Zdravím, nakazil se mi pc nějakým svinstvem a při startu chrome se mi spolu s domovskou stránkou spustí i mail.ru stránka.... Děkuji všem, co mi pomůžou..

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:03:56, on 18.04.2019
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17763.0001)
Boot mode: Normal

Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Users\danie\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus15.msn.com/?pc=ASTE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\danie\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Spotify] C:\Users\danie\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Intel® SGX AESM (AESMService) - Intel Corporation - C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_10d045798a3d667e\aesm_service.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHDCPSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @oem8.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Intel Corporation - C:\Windows\SysWOW64\esif_uf.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\Windows\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10562 bytes

Dobry den.

:arrow: Stiahnite si na plochu nastroj AdwCleaner, link. na stiahnutie tu: https://toolslib.net/downloads/finish/1/
Pred spustenim nastroja povypinajte vsetke beziace okna programov, to su vsetke beziace programy pod desktopom.
Kliknite pravym tlacidlom mysi na program -> spustit ako Administrator.
Pokracujte kliknutim na tlacidlo Prehladaj teraz (Scan now) a pockajte, kym sa system doskenuje.
Po skene nechajte oznacene vsetky chlieviky, pripadne najdene hrozieby a pokracujte v dolnom pravom rohu tlacidlom Vycistit Teraz (Clean and Repair).
Po restartovani PC sa spusti nastroj AdwCleaner, kliknite na Zobrazit soubor protokolu.
Spusti sa log, jeho obsah skopirujte sem.

Tady je. Odstranil jsem a při startu chrome mail.ru pořád vyskakuje

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-04-18.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-18-2019
# Duration: 00:00:02
# OS: Windows 10 Home
# Cleaned: 2
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Reimage

***** [ Chromium (and derivatives) ] *****

Deleted imgur Community Extension

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1288 octets] - [18/04/2019 19:26:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Dobre,

Preskenujte pocitac s FRST - navod tu: https://forum.viry.cz/viewtopic.php?f=24&t=132509, skopirujte FRST.log + Addition log sem.

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.04.2019
Ran by danie (18-04-2019 19:52:18)
Running from C:\Users\danie\Desktop
Windows 10 Home Version 1809 17763.437 (X64) (2019-01-01 14:06:03)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2385076699-1764380514-3664276952-500 - Administrator - Disabled)
danie (S-1-5-21-2385076699-1764380514-3664276952-1001 - Administrator - Enabled) => C:\Users\danie
DefaultAccount (S-1-5-21-2385076699-1764380514-3664276952-503 - Limited - Disabled)
Guest (S-1-5-21-2385076699-1764380514-3664276952-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2385076699-1764380514-3664276952-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\uTorrent) (Version: 3.5.5.45146 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\uTorrent) (Version: 3.5.5.45146 - BitTorrent Inc.)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.156 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.12 - ASUS)
Balíček ovladače systému Windows - ASUS (AsusSGDrv) Mouse (10/06/2015 8.0.0.23) (HKLM\...\DA2E0A005E6CD7900733D89DA6D9F31585E338DF) (Version: 10/06/2015 8.0.0.23 - ASUS)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.56 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 73.0.3683.103 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\HearthstoneDeckTracker) (Version: 1.8.6 - HearthSim)
Hearthstone Deck Tracker (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\HearthstoneDeckTracker) (Version: 1.8.6 - HearthSim)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4550 - Intel Corporation)
iTunes (HKLM\...\{8C125166-94A1-4721-84CC-C9739E6EA8A7}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Kenshi (HKLM-x32\...\1193046833_is1) (Version: 1.0.12 - GOG.com)
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Malwarebytes verze 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Mendeley Desktop 1.19.4 (HKLM-x32\...\Mendeley Desktop) (Version: 1.19.4 - Mendeley Ltd.)
Microsoft Office 365 ProPlus - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.10730.20334 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\OneDriveSetup.exe) (Version: 19.033.0218.0011 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\OneDriveSetup.exe) (Version: 19.033.0218.0011 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM-x32\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation)
Minecraft1.12.2 (HKLM-x32\...\Minecraft1.12.2) (Version: - )
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.6.6 - Notepad++ Team)
NVIDIA Ovladače grafiky 388.57 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.57 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.10730.20334 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.10730.20334 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.10730.20334 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.10730.20334 - Microsoft Corporation) Hidden
Ovládací panel NVIDIA 388.57 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.57 - NVIDIA Corporation) Hidden
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Podpora aplikací Apple (64bitová) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31233 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7620 - Realtek Semiconductor Corp.)
Spotify (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\Spotify) (Version: 1.1.4.197.g92d52c4f - Spotify AB)
Spotify (HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\Spotify) (Version: 1.1.4.197.g92d52c4f - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2385076699-1764380514-3664276952-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6} [0000-00-00 00:00]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => D:\Notepad++\NppShell_06.dll [2019-01-27] (Notepad++ -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Rar\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Rar\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxDTCM.dll [2016-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-12-04] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Rar\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Rar\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1C0EB38A-9D98-4584-898B-261698E9B39C} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {1C3E1155-A403-4ECC-A6B9-9F5A8F7C4345} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {20F9DB51-6C05-4B5F-B058-115FE7096EE1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {3B521852-115B-43F5-973A-B337D80BEC3A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {446F80BF-DB0D-459E-9491-F79BF4B34C59} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {537CBEE1-CA1F-411E-BB9F-DB2FC9778FB0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {5862CA4A-B215-4114-9C4B-C82F3E053771} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {616E071F-012A-424B-A254-4161FF0925E5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {6EFC8BF1-84DF-4B77-9F15-08F31323407D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_156_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {785AAF82-763B-46F6-A430-094ECF8D56E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {8454F2AD-6FB8-44D4-BA46-FCAF6007D9FF} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {AAA0B08F-1797-4C79-BD57-D7C9A4B5427D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {B5F51439-DA25-4E2C-8690-D725B3259065} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {BA8BED24-FC75-41A7-8E92-DE7B19915166} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe (ASUSTeK Computer Inc. -> AsusTek)
Task: {C0C5FBAE-26A9-49DB-9698-FB3CA17F5F52} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C3DA7FFD-AEA1-45AB-A6A0-5DE430510B95} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {C963EA96-86B5-4C56-A4FF-BD4A81C905FB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {E15FB6EC-9A03-4BA2-8EDF-49E703C86764} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {E2D6E134-0867-4C8C-B753-3122E9030080} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {E6222201-F2BB-42E8-9019-59D673DE9CD2} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\danie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft\Minecraft Debugger.lnk -> C:\Users\danie\AppData\Roaming\.minecraft\minecraft launcher\Debug.bat ()

ShortcutWithArgument: C:\Users\danie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Vzdálená plocha Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp

==================== Loaded Modules (Whitelisted) ==============

2019-04-18 18:25 - 2019-03-13 09:22 - 003084800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 004571648 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000438272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 005139968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 002234880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 005010944 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 002950144 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 001181184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000124928 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000259584 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000729088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000073216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000179712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll
2019-04-18 18:25 - 2019-03-13 09:22 - 000101888 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\PrivateWidgets\widgetsplugin.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 09:31 - 2018-09-15 09:31 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192919522\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920179\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\danie\Desktop\1546977010204.jpg
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\Control Panel\Desktop\\Wallpaper -> C:\Users\danie\Desktop\1546977010204.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_1DE2210685523D121EF41F74D365AD10"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_1DE2210685523D121EF41F74D365AD10"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{42198BD7-364F-4409-9EA5-2EAB19AAB670}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{64EF7840-5353-4A38-88B8-FD2B09F57DC6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{E4074B93-0298-47BD-A3D2-325C73B2B0C4}D:\hearthstone\hearthstone.exe] => (Allow) D:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [UDP Query User{6B2D4C83-3787-4385-89C0-68B30CFF4DB2}D:\hearthstone\hearthstone.exe] => (Allow) D:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{C7A3DA45-EF95-47E3-9CB4-CCF28E3D506A}] => (Allow) C:\Users\danie\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{2CCAB22D-7CDB-4194-A020-F1ECA15ADAD9}] => (Allow) C:\Users\danie\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{C274B3D2-F1E6-4D67-8381-1AB98FD9FFD0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA4E5AD1-7185-4CC7-ABA4-CB50EFB3BD5E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A8347FCB-3935-4BC8-AD5A-625FCB72A1BC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{783DACE0-FAA4-4295-B2CF-92DE415E0833}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{58FFB532-790B-4191-AE93-6C1F3F4CFD25}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{092154DC-BC51-4B53-8306-D8268FEF55F0}] => (Allow) D:\Steam\steamapps\common\RimWorld\RimWorldWin64.exe () [File not signed]
FirewallRules: [{CEA237BF-261B-4E19-955E-7C985761AB69}] => (Allow) D:\Steam\steamapps\common\RimWorld\RimWorldWin64.exe () [File not signed]
FirewallRules: [TCP Query User{D3398BAC-7B20-423B-8BB2-1175587DEB12}C:\users\danie\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\danie\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{7685139E-3BB4-4671-BE18-45E0184D80A2}C:\users\danie\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\danie\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A6AD2400-74FA-414F-BF2A-A0BD6769B0A9}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{127E5478-3A06-407F-A710-C368928EC660}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{C2680377-1E74-477C-9EBA-D560E4546278}D:\lolko\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe] => (Allow) D:\lolko\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [UDP Query User{BCA4047F-3A93-48F5-881A-C730F753D642}D:\lolko\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe] => (Allow) D:\lolko\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [{2D9A9A3F-3AB3-44A2-9FE3-4981E939479D}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7707B198-B5D9-4E0D-AA0A-E3AE3AD0AF5D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1DCB3CFC-FD62-4704-A4FC-596F4F039D9F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B77D73D7-CEB8-4BE1-A0F9-03EB3C5E073D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{087E35D5-CAB7-4112-B148-A4AC45612CA1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{07235068-C85A-462C-AC8C-C720EF23B949}] => (Allow) D:\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{8E58B25C-6095-4063-8135-C5DF51077244}D:\lolko\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe] => (Allow) D:\lolko\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [UDP Query User{6F2B7106-BF23-4B3A-96DC-5A124865D8FF}D:\lolko\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe] => (Allow) D:\lolko\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [{E6ACDF9D-F9F9-41C7-BC04-EA84A5E9DE86}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

20-03-2019 09:08:36 Naplánovaný kontrolní bod
09-04-2019 10:35:42 Naplánovaný kontrolní bod
13-04-2019 18:02:12 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/18/2019 06:15:45 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL na řádku 1.
Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz je UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definice je UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (04/18/2019 03:26:20 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (04/17/2019 01:40:24 PM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x80070057; CorrelationId: {C5A6BDB0-1798-4E70-BE47-17DE035F9858}

Error: (04/16/2019 09:20:45 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (04/16/2019 06:39:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: chrome.exe, verze: 73.0.3683.103, časové razítko: 0x5ca43dd0
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.17763.404, časové razítko: 0x2528b630
Kód výjimky: 0xe0000008
Posun chyby: 0x0000000000039129
ID chybujícího procesu: 0x20bc
Čas spuštění chybující aplikace: 0x01d4f470d6f3bb43
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Windows\System32\KERNELBASE.dll
ID zprávy: b39fc56d-0f55-44f4-b1e5-3e4ca9c08edb
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (04/16/2019 01:57:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1812

Error: (04/16/2019 01:57:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1812

Error: (04/16/2019 01:57:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (04/18/2019 07:32:32 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscBrokerManager
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (04/18/2019 07:32:32 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.SecurityAppBroker
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (04/18/2019 07:32:02 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-7O90I50)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-7O90I50\danie (SID: S-1-5-21-2385076699-1764380514-3664276952-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (04/18/2019 07:29:31 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (04/18/2019 07:29:31 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (04/18/2019 07:28:22 PM) (Source: TPM) (EventID: 15) (User: NT AUTHORITY)
Description: V hardwaru čipu TPM (Trusted Platform Module) došlo k neobnovitelné chybě ovladače zařízení, která brání používání služeb TPM (například šifrování dat). Budete-li potřebovat další pomoc, obraťte se na výrobce počítače.

Error: (04/18/2019 07:27:46 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Malwarebytes Service se po přijetí pokynu pro vypnutí neukončila správně.

Error: (04/18/2019 07:27:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel® SGX AESM byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
===================================
Date: 2019-04-18 18:17:41.422
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {58ED47AB-ED88-47FA-B108-8734F7C51027}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Úplné prohledávání
Uživatel: DESKTOP-7O90I50\danie

Date: 2019-04-18 16:32:42.691
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {49FB9696-575C-4BC8-A9A0-FBD1F349ED6E}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-04-18 15:36:54.473
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {7365E0E2-04B0-4A78-A47B-537274F40DB3}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-04-14 16:38:22.415
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {51B667D5-4E26-4AC5-B83C-B6C95B1EE216}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-04-14 16:28:15.113
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {A1A597AE-D532-41B7-918B-91C19C4D7BA0}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2019-04-17 18:42:08.446
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.291.2050.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15800.1
Kód chyby: 0x8024402c
Popis chyby ři zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

Date: 2019-03-13 05:20:27.447
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Windows Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x80004005
Popis chyby: Nespecifikovaná chyba
Důvod: Ovladač filtru přeskočil prohledávání položek a je v režimu průchodu. Příčinou může být nízký stav prostředků.

CodeIntegrity:
===================================

Date: 2019-04-18 19:50:43.956
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.

Date: 2019-04-18 19:50:43.955
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.

Date: 2019-04-18 19:50:36.298
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.

Date: 2019-04-18 19:50:36.297
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.

Date: 2019-04-18 19:48:47.248
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-04-18 19:48:47.247
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2019-04-18 19:40:13.657
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-18 19:40:13.656
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz
Percentage of memory in use: 39%
Total physical RAM: 8022.61 MB
Available physical RAM: 4864.65 MB
Total Virtual: 9302.61 MB
Available Virtual: 6150.53 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:145.95 GB) (Free:60.89 GB) NTFS
Drive d: (D jako Danek) (Fixed) (Total:785.03 GB) (Free:660.03 GB) NTFS

\\?\Volume{12f43121-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.54 GB) (Free:0.5 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 12F43121)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=145.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=785 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

(1/2)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.04.2019
Ran by danie (administrator) on DESKTOP-7O90I50 (18-04-2019 19:50:38)
Running from C:\Users\danie\Desktop
Loaded Profiles: danie & (Available Profiles: danie)
Platform: Windows 10 Home Version 1809 17763.437 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\MsMpEng.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\NisSrv.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxEM.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19032.714.0_x64__8wekyb3d8bbwe\YourPhone.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel(R) Software Development Products -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_10d045798a3d667e\aesm_service.exe
(ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.27.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19021.18010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [iTunesHelper] => D:\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\Run: [Steam] => D:\Steam\steam.exe [3146016 2019-03-06] (Valve -> Valve Corporation)
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\Run: [Spotify] => C:\Users\danie\AppData\Roaming\Spotify\Spotify.exe [25901288 2019-04-16] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\Run: [Steam] => D:\Steam\steam.exe [3146016 2019-03-06] (Valve -> Valve Corporation)
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\Run: [Spotify] => C:\Users\danie\AppData\Roaming\Spotify\Spotify.exe [25901288 2019-04-16] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\Installer\chrmstp.exe [2019-04-11] (Google LLC -> Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{90576632-bd1f-4cef-838d-51725c7fec19}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{ba3fa4b6-0c0c-4177-a3a1-5992267b9e6c}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus15.msn.com/?pc=ASTE
HKU\S-1-5-21-2385076699-1764380514-3664276952-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04182019192920894\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus15.msn.com/?pc=ASTE
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-04-15] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-01-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-03-27] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-03-27] (Oracle America, Inc. -> Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-03-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-03-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-01-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-01-18] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-31] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-31] (Google Inc -> Google LLC)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.cz/
CHR StartupUrls: Default -> "hxxp://www.facebook.com/","hxxps://mail.ru/cnt/10445?gp=811570","hxxps://www.google.com/"
CHR Profile: C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default [2019-04-18]
CHR Extension: (Easy Auto Refresh) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabcgdmkeabbnleenpncegpcngjpnjkc [2019-01-01]
CHR Extension: (Prezentace) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-01-01]
CHR Extension: (BetterTTV) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2019-01-01]
CHR Extension: (Dokumenty) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-01]
CHR Extension: (Disk Google) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-01-01]
CHR Extension: (YouTube) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-01]
CHR Extension: (imgur Community Extension) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehoopddfhgaehhmphfcooacjdpmbjlao [2019-04-18]
CHR Extension: (Tabulky) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-01-01]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-02-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-01-01]
CHR Extension: (AdBlock) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-04-13]
CHR Extension: (Twitch Now) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2019-01-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-01-01]
CHR Extension: (Gmail) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-08]
CHR Extension: (Chrome Media Router) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-27]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESMService; C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_10d045798a3d667e\aesm_service.exe [3367272 2018-11-28] (Intel(R) Software Development Products -> Intel Corporation)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9677904 2019-03-29] (Microsoft Corporation -> Microsoft Corporation)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1392792 2015-10-29] (Intel(R) Software -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\NisSrv.exe [3856504 2019-04-09] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MsMpEng.exe [113992 2019-04-09] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AsusSGDrv; C:\Windows\system32\DRIVERS\AsusSGDrv.sys [141304 2015-10-22] (ASUSTeK Computer Inc. -> ASUS Corporation)
R3 athr; C:\Windows\System32\drivers\athw8x.sys [4233728 2018-09-15] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)
R3 BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [601624 2015-08-12] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros)
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [55784 2015-10-29] (Intel(R) Software -> Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [52200 2015-10-29] (Intel(R) Software -> Intel Corporation)
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [260072 2015-10-29] (Intel(R) Software -> Intel Corporation)
R3 HIDSwitch; C:\Windows\System32\drivers\AsRadioControl.sys [34184 2018-05-02] (ASUSTeK Computer Inc. -> ASUS)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [274416 2019-04-18] (Malwarebytes Corporation -> Malwarebytes)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_1aae4f19e68d0780\nvlddmkm.sys [17003280 2017-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [605696 2018-09-15] (Microsoft Windows -> Realtek )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [428032 2017-02-16] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-04-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [343520 2019-04-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [68576 2019-04-09] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-18 19:52 - 2019-04-18 19:27 - 098566144 _____ C:\Windows\system32\config\SOFTWARE
2019-04-18 19:50 - 2019-04-18 19:51 - 000017917 _____ C:\Users\danie\Desktop\FRST.txt
2019-04-18 19:49 - 2019-04-18 19:50 - 000000000 ____D C:\FRST
2019-04-18 19:49 - 2019-04-18 19:49 - 002434048 _____ (Farbar) C:\Users\danie\Desktop\FRST64.exe
2019-04-18 19:40 - 2019-04-18 19:52 - 000000000 ____D C:\Windows\Microsoft Antimalware
2019-04-18 19:31 - 2019-04-18 19:31 - 000001434 _____ C:\Users\danie\Desktop\AdwCleaner[C00].txt
2019-04-18 19:26 - 2019-04-18 19:27 - 000000000 ____D C:\AdwCleaner
2019-04-18 19:23 - 2019-04-18 19:25 - 007025360 _____ (Malwarebytes) C:\Users\danie\Desktop\adwcleaner_7.3.exe
2019-04-18 19:02 - 2019-04-18 19:02 - 000388608 _____ (Trend Micro Inc.) C:\Users\danie\Desktop\hijackthis.exe
2019-04-18 19:00 - 2019-04-18 19:00 - 001790024 _____ (Malwarebytes) C:\Users\danie\Downloads\JRT.exe
2019-04-18 18:53 - 2019-04-18 19:29 - 000274416 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-04-18 18:26 - 2019-04-18 18:26 - 000000000 ____D C:\Users\danie\AppData\Local\mbam
2019-04-18 18:25 - 2019-04-18 18:25 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-04-18 18:25 - 2019-04-18 18:25 - 000000000 ____D C:\Users\danie\AppData\Local\mbamtray
2019-04-18 18:25 - 2019-04-18 18:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-04-18 18:25 - 2019-04-18 18:25 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-04-18 18:25 - 2019-04-18 18:25 - 000000000 ____D C:\Program Files\Malwarebytes
2019-04-18 18:25 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2019-04-18 18:25 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-04-18 18:24 - 2019-04-18 18:25 - 062591336 _____ (Malwarebytes ) C:\Users\danie\Downloads\mb3-setup-37469.37469-3.7.1.2839-1.0.563-1.0.9988.exe
2019-04-18 18:10 - 2019-04-18 18:10 - 000102724 _____ C:\Users\danie\Documents\cc_20190418_181009.reg
2019-04-18 18:06 - 2019-04-18 18:06 - 000003936 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-04-18 18:06 - 2019-04-18 18:06 - 000002888 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-04-18 18:06 - 2019-04-18 18:06 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-04-18 18:06 - 2019-04-18 18:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-04-18 18:06 - 2019-04-18 18:06 - 000000000 ____D C:\Program Files\CCleaner
2019-04-18 18:05 - 2019-04-18 18:05 - 021254208 _____ (Piriform Software Ltd) C:\Users\danie\Downloads\ccsetup556.exe
2019-04-16 15:00 - 2019-04-16 15:29 - 000000000 ____D C:\Users\danie\AppData\Roaming\Notepad++
2019-04-16 15:00 - 2019-04-16 15:00 - 000000601 _____ C:\Users\Public\Desktop\Notepad++.lnk
2019-04-16 15:00 - 2019-04-16 15:00 - 000000601 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2019-04-16 14:59 - 2019-04-16 14:59 - 003814586 _____ (Don HO don.h@free.fr) C:\Users\danie\Downloads\npp.7.6.6.Installer.x64.exe
2019-04-16 14:53 - 2019-04-16 14:53 - 000000000 ____D C:\Users\danie\AppData\LocalLow\Amistech
2019-04-16 14:50 - 2019-04-16 14:50 - 000000000 ____D C:\Users\danie\AppData\Roaming\WinRAR
2019-04-16 14:50 - 2019-04-16 14:50 - 000000000 ____D C:\Users\danie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-04-16 14:50 - 2019-04-16 14:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-04-16 14:49 - 2019-04-16 14:49 - 003154800 _____ C:\Users\danie\Downloads\winrar-x64-570cz.exe
2019-04-16 14:44 - 2019-04-16 14:44 - 000011915 _____ C:\Users\danie\Downloads\[CzT]My_Summer_Car_v_30_04_2018_2018_.torrent
2019-04-16 13:44 - 2019-04-16 13:44 - 000011374 _____ C:\Users\danie\Downloads\[CzT]My_Summer_Car_v_24_12_2018_2018_.torrent
2019-04-15 17:35 - 2019-04-15 17:35 - 000002559 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2019-04-15 17:35 - 2019-04-15 17:35 - 000002553 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2019-04-15 17:35 - 2019-04-15 17:35 - 000002530 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2019-04-15 17:35 - 2019-04-15 17:35 - 000002525 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2019-04-15 17:35 - 2019-04-15 17:35 - 000002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy.lnk

(2/2)

2019-04-15 17:35 - 2019-04-15 17:35 - 000002486 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2019-04-15 17:35 - 2019-04-15 17:35 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2019-04-15 17:35 - 2019-04-15 17:35 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2019-04-15 17:35 - 2019-04-15 17:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2019-04-15 17:23 - 2019-04-15 17:23 - 000019311 _____ C:\Users\danie\Downloads\[CzT]Scary_movie_1_5_2000_2013_CZ_ (3).torrent
2019-04-15 17:22 - 2019-04-15 17:22 - 000019311 _____ C:\Users\danie\Downloads\[CzT]Scary_movie_1_5_2000_2013_CZ_ (1).torrent
2019-04-15 17:22 - 2019-04-15 17:22 - 000019310 _____ C:\Users\danie\Downloads\[CzT]Scary_movie_1_5_2000_2013_CZ_ (2).torrent
2019-04-15 17:21 - 2019-04-15 17:21 - 000113661 _____ C:\Users\danie\Downloads\[CzT]Saw_1_7.torrent
2019-04-14 22:07 - 2019-04-14 22:07 - 000019311 _____ C:\Users\danie\Downloads\[CzT]Scary_movie_1_5_2000_2013_CZ_.torrent
2019-04-14 10:48 - 2019-04-14 10:48 - 022910200 _____ C:\Users\danie\Desktop\New Project.mp4
2019-04-14 10:42 - 2019-04-14 10:43 - 000000000 ____D C:\Users\danie\AppData\Local\Movavi
2019-04-14 10:42 - 2019-04-14 10:42 - 000000000 ____D C:\Users\danie\AppData\Roaming\NVIDIA
2019-04-14 10:42 - 2019-04-14 10:42 - 000000000 ____D C:\Users\danie\AppData\Local\VideoEditorPlus
2019-04-14 10:42 - 2019-04-14 10:42 - 000000000 ____D C:\Users\danie\AppData\Local\CrashRpt
2019-04-14 10:41 - 2019-04-14 10:41 - 061130768 _____ (Movavi) C:\Users\danie\Downloads\MovaviVideoEditorPlusSetupC_alternative_1.exe
2019-04-14 10:41 - 2019-04-14 10:41 - 000012603 _____ C:\ProgramData\umlpdnzj.lec
2019-04-14 10:41 - 2019-04-14 10:41 - 000000016 _____ C:\ProgramData\mntemp
2019-04-14 10:40 - 2019-04-14 10:40 - 004264223 _____ C:\Users\danie\Desktop\IMG_0599.TRIM.MOV
2019-04-13 18:11 - 2019-04-13 18:11 - 026810368 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 023440896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 020815360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 019025408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 015223296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 012843520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 012139008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 008898048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 007919104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 007877120 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 006544824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 006440960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 006309040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 006071296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 005765120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 005436904 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 005205448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 004660224 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 004527624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 003904512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 003690496 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 003656192 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 003551112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 003496448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AI.MachineLearning.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 003421696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 002942464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 002777224 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 002765312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 002689024 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 002346496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 002275896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 002127360 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001860096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001760768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001711104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001687552 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001674480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001671352 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001615872 ____R (The ICU Project) C:\Windows\SysWOW64\icuin.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001590064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001521664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001506304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001467344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001459080 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001458056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001370624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001297120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001294520 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001259320 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2019-04-13 18:11 - 2019-04-13 18:11 - 001249280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001221944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001155072 ____R (The ICU Project) C:\Windows\SysWOW64\icuuc.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001072640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001072424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001064448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001047552 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001026792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001019392 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 001001472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000982528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Vpn.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000976896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000964096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000909840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000897536 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000884224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000882688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000845824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000828728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000815616 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000772608 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000762880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000730112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000711168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000701440 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000684032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000672256 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000653040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000649064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\SharedRealitySvc.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000617784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingWinRT.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000540448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000532480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000528384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000460800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000454144 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000424960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000414720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2019-04-13 18:11 - 2019-04-13 18:11 - 000408528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000385536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000358912 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000349184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000331776 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000316416 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000312632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fveapibase.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000309760 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000294912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000263600 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerCsp.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000201216 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000188416 _____ (Microsoft Corporation) C:\Windows\system32\DMPushRouterCore.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\spacebridge.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BitLockerCsp.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleprn.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000101376 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000097280 _____ (Microsoft Corporation) C:\Windows\system32\EduPrintProv.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000096256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvsetup.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000067072 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\RDSPnf.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscapi.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\perfproc.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfproc.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshhttp.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfts.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmintegrator.dll
2019-04-13 18:11 - 2019-04-13 18:11 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcPing.exe
2019-04-13 18:11 - 2019-04-13 18:11 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscdll.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 017513472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 009682744 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 007687576 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 007645608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 006925824 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 004991112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 004866560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AI.MachineLearning.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 004704272 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 004588536 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 004304896 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 003982848 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 003657728 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 003557888 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 003384832 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 003377976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 003334496 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 003334144 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002995712 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002925880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 002871304 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 002842624 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002720256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 002701304 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002627384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 002592816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002469376 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 002438368 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002189312 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002073960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002042368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002022304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 002017792 _____ C:\Windows\system32\rdpnano.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001994768 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001969464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 001918464 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001892864 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001886208 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001856000 ____R (The ICU Project) C:\Windows\system32\icuin.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001844448 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001697752 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-04-13 18:10 - 2019-04-13 18:10 - 001672704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001671680 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001647632 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001641400 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001616384 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001605120 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001567232 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001478968 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001468952 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 001395056 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001360184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 001342400 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-04-13 18:10 - 2019-04-13 18:10 - 001315328 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001311232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001259320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 001256448 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001253688 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 001217024 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001213752 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001191728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001179680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 001145856 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001058304 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2019-04-13 18:10 - 2019-04-13 18:10 - 001057792 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 001054200 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 001053192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ClipSp.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 001044280 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 001035776 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001022616 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 001007616 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000998712 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000984888 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000982880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000981816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000974352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000948224 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000927232 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000926208 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000888320 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000882176 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2019-04-13 18:10 - 2019-04-13 18:10 - 000877056 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000871792 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000865792 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000865784 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000855040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000850760 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000822272 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000821048 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000809784 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000807424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000799568 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000793832 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000776192 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000766480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000761280 _____ (Microsoft Corporation) C:\Windows\system32\pkeyhelper.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000757664 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000756736 _____ (Microsoft Corporation) C:\Windows\system32\DolbyHrtfEnc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000737080 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000730936 _____ (Microsoft Corporation) C:\Windows\system32\LicensingWinRT.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000725928 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000699392 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Language.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000676352 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000675096 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000660480 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000651792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000651064 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000620560 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000611840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000609792 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000604008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000598544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000580024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000568632 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000556544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000553784 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000552448 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000551936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000540672 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2019-04-13 18:10 - 2019-04-13 18:10 - 000531968 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000522752 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000513040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000508208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Enumeration.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000506880 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000506168 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000505344 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000500224 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_PCDisplay.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000485192 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000474928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-04-13 18:10 - 2019-04-13 18:10 - 000469504 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000466432 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000461112 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000448000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000447488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000421392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000407552 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000407504 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000404792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000386872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000386360 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000385024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000384312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000368640 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000346624 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000343984 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\RADCUI.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000332800 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\sppcommdlg.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000322568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000306488 _____ (Microsoft Corporation) C:\Windows\system32\computestorage.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000300344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000300032 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000283032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtapi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000264704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\WiFiCloudStore.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000257696 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000255128 _____ (Microsoft Corporation) C:\Windows\system32\SgrmBroker.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000246784 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\SharedPCCSP.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000234808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000195896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000183296 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.SharedPC.CredentialProvider.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000177152 _____ (Microsoft Corporation) C:\Windows\system32\LanguageComponentsInstaller.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000169784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spacebridge.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000159272 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000159112 _____ (Microsoft Corporation) C:\Windows\system32\winquic.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000157496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000156984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winquic.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000147496 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000143880 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000143872 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000134456 _____ (Microsoft Corporation) C:\Windows\system32\ImplatSetup.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000131384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000121344 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000115360 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\negoexts.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\drvsetup.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000107832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\negoexts.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000098664 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000097808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000095544 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000090424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000089336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpr.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\KdsCli.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000071208 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000039736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WppRecorder.sys
2019-04-13 18:10 - 2019-04-13 18:10 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000035640 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\sxssrv.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\RpcPing.exe
2019-04-13 18:10 - 2019-04-13 18:10 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-04-13 18:10 - 2019-04-13 18:10 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-04-13 12:58 - 2019-04-13 12:58 - 000020467 _____ C:\Users\danie\Downloads\[CzT]Sinister_2012_CZ_.torrent
2019-04-11 14:14 - 2019-04-11 14:14 - 000000000 ____D C:\Users\danie\AppData\Local\HearthSim
2019-04-10 12:21 - 2019-04-12 17:35 - 000000000 ____D C:\Users\danie\AppData\Roaming\HearthstoneDeckTracker
2019-04-10 12:20 - 2019-04-11 08:50 - 000000000 ____D C:\Users\danie\AppData\Local\HearthstoneDeckTracker
2019-04-10 12:20 - 2019-04-11 03:27 - 000000000 ____D C:\Users\danie\AppData\Local\SquirrelTemp
2019-04-10 12:20 - 2019-04-10 12:20 - 037584160 _____ (HearthSim) C:\Users\danie\Downloads\HDT-Installer.exe
2019-04-09 09:15 - 2019-04-09 09:15 - 000000000 ____D C:\Users\danie\AppData\Local\Mendeley Ltd
2019-04-09 09:14 - 2019-04-09 09:14 - 000000668 _____ C:\Users\Public\Desktop\Mendeley Desktop.lnk
2019-04-09 09:14 - 2019-04-09 09:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mendeley Desktop
2019-04-09 09:12 - 2019-04-09 09:13 - 057376072 _____ C:\Users\danie\Downloads\Mendeley-Desktop-1.19.4-win32.exe
2019-03-26 10:03 - 2019-03-26 10:03 - 002450240 _____ C:\Users\danie\Desktop\1553361217509.webm
2019-03-23 19:59 - 2019-04-16 17:42 - 000000000 ____D C:\Users\danie\AppData\LocalLow\uTorrent
2019-03-23 19:59 - 2019-03-23 19:59 - 000000000 ____D C:\Users\danie\AppData\Local\BitTorrentHelper
2019-03-23 19:28 - 2019-03-23 19:28 - 000014448 _____ C:\Users\danie\Downloads\[CzT]V_zajeti_demonu_2_The_Conjuring_2_2016_CZ_.torrent
2019-03-23 19:27 - 2019-03-23 19:27 - 000020789 _____ C:\Users\danie\Downloads\[CzT]V_zajeti_demonu_The_Conjuring_2013_CZ_.torrent

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-18 19:46 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-04-18 19:31 - 2019-01-08 20:47 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture
2019-04-18 19:29 - 2019-01-01 16:22 - 000000000 ____D C:\ProgramData\NVIDIA
2019-04-18 19:29 - 2019-01-01 16:15 - 000000000 __SHD C:\Users\danie\IntelGraphicsProfiles
2019-04-18 19:29 - 2019-01-01 15:55 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-04-18 19:27 - 2018-09-15 08:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-04-18 19:03 - 2019-01-01 16:15 - 000000000 ____D C:\Users\danie\AppData\Local\VirtualStore
2019-04-18 18:39 - 2019-01-01 16:08 - 001606102 _____ C:\Windows\system32\PerfStringBackup.INI
2019-04-18 18:39 - 2018-09-15 19:32 - 000685036 _____ C:\Windows\system32\perfh005.dat
2019-04-18 18:39 - 2018-09-15 19:32 - 000137702 _____ C:\Windows\system32\perfc005.dat
2019-04-18 18:39 - 2018-09-15 09:31 - 000000000 ____D C:\Windows\INF
2019-04-18 18:30 - 2019-01-14 13:28 - 000000000 ____D C:\Users\danie\AppData\Roaming\uTorrent
2019-04-18 18:25 - 2018-09-15 09:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-04-18 18:08 - 2019-01-01 15:54 - 000000000 ____D C:\Windows\Panther
2019-04-18 17:54 - 2019-01-01 15:54 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-04-18 15:29 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-04-18 15:29 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\AppReadiness
2019-04-17 13:44 - 2019-01-27 20:29 - 000000000 ____D C:\Users\danie\AppData\Local\Spotify
2019-04-17 13:39 - 2019-01-01 16:15 - 000000000 ____D C:\Users\danie\AppData\Local\Packages
2019-04-17 02:40 - 2019-01-27 20:28 - 000000000 ____D C:\Users\danie\AppData\Roaming\Spotify
2019-04-16 14:07 - 2019-01-01 21:20 - 000000000 ____D C:\Users\danie\AppData\Local\Battle.net
2019-04-15 17:34 - 2019-01-01 16:32 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-04-14 01:14 - 2019-01-01 15:54 - 000438936 _____ C:\Windows\system32\FNTCACHE.DAT
2019-04-14 01:10 - 2018-09-15 09:33 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2019-04-14 01:10 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-04-14 01:10 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\system32\oobe
2019-04-14 01:10 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\bcastdvr
2019-04-14 01:10 - 2018-09-15 08:09 - 000000000 ____D C:\Windows\system32\Dism
2019-04-13 18:13 - 2018-09-15 09:23 - 000000000 ____D C:\Windows\CbsTemp
2019-04-11 08:46 - 2019-01-01 16:24 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-10 20:50 - 2019-01-02 19:17 - 000000000 ____D C:\Windows\system32\MRT
2019-04-10 20:43 - 2019-01-02 19:17 - 131129288 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-04-09 08:41 - 2019-01-01 15:55 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-04-01 20:02 - 2019-03-13 01:05 - 000835480 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-04-01 20:02 - 2019-03-13 01:05 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-31 15:46 - 2019-01-01 16:19 - 000003380 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2385076699-1764380514-3664276952-1001
2019-03-31 15:46 - 2019-01-01 16:19 - 000000000 ___RD C:\Users\danie\OneDrive
2019-03-31 15:46 - 2019-01-01 16:11 - 000002365 _____ C:\Users\danie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-31 15:42 - 2019-01-01 16:24 - 000003470 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-31 15:42 - 2019-01-01 16:24 - 000003346 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-03-27 06:52 - 2019-01-01 16:40 - 000004666 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-03-27 06:52 - 2019-01-01 16:39 - 000000000 ____D C:\Users\danie\AppData\Local\Adobe
2019-03-27 06:52 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-03-27 06:52 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\system32\Macromed
2019-03-27 06:51 - 2019-01-14 13:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-03-27 06:51 - 2019-01-14 13:38 - 000000000 ____D C:\Program Files (x86)\Java
2019-03-27 06:50 - 2019-01-14 13:38 - 000099192 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Rád bych dodal, že ve stolním pc se mi objevil tento provlém a odstranil jsem jej pouze skenem Windows defenderem. Do notebooku se mi to dostalo přes synchronizaci přes chrome, kde používám stejný účet jak na stolním pc. Tady tento postup nefungoval a zkoušel jsem stahovat i malvarebytes, ten jej detekoval, odstranil jsem jej a po restartu byl zase ve chromu...

Do poznamkoveho bloku skopirujte obsah dole:



Poznamkovy blok ulozte pod nazvom fixlist.txt do umiestnenia kde je FRST.
Spustite FRST a odkliknite tlacidlo: Fix
Vykona sa funkcionalita po ktorej sa pocitac rebootuje. Po reboote sem vlozte obsah logu: fixlog.txt ulozeneho v umiestneni FRST.

Fix result of Farbar Recovery Scan Tool (x64) Version: 18.04.2019
Ran by danie (18-04-2019 20:23:35) Run:1
Running from C:\Users\danie\Desktop\FIRST
Loaded Profiles: danie & (Available Profiles: danie)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Task: {1C3E1155-A403-4ECC-A6B9-9F5A8F7C4345} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {3B521852-115B-43F5-973A-B337D80BEC3A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {537CBEE1-CA1F-411E-BB9F-DB2FC9778FB0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {785AAF82-763B-46F6-A430-094ECF8D56E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
HKLM\...\Run: [iTunesHelper] => D:\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
CHR StartupUrls: Default -> "hxxp://www.facebook.com/","hxxps://mail.ru/cnt/10445?gp=811570","hxxps://www.google.com/
2019-03-31 15:42 - 2019-01-01 16:24 - 000003470 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-31 15:42 - 2019-01-01 16:24 - 000003346 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:

*****************

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1C3E1155-A403-4ECC-A6B9-9F5A8F7C4345}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1C3E1155-A403-4ECC-A6B9-9F5A8F7C4345}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3B521852-115B-43F5-973A-B337D80BEC3A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B521852-115B-43F5-973A-B337D80BEC3A}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{537CBEE1-CA1F-411E-BB9F-DB2FC9778FB0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{537CBEE1-CA1F-411E-BB9F-DB2FC9778FB0}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\Office ClickToRun Service Monitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{785AAF82-763B-46F6-A430-094ECF8D56E4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{785AAF82-763B-46F6-A430-094ECF8D56E4}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
"Chrome StartupUrls" => removed successfully
"C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore" => not found

=========== EmptyTemp: ==========

BITS transfer queue => 8151040 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67133176 B
Java, Flash, Steam htmlcache => 129231332 B
Windows/system/drivers => 2306052 B
Edge => 49677 B
Chrome => 65355603 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 5902652 B
NetworkService => 0 B
danie => 30201077 B

RecycleBin => 809017 B
EmptyTemp: => 294.8 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:24:14 ====

Ako je na tom pocitac?

Okno už nevyskakuje, zdá se to v pohodě. Pro jistotu si založím téma i pro stolní pc a projedu i ten. Díky za pomoc!