Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-12-2022
Ran by User (administrator) on DESKTOP-K1KAJM8 (HP HP 250 G4 Notebook PC) (16-12-2022 10:57:17)
Running from C:\Users\User\Desktop
Loaded Profiles: User
Platform: Microsoft Windows 10 Home Version 21H2 19044.2364 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCopyAccelerator.exe
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <8>
(explorer.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22092.214.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Huawei Technologies Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.2300_none_7e14edbc7c88b7d5\TiWorker.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8911872 2016-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4183113033-1021519691-2957343654-1001\...\Run: [Microsoft Edge Update] => C:\Users\User\AppData\Local\Microsoft\EdgeUpdate\1.3.171.37\MicrosoftEdgeUpdateCore.exe [263640 2022-11-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4183113033-1021519691-2957343654-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4245352 2022-12-01] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-4183113033-1021519691-2957343654-1001\...\Run: [MicrosoftEdgeAutoLaunch_C46CFC0629905CC775E70B50EA8A519C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3877280 2022-12-08] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4183113033-1021519691-2957343654-1001\...\MountPoints2: {0ebc49cc-c4af-11ec-8af7-b05ada9e2109} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-4183113033-1021519691-2957343654-1001\...\MountPoints2: {538da419-2ae9-11ed-8b1b-b05ada9e2109} - "D:\HiSuiteDownLoader.exe" 
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP DeskJet 5820 series): C:\WINDOWS\system32\HPDiscoPMEE11.dll [807056 2016-08-04] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\...\Print\Monitors\HP EE11 Status Monitor: C:\WINDOWS\system32\hpinkstsEE11LM.dll [383496 2015-08-31] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\108.0.5359.125\Installer\chrmstp.exe [2022-12-16] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {179B78FA-C5A1-44A1-8D2C-6BEA2626FF0D} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-4183113033-1021519691-2957343654-1001Core => C:\Users\User\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [214928 2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B24CBD8-FE75-4C85-BB49-203B3307148C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2E897B00-4B7D-4E2D-A5C1-E9DC95F4E78C} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-4183113033-1021519691-2957343654-1001UA => C:\Users\User\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [214928 2022-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {463BB234-CBFF-42D1-B94B-9DDF5582E7E1} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe (No File)
Task: {592B09D9-45E4-4690-BE42-F4ACF983AABC} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe (No File)
Task: {5D82593B-8351-4DB1-AB3E-A93D8085D48A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-26] (Adobe Inc. -> Adobe Inc.)
Task: {70B96C61-027D-4638-996E-F1BDD88AC37D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {724E6A19-DD27-4D74-9B20-33C2677EB59F} - System32\Tasks\GoogleUpdateTaskMachineUA{118BA2C2-A083-4C61-B8D5-0CFAA4DC563B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-26] (Google LLC -> Google LLC)
Task: {80135487-83AE-4F03-B5F9-2C91B563700A} - System32\Tasks\HPCustParticipation HP DeskJet 5820 series => C:\Program Files\HP\HP DeskJet 5820 series\Bin\HPCustPartic.exe [6104720 2016-08-04] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {8CAA393F-DF17-4462-8CCC-6C19E37F5B5B} - System32\Tasks\GoogleUpdateTaskMachineCore{3C65CB29-7F37-4A96-B761-7D5CF504F712} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-26] (Google LLC -> Google LLC)
Task: {8F260714-2EBE-4860-9CE1-67C6A9C94E06} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9180E132-04C2-43E9-B518-3CE069EE0133} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NoUACCheck
Task: {9B61CE40-89E7-4E9D-A106-EB1925930F4F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C22870A1-B30E-44EE-BEFB-7B1EEAF4B8B6} - System32\Tasks\iTop BLACK FRIDAY Task (One-Time) => C:\Program Files (x86)\iTop VPN\Pub\itopbf.exe /vpn (No File)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{5abe16c3-7309-4274-ac53-296e8acc813c}: [DhcpNameServer] 10.10.10.254 192.168.1.21 192.168.1.22
Tcpip\..\Interfaces\{e94abcde-efa8-49c6-ba69-73cf25ed3a24}: [DhcpNameServer] 10.0.0.138

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default [2022-12-15]
Edge DownloadDir: Default -> C:\Users\User\Desktop
Edge Notifications: Default -> hxxps://19216801.one
Edge HomePage: Default -> hxxp://www.seznam.cz/
Edge StartupUrls: Default -> "hxxp://www.seznam.cz/"
Edge Profile: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2022-11-02]

FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-11-14] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2022-12-16]
CHR DownloadDir: C:\Users\User\Desktop
CHR Notifications: Default -> hxxps://19216801.one; hxxps://aukro.cz; hxxps://cs.soringpcrepair.com; hxxps://cs.uzasnenabidky24.com; hxxps://upcr.cz; hxxps://www.duolingo.com; hxxps://www.facebook.com; hxxps://www.heureka.cz; hxxps://www.ubuy.cz; hxxps://www.youtube.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://seznam.cz/"
CHR DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> seznam.cz
CHR DefaultSuggestURL: Default -> hxxps://suggest.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Extension: (Překladač Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-06-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-26]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-11-02]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2022-11-26]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [236864 2022-06-24] (Huawei Technologies Co., Ltd. -> ) [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe [3191264 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe [133592 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WsAppService3; C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe [83232 2019-06-26] (Wondershare Technology Co.,Ltd -> Wondershare)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 cpuz154; C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2022-11-26] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2022-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2022-06-24] (Huawei Technologies Co., Ltd.) [File not signed]
R3 MpKsl84a24512; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{585D1750-5D72-4172-9308-C6BA8896DAFF}\MpKslDrv.sys [214280 2022-12-16] (Microsoft Windows -> Microsoft Corporation)
S3 Ser2pl; C:\WINDOWS\System32\drivers\ser2pl64.sys [303000 2021-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Prolific Technology Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2022-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [473376 2022-12-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99616 2022-12-09] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
S3 gameflt; \SystemRoot\System32\DriverStore\FileRepository\gameflt.inf_amd64_522fdd92caccac75\gameflt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-12-16 10:57 - 2022-12-16 10:58 - 000014815 _____ C:\Users\User\Desktop\FRST.txt
2022-12-16 10:56 - 2022-12-16 10:56 - 002375680 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2022-12-16 08:55 - 2022-12-16 08:55 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2022-12-15 16:26 - 2022-12-15 16:27 - 000065944 _____ C:\Users\User\Desktop\Faktura 3258528025.pdf
2022-12-15 16:14 - 2022-12-15 16:14 - 000163231 _____ C:\Users\User\Desktop\ProofOfDeliveryRecipient.pdf
2022-12-15 09:24 - 2022-12-15 09:24 - 000020762 _____ C:\Users\User\Desktop\škola.odt
2022-12-15 08:56 - 2022-12-15 08:56 - 000012367 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-12-15 08:55 - 2022-12-15 08:55 - 000297472 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-12-14 18:31 - 2022-12-14 18:31 - 000000000 ___HD C:\$WinREAgent
2022-12-14 17:28 - 2022-12-14 17:28 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4183113033-1021519691-2957343654-1001
2022-12-14 17:28 - 2022-12-14 17:28 - 000002378 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-12-08 09:24 - 2022-12-08 09:24 - 000065747 _____ C:\Users\User\Desktop\Faktura 3258184258.pdf
2022-11-30 17:44 - 2022-11-30 17:44 - 009700357 _____ C:\Users\User\Desktop\Rousínov.pdf
2022-11-27 13:04 - 2022-11-27 13:12 - 000064164 _____ C:\Users\User\Desktop\zivotopis Veronika.pdf
2022-11-26 13:07 - 2022-11-26 13:07 - 000003654 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask
2022-11-26 13:06 - 2022-11-26 13:06 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2022-11-26 12:55 - 2022-11-26 12:55 - 079994880 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2022-11-26 12:55 - 2022-11-26 12:55 - 000540672 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2022-11-26 12:55 - 2022-11-26 12:55 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit
2022-11-26 12:55 - 2022-11-26 12:55 - 000024576 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2022-11-26 12:51 - 2022-11-26 12:53 - 000000000 ____D C:\Users\User\AppData\Roaming\iTop PDF
2022-11-26 12:47 - 2022-11-26 12:47 - 000000000 ____D C:\Users\User\AppData\LocalLow\iTop Screen Recorder
2022-11-26 12:46 - 2022-11-26 12:46 - 000003324 _____ C:\WINDOWS\system32\Tasks\iTop BLACK FRIDAY Task (One-Time)
2022-11-26 12:43 - 2022-11-26 13:08 - 000000000 ____D C:\ProgramData\{150F4013-6884-4350-8DDC-6BFCB4C5DC15}
2022-11-26 12:42 - 2022-11-26 12:52 - 000000000 ____D C:\ProgramData\iTop
2022-11-26 12:42 - 2022-11-26 12:48 - 000000000 ____D C:\Users\User\AppData\Roaming\iTop Screen Recorder
2022-11-26 12:39 - 2022-11-26 12:39 - 000000000 ____D C:\ProgramData\{F86B0233-9A85-4589-8AAF-524CC4F8211B}
2022-11-26 12:38 - 2022-11-26 13:07 - 000000000 ____D C:\Users\User\AppData\LocalLow\IObit
2022-11-26 12:38 - 2022-11-26 12:41 - 000000000 ____D C:\ProgramData\ProductData
2022-11-26 12:37 - 2022-11-26 13:07 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
2022-11-26 12:21 - 2022-11-26 12:21 - 000000000 ____D C:\ProgramData\Trend Micro
2022-11-24 10:56 - 2022-11-24 10:56 - 001466542 _____ C:\Users\User\Desktop\priloha_1108291573_0_Oznameni_o_vyplate_duchodu-Marvan._pdf..pdf
2022-11-19 07:11 - 2022-11-19 07:11 - 000001165 _____ C:\Users\Public\Desktop\LibreOffice 7.4.lnk
2022-11-19 07:11 - 2022-11-19 07:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.4

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-12-16 10:58 - 2022-02-04 18:13 - 000000000 ____D C:\FRST
2022-12-16 10:58 - 2021-12-19 14:39 - 000000000 ____D C:\Program Files (x86)\Google
2022-12-16 10:50 - 2022-07-20 19:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-12-16 08:58 - 2022-02-26 17:10 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-12-16 08:58 - 2022-02-26 17:10 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-12-16 08:58 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-12-16 08:56 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-12-16 08:55 - 2020-06-08 15:05 - 000000000 __SHD C:\Users\User\IntelGraphicsProfiles
2022-12-15 09:34 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-12-15 09:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-12-15 09:33 - 2022-07-20 20:02 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-12-15 09:33 - 2019-12-07 15:41 - 000719322 _____ C:\WINDOWS\system32\perfh005.dat
2022-12-15 09:33 - 2019-12-07 15:41 - 000145448 _____ C:\WINDOWS\system32\perfc005.dat
2022-12-15 09:28 - 2022-07-20 20:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-12-15 09:28 - 2022-07-20 19:49 - 000646184 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-12-15 09:28 - 2020-06-08 14:40 - 000008192 ___SH C:\DumpStack.log.tmp
2022-12-15 09:28 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-12-15 09:28 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-12-15 09:27 - 2022-07-20 17:34 - 000000000 ____D C:\WINDOWS\en-GB
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemApps
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-12-15 09:27 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-12-15 09:05 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-12-15 08:55 - 2022-07-20 19:52 - 003014656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-12-14 17:32 - 2021-12-19 17:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-12-14 17:28 - 2022-07-20 20:08 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4183113033-1021519691-2957343654-1001
2022-12-14 17:25 - 2021-12-19 17:22 - 148633544 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-12-09 08:17 - 2021-12-19 13:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-12-07 17:45 - 2021-12-19 14:20 - 000000000 ____D C:\Users\User\AppData\Local\PlaceholderTileLogoFolder
2022-12-07 17:45 - 2021-12-19 14:13 - 000000000 ____D C:\Users\User\AppData\Local\Packages
2022-12-06 10:58 - 2022-02-15 15:50 - 000000000 ____D C:\Users\User\AppData\Roaming\vlc
2022-12-06 08:13 - 2022-04-22 09:46 - 000019074 _____ C:\Users\User\Documents\Splátkový kalendář.ods
2022-12-06 08:10 - 2022-04-17 16:29 - 000000000 ____D C:\Program Files (x86)\Steam
2022-11-26 13:07 - 2021-12-29 08:11 - 000000000 ____D C:\ProgramData\IObit
2022-11-26 13:06 - 2021-12-29 08:10 - 000000000 ____D C:\Program Files (x86)\IObit
2022-11-26 13:01 - 2022-07-20 16:20 - 000000000 ___DC C:\WINDOWS\Panther
2022-11-26 12:20 - 2021-12-19 14:14 - 000000000 ____D C:\ProgramData\Packages
2022-11-19 07:11 - 2022-11-08 10:47 - 000000000 ____D C:\Program Files\LibreOffice
2022-11-18 12:35 - 2022-09-12 06:20 - 000000000 ____D C:\Users\User\AppData\Roaming\com.adobe.dunamis
2022-11-17 17:03 - 2022-07-20 20:08 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-11-17 17:02 - 2022-10-13 08:13 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2022-11-17 17:02 - 2022-10-13 08:13 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk

==================== Files in the root of some directories ========

2022-01-03 10:55 - 2022-01-03 10:59 - 000003584 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-02-16 13:29 - 2022-10-02 07:38 - 000007605 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================