preventivna kontrola
Napsal: 01 črc 2020 09:34
dobry den,
prosim o kontrolu, pripadne precistenie po dlhsej dobe, notebook sa dlhsie vypina.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-06-2020
Ran by Michal (administrator) on MICHAL-MSICX640 (MICRO-STAR INTERNATIONAL CO.,LTD MS-16Y1) (01-07-2020 10:14:49)
Running from C:\Users\Michal\Desktop
Loaded Profiles: Michal & postgres
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Alcor Micro Corp.) [File not signed] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\aswEngSrv.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\aswidsagent.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe <2>
(Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(Hold'em Manager) [File not signed] C:\Hry\Poker\Holdem Manager\HMImport.exe
(Hold'em Manager) [File not signed] C:\Hry\Poker\Holdem Manager\HoldemManager.exe
(Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\system32\hkcmd.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\system32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nitro PDF Software -> Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\PVDAgent.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\PVDesktop.exe
(PEGATRON CORPORATION -> Pegatron Corporation) C:\Program Files (x86)\PHotkey\MsOsd.exe
(PEGATRON CORPORATION -> Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(PostgreSQL Global Development Group) [File not signed] C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe
(PostgreSQL Global Development Group) [File not signed] C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe <8>
(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe <5>
(SRS Labs, Inc -> SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Xiaomi Technology Inc -> ) C:\Users\Michal\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\windows\KHALMNPR.EXE [134160 2007-11-29] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant Systems, Inc. -> Conexant systems, Inc.)
HKLM\...\Run: [fspuip] => C:\Program Files\FSP\fspuip.exe [4055552 2010-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Sentelic Corporation)
HKLM\...\Run: [AmIcoSinglun64] => c:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [374784 2013-04-19] (Alcor Micro Corp.) [File not signed]
HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [155784 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-24] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [374784 2013-04-19] (Alcor Micro Corp.) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [Google Update] => C:\Users\Michal\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-21] (Google LLC -> Google LLC)
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [ShowBatteryBar] => C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2014-09-19] () [File not signed]
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [MiPhoneManager] => C:\Users\Michal\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe [157624 2016-03-11] (Xiaomi Technology Inc -> )
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91683688 2020-06-09] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [27775672 2020-05-01] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1554982330-1077266817-2899125201-1006\...\Run: [ROC_JAN2013_TB] => "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB
HKU\S-1-5-21-1554982330-1077266817-2899125201-1006\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-1554982330-1077266817-2899125201-1006\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe" /PROMPT /CMPID=JUNE2013_HP
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [99840 2008-05-07] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\windows\system32\hpinkstsB011LM.dll [331664 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\windows\system32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\LIDIL hpzlllhn: C:\windows\system32\hpzlllhn.dll [48640 2008-05-07] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\windows\system32\pxcpmL.dll [2164480 2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2020-05-04] (Adobe Inc. -> Adobe Systems, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk [2011-07-26]
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech -> Logitech, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS PC Sound.lnk [2011-03-27]
ShortcutTarget: SRS PC Sound.lnk -> C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe (SRS Labs, Inc -> SRS Labs, Inc.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0B9CFAC4-E1CE-453A-B6A3-58555836FCD2} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {13993E40-0CA9-400A-8463-5F80503ED9D3} - System32\Tasks\{43942417-3446-4888-8CAD-70D0F5BEDA16} => C:\Program Files (x86)\Skype\\Phone\Skype.exe
Task: {1BB00C53-89EE-48ED-BEE2-4794495645A6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {3471977A-B6CE-4B0E-AD5A-DB1A620119D0} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [3361928 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {42828DF4-18D2-4F96-9DF3-A58BB1D64E22} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {46B57876-8236-4B65-8E34-3CA004325A66} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {6E920884-F6B3-4A25-A791-476F1B096996} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1642672 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D3C91C6-C3C2-4326-A6B8-3895BE85239C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001UA => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {872A96C4-2425-422D-B206-3A8E954CF1CC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {976A95D1-B2BF-4077-A537-4E4063022FF0} - System32\Tasks\{C9E031BF-BFB3-48FD-8122-25DEC7871821} => C:\windows\system32\pcalua.exe -a "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\ApplicationInstaller.exe" -d C:\Users\Michal\Desktop -c "C:\Users\Michal\Desktop\OperaMini.sis"
Task: {A724FC7A-AFB1-4F5A-8FEE-D26D7156F42C} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-05-01] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {A73EA651-FB31-4318-AB97-526ABEC47198} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001Core => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {AAF3E851-91CB-45C6-B3A2-8E2A1ED9C1FC} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1692296 2020-02-27] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {AEB2F68C-FE49-4C20-B144-52296ED79CAB} - System32\Tasks\{C085E23B-0534-45AA-A839-250FBD5C15C6} => "C:\Program Files\Internet Explorer\iexplore.exe" hxxp://ui.skype.com/ui/0/6.18.0.106/sk/abandoninstall?page=tsMain
Task: {B7DC0A53-90AF-4050-A9AE-C462E0C22AC3} - System32\Tasks\AutoKMS => C:\windows\AutoKMS\AutoKMS.exe
Task: {BD835664-120B-471C-958F-06638F856FDF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [23571128 2020-05-01] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {BFB4F347-E7C7-470B-91E5-99CF4A4C3BD2} - System32\Tasks\{29EEF94A-F174-4BB2-A3ED-C7E6F176827B} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" hxxp://ui.skype.com/ui/0/5.5.0.113.261/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;userlevelpresent
Task: {F7A0E6A3-B0A3-4A6C-8D94-ED12743AF178} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 05 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 06 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 05 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 06 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0A1BC192-E1C2-488C-8FDE-F180505762A4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D367C479-1275-46AB-A05D-6C077D262AD3}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://fr.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://user.centrum.sk/
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
DownloadDir: C:\Users\Michal\Desktop
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1554982330-1077266817-2899125201-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1554982330-1077266817-2899125201-1006 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Pomocník pri prihlasovaní v konte Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc -> Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc -> Google Inc.)
Toolbar: HKU\.DEFAULT -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-1554982330-1077266817-2899125201-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
Edge:
======
Edge Profile: C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default [2020-06-17]
Edge HomePage: Default -> hxxp://centrum.sk/
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 -> C:\Program Files (x86)\Veetle\plugins\npVeetle.dll [2011-07-28] (Veetle Inc. -> Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 -> C:\Program Files (x86)\Veetle\Player\npvlc.dll [2010-09-21] (Veetle Inc. -> Veetle Inc)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1554982330-1077266817-2899125201-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1554982330-1077266817-2899125201-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1554982330-1077266817-2899125201-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default [2020-07-01]
CHR Extension: (Prezentácie) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-03-01]
CHR Extension: (Dokumenty) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-03-01]
CHR Extension: (Disk Google) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-03-01]
CHR Extension: (YouTube) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-03-01]
CHR Extension: (Tabuľky) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-03-01]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-20]
CHR Extension: (HBO GO Quality Enforcer) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmjfcgbpnigcngkjgfjmaameebdhhab [2020-04-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (Gmail) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-28]
StartMenuInternet: Google Chrome - C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeFlashPlayerUpdateSvc; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2010-12-10] (PEGATRON CORPORATION -> )
R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [349544 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\aswidsagent.exe [6439872 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (Shanghai Comet Network Technology -> www.BitComet.com)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\84.0.4147.39\remoting_host.exe [73200 2020-06-08] (Google LLC -> Spoločnosť Google Inc.)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-12-10] (PEGATRON CORPORATION -> )
R2 nlsX86cc; C:\windows\SysWOW64\NLSSRV32.EXE [69640 2012-08-28] (Nitro PDF Software -> Nalpeiron Ltd.)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [267824 2007-05-04] (Nero AG -> Nero AG)
R2 postgresql-8.4; C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe [66048 2009-12-10] (PostgreSQL Global Development Group) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 androidusb; C:\windows\System32\Drivers\wsadb.sys [40808 2014-06-01] (Shenzhen Wondershare Information Technology Co., Ltd. -> Google Inc)
R0 avgArDisk; C:\windows\System32\drivers\avgArDisk.sys [37208 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgArPot; C:\windows\System32\drivers\avgArPot.sys [205952 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\windows\System32\drivers\avgbidsdriver.sys [235144 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\windows\System32\drivers\avgbidsh.sys [178824 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\windows\System32\drivers\avgbuniv.sys [61064 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgKbd; C:\windows\System32\drivers\avgKbd.sys [42840 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\windows\System32\drivers\avgMonFlt.sys [175264 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgNetHub; C:\windows\System32\drivers\avgNetHub.sys [506208 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 avgNetNd6; C:\windows\System32\DRIVERS\avgNetNd6.sys [29944 2020-06-16] (AVG Technologies CZ, s.r.o. -> AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\windows\System32\drivers\avgRdr2.sys [109336 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\windows\System32\drivers\avgRvrt.sys [84912 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\windows\System32\drivers\avgSnx.sys [851664 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\windows\System32\drivers\avgSP.sys [462656 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\windows\System32\drivers\avgStm.sys [216880 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [50464 2014-04-27] (AVG Technologies -> AVG Technologies)
R0 avgVmm; C:\windows\System32\drivers\avgVmm.sys [322328 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 dg_ssudbus; C:\windows\System32\DRIVERS\ssudbus.sys [103064 2013-04-03] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 dtlitescsibus; C:\windows\System32\DRIVERS\dtlitescsibus.sys [30264 2018-06-22] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\windows\System32\DRIVERS\dtliteusbbus.sys [47672 2018-06-22] (Disc Soft Ltd -> Disc Soft Ltd)
S3 FARMNTIO; c:\windows\system32\drivers\farmntio.sys [24152 2010-06-03] (Farstone Technology Inc -> )
R3 fspad_wlh64; C:\windows\System32\DRIVERS\fspad_wlh64.sys [68608 2010-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Sentelic Corporation)
R0 iaStorF; C:\windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-24] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
S3 nmwcd; C:\windows\System32\drivers\ccdcmbx64.sys [19968 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\windows\System32\drivers\ccdcmbox64.sys [27136 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 nusb3hub; C:\windows\System32\DRIVERS\nusb3hub.sys [78848 2010-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R3 nusb3xhc; C:\windows\System32\DRIVERS\nusb3xhc.sys [180224 2010-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
S3 pccsmcfd; C:\windows\System32\DRIVERS\pccsmcfdx64.sys [26112 2012-10-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2010-12-10] (PEGATRON CORPORATION -> PEGATRON)
R0 sptd; C:\windows\System32\Drivers\sptd.sys [394296 2018-12-20] (Disc Soft Ltd -> Duplex Secure Ltd.)
S3 ssudmdm; C:\windows\System32\DRIVERS\ssudmdm.sys [203672 2013-04-03] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudserd; C:\windows\System32\DRIVERS\ssudserd.sys [203672 2013-04-03] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 upperdev; C:\windows\System32\DRIVERS\usbser_lowerfltx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 UsbserFilt; C:\windows\System32\DRIVERS\usbser_lowerfltjx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 ALSysIO; \??\C:\Users\Michal\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 DUMeterDrv; \??\C:\Program Files (x86)\DU Meter\DUMETR64.SYS [X]
S3 MGHwCtrl; \??\c:\Utility\Silent\MGHwCtrl.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-01 10:14 - 2020-07-01 10:19 - 000033689 _____ C:\Users\Michal\Desktop\FRST.txt
2020-07-01 10:14 - 2020-07-01 10:17 - 000000000 ____D C:\FRST
2020-07-01 10:12 - 2020-07-01 10:12 - 002291712 _____ (Farbar) C:\Users\Michal\Desktop\FRST64.exe
2020-06-24 23:31 - 2020-06-24 23:32 - 000280296 _____ C:\windows\Minidump\062420-24679-01.dmp
2020-06-17 19:38 - 2020-06-17 19:39 - 000000000 ____D C:\Users\Michal\Desktop\Marcella
2020-06-16 20:42 - 2020-06-16 20:42 - 000192067 _____ C:\Users\Michal\Desktop\Zoznam zakázaných webových sídiel k 25.05.2020.pdf
2020-06-16 11:11 - 2020-06-16 11:11 - 000053616 _____ () C:\windows\system32\Drivers\staport.sys
2020-06-16 10:59 - 2020-06-16 10:55 - 000506208 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgNetHub.sys
2020-06-16 10:59 - 2020-06-16 10:55 - 000336520 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\avgBoot.exe
2020-06-16 10:59 - 2020-06-16 10:55 - 000216880 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgStm.sys
2020-06-16 10:59 - 2020-06-16 10:55 - 000175264 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgMonFlt.sys
2020-06-16 10:55 - 2020-06-16 10:55 - 000029944 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgNetNd6.sys
2020-06-12 12:51 - 2020-06-13 00:54 - 000000000 ____D C:\Users\Michal\AppData\Roaming\SimpleNash
2020-06-12 12:51 - 2020-06-12 12:51 - 000001005 _____ C:\Users\Public\Desktop\SimpleNash.lnk
2020-06-12 12:51 - 2020-06-12 12:51 - 000001005 _____ C:\ProgramData\Desktop\SimpleNash.lnk
2020-06-12 12:51 - 2020-06-12 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimpleNash
2020-06-12 12:51 - 2020-06-12 12:51 - 000000000 ____D C:\Program Files (x86)\SimpleNash
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-01 10:19 - 2017-05-06 21:08 - 132787017 _____ C:\blitzerr.txt
2020-07-01 10:05 - 2018-09-01 13:47 - 000000000 ____D C:\windows\system32\Tasks\AVAST Software
2020-07-01 10:04 - 2020-05-14 13:32 - 000004436 _____ C:\windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-07-01 10:04 - 2020-01-31 00:05 - 000003476 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-07-01 10:04 - 2020-01-31 00:05 - 000003348 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-07-01 10:04 - 2018-08-09 23:51 - 000004324 _____ C:\windows\system32\Tasks\Adobe Flash Player Updater
2020-07-01 10:04 - 2017-12-14 11:25 - 000003756 _____ C:\windows\system32\Tasks\AutoKMS
2020-07-01 10:04 - 2017-11-13 11:47 - 000003870 _____ C:\windows\system32\Tasks\CCleaner Update
2020-07-01 10:04 - 2017-04-03 20:31 - 000004174 _____ C:\windows\system32\Tasks\Antivirus Emergency Update
2020-07-01 10:04 - 2014-12-26 21:45 - 000004476 _____ C:\windows\system32\Tasks\Adobe Acrobat Update Task
2020-07-01 10:04 - 2014-08-15 09:53 - 000003068 _____ C:\windows\system32\Tasks\{C085E23B-0534-45AA-A839-250FBD5C15C6}
2020-07-01 10:04 - 2014-05-09 22:37 - 000002774 _____ C:\windows\system32\Tasks\CCleanerSkipUAC
2020-07-01 10:04 - 2011-12-29 20:30 - 000003294 _____ C:\windows\system32\Tasks\{C9E031BF-BFB3-48FD-8122-25DEC7871821}
2020-07-01 10:04 - 2011-08-21 10:39 - 000003288 _____ C:\windows\system32\Tasks\{29EEF94A-F174-4BB2-A3ED-C7E6F176827B}
2020-07-01 10:04 - 2011-07-28 11:47 - 000003552 _____ C:\windows\system32\Tasks\CreateChoiceProcessTask
2020-07-01 10:04 - 2011-07-26 22:57 - 000003552 _____ C:\windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001UA
2020-07-01 10:04 - 2011-07-26 22:57 - 000003280 _____ C:\windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001Core
2020-07-01 10:04 - 2011-07-26 22:54 - 000003372 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-07-01 10:04 - 2011-07-26 22:54 - 000003244 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-07-01 10:04 - 2011-07-26 18:35 - 000002878 _____ C:\windows\system32\Tasks\{43942417-3446-4888-8CAD-70D0F5BEDA16}
2020-07-01 09:46 - 2015-12-15 12:26 - 000000000 ____D C:\ProgramData\Avg
2020-07-01 09:45 - 2014-01-28 17:34 - 000029437 _____ C:\Users\Michal\Desktop\ppm hadzana.xlsx
2020-07-01 09:39 - 2009-07-14 06:45 - 000009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-07-01 09:39 - 2009-07-14 06:45 - 000009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-07-01 09:27 - 2009-07-14 07:08 - 000000006 ____H C:\windows\Tasks\SA.DAT
2020-06-28 07:06 - 2011-03-27 08:35 - 000000000 ____D C:\windows\SysWOW64\Macromed
2020-06-28 06:56 - 2009-07-14 07:08 - 000032546 _____ C:\windows\Tasks\SCHEDLGU.TXT
2020-06-26 23:39 - 2011-07-28 21:19 - 000000000 ____D C:\Users\Michal\AppData\Local\PokerStars.EU
2020-06-26 10:12 - 2020-01-31 00:08 - 000002199 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-06-24 23:45 - 2016-08-03 10:32 - 000000000 ____D C:\windows\Minidump
2020-06-24 06:49 - 2011-07-29 10:46 - 000000000 ____D C:\Users\postgres
2020-06-23 18:25 - 2011-07-26 22:59 - 000002457 _____ C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-21 20:23 - 2011-07-27 15:53 - 000000000 ____D C:\Users\Michal\AppData\Roaming\BitComet
2020-06-19 07:32 - 2011-07-26 22:54 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-16 11:11 - 2017-04-03 20:31 - 000462656 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSP.sys
2020-06-16 11:11 - 2017-04-03 20:31 - 000322328 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgVmm.sys
2020-06-16 11:06 - 2009-07-14 05:20 - 000000000 ____D C:\windows\inf
2020-06-16 10:55 - 2019-01-05 13:06 - 000037208 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArDisk.sys
2020-06-16 10:55 - 2018-10-20 13:24 - 000042840 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgKbd.sys
2020-06-16 10:55 - 2017-11-27 11:17 - 000205952 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArPot.sys
2020-06-16 10:55 - 2017-04-03 20:31 - 000851664 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSnx.sys
2020-06-16 10:55 - 2017-04-03 20:31 - 000109336 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRdr2.sys
2020-06-16 10:55 - 2017-04-03 20:31 - 000084912 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRvrt.sys
2020-06-16 10:54 - 2019-01-14 22:25 - 000235144 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsdriver.sys
2020-06-16 10:54 - 2019-01-05 13:06 - 000178824 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsh.sys
2020-06-16 10:54 - 2019-01-05 13:06 - 000061064 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbuniv.sys
2020-06-16 10:51 - 2018-08-03 13:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-06-15 19:31 - 2011-08-01 17:41 - 000000000 ____D C:\Users\Michal\AppData\Local\ElevatedDiagnostics
2020-06-14 21:56 - 2019-03-01 20:41 - 000000000 ____D C:\Users\Michal\AppData\Local\CrashDumps
2020-06-13 00:07 - 2011-07-27 18:22 - 000000000 ____D C:\Users\Michal\Desktop\Filmy stiahnuť
2020-06-10 22:05 - 2014-05-04 11:41 - 000000000 ____D C:\Users\Michal\AppData\Local\Equilab
2020-06-09 19:28 - 2012-03-30 11:57 - 000842296 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerApp.exe
2020-06-09 19:28 - 2011-07-28 23:14 - 000175160 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-09 19:27 - 2011-11-11 20:32 - 000000000 ____D C:\windows\system32\Macromed
2020-06-03 20:56 - 2017-11-17 16:04 - 000002029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Files in the root of some directories ========
2011-07-29 10:02 - 2011-07-29 10:07 - 000000173 _____ () C:\Users\Michal\AppData\Local\msmathematics.qat.Michal
2016-08-05 17:54 - 2016-08-05 17:54 - 000007625 _____ () C:\Users\Michal\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2020-06-26 15:26
==================== End of FRST.txt ========================
prosim o kontrolu, pripadne precistenie po dlhsej dobe, notebook sa dlhsie vypina.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-06-2020
Ran by Michal (administrator) on MICHAL-MSICX640 (MICRO-STAR INTERNATIONAL CO.,LTD MS-16Y1) (01-07-2020 10:14:49)
Running from C:\Users\Michal\Desktop
Loaded Profiles: Michal & postgres
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Alcor Micro Corp.) [File not signed] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\aswEngSrv.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\aswidsagent.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe <2>
(Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(Hold'em Manager) [File not signed] C:\Hry\Poker\Holdem Manager\HMImport.exe
(Hold'em Manager) [File not signed] C:\Hry\Poker\Holdem Manager\HoldemManager.exe
(Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\system32\hkcmd.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\system32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
(Logitech -> Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nitro PDF Software -> Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\PVDAgent.exe
(PEGATRON CORPORATION -> ) C:\Program Files (x86)\PHotkey\PVDesktop.exe
(PEGATRON CORPORATION -> Pegatron Corporation) C:\Program Files (x86)\PHotkey\MsOsd.exe
(PEGATRON CORPORATION -> Pegatron Corporation) C:\Program Files (x86)\PHotkey\PHotkey.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(PostgreSQL Global Development Group) [File not signed] C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe
(PostgreSQL Global Development Group) [File not signed] C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe <8>
(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe <5>
(SRS Labs, Inc -> SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Xiaomi Technology Inc -> ) C:\Users\Michal\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\windows\KHALMNPR.EXE [134160 2007-11-29] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant Systems, Inc. -> Conexant systems, Inc.)
HKLM\...\Run: [fspuip] => C:\Program Files\FSP\fspuip.exe [4055552 2010-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Sentelic Corporation)
HKLM\...\Run: [AmIcoSinglun64] => c:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [374784 2013-04-19] (Alcor Micro Corp.) [File not signed]
HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [155784 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-24] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [374784 2013-04-19] (Alcor Micro Corp.) [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [Google Update] => C:\Users\Michal\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-21] (Google LLC -> Google LLC)
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [ShowBatteryBar] => C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2014-09-19] () [File not signed]
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [MiPhoneManager] => C:\Users\Michal\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe [157624 2016-03-11] (Xiaomi Technology Inc -> )
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91683688 2020-06-09] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [27775672 2020-05-01] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1554982330-1077266817-2899125201-1006\...\Run: [ROC_JAN2013_TB] => "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB
HKU\S-1-5-21-1554982330-1077266817-2899125201-1006\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-1554982330-1077266817-2899125201-1006\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe" /PROMPT /CMPID=JUNE2013_HP
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [99840 2008-05-07] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\windows\system32\hpinkstsB011LM.dll [331664 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\windows\system32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\LIDIL hpzlllhn: C:\windows\system32\hpzlllhn.dll [48640 2008-05-07] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\windows\system32\pxcpmL.dll [2164480 2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2020-05-04] (Adobe Inc. -> Adobe Systems, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk [2011-07-26]
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech -> Logitech, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS PC Sound.lnk [2011-03-27]
ShortcutTarget: SRS PC Sound.lnk -> C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe (SRS Labs, Inc -> SRS Labs, Inc.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0B9CFAC4-E1CE-453A-B6A3-58555836FCD2} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {13993E40-0CA9-400A-8463-5F80503ED9D3} - System32\Tasks\{43942417-3446-4888-8CAD-70D0F5BEDA16} => C:\Program Files (x86)\Skype\\Phone\Skype.exe
Task: {1BB00C53-89EE-48ED-BEE2-4794495645A6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {3471977A-B6CE-4B0E-AD5A-DB1A620119D0} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [3361928 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {42828DF4-18D2-4F96-9DF3-A58BB1D64E22} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {46B57876-8236-4B65-8E34-3CA004325A66} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {6E920884-F6B3-4A25-A791-476F1B096996} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1642672 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D3C91C6-C3C2-4326-A6B8-3895BE85239C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001UA => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {872A96C4-2425-422D-B206-3A8E954CF1CC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {976A95D1-B2BF-4077-A537-4E4063022FF0} - System32\Tasks\{C9E031BF-BFB3-48FD-8122-25DEC7871821} => C:\windows\system32\pcalua.exe -a "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\ApplicationInstaller.exe" -d C:\Users\Michal\Desktop -c "C:\Users\Michal\Desktop\OperaMini.sis"
Task: {A724FC7A-AFB1-4F5A-8FEE-D26D7156F42C} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-05-01] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {A73EA651-FB31-4318-AB97-526ABEC47198} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001Core => C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {AAF3E851-91CB-45C6-B3A2-8E2A1ED9C1FC} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1692296 2020-02-27] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {AEB2F68C-FE49-4C20-B144-52296ED79CAB} - System32\Tasks\{C085E23B-0534-45AA-A839-250FBD5C15C6} => "C:\Program Files\Internet Explorer\iexplore.exe" hxxp://ui.skype.com/ui/0/6.18.0.106/sk/abandoninstall?page=tsMain
Task: {B7DC0A53-90AF-4050-A9AE-C462E0C22AC3} - System32\Tasks\AutoKMS => C:\windows\AutoKMS\AutoKMS.exe
Task: {BD835664-120B-471C-958F-06638F856FDF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [23571128 2020-05-01] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {BFB4F347-E7C7-470B-91E5-99CF4A4C3BD2} - System32\Tasks\{29EEF94A-F174-4BB2-A3ED-C7E6F176827B} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" hxxp://ui.skype.com/ui/0/5.5.0.113.261/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;userlevelpresent
Task: {F7A0E6A3-B0A3-4A6C-8D94-ED12743AF178} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 05 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 06 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 05 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 06 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0A1BC192-E1C2-488C-8FDE-F180505762A4}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D367C479-1275-46AB-A05D-6C077D262AD3}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://fr.msn.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://user.centrum.sk/
HKU\S-1-5-21-1554982330-1077266817-2899125201-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
DownloadDir: C:\Users\Michal\Desktop
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1554982330-1077266817-2899125201-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1554982330-1077266817-2899125201-1006 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Pomocník pri prihlasovaní v konte Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc -> Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc -> Google Inc.)
Toolbar: HKU\.DEFAULT -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-1554982330-1077266817-2899125201-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc -> Google Inc.)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
Edge:
======
Edge Profile: C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default [2020-06-17]
Edge HomePage: Default -> hxxp://centrum.sk/
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-04-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 -> C:\Program Files (x86)\Veetle\plugins\npVeetle.dll [2011-07-28] (Veetle Inc. -> Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 -> C:\Program Files (x86)\Veetle\Player\npvlc.dll [2010-09-21] (Veetle Inc. -> Veetle Inc)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1554982330-1077266817-2899125201-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1554982330-1077266817-2899125201-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1554982330-1077266817-2899125201-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2018-07-25] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default [2020-07-01]
CHR Extension: (Prezentácie) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-03-01]
CHR Extension: (Dokumenty) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-03-01]
CHR Extension: (Disk Google) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-03-01]
CHR Extension: (YouTube) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-03-01]
CHR Extension: (Tabuľky) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-03-01]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-20]
CHR Extension: (HBO GO Quality Enforcer) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmjfcgbpnigcngkjgfjmaameebdhhab [2020-04-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (Gmail) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-28]
StartMenuInternet: Google Chrome - C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeFlashPlayerUpdateSvc; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2010-12-10] (PEGATRON CORPORATION -> )
R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [349544 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\aswidsagent.exe [6439872 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (Shanghai Comet Network Technology -> www.BitComet.com)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\84.0.4147.39\remoting_host.exe [73200 2020-06-08] (Google LLC -> Spoločnosť Google Inc.)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-12-10] (PEGATRON CORPORATION -> )
R2 nlsX86cc; C:\windows\SysWOW64\NLSSRV32.EXE [69640 2012-08-28] (Nitro PDF Software -> Nalpeiron Ltd.)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [267824 2007-05-04] (Nero AG -> Nero AG)
R2 postgresql-8.4; C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe [66048 2009-12-10] (PostgreSQL Global Development Group) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 androidusb; C:\windows\System32\Drivers\wsadb.sys [40808 2014-06-01] (Shenzhen Wondershare Information Technology Co., Ltd. -> Google Inc)
R0 avgArDisk; C:\windows\System32\drivers\avgArDisk.sys [37208 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgArPot; C:\windows\System32\drivers\avgArPot.sys [205952 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\windows\System32\drivers\avgbidsdriver.sys [235144 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\windows\System32\drivers\avgbidsh.sys [178824 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\windows\System32\drivers\avgbuniv.sys [61064 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgKbd; C:\windows\System32\drivers\avgKbd.sys [42840 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\windows\System32\drivers\avgMonFlt.sys [175264 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgNetHub; C:\windows\System32\drivers\avgNetHub.sys [506208 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 avgNetNd6; C:\windows\System32\DRIVERS\avgNetNd6.sys [29944 2020-06-16] (AVG Technologies CZ, s.r.o. -> AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\windows\System32\drivers\avgRdr2.sys [109336 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\windows\System32\drivers\avgRvrt.sys [84912 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\windows\System32\drivers\avgSnx.sys [851664 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\windows\System32\drivers\avgSP.sys [462656 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\windows\System32\drivers\avgStm.sys [216880 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [50464 2014-04-27] (AVG Technologies -> AVG Technologies)
R0 avgVmm; C:\windows\System32\drivers\avgVmm.sys [322328 2020-06-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 dg_ssudbus; C:\windows\System32\DRIVERS\ssudbus.sys [103064 2013-04-03] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 dtlitescsibus; C:\windows\System32\DRIVERS\dtlitescsibus.sys [30264 2018-06-22] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\windows\System32\DRIVERS\dtliteusbbus.sys [47672 2018-06-22] (Disc Soft Ltd -> Disc Soft Ltd)
S3 FARMNTIO; c:\windows\system32\drivers\farmntio.sys [24152 2010-06-03] (Farstone Technology Inc -> )
R3 fspad_wlh64; C:\windows\System32\DRIVERS\fspad_wlh64.sys [68608 2010-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Sentelic Corporation)
R0 iaStorF; C:\windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-24] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
S3 nmwcd; C:\windows\System32\drivers\ccdcmbx64.sys [19968 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\windows\System32\drivers\ccdcmbox64.sys [27136 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 nusb3hub; C:\windows\System32\DRIVERS\nusb3hub.sys [78848 2010-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R3 nusb3xhc; C:\windows\System32\DRIVERS\nusb3xhc.sys [180224 2010-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
S3 pccsmcfd; C:\windows\System32\DRIVERS\pccsmcfdx64.sys [26112 2012-10-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2010-12-10] (PEGATRON CORPORATION -> PEGATRON)
R0 sptd; C:\windows\System32\Drivers\sptd.sys [394296 2018-12-20] (Disc Soft Ltd -> Duplex Secure Ltd.)
S3 ssudmdm; C:\windows\System32\DRIVERS\ssudmdm.sys [203672 2013-04-03] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudserd; C:\windows\System32\DRIVERS\ssudserd.sys [203672 2013-04-03] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 upperdev; C:\windows\System32\DRIVERS\usbser_lowerfltx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 UsbserFilt; C:\windows\System32\DRIVERS\usbser_lowerfltjx64.sys [9216 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 ALSysIO; \??\C:\Users\Michal\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 DUMeterDrv; \??\C:\Program Files (x86)\DU Meter\DUMETR64.SYS [X]
S3 MGHwCtrl; \??\c:\Utility\Silent\MGHwCtrl.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-01 10:14 - 2020-07-01 10:19 - 000033689 _____ C:\Users\Michal\Desktop\FRST.txt
2020-07-01 10:14 - 2020-07-01 10:17 - 000000000 ____D C:\FRST
2020-07-01 10:12 - 2020-07-01 10:12 - 002291712 _____ (Farbar) C:\Users\Michal\Desktop\FRST64.exe
2020-06-24 23:31 - 2020-06-24 23:32 - 000280296 _____ C:\windows\Minidump\062420-24679-01.dmp
2020-06-17 19:38 - 2020-06-17 19:39 - 000000000 ____D C:\Users\Michal\Desktop\Marcella
2020-06-16 20:42 - 2020-06-16 20:42 - 000192067 _____ C:\Users\Michal\Desktop\Zoznam zakázaných webových sídiel k 25.05.2020.pdf
2020-06-16 11:11 - 2020-06-16 11:11 - 000053616 _____ () C:\windows\system32\Drivers\staport.sys
2020-06-16 10:59 - 2020-06-16 10:55 - 000506208 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgNetHub.sys
2020-06-16 10:59 - 2020-06-16 10:55 - 000336520 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\avgBoot.exe
2020-06-16 10:59 - 2020-06-16 10:55 - 000216880 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgStm.sys
2020-06-16 10:59 - 2020-06-16 10:55 - 000175264 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgMonFlt.sys
2020-06-16 10:55 - 2020-06-16 10:55 - 000029944 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgNetNd6.sys
2020-06-12 12:51 - 2020-06-13 00:54 - 000000000 ____D C:\Users\Michal\AppData\Roaming\SimpleNash
2020-06-12 12:51 - 2020-06-12 12:51 - 000001005 _____ C:\Users\Public\Desktop\SimpleNash.lnk
2020-06-12 12:51 - 2020-06-12 12:51 - 000001005 _____ C:\ProgramData\Desktop\SimpleNash.lnk
2020-06-12 12:51 - 2020-06-12 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimpleNash
2020-06-12 12:51 - 2020-06-12 12:51 - 000000000 ____D C:\Program Files (x86)\SimpleNash
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-01 10:19 - 2017-05-06 21:08 - 132787017 _____ C:\blitzerr.txt
2020-07-01 10:05 - 2018-09-01 13:47 - 000000000 ____D C:\windows\system32\Tasks\AVAST Software
2020-07-01 10:04 - 2020-05-14 13:32 - 000004436 _____ C:\windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-07-01 10:04 - 2020-01-31 00:05 - 000003476 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-07-01 10:04 - 2020-01-31 00:05 - 000003348 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-07-01 10:04 - 2018-08-09 23:51 - 000004324 _____ C:\windows\system32\Tasks\Adobe Flash Player Updater
2020-07-01 10:04 - 2017-12-14 11:25 - 000003756 _____ C:\windows\system32\Tasks\AutoKMS
2020-07-01 10:04 - 2017-11-13 11:47 - 000003870 _____ C:\windows\system32\Tasks\CCleaner Update
2020-07-01 10:04 - 2017-04-03 20:31 - 000004174 _____ C:\windows\system32\Tasks\Antivirus Emergency Update
2020-07-01 10:04 - 2014-12-26 21:45 - 000004476 _____ C:\windows\system32\Tasks\Adobe Acrobat Update Task
2020-07-01 10:04 - 2014-08-15 09:53 - 000003068 _____ C:\windows\system32\Tasks\{C085E23B-0534-45AA-A839-250FBD5C15C6}
2020-07-01 10:04 - 2014-05-09 22:37 - 000002774 _____ C:\windows\system32\Tasks\CCleanerSkipUAC
2020-07-01 10:04 - 2011-12-29 20:30 - 000003294 _____ C:\windows\system32\Tasks\{C9E031BF-BFB3-48FD-8122-25DEC7871821}
2020-07-01 10:04 - 2011-08-21 10:39 - 000003288 _____ C:\windows\system32\Tasks\{29EEF94A-F174-4BB2-A3ED-C7E6F176827B}
2020-07-01 10:04 - 2011-07-28 11:47 - 000003552 _____ C:\windows\system32\Tasks\CreateChoiceProcessTask
2020-07-01 10:04 - 2011-07-26 22:57 - 000003552 _____ C:\windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001UA
2020-07-01 10:04 - 2011-07-26 22:57 - 000003280 _____ C:\windows\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-1554982330-1077266817-2899125201-1001Core
2020-07-01 10:04 - 2011-07-26 22:54 - 000003372 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-07-01 10:04 - 2011-07-26 22:54 - 000003244 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-07-01 10:04 - 2011-07-26 18:35 - 000002878 _____ C:\windows\system32\Tasks\{43942417-3446-4888-8CAD-70D0F5BEDA16}
2020-07-01 09:46 - 2015-12-15 12:26 - 000000000 ____D C:\ProgramData\Avg
2020-07-01 09:45 - 2014-01-28 17:34 - 000029437 _____ C:\Users\Michal\Desktop\ppm hadzana.xlsx
2020-07-01 09:39 - 2009-07-14 06:45 - 000009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-07-01 09:39 - 2009-07-14 06:45 - 000009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-07-01 09:27 - 2009-07-14 07:08 - 000000006 ____H C:\windows\Tasks\SA.DAT
2020-06-28 07:06 - 2011-03-27 08:35 - 000000000 ____D C:\windows\SysWOW64\Macromed
2020-06-28 06:56 - 2009-07-14 07:08 - 000032546 _____ C:\windows\Tasks\SCHEDLGU.TXT
2020-06-26 23:39 - 2011-07-28 21:19 - 000000000 ____D C:\Users\Michal\AppData\Local\PokerStars.EU
2020-06-26 10:12 - 2020-01-31 00:08 - 000002199 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-06-24 23:45 - 2016-08-03 10:32 - 000000000 ____D C:\windows\Minidump
2020-06-24 06:49 - 2011-07-29 10:46 - 000000000 ____D C:\Users\postgres
2020-06-23 18:25 - 2011-07-26 22:59 - 000002457 _____ C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-21 20:23 - 2011-07-27 15:53 - 000000000 ____D C:\Users\Michal\AppData\Roaming\BitComet
2020-06-19 07:32 - 2011-07-26 22:54 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-16 11:11 - 2017-04-03 20:31 - 000462656 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSP.sys
2020-06-16 11:11 - 2017-04-03 20:31 - 000322328 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgVmm.sys
2020-06-16 11:06 - 2009-07-14 05:20 - 000000000 ____D C:\windows\inf
2020-06-16 10:55 - 2019-01-05 13:06 - 000037208 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArDisk.sys
2020-06-16 10:55 - 2018-10-20 13:24 - 000042840 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgKbd.sys
2020-06-16 10:55 - 2017-11-27 11:17 - 000205952 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgArPot.sys
2020-06-16 10:55 - 2017-04-03 20:31 - 000851664 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgSnx.sys
2020-06-16 10:55 - 2017-04-03 20:31 - 000109336 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRdr2.sys
2020-06-16 10:55 - 2017-04-03 20:31 - 000084912 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgRvrt.sys
2020-06-16 10:54 - 2019-01-14 22:25 - 000235144 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsdriver.sys
2020-06-16 10:54 - 2019-01-05 13:06 - 000178824 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbidsh.sys
2020-06-16 10:54 - 2019-01-05 13:06 - 000061064 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgbuniv.sys
2020-06-16 10:51 - 2018-08-03 13:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-06-15 19:31 - 2011-08-01 17:41 - 000000000 ____D C:\Users\Michal\AppData\Local\ElevatedDiagnostics
2020-06-14 21:56 - 2019-03-01 20:41 - 000000000 ____D C:\Users\Michal\AppData\Local\CrashDumps
2020-06-13 00:07 - 2011-07-27 18:22 - 000000000 ____D C:\Users\Michal\Desktop\Filmy stiahnuť
2020-06-10 22:05 - 2014-05-04 11:41 - 000000000 ____D C:\Users\Michal\AppData\Local\Equilab
2020-06-09 19:28 - 2012-03-30 11:57 - 000842296 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerApp.exe
2020-06-09 19:28 - 2011-07-28 23:14 - 000175160 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-09 19:27 - 2011-11-11 20:32 - 000000000 ____D C:\windows\system32\Macromed
2020-06-03 20:56 - 2017-11-17 16:04 - 000002029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Files in the root of some directories ========
2011-07-29 10:02 - 2011-07-29 10:07 - 000000173 _____ () C:\Users\Michal\AppData\Local\msmathematics.qat.Michal
2016-08-05 17:54 - 2016-08-05 17:54 - 000007625 _____ () C:\Users\Michal\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2020-06-26 15:26
==================== End of FRST.txt ========================
