VIRY.CZ

Prosím o kontrolu. Děkuji.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-06-2020
Ran by Milan (administrator) on HP (Hewlett-Packard 810-000ec) (27-06-2020 23:52:00)
Running from C:\Users\Milan\Downloads
Loaded Profiles: Milan
Platform: Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\ActionCenter.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabMakePortable.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabReports.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcon.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcr.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\btwdins.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <21>
(Google LLC -> Google) C:\Users\Milan\AppData\Local\Google\Chrome\User Data\SwReporter\83.238.200\software_reporter_tool.exe <4>
(GuinpinSoft inc) [File not signed] [File is in use] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) [File not signed] [File is in use] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Josh Mayfield -> UltimateOutsider) C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe
(Konstantin Polyakov IP -> ) C:\Program Files (x86)\Autorun Organizer\Reg64Call.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Mixbyte Inc -> Ellora Assets Corp.) E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Mixbyte Inc -> Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Nenad Hrg SoftwareOK) [File not signed] [File is in use] C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(OOO AMA -> Kerish Products) C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synology Inc. -> ) [File not signed] [File is in use] C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Synology Inc. -> ) C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
(Synology Inc. -> Synology Inc.) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Vivaldi Technologies AS -> Vivaldi Technologies AS) E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GwxControlPanelMonitor] => C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe [4559944 2016-01-24] (Josh Mayfield -> UltimateOutsider)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [549032 2020-06-23] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2019-01-30] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2020-04-27] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [DesktopOK] => C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe [233472 2016-10-13] (Nenad Hrg SoftwareOK) [File not signed] [File is in use]
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Data Replicator 3] => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Vivaldi Update Notifier] => E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe [1859656 2020-06-24] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG7100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBR.DLL [30208 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG7100 series: C:\WINDOWS\system32\CNMLMBR.DLL [391168 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\ASUS\Bluetooth Software\\BtwCP.dll [2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-08-12]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ASUS\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
BootExecute: autocheck autochk * sdnclean64.exe

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00A5A0B1-7556-4B18-B57E-038D8295F470} - System32\Tasks\Paragon Job (Back up partitions or disks to virtual containers) - {46beb899-e93a-43e0-491f-d9ff47346787} => C:\Program Files\Paragon Software\Hard Disk Manager 25 Anniversary LE\program\hdmengine_scriptsapp.exe [3537304 2019-11-22] (Paragon Software GmbH -> Paragon Software)
Task: {010157E6-86DD-4E1E-918F-B76D3128A5EF} - System32\Tasks\Kerish Doctor => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe [4904568 2020-06-18] (OOO AMA -> Kerish Products)
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {085B11DD-C1FF-4C59-988E-A3C0242FD180} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {0DA1BF58-DF15-468B-A92B-6AFF87379E22} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {12B9E8E0-063D-4A4D-80A6-2EE1AA903C9D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {17FD829C-813D-4D47-9688-332A6A5708B2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-téka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {2F5317B0-40DA-4281-9DB9-5D225BC8DC55} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1448832 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {40159E94-CCBF-466B-9FC0-8E3DEF3B9641} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4E7A0467-C9EE-40F1-A464-2B9134922C68} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {50701EEC-28E8-4637-93A1-ACEA149D8127} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {5E3E78EF-2FAF-458B-A22C-0AAEBCCEE74B} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag on Milan logon => C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe [3452280 2020-06-23] (Auslogics Labs Pty Ltd -> Auslogics)
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {67991882-52F0-4C8B-965E-31052A068347} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {6B519139-51D6-44D1-B396-483F551B4663} - System32\Tasks\Speedfan => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> )
Task: {6C24ED94-C837-4CE9-8ECF-7C48CF522415} - System32\Tasks\Synology Data Replicator 3-HP-Milan => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {77A64781-67AB-4B9F-97C1-829AAB06DD81} - System32\Tasks\Opera scheduled Autoupdate 1593188087 => C:\Program Files (x86)\launcher.exe [1509400 2020-06-22] (Opera Software AS -> Opera Software) <==== ATTENTION
Task: {7B7B2178-7A07-45BC-B2C1-819DAA6C17E4} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {930B96B9-27A0-4403-9751-03D727568671} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {9B80A8C1-CE2A-4B69-8BB0-7E8AFFDAC3FE} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2020-03-27] (Bitdefender SRL -> Bitdefender)
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A66240ED-7854-408B-BE4C-421A219F6205} - System32\Tasks\Autorun Organizer => C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe [10810816 2018-10-26] (Konstantin Polyakov IP -> Chemtable Software)
Task: {BE479DF2-7A43-4673-9831-1A968F6C2D71} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1A80A88-FAD6-4409-AE0E-BEA26ED8DDF2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C3EC7682-92EC-444E-80D8-C598376C1D42} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [3203480 2016-02-26] (Symantec Corporation -> Symantec Corporation)
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {D92C0A54-9000-44C5-8046-6C401EC688BB} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {E31E94EA-8ADB-42A9-BF83-812F81DCD152} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_pepper.exe [1454648 2020-06-09] (Adobe Inc. -> Adobe)
Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
Task: {FA8A9E9A-8A1B-4CA4-99AB-E7953BC61EBD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 109.72.0.1 109.72.2.30
Tcpip\..\Interfaces\{E2641B9C-4257-42E8-B3E4-FA4A8C923E89}: [DhcpNameServer] 109.72.0.1 109.72.2.30

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: kje70kdo.default
FF DefaultProfile: daneqr12.default-1581870394713
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default [2020-06-27]
FF user.js: detected! => C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js [2015-03-10]
FF DownloadDir: C:\Users\Milan\Desktop
FF Homepage: Mozilla\Firefox\Profiles\kje70kdo.default -> about:blank
FF Session Restore: Mozilla\Firefox\Profiles\kje70kdo.default -> is enabled.
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2020-06-13]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2020-06-13]
FF Extension: (Restart) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\Restart@schuzak.jp.xpi [2017-03-13] [Legacy]
FF Extension: (Session Sync) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\session-sync@gabrielivanica.com.xpi [2020-03-25]
FF Extension: (Youtube Watchmarker) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\yourect@coderect.com.xpi [2020-04-27]
FF Extension: (Linkification) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}.xpi [2015-07-26] [Legacy] [not signed]
FF Extension: (Video DownloadHelper) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-30]
FF Extension: (No Name) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-04-01]
FF Extension: (YouTube Flash Video Player) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi [2018-02-11]
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 [2020-06-27]
FF Homepage: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> about:home
FF Session Restore: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> is enabled.
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-05-04] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-05-17] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2019-02-26] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> E:\Program Files (x86)\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.) [File not signed] [File is in use]
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) [File not signed] [File is in use]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google Inc -> Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2016-02-29] (Nero AG -> Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2013-03-04] (HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. -> )
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-10-20] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2019-11-03] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-10-20] <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2019-11-03] <==== ATTENTION

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default [2020-06-27]
CHR Notifications: Default -> hxxps://keep.google.com; hxxps://www.facebook.com
CHR StartupUrls: Default -> "hxxp://www.auto.cz/"
CHR Extension: (ProxFlow) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2020-06-11]
CHR Extension: (YouTube WATCHED. Classic View) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aendhplcpcfjlebhcjfiapmoaiekpkba [2020-01-12]
CHR Extension: (Dokumenty) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-21]
CHR Extension: (Disk Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-08]
CHR Extension: (uBlock Origin) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-05-30]
CHR Extension: (Vyhledávání Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2020-05-17]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2018-07-27]
CHR Extension: (Session Buddy) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2020-05-10]
CHR Extension: (Adobe Acrobat) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-06-23]
CHR Extension: (Tabs Outliner) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl [2020-04-30]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2020-05-10]
CHR Extension: (Bitdefender Wallet) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2019-12-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-30]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-06-14]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-05-30]
CHR Extension: (Flash® Player for YouTube™) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lajdkhdcndkniopfefocbgbkofflagpm [2017-07-23]
CHR Extension: (Linkclump) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2020-06-23]
CHR Extension: (Clickable Links) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2016-05-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-18]
CHR Extension: (Gmail) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-24]
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\System Profile [2017-04-09]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]

Opera:
=======
OPR StartupUrls: "hxxps://www.idnes.cz/","hxxps://www.seznam.cz/" ... vodajstvi/"

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-10-07] (Bitdefender SRL -> Bitdefender)
R2 btwdins; C:\Program Files\ASUS\Bluetooth Software\btwdins.exe [960368 2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe [8704 2019-09-29] (GuinpinSoft inc) [File not signed] [File is in use]
R2 Chemtable Startup Checking; C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe [9924368 2018-09-03] (Konstantin Polyakov IP -> Chemtable Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11096432 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [120392 2020-03-27] (Bitdefender SRL -> Bitdefender)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2020-02-25] (Mixbyte Inc -> Freemake)
R2 FreemakeVideoCapture; E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [17792 2019-05-17] (Mixbyte Inc -> Ellora Assets Corp.)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] [File is in use]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129336 2013-01-31] (Intel Corporation -> Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21256 2018-04-20] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2019-12-04] (Malwarebytes Inc -> Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [463856 2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1352120 2020-03-27] (Bitdefender SRL -> Bitdefender)
U3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-27] (Elaborate Bytes) [File not signed] [File is in use]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
R2 SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [384072 2013-10-09] (Synology Inc. -> )
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [170328 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2014-02-25] (Synology Inc. -> ) [File not signed] [File is in use]
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; "E:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE" /auditservice [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Co., Ltd. -> AnvSoft Inc.)
R0 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2106424 2020-06-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [757240 2020-06-23] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-02-14] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96616 2020-05-26] (Bitdefender SRL -> BitDefender)
R2 ei2c; C:\windows\system32\drivers\ei2c.sys [20784 2014-05-01] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-29] (Elaborate Bytes AG) [File not signed] [File is in use]
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-02-02] (Malwarebytes Corporation -> Malwarebytes)
R0 EUDSKCP; C:\WINDOWS\System32\drivers\EuDskCp.sys [74184 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R1 EUEUMDK; C:\WINDOWS\system32\drivers\EuEumDk.sys [23496 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [453344 2020-06-23] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2019-06-03] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\System32\DRIVERS\ignis.sys [196392 2019-09-16] (Bitdefender SRL -> Bitdefender)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-04-07] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [44448 2014-10-12] (EATON POWER QUALITY SAS -> hxxp://libusb-win32.sourceforge.net)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-03-15] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [226448 2020-06-27] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73584 2020-06-27] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-27] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [119960 2020-06-23] (Malwarebytes Inc -> Malwarebytes)
S3 MDA_NTDRV; C:\WINDOWS\system32\MDA_NTDRV.sys [21208 2013-02-25] (北京铠信神州科技有限责任公司 -> )
R2 mi2c; C:\windows\system32\drivers\mi2c.sys [20784 2016-07-27] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [551936 2014-01-05] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [638368 2020-05-04] (Bitdefender SRL -> Bitdefender)
R1 UimBus; C:\WINDOWS\System32\drivers\uimbus.sys [109504 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
R1 Uim_DEVIM; C:\WINDOWS\System32\drivers\uimdevim.sys [46016 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation -> Intel Corporation)
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-27 23:52 - 2020-06-27 23:52 - 000046201 _____ C:\Users\Milan\Downloads\FRST.txt
2020-06-27 23:51 - 2020-06-27 23:52 - 000000000 ____D C:\FRST
2020-06-27 23:51 - 2020-06-27 23:51 - 002291200 _____ (Farbar) C:\Users\Milan\Downloads\FRST64.exe
2020-06-27 23:49 - 2020-06-27 23:49 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-06-27 23:49 - 2020-06-27 23:49 - 000073584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-06-27 23:39 - 2020-06-27 23:49 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\IGDump
2020-06-27 23:39 - 2020-06-27 23:39 - 000226448 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2020-06-27 23:38 - 2020-06-27 23:38 - 000680512 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-27 19:05 - 2020-06-27 19:05 - 064618056 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.1.1929.45.x64.exe
2020-06-27 09:43 - 2020-06-27 09:43 - 000000000 ___HD C:\Users\Milan\.opera
2020-06-26 22:23 - 2020-06-26 22:23 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2020-06-26 22:22 - 2020-06-26 22:22 - 013547840 _____ (GuinpinSoft inc) C:\Users\Milan\Downloads\Setup_MakeMKV_v1.15.1.exe
2020-06-26 20:51 - 2020-06-26 20:51 - 000000000 ___HD C:\Users\Milan\Downloads\.opera
2020-06-26 20:13 - 2020-06-26 20:13 - 000000000 ___HD C:\Program Files (x86)\.opera
2020-06-26 18:14 - 2020-06-26 18:14 - 002294440 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup (1).exe
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ C:\Program Files (x86)\installation_status.json
2020-06-26 18:14 - 2020-06-26 18:14 - 000003980 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1593188087
2020-06-26 18:14 - 2020-06-26 18:14 - 000001083 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\Assets
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\69.0.3686.36
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ C:\Program Files (x86)\Resources.pri
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\opera autoupdate
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Program Files (x86)\opera autoupdate
2020-06-24 22:36 - 2020-06-24 22:39 - 000214102 _____ C:\Users\Milan\Downloads\Optimalizace trati, SŽ.pdf
2020-06-24 21:12 - 2020-06-24 21:12 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-06-24 18:22 - 2020-06-24 18:22 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2020-06-24 18:21 - 2020-06-24 18:21 - 041626504 _____ (DiskInternals Research) C:\Users\Milan\Downloads\Partition_Recovery.exe
2020-06-24 11:02 - 2020-06-24 11:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-06-24 11:01 - 2020-06-24 11:02 - 041824168 _____ C:\Users\Milan\Downloads\vlc-3.0.11-win64.exe
2020-06-24 10:34 - 2020-06-24 10:35 - 207277528 _____ (Logitech Inc.) C:\Users\Milan\Downloads\Options_8.20.329.exe
2020-06-24 10:33 - 2020-06-24 10:32 - 000114344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-06-24 10:31 - 2020-06-24 10:31 - 002066568 _____ (Oracle Corporation) C:\Users\Milan\Downloads\chromeinstall-8u251.exe
2020-06-23 22:45 - 2020-06-23 22:45 - 000001716 _____ C:\Users\Milan\Desktop\Games – zástupce.lnk
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\Program Files (x86)\Auslogics
2020-06-23 22:21 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\Downloads\opera autoupdate
2020-06-23 22:16 - 2020-06-23 22:16 - 000119960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-06-23 20:41 - 2020-06-23 20:41 - 009936128 _____ (Resplendence Software Projects Sp. ) C:\Users\Milan\Downloads\whocrashedSetup.exe
2020-06-23 20:41 - 2020-06-23 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2020-06-23 20:39 - 2020-06-23 20:39 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TVDownloader
2020-06-23 20:32 - 2020-06-23 20:32 - 008612792 _____ (ALTAP) C:\Users\Milan\Downloads\as40x64.exe
2020-06-23 20:28 - 2020-06-27 23:45 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-26 18:14 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json.backup
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ C:\Program Files (x86)\server_tracking_data
2020-06-23 20:28 - 2020-06-26 18:13 - 000000000 ____D C:\Program Files (x86)\assistant
2020-06-23 20:27 - 2020-06-26 18:13 - 000000000 ____D C:\Program Files (x86)\68.0.3618.173
2020-06-23 20:27 - 2020-06-23 20:27 - 002464864 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup.exe
2020-06-23 19:57 - 2020-06-27 20:00 - 000000304 _____ C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job
2020-06-23 19:57 - 2020-06-23 19:57 - 000002856 _____ C:\WINDOWS\system32\Tasks\Synology Data Replicator 3-HP-Milan
2020-06-23 18:16 - 2020-06-23 18:16 - 000000000 ___HD C:\Users\Milan\Desktop\DEATH DEALER (CAN)
2020-06-23 17:46 - 2020-06-23 17:46 - 000000787 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:45 - 2020-06-23 17:45 - 003419088 _____ C:\Users\Milan\Downloads\winrar-x64-590cz.exe
2020-06-23 17:42 - 2020-06-23 17:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoReDo
2020-06-23 17:41 - 2020-06-23 17:41 - 043786040 _____ (DRD Systems, Inc. ) C:\Users\Milan\Downloads\VRDTVSH264-5-4-84-771a.exe
2020-06-23 17:28 - 2020-06-23 17:28 - 000000000 ____D C:\Program Files\Basilisk
2020-06-23 17:25 - 2020-06-23 17:25 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer (1).exe
2020-06-23 17:20 - 2020-06-23 17:20 - 000003244 _____ C:\WINDOWS\system32\Tasks\Kerish Doctor
2020-06-23 17:19 - 2020-06-23 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerish Doctor
2020-06-23 17:19 - 2019-10-21 08:50 - 000061560 _____ (Kerish Products) C:\WINDOWS\SysWOW64\GPUTemp.dll
2020-06-23 17:17 - 2020-06-23 17:17 - 044625960 _____ (Kerish Products ) C:\Users\Milan\Downloads\Kerish_Doctor_4.80.exe
2020-06-23 17:08 - 2020-06-23 17:08 - 000000833 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2020-06-23 17:07 - 2020-06-23 17:07 - 004432054 _____ (foobar2000.org) C:\Users\Milan\Downloads\foobar2000_v1.5.4.exe
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\Users\Public\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\ProgramData\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 6.4
2020-06-23 16:39 - 2020-06-23 17:15 - 000001545 _____ C:\Users\Milan\Desktop\NOVINKY.lnk
2020-06-23 16:38 - 2020-06-23 16:44 - 313282560 _____ C:\Users\Milan\Downloads\LibreOffice_6.4.4_Win_x64.msi
2020-06-23 15:39 - 2020-06-23 15:40 - 092168968 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Milan\Downloads\ashampoo_backup_2020_12.06_sm.exe
2020-06-23 15:28 - 2020-06-23 17:15 - 000000729 _____ C:\Users\Milan\Desktop\DVD.lnk
2020-06-23 15:22 - 2020-06-23 15:22 - 027169792 _____ (GOM & Company) C:\Users\Milan\Downloads\GOMPLAYERGLOBALSETUP_CHROME.EXE
2020-06-23 15:22 - 2020-06-23 15:22 - 000000284 _____ C:\nsispromotion_log.txt
2020-06-23 15:18 - 2020-06-23 15:18 - 003571616 _____ C:\Users\Milan\Downloads\mp3tagv301setup.exe
2020-06-23 15:15 - 2020-06-23 15:15 - 000001561 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\burningstudio21.exe.lnk
2020-06-23 14:10 - 2020-06-23 14:10 - 002106424 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000757240 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000453344 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-06-23 12:50 - 2020-06-23 12:50 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer.exe
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\tmp
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Recuva
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Macrorit
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\SuperBird
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Secunia
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Seagate
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Omron Healthcare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Novel Games
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\FlashGet Network
2020-06-21 20:34 - 2020-06-21 20:34 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (2).pdf
2020-06-21 20:33 - 2020-06-21 20:33 - 000237213 _____ C:\Users\Milan\Downloads\D.1.2.1.5 Detaily.pdf.pdf
2020-06-18 18:19 - 2020-06-18 18:19 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (1).pdf
2020-06-18 18:18 - 2020-06-18 18:18 - 001701635 _____ C:\Users\Milan\Downloads\1394_001.pdf
2020-06-16 23:11 - 2020-06-01 20:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-16 23:11 - 2020-06-01 20:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-16 23:07 - 2020-06-02 07:18 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-16 23:07 - 2020-06-02 06:50 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-16 23:07 - 2020-06-02 06:44 - 001489408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:43 - 001464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2020-06-16 23:07 - 2020-06-02 06:35 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-16 23:07 - 2020-06-02 06:27 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:25 - 001204736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2020-06-16 23:07 - 2020-06-02 05:59 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-16 23:07 - 2020-06-02 05:47 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-16 23:07 - 2020-05-30 04:54 - 004168192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-16 23:07 - 2020-05-30 04:30 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-16 23:07 - 2020-05-30 03:41 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-16 23:07 - 2020-05-30 03:23 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-16 23:07 - 2020-05-28 01:06 - 022364856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-16 23:07 - 2020-05-28 01:06 - 019796328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-16 23:07 - 2020-05-20 17:25 - 001384648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 007362312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-16 23:07 - 2020-05-20 17:21 - 002170784 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001662512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001062344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 001135696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 000806200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 14:48 - 025755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-06-16 23:07 - 2020-05-20 14:27 - 002911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-06-16 23:07 - 2020-05-20 14:25 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 005499392 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 000785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-16 23:07 - 2020-05-20 13:56 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-16 23:07 - 2020-05-20 13:52 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 13:50 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 13:46 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 13:44 - 001124800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001560272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001214720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 000548440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000614056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 015478784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 13:35 - 002132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 13:34 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-16 23:07 - 2020-05-20 13:26 - 001756672 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 13:23 - 004859392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-06-16 23:07 - 2020-05-20 13:12 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-06-16 23:07 - 2020-05-20 13:01 - 000801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-16 23:07 - 2020-05-20 13:00 - 020291584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-16 23:07 - 2020-05-20 12:53 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 12:44 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-16 23:07 - 2020-05-20 12:40 - 002304000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-06-16 23:07 - 2020-05-20 12:34 - 000653824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-16 23:07 - 2020-05-20 12:21 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-16 23:07 - 2020-05-20 12:18 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 12:16 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 12:14 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 12:11 - 004111872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-06-16 23:07 - 2020-05-20 12:08 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 12:06 - 013861888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-16 23:07 - 2020-05-20 12:06 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-16 23:07 - 2020-05-20 12:01 - 001494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 11:50 - 004387328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-06-16 23:07 - 2020-05-20 11:47 - 001341952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-06-16 23:07 - 2020-05-20 11:46 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-16 23:07 - 2020-05-13 19:49 - 001368592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-06-16 23:07 - 2020-05-13 03:23 - 000414624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-16 23:07 - 2020-05-13 03:23 - 000373888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-16 23:07 - 2020-05-13 01:37 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-12 11:47 - 000466840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-16 23:07 - 2020-05-12 11:46 - 000415240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-16 23:07 - 2020-05-12 08:42 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-10 11:24 - 001311768 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-16 23:07 - 2020-05-10 06:36 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-06-16 23:07 - 2020-05-10 06:23 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 06:20 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-16 23:07 - 2020-05-10 06:15 - 003331584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-16 23:07 - 2020-05-10 06:03 - 001040384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-16 23:07 - 2020-05-10 05:56 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 05:53 - 003640320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-16 23:07 - 2020-05-10 05:53 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-16 23:07 - 2020-05-10 05:47 - 000936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-16 23:07 - 2020-05-10 05:25 - 001085952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2020-06-16 23:07 - 2020-05-10 05:23 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-06-16 23:07 - 2020-05-10 05:17 - 014533120 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-16 23:07 - 2020-05-10 05:09 - 012880384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-16 23:07 - 2020-05-01 16:17 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-16 23:07 - 2020-05-01 16:15 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001737520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001500888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-06-13 17:20 - 2020-06-13 17:20 - 000000000 ____D C:\Users\Milan\Documents\Ashampoo Burning Studio 21
2020-06-12 21:18 - 2020-06-12 21:18 - 000002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-11 10:37 - 2020-06-11 10:37 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-02 23:20 - 2020-06-02 23:20 - 000011608 _____ C:\Users\Milan\Downloads\e1af1ca0dfadad6a8e69540c5d445aa9e4970ec9.dlc
2020-05-30 13:01 - 2020-06-27 21:06 - 000001161 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2020-05-30 13:01 - 2020-06-16 21:30 - 000000374 _____ C:\Users\Milan\.vivaldi_reporting_data
2020-05-30 13:01 - 2020-05-30 13:01 - 000000000 ____D C:\Users\Milan\AppData\Local\Vivaldi
2020-05-30 12:59 - 2020-05-30 13:00 - 063187528 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.0.1874.38.x64.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-27 23:51 - 2017-10-26 20:17 - 000003648 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-06-27 23:49 - 2014-04-20 01:12 - 000000000 ____D C:\ProgramData\NVIDIA
2020-06-27 23:49 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-27 23:43 - 2014-04-28 21:19 - 000003598 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2134351818-1356353880-2322332928-1001
2020-06-27 23:42 - 2016-11-21 23:06 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\Mozilla
2020-06-27 23:42 - 2014-03-18 17:33 - 000024112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-27 23:42 - 2014-03-18 16:54 - 000018184 _____ C:\WINDOWS\system32\perfh005.dat
2020-06-27 23:42 - 2014-03-18 16:54 - 000007220 _____ C:\WINDOWS\system32\perfc005.dat
2020-06-27 23:42 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2020-06-27 23:39 - 2014-04-29 01:24 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2020-06-27 23:38 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM
2020-06-27 23:36 - 2014-04-29 21:48 - 000000000 ____D C:\Users\Milan\AppData\Local\JDownloader v2.0
2020-06-27 21:35 - 2016-10-14 18:11 - 000000000 ____D C:\Users\Milan\AppData\Roaming\DesktopOK
2020-06-27 20:07 - 2020-05-08 20:50 - 000472462 ____H C:\Users\Milan\drlog.txt
2020-06-27 09:43 - 2014-04-29 20:29 - 000000000 ____D C:\Users\Milan
2020-06-26 22:24 - 2014-04-30 21:23 - 000000000 ____D C:\Users\Milan\Desktop\NÁSTROJE
2020-06-26 20:15 - 2014-05-05 21:22 - 000000000 ____D C:\Hobby-téka
2020-06-26 18:57 - 2015-09-03 20:46 - 000000000 ____D C:\Users\Milan\AppData\Local\CrashDumps
2020-06-26 18:34 - 2014-04-29 21:30 - 000000000 ____D C:\Users\Milan\Documents\Soubory aplikace Outlook
2020-06-26 18:13 - 2014-05-18 20:15 - 000000000 ____D C:\Program Files (x86)\Opera
2020-06-26 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-06-26 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-06-24 20:54 - 2014-04-30 22:13 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-24 20:25 - 2014-05-04 19:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\XnViewMP
2020-06-24 10:36 - 2018-08-17 18:47 - 000000000 ____D C:\Users\Milan\AppData\Local\Deployment
2020-06-24 10:36 - 2018-07-27 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-06-24 10:35 - 2018-07-27 22:17 - 000000000 ____D C:\Program Files\Logitech
2020-06-24 10:33 - 2018-01-18 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-06-24 10:33 - 2015-07-18 12:03 - 000000000 ____D C:\Program Files (x86)\Java
2020-06-24 10:28 - 2017-04-08 14:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\MusicBee
2020-06-23 20:33 - 2020-04-27 19:40 - 000000801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Altap Salamander (x64).lnk
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Mp3tag
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2020-06-23 17:43 - 2014-04-20 01:17 - 000000000 ____D C:\ProgramData\Temp
2020-06-23 17:42 - 2015-05-06 22:04 - 000000000 ____D C:\Users\Milan\AppData\Roaming\VideoReDo-TVSuite5
2020-06-23 17:28 - 2019-06-18 20:03 - 000000873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Basilisk.lnk
2020-06-23 17:19 - 2020-04-07 02:00 - 000000000 ____D C:\Program Files (x86)\Kerish Doctor
2020-06-23 17:08 - 2014-12-24 20:37 - 000000000 ____D C:\Users\Milan\AppData\Roaming\foobar2000
2020-06-23 15:53 - 2020-02-01 21:28 - 000000000 ____D C:\Users\Milan\AppData\Local\Ashampoo Backup
2020-06-23 15:41 - 2014-04-29 22:03 - 000000000 ____D C:\ProgramData\Ashampoo
2020-06-23 15:24 - 2017-04-06 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM
2020-06-23 15:24 - 2014-04-30 21:30 - 000000881 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2020-06-23 13:11 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-06-23 09:49 - 2017-10-07 17:29 - 000000000 ____D C:\UsbFix
2020-06-23 09:49 - 2014-05-11 16:34 - 000000000 ____D C:\Program Files (x86)\Canon
2020-06-23 09:49 - 2014-05-11 13:26 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2020-06-23 09:49 - 2014-04-30 22:12 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-23 09:49 - 2014-04-30 21:33 - 000000000 ____D C:\The KMPlayer
2020-06-23 09:49 - 2014-04-29 21:24 - 000000000 ____D C:\inetpub
2020-06-23 09:49 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\System
2020-06-22 20:30 - 2020-02-02 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AweClone 2.6
2020-06-22 20:30 - 2019-12-24 14:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hasleo WinToHDD
2020-06-22 20:30 - 2018-09-12 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Premium
2020-06-22 20:30 - 2018-09-10 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint 7
2020-06-22 20:30 - 2018-05-26 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Dude
2020-06-22 20:30 - 2017-05-22 22:15 - 000000000 ____D C:\ProgramData\Vso
2020-06-22 20:30 - 2017-05-09 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2020-06-22 20:30 - 2014-11-23 23:05 - 000000000 ____D C:\Users\Milan\Desktop\HRY
2020-06-22 20:30 - 2014-11-21 13:53 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-11-21 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-06-29 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2020-06-22 20:30 - 2014-04-30 21:33 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2020-06-20 08:46 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2020-06-20 00:26 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-16 23:10 - 2013-08-22 17:36 - 000000000 ___RD C:\WINDOWS\ToastData
2020-06-16 23:10 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2020-06-16 23:09 - 2018-05-26 15:06 - 000000000 ____D C:\Users\Milan\AppData\Roaming\GlarySoft
2020-06-16 23:02 - 2018-05-26 15:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-06-16 23:02 - 2014-04-28 21:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-06-14 10:54 - 2020-04-17 18:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\vlc
2020-06-13 15:53 - 2014-04-28 21:31 - 000000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-06-09 20:21 - 2016-04-08 11:21 - 000004480 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-06-09 20:21 - 2014-09-10 21:27 - 000004372 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-06-09 20:04 - 2018-03-13 23:21 - 000004516 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-05 19:02 - 2014-04-20 01:18 - 000000000 ____D C:\ProgramData\install_clap
2020-06-05 19:02 - 2013-09-25 21:07 - 000000000 ____D C:\SWSETUP
2020-06-03 19:46 - 2014-04-28 21:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Adobe
2020-06-02 08:10 - 2014-03-18 17:24 - 002476032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

==================== Files in the root of some directories ========

2017-10-07 17:25 - 2017-10-07 17:25 - 000195296 ____N () C:\Users\Milan\comcat5.dll
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ () C:\Program Files (x86)\installation_status.json
2020-06-23 20:28 - 2020-06-27 23:45 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-26 18:14 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json.backup
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ () C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ () C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ () C:\Program Files (x86)\Resources.pri
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ () C:\Program Files (x86)\server_tracking_data
2017-08-02 20:18 - 2017-08-02 20:20 - 000099384 ____N () C:\Users\Milan\AppData\Roaming\inst.exe
2017-08-02 20:18 - 2017-08-02 20:20 - 000007859 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.cat
2017-08-02 20:18 - 2017-08-02 20:20 - 000001167 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.inf
2017-08-02 20:18 - 2017-08-02 20:20 - 000000033 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.log
2017-08-02 20:18 - 2017-08-02 20:20 - 000082816 ____N (VSO Software) C:\Users\Milan\AppData\Roaming\pcouffin.sys
2018-10-07 20:41 - 2018-10-07 20:41 - 000000000 ____N () C:\Users\Milan\AppData\Local\oobelibMkey.log
2014-11-21 02:36 - 2014-11-21 02:36 - 000000017 ____N () C:\Users\Milan\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-06-23 16:09
==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-06-2020
Ran by Milan (27-06-2020 23:53:13)
Running from C:\Users\Milan\Downloads
Windows 8.1 (Update) (X64) (2014-04-29 18:34:23)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2134351818-1356353880-2322332928-500 - Administrator - Disabled)
Guest (S-1-5-21-2134351818-1356353880-2322332928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2134351818-1356353880-2322332928-1005 - Limited - Enabled)
Milan (S-1-5-21-2134351818-1356353880-2322332928-1001 - Administrator - Enabled) => C:\Users\Milan

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.)
Aktualizace NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.) Hidden
Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.)
Altap Salamander 4.0 (x64) (HKLM\...\Altap Salamander 4.0 (x64)) (Version: 4.0 - ALTAP)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{62CB44B2-8007-DBB2-1CBA-5CB7309EB3C3}) (Version: 10.1.17134.12 - Microsoft) Hidden
Ashampoo Burning Studio 21 (HKLM-x32\...\{91B33C97-3390-FD9A-8E0F-3F6BA7865E46}_is1) (Version: 21.5.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 15 (HKLM-x32\...\{0A11EA01-E0CE-916E-BC94-74670FA71836}_is1) (Version: 15.1.0 - Ashampoo GmbH & Co. KG)
ASUS Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.5000 - ASUS)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 9.4.0.0 - Auslogics Labs Pty Ltd)
Autorun Organizer verze 3.02 (HKLM-x32\...\Autorun Organizer_is1) (Version: 3.02 - ChemTable Software)
Basilisk 52.9.2020.06.10 (x64 en-US) (HKLM\...\Basilisk 52.9.2020.06.10 (x64 en-US)) (Version: 52.9.2020.06.10 - Moonchild Productions)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.24.36 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.20.114 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG7100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series) (Version: 1.01 - Canon Inc.)
Canon MG7100 series On-screen Manual (HKLM-x32\...\Canon MG7100 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
CD/Spectrum Pro (HKLM-x32\...\CDSpectrum Pro) (Version: CDSPro v2006.0204 - Synthesoft Corporation)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
CrystalDiskInfo 8.4.2 (64-bit) (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6522 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.3003 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4016 - CyberLink Corp.)
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.2011 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DiskInternals Partition Recovery (HKLM-x32\...\DiskInternals Partition Recovery) (Version: 8.0.1 - DiskInternals Research)
Driver Easy 5.6.14 (HKLM\...\DriverEasy_is1) (Version: 5.6.14 - Easeware)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
EO - ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #8) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #3 (HKLM-x32\...\ST6UNST #10) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #4 (HKLM-x32\...\ST6UNST #11) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #5 (HKLM-x32\...\ST6UNST #15) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) (HKLM-x32\...\ST6UNST #13) (Version: - )
EO - ActiveX (HKLM-x32\...\ST6UNST #3) (Version: - )
e-Saver version 3.1 (HKLM-x32\...\{C97CA73D-E96B-4B42-830E-D0F7BD780FB8}_is1) (Version: 3.1 - AOC)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Fonts version 1.0 (HKLM-x32\...\{95E6D335-B7B1-445B-9B58-64818030390E}_is1) (Version: 1.0 - MSTech (Modern Software Technology))
foobar2000 v1.5.4 (HKLM-x32\...\foobar2000) (Version: 1.5.4 - Peter Pawlowski)
Fotogaléria (HKLM-x32\...\{9093B0D5-EA59-4C9E-A2E3-CC130138DFCD}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Freemake Audio Converter verze 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Freemake Video Converter verze 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Mixbyte Inc.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.54.5318 - GOM & Company)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.116 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
HARDiNFO 8 PRO (HKLM\...\{708C3C8B-A637-4AF5-9749-8F2914CA6B23}) (Version: 8.0 - Ultimate Systems) Hidden
HARDiNFO 8 PRO (HKLM-x32\...\HARDiNFO 8 PRO) (Version: 8.0 - Ultimate Systems)
Hewlett-Packard ACLM.NET v1.2.2.1 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HOBBY-téka 4.00 (HKLM-x32\...\HOBBY-téka 4.00) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #16) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #18) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #19) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #12) (Version: - )
HOBBY-téka ActiveX (HKLM-x32\...\ST6UNST #7) (Version: - )
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP Quick Start (HKLM-x32\...\{574F0207-8E98-46CD-8F79-318348C98C46}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6668.4491 - Hewlett-Packard)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
HWiNFO64 Version 4.36 (HKLM\...\HWiNFO64_is1) (Version: 4.36 - Martin Malík - REALiX)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6435.0 - IDT)
i-Menu version 4.1.3 (HKLM-x32\...\{0121C0BD-363C-4B1D-8B64-FE7681A37D0A}_is1) (Version: 4.1.3 - AOC)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.40 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.40 - Dominik Reichl)
Kerish Doctor 2020 (HKLM-x32\...\{EF70A54F-E09E-4570-8F21-C7674CDDB5B6}_is1) (Version: 4.80 - Kerish Products)
Kits Configuration Installer (HKLM-x32\...\{6F502640-B753-C101-FFA5-B38C3FA5B29A}) (Version: 10.1.17134.12 - Microsoft) Hidden
LibreOffice 6.4.4.2 (HKLM\...\{F00C391B-6092-40E7-9ECD-144933865571}) (Version: 6.4.4.2 - The Document Foundation)
LockHunter 3.3, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.20.329 - Logitech)
Logitech SetPoint 6.69 (HKLM\...\sp6) (Version: 6.69.126 - Logitech)
MakeMKV v1.15.1 (HKLM-x32\...\MakeMKV) (Version: v1.15.1 - GuinpinSoft inc)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Mediaport (HKLM-x32\...\Mediaport) (Version: - )
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft .NET Framework 4.7.2 SDK (HKLM-x32\...\{229FC339-A2DE-46C7-8AB7-E64BD2FD9592}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{90FBABBB-0CFC-469F-971F-0A1F11F5AF2E}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.12430.20264 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MKVToolNix 40.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 40.0.0 - Moritz Bunkus)
Monkey's Audio (HKLM-x32\...\Monkey's Audio_is1) (Version: - )
Movie Maker (HKLM-x32\...\{8E6E8CBB-8E58-493C-943F-4664F5F2FEDB}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{9EDF46F0-2D4E-4C00-B2B6-0660666E9F60}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{A035950F-15BA-41C0-9D8F-165FC0536012}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 66.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 66.0.2 (x64 cs)) (Version: 66.0.2 - Mozilla)
Mozilla Firefox 77.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 77.0.1 (x64 en-US)) (Version: 77.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0.2 - Mozilla)
MSI Development Tools (HKLM-x32\...\{1E406B46-65F4-91CE-65DA-DB66D5443B68}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
MSTech Folder Icon Pro (HKLM-x32\...\{C8483ED0-185F-45D7-9AC4-DD751942B9ED}) (Version: 2.9.3.750 - MSTech (Modern Software Technology))
MultiCommander (x64) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MultiCommander x64) (Version: 8.3.0.2469 - Mathias Svensson)
Nero CoverDesigner (HKLM-x32\...\{12391E45-23F7-4DEA-ABAE-2CA69CA87D92}) (Version: 12.0.02300 - Nero AG)
NVIDIA Ovladač 3D Vision 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.73 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.73 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OCCT 4.4.0 (HKLM-x32\...\OCCT) (Version: 4.4.0 - Ocbase.com)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Omron Health Management Software (HKLM-x32\...\{E01DFD45-F13A-4F12-AC38-8EEE2163E52E}) (Version: 1.60.0003 - Omron Healthcare)
Opera Stable 69.0.3686.36 (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Opera 69.0.3686.36) (Version: 69.0.3686.36 - Opera Software)
Ovládací panel NVIDIA 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.73 - NVIDIA Corporation) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM\...\{14EEF044-2FC6-40AA-9285-F430B3D90EF6}) (Version: 17.10.2.5049 - Paragon Software) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM-x32\...\{f541ba6a-92bf-466b-b956-5efa58ffe017}) (Version: 17.10.2.5049 - Paragon Software GmbH)
Paragon UIM (HKLM\...\{06B4D67B-9ECB-41E5-B4C1-92F529BB703D}) (Version: 24.65.0.487 - Paragon Software) Hidden
PeaZip 6.6.0 (HKLM-x32\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.6.0 - Giorgio Tani)
PeaZip 6.8.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.8.0 - Giorgio Tani)
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30153 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.0.6208 - CyberLink Corp.) Hidden
Registrace uživatele zařízení Canon MG7100 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG7100 series) (Version: - ‭Canon Inc.)
Relax-KEŠ ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #9) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #1) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #2) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #4) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #6 (HKLM-x32\...\ST6UNST #6) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #7 (HKLM-x32\...\ST6UNST #17) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #14) (Version: - )
Relax-KEŠ ActiveX (HKLM-x32\...\ST6UNST #5) (Version: - )
SDK ARM Additions (HKLM-x32\...\{346B2C02-CC0D-6E09-8B9D-CAA2821473CF}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{825784BB-114D-ADB3-B65F-E1EB2A63C3BC}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK Debuggers (HKLM-x32\...\{8238CD59-617A-FE41-8AB4-A88AF3160849}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Soft Organizer verze 7.52 (HKLM-x32\...\Soft Organizer_is1) (Version: 7.52 - ChemTable Software)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - )
Synology Data Replicator 3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TechniPort Plus Beta (HKLM-x32\...\TechniPort Plus Beta) (Version: 0.9.5.4_beta - TechniSat)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
TotalAudioConverter (HKLM-x32\...\Total Audio Converter_is1) (Version: 5.1 - Softplicity, Inc.)
TVDownloader (HKLM-x32\...\TVDownloader) (Version: 1.18.0.0 - XPloRR)
Universal CRT Extension SDK (HKLM-x32\...\{18ABFDF6-23D9-87E6-015E-FFE3C7F153D5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{0D6B41AF-D117-8944-A059-3F9346A896C5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{B6273353-8B54-1F89-1A16-5940925104CE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{BA6F1D53-C3F2-F9D5-80CE-CEF608E36AD3}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{6E43CA0C-046E-4F38-A0A2-3B1BA139B661}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{775886B8-DEE1-CB20-8A94-FC09FA54ECF6}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Unlocker (HKLM-x32\...\{5577A25D-E4FE-4BFB-A660-E0D766BC4EDD}) (Version: 1.9.2 - ajua Custom Installers)
VDownloader 4.5.2902 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited)
VideoReDo TVSuite Version 5.4.84.771 (HKLM-x32\...\VideoReDo5_is1) (Version: - DRD Systems, Inc.)
Vivaldi (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Vivaldi) (Version: 3.1.1929.45 - Vivaldi Technologies AS.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
VSO Media Player 1.6.12.521 (HKLM-x32\...\{59F1E8E6-60EC-4CC1-8C72-E0F38E585215}_is1) (Version: 1.6.12.521 - VSO Software)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Web Components (HKLM-x32\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: - )
WhoCrashed 6.65 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
WinAppDeploy (HKLM-x32\...\{5AD4A604-B476-1578-2A20-6B02FC6258BE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Mobile Connectivity Tools 10.0.15254.0 - Desktop x86 (HKLM-x32\...\{833F02C5-2C39-49F6-BD64-91D351081274}) (Version: 10.1.15254.1 - Microsoft Corporation)
Windows SDK AddOn (HKLM-x32\...\{E77C2F78-6089-48F8-89DF-DDF2850DFFD9}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17134.12 (HKLM-x32\...\{5f83ccda-0498-4b97-a298-16a642bf49f2}) (Version: 10.1.17134.12 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{389D182F-0ADA-5C7E-FF32-2573A821592C}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{C3776B36-B34E-00E2-3009-95A6F1870B58}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{965D1746-D94A-49B9-2A48-A14914CA3B57}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{84C6B91B-67DA-DDE3-86F1-87A3E307E8C1}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{3755CD99-C62E-3312-DDD3-29A4F259270D}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{729DA966-8590-2C1F-2178-16C1D32FD7FD}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{F1C18506-3168-A9D9-E2D9-D23A512A326E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{4095D263-6A13-78D3-DEDA-AA3452011F6E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{C3243E23-2EB6-4419-2692-40944923B112}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WPT Redistributables (HKLM-x32\...\{F28E1B8B-1F92-80AF-710B-3E0191A25917}) (Version: 10.1.17134.12 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{711802CA-302C-6805-6D1F-D5CEF535F15E}) (Version: 10.1.17134.12 - Microsoft) Hidden
XnViewMP 0.64 (HKLM\...\XnViewMP_is1) (Version: 0.64 - Gougelet Pierre-e)
XYplorer 15.90 (HKLM-x32\...\XYplorer) (Version: 15.90 - Donald Lessau)

Packages:
=========
Box for Windows 8 -> C:\Program Files\WindowsApps\134D4F5B.Box_2.1.4.4_neutral__2qk4zy5s3qmee [2018-02-18] (Box, Inc.)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-03-07] (Canon Inc.)
HP Registration -> C:\Program Files\WindowsApps\AD2F1837.HPRegistration_1.2.1.166_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
Hry -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Hudba -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview_1.0.9431.0_neutral__8wekyb3d8bbwe [2018-02-18] (Rozšíření Microsoft Platform)
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.Preview.1_1.0.9345.0_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Windows Library for JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview.Internal_1.0.9385.3_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Finance -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Gurmánský svět -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Norton Studio -> C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp [2018-02-18] (Symantec Corporation)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2018-02-18] (Skype) [MS Ad]
Video -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Výběr prohlížeče -> C:\WINDOWS\BrowserChoice [2014-04-29] (Microsoft Corporation)
Začínáme se systémem Windows 8 -> C:\Program Files\WindowsApps\AD2F1837.GettingStartedwithWindows8_1.6.0.0_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> E:\Program Files (x86)\Vivaldi\Application\3.1.1929.45\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6722448 2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers1: [TotalConverter] -> {280CFDE1-1354-4431-92F3-03073BA593FB} => C:\Program Files (x86)\TotalAudioConverter\axTotalConverter64.dll [2014-03-14] (Softplicity) [File not signed] [File is in use]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers4: [FolderIconProMnu] -> {ee6b78fb-091b-3896-8982-9987a45d50bb} => E:\Program Files (x86)\MSTech Folder Icon Pro\FolderIconProMnu.DLL [2019-03-02] (MSTech (Modern Software Technology)) [File not signed] [File is in use]
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> C:\ProgramData\Ashampoo\YourDeals.exe () -> hxxp://linktarget.ashampoo.com/linktarget/?target=marketplace&edition=eid=15445&utm_medium=desktop&x-pos=Metro

==================== Loaded Modules (Whitelisted) =============

2018-04-19 22:31 - 2018-04-19 22:31 - 000267776 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL
2018-02-18 18:48 - 2017-12-19 04:51 - 000874880 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2018-02-18 18:48 - 2017-12-19 04:51 - 000339072 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2013-08-07 10:49 - 2013-08-07 10:49 - 000602112 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\devctrl.dll
2013-08-06 14:52 - 2013-08-06 14:52 - 001281536 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\vssWin764.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2020-06-27 23:49 - 000000000 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\VDownloader;C:\Program Files\ASUS\Bluetooth Software\;C:\Program Files\ASUS\Bluetooth Software\syswow64;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\HP\HP_Orkney_Stones.jpg
DNS Servers: 109.72.0.1 - 109.72.2.30
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B384870C-5BE3-4735-97F2-5C7F4D5C1F1E}] => (Allow) LPort=1900
FirewallRules: [{C5D7703D-8AEB-4EA2-9201-6B27121E8F5C}] => (Allow) LPort=2869
FirewallRules: [{1FD973EA-C3CE-4556-A571-2C6D7618F862}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{52661EC0-718E-4A10-B226-E402B8BA8552}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9B768B84-2E68-44C0-9C18-48ED8811FB1B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6BE5FF36-FC45-4B96-81B5-8D58DBC93DDF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0410599E-4774-431E-A310-5411BADF2955}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{33249233-4380-4407-AE78-79F3222250BF}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{946C85CF-AD28-4698-89A2-451103BA6275}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{CF42E03B-7A5F-4742-91E9-CDA2D995E37B}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{BDFF5D59-DA54-4CC6-866A-1ABD6F2BD361}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{7188B0BC-8686-4FDF-869F-2F7865AEC1DF}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{16A2A0B4-C95D-4780-A4C5-7A74105C165F}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{3CA6EE64-D75A-4954-931D-A1D239377DD5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{478BC89C-8B49-4371-9729-1F6432AAD5E9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{2D7D2949-C15C-42FD-B6B0-BD3903A6D94C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{C161A352-112A-4538-9333-830F26014802}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{7DDBA0CE-B419-4EF2-BDA1-C217CC705F17}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9144AD77-433A-4B1B-8D92-58C02259F298}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C8A1B26A-E1C3-47DB-8754-43BAD054FCD0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F566AE56-7E66-44D3-804D-4149275C4394}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BAB750B0-D53E-48EE-BE80-0BDB26C79A15}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3AE55082-D404-45CF-B593-B97A1ACB03B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F57D2F83-1AF5-4767-A155-DA1E3BB70BD8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9BAA4FA-B27F-463D-BD6F-D5E23B76F7BF}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{EB4C43AF-30CD-4477-BEBC-07F64B46BD98}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{C1F6B667-11F8-451B-BDF7-FF029BC1E9D1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{87C55617-9CED-4DDA-BAEF-B13875FDE3AF}] => (Allow) C:\Program Files (x86)\69.0.3686.36\opera.exe (Opera Software AS -> Opera Software)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe] => Enabled:Flashget3

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (06/27/2020 11:49:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci Microsoft.WindowsAlarms_8wekyb3d8bbwe!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/27/2020 11:38:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci Microsoft.WindowsAlarms_8wekyb3d8bbwe!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/27/2020 11:04:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/27/2020 10:04:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/27/2020 09:04:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/27/2020 08:04:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/27/2020 07:11:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/27/2020 06:35:51 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).


System errors:
=============
Error: (06/27/2020 11:49:26 PM) (Source: DCOM) (EventID: 10016) (User: HP)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
a APPID
{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}
uživateli HP\Milan (SID: S-1-5-21-2134351818-1356353880-2322332928-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (06/27/2020 11:49:25 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppX2tphb21dp9jkkycchwvscnrxk12cys3z.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/27/2020 11:49:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba ElbyCDIO Driver neuspěla při spuštění v důsledku následující chyby:
Načtení tohoto ovladače je blokováno.

Error: (06/27/2020 11:49:24 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ElbyCDIO.sys

Error: (06/27/2020 11:49:19 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (23:38:31, ‎27. ‎6. ‎2020) bylo neočekávané.

Error: (06/27/2020 11:38:37 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppX2tphb21dp9jkkycchwvscnrxk12cys3z.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/27/2020 11:38:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba ElbyCDIO Driver neuspěla při spuštění v důsledku následující chyby:
Načtení tohoto ovladače je blokováno.

Error: (06/27/2020 11:38:36 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\ElbyCDIO.sys


==================== Memory info ===========================

BIOS: AMI 80.20 03/25/2014
Motherboard: Hewlett-Packard 2AF3
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 27%
Total physical RAM: 16337.16 MB
Available physical RAM: 11838.18 MB
Total Virtual: 22993.16 MB
Available Virtual: 17741.81 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:103.83 GB) (Free:25.68 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Recovery Image) (Fixed) (Total:13.49 GB) (Free:1.6 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (DATADRIVE) (Fixed) (Total:3725.9 GB) (Free:3636.24 GB) NTFS
Drive f: (Bowling for Columbine) (CDROM) (Total:7.62 GB) (Free:0 GB) UDF
Drive h: () (Fixed) (Total:1397.26 GB) (Free:1257.67 GB) NTFS
Drive l: () (Fixed) (Total:1397.26 GB) (Free:121.46 GB) NTFS

\\?\Volume{abe04f1f-1613-40cd-8aa4-0671b7515e52}\ () (Fixed) (Total:0 GB) (Free:0 GB)
\\?\Volume{b49f7e97-af19-4680-ad83-9b7505e9a462}\ () (Fixed) (Total:0 GB) (Free:0 GB)

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 1AD3749A)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 3 (Size: 1397.3 GB) (Disk ID: 4AB79538)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==========================================================
Disk: 4 (Size: 1397.3 GB) (Disk ID: 40505CCB)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Ahoj

Ake problemy s PC sa vyskytuju?

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Spustit skenovani a pockaj na dokoncenie
• V pripade nalezov nechaj vsetky nalezy oznacene a klikni na Karantena (ak nie su ziadne nalezy, tak na Spustit zakladni opravu)
• V pripade, ze sa detekuje aj "predinstalovany software", tieto programy mozes, ale nemusis zmazat (toto nie su skodlive programy, ale iba zbytocnosti)
• Potvrd vyzvu, pockaj na dokoncenie a potvrd restartovanie PC
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah skopiruj a vloz do dalsej odpovede

Zdravím a děkuji,

problémy - občas bez zjevného důvodu přestanou fungovat browsery, např. mám otevřený Chrome a v něm se stránky načítají, ovšem Opera, nebo Basilisk nenačtou vůbec nic. Restartuji PC a už nefunguje žádný browser - ani se nespustí. Nejde ani standardní Správce úloh či Sysinternals Process Explorer. Musím znovu restartovat a pak už všechno jde.

Log z AdwCleaner:

# -------------------------------
# Malwarebytes AdwCleaner 8.0.5.0
# -------------------------------
# Build: 05-25-2020
# Database: 2020-06-15.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-28-2020
# Duration: 00:00:01
# OS: Windows 8.1
# Cleaned: 3
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Assistant

***** [ Files ] *****

Deleted C:\END

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ProductUpdater

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [3254 octets] - [28/06/2020 09:42:45]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Poprosim o obidva nove logy z FRST.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-06-2020
Ran by Milan (administrator) on HP (Hewlett-Packard 810-000ec) (29-06-2020 20:23:14)
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan
Platform: Windows 8.1 (Update) (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AppWork GmbH -> AppWork GmbH) C:\Users\Milan\AppData\Local\JDownloader v2.0\JDownloader2.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\ActionCenter.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\DiskDefrag.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabMakePortable.exe
(Auslogics Labs Pty Ltd -> Auslogics) C:\Program Files (x86)\Auslogics\Disk Defrag\TabReports.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxcr.exe <2>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\ASUS\Bluetooth Software\btwdins.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <36>
(GuinpinSoft inc) [File not signed] [File is in use] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [File not signed] [File is in use] C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) [File not signed] [File is in use] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Josh Mayfield -> UltimateOutsider) C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe
(Konstantin Polyakov IP -> ) C:\Program Files (x86)\Autorun Organizer\Reg64Call.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe
(Konstantin Polyakov IP -> Chemtable Software) C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Mixbyte Inc -> Ellora Assets Corp.) E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Mixbyte Inc -> Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(Nenad Hrg SoftwareOK) [File not signed] [File is in use] C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(OOO AMA -> Kerish Products) C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Synology Inc. -> ) [File not signed] [File is in use] C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Synology Inc. -> ) C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
(Synology Inc. -> Synology Inc.) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Vivaldi Technologies AS -> Vivaldi Technologies AS) E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GwxControlPanelMonitor] => C:\Program Files (x86)\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe [4559944 2016-01-24] (Josh Mayfield -> UltimateOutsider)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [549032 2020-06-23] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2019-01-30] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2020-04-27] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [DesktopOK] => C:\Users\Milan\Desktop\NÁSTROJE\DesktopOK_Unicode.exe [233472 2016-10-13] (Nenad Hrg SoftwareOK) [File not signed] [File is in use]
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Data Replicator 3] => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Run: [Vivaldi Update Notifier] => E:\Program Files (x86)\Vivaldi\Application\update_notifier.exe [1859656 2020-06-24] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG7100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBR.DLL [30208 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG7100 series: C:\WINDOWS\system32\CNMLMBR.DLL [391168 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\ASUS\Bluetooth Software\\BtwCP.dll [2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-08-12]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ASUS\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk [2014-04-29]
ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (SOKNO S.R.L. -> )
BootExecute: autocheck autochk * sdnclean64.exe

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00A5A0B1-7556-4B18-B57E-038D8295F470} - System32\Tasks\Paragon Job (Back up partitions or disks to virtual containers) - {46beb899-e93a-43e0-491f-d9ff47346787} => C:\Program Files\Paragon Software\Hard Disk Manager 25 Anniversary LE\program\hdmengine_scriptsapp.exe [3537304 2019-11-22] (Paragon Software GmbH -> Paragon Software)
Task: {010157E6-86DD-4E1E-918F-B76D3128A5EF} - System32\Tasks\Kerish Doctor => C:\Program Files (x86)\Kerish Doctor\KerishDoctor.exe [4904568 2020-06-18] (OOO AMA -> Kerish Products)
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {085B11DD-C1FF-4C59-988E-A3C0242FD180} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {0DA1BF58-DF15-468B-A92B-6AFF87379E22} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {12B9E8E0-063D-4A4D-80A6-2EE1AA903C9D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {17FD829C-813D-4D47-9688-332A6A5708B2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-téka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {2F5317B0-40DA-4281-9DB9-5D225BC8DC55} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1448832 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {40159E94-CCBF-466B-9FC0-8E3DEF3B9641} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {4E7A0467-C9EE-40F1-A464-2B9134922C68} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {50701EEC-28E8-4637-93A1-ACEA149D8127} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {5E3E78EF-2FAF-458B-A22C-0AAEBCCEE74B} - System32\Tasks\Auslogics\Disk Defrag\Start Disk Defrag on Milan logon => C:\Program Files (x86)\Auslogics\Disk Defrag\Integrator.exe [3452280 2020-06-23] (Auslogics Labs Pty Ltd -> Auslogics)
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {67991882-52F0-4C8B-965E-31052A068347} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {6B519139-51D6-44D1-B396-483F551B4663} - System32\Tasks\Speedfan => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> )
Task: {6C24ED94-C837-4CE9-8ECF-7C48CF522415} - System32\Tasks\Synology Data Replicator 3-HP-Milan => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe [11605576 2013-10-09] (Synology Inc. -> Synology Inc.)
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {77A64781-67AB-4B9F-97C1-829AAB06DD81} - System32\Tasks\Opera scheduled Autoupdate 1593188087 => C:\Program Files (x86)\launcher.exe [1509400 2020-06-22] (Opera Software AS -> Opera Software) <==== ATTENTION
Task: {7B7B2178-7A07-45BC-B2C1-819DAA6C17E4} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {930B96B9-27A0-4403-9751-03D727568671} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {9B80A8C1-CE2A-4B69-8BB0-7E8AFFDAC3FE} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [490808 2020-03-27] (Bitdefender SRL -> Bitdefender)
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A66240ED-7854-408B-BE4C-421A219F6205} - System32\Tasks\Autorun Organizer => C:\Program Files (x86)\Autorun Organizer\AutorunOrganizer.exe [10810816 2018-10-26] (Konstantin Polyakov IP -> Chemtable Software)
Task: {BE479DF2-7A43-4673-9831-1A968F6C2D71} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1A80A88-FAD6-4409-AE0E-BEA26ED8DDF2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C3EC7682-92EC-444E-80D8-C598376C1D42} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [3203480 2016-02-26] (Symantec Corporation -> Symantec Corporation)
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {D92C0A54-9000-44C5-8046-6C401EC688BB} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1353616 2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {E31E94EA-8ADB-42A9-BF83-812F81DCD152} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_pepper.exe [1454648 2020-06-09] (Adobe Inc. -> Adobe)
Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
Task: {FA8A9E9A-8A1B-4CA4-99AB-E7953BC61EBD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24568904 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job => C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 109.72.0.1 109.72.2.30
Tcpip\..\Interfaces\{E2641B9C-4257-42E8-B3E4-FA4A8C923E89}: [DhcpNameServer] 109.72.0.1 109.72.2.30

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKLM-x32 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> {A925FE1D-71F5-4B94-9902-19D383BC7030} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie ... earchTerms}
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (Canon Inc. -> CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2019-01-30] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (Canon Inc. -> CANON INC.)
Toolbar: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-06-23] (Bitdefender SRL -> Bitdefender)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: kje70kdo.default
FF DefaultProfile: daneqr12.default-1581870394713
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default [2020-06-29]
FF user.js: detected! => C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js [2015-03-10]
FF DownloadDir: C:\Users\Milan\Desktop
FF Homepage: Mozilla\Firefox\Profiles\kje70kdo.default -> about:blank
FF Session Restore: Mozilla\Firefox\Profiles\kje70kdo.default -> is enabled.
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2020-06-13]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2020-06-13]
FF Extension: (Restart) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\Restart@schuzak.jp.xpi [2017-03-13] [Legacy]
FF Extension: (Session Sync) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\session-sync@gabrielivanica.com.xpi [2020-03-25]
FF Extension: (Youtube Watchmarker) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\yourect@coderect.com.xpi [2020-04-27]
FF Extension: (Linkification) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}.xpi [2015-07-26] [Legacy] [not signed]
FF Extension: (Video DownloadHelper) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-30]
FF Extension: (No Name) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-04-01]
FF Extension: (YouTube Flash Video Player) - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\Extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi [2018-02-11]
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 [2020-06-28]
FF Homepage: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> about:home
FF Session Restore: Moonchild Productions\Basilisk\Profiles\daneqr12.default-1581870394713 -> is enabled.
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-05-04] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-05-17] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2019-02-26] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> E:\Program Files (x86)\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.) [File not signed] [File is in use]
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) [File not signed] [File is in use]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google Inc -> Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-24] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-06-24] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2016-02-29] (Nero AG -> Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-19] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Web Components -> C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2013-03-04] (HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. -> )
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-10-20] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2019-11-03] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-10-20] <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2019-11-03] <==== ATTENTION

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default [2020-06-29]
CHR Notifications: Default -> hxxps://keep.google.com; hxxps://www.facebook.com
CHR StartupUrls: Default -> "hxxp://www.auto.cz/"
CHR Extension: (ProxFlow) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2020-06-11]
CHR Extension: (YouTube WATCHED. Classic View) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aendhplcpcfjlebhcjfiapmoaiekpkba [2020-01-12]
CHR Extension: (Dokumenty) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-21]
CHR Extension: (Disk Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-08]
CHR Extension: (uBlock Origin) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-05-30]
CHR Extension: (Vyhledávání Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2020-05-17]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2018-07-27]
CHR Extension: (Session Buddy) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2020-05-10]
CHR Extension: (Adobe Acrobat) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-06-23]
CHR Extension: (Tabs Outliner) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkanocgddhmamlbiijnphhppkpkmkl [2020-04-30]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2020-05-10]
CHR Extension: (Bitdefender Wallet) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2019-12-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-30]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-06-14]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2020-05-30]
CHR Extension: (Flash® Player for YouTube™) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lajdkhdcndkniopfefocbgbkofflagpm [2017-07-23]
CHR Extension: (Linkclump) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj [2020-06-23]
CHR Extension: (Clickable Links) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgamelhnfokapndfdodnmfiningckjia [2016-05-02]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-18]
CHR Extension: (Gmail) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-24]
CHR Profile: C:\Users\Milan\AppData\Local\Google\Chrome\User Data\System Profile [2017-04-09]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]

Opera:
=======
OPR StartupUrls: "hxxps://www.idnes.cz/","hxxps://www.seznam.cz/" ... vodajstvi/"

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-10-07] (Bitdefender SRL -> Bitdefender)
R2 btwdins; C:\Program Files\ASUS\Bluetooth Software\btwdins.exe [960368 2012-12-30] (Broadcom Corporation -> Broadcom Corporation.)
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.0.0_x64.exe [8704 2019-09-29] (GuinpinSoft inc) [File not signed] [File is in use]
R2 Chemtable Startup Checking; C:\Program Files (x86)\Autorun Organizer\StartupCheckingService.exe [9924368 2018-09-03] (Konstantin Polyakov IP -> Chemtable Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11096432 2020-02-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [120392 2020-03-27] (Bitdefender SRL -> Bitdefender)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2020-02-25] (Mixbyte Inc -> Freemake)
R2 FreemakeVideoCapture; E:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [17792 2019-05-17] (Mixbyte Inc -> Ellora Assets Corp.)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] [File is in use]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129336 2013-01-31] (Intel Corporation -> Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21256 2018-04-20] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [463856 2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1352120 2020-03-27] (Bitdefender SRL -> Bitdefender)
U3 RegKill; C:\Windows\SysWOW64\Drivers\RegKill.sys [6400 2002-11-27] (Elaborate Bytes) [File not signed] [File is in use]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2014-01-05] (IDT, Inc.) [File not signed] [File is in use]
R2 SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [384072 2013-10-09] (Synology Inc. -> )
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [170328 2020-06-23] (Bitdefender SRL -> Bitdefender)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2014-02-25] (Synology Inc. -> ) [File not signed] [File is in use]
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-06-23] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; "E:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE" /auditservice [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Co., Ltd. -> AnvSoft Inc.)
R0 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2106424 2020-06-23] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [757240 2020-06-23] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-02-14] (Bitdefender SRL -> © Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96616 2020-05-26] (Bitdefender SRL -> BitDefender)
R2 ei2c; C:\windows\system32\drivers\ei2c.sys [20784 2014-05-01] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
S2 ElbyCDIO; C:\Windows\SysWOW64\Drivers\ElbyCDIO.sys [16320 2002-11-29] (Elaborate Bytes AG) [File not signed] [File is in use]
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-06-28] (Malwarebytes Corporation -> Malwarebytes)
R0 EUDSKCP; C:\WINDOWS\System32\drivers\EuDskCp.sys [74184 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R1 EUEUMDK; C:\WINDOWS\system32\drivers\EuEumDk.sys [23496 2018-05-02] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] [File is in use]
R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [453344 2020-06-23] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [188384 2019-06-03] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\System32\DRIVERS\ignis.sys [196392 2019-09-16] (Bitdefender SRL -> Bitdefender)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-04-07] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [44448 2014-10-12] (EATON POWER QUALITY SAS -> hxxp://libusb-win32.sourceforge.net)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73368 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [131728 2020-06-28] (Malwarebytes Inc -> Malwarebytes)
S3 MDA_NTDRV; C:\WINDOWS\system32\MDA_NTDRV.sys [21208 2013-02-25] (北京铠信神州科技有限责任公司 -> )
R2 mi2c; C:\windows\system32\drivers\mi2c.sys [20784 2016-07-27] (AOC International (Europe) GmbH -> Nicomsoft Ltd.)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [551936 2014-01-05] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [638368 2020-05-04] (Bitdefender SRL -> Bitdefender)
R1 UimBus; C:\WINDOWS\System32\drivers\uimbus.sys [109504 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
R1 Uim_DEVIM; C:\WINDOWS\System32\drivers\uimdevim.sys [46016 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [54344 2016-11-22] (Intel Corporation -> Intel Corporation)
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-29 20:23 - 2020-06-29 20:23 - 002291712 _____ (Farbar) C:\Users\Milan\Desktop\FRST64.exe
2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion
2020-06-28 11:05 - 2020-06-28 11:05 - 000131728 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000073368 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-06-28 10:59 - 2020-06-28 10:59 - 000001943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-06-28 10:58 - 2020-06-28 10:58 - 000000000 ____D C:\Malwarebytes
2020-06-28 10:32 - 2020-06-28 10:32 - 001287032 _____ (CPUID, Inc. ) C:\Users\Milan\Downloads\hwmonitor_1.41.exe
2020-06-28 10:31 - 2020-06-28 10:31 - 001214288 _____ ( ) C:\Users\Milan\Downloads\hwmonitor_1.32.exe
2020-06-28 10:31 - 2020-06-28 10:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2020-06-28 10:31 - 2020-06-28 10:31 - 000000000 ____D C:\Program Files\CPUID
2020-06-28 09:47 - 2020-06-28 09:47 - 000001670 _____ C:\Users\Milan\Desktop\AdwCleaner[C00].txt
2020-06-28 09:40 - 2020-06-28 09:40 - 008402608 _____ (Malwarebytes) C:\Users\Milan\Desktop\adwcleaner_8.0.5.exe
2020-06-27 23:54 - 2020-06-29 20:23 - 000046192 _____ C:\Users\Milan\Desktop\FRST.txt
2020-06-27 23:54 - 2020-06-27 23:54 - 000050160 _____ C:\Users\Milan\Desktop\Addition.txt
2020-06-27 23:53 - 2020-06-27 23:54 - 000050157 _____ C:\Users\Milan\Downloads\Addition.txt
2020-06-27 23:52 - 2020-06-27 23:54 - 000078005 _____ C:\Users\Milan\Downloads\FRST.txt
2020-06-27 23:51 - 2020-06-29 20:23 - 000000000 ____D C:\FRST
2020-06-27 23:38 - 2020-06-27 23:38 - 000680512 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-27 19:05 - 2020-06-27 19:05 - 064618056 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.1.1929.45.x64.exe
2020-06-27 09:43 - 2020-06-27 09:43 - 000000000 ___HD C:\Users\Milan\.opera
2020-06-26 22:23 - 2020-06-26 22:23 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV
2020-06-26 22:22 - 2020-06-26 22:22 - 013547840 _____ (GuinpinSoft inc) C:\Users\Milan\Downloads\Setup_MakeMKV_v1.15.1.exe
2020-06-26 20:51 - 2020-06-26 20:51 - 000000000 ___HD C:\Users\Milan\Downloads\.opera
2020-06-26 20:13 - 2020-06-26 20:13 - 000000000 ___HD C:\Program Files (x86)\.opera
2020-06-26 18:14 - 2020-06-26 18:14 - 002294440 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup (1).exe
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ C:\Program Files (x86)\installation_status.json
2020-06-26 18:14 - 2020-06-26 18:14 - 000003980 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1593188087
2020-06-26 18:14 - 2020-06-26 18:14 - 000001083 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\Assets
2020-06-26 18:14 - 2020-06-26 18:14 - 000000000 ____D C:\Program Files (x86)\69.0.3686.36
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ C:\Program Files (x86)\Resources.pri
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\opera autoupdate
2020-06-25 20:28 - 2020-06-27 23:36 - 000000000 ____D C:\Program Files (x86)\opera autoupdate
2020-06-24 22:36 - 2020-06-24 22:39 - 000214102 _____ C:\Users\Milan\Downloads\Optimalizace trati, SŽ.pdf
2020-06-24 21:12 - 2020-06-24 21:12 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-06-24 18:22 - 2020-06-24 18:22 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2020-06-24 18:21 - 2020-06-24 18:21 - 041626504 _____ (DiskInternals Research) C:\Users\Milan\Downloads\Partition_Recovery.exe
2020-06-24 11:02 - 2020-06-24 11:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-06-24 11:01 - 2020-06-24 11:02 - 041824168 _____ C:\Users\Milan\Downloads\vlc-3.0.11-win64.exe
2020-06-24 10:34 - 2020-06-24 10:35 - 207277528 _____ (Logitech Inc.) C:\Users\Milan\Downloads\Options_8.20.329.exe
2020-06-24 10:33 - 2020-06-24 10:32 - 000114344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-06-24 10:31 - 2020-06-24 10:31 - 002066568 _____ (Oracle Corporation) C:\Users\Milan\Downloads\chromeinstall-8u251.exe
2020-06-23 22:45 - 2020-06-23 22:45 - 000001716 _____ C:\Users\Milan\Desktop\Games – zástupce.lnk
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2020-06-23 22:26 - 2020-06-23 22:26 - 000000000 ____D C:\Program Files (x86)\Auslogics
2020-06-23 22:21 - 2020-06-27 23:36 - 000000000 ____D C:\Users\Milan\Downloads\opera autoupdate
2020-06-23 20:41 - 2020-06-23 20:41 - 009936128 _____ (Resplendence Software Projects Sp. ) C:\Users\Milan\Downloads\whocrashedSetup.exe
2020-06-23 20:41 - 2020-06-23 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2020-06-23 20:39 - 2020-06-23 20:39 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TVDownloader
2020-06-23 20:32 - 2020-06-23 20:32 - 008612792 _____ (ALTAP) C:\Users\Milan\Downloads\as40x64.exe
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json.backup
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ C:\Program Files (x86)\server_tracking_data
2020-06-23 20:27 - 2020-06-26 18:13 - 000000000 ____D C:\Program Files (x86)\68.0.3618.173
2020-06-23 20:27 - 2020-06-23 20:27 - 002464864 _____ (Opera Software) C:\Users\Milan\Downloads\OperaSetup.exe
2020-06-23 19:57 - 2020-06-29 20:00 - 000000304 _____ C:\WINDOWS\Tasks\Synology Data Replicator 3-HP-Milan.job
2020-06-23 19:57 - 2020-06-23 19:57 - 000002856 _____ C:\WINDOWS\system32\Tasks\Synology Data Replicator 3-HP-Milan
2020-06-23 18:16 - 2020-06-23 18:16 - 000000000 ___HD C:\Users\Milan\Desktop\DEATH DEALER (CAN)
2020-06-23 17:46 - 2020-06-23 17:46 - 000000787 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:46 - 2020-06-23 17:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-23 17:45 - 2020-06-23 17:45 - 003419088 _____ C:\Users\Milan\Downloads\winrar-x64-590cz.exe
2020-06-23 17:42 - 2020-06-23 17:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoReDo
2020-06-23 17:41 - 2020-06-23 17:41 - 043786040 _____ (DRD Systems, Inc. ) C:\Users\Milan\Downloads\VRDTVSH264-5-4-84-771a.exe
2020-06-23 17:28 - 2020-06-23 17:28 - 000000000 ____D C:\Program Files\Basilisk
2020-06-23 17:25 - 2020-06-23 17:25 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer (1).exe
2020-06-23 17:20 - 2020-06-23 17:20 - 000003244 _____ C:\WINDOWS\system32\Tasks\Kerish Doctor
2020-06-23 17:19 - 2020-06-23 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kerish Doctor
2020-06-23 17:19 - 2019-10-21 08:50 - 000061560 _____ (Kerish Products) C:\WINDOWS\SysWOW64\GPUTemp.dll
2020-06-23 17:17 - 2020-06-23 17:17 - 044625960 _____ (Kerish Products ) C:\Users\Milan\Downloads\Kerish_Doctor_4.80.exe
2020-06-23 17:08 - 2020-06-23 17:08 - 000000833 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2020-06-23 17:07 - 2020-06-23 17:07 - 004432054 _____ (foobar2000.org) C:\Users\Milan\Downloads\foobar2000_v1.5.4.exe
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\Users\Public\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000001245 _____ C:\ProgramData\Desktop\LibreOffice 6.4.lnk
2020-06-23 17:01 - 2020-06-23 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 6.4
2020-06-23 16:39 - 2020-06-23 17:15 - 000001545 _____ C:\Users\Milan\Desktop\NOVINKY.lnk
2020-06-23 16:38 - 2020-06-23 16:44 - 313282560 _____ C:\Users\Milan\Downloads\LibreOffice_6.4.4_Win_x64.msi
2020-06-23 15:39 - 2020-06-23 15:40 - 092168968 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Milan\Downloads\ashampoo_backup_2020_12.06_sm.exe
2020-06-23 15:28 - 2020-06-23 17:15 - 000000729 _____ C:\Users\Milan\Desktop\DVD.lnk
2020-06-23 15:22 - 2020-06-23 15:22 - 027169792 _____ (GOM & Company) C:\Users\Milan\Downloads\GOMPLAYERGLOBALSETUP_CHROME.EXE
2020-06-23 15:22 - 2020-06-23 15:22 - 000000284 _____ C:\nsispromotion_log.txt
2020-06-23 15:18 - 2020-06-23 15:18 - 003571616 _____ C:\Users\Milan\Downloads\mp3tagv301setup.exe
2020-06-23 15:15 - 2020-06-23 15:15 - 000001561 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\burningstudio21.exe.lnk
2020-06-23 14:10 - 2020-06-23 14:10 - 002106424 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000757240 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2020-06-23 14:10 - 2020-06-23 14:10 - 000453344 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2020-06-23 12:50 - 2020-06-23 12:50 - 047273312 _____ (Moonchild Productions) C:\Users\Milan\Downloads\basilisk-latest.win64.installer.exe
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\tmp
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Recuva
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Macrorit
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\SuperBird
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Secunia
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Seagate
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Omron Healthcare
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\Novel Games
2020-06-23 09:49 - 2020-06-23 09:49 - 000000000 ____D C:\Program Files (x86)\FlashGet Network
2020-06-21 20:34 - 2020-06-21 20:34 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (2).pdf
2020-06-21 20:33 - 2020-06-21 20:33 - 000237213 _____ C:\Users\Milan\Downloads\D.1.2.1.5 Detaily.pdf.pdf
2020-06-18 18:19 - 2020-06-18 18:19 - 002831130 _____ C:\Users\Milan\Downloads\D.4.3_SO430_CETIN (1).pdf
2020-06-18 18:18 - 2020-06-18 18:18 - 001701635 _____ C:\Users\Milan\Downloads\1394_001.pdf
2020-06-16 23:11 - 2020-06-01 20:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-16 23:11 - 2020-06-01 20:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-16 23:07 - 2020-06-02 07:18 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-16 23:07 - 2020-06-02 06:50 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-16 23:07 - 2020-06-02 06:44 - 001489408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:43 - 001464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2020-06-16 23:07 - 2020-06-02 06:35 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-16 23:07 - 2020-06-02 06:27 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2020-06-16 23:07 - 2020-06-02 06:25 - 001204736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2020-06-16 23:07 - 2020-06-02 05:59 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-16 23:07 - 2020-06-02 05:47 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-16 23:07 - 2020-05-30 04:54 - 004168192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-16 23:07 - 2020-05-30 04:30 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-16 23:07 - 2020-05-30 03:41 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-16 23:07 - 2020-05-30 03:23 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-16 23:07 - 2020-05-28 01:06 - 022364856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-16 23:07 - 2020-05-28 01:06 - 019796328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-16 23:07 - 2020-05-20 17:25 - 001384648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 007362312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-16 23:07 - 2020-05-20 17:21 - 002170784 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001662512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-06-16 23:07 - 2020-05-20 17:21 - 001062344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 001135696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 17:20 - 000806200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 14:48 - 025755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-06-16 23:07 - 2020-05-20 14:27 - 002911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-06-16 23:07 - 2020-05-20 14:25 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 005499392 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-16 23:07 - 2020-05-20 14:13 - 000785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-16 23:07 - 2020-05-20 13:56 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-16 23:07 - 2020-05-20 13:52 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 13:50 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 13:46 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 13:44 - 001124800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001560272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 001214720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-06-16 23:07 - 2020-05-20 13:40 - 000548440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000614056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-16 23:07 - 2020-05-20 13:39 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 015478784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-16 23:07 - 2020-05-20 13:37 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 13:35 - 002132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 13:34 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-16 23:07 - 2020-05-20 13:26 - 001756672 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 13:23 - 004859392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-06-16 23:07 - 2020-05-20 13:12 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-06-16 23:07 - 2020-05-20 13:01 - 000801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-16 23:07 - 2020-05-20 13:00 - 020291584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-16 23:07 - 2020-05-20 12:53 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-06-16 23:07 - 2020-05-20 12:44 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-16 23:07 - 2020-05-20 12:40 - 002304000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-06-16 23:07 - 2020-05-20 12:34 - 000653824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-16 23:07 - 2020-05-20 12:21 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-16 23:07 - 2020-05-20 12:18 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-16 23:07 - 2020-05-20 12:16 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-16 23:07 - 2020-05-20 12:14 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2020-06-16 23:07 - 2020-05-20 12:11 - 004111872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-06-16 23:07 - 2020-05-20 12:09 - 000333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-06-16 23:07 - 2020-05-20 12:08 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-06-16 23:07 - 2020-05-20 12:06 - 013861888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-16 23:07 - 2020-05-20 12:06 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-16 23:07 - 2020-05-20 12:01 - 001494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-16 23:07 - 2020-05-20 11:50 - 004387328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-06-16 23:07 - 2020-05-20 11:47 - 001341952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-06-16 23:07 - 2020-05-20 11:46 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-16 23:07 - 2020-05-13 19:49 - 001368592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-06-16 23:07 - 2020-05-13 03:23 - 000414624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-16 23:07 - 2020-05-13 03:23 - 000373888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-16 23:07 - 2020-05-13 01:37 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-12 11:47 - 000466840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-16 23:07 - 2020-05-12 11:46 - 000415240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-16 23:07 - 2020-05-12 08:42 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-16 23:07 - 2020-05-10 11:24 - 001311768 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-16 23:07 - 2020-05-10 06:36 - 000416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-06-16 23:07 - 2020-05-10 06:23 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 06:20 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-16 23:07 - 2020-05-10 06:15 - 003331584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-16 23:07 - 2020-05-10 06:03 - 001040384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-16 23:07 - 2020-05-10 05:56 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-16 23:07 - 2020-05-10 05:53 - 003640320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-16 23:07 - 2020-05-10 05:53 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-16 23:07 - 2020-05-10 05:47 - 000936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-16 23:07 - 2020-05-10 05:25 - 001085952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2020-06-16 23:07 - 2020-05-10 05:23 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-06-16 23:07 - 2020-05-10 05:17 - 014533120 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-16 23:07 - 2020-05-10 05:09 - 012880384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-16 23:07 - 2020-05-10 03:10 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-16 23:07 - 2020-05-01 16:17 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-16 23:07 - 2020-05-01 16:15 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001737520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-06-16 23:05 - 2020-06-16 23:05 - 001500888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-06-13 17:20 - 2020-06-13 17:20 - 000000000 ____D C:\Users\Milan\Documents\Ashampoo Burning Studio 21
2020-06-12 21:18 - 2020-06-12 21:18 - 000002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-06-11 10:37 - 2020-06-11 10:37 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-02 23:20 - 2020-06-02 23:20 - 000011608 _____ C:\Users\Milan\Downloads\e1af1ca0dfadad6a8e69540c5d445aa9e4970ec9.dlc
2020-05-30 13:01 - 2020-06-27 21:06 - 000001161 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2020-05-30 13:01 - 2020-06-16 21:30 - 000000374 _____ C:\Users\Milan\.vivaldi_reporting_data
2020-05-30 13:01 - 2020-05-30 13:01 - 000000000 ____D C:\Users\Milan\AppData\Local\Vivaldi
2020-05-30 12:59 - 2020-05-30 13:00 - 063187528 _____ (Vivaldi Technologies AS) C:\Users\Milan\Downloads\Vivaldi.3.0.1874.38.x64.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-06-29 20:07 - 2020-05-08 20:50 - 000473834 ____H C:\Users\Milan\drlog.txt
2020-06-29 19:20 - 2014-04-29 21:30 - 000000000 ____D C:\Users\Milan\Documents\Soubory aplikace Outlook
2020-06-29 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-06-29 16:27 - 2019-10-03 19:22 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-06-29 15:31 - 2014-03-18 17:33 - 000024112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-29 15:31 - 2014-03-18 16:54 - 000018184 _____ C:\WINDOWS\system32\perfh005.dat
2020-06-29 15:31 - 2014-03-18 16:54 - 000007220 _____ C:\WINDOWS\system32\perfc005.dat
2020-06-29 15:31 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2020-06-28 23:41 - 2014-05-05 21:22 - 000000000 ____D C:\Hobby-téka
2020-06-28 15:39 - 2016-10-14 18:11 - 000000000 ____D C:\Users\Milan\AppData\Roaming\DesktopOK
2020-06-28 15:03 - 2014-04-30 21:23 - 000000000 ____D C:\Users\Milan\Desktop\NÁSTROJE
2020-06-28 11:36 - 2014-04-28 21:19 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2134351818-1356353880-2322332928-1001
2020-06-28 10:58 - 2019-07-07 21:21 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-06-28 10:07 - 2016-11-21 23:06 - 000000000 ____D C:\Users\Milan\AppData\LocalLow\Mozilla
2020-06-28 10:02 - 2014-04-29 21:48 - 000000000 ____D C:\Users\Milan\AppData\Local\JDownloader v2.0
2020-06-28 09:48 - 2017-10-26 20:17 - 000003648 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2020-06-28 09:47 - 2014-04-29 01:24 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2020-06-28 09:46 - 2014-04-20 01:12 - 000000000 ____D C:\ProgramData\NVIDIA
2020-06-28 09:46 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-28 09:42 - 2015-09-11 17:35 - 000000000 ____D C:\AdwCleaner
2020-06-27 23:38 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM
2020-06-27 09:43 - 2014-04-29 20:29 - 000000000 ____D C:\Users\Milan
2020-06-26 18:57 - 2015-09-03 20:46 - 000000000 ____D C:\Users\Milan\AppData\Local\CrashDumps
2020-06-26 18:13 - 2014-05-18 20:15 - 000000000 ____D C:\Program Files (x86)\Opera
2020-06-24 20:54 - 2014-04-30 22:13 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-24 20:25 - 2014-05-04 19:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\XnViewMP
2020-06-24 10:36 - 2018-08-17 18:47 - 000000000 ____D C:\Users\Milan\AppData\Local\Deployment
2020-06-24 10:36 - 2018-07-27 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-06-24 10:35 - 2018-07-27 22:17 - 000000000 ____D C:\Program Files\Logitech
2020-06-24 10:33 - 2018-01-18 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-06-24 10:33 - 2015-07-18 12:03 - 000000000 ____D C:\Program Files (x86)\Java
2020-06-24 10:28 - 2017-04-08 14:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\MusicBee
2020-06-23 20:33 - 2020-04-27 19:40 - 000000801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Altap Salamander (x64).lnk
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Mp3tag
2020-06-23 20:23 - 2014-05-08 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2020-06-23 17:43 - 2014-04-20 01:17 - 000000000 ____D C:\ProgramData\Temp
2020-06-23 17:42 - 2015-05-06 22:04 - 000000000 ____D C:\Users\Milan\AppData\Roaming\VideoReDo-TVSuite5
2020-06-23 17:28 - 2019-06-18 20:03 - 000000873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Basilisk.lnk
2020-06-23 17:19 - 2020-04-07 02:00 - 000000000 ____D C:\Program Files (x86)\Kerish Doctor
2020-06-23 17:08 - 2014-12-24 20:37 - 000000000 ____D C:\Users\Milan\AppData\Roaming\foobar2000
2020-06-23 15:53 - 2020-02-01 21:28 - 000000000 ____D C:\Users\Milan\AppData\Local\Ashampoo Backup
2020-06-23 15:41 - 2014-04-29 22:03 - 000000000 ____D C:\ProgramData\Ashampoo
2020-06-23 15:24 - 2017-04-06 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM
2020-06-23 15:24 - 2014-04-30 21:30 - 000000881 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2020-06-23 13:11 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-06-23 09:49 - 2017-10-07 17:29 - 000000000 ____D C:\UsbFix
2020-06-23 09:49 - 2014-05-11 16:34 - 000000000 ____D C:\Program Files (x86)\Canon
2020-06-23 09:49 - 2014-05-11 13:26 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2020-06-23 09:49 - 2014-04-30 22:12 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-23 09:49 - 2014-04-30 21:33 - 000000000 ____D C:\The KMPlayer
2020-06-23 09:49 - 2014-04-29 21:24 - 000000000 ____D C:\inetpub
2020-06-23 09:49 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\System
2020-06-22 20:30 - 2020-02-02 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AweClone 2.6
2020-06-22 20:30 - 2019-12-24 14:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hasleo WinToHDD
2020-06-22 20:30 - 2018-09-12 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Premium
2020-06-22 20:30 - 2018-09-10 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inpaint 7
2020-06-22 20:30 - 2018-05-26 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Dude
2020-06-22 20:30 - 2017-05-22 22:15 - 000000000 ____D C:\ProgramData\Vso
2020-06-22 20:30 - 2017-05-09 19:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2020-06-22 20:30 - 2014-11-23 23:05 - 000000000 ____D C:\Users\Milan\Desktop\HRY
2020-06-22 20:30 - 2014-11-21 13:53 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-11-21 13:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-06-22 20:30 - 2014-06-29 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2020-06-22 20:30 - 2014-04-30 21:33 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2020-06-20 08:46 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2020-06-20 00:26 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-16 23:10 - 2013-08-22 17:36 - 000000000 ___RD C:\WINDOWS\ToastData
2020-06-16 23:10 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2020-06-16 23:09 - 2018-05-26 15:06 - 000000000 ____D C:\Users\Milan\AppData\Roaming\GlarySoft
2020-06-16 23:02 - 2018-05-26 15:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-06-16 23:02 - 2014-04-28 21:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-06-14 10:54 - 2020-04-17 18:46 - 000000000 ____D C:\Users\Milan\AppData\Roaming\vlc
2020-06-13 15:53 - 2014-04-28 21:31 - 000000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-06-09 20:21 - 2016-04-08 11:21 - 000004480 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-06-09 20:21 - 2014-09-10 21:27 - 000004372 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-09 20:21 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-06-09 20:04 - 2018-03-13 23:21 - 000004516 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-05 19:02 - 2014-04-20 01:18 - 000000000 ____D C:\ProgramData\install_clap
2020-06-05 19:02 - 2013-09-25 21:07 - 000000000 ____D C:\SWSETUP
2020-06-03 19:46 - 2014-04-28 21:13 - 000000000 ____D C:\Users\Milan\AppData\Roaming\Adobe
2020-06-02 08:10 - 2014-03-18 17:24 - 002476032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

==================== Files in the root of some directories ========

2017-10-07 17:25 - 2017-10-07 17:25 - 000195296 ____N () C:\Users\Milan\comcat5.dll
2020-06-26 18:14 - 2020-06-26 18:14 - 000010927 _____ () C:\Program Files (x86)\installation_status.json
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json
2020-06-23 20:28 - 2020-06-27 23:54 - 000001338 _____ () C:\Program Files (x86)\installer_prefs.json.backup
2020-06-26 18:14 - 2020-06-22 07:54 - 001509400 _____ (Opera Software) C:\Program Files (x86)\launcher.exe
2020-06-26 18:14 - 2019-08-29 10:51 - 000000317 _____ () C:\Program Files (x86)\launcher.visualelementsmanifest.xml
2020-06-26 18:14 - 2020-06-26 18:14 - 000000057 _____ () C:\Program Files (x86)\pref_default_overrides
2020-06-26 18:14 - 2019-08-29 10:51 - 000003072 _____ () C:\Program Files (x86)\Resources.pri
2020-06-23 20:28 - 2020-06-26 18:14 - 000001160 _____ () C:\Program Files (x86)\server_tracking_data
2017-08-02 20:18 - 2017-08-02 20:20 - 000099384 ____N () C:\Users\Milan\AppData\Roaming\inst.exe
2017-08-02 20:18 - 2017-08-02 20:20 - 000007859 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.cat
2017-08-02 20:18 - 2017-08-02 20:20 - 000001167 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.inf
2017-08-02 20:18 - 2017-08-02 20:20 - 000000033 ____N () C:\Users\Milan\AppData\Roaming\pcouffin.log
2017-08-02 20:18 - 2017-08-02 20:20 - 000082816 ____N (VSO Software) C:\Users\Milan\AppData\Roaming\pcouffin.sys
2018-10-07 20:41 - 2018-10-07 20:41 - 000000000 ____N () C:\Users\Milan\AppData\Local\oobelibMkey.log
2014-11-21 02:36 - 2014-11-21 02:36 - 000000017 ____N () C:\Users\Milan\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-06-23 16:09
==================== End of FRST.txt ========================


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-06-2020
Ran by Milan (29-06-2020 20:24:11)
Running from C:\Users\Milan\Desktop
Windows 8.1 (Update) (X64) (2014-04-29 18:34:23)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2134351818-1356353880-2322332928-500 - Administrator - Disabled)
Guest (S-1-5-21-2134351818-1356353880-2322332928-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2134351818-1356353880-2322332928-1005 - Limited - Enabled)
Milan (S-1-5-21-2134351818-1356353880-2322332928-1001 - Administrator - Enabled) => C:\Users\Milan

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 32.0.0.125 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.387 - Adobe)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.)
Aktualizace NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.) Hidden
Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{0DEB2EEB-BE9A-44B1-9D90-183250B61785}) (Version: 20.13.3317.03143 - Alcor Micro Corp.)
Altap Salamander 4.0 (x64) (HKLM\...\Altap Salamander 4.0 (x64)) (Version: 4.0 - ALTAP)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{62CB44B2-8007-DBB2-1CBA-5CB7309EB3C3}) (Version: 10.1.17134.12 - Microsoft) Hidden
Ashampoo Burning Studio 21 (HKLM-x32\...\{91B33C97-3390-FD9A-8E0F-3F6BA7865E46}_is1) (Version: 21.5.0 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 15 (HKLM-x32\...\{0A11EA01-E0CE-916E-BC94-74670FA71836}_is1) (Version: 15.1.0 - Ashampoo GmbH & Co. KG)
ASUS Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.5000 - ASUS)
Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 9.4.0.0 - Auslogics Labs Pty Ltd)
Autorun Organizer verze 3.02 (HKLM-x32\...\Autorun Organizer_is1) (Version: 3.02 - ChemTable Software)
Basilisk 52.9.2020.06.10 (x64 en-US) (HKLM\...\Basilisk 52.9.2020.06.10 (x64 en-US)) (Version: 52.9.2020.06.10 - Moonchild Productions)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.24.36 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 24.0.20.114 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG7100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series) (Version: 1.01 - Canon Inc.)
Canon MG7100 series On-screen Manual (HKLM-x32\...\Canon MG7100 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)
CD/Spectrum Pro (HKLM-x32\...\CDSpectrum Pro) (Version: CDSPro v2006.0204 - Synthesoft Corporation)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
CrystalDiskInfo 8.4.2 (64-bit) (HKLM\...\CrystalDiskInfo_is1) (Version: 8.4.2 - Crystal Dew World)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6522 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.3003 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4016 - CyberLink Corp.)
CyberLink WaveEditor (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 1.0.1.2011 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DiskInternals Partition Recovery (HKLM-x32\...\DiskInternals Partition Recovery) (Version: 8.0.1 - DiskInternals Research)
Driver Easy 5.6.14 (HKLM\...\DriverEasy_is1) (Version: 5.6.14 - Easeware)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
EO - ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #8) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #3 (HKLM-x32\...\ST6UNST #10) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #4 (HKLM-x32\...\ST6UNST #11) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) #5 (HKLM-x32\...\ST6UNST #15) (Version: - )
EO - ActiveX (C:\Program Files (x86)\EOax\) (HKLM-x32\...\ST6UNST #13) (Version: - )
EO - ActiveX (HKLM-x32\...\ST6UNST #3) (Version: - )
e-Saver version 3.1 (HKLM-x32\...\{C97CA73D-E96B-4B42-830E-D0F7BD780FB8}_is1) (Version: 3.1 - AOC)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Fonts version 1.0 (HKLM-x32\...\{95E6D335-B7B1-445B-9B58-64818030390E}_is1) (Version: 1.0 - MSTech (Modern Software Technology))
foobar2000 v1.5.4 (HKLM-x32\...\foobar2000) (Version: 1.5.4 - Peter Pawlowski)
Fotogaléria (HKLM-x32\...\{9093B0D5-EA59-4C9E-A2E3-CC130138DFCD}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{A1FBD2B3-6768-472D-BA46-C00EACBCE16C}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Freemake Audio Converter verze 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Freemake Video Converter verze 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Mixbyte Inc.)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.54.5318 - GOM & Company)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.116 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GWX Control Panel (HKLM-x32\...\UltimateOutsider_GwxControlPanel) (Version: - UltimateOutsider)
HARDiNFO 8 PRO (HKLM\...\{708C3C8B-A637-4AF5-9749-8F2914CA6B23}) (Version: 8.0 - Ultimate Systems) Hidden
HARDiNFO 8 PRO (HKLM-x32\...\HARDiNFO 8 PRO) (Version: 8.0 - Ultimate Systems)
Hewlett-Packard ACLM.NET v1.2.2.1 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HOBBY-téka 4.00 (HKLM-x32\...\HOBBY-téka 4.00) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #16) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #18) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #19) (Version: - )
HOBBY-téka ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #12) (Version: - )
HOBBY-téka ActiveX (HKLM-x32\...\ST6UNST #7) (Version: - )
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP Quick Start (HKLM-x32\...\{574F0207-8E98-46CD-8F79-318348C98C46}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6668.4491 - Hewlett-Packard)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
HWiNFO64 Version 4.36 (HKLM\...\HWiNFO64_is1) (Version: 4.36 - Martin Malík - REALiX)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6435.0 - IDT)
i-Menu version 4.1.3 (HKLM-x32\...\{0121C0BD-363C-4B1D-8B64-FE7681A37D0A}_is1) (Version: 4.1.3 - AOC)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.40 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.40 - Dominik Reichl)
Kerish Doctor 2020 (HKLM-x32\...\{EF70A54F-E09E-4570-8F21-C7674CDDB5B6}_is1) (Version: 4.80 - Kerish Products)
Kits Configuration Installer (HKLM-x32\...\{6F502640-B753-C101-FFA5-B38C3FA5B29A}) (Version: 10.1.17134.12 - Microsoft) Hidden
LibreOffice 6.4.4.2 (HKLM\...\{F00C391B-6092-40E7-9ECD-144933865571}) (Version: 6.4.4.2 - The Document Foundation)
LockHunter 3.3, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.20.329 - Logitech)
Logitech SetPoint 6.69 (HKLM\...\sp6) (Version: 6.69.126 - Logitech)
MakeMKV v1.15.1 (HKLM-x32\...\MakeMKV) (Version: v1.15.1 - GuinpinSoft inc)
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Mediaport (HKLM-x32\...\Mediaport) (Version: - )
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft .NET Framework 4.7.2 SDK (HKLM-x32\...\{229FC339-A2DE-46C7-8AB7-E64BD2FD9592}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{90FBABBB-0CFC-469F-971F-0A1F11F5AF2E}) (Version: 4.7.03056 - Microsoft Corporation)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.12430.20264 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MKVToolNix 40.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 40.0.0 - Moritz Bunkus)
Monkey's Audio (HKLM-x32\...\Monkey's Audio_is1) (Version: - )
Movie Maker (HKLM-x32\...\{8E6E8CBB-8E58-493C-943F-4664F5F2FEDB}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{9EDF46F0-2D4E-4C00-B2B6-0660666E9F60}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{A035950F-15BA-41C0-9D8F-165FC0536012}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 66.0.2 (x64 cs) (HKLM\...\Mozilla Firefox 66.0.2 (x64 cs)) (Version: 66.0.2 - Mozilla)
Mozilla Firefox 77.0.1 (x64 en-US) (HKLM\...\Mozilla Firefox 77.0.1 (x64 en-US)) (Version: 77.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0.2 - Mozilla)
MSI Development Tools (HKLM-x32\...\{1E406B46-65F4-91CE-65DA-DB66D5443B68}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
MSTech Folder Icon Pro (HKLM-x32\...\{C8483ED0-185F-45D7-9AC4-DD751942B9ED}) (Version: 2.9.3.750 - MSTech (Modern Software Technology))
MultiCommander (x64) (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MultiCommander x64) (Version: 8.3.0.2469 - Mathias Svensson)
Nero CoverDesigner (HKLM-x32\...\{12391E45-23F7-4DEA-ABAE-2CA69CA87D92}) (Version: 12.0.02300 - Nero AG)
NVIDIA Ovladač 3D Vision 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.73 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.73 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OCCT 4.4.0 (HKLM-x32\...\OCCT) (Version: 4.4.0 - Ocbase.com)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.12430.20264 - Microsoft Corporation) Hidden
Omron Health Management Software (HKLM-x32\...\{E01DFD45-F13A-4F12-AC38-8EEE2163E52E}) (Version: 1.60.0003 - Omron Healthcare)
Opera Stable 69.0.3686.36 (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Opera 69.0.3686.36) (Version: 69.0.3686.36 - Opera Software)
Ovládací panel NVIDIA 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.73 - NVIDIA Corporation) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM\...\{14EEF044-2FC6-40AA-9285-F430B3D90EF6}) (Version: 17.10.2.5049 - Paragon Software) Hidden
Paragon Hard Disk Manager™ 25 Anniversary LE (HKLM-x32\...\{f541ba6a-92bf-466b-b956-5efa58ffe017}) (Version: 17.10.2.5049 - Paragon Software GmbH)
Paragon UIM (HKLM\...\{06B4D67B-9ECB-41E5-B4C1-92F529BB703D}) (Version: 24.65.0.487 - Paragon Software) Hidden
PeaZip 6.6.0 (HKLM-x32\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.6.0 - Giorgio Tani)
PeaZip 6.8.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.8.0 - Giorgio Tani)
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30153 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.0.6208 - CyberLink Corp.) Hidden
Registrace uživatele zařízení Canon MG7100 series (HKLM-x32\...\Registrace uživatele zařízení Canon MG7100 series) (Version: - ‭Canon Inc.)
Relax-KEŠ ActiveX (c:\Hobby-téka\) (HKLM-x32\...\ST6UNST #9) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #3 (HKLM-x32\...\ST6UNST #1) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #4 (HKLM-x32\...\ST6UNST #2) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #5 (HKLM-x32\...\ST6UNST #4) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #6 (HKLM-x32\...\ST6UNST #6) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) #7 (HKLM-x32\...\ST6UNST #17) (Version: - )
Relax-KEŠ ActiveX (C:\Program Files (x86)\KESax\) (HKLM-x32\...\ST6UNST #14) (Version: - )
Relax-KEŠ ActiveX (HKLM-x32\...\ST6UNST #5) (Version: - )
SDK ARM Additions (HKLM-x32\...\{346B2C02-CC0D-6E09-8B9D-CAA2821473CF}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{825784BB-114D-ADB3-B65F-E1EB2A63C3BC}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
SDK Debuggers (HKLM-x32\...\{8238CD59-617A-FE41-8AB4-A88AF3160849}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Soft Organizer verze 7.52 (HKLM-x32\...\Soft Organizer_is1) (Version: 7.52 - ChemTable Software)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - )
Synology Data Replicator 3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TechniPort Plus Beta (HKLM-x32\...\TechniPort Plus Beta) (Version: 0.9.5.4_beta - TechniSat)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
TotalAudioConverter (HKLM-x32\...\Total Audio Converter_is1) (Version: 5.1 - Softplicity, Inc.)
TVDownloader (HKLM-x32\...\TVDownloader) (Version: 1.18.0.0 - XPloRR)
Universal CRT Extension SDK (HKLM-x32\...\{18ABFDF6-23D9-87E6-015E-FFE3C7F153D5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{0D6B41AF-D117-8944-A059-3F9346A896C5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{B6273353-8B54-1F89-1A16-5940925104CE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{BA6F1D53-C3F2-F9D5-80CE-CEF608E36AD3}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{6E43CA0C-046E-4F38-A0A2-3B1BA139B661}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{775886B8-DEE1-CB20-8A94-FC09FA54ECF6}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Unlocker (HKLM-x32\...\{5577A25D-E4FE-4BFB-A660-E0D766BC4EDD}) (Version: 1.9.2 - ajua Custom Installers)
VDownloader 4.5.2902 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited)
VideoReDo TVSuite Version 5.4.84.771 (HKLM-x32\...\VideoReDo5_is1) (Version: - DRD Systems, Inc.)
Vivaldi (HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\Vivaldi) (Version: 3.1.1929.45 - Vivaldi Technologies AS.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
VSO Media Player 1.6.12.521 (HKLM-x32\...\{59F1E8E6-60EC-4CC1-8C72-E0F38E585215}_is1) (Version: 1.6.12.521 - VSO Software)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Web Components (HKLM-x32\...\{03B13AF8-9625-478A-AF0E-205337B9415A}_is1) (Version: - )
WhoCrashed 6.65 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
WinAppDeploy (HKLM-x32\...\{5AD4A604-B476-1578-2A20-6B02FC6258BE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Mobile Connectivity Tools 10.0.15254.0 - Desktop x86 (HKLM-x32\...\{833F02C5-2C39-49F6-BD64-91D351081274}) (Version: 10.1.15254.1 - Microsoft Corporation)
Windows SDK AddOn (HKLM-x32\...\{E77C2F78-6089-48F8-89DF-DDF2850DFFD9}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17134.12 (HKLM-x32\...\{5f83ccda-0498-4b97-a298-16a642bf49f2}) (Version: 10.1.17134.12 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{389D182F-0ADA-5C7E-FF32-2573A821592C}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{C3776B36-B34E-00E2-3009-95A6F1870B58}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{965D1746-D94A-49B9-2A48-A14914CA3B57}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{84C6B91B-67DA-DDE3-86F1-87A3E307E8C1}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{3755CD99-C62E-3312-DDD3-29A4F259270D}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{729DA966-8590-2C1F-2178-16C1D32FD7FD}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{F1C18506-3168-A9D9-E2D9-D23A512A326E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{4095D263-6A13-78D3-DEDA-AA3452011F6E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{C3243E23-2EB6-4419-2692-40944923B112}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WPT Redistributables (HKLM-x32\...\{F28E1B8B-1F92-80AF-710B-3E0191A25917}) (Version: 10.1.17134.12 - Microsoft) Hidden
WPTx64 (HKLM-x32\...\{711802CA-302C-6805-6D1F-D5CEF535F15E}) (Version: 10.1.17134.12 - Microsoft) Hidden
XnViewMP 0.64 (HKLM\...\XnViewMP_is1) (Version: 0.64 - Gougelet Pierre-e)
XYplorer 15.90 (HKLM-x32\...\XYplorer) (Version: 15.90 - Donald Lessau)

Packages:
=========
Box for Windows 8 -> C:\Program Files\WindowsApps\134D4F5B.Box_2.1.4.4_neutral__2qk4zy5s3qmee [2018-02-18] (Box, Inc.)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-03-07] (Canon Inc.)
HP Registration -> C:\Program Files\WindowsApps\AD2F1837.HPRegistration_1.2.1.166_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)
Hry -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Hudba -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview_1.0.9431.0_neutral__8wekyb3d8bbwe [2018-02-18] (Rozšíření Microsoft Platform)
Knihovna Microsoft Windows pro jazyk JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.Preview.1_1.0.9345.0_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft PlayReady -> C:\Program Files\WindowsApps\Microsoft.Internal.Media.PlayReadyClient_2.3.1678.1_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Visual C++ Runtime Package -> C:\Program Files\WindowsApps\Microsoft.VCLibs.120.00.Preview.Internal_12.0.20222.2_x86__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions Internal)
Microsoft Windows Library for JavaScript -> C:\Program Files\WindowsApps\Microsoft.WinJS.2.0.Preview.Internal_1.0.9385.3_neutral__8wekyb3d8bbwe [2018-02-18] (Microsoft Platform Extensions)
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Finance -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Gurmánský svět -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
MSN Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Norton Studio -> C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp [2018-02-18] (Symantec Corporation)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2018-02-18] (Skype) [MS Ad]
Video -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2018-02-18] (Microsoft Corporation) [MS Ad]
Výběr prohlížeče -> C:\WINDOWS\BrowserChoice [2014-04-29] (Microsoft Corporation)
Začínáme se systémem Windows 8 -> C:\Program Files\WindowsApps\AD2F1837.GettingStartedwithWindows8_1.6.0.0_neutral__v10z8vjag6ke6 [2018-02-18] (Hewlett-Packard Company)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2134351818-1356353880-2322332928-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> E:\Program Files (x86)\Vivaldi\Application\3.1.1929.45\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6722448 2010-03-25] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers1: [TotalConverter] -> {280CFDE1-1354-4431-92F3-03073BA593FB} => C:\Program Files (x86)\TotalAudioConverter\axTotalConverter64.dll [2014-03-14] (Softplicity) [File not signed] [File is in use]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers4: [FolderIconProMnu] -> {ee6b78fb-091b-3896-8982-9987a45d50bb} => E:\Program Files (x86)\MSTech Folder Icon Pro\FolderIconProMnu.DLL [2019-03-02] (MSTech (Modern Software Technology)) [File not signed] [File is in use]
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => E:\Program Files (x86)\LockHunter\LHShellExt64.dll [2019-11-29] (Crystal Rich Ltd -> TODO: <Company name>)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => E:\Program Files (x86)\Mp3tagShell64.dll [2020-03-27] (Florian Heidenreich) [File not signed] [File is in use]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2014-02-12] (VSO-SOFTWARE -> VSO Software SARL)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\Program Files (x86)\WinRAR\rarext32.dll [2020-03-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> C:\ProgramData\Ashampoo\YourDeals.exe () -> hxxp://linktarget.ashampoo.com/linktarget/?target=marketplace&edition=eid=15445&utm_medium=desktop&x-pos=Metro

==================== Loaded Modules (Whitelisted) =============

2020-06-28 10:02 - 2020-06-28 10:02 - 004078962 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll
2020-06-28 10:02 - 2020-06-28 10:02 - 000566439 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll
2020-06-28 09:47 - 2020-06-28 09:47 - 000192512 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\Temp\sfamcc00001.dll
2020-06-28 09:47 - 2020-06-28 09:47 - 000158720 _____ () [File not signed] [File is in use] C:\Users\Milan\AppData\Local\Temp\sfareca00001.dll
2020-03-27 18:50 - 2020-03-27 18:50 - 000398336 _____ (Florian Heidenreich) [File not signed] [File is in use] E:\Program Files (x86)\Mp3tagShell64.dll
2020-06-28 10:02 - 2020-06-28 10:02 - 000198144 ____N (Java(TM) Native Access (JNA)) [File not signed] [File is in use] C:\Users\Milan\AppData\Local\JDownloader v2.0\tmp\jna\jna971343832782650155.dll
2018-04-19 22:31 - 2018-04-19 22:31 - 000267776 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL
2018-02-18 18:48 - 2017-12-19 04:51 - 000874880 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2018-02-18 18:48 - 2017-12-19 04:51 - 000339072 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] [File is in use] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2013-08-07 10:49 - 2013-08-07 10:49 - 000602112 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\devctrl.dll
2013-08-06 14:52 - 2013-08-06 14:52 - 001281536 _____ (Synology Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Synology Data Replicator 3\vssWin764.dll
2012-12-10 15:03 - 2012-12-10 15:03 - 001198080 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] [File is in use] c:\Program Files (x86)\Intel\iCLS Client\LIBEAY32.dll
2012-12-10 15:03 - 2012-12-10 15:03 - 000303104 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] [File is in use] c:\Program Files (x86)\Intel\iCLS Client\ssleay32.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2020-06-29 19:29 - 000000000 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\VDownloader;C:\Program Files\ASUS\Bluetooth Software\;C:\Program Files\ASUS\Bluetooth Software\syswow64;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\
HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\HP\HP_Orkney_Stones.jpg
DNS Servers: 109.72.0.1 - 109.72.2.30
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{B384870C-5BE3-4735-97F2-5C7F4D5C1F1E}] => (Allow) LPort=1900
FirewallRules: [{C5D7703D-8AEB-4EA2-9201-6B27121E8F5C}] => (Allow) LPort=2869
FirewallRules: [{1FD973EA-C3CE-4556-A571-2C6D7618F862}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{52661EC0-718E-4A10-B226-E402B8BA8552}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9B768B84-2E68-44C0-9C18-48ED8811FB1B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6BE5FF36-FC45-4B96-81B5-8D58DBC93DDF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0410599E-4774-431E-A310-5411BADF2955}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{33249233-4380-4407-AE78-79F3222250BF}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{946C85CF-AD28-4698-89A2-451103BA6275}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\spotify_helper.exe (Meridian Audio Ltd -> )
FirewallRules: [{CF42E03B-7A5F-4742-91E9-CDA2D995E37B}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{BDFF5D59-DA54-4CC6-866A-1ABD6F2BD361}] => (Allow) C:\Users\Milan\AppData\Local\HPConnectedMusic\Application\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{7188B0BC-8686-4FDF-869F-2F7865AEC1DF}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{16A2A0B4-C95D-4780-A4C5-7A74105C165F}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe (Meridian Audio Ltd -> Meridian Audio Ltd)
FirewallRules: [{3CA6EE64-D75A-4954-931D-A1D239377DD5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{478BC89C-8B49-4371-9729-1F6432AAD5E9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{2D7D2949-C15C-42FD-B6B0-BD3903A6D94C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{C161A352-112A-4538-9333-830F26014802}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{7DDBA0CE-B419-4EF2-BDA1-C217CC705F17}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9144AD77-433A-4B1B-8D92-58C02259F298}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C8A1B26A-E1C3-47DB-8754-43BAD054FCD0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F566AE56-7E66-44D3-804D-4149275C4394}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BAB750B0-D53E-48EE-BE80-0BDB26C79A15}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3AE55082-D404-45CF-B593-B97A1ACB03B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F57D2F83-1AF5-4767-A155-DA1E3BB70BD8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9BAA4FA-B27F-463D-BD6F-D5E23B76F7BF}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{EB4C43AF-30CD-4477-BEBC-07F64B46BD98}] => (Allow) C:\Program Files\Basilisk\basilisk.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{C1F6B667-11F8-451B-BDF7-FF029BC1E9D1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{87C55617-9CED-4DDA-BAEF-B13875FDE3AF}] => (Allow) C:\Program Files (x86)\69.0.3686.36\opera.exe (Opera Software AS -> Opera Software)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe] => Enabled:Flashget3

==================== Restore Points =========================

28-06-2020 10:48:16 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (06/29/2020 08:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/29/2020 07:33:29 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).

Error: (06/29/2020 07:05:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/29/2020 06:31:58 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).

Error: (06/29/2020 06:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/29/2020 05:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HP)
Description: Aplikaci SymantecCorporation.NortonStudio_v68kp9n051hdp!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (06/29/2020 04:51:12 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).

Error: (06/29/2020 04:47:29 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Popisovač protokolu Mapi16 nebyl načten. Popis chyby: (HRESULT : 0x80040154).


System errors:
=============
Error: (06/29/2020 08:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/29/2020 07:05:10 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/29/2020 06:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/29/2020 05:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/29/2020 04:04:20 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/29/2020 03:56:29 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/29/2020 03:28:58 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXvwgnrrhcka99admvy9fqan3zpdmgg69a.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/28/2020 11:45:27 PM) (Source: DCOM) (EventID: 10010) (User: HP)
Description: Server App.AppXqnry5k2463e1eva81cgfqeh461wt463a.mca se v daném časovém limitu neregistroval u služby DCOM.


==================== Memory info ===========================

BIOS: AMI 80.20 03/25/2014
Motherboard: Hewlett-Packard 2AF3
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 39%
Total physical RAM: 16337.16 MB
Available physical RAM: 9955.95 MB
Total Virtual: 22993.16 MB
Available Virtual: 12689.17 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:103.83 GB) (Free:24.56 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Recovery Image) (Fixed) (Total:13.49 GB) (Free:1.6 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (DATADRIVE) (Fixed) (Total:3725.9 GB) (Free:3631.86 GB) NTFS
Drive f: (Bowling for Columbine) (CDROM) (Total:7.62 GB) (Free:0 GB) UDF
Drive h: () (Fixed) (Total:1397.26 GB) (Free:1257.67 GB) NTFS
Drive l: () (Fixed) (Total:1397.26 GB) (Free:118.68 GB) NTFS

\\?\Volume{abe04f1f-1613-40cd-8aa4-0671b7515e52}\ () (Fixed) (Total:0 GB) (Free:0 GB)
\\?\Volume{b49f7e97-af19-4680-ad83-9b7505e9a462}\ () (Fixed) (Total:0 GB) (Free:0 GB)

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 1AD3749A)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 3 (Size: 1397.3 GB) (Disk ID: 4AB79538)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==========================================================
Disk: 4 (Size: 1397.3 GB) (Disk ID: 40505CCB)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
  CMD: dir "C:\Program Files (x86)\Norton Internet Security"
  File: C:\Program Files (x86)\launcher.exe
  File: C:\Windows\SysWOW64\Drivers\RegKill.sys
  
  HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe" 
  Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
  Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
  Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-téka\setup\setup.exe
  Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
  Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
  Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
  Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
  Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
  Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
  Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
  Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
  Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
  Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
  HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
  BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
  CMD: type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js"
  CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
  CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
  S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
  S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
  U2 SBKUPNT; no ImagePath
  2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion
  ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} -  -> No File
  ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} =>  -> No File
  ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} =>  -> No File
  ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} =>  -> No File
  ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> No File
  ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> No File
  ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> No File
  AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
  AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
  AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
  AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Fix result of Farbar Recovery Scan Tool (x64) Version: 30-06-2020
Ran by Milan (02-07-2020 22:12:59) Run:1
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
CMD: dir "C:\Program Files (x86)\Norton Internet Security"
File: C:\Program Files (x86)\launcher.exe
File: C:\Windows\SysWOW64\Drivers\RegKill.sys

HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\...\MountPoints2: {50c52b16-ce04-11e6-bf53-9cb654eb78ff} - "I:\Lenovo_Suite.exe"
Task: {01598504-C068-41F2-9DBF-6DC9A666BD69} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe
Task: {1BB17350-5FEA-4A28-ACC0-CED43D5F3853} - System32\Tasks\Abelssoft\AntiLogger_3 => E:\Program Files (x86)\AntiLogger\AbLauncher.exe
Task: {1C649324-7B0A-4177-9C88-39CCD54A2D7D} - System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => C:\WINDOWS\system32\pcalua.exe -a C:\Hobby-t�ka\setup\setup.exe
Task: {20983F87-D24B-452D-BFA8-3455683056DA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {38D8CF00-F9DA-4219-8C9D-0568DB73C874} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {4983B6D6-CC17-450B-9EB9-86B8422798E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {76184C1E-CB03-400D-A813-82EE8F22D629} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {9BB07B71-845F-4D15-B1C5-7F4D9E087F4B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9D7BDA2F-BA50-4356-BC34-DD59D58222D1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A62E4628-0E01-4916-A6AA-030ADFCC4A83} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {D2C6C099-82D8-4286-96FB-94344BD0BD62} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {F728CB27-EFF5-4C61-9B99-4F9F8E672E9D} - System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Eaton\IntelligentPowerProtector\mc2.exe" -c -launch "hxxp://127.0.0.1:4679/default.html"
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File
CMD: type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js"
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
S3 CLVirtualBus01; \SystemRoot\System32\drivers\CLVirtualBus01.sys [X]
S3 MFE_RR; \??\C:\Users\Milan\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
U2 SBKUPNT; no ImagePath
2020-06-29 20:23 - 2020-06-29 20:23 - 000000000 ____D C:\Users\Milan\Desktop\FRST-OlderVersion
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - -> No File
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> No File
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> No File
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
AlternateDataStreams: C:\ProgramData\Temp:0888F409 [284]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [916]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [159]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [960]

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 437
Average :
Sum : 4096186786
Maximum :
Minimum :
Property : Length




========= End of Powershell: =========


========================= File: C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe ========================

"C:\Program Files (x86)\Norton Internet Security\Engine\22.6.0.142\SymErr.exe" => not found
====== End of File: ======


========= dir "C:\Program Files (x86)\Norton Internet Security" =========

Volume in drive C is Windows
Volume Serial Number is D462-9877

Directory of C:\Program Files (x86)

File Not Found

========= End of CMD: =========


========================= File: C:\Program Files (x86)\launcher.exe ========================

C:\Program Files (x86)\launcher.exe
File is digitally signed
MD5: B347B6D1E8C2938047EF9A2B85B46ECF
Creation and modification date: 2020-06-26 18:14 - 2020-06-22 07:54
Size: 001509400
Attributes: ----A
Company Name: Opera Software AS -> Opera Software
Internal Name: Opera
Original Name:
Product: Opera Internet Browser
Description: Opera Internet Browser
File Version: 69.0.3686.36
Product Version: 69.0.3686.36
Copyright: Copyright Opera Software 2020
VirusTotal: https://www.virustotal.com/gui/file/3f0 ... 1593438414

====== End of File: ======


========================= File: C:\Windows\SysWOW64\Drivers\RegKill.sys ========================

C:\Windows\SysWOW64\Drivers\RegKill.sys
File not signed
MD5: 27CE3D4C589E5FAE38EA0BD0FDFA3FD6
Creation and modification date: 2002-11-27 23:46 - 2002-11-27 23:46
Size: 000006400
Attributes: ----A
Company Name: Elaborate Bytes
Internal Name: regkill.sys
Original Name: regkill.sys
Product: DVD Region Killer
Description: DVD RegionKiller Lower Filter Driver
File Version: 2, 7, 0, 0
Product Version: 2, 7, 0, 0
Copyright: Copyright (C) 2001, 2002 Elaborate Bytes, Oliver Kastl
VirusTotal: https://www.virustotal.com/gui/file/5dc ... 1409515899

====== End of File: ======

HKU\S-1-5-21-2134351818-1356353880-2322332928-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{50c52b16-ce04-11e6-bf53-9cb654eb78ff} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{01598504-C068-41F2-9DBF-6DC9A666BD69}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01598504-C068-41F2-9DBF-6DC9A666BD69}" => removed successfully
C:\WINDOWS\System32\Tasks\Norton Internet Security\Norton Error Analyzer => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Internet Security\Norton Error Analyzer" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1BB17350-5FEA-4A28-ACC0-CED43D5F3853}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BB17350-5FEA-4A28-ACC0-CED43D5F3853}" => removed successfully
C:\WINDOWS\System32\Tasks\Abelssoft\AntiLogger_3 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Abelssoft\AntiLogger_3" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1C649324-7B0A-4177-9C88-39CCD54A2D7D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C649324-7B0A-4177-9C88-39CCD54A2D7D}" => removed successfully
C:\WINDOWS\System32\Tasks\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7C2C62EC-A966-4BB0-84EB-AB13EE8AC369}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{20983F87-D24B-452D-BFA8-3455683056DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20983F87-D24B-452D-BFA8-3455683056DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38D8CF00-F9DA-4219-8C9D-0568DB73C874}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38D8CF00-F9DA-4219-8C9D-0568DB73C874}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4983B6D6-CC17-450B-9EB9-86B8422798E9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4983B6D6-CC17-450B-9EB9-86B8422798E9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66FAA689-D6A2-4DCF-BB00-0DA98EDFFF8E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{76184C1E-CB03-400D-A813-82EE8F22D629}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76184C1E-CB03-400D-A813-82EE8F22D629}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9BB07B71-845F-4D15-B1C5-7F4D9E087F4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9BB07B71-845F-4D15-B1C5-7F4D9E087F4B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9D7BDA2F-BA50-4356-BC34-DD59D58222D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D7BDA2F-BA50-4356-BC34-DD59D58222D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A62E4628-0E01-4916-A6AA-030ADFCC4A83}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A62E4628-0E01-4916-A6AA-030ADFCC4A83}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D2C6C099-82D8-4286-96FB-94344BD0BD62}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D2C6C099-82D8-4286-96FB-94344BD0BD62}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F728CB27-EFF5-4C61-9B99-4F9F8E672E9D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F728CB27-EFF5-4C61-9B99-4F9F8E672E9D}" => removed successfully
C:\WINDOWS\System32\Tasks\{F0469B35-26F4-48B9-92A0-94F30953612B} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F0469B35-26F4-48B9-92A0-94F30953612B}" => removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} => removed successfully

========= type "C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\kje70kdo.default\user.js" =========







user_pref("browser.sessionstore.resume_session_once", true);
user_pref("browser.sessionstore.resume_session_once", true);

========= End of CMD: =========

HKLM\SOFTWARE\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => removed successfully
HKLM\System\CurrentControlSet\Services\CLVirtualBus01 => removed successfully
CLVirtualBus01 => service removed successfully
HKLM\System\CurrentControlSet\Services\MFE_RR => removed successfully
MFE_RR => service removed successfully
HKLM\System\CurrentControlSet\Services\SBKUPNT => removed successfully
SBKUPNT => service removed successfully
C:\Users\Milan\Desktop\FRST-OlderVersion => moved successfully
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" => removed successfully
HKLM\SOFTWARE\WOW6432Node\Classes\CLSID\{B5A7F190-DDA6-4420-B3BA-52453494E6CD} => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayExcluded => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayPending => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OverlayProtected => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
C:\ProgramData\Temp => ":0888F409" ADS removed successfully
C:\ProgramData\Temp => ":3440EB47" ADS removed successfully
C:\ProgramData\Temp => ":66633281" ADS removed successfully
C:\ProgramData\Temp => ":93433455" ADS removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 91181009 B
Java, Flash, Steam htmlcache => 1690 B
Windows/system/drivers => 5110271 B
Edge => 0 B
Chrome => 811882552 B
Firefox => 33686137 B
Opera => 154407846 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 163926 B
systemprofile32 => 164054 B
LocalService => 16947276 B
NetworkService => 16947276 B
Milan => 62677415 B

RecycleBin => 0 B
EmptyTemp: => 1.1 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 22:14:25 ====

Plocha ma cca 4 GB, co je vela. Odporucam presunut vsetky subory a zlozky z plochy do dokumentov a na ploche nechat iba odkazy/zastupcov. Prilis velka velkost plochy moze sposobit spomalenie systemu.

Spusti kontrolu integrity systemovych suborov:

• Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
• Skopiruj a spusti prikaz:

  Kód: Vybrat vše

  DISM.exe /Online /Cleanup-image /Restorehealth

• Po dokonceni skopiruj a spusti druhy prikaz:

  Kód: Vybrat vše

  sfc /scannow

• Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:

  Kód: Vybrat vše

  findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt

• Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
• Restartuj PC a napis ako sa chova PC

Zdravím, PC se zatím chová korektně. Připojuji archiv se soubory sfcdetails.txt a dism.txt

Vyzera to OK. S PC uz teda nie su problemy?

Este zopar tipov:

V Chrome su nainstalovane az 3 blokovace reklam (uBlock Origin, AdBlock, AdBlock Plus). Z logu nie je jasne, ci su zapnute/povolene vsetky naraz, ale ak ano, tak odporucam ponechat zapnuty len jeden z nich a ostatne zakazat alebo odinstalovat. Je zbytocnost mat zapnute vsetky, len by to spomalovalo prehliadac. Osobne mozem odporucit uBlock Origin.

V PC su nainstalovane ovladace NVIDIA verzie 388.73, co je verzia stara cca 3 roky. Odporucam skontrolovat, ci nie je dostupna nova verzia ovladacov pre danu graficku kartu na https://nvidia.com/drivers

Děkuji za pomoc a doporučení. Ovladače jsem aktualizoval, plochu zredukoval. PC se chová zatím dobře.

Tak este upraceme po pouzitych nastrojoch:

• Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
• Uloz na plochu a spusti
• Nechaj oznacenu moznost "Remove disinfection tools"
• Klikni na "Run"