3-9C91-1040CB71AD99}] => (Block) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{C95E7D51-F537-44BE-BB36-25C395D8A030}] => (Block) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{F726C512-5EF3-44C8-A279-7E0DC07E076B}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{C4B202DD-A506-4CD6-9077-5C8125B614B1}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{DD44F8AC-8A47-4D60-89AB-6D1F5482088A}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{C2290EBA-2D70-4542-88A7-39290FB6B362}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{F364EED5-E5B8-468C-9EBA-4987257400E8}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [{69840BB6-A46B-41AF-A860-1B2C3120EBD7}] => (Allow) C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ -> ICQ, LLC.)
FirewallRules: [TCP Query User{6D4BA9F7-02BC-445C-ACFF-EFAE48200064}E:\half-life_2-emporio\hl2.exe] => (Allow) E:\half-life_2-emporio\hl2.exe No File
FirewallRules: [UDP Query User{0261EDE4-AF28-43EE-ADCF-5B9ABD419485}E:\half-life_2-emporio\hl2.exe] => (Allow) E:\half-life_2-emporio\hl2.exe No File
FirewallRules: [{D8000EC6-F21A-4ED7-B242-12199297661D}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe () [File not signed]
FirewallRules: [{76D8E91E-3582-4139-AF62-725CE049D88D}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe () [File not signed]
FirewallRules: [{81B18C04-D03B-4C45-B13B-0FF45C12EAA5}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe () [File not signed]
FirewallRules: [{381F3729-0CD8-4BB2-857C-1ACE533926C0}] => (Allow) C:\Program Files (x86)\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe () [File not signed]
FirewallRules: [{B0BF9D56-9408-49E3-881A-97305AFCAF5D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe (GSC Game World) [File not signed]
FirewallRules: [{CB93ABE6-2156-4A0D-A7CF-4E6F474244E9}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe (GSC Game World) [File not signed]
FirewallRules: [{9F59AA7B-FA95-43B2-B426-C2D4396BC20D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe (GSC Game World -> GSC Game World)
FirewallRules: [{DC8E9168-22A2-4DCF-91FE-12F79BC45E0D}] => (Allow) C:\Program Files (x86)\bitComposer Games\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe (GSC Game World -> GSC Game World)
FirewallRules: [TCP Query User{D250F3C6-0858-4919-9EEE-09475EB78061}C:\program files (x86)\codemasters\dirt\dirt.exe] => (Allow) C:\program files (x86)\codemasters\dirt\dirt.exe (Codemasters) [File not signed]
FirewallRules: [UDP Query User{A92FFAA6-ACED-4B24-9319-9E3A93F046C0}C:\program files (x86)\codemasters\dirt\dirt.exe] => (Allow) C:\program files (x86)\codemasters\dirt\dirt.exe (Codemasters) [File not signed]
FirewallRules: [{544C0CF1-D718-4441-98B7-8804A8B2FF72}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{9A3CE225-A7D8-4E18-817D-AD6D040702CF}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{DBC29E38-5C93-4BC3-B046-A379E52F0328}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe () [File not signed]
FirewallRules: [UDP Query User{EB80EB27-7BE9-4B07-B9B3-928F4C84185A}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\orbixd.exe () [File not signed]
FirewallRules: [TCP Query User{5224692A-1097-464B-8DBD-990877136C42}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [UDP Query User{4E26C390-CDF2-47B8-BEAE-61F635453AC9}C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe] => (Allow) C:\program files (x86)\dassault systemes\b19\intel_a\code\bin\cnext.exe (Dassault Systemes) [File not signed]
FirewallRules: [{E6E8611A-B5E5-438B-A0B9-E79C743F4BB4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2AF1DA29-75C0-41B4-A265-2B58F7D65FE3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{50759EC1-C4EA-43F6-B42A-451D6F7A6D23}C:\hry\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\hry\far cry 3\bin\farcry3_d3d11.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{6BC3B14D-0DF7-4E67-8722-80C86E4020D5}C:\hry\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\hry\far cry 3\bin\farcry3_d3d11.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [TCP Query User{21FF5F03-3E7A-4AAA-A90E-BE5531440434}C:\hry\far cry 3\bin\farcry3.exe] => (Allow) C:\hry\far cry 3\bin\farcry3.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{4518F04A-4DD1-4578-B183-50E4D4664BC2}C:\hry\far cry 3\bin\farcry3.exe] => (Allow) C:\hry\far cry 3\bin\farcry3.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{B9A2E7A9-3D35-407D-B34C-B0E0F673E4FB}] => (Allow) LPort=3306
FirewallRules: [TCP Query User{F476C962-3381-4ADB-94E4-FA7996A2B3E0}C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe] => (Allow) C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe () [File not signed]
FirewallRules: [UDP Query User{6EBF98FF-BECA-4EFB-8931-12A6413C2EAD}C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe] => (Allow) C:\games\b.i.a.hells.highway-kaos\binaries\biahh.exe () [File not signed]
FirewallRules: [{CD62C912-DEC8-419E-ADCD-669DA1D96429}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\ConfigWizard.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [{FC15E061-96EB-4EA6-AE07-6E16F662BBC9}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\ConfigWizard.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [TCP Query User{FA990F4F-99B2-4B1C-9D34-5EBF1004009C}D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe] => (Allow) D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe (Red Barrels Inc.) [File not signed]
FirewallRules: [UDP Query User{88078EEA-90E4-4BB0-9A11-2B79DD7D523D}D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe] => (Allow) D:\Hry_instalace\outlast whistleblower\Binaries\Win64\OLGame.exe (Red Barrels Inc.) [File not signed]
FirewallRules: [TCP Query User{27C8CBC2-76FC-48F8-938C-47A673EF4F42}D:\hry_instalace\far cry 4\bin\farcry4.exe] => (Allow) D:\hry_instalace\far cry 4\bin\farcry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{85575005-C80E-4985-A0DC-FA93D396CB56}D:\hry_instalace\far cry 4\bin\farcry4.exe] => (Allow) D:\hry_instalace\far cry 4\bin\farcry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{87253BA2-16AD-4E66-BDB1-4CDFFC30F09B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{500579F7-0C68-4512-9F80-2BC86D12B3DD}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D716A72D-62A8-4A10-ADC3-C25F4B5CE8A7}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{2CB4EC55-5992-4EEC-B9B0-6C0D8CF30BD8}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{C640E3D0-4FC2-4646-9764-633CE72A2262}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{F21736BD-AE0B-45BB-B8FC-AFAAEB24C142}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{BB533AFE-47DD-4AFB-BE27-A5EBC4C11406}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe (Sony DADC Austria AG) [File not signed]
FirewallRules: [{E641DF3E-7571-422D-B3A4-1824339D96D7}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe (Sony DADC Austria AG) [File not signed]
FirewallRules: [{B8B14C33-1D2B-4D34-8D14-A9B2FE1505AF}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{01E5FF86-5367-426A-82A6-524AD3D5BCA4}] => (Allow) D:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\CrysisDedicatedServer.exe (Crytek GmbH -> Crytek GmbH)
FirewallRules: [{02722EC4-C621-4E66-8398-3A354B598479}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{FCFDD288-871B-4F35-910A-389069B97208}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{7ABA7CDE-7C08-4B26-A906-67BEED243073}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{23E14894-EEAB-48E1-85F4-9F5C51156254}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{6E809804-9C07-40EB-B015-3147C24669DB}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{F525BC7B-77B0-4839-A120-953A8176AD87}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\RM.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{8F771CD5-93E4-4429-A4DF-64C51203FC59}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{1858D749-B6EB-4FA2-BE67-E00A720D6B68}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\umi.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{D0FE3D2A-33C3-44CA-A773-9989EDFD235A}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{65BF7B07-7C65-45F3-870C-1F268F2DB0DA}] => (Allow) C:\Program Files (x86)\Pinnacle\VideoSpin\Programs\VideoSpin.exe (Pinnacle Systems, Inc. -> Pinnacle Systems)
FirewallRules: [{F42C041C-32CC-4080-8E36-987DAC0BDB7E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B0163C8D-C6AF-4299-A2A3-4CABEE8F2810}] => (Allow) LPort=2869
FirewallRules: [{5235A12C-F005-4B34-8081-35158942A28E}] => (Allow) LPort=1900
FirewallRules: [{33CEBA22-AD1A-4746-B0EC-1D9B0F486290}] => (Allow) C:\Users\Šogun\AppData\Local\MiPhoneManager\main\MiPhoneManager.exe (Xiaomi Technology Inc -> 北京小米移动软件有限公司)
FirewallRules: [{3FD3AAF3-24F8-48BA-B4A8-84D0D5EED31E}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\57.0.2987.37\remoting_host.exe (Google Inc -> Google Inc.)
FirewallRules: [TCP Query User{AAC5B3C1-6617-4C1E-9AE1-B81E12DD9AED}C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe] => (Allow) C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe (Koch Media GmbH -> Techland)
FirewallRules: [UDP Query User{B2C5C61B-6EF1-4D16-80FC-D3A0BA5BC0A1}C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe] => (Allow) C:\program files (x86)\deep silver\nail'd demo\naild_x86.exe (Koch Media GmbH -> Techland)
FirewallRules: [{4883FD33-8179-4B27-B04A-96DBDEE0D20D}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{3ABB7F9E-BFA1-40E2-A8D4-B46AE0579A20}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{93D19771-F30D-4D79-8A31-723427CFA7DE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.) [File not signed]
FirewallRules: [{E070D234-711F-489A-95C2-34D3183E29BA}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [TCP Query User{8F83BA8F-8A40-419E-88BB-B5380A5E73AA}C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [UDP Query User{CE3BB32D-F380-4F03-94AD-5E8436676FB4}C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\šogun\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [{DD9F9D22-468E-402F-8B2D-AD1AB182BFB0}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{01BA2D8D-E0E9-47CC-8BB4-EDE647C76CF6}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{9A188DC0-C85B-49A1-A0C7-4181624C7F97}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{D8AE1283-194B-442C-8866-133DDBD5EA56}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{C76BA157-EE7B-4EAF-AE17-D77C47EDFC14}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Online Audio Recorder\Online Audio Recorder.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{1267DFF4-7C04-45E4-A86F-AB17409FD1CA}] => (Allow) C:\Users\Šogun\AppData\Local\Apowersoft\Online Audio Recorder\Online Audio Recorder.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{905A64E4-02F9-4EAA-81B0-25B077DB873F}] => (Allow) C:\Users\Šogun\AppData\Local\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{1385A50B-ED82-4E38-9D49-876A178A1DDB}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe (AVerMedia Technologies, Inc.) [File not signed]
FirewallRules: [{C0DD08E3-0AE5-4681-9463-228D501F724E}] => (Allow) C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe (AVerMedia Technologies, Inc.) [File not signed]
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Restore Points =========================

22-03-2020 19:33:23 Naplánovaný kontrolní bod
23-03-2020 11:38:15 AdwCleaner_BeforeCleaning_23/03/2020_11:38:13

==================== Faulty Device Manager Devices ============

Name: NetGroup Packet Filter Driver
Description: NetGroup Packet Filter Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: npf
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: ========================

Application errors:
==================
Error: (03/23/2020 11:41:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: SDTray.exe, verze: 2.4.40.129, časové razítko: 0x535a51a2
Název chybujícího modulu: wship6.dll_unloaded, verze: 0.0.0.0, časové razítko: 0x4a5bdb56
Kód výjimky: 0xc0000005
Posun chyby: 0x72001414
ID chybujícího procesu: 0xcd0
Čas spuštění chybující aplikace: 0x01d600ff843f8024
Cesta k chybující aplikaci: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
Cesta k chybujícímu modulu: wship6.dll
ID zprávy: d626a01f-6cf2-11ea-a4cb-902b3419f66d

Error: (03/22/2020 07:00:01 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování nebylo dokončeno, protože došlo k chybě při zápisu do umístění zálohy L:\. Chyba: Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (03/22/2020 04:45:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Explorer.EXE, verze: 6.1.7601.23537, časové razítko: 0x57c44efe
Název chybujícího modulu: DUI70.dll, verze: 6.1.7600.16385, časové razítko: 0x4a5bdf25
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000001106
ID chybujícího procesu: 0x64c
Čas spuštění chybující aplikace: 0x01d6004a94432447
Cesta k chybující aplikaci: C:\Windows\Explorer.EXE
Cesta k chybujícímu modulu: C:\Windows\system32\DUI70.dll
ID zprávy: 323c8d37-6c54-11ea-8203-902b3419f66d

Error: (03/22/2020 04:40:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: nvxdsync.exe, verze: 8.17.13.142, časové razítko: 0x4fb205d3
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.23915, časové razítko: 0x59b94ee4
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000bf3e2
ID chybujícího procesu: 0x568
Čas spuštění chybující aplikace: 0x01d6004a93316607
Cesta k chybující aplikaci: C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 650c10a3-6c53-11ea-8203-902b3419f66d

Error: (03/22/2020 02:04:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: PanProcess.exe, verze: 1.0.1.2, časové razítko: 0x506004cc
Název chybujícího modulu: PanStreamer.dll, verze: 2.0.7.38, časové razítko: 0x509c8e1f
Kód výjimky: 0xc0000005
Posun chyby: 0x0001dc74
ID chybujícího procesu: 0xbfc
Čas spuštění chybující aplikace: 0x01d600207867dff7
Cesta k chybující aplikaci: C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\PANDORA.TV\PanService\PanStreamer.dll
ID zprávy: aae6ca8b-6c3d-11ea-81dd-902b3419f66d

Error: (03/17/2020 08:34:20 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Zálohování nebylo dokončeno, protože došlo k chybě při zápisu do umístění zálohy L:\. Chyba: Umístění zálohy nebylo nalezeno nebo není platné. Zkontrolujte nastavení zálohování a umístění zálohy. (0x81000006).

Error: (03/17/2020 08:20:17 AM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Nelze otevřít objekt výkonu služby serveru. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (03/12/2020 09:19:22 PM) (Source: PerfNet) (EventID: 2002) (User: )
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.


System errors:
=============
Error: (03/23/2020 05:25:30 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
prodrv06
prohlp02
prosync1
sfhlp01

Error: (03/23/2020 05:25:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba NetGroup Packet Filter Driver neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (03/23/2020 05:24:45 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Načtení \SystemRoot\SysWow64\drivers\prodrv06.sys bylo zablokováno kvůli nekompatibilitě s tímto systémem. Požádejte dodavatele softwaru
o kompatibilní verzi ovladače.

Error: (03/23/2020 05:23:10 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Správce služeb se pokusil o opravnou akci (Restartovat službu) po nečekaném ukončení služby Windows Search, ale tato akce selhala kvůli následující chybě:
Instance této služby je již spuštěna.

Error: (03/23/2020 05:22:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Ochrana softwaru byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (03/23/2020 05:22:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba WMI Performance Adapter byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (03/23/2020 05:22:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (03/23/2020 05:22:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NVIDIA Update Service Daemon byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
===================================
Date: 2016-07-04 13:20:02.401
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=224633
Název:SoftwareBundler:Win32/Tillail
ID:224633
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:file:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\UACHlper.exe;file:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\UACHlperx64.exe;file:C:\Program Files (x86)\Smart File Advisor\sfa.exe;file:C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe;file:C:\Program Files (x86)\Smart File Advisor\sfa_inst.exe;file:C:\Program Files (x86)\Smart File Advisor\StartupChecker.exe;file:C:\Program Files (x86)\Smart File Advisor\unins000.dat;file:C:\Program Files (x86)\Smart File Advisor\unins000.exe;file:C:\Program Files (x86)\Smart File Advisor\unins000.msg;folder:C:\Program Files (x86)\Smart File Advisor\;folder:C:\Program Files (x86)\Smart File Advisor\Plugins\;folder:C:\Program Files (x86)\Smart File Advisor\Plugins\Helper\;process:pid:4880,ProcessStart:131121039296092267;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\SFAUpdater;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Smart File Advisor;regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CU
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:C:\Windows\System32\svchost.exe

Date: 2016-07-04 13:09:20.225
Description:
Prohledávání Windows Defender rozpoznalo spyware nebo jiný potenciálně nežádoucí software.
Další informace:
http://go.microsoft.com/fwlink/?linkid= ... tid=224633
Název:SoftwareBundler:Win32/Tillail
ID:224633
Závažnost:Vysoké
Kategorie:Software instalující další produkty
Nalezeno v cestě:file:C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe;process:pid:4880,ProcessStart:131121039296092267
Typ zjišťování:Konkrétní
Zdroj zjišťování:Systém
Stav:Neznámý
Uživatel:NT AUTHORITY\SYSTEM
Název procesu:C:\Windows\System32\svchost.exe

Date: 2015-11-25 06:08:15.062
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{1B403E7E-B228-4AFE-832A-75D5A84B116A}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:NT AUTHORITY\NETWORK SERVICE

Date: 2015-03-18 05:58:55.665
Description:
Prohledávání Windows Defender bylo zastaveno před dokončením.
ID prohledávání:{3C24CEBD-E81B-452E-9307-1416FF5CFB46}
Typ prohledávání:Antispywarový program
Parametry prohledávání:Rychlé prohledávání
Uživatel:NT AUTHORITY\NETWORK SERVICE

CodeIntegrity:
===================================

Date: 2016-09-21 15:55:07.481
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-09-21 15:55:07.480
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-09-09 08:12:10.348
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-09 08:12:10.114
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 20:08:11.504
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 20:08:11.208
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 16:43:25.863
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 16:43:25.582
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: Award Software International, Inc. F1 01/09/2012
Motherboard: Gigabyte Technology Co., Ltd. GA-970A-DS3
Processor: AMD FX(tm)-4100 Quad-Core Processor
Percentage of memory in use: 38%
Total physical RAM: 8173.42 MB
Available physical RAM: 5015.11 MB
Total Virtual: 16345.03 MB
Available Virtual: 12993.34 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:150.16 GB) (Free:18.13 GB) NTFS
Drive d: () (Fixed) (Total:781.25 GB) (Free:12.01 GB) NTFS

\\?\Volume{75ff4ef6-ef7a-11e1-865a-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: C6610D10)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=150.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=781.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomaly start PC win 7

#8 Příspěvek od Rudy »

Log potřebuji vidět. Najdete ho v D:\Staženo z Chromu pod názvem fixlog.txt.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Re: Pomaly start PC win 7

#9 Příspěvek od Beraji1 »

Fix result of Farbar Recovery Scan Tool (x64) Version: 22-03-2020
Ran by Šogun (23-03-2020 17:22:38) Run:2
Running from D:\Staženo z Chromu
Loaded Profiles: Šogun & UpdatusUser (Available Profiles: Šogun & UpdatusUser & Guest)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: J - J:\AutoRunCD.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae8008-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {2eae800d-8224-11e6-b66e-902b3419f66d} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a4c12eb5-155f-11e8-856b-902b3419f66d} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {a5417187-ef7f-11e1-8aa9-902b3419f66d} - J:\setup.exe
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\...\MountPoints2: {e7d6446c-7527-11e3-a02e-902b3419f66d} - F:\AutoRunCD.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {2AA52E5E-344E-46C1-AA4E-C1BF31B3AFDB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA => C:\Users\�ogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {F0CF216D-2011-4308-8360-319C4CD6CFB2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core => C:\Users\�ogun\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
SearchScopes: HKLM-x32 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
SearchScopes: HKU\S-1-5-21-1027388779-4279868082-974358725-1000 -> DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL =
BHO-x32: No Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
Toolbar: HKLM - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM-x32 - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA
C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core
C:\Users\�ogun\AppData\Roaming\ISOWorkshop.ini
C:\Users\�ogun\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\�ogun\AppData\Local\fusioncache.dat
ShellExecuteHooks-x32: No Name - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => -> No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => -> No File
ContextMenuHandlers1: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers3: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers4: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers5: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
ContextMenuHandlers6: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File
AlternateDataStreams: C:\ProgramData\TEMP:05B51235 [117]
FirewallRules: [{331CB3C8-31FE-4CCA-A2D4-56D151F9F64A}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe No File
FirewallRules: [{5F630C96-CF92-4043-B146-AADDBCA70948}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe No File
FirewallRules: [{DAFCFF43-8E4D-4E2F-831C-42D12062CDEE}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe No File
FirewallRules: [{10B0B138-1AE6-46C3-8C20-5463A69181CF}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe No File
C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => not found
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\J => not found
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2eae8008-8224-11e6-b66e-902b3419f66d} => not found
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2eae800d-8224-11e6-b66e-902b3419f66d} => not found
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a4c12eb5-155f-11e8-856b-902b3419f66d} => not found
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a5417187-ef7f-11e1-8aa9-902b3419f66d} => removed successfully
HKU\S-1-5-21-1027388779-4279868082-974358725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e7d6446c-7527-11e3-a02e-902b3419f66d} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AA52E5E-344E-46C1-AA4E-C1BF31B3AFDB}" => not found
"C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F0CF216D-2011-4308-8360-319C4CD6CFB2}" => not found
"C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core" => not found
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => value restored successfully
"HKU\S-1-5-21-1027388779-4279868082-974358725-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => not found
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} => not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17}" => not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => not found
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17}" => not found
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => not found
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => not found
"C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000UA" => not found
"C:\Windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1027388779-4279868082-974358725-1000Core" => not found
"C:\Users\�ogun\AppData\Roaming\ISOWorkshop.ini" => not found
"C:\Users\�ogun\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini" => not found
"C:\Users\�ogun\AppData\Local\fusioncache.dat" => not found
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 1 (GFS Unread Stub) => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2 (GFS Stub) => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 3 (GFS Folder) => not found
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 4 (GFS Unread Mark) => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\XXX Groove GFS Context Menu Handler XXX => not found
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\XXX Groove GFS Context Menu Handler XXX => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\XXX Groove GFS Context Menu Handler XXX => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\XXX Groove GFS Context Menu Handler XXX => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\XXX Groove GFS Context Menu Handler XXX => not found
"C:\ProgramData\TEMP" => ":05B51235" ADS not found.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{331CB3C8-31FE-4CCA-A2D4-56D151F9F64A}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5F630C96-CF92-4043-B146-AADDBCA70948}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DAFCFF43-8E4D-4E2F-831C-42D12062CDEE}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10B0B138-1AE6-46C3-8C20-5463A69181CF}" => not found
"C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe" => not found

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4252584 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 0 B
Edge => 0 B
Chrome => 11872409 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 128 B
NetworkService => 128 B
Šogun => 16761 B
UpdatusUser => 16761 B
Guest => 16761 B

RecycleBin => 0 B
EmptyTemp: => 23.4 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 17:23:18 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomaly start PC win 7

#10 Příspěvek od Rudy »

OK. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Re: Pomaly start PC win 7

#11 Příspěvek od Beraji1 »

Zdá se mi rychlejší, ale není to ideální. Po náběhu stále něco načítá, poté probliknou ikony na ploše s tím, že se znovu jakoby aktualizuje jejich vzhled. Chrome taky na začátku nenajede hned po kliknutí, trvá to několik sekund než se spustí a pak je další prodleva, než začne reagovat na příkazy. Furt tam něco je :(

Potom ale PC funguje bezvadně, po probuzení (režim spánku, či hibernace) je to taky v pořádku.

Děkuji za pomoc.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomaly start PC win 7

#12 Příspěvek od Rudy »

OK. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Re: Pomaly start PC win 7

#13 Příspěvek od Beraji1 »

Tady je log, jinak ještě dodám, že jsem v minulosti zkoušel spustit čističe avast a ccleaner v nouzovém režimu ale oba po kliknutí na spouštěcí ikonu nereagovaly.

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 23.03.20
Čas skenování: 20:51
Logovací soubor: b6224cf6-6d3f-11ea-87ed-902b3419f66d.json

-Informace o softwaru-
Verze: 4.1.0.56
Verze komponentů: 1.0.854
Aktualizovat verzi balíku komponent: 1.0.21244
Licence: Zkušební

-Systémová informace-
OS: Windows 7 Service Pack 1
CPU: x64
Systém souborů: NTFS
Uživatel: \u00c5\u00a0ogun-PC\\u00c5\u00a0ogun

-Shrnutí skenování-
Typ skenování: Skenování hrozeb (Threat Scan)
Spuštění skenování: Ruční
Výsledek: Dokončeno
Skenované objekty: 312617
Zjištěné hrozby: 15
Hrozby umístěné do karantény: 0
Uplynulý čas: 4 min, 52 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Zakázáno
Heuristika: Povoleno
Potenciálně nežádoucí program: Detekovat
Potenciálně nežádoucí modifikace: Detekovat

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 7
PUP.Optional.DriverPack, HKU\S-1-5-21-1027388779-4279868082-974358725-501\SOFTWARE\DRPSU, Žádná uživatelská akce, 616, 472301, 1.0.21244, , ame,
PUP.Optional.DriverPack, HKU\S-1-5-21-1027388779-4279868082-974358725-1003\SOFTWARE\DRPSU, Žádná uživatelská akce, 616, 472301, 1.0.21244, , ame,
PUP.Optional.SweetIM, HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook.1, Žádná uživatelská akce, 443, 243756, , , ,
PUP.Optional.SweetIM, HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook, Žádná uživatelská akce, 443, 243756, 1.0.21244, , ame,
PUP.Optional.SweetIM, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\jcdgjdiieiljkfkdcloehkohchhpekkn, Žádná uživatelská akce, 443, 243759, 1.0.21244, , ame,
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WarThunder0, Žádná uživatelská akce, 245, 186209, 1.0.21244, , ame,
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WarThunder05, Žádná uživatelská akce, 245, 186209, 1.0.21244, , ame,

Hodnota v registru: 2
PUP.Optional.DriverPack, HKU\S-1-5-21-1027388779-4279868082-974358725-501\SOFTWARE\DRPSU|CLIENTID, Žádná uživatelská akce, 616, 472301, 1.0.21244, , ame,
PUP.Optional.DriverPack, HKU\S-1-5-21-1027388779-4279868082-974358725-1003\SOFTWARE\DRPSU|CLIENTID, Žádná uživatelská akce, 616, 472301, 1.0.21244, , ame,

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 6
Adware.InstallCore, C:\USERS\ŠOGUN\DOWNLOADS\FFSETUPLATEST (2).EXE, Žádná uživatelská akce, 495, 683667, 1.0.21244, , ame,
PUP.Optional.DriverPack, C:\USERS\ŠOGUN\DESKTOP\REALTEK-MATCHVER-FORCED-5X86-PCIE_5.832.0211.2015-DRP.EXE, Žádná uživatelská akce, 616, 354275, 1.0.21244, , ame,
Adware.InstallCore, C:\USERS\ŠOGUN\DOWNLOADS\FFSETUPLATEST.EXE, Žádná uživatelská akce, 495, 683667, 1.0.21244, , ame,
Adware.InstallCore, C:\USERS\ŠOGUN\DOWNLOADS\FFSETUPLATEST (1).EXE, Žádná uživatelská akce, 495, 683667, 1.0.21244, , ame,
Generic.Malware/Suspicious, C:\USERS\ŠOGUN\DOWNLOADS\UTORRENT.EXE, Žádná uživatelská akce, 0, 392686, 1.0.21244, , shuriken,
PUP.Optional.SweetIM, C:\WINDOWS\INSTALLER\BCB0D42.MSI, Žádná uživatelská akce, 443, 297640, 1.0.21244, , ame,

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119418
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Pomaly start PC win 7

#14 Příspěvek od Rudy »

Nalezené položky smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Beraji1
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 22 bře 2020 17:47

Re: Pomaly start PC win 7

#15 Příspěvek od Beraji1 »

Smazat nevím jak, tak jsem dal vše do karantény. Po restartu se bohužel nic nezměnilo :(
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“