Re: Prosím o kontrolu logu
Napsal: 01 úno 2020 11:59
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-01-2020
Ran by Otto (administrator) on OTTO-PC (01-02-2020 11:50:55)
Running from C:\Users\Otto\Downloads
Loaded Profiles: Otto (Available Profiles: Otto & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Inmatrix LTD) [File not signed] C:\Program Files (x86)\Zoom Player\zplayer.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avp.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avpui.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKU\S-1-5-21-2781758306-2679381193-3636559717-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-2781758306-2679381193-3636559717-1000\Software\Policies\...\system: [disablecmd] 0
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-17] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {043A0EE9-CA26-4648-9F8E-1437A239C896} - System32\Tasks\{71B27A0D-721D-42CE-8B83-05167AB2D7BA} => C:\Windows\system32\pcalua.exe -a "C:\Users\Otto\Downloads\zoek (3).exe" -d C:\Users\Otto\Downloads
Task: {0C6FB184-16B6-4016-B929-E5D17924CF26} - System32\Tasks\{B3C392F5-C8C3-4C3C-8804-C840AFCE3810} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {0E0960DD-44DA-481F-8B18-700CEF473EBF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-14] (Google Inc -> Google Inc.)
Task: {11D0BBE2-0359-41D6-89B5-C636A95C2017} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40432 2019-12-12] (Garmin International, Inc. -> )
Task: {1D9DAE34-D095-4599-9739-02B97D18F7AD} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_321_Plugin.exe [1458232 2020-01-23] (Adobe Inc. -> Adobe)
Task: {284D8FF2-F281-4A92-970F-87BA553794A0} - System32\Tasks\{F17D40F3-F484-4A50-8394-0EF545CAF746} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {31B09697-86A1-4C6B-81E8-1C1C75245794} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
Task: {4C6B03B5-6046-4DF9-A335-F862637171B2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {5B5156C3-7F2F-4F16-9397-7D21D6850DB5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {5EC3EE66-2D9F-4F58-AB98-E49621327715} - System32\Tasks\{4DD38B43-9E2A-4835-9271-6C1E819E10E5} => C:\Windows\system32\pcalua.exe -a "C:\Users\Otto\Downloads\zoek (3).exe" -d C:\Users\Otto\Downloads
Task: {639B12E9-0FA0-4798-BFF6-7F119315E56D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-01-23] (Adobe Inc. -> Adobe)
Task: {732DC332-C408-4542-B672-D0DA00E83CBA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {9C1BC15C-96E6-4F3E-AB3E-1777C257F488} - System32\Tasks\{D43AA914-4C04-4A51-BCEB-9D2B1A3A847D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\DVDFab\uninstall.exe" -d "C:\Program Files (x86)\DVDFab"
Task: {9DFDC742-049D-4220-B697-E124F7FC87E8} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION
Task: {C3FEDB28-0FA3-48CF-BD97-42B9B381865E} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
Task: {E5D75222-B2EC-45E3-A6C0-52792F15D495} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-14] (Google Inc -> Google Inc.)
Task: {E6F7B6DA-B83E-4930-92DA-ACCDB9CDFD36} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [791232 2019-12-18] (Kaspersky Lab -> AO Kaspersky Lab)
Task: {FA09114F-0BA3-4079-8C96-FBDB1A35B34C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_321_pepper.exe [1453624 2020-01-23] (Adobe Inc. -> Adobe)
Task: {FF34A019-D465-4BD1-894E-47FF6CC97F5B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{01C3FF8A-351D-4688-A431-728EF9387B19}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{D071B99D-D6EA-4E49-B790-473DC6A753C2}: [NameServer] 8.8.8.8,8.8.4.4
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-2781758306-2679381193-3636559717-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: No Name -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-10-19] (Oracle America, Inc. -> Oracle Corporation)
BHO: Kaspersky Protection -> {9F904093-6E18-4536-BF5F-B03689CF00F0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\x64\IEExt\ie_plugin.dll [2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-10-19] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {EF293C5A-9F37-49FD-91C4-2B867063FC54} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\x64\IEExt\ie_plugin.dll [2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
FireFox:
========
FF DefaultProfile: henbtv06.default-1537355602383
FF ProfilePath: C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 [2020-02-01]
FF Homepage: Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 -> about:home
FF NewTab: Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 -> about:newtab
FF Notifications: Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 -> hxxps://www.tipsport.cz
FF Extension: (Google Translator for Firefox) - C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383\Extensions\translator@zoli.bod.xpi [2018-12-08]
FF Extension: (Video DownloadHelper) - C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-12-22]
FF Extension: (No Name) - C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-12-22]
FF HKLM\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Ochrana Kaspersky) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\FFExt\light_plugin_firefox\addon.xpi [2019-12-20]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_321.dll [2020-01-23] (Adobe Inc. -> )
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-10-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_321.dll [2020-01-23] (Adobe Inc. -> )
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2020-01-11] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2020-01-11] (Google LLC -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
Chrome:
=======
CHR Profile: C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default [2020-02-01]
CHR Notifications: Default -> hxxps://www.plnapenezenka.cz
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Extension: (Překladač Google) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2020-01-28]
CHR Extension: (Prezentace) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-01-28]
CHR Extension: (Dokumenty) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-01-28]
CHR Extension: (Disk Google) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-01-28]
CHR Extension: (YouTube) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-01-28]
CHR Extension: (Plná Peněženka Lištička) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecmgkhgjmodembdmiimbacpjgcdimiek [2020-01-28]
CHR Extension: (Adobe Acrobat) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-01-28]
CHR Extension: (Ochrana Kaspersky) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhpdacimkjpccooodognopfhbdgnpbk [2020-02-01]
CHR Extension: (Tabulky) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-01-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-28]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-01-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-01-28]
CHR Extension: (Seznam doplněk - Esko) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2020-01-28]
CHR Extension: (Gmail) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-01-28]
CHR Extension: (Chrome Media Router) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-28]
CHR HKLM\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/deta ... pfhbdgnpbk
CHR HKU\S-1-5-21-2781758306-2679381193-3636559717-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/deta ... pfhbdgnpbk
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVP20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avp.exe [357416 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [314368 2018-01-18] (Brother Industries, Ltd.) [File not signed]
S4 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] (Huawei Software Technologies Co., LTD. -> )
S3 klvssbridge64_20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\x64\vssbridge64.exe [438928 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aftap0901; C:\Windows\System32\DRIVERS\aftap0901.sys [48624 2018-06-15] (AnchorFree Inc -> The OpenVPN Project)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [246912 2019-02-16] (Kaspersky Lab -> AO Kaspersky Lab)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [339808 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [531584 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [79696 2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [145304 2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [93312 2019-03-12] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [251512 2019-10-29] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [516216 2019-09-17] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [1123664 2019-10-17] (Kaspersky Lab -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [998016 2019-10-29] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klim6; C:\Windows\System32\DRIVERS\klim6.sys [58192 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [79184 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [59512 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [51328 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [48080 2018-02-12] (AnchorFree Inc -> The OpenVPN Project)
R1 klwfp; C:\Windows\System32\DRIVERS\klwfp.sys [105600 2019-03-05] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [211048 2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [232272 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2017-01-02] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1049432 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [202592 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [581464 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [301408 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [31920 2018-02-26] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
S1 amsdk; \??\C:\Windows\system32\drivers\amsdk.sys [X]
U3 aswbdisk; no ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\Windows\System32\drivers\zamguard64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-02-01 11:50 - 2020-02-01 11:51 - 000020111 _____ C:\Users\Otto\Downloads\FRST.txt
2020-02-01 11:48 - 2020-02-01 11:51 - 000000000 ____D C:\FRST
2020-02-01 11:48 - 2020-02-01 11:48 - 002581504 _____ (Farbar) C:\Users\Otto\Desktop\FRST64.exe
2020-01-30 12:37 - 2020-01-30 12:37 - 000019302 _____ C:\Users\Otto\Downloads\Mystic Prophecy - Metal Division 2CD - Metal-Tracker.com.torrent
2020-01-30 12:37 - 2020-01-30 12:37 - 000000000 ____D C:\Users\Otto\Downloads\Mystic Prophecy - Metal Division (2CD) (2020)
2020-01-30 12:05 - 2020-01-30 12:05 - 000039978 _____ C:\Users\Otto\Documents\cc_20200130_120519.reg
2020-01-30 12:05 - 2020-01-30 12:05 - 000002276 _____ C:\Users\Otto\Documents\cc_20200130_120531.reg
2020-01-30 10:50 - 2020-01-30 10:50 - 000000000 ____D C:\Users\Otto\Downloads\backups
2020-01-30 08:02 - 2020-01-30 08:02 - 000119808 _____ C:\Users\Otto\Documents\Cestovní náhrady Leden 2020.xls
2020-01-29 15:15 - 2020-01-30 11:56 - 000000000 ____D C:\Users\Otto\AppData\Local\AMSDK
2020-01-29 15:14 - 2020-01-29 15:14 - 012741568 _____ (Zemana Ltd. ) C:\Users\Otto\Downloads\AntiMalware_Setup.exe
2020-01-28 21:41 - 2014-02-13 23:59 - 000024064 _____ C:\Windows\zoek-delete.exe
2020-01-28 21:08 - 2020-01-28 21:08 - 000003120 _____ C:\Windows\system32\Tasks\{71B27A0D-721D-42CE-8B83-05167AB2D7BA}
2020-01-28 21:08 - 2020-01-28 21:08 - 000003120 _____ C:\Windows\system32\Tasks\{4DD38B43-9E2A-4835-9271-6C1E819E10E5}
2020-01-28 21:02 - 2020-01-30 12:03 - 000000000 ____D C:\Users\Otto\AppData\Local\CrashDumps
2020-01-28 20:55 - 2020-01-28 20:55 - 000001724 _____ C:\Users\Otto\Documents\mmmmm.txt
2020-01-24 13:00 - 2020-01-28 17:59 - 000000000 ____D C:\Users\Otto\AppData\Local\Adobe
2020-01-24 12:45 - 2020-01-24 12:45 - 000000000 ____D C:\Users\Otto\AppData\Local\mbamtray
2020-01-24 12:42 - 2020-01-24 12:42 - 001924728 _____ (Malwarebytes) C:\Users\Otto\Downloads\MBSetup.exe
2020-01-17 16:21 - 2020-01-17 16:22 - 000000000 ____D C:\ProgramData\Ashampoo
2020-01-17 16:21 - 2020-01-17 16:21 - 000001303 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio 21.lnk
2020-01-17 16:21 - 2020-01-17 16:21 - 000001303 _____ C:\ProgramData\Desktop\Ashampoo Burning Studio 21.lnk
2020-01-17 16:21 - 2020-01-17 16:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2020-01-17 16:19 - 2020-01-17 16:19 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2020-01-17 16:16 - 2020-01-17 16:18 - 226005215 _____ C:\Users\Otto\Downloads\Ashampoo Burning Studio 21.3.0.42.rar
2020-01-16 12:05 - 2020-01-16 12:06 - 016693784 _____ C:\Users\Otto\Downloads\Revo Uninstaller Pro 4.2.3.rar
2020-01-14 16:00 - 2020-01-14 16:45 - 000000000 ____D C:\Users\Otto\Desktop\foto mé
2020-01-12 17:09 - 2020-01-14 16:47 - 000000000 ____D C:\Users\Otto\Desktop\FOTKY Míša
2020-01-12 16:52 - 2020-01-12 17:06 - 000013304 _____ C:\Users\Otto\Desktop\INVENTURA 2019.xlsx
2020-01-12 16:04 - 2020-01-12 16:04 - 000000000 ____D C:\Users\Default\AppData\Local\Google
2020-01-12 16:04 - 2020-01-12 16:04 - 000000000 ____D C:\Users\Default User\AppData\Local\Google
2020-01-12 15:59 - 2020-01-12 16:02 - 000000000 ____D C:\Users\Otto\Desktop\Andrea
2020-01-11 15:23 - 2020-01-14 16:45 - 000000000 ____D C:\Users\Otto\Desktop\Nová složka (2)
2020-01-11 14:02 - 2020-01-11 14:03 - 005901814 _____ C:\Users\Otto\Downloads\D_TEST_2019_02.pdf
2020-01-11 14:02 - 2020-01-11 14:02 - 004977698 _____ C:\Users\Otto\Downloads\D_TEST_2019_01.pdf
2020-01-11 13:47 - 2020-01-11 13:47 - 000000000 ____D C:\Users\Otto\Downloads\dTest 2019 06
2020-01-11 13:30 - 2020-01-11 13:31 - 000000000 ____D C:\Users\Otto\Downloads\dTest 2019 12
2020-01-10 10:02 - 2020-01-10 10:02 - 000001890 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2020-01-10 10:02 - 2020-01-10 10:02 - 000001890 _____ C:\ProgramData\Desktop\Garmin Express.lnk
2020-01-10 09:49 - 2020-01-10 09:49 - 000579688 _____ C:\Users\Otto\Downloads\Výpis z ú_tu stavebního spo_ení_0.pdf
2020-01-02 17:37 - 2020-01-02 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ConvertXtoVideo Ultimate
2020-01-02 17:36 - 2020-01-02 17:36 - 050147492 _____ (lrepacks.ru ) C:\Users\Otto\Downloads\VSO ConvertXtoVideo Ultimate 2.0.0.100.exe
2020-01-02 17:07 - 2020-01-02 17:07 - 000000950 _____ C:\Users\Otto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\4K Video Downloader.lnk
2020-01-02 17:07 - 2020-01-02 17:07 - 000000000 ____D C:\Program Files\4KDownload
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-02-01 11:51 - 2019-04-01 10:34 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2020-02-01 11:45 - 2018-09-17 12:29 - 000000000 ____D C:\ProgramData\Zoom Player
2020-02-01 11:40 - 2009-07-14 05:45 - 000010288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-02-01 11:40 - 2009-07-14 05:45 - 000010288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-02-01 11:27 - 2019-11-02 18:13 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-shm
2020-02-01 11:27 - 2019-11-02 18:13 - 000032768 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-shm
2020-02-01 11:26 - 2019-11-02 18:13 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-shm
2020-02-01 11:25 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-01-30 12:38 - 2017-03-25 21:03 - 000000000 ____D C:\Users\Otto\AppData\Roaming\uTorrent
2020-01-30 12:06 - 2018-04-26 19:57 - 000000000 ____D C:\Program Files\WinRAR
2020-01-30 12:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-01-30 12:01 - 2017-03-24 18:33 - 000002786 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-01-30 11:56 - 2018-02-28 19:27 - 000067389 _____ C:\Windows\ZAM.krnl.trace
2020-01-30 11:13 - 2009-07-26 19:41 - 000668542 _____ C:\Windows\system32\perfh005.dat
2020-01-30 11:13 - 2009-07-26 19:41 - 000141202 _____ C:\Windows\system32\perfc005.dat
2020-01-30 11:13 - 2009-07-14 06:13 - 001583226 _____ C:\Windows\system32\PerfStringBackup.INI
2020-01-30 08:04 - 2017-03-26 00:59 - 000023701 _____ C:\Windows\BRRBCOM.INI
2020-01-29 15:15 - 2018-01-02 18:53 - 000000000 ____D C:\Users\Otto\AppData\Local\Zemana
2020-01-28 19:38 - 2017-03-24 18:03 - 000000000 ____D C:\Users\Otto
2020-01-27 06:51 - 2018-10-31 15:29 - 000000000 ____D C:\ProgramData\RogueKiller
2020-01-24 12:26 - 2017-03-30 20:10 - 000000000 ____D C:\Users\Otto\AppData\Temp
2020-01-24 11:43 - 2017-03-25 21:51 - 000000000 ____D C:\Users\Otto\Documents\Programy
2020-01-24 09:51 - 2019-11-02 18:13 - 000379072 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-wal
2020-01-23 15:33 - 2018-03-19 22:28 - 000004482 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-01-23 15:33 - 2018-01-27 20:36 - 000004410 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-01-23 15:33 - 2017-10-30 22:33 - 000004494 _____ C:\Windows\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-01-23 15:33 - 2017-10-08 15:33 - 000000000 ____D C:\Windows\system32\Macromed
2020-01-23 15:33 - 2017-04-07 20:55 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-01-23 15:33 - 2017-04-07 20:55 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-01-23 15:33 - 2017-04-07 20:55 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-01-23 11:02 - 2017-03-25 16:41 - 000000000 ____D C:\Users\Otto\AppData\LocalLow\Mozilla
2020-01-22 15:21 - 2019-08-19 09:51 - 000000000 ____D C:\Users\Otto\Desktop\Nová složka
2020-01-17 17:04 - 2019-10-14 17:54 - 000002000 _____ C:\Users\Public\Desktop\Google Slides.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000002000 _____ C:\ProgramData\Desktop\Google Slides.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001998 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001998 _____ C:\ProgramData\Desktop\Google Sheets.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001988 _____ C:\Users\Public\Desktop\Google Docs.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001988 _____ C:\ProgramData\Desktop\Google Docs.lnk
2020-01-17 17:00 - 2017-05-02 15:39 - 000000000 ____D C:\Users\Otto\Documents\ConvertXtoVideo Ultimate
2020-01-17 16:38 - 2018-06-14 16:50 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-17 16:38 - 2018-06-14 16:50 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-01-17 16:38 - 2018-06-14 16:50 - 000002183 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-01-17 16:32 - 2017-03-24 18:46 - 000000000 ____D C:\Users\UpdatusUser
2020-01-17 16:24 - 2019-01-19 23:41 - 000000000 ____D C:\Users\Otto\AppData\Roaming\Ashampoo
2020-01-16 22:04 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2020-01-16 22:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2020-01-16 12:09 - 2017-03-26 01:23 - 000000000 ____D C:\ProgramData\VS Revo Group
2020-01-16 12:06 - 2018-09-14 15:29 - 000001077 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2020-01-16 12:06 - 2018-09-14 15:29 - 000001077 _____ C:\ProgramData\Desktop\Revo Uninstaller Pro.lnk
2020-01-16 12:06 - 2018-09-14 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2020-01-16 12:01 - 2019-04-01 10:34 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2020-01-14 16:21 - 2019-11-02 18:13 - 000020632 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-wal
2020-01-12 16:18 - 2018-06-14 16:50 - 000003390 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-01-12 16:18 - 2018-06-14 16:50 - 000003262 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-01-12 16:18 - 2017-03-27 19:34 - 000003556 _____ C:\Windows\system32\Tasks\GarminUpdaterTask
2020-01-12 15:55 - 2019-11-08 17:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-01-12 15:55 - 2017-03-25 16:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-01-11 14:57 - 2017-04-20 17:44 - 000000000 ____D C:\Program Files (x86)\Google
2020-01-10 10:03 - 2017-03-27 19:35 - 000000000 ____D C:\Program Files (x86)\Garmin
2020-01-10 10:02 - 2017-03-27 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2020-01-10 10:02 - 2017-03-27 19:35 - 000000000 ____D C:\ProgramData\Garmin
2020-01-02 17:43 - 2017-04-14 16:05 - 000000000 ____D C:\Users\Otto\AppData\Roaming\Vso
==================== Files in the root of some directories ========
2017-06-10 16:17 - 2018-09-26 18:16 - 000099384 _____ () C:\Users\Otto\AppData\Roaming\inst.exe
2017-04-14 16:05 - 2018-09-26 18:16 - 000007859 _____ () C:\Users\Otto\AppData\Roaming\pcouffin.cat
2017-04-14 16:05 - 2018-09-26 18:16 - 000001167 _____ () C:\Users\Otto\AppData\Roaming\pcouffin.inf
2017-04-14 16:05 - 2018-09-26 18:16 - 000082816 _____ (VSO Software) C:\Users\Otto\AppData\Roaming\pcouffin.sys
2017-12-17 15:03 - 2017-12-17 15:03 - 000007667 _____ () C:\Users\Otto\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
Ran by Otto (administrator) on OTTO-PC (01-02-2020 11:50:55)
Running from C:\Users\Otto\Downloads
Loaded Profiles: Otto (Available Profiles: Otto & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe
(Inmatrix LTD) [File not signed] C:\Program Files (x86)\Zoom Player\zplayer.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avp.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avpui.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKU\S-1-5-21-2781758306-2679381193-3636559717-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-2781758306-2679381193-3636559717-1000\Software\Policies\...\system: [disablecmd] 0
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-17] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {043A0EE9-CA26-4648-9F8E-1437A239C896} - System32\Tasks\{71B27A0D-721D-42CE-8B83-05167AB2D7BA} => C:\Windows\system32\pcalua.exe -a "C:\Users\Otto\Downloads\zoek (3).exe" -d C:\Users\Otto\Downloads
Task: {0C6FB184-16B6-4016-B929-E5D17924CF26} - System32\Tasks\{B3C392F5-C8C3-4C3C-8804-C840AFCE3810} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {0E0960DD-44DA-481F-8B18-700CEF473EBF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-14] (Google Inc -> Google Inc.)
Task: {11D0BBE2-0359-41D6-89B5-C636A95C2017} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40432 2019-12-12] (Garmin International, Inc. -> )
Task: {1D9DAE34-D095-4599-9739-02B97D18F7AD} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_321_Plugin.exe [1458232 2020-01-23] (Adobe Inc. -> Adobe)
Task: {284D8FF2-F281-4A92-970F-87BA553794A0} - System32\Tasks\{F17D40F3-F484-4A50-8394-0EF545CAF746} => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {31B09697-86A1-4C6B-81E8-1C1C75245794} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
Task: {4C6B03B5-6046-4DF9-A335-F862637171B2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {5B5156C3-7F2F-4F16-9397-7D21D6850DB5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {5EC3EE66-2D9F-4F58-AB98-E49621327715} - System32\Tasks\{4DD38B43-9E2A-4835-9271-6C1E819E10E5} => C:\Windows\system32\pcalua.exe -a "C:\Users\Otto\Downloads\zoek (3).exe" -d C:\Users\Otto\Downloads
Task: {639B12E9-0FA0-4798-BFF6-7F119315E56D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-01-23] (Adobe Inc. -> Adobe)
Task: {732DC332-C408-4542-B672-D0DA00E83CBA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {9C1BC15C-96E6-4F3E-AB3E-1777C257F488} - System32\Tasks\{D43AA914-4C04-4A51-BCEB-9D2B1A3A847D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\DVDFab\uninstall.exe" -d "C:\Program Files (x86)\DVDFab"
Task: {9DFDC742-049D-4220-B697-E124F7FC87E8} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION
Task: {C3FEDB28-0FA3-48CF-BD97-42B9B381865E} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
Task: {E5D75222-B2EC-45E3-A6C0-52792F15D495} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-14] (Google Inc -> Google Inc.)
Task: {E6F7B6DA-B83E-4930-92DA-ACCDB9CDFD36} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [791232 2019-12-18] (Kaspersky Lab -> AO Kaspersky Lab)
Task: {FA09114F-0BA3-4079-8C96-FBDB1A35B34C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_321_pepper.exe [1453624 2020-01-23] (Adobe Inc. -> Adobe)
Task: {FF34A019-D465-4BD1-894E-47FF6CC97F5B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{01C3FF8A-351D-4688-A431-728EF9387B19}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{D071B99D-D6EA-4E49-B790-473DC6A753C2}: [NameServer] 8.8.8.8,8.8.4.4
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-2781758306-2679381193-3636559717-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: No Name -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-10-19] (Oracle America, Inc. -> Oracle Corporation)
BHO: Kaspersky Protection -> {9F904093-6E18-4536-BF5F-B03689CF00F0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\x64\IEExt\ie_plugin.dll [2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-10-19] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {EF293C5A-9F37-49FD-91C4-2B867063FC54} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\x64\IEExt\ie_plugin.dll [2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
FireFox:
========
FF DefaultProfile: henbtv06.default-1537355602383
FF ProfilePath: C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 [2020-02-01]
FF Homepage: Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 -> about:home
FF NewTab: Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 -> about:newtab
FF Notifications: Mozilla\Firefox\Profiles\henbtv06.default-1537355602383 -> hxxps://www.tipsport.cz
FF Extension: (Google Translator for Firefox) - C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383\Extensions\translator@zoli.bod.xpi [2018-12-08]
FF Extension: (Video DownloadHelper) - C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-12-22]
FF Extension: (No Name) - C:\Users\Otto\AppData\Roaming\Mozilla\Firefox\Profiles\henbtv06.default-1537355602383\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-12-22]
FF HKLM\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Ochrana Kaspersky) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\FFExt\light_plugin_firefox\addon.xpi [2019-12-20]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_B29D4AD94F82454BBC9215BCBD7E80AE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_321.dll [2020-01-23] (Adobe Inc. -> )
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-10-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_321.dll [2020-01-23] (Adobe Inc. -> )
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2020-01-11] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2020-01-11] (Google LLC -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
Chrome:
=======
CHR Profile: C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default [2020-02-01]
CHR Notifications: Default -> hxxps://www.plnapenezenka.cz
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Extension: (Překladač Google) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2020-01-28]
CHR Extension: (Prezentace) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-01-28]
CHR Extension: (Dokumenty) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-01-28]
CHR Extension: (Disk Google) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-01-28]
CHR Extension: (YouTube) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-01-28]
CHR Extension: (Plná Peněženka Lištička) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecmgkhgjmodembdmiimbacpjgcdimiek [2020-01-28]
CHR Extension: (Adobe Acrobat) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-01-28]
CHR Extension: (Ochrana Kaspersky) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhpdacimkjpccooodognopfhbdgnpbk [2020-02-01]
CHR Extension: (Tabulky) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-01-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-28]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-01-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-01-28]
CHR Extension: (Seznam doplněk - Esko) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2020-01-28]
CHR Extension: (Gmail) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-01-28]
CHR Extension: (Chrome Media Router) - C:\Users\Otto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-28]
CHR HKLM\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/deta ... pfhbdgnpbk
CHR HKU\S-1-5-21-2781758306-2679381193-3636559717-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/deta ... pfhbdgnpbk
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVP20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\avp.exe [357416 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [314368 2018-01-18] (Brother Industries, Ltd.) [File not signed]
S4 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-11-25] (Huawei Software Technologies Co., LTD. -> )
S3 klvssbridge64_20.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 20.0\x64\vssbridge64.exe [438928 2019-03-21] (Kaspersky Lab -> AO Kaspersky Lab)
R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aftap0901; C:\Windows\System32\DRIVERS\aftap0901.sys [48624 2018-06-15] (AnchorFree Inc -> The OpenVPN Project)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [246912 2019-02-16] (Kaspersky Lab -> AO Kaspersky Lab)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [339808 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [531584 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [79696 2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [145304 2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [93312 2019-03-12] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [251512 2019-10-29] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [516216 2019-09-17] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [1123664 2019-10-17] (Kaspersky Lab -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [998016 2019-10-29] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klim6; C:\Windows\System32\DRIVERS\klim6.sys [58192 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [79184 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [59512 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [51328 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [48080 2018-02-12] (AnchorFree Inc -> The OpenVPN Project)
R1 klwfp; C:\Windows\System32\DRIVERS\klwfp.sys [105600 2019-03-05] (Kaspersky Lab -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [211048 2019-12-20] (Kaspersky Lab -> AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [232272 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2017-01-02] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1049432 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [202592 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [581464 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [301408 2017-12-05] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [31920 2018-02-26] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
S1 amsdk; \??\C:\Windows\system32\drivers\amsdk.sys [X]
U3 aswbdisk; no ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\Windows\System32\drivers\zamguard64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-02-01 11:50 - 2020-02-01 11:51 - 000020111 _____ C:\Users\Otto\Downloads\FRST.txt
2020-02-01 11:48 - 2020-02-01 11:51 - 000000000 ____D C:\FRST
2020-02-01 11:48 - 2020-02-01 11:48 - 002581504 _____ (Farbar) C:\Users\Otto\Desktop\FRST64.exe
2020-01-30 12:37 - 2020-01-30 12:37 - 000019302 _____ C:\Users\Otto\Downloads\Mystic Prophecy - Metal Division 2CD - Metal-Tracker.com.torrent
2020-01-30 12:37 - 2020-01-30 12:37 - 000000000 ____D C:\Users\Otto\Downloads\Mystic Prophecy - Metal Division (2CD) (2020)
2020-01-30 12:05 - 2020-01-30 12:05 - 000039978 _____ C:\Users\Otto\Documents\cc_20200130_120519.reg
2020-01-30 12:05 - 2020-01-30 12:05 - 000002276 _____ C:\Users\Otto\Documents\cc_20200130_120531.reg
2020-01-30 10:50 - 2020-01-30 10:50 - 000000000 ____D C:\Users\Otto\Downloads\backups
2020-01-30 08:02 - 2020-01-30 08:02 - 000119808 _____ C:\Users\Otto\Documents\Cestovní náhrady Leden 2020.xls
2020-01-29 15:15 - 2020-01-30 11:56 - 000000000 ____D C:\Users\Otto\AppData\Local\AMSDK
2020-01-29 15:14 - 2020-01-29 15:14 - 012741568 _____ (Zemana Ltd. ) C:\Users\Otto\Downloads\AntiMalware_Setup.exe
2020-01-28 21:41 - 2014-02-13 23:59 - 000024064 _____ C:\Windows\zoek-delete.exe
2020-01-28 21:08 - 2020-01-28 21:08 - 000003120 _____ C:\Windows\system32\Tasks\{71B27A0D-721D-42CE-8B83-05167AB2D7BA}
2020-01-28 21:08 - 2020-01-28 21:08 - 000003120 _____ C:\Windows\system32\Tasks\{4DD38B43-9E2A-4835-9271-6C1E819E10E5}
2020-01-28 21:02 - 2020-01-30 12:03 - 000000000 ____D C:\Users\Otto\AppData\Local\CrashDumps
2020-01-28 20:55 - 2020-01-28 20:55 - 000001724 _____ C:\Users\Otto\Documents\mmmmm.txt
2020-01-24 13:00 - 2020-01-28 17:59 - 000000000 ____D C:\Users\Otto\AppData\Local\Adobe
2020-01-24 12:45 - 2020-01-24 12:45 - 000000000 ____D C:\Users\Otto\AppData\Local\mbamtray
2020-01-24 12:42 - 2020-01-24 12:42 - 001924728 _____ (Malwarebytes) C:\Users\Otto\Downloads\MBSetup.exe
2020-01-17 16:21 - 2020-01-17 16:22 - 000000000 ____D C:\ProgramData\Ashampoo
2020-01-17 16:21 - 2020-01-17 16:21 - 000001303 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio 21.lnk
2020-01-17 16:21 - 2020-01-17 16:21 - 000001303 _____ C:\ProgramData\Desktop\Ashampoo Burning Studio 21.lnk
2020-01-17 16:21 - 2020-01-17 16:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2020-01-17 16:19 - 2020-01-17 16:19 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2020-01-17 16:16 - 2020-01-17 16:18 - 226005215 _____ C:\Users\Otto\Downloads\Ashampoo Burning Studio 21.3.0.42.rar
2020-01-16 12:05 - 2020-01-16 12:06 - 016693784 _____ C:\Users\Otto\Downloads\Revo Uninstaller Pro 4.2.3.rar
2020-01-14 16:00 - 2020-01-14 16:45 - 000000000 ____D C:\Users\Otto\Desktop\foto mé
2020-01-12 17:09 - 2020-01-14 16:47 - 000000000 ____D C:\Users\Otto\Desktop\FOTKY Míša
2020-01-12 16:52 - 2020-01-12 17:06 - 000013304 _____ C:\Users\Otto\Desktop\INVENTURA 2019.xlsx
2020-01-12 16:04 - 2020-01-12 16:04 - 000000000 ____D C:\Users\Default\AppData\Local\Google
2020-01-12 16:04 - 2020-01-12 16:04 - 000000000 ____D C:\Users\Default User\AppData\Local\Google
2020-01-12 15:59 - 2020-01-12 16:02 - 000000000 ____D C:\Users\Otto\Desktop\Andrea
2020-01-11 15:23 - 2020-01-14 16:45 - 000000000 ____D C:\Users\Otto\Desktop\Nová složka (2)
2020-01-11 14:02 - 2020-01-11 14:03 - 005901814 _____ C:\Users\Otto\Downloads\D_TEST_2019_02.pdf
2020-01-11 14:02 - 2020-01-11 14:02 - 004977698 _____ C:\Users\Otto\Downloads\D_TEST_2019_01.pdf
2020-01-11 13:47 - 2020-01-11 13:47 - 000000000 ____D C:\Users\Otto\Downloads\dTest 2019 06
2020-01-11 13:30 - 2020-01-11 13:31 - 000000000 ____D C:\Users\Otto\Downloads\dTest 2019 12
2020-01-10 10:02 - 2020-01-10 10:02 - 000001890 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2020-01-10 10:02 - 2020-01-10 10:02 - 000001890 _____ C:\ProgramData\Desktop\Garmin Express.lnk
2020-01-10 09:49 - 2020-01-10 09:49 - 000579688 _____ C:\Users\Otto\Downloads\Výpis z ú_tu stavebního spo_ení_0.pdf
2020-01-02 17:37 - 2020-01-02 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ConvertXtoVideo Ultimate
2020-01-02 17:36 - 2020-01-02 17:36 - 050147492 _____ (lrepacks.ru ) C:\Users\Otto\Downloads\VSO ConvertXtoVideo Ultimate 2.0.0.100.exe
2020-01-02 17:07 - 2020-01-02 17:07 - 000000950 _____ C:\Users\Otto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\4K Video Downloader.lnk
2020-01-02 17:07 - 2020-01-02 17:07 - 000000000 ____D C:\Program Files\4KDownload
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-02-01 11:51 - 2019-04-01 10:34 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2020-02-01 11:45 - 2018-09-17 12:29 - 000000000 ____D C:\ProgramData\Zoom Player
2020-02-01 11:40 - 2009-07-14 05:45 - 000010288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-02-01 11:40 - 2009-07-14 05:45 - 000010288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-02-01 11:27 - 2019-11-02 18:13 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.browser_extension_registry.kvdb-shm
2020-02-01 11:27 - 2019-11-02 18:13 - 000032768 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-shm
2020-02-01 11:26 - 2019-11-02 18:13 - 000032768 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-shm
2020-02-01 11:25 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-01-30 12:38 - 2017-03-25 21:03 - 000000000 ____D C:\Users\Otto\AppData\Roaming\uTorrent
2020-01-30 12:06 - 2018-04-26 19:57 - 000000000 ____D C:\Program Files\WinRAR
2020-01-30 12:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-01-30 12:01 - 2017-03-24 18:33 - 000002786 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-01-30 11:56 - 2018-02-28 19:27 - 000067389 _____ C:\Windows\ZAM.krnl.trace
2020-01-30 11:13 - 2009-07-26 19:41 - 000668542 _____ C:\Windows\system32\perfh005.dat
2020-01-30 11:13 - 2009-07-26 19:41 - 000141202 _____ C:\Windows\system32\perfc005.dat
2020-01-30 11:13 - 2009-07-14 06:13 - 001583226 _____ C:\Windows\system32\PerfStringBackup.INI
2020-01-30 08:04 - 2017-03-26 00:59 - 000023701 _____ C:\Windows\BRRBCOM.INI
2020-01-29 15:15 - 2018-01-02 18:53 - 000000000 ____D C:\Users\Otto\AppData\Local\Zemana
2020-01-28 19:38 - 2017-03-24 18:03 - 000000000 ____D C:\Users\Otto
2020-01-27 06:51 - 2018-10-31 15:29 - 000000000 ____D C:\ProgramData\RogueKiller
2020-01-24 12:26 - 2017-03-30 20:10 - 000000000 ____D C:\Users\Otto\AppData\Temp
2020-01-24 11:43 - 2017-03-25 21:51 - 000000000 ____D C:\Users\Otto\Documents\Programy
2020-01-24 09:51 - 2019-11-02 18:13 - 000379072 _____ C:\Windows\SysWOW64\antimalware.patch_management.product_registry.kvdb-wal
2020-01-23 15:33 - 2018-03-19 22:28 - 000004482 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-01-23 15:33 - 2018-01-27 20:36 - 000004410 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-01-23 15:33 - 2017-10-30 22:33 - 000004494 _____ C:\Windows\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-01-23 15:33 - 2017-10-08 15:33 - 000000000 ____D C:\Windows\system32\Macromed
2020-01-23 15:33 - 2017-04-07 20:55 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-01-23 15:33 - 2017-04-07 20:55 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-01-23 15:33 - 2017-04-07 20:55 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-01-23 11:02 - 2017-03-25 16:41 - 000000000 ____D C:\Users\Otto\AppData\LocalLow\Mozilla
2020-01-22 15:21 - 2019-08-19 09:51 - 000000000 ____D C:\Users\Otto\Desktop\Nová složka
2020-01-17 17:04 - 2019-10-14 17:54 - 000002000 _____ C:\Users\Public\Desktop\Google Slides.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000002000 _____ C:\ProgramData\Desktop\Google Slides.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001998 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001998 _____ C:\ProgramData\Desktop\Google Sheets.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001988 _____ C:\Users\Public\Desktop\Google Docs.lnk
2020-01-17 17:04 - 2019-10-14 17:54 - 000001988 _____ C:\ProgramData\Desktop\Google Docs.lnk
2020-01-17 17:00 - 2017-05-02 15:39 - 000000000 ____D C:\Users\Otto\Documents\ConvertXtoVideo Ultimate
2020-01-17 16:38 - 2018-06-14 16:50 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-17 16:38 - 2018-06-14 16:50 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-01-17 16:38 - 2018-06-14 16:50 - 000002183 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-01-17 16:32 - 2017-03-24 18:46 - 000000000 ____D C:\Users\UpdatusUser
2020-01-17 16:24 - 2019-01-19 23:41 - 000000000 ____D C:\Users\Otto\AppData\Roaming\Ashampoo
2020-01-16 22:04 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2020-01-16 22:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2020-01-16 12:09 - 2017-03-26 01:23 - 000000000 ____D C:\ProgramData\VS Revo Group
2020-01-16 12:06 - 2018-09-14 15:29 - 000001077 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2020-01-16 12:06 - 2018-09-14 15:29 - 000001077 _____ C:\ProgramData\Desktop\Revo Uninstaller Pro.lnk
2020-01-16 12:06 - 2018-09-14 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2020-01-16 12:01 - 2019-04-01 10:34 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2020-01-14 16:21 - 2019-11-02 18:13 - 000020632 _____ C:\Windows\SysWOW64\antimalware.unwanted_products.product_registry.kvdb-wal
2020-01-12 16:18 - 2018-06-14 16:50 - 000003390 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-01-12 16:18 - 2018-06-14 16:50 - 000003262 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-01-12 16:18 - 2017-03-27 19:34 - 000003556 _____ C:\Windows\system32\Tasks\GarminUpdaterTask
2020-01-12 15:55 - 2019-11-08 17:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-01-12 15:55 - 2017-03-25 16:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-01-11 14:57 - 2017-04-20 17:44 - 000000000 ____D C:\Program Files (x86)\Google
2020-01-10 10:03 - 2017-03-27 19:35 - 000000000 ____D C:\Program Files (x86)\Garmin
2020-01-10 10:02 - 2017-03-27 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2020-01-10 10:02 - 2017-03-27 19:35 - 000000000 ____D C:\ProgramData\Garmin
2020-01-02 17:43 - 2017-04-14 16:05 - 000000000 ____D C:\Users\Otto\AppData\Roaming\Vso
==================== Files in the root of some directories ========
2017-06-10 16:17 - 2018-09-26 18:16 - 000099384 _____ () C:\Users\Otto\AppData\Roaming\inst.exe
2017-04-14 16:05 - 2018-09-26 18:16 - 000007859 _____ () C:\Users\Otto\AppData\Roaming\pcouffin.cat
2017-04-14 16:05 - 2018-09-26 18:16 - 000001167 _____ () C:\Users\Otto\AppData\Roaming\pcouffin.inf
2017-04-14 16:05 - 2018-09-26 18:16 - 000082816 _____ (VSO Software) C:\Users\Otto\AppData\Roaming\pcouffin.sys
2017-12-17 15:03 - 2017-12-17 15:03 - 000007667 _____ () C:\Users\Otto\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)