Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-12-2022
Ran by jtrac (administrator) on DESKTOP-1TH6EDE (Hewlett-Packard HP EliteDesk 800 G1 SFF) (05-01-2023 07:56:23)
Running from C:\Users\jtrac\OneDrive\Plocha
Loaded Profiles: jtrac
Platform: Microsoft Windows 10 Pro Version 21H2 19044.2364 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\BridgeCommunication.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <3>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <13>
(explorer.exe ->) (Nenad Hrg -> Nenad Hrg (SoftwareOK.com)) C:\Program Files\Q-Dir\Q-Dir.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATII6E.EXE
(Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Intel(R) pGFX 2020 -> ) C:\Windows\System32\igfxTray.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(IObit CO., LTD -> IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(services.exe ->) (ABBYY Production LLC -> ABBYY Production LLC) C:\Program Files (x86)\Common Files\ABBYY\FineReader\15\Licensing\NetworkLicenseServer.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AOMEI\AOMEI Backupper\6.9.1\ABService.exe
(services.exe ->) (Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Trust Services -> Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe
(services.exe ->) (SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(svchost.exe ->) () [File not signed] C:\Users\jtrac\AppData\Roaming\iTop PDF\Network\MXWTPTTTYKDUYVXJ.exe <4>
(svchost.exe ->) () [File not signed] C:\Users\jtrac\AppData\Roaming\mDHCkATZaI\sRrfjeBGVm.exe
(svchost.exe ->) () [File not signed] C:\Users\jtrac\AppData\Roaming\Microsoft\Network\mstsca.exe
(svchost.exe ->) (Microleaves LTD -> Advanced Windows Manager) C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe <9>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11102800 2021-08-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617864 2021-08-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Q-Dir] => C:\Program Files\Q-Dir\Q-Dir.exe [2323776 2022-02-24] (Nenad Hrg -> Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3412725004-164030467-415606481-1001\...\Run: [EPSDNMON] => "" (No File)
HKU\S-1-5-21-3412725004-164030467-415606481-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATII6E.EXE [293504 2012-05-21] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3412725004-164030467-415606481-1001\...\Run: [SysHelper] => "C:\Users\jtrac\AppData\Local\a33708d3-64ca-4ef1-8823-ebe60c72d6ef\Tl1EOyk65.exe" --AutoStart (No File) <==== ATTENTION
HKLM\...\Print\Monitors\EPSON L550 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMI6E.DLL [120320 2011-04-20] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\MPE3 Port: C:\WINDOWS\system32\mpelocalmon.dll [26112 2018-05-15] (Copyright (c) Code Industry Ltd) [File not signed]
HKLM\...\Print\Monitors\PDF-XChange5-ABBYY-FR15: C:\WINDOWS\system32\pxc50pmaf15.dll [57328 2018-12-05] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\UDC: C:\WINDOWS\system32\udcpm.dll [42456 2016-11-05] (fCoder SIA -> fCoder Group, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\108.0.5359.125\Installer\chrmstp.exe [2022-12-16] (Google LLC -> Google LLC)
BootExecute: autocheck autochk *  

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04F90BD9-8A48-4032-8A7D-47D43232F6DD} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NoUACCheck
Task: {0A752336-1F3E-40C0-B0C6-34593EABAC29} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [142592 2022-12-23] (Glarysoft LTD -> Glarysoft Ltd)
Task: {0C397FF0-8AB3-4A81-AEC8-3F73CD940D84} - System32\Tasks\Christmas Task (One-Time) => C:\Program Files (x86)\IObit\IObit Uninstaller\xmas.exe [18165824 2022-12-20] (IObit CO., LTD -> IObit)
Task: {0FD7CA87-053C-4F78-8E25-222C681D5231} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {14800452-1965-4680-9E96-60E2D46E89C9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26308584 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {16F6C22E-8316-4F7D-88BE-6430DEF198D4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144344 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FDAD2D4-2484-432A-B45B-3CAF4B06E47E} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {2945362B-F0CE-417B-A9B1-B34D9A4761F1} - System32\Tasks\AdvancedWindowsManager #3 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {2A893000-F20D-49DB-B230-48F87EC0AD79} - System32\Tasks\AdvancedWindowsManager #4 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {316B4090-638D-4F93-9D29-492975773016} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckError => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {354516C6-CAD9-4268-B94C-204CA2F6608E} - System32\Tasks\AdvancedWindowsManager #6 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {40A5B919-96CA-4576-AC7D-00B7E7F488FE} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [146816 2022-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {52BE00F4-0E87-4C58-9D6C-B9763C15C520} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26308584 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {55D2A885-A7E5-4263-8526-1868AAE09060} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [847392 2022-11-28] (HP Inc. -> HP Inc.)
Task: {59957B11-CACA-49FD-AF9E-91243641417D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {59BF5EA8-698E-4897-B7FC-4385E9CA6CDB} - System32\Tasks\AdvancedUpdater => C:\Program Files (x86)\AW Manager\Windows Manager\Windows Updater.exe [1036152 2022-05-11] (Microleaves LTD -> AdvancedWindowsManager) <==== ATTENTION
Task: {5D9D9A82-AB87-4916-9DD4-3B9C54632558} - System32\Tasks\AdvancedWindowsManager #1 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {5FFE0637-8C50-48C9-84AC-6E52329E21A0} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ABO => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {6379361D-B6BE-47DD-87A7-04A63B48DA0D} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM1 => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {6CCC683D-D6AA-49C1-9711-0DC00234BF98} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6CFF992F-1157-431F-BA64-5FD81E61AA49} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8509392 2022-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {70D3AD87-C99C-4BB2-A70D-4AE5E81DF8B3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-26] (Adobe Inc. -> Adobe Inc.)
Task: {71F627A4-E4F6-45D7-B7D7-B1082FA10231} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ShowUI => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {77F82DB2-A5F1-4B46-9B3D-2ECADF2E04EB} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BCF => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {78D02A4F-00EA-48D6-A6F2-8B79348719DB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8509392 2022-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {7AEF6D04-BAE1-496E-A25A-1E0764223956} - System32\Tasks\AdvancedWindowsManager #9 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {7DECD0F5-1422-4C6E-BAAF-E1FEA5B4AA89} - System32\Tasks\UpdateDetector => C:\Program Files (x86)\Glarysoft\Update Detector 5\UpdateDetector.exe -autorun (No File)
Task: {892D0468-325C-48DC-9A71-6DC48D385080} - System32\Tasks\Uninstaller_SkipUac_jtrac => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [9395208 2022-12-15] (IObit CO., LTD -> IObit)
Task: {948F6DFD-DC00-4F7F-ADD7-DD6BDBA1D385} - System32\Tasks\mDHCkATZaI => C:\Users\jtrac\AppData\Roaming\mDHCkATZaI\sRrfjeBGVm.exe [759818272 2023-01-05] () [File not signed]
Task: {A35BF7FE-A6E2-4846-8D87-80206AA0C0D4} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusError => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {A673DE3E-AE76-4781-A6D1-9746AC5EA1CF} - System32\Tasks\AdvancedWindowsManager #2 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {A6AC3C33-B22D-46C2-BD52-4B8B306087C4} - System32\Tasks\MXWTPTTTYKDUYVXJ_run => C:\Users\jtrac\AppData\Roaming\iTop PDF\Network\MXWTPTTTYKDUYVXJ.exe [612976 2022-12-16] () [File not signed]
Task: {AAACCBFF-6806-4E1F-9A35-F782EA8D6733} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2022-11-28] (HP Inc. -> HP Inc.)
Task: {AE5EC78F-7B65-479A-B267-80DE7836F136} - System32\Tasks\AdvancedWindowsManager #7 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {BC4DBCAD-CBBA-4A8F-9C96-E24B39F7F2BE} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\SystemInfo => C:\Users\jtrac\AppData\Roaming\\sysinfotool\\sitool.exe [75776 ] () [File not signed] <==== ATTENTION
Task: {BE5469C0-83D9-4756-B7C5-D88DE7F142FA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MpCmdRun.exe [1592184 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C569EA73-DE78-40F2-8F02-D7AC7FDBE04B} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckTest => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {C5F40AD8-BCCA-4A4E-BC99-7E4C1A8D9849} - System32\Tasks\AdvancedWindowsManager #8 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION
Task: {CEA9F6E4-5B0E-43F9-B5E8-4BC91B791528} - System32\Tasks\Hewlett-Packard\HP Diagnostics\LaunchUI => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {D8A9AFB4-4DE7-4A6C-8C4A-02C553012427} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM2 => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {F0FBACB1-AC64-4BFB-ADBC-C971A9ABC900} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusTest => C:\Program Files (x86)\HP\HpHwDiag\HpHwDiagA.exe [106761112 2021-01-26] (HP Inc. -> HP Inc.)
Task: {FBF0C6AC-8CE2-4BD9-9CEC-563B19F90E59} - System32\Tasks\Azure-Update-Task => C:\Users\jtrac\AppData\Roaming\Microsoft\Network\mstsca.exe [9728 2023-01-05] () [File not signed] <==== ATTENTION
Task: {FCE2C587-8600-4BF0-B640-80AD19B1DD68} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144344 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {FE5FD244-E497-409F-962C-E1437D4D8E91} - System32\Tasks\AdvancedWindowsManager #5 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [{DD1BA6F9-3DDC-4891-8F75-7C3DD122F931}] => hxxp://34.80.59.191/win.pac <==== ATTENTION
AutoConfigURL: [S-1-5-21-3412725004-164030467-415606481-1001] => hxxp://34.80.59.191/win.pac <==== ATTENTION
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{7e9039e2-cc16-4442-b67a-0fc547256861}: [DhcpNameServer] 192.168.8.1 192.168.8.1
ManualProxies: 0hxxp://34.80.59.191/win.pac <==== ATTENTION

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2022-05-09] [Legacy] [not signed]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-11-14] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-11-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-11-21] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\jtrac\AppData\Local\Google\Chrome\User Data\Default [2023-01-05]
CHR DownloadDir: D:\DOWN
CHR Notifications: Default -> hxxps://calendar.google.com; hxxps://www.facebook.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/"
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\jtrac\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-12-07]
CHR Extension: (Dokumenty Google offline) - C:\Users\jtrac\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-22]
CHR Extension: (FormApps Extension) - C:\Users\jtrac\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2022-11-21]
CHR Extension: (HP Network Check Launcher) - C:\Users\jtrac\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo [2022-02-03]
CHR Extension: (Kontrola e-mailu Google) - C:\Users\jtrac\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2022-02-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\jtrac\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-03]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9022120 2021-12-18] (Acronis International GmbH -> Acronis International GmbH)
R2 ABBYY.Licensing.FineReader.15.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\15\Licensing\NetworkLicenseServer.exe [1058032 2019-07-30] (ABBYY Production LLC -> ABBYY Production LLC)
S3 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [12978544 2021-12-18] (Acronis International GmbH -> )
S4 AcronisCyberProtectionService; C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe [1421352 2021-12-18] (Acronis International GmbH -> Acronis International GmbH)
S3 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1704216 2021-12-18] (Acronis International GmbH -> Acronis International GmbH)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.)
S3 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2022-12-03] (Acronis International GmbH -> )
S2 AppServicei; C:\WINDOWS\system32\5U7VGMLM4Z.tmp [6144 2023-01-05] () [File not signed] <==== ATTENTION
R2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\6.9.1\ABService.exe [1092656 2022-03-16] (AOMEI International Network Limited -> AOMEI International Network Limited)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12540928 2022-12-14] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [685496 2019-05-08] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [135824 2011-12-12] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
R2 GUBootService; C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe [886016 2022-11-27] (Glarysoft LTD -> Glarysoft Ltd)
S3 GUPMService; C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe [73984 2022-12-23] (Glarysoft LTD -> Glarysoft Ltd)
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [787512 2022-10-26] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [786512 2022-10-26] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [782904 2022-10-26] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [787016 2022-10-26] (HP Inc. -> HP Inc.)
S2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [167432 2022-10-20] (IObit CO., LTD -> IObit)
S3 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4882992 2021-12-18] (Acronis International GmbH -> Acronis International GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [224184 2022-12-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2021-12-18] (Acronis International GmbH -> Acronis International GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\NisSrv.exe [3191264 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe [133592 2022-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [172928 2022-04-04] (AOMEI International Network Limited -> )
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [32176 2022-04-04] (AOMEI International Network Limited -> )
S3 ANVSOFT_WaveExtensible; C:\WINDOWS\system32\drivers\ammvrtaudio.sys [38048 2019-12-24] (深圳市安韦尔软件技术有限公司 -> )
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2021-12-18] (Bitdefender SRL -> Bitdefender)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2021-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [721536 2022-12-03] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2022-12-03] (Acronis International GmbH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [183944 2022-12-03] (Acronis International GmbH -> Acronis International GmbH)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [45056 2022-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2021-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [39000 2020-10-11] (IObit CO., LTD -> IObit Information Technology)
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [43896 2022-10-20] (IObit Information Technology -> IObit)
R3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37112 2022-10-20] (IObit Information Technology -> IObit)
R3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [51128 2022-10-20] (IObit Information Technology -> IObit)
R3 MpKsl6951fcde; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{18E520AD-AC4E-45B1-8C0F-7FEF504FDA58}\MpKslDrv.sys [214280 2023-01-05] (Microsoft Windows -> Microsoft Corporation)
R1 ngscan; C:\WINDOWS\System32\DRIVERS\ngscan.sys [179104 2021-12-18] (Acronis International GmbH -> Acronis International GmbH)
R3 NmPar; C:\WINDOWS\system32\DRIVERS\NmPar.sys [95744 2022-02-24] (Microsoft Windows Hardware Compatibility Publisher -> )
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [37336 2021-03-09] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [887032 2022-12-03] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2022-12-03] (Acronis International GmbH -> Acronis International GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2022-12-03] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2022-12-03] (Acronis International GmbH -> Acronis International GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2022-12-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [473376 2022-12-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99616 2022-12-09] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2023-01-05 07:46 - 2023-01-05 07:46 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2023-01-05 07:42 - 2023-01-05 07:42 - 000001114 _____ C:\Users\jtrac\_readme.txt
2023-01-05 07:42 - 2023-01-05 07:42 - 000001114 _____ C:\_readme.txt
2023-01-05 07:30 - 2023-01-05 07:52 - 000000000 ____D C:\Users\jtrac\AppData\Local\a33708d3-64ca-4ef1-8823-ebe60c72d6ef
2023-01-05 07:30 - 2023-01-05 07:31 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\mDHCkATZaI
2023-01-05 07:30 - 2023-01-05 07:30 - 008115200 _____ C:\Users\jtrac\AppData\Roaming\G6Wa3wt3.exe
2023-01-05 07:30 - 2023-01-05 07:30 - 000684984 _____ (Mozilla Foundation) C:\Users\jtrac\AppData\LocalLow\freebl3.dll
2023-01-05 07:30 - 2023-01-05 07:30 - 000627128 _____ (Mozilla Foundation) C:\Users\jtrac\AppData\LocalLow\mozglue.dll
2023-01-05 07:30 - 2023-01-05 07:30 - 000254392 _____ (Mozilla Foundation) C:\Users\jtrac\AppData\LocalLow\softokn3.dll
2023-01-05 07:30 - 2023-01-05 07:30 - 000003678 _____ C:\WINDOWS\system32\Tasks\mDHCkATZaI
2023-01-05 07:30 - 2023-01-05 07:30 - 000003616 _____ C:\WINDOWS\system32\Tasks\Azure-Update-Task
2023-01-05 07:30 - 2023-01-05 07:30 - 000000558 _____ C:\Users\jtrac\AppData\Local\bowsakkdestx.txt
2023-01-05 07:30 - 2023-01-05 07:30 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\NCH Software
2023-01-05 07:30 - 2023-01-05 07:30 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\aCEiHw
2023-01-05 07:30 - 2023-01-05 07:30 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\94YIHXDCs
2023-01-05 07:30 - 2023-01-05 07:30 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\57CBBD1C9F34CBC2
2023-01-05 07:30 - 2023-01-05 07:30 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\1pQ8HKVqKx
2023-01-05 07:30 - 2023-01-05 07:30 - 000000000 ____D C:\Users\jtrac\AppData\Local\3fda138d-169a-457b-a707-1ff7cdb43263
2023-01-05 07:30 - 2023-01-05 07:30 - 000000000 ____D C:\SystemID
2023-01-05 07:29 - 2023-01-05 07:38 - 000000000 ____D C:\Users\jtrac\AppData\Local\infocomp
2023-01-04 14:42 - 2023-01-04 14:43 - 000000000 ____D C:\Users\jtrac\OneDrive\Dokumenty\Wondershare Video Editor
2023-01-04 14:42 - 2015-02-27 11:33 - 002140712 _____ (MainConcept GmbH) C:\WINDOWS\SysWOW64\mcmpgvout.004
2023-01-04 14:42 - 2015-02-27 11:33 - 000531496 _____ (MainConcept GmbH) C:\WINDOWS\SysWOW64\mcmpeg2mux.ax
2023-01-04 14:42 - 2015-02-27 11:33 - 000375848 _____ (MainConcept GmbH) C:\WINDOWS\SysWOW64\mcm2ve.ax
2023-01-04 14:42 - 2015-02-27 11:33 - 000257064 _____ (MainConcept GmbH) C:\WINDOWS\SysWOW64\mcl2ae.ax
2023-01-04 14:42 - 2015-02-27 11:33 - 000244776 _____ (MainConcept GmbH) C:\WINDOWS\SysWOW64\mcmpgaout.dll
2023-01-04 14:42 - 2015-02-27 11:33 - 000020520 _____ (MainConcept GmbH) C:\WINDOWS\SysWOW64\mcmpgvout.dll
2023-01-04 13:03 - 2023-01-04 13:26 - 000000000 ____D C:\Program Files\Wondershare
2023-01-04 13:01 - 2023-01-05 07:57 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\SysInfoTool
2023-01-04 12:38 - 2023-01-04 13:27 - 000000000 ____D C:\Users\jtrac\.openshot_qt
2023-01-04 07:53 - 2023-01-04 07:53 - 000000000 ____D C:\ProgramData\AdvancedWindowsManager
2023-01-03 14:00 - 2023-01-03 14:00 - 000001150 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashBrowser.lnk
2023-01-03 13:59 - 2023-01-03 14:00 - 000000000 ____D C:\Program Files (x86)\FlashBrowser
2023-01-03 06:40 - 2023-01-03 06:40 - 000003936 _____ C:\WINDOWS\system32\Tasks\AdvancedUpdater
2023-01-03 06:40 - 2023-01-03 06:40 - 000003930 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #7
2023-01-03 06:40 - 2023-01-03 06:40 - 000003930 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #6
2023-01-03 06:40 - 2023-01-03 06:40 - 000003930 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #5
2023-01-03 06:40 - 2023-01-03 06:40 - 000003930 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #4
2023-01-03 06:40 - 2023-01-03 06:40 - 000003930 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #3
2023-01-03 06:40 - 2023-01-03 06:40 - 000003930 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #2
2023-01-03 06:40 - 2023-01-03 06:40 - 000003930 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #1
2023-01-03 06:40 - 2023-01-03 06:40 - 000003928 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #8
2023-01-03 06:40 - 2023-01-03 06:40 - 000003926 _____ C:\WINDOWS\system32\Tasks\AdvancedWindowsManager #9
2023-01-03 06:40 - 2023-01-03 06:40 - 000000000 ____D C:\Program Files (x86)\AW Manager
2023-01-03 06:39 - 2023-01-03 06:39 - 000000000 ____D C:\Users\Default\AppData\Local\AdvinstAnalytics
2023-01-03 06:39 - 2023-01-03 06:39 - 000000000 ____D C:\ProgramData\AW Manager
2023-01-02 08:50 - 2023-01-02 08:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tipard
2023-01-02 08:50 - 2023-01-02 08:50 - 000000000 ____D C:\Users\jtrac\AppData\Local\Tipard Studio
2023-01-02 08:50 - 2023-01-02 08:50 - 000000000 ____D C:\ProgramData\Tipard Studio
2023-01-02 08:50 - 2023-01-02 08:50 - 000000000 ____D C:\Program Files (x86)\Tipard Studio
2023-01-02 08:34 - 2023-01-02 08:34 - 000000000 ____D C:\Users\jtrac\AppData\Local\AdvinstAnalytics
2022-12-31 11:59 - 2023-01-04 14:47 - 000000000 ____D C:\Users\jtrac\AppData\Local\Wondershare
2022-12-31 11:59 - 2023-01-04 14:42 - 000000000 ____D C:\ProgramData\Wondershare
2022-12-31 11:59 - 2022-12-31 11:59 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\Wondershare
2022-12-31 11:59 - 2022-12-31 11:59 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\TransferSupport
2022-12-31 11:59 - 2022-12-31 11:59 - 000000000 ____D C:\ProgramData\GraphicsType
2022-12-31 09:41 - 2022-12-31 09:41 - 000000000 ____D C:\Users\jtrac\OneDrive\Dokumenty\AnyMP4 Studio
2022-12-31 09:41 - 2022-12-31 09:41 - 000000000 ____D C:\Users\jtrac\AppData\Local\AnyMP4 Studio
2022-12-31 09:40 - 2022-12-31 09:40 - 000000000 ____D C:\Users\jtrac\OneDrive\Dokumenty\Audacity
2022-12-31 09:39 - 2022-12-31 09:52 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\audacity
2022-12-31 09:39 - 2022-12-31 09:39 - 000000871 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2022-12-31 09:39 - 2022-12-31 09:39 - 000000000 ____D C:\Users\jtrac\AppData\Local\audacity
2022-12-31 09:39 - 2022-12-31 09:39 - 000000000 ____D C:\Program Files\Audacity
2022-12-31 08:42 - 2022-12-31 08:42 - 000001024 ____H C:\SYSTAG.BIN
2022-12-27 12:28 - 2022-12-27 12:28 - 000020214 _____ C:\WINDOWS\system32\results.xml
2022-12-27 12:25 - 2022-12-27 12:25 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2022-12-27 12:25 - 2022-12-27 12:25 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2022-12-27 12:24 - 2022-12-27 12:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-12-27 12:15 - 2022-12-27 12:15 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\EurekaLab s.a.s
2022-12-27 11:45 - 2022-12-27 11:45 - 000003284 _____ C:\WINDOWS\system32\Tasks\GlaryInitialize 5
2022-12-27 11:31 - 2022-12-30 10:16 - 000000000 ____D C:\ProgramData\Glarysoft
2022-12-27 11:27 - 2022-12-27 11:27 - 000003488 _____ C:\WINDOWS\system32\Tasks\UpdateDetector
2022-12-27 11:22 - 2022-12-27 11:56 - 000000000 ____D C:\Program Files (x86)\Glarysoft
2022-12-27 11:07 - 2023-01-05 07:46 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2022-12-27 11:07 - 2023-01-03 07:22 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\GlarySoft
2022-12-27 11:07 - 2022-12-27 11:45 - 000001177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2022-12-27 11:07 - 2022-12-27 11:07 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\DiskDefrag
2022-12-27 11:07 - 2022-12-27 11:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2022-12-24 10:45 - 2022-12-24 10:47 - 000000000 ____D C:\Program Files\Beyond Compare 4
2022-12-24 10:45 - 2022-12-24 10:45 - 000000935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beyond Compare 4.lnk
2022-12-21 15:55 - 2023-01-05 07:46 - 000000000 __SHD C:\Users\jtrac\IntelGraphicsProfiles
2022-12-21 14:26 - 2022-12-21 14:26 - 000000000 ____D C:\Program Files (x86)\Seznam.cz
2022-12-21 14:25 - 2022-12-21 14:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2022-12-21 14:25 - 2022-12-21 14:25 - 000000000 ____D C:\WINDOWS\PCHEALTH
2022-12-21 14:24 - 2022-12-21 14:24 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2022-12-21 14:23 - 2022-12-21 14:25 - 000000000 ____D C:\Users\jtrac\AppData\Local\Windows Live
2022-12-20 08:05 - 2022-12-20 08:05 - 000003656 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask
2022-12-20 08:05 - 2022-12-20 08:05 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2022-12-20 08:04 - 2022-12-27 11:31 - 000002786 _____ C:\WINDOWS\system32\Tasks\Christmas Task (One-Time)
2022-12-20 08:03 - 2022-12-20 08:03 - 000003144 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_jtrac
2022-12-20 08:03 - 2022-12-20 08:03 - 000001436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2022-12-20 08:03 - 2022-12-20 08:03 - 000000000 ____D C:\ProgramData\{F86B0233-9A85-4589-8AAF-524CC4F8211B}
2022-12-17 09:21 - 2022-12-17 09:21 - 000000000 ____D C:\Users\jtrac\AppData\Local\Meltytech
2022-12-16 10:19 - 2022-12-16 10:24 - 000000000 ____D C:\Users\jtrac\temp
2022-12-16 10:19 - 2022-12-16 10:19 - 000003584 _____ C:\Users\jtrac\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-12-16 10:19 - 2022-12-16 10:19 - 000000208 _____ C:\Users\jtrac\AppData\Roaming\DESKTOP-1TH6EDE.MTBF.txt
2022-12-16 09:57 - 2022-12-16 09:57 - 000000349 _____ C:\WINDOWS\PCLECHAL.INI
2022-12-16 09:55 - 2022-12-16 09:55 - 000000000 ____D C:\ProgramData\UniqueId
2022-12-16 09:23 - 2022-12-16 09:23 - 000000000 ____D C:\Users\jtrac\AppData\Local\cache
2022-12-16 09:20 - 2022-12-16 09:20 - 000012399 _____ C:\ProgramData\goyslgxe.nnn
2022-12-16 09:18 - 2022-12-16 09:18 - 000003292 _____ C:\WINDOWS\system32\Tasks\MXWTPTTTYKDUYVXJ_run
2022-12-09 13:01 - 2022-12-09 13:37 - 000000000 ____D C:\WINDOWS\Acronis
2022-12-08 12:08 - 2022-12-09 13:32 - 000000361 _____ C:\am_pe_log.txt
2022-12-08 09:45 - 2009-09-03 12:08 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2022-12-08 09:45 - 2009-09-03 12:08 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2023-01-05 07:57 - 2022-11-22 11:09 - 000000000 ____D C:\FRST
2023-01-05 07:57 - 2022-02-03 14:10 - 000000000 ____D C:\Program Files (x86)\Google
2023-01-05 07:52 - 2020-11-19 00:55 - 001694140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-01-05 07:52 - 2019-12-07 15:43 - 000717008 _____ C:\WINDOWS\system32\perfh005.dat
2023-01-05 07:52 - 2019-12-07 15:43 - 000145186 _____ C:\WINDOWS\system32\perfc005.dat
2023-01-05 07:52 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2023-01-05 07:51 - 2022-02-03 15:12 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\vlc
2023-01-05 07:48 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-01-05 07:46 - 2022-06-17 13:38 - 000008192 ___SH C:\DumpStack.log.tmp
2023-01-05 07:46 - 2022-04-04 08:43 - 000000432 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2023-01-05 07:46 - 2022-02-03 16:41 - 000000936 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat
2023-01-05 07:46 - 2020-11-19 00:46 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-01-05 07:45 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-01-05 07:42 - 2022-02-24 11:37 - 000000000 ____D C:\DF_Files
2023-01-05 07:42 - 2022-02-18 15:04 - 000000000 ____D C:\UWT
2023-01-05 07:42 - 2022-02-10 07:56 - 000000000 ____D C:\swsetup
2023-01-05 07:42 - 2022-02-10 07:50 - 000000000 ____D C:\Aplikace MB
2023-01-05 07:42 - 2022-02-10 07:49 - 000000000 ____D C:\system.sav
2023-01-05 07:42 - 2022-02-09 14:51 - 000000000 ____D C:\temp
2023-01-05 07:42 - 2022-02-09 13:51 - 000000000 ____D C:\totalcmd
2023-01-05 07:42 - 2022-02-09 12:24 - 000000000 ____D C:\Users\jtrac
2023-01-05 07:42 - 2022-02-04 10:32 - 000000000 ____D C:\Android
2023-01-04 15:53 - 2020-11-18 23:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-01-04 14:26 - 2022-02-21 08:56 - 000000000 ____D C:\Users\jtrac\AppData\Local\JDownloader 2.0
2023-01-04 08:56 - 2022-02-09 12:06 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\avidemux
2023-01-04 08:06 - 2022-02-28 14:23 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-01-04 08:06 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-01-03 14:36 - 2022-02-25 08:09 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\Flash Browser
2023-01-03 06:40 - 2022-02-16 11:20 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\uTorrent
2023-01-02 08:28 - 2022-02-04 10:26 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\MyPhoneExplorer
2022-12-31 11:59 - 2022-02-03 14:02 - 000000000 ____D C:\Users\jtrac\AppData\Local\VirtualStore
2022-12-31 08:50 - 2022-02-04 09:01 - 000000000 ____D C:\ProgramData\AomeiBR
2022-12-31 08:47 - 2022-02-04 08:10 - 000000000 ____D C:\ProgramData\ProductData
2022-12-30 10:16 - 2022-05-26 07:22 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\Mp3tag
2022-12-30 10:16 - 2022-02-10 08:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaMonkey 5
2022-12-30 10:16 - 2022-02-09 15:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Universal Document Converter
2022-12-27 14:58 - 2022-02-09 12:06 - 000000000 ____D C:\Users\jtrac\AppData\Local\avidemux
2022-12-27 12:28 - 2022-02-23 07:34 - 000000000 ____D C:\ProgramData\Intel
2022-12-27 12:25 - 2022-02-03 13:55 - 000000000 ____D C:\Program Files\Intel
2022-12-27 12:19 - 2022-12-02 14:13 - 000000000 ____D C:\Users\jtrac\AppData\Local\CrashDumps
2022-12-27 12:16 - 2022-02-10 08:08 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\MediaMonkey5
2022-12-27 12:15 - 2022-02-10 08:07 - 000000000 ____D C:\Program Files (x86)\MediaMonkey 5
2022-12-24 09:58 - 2022-03-04 09:02 - 000000000 ____D C:\Users\jtrac\OneDrive\Dokumenty\Vlastní šablony Office
2022-12-22 07:44 - 2020-11-18 23:46 - 000561496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-12-21 15:21 - 2022-02-09 15:14 - 000000000 ____D C:\ProgramData\Package Cache
2022-12-21 14:25 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-12-21 14:24 - 2022-02-03 14:03 - 000000000 ___RD C:\Users\jtrac\OneDrive
2022-12-21 13:56 - 2022-06-08 13:37 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-12-21 10:53 - 2022-03-04 15:48 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\calibre
2022-12-20 08:05 - 2022-02-04 08:11 - 000000000 ____D C:\Users\jtrac\AppData\LocalLow\IObit
2022-12-20 08:05 - 2022-02-04 08:10 - 000000000 ____D C:\Program Files (x86)\IObit
2022-12-20 08:05 - 2022-02-04 08:09 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\IObit
2022-12-20 08:05 - 2022-02-04 08:09 - 000000000 ____D C:\ProgramData\IObit
2022-12-20 08:03 - 2022-02-04 08:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2022-12-19 08:07 - 2022-03-04 08:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2022-12-19 08:07 - 2022-03-04 08:46 - 000000000 ____D C:\Program Files\Calibre2
2022-12-17 13:28 - 2022-11-21 14:32 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-12-17 07:51 - 2022-02-28 09:23 - 000000000 ____D C:\Users\jtrac\AppData\Local\D3DSCache
2022-12-16 10:48 - 2022-11-29 12:25 - 000000000 ____D C:\Users\jtrac\AppData\Local\Hardcoded Software
2022-12-16 10:47 - 2022-11-29 12:24 - 000000000 ____D C:\Program Files\Hardcoded Software
2022-12-16 09:20 - 2022-06-27 14:20 - 000000000 ____D C:\Users\jtrac\AppData\Local\Movavi
2022-12-16 08:58 - 2022-02-22 10:00 - 000000000 ____D C:\Program Files\Adobe
2022-12-16 08:56 - 2022-02-22 09:59 - 000000000 ____D C:\Program Files\Common Files\Adobe
2022-12-16 08:56 - 2022-02-03 14:02 - 000000000 ____D C:\Users\jtrac\AppData\Roaming\Adobe
2022-12-16 08:47 - 2022-02-16 19:12 - 000000000 ____D C:\Users\jtrac\AppData\Local\Adobe
2022-12-16 07:43 - 2022-02-03 14:10 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-12-14 12:55 - 2022-03-09 08:36 - 000000000 ____D C:\Program Files\Microsoft Office
2022-12-14 09:51 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemApps
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-12-14 09:51 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-12-14 08:20 - 2022-02-10 08:21 - 000000000 ____D C:\Users\jtrac\AppData\Local\calibre-cache
2022-12-14 08:17 - 2022-03-09 07:43 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-12-14 08:15 - 2020-11-19 00:48 - 003014656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-12-14 07:46 - 2022-03-09 07:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-12-14 07:44 - 2022-02-03 17:27 - 148633544 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-12-10 09:26 - 2022-11-21 14:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2022-12-09 13:19 - 2022-02-09 13:16 - 000000161 _____ C:\WINDOWS\system32\autopart.opt
2022-12-09 13:00 - 2022-12-03 09:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2022-12-09 07:32 - 2020-11-19 00:46 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-12-08 09:45 - 2022-02-10 07:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aplikace MB
2022-12-08 07:28 - 2022-02-10 07:45 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2022-12-07 07:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2022-12-06 09:06 - 2022-02-03 14:02 - 000000000 ____D C:\Users\jtrac\AppData\Local\Packages

==================== Files in the root of some directories ========

2022-12-16 10:19 - 2022-12-16 10:19 - 000000208 _____ () C:\Users\jtrac\AppData\Roaming\DESKTOP-1TH6EDE.MTBF.txt
2023-01-05 07:30 - 2023-01-05 07:30 - 008115200 _____ () C:\Users\jtrac\AppData\Roaming\G6Wa3wt3.exe
2023-01-05 07:30 - 2023-01-05 07:30 - 000000558 _____ () C:\Users\jtrac\AppData\Local\bowsakkdestx.txt
2022-12-16 10:19 - 2022-12-16 10:19 - 000003584 _____ () C:\Users\jtrac\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================