Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2024
Ran by Michal (administrator) on DESKTOP-JBV4N1G (Dell Inc. Vostro 3580) (26-09-2024 11:09:02)
Running from C:\Dokumety - Michal\Programy\RSIT\FRST64.exe
Loaded Profiles: Michal
Platform: Microsoft Windows 11 Home Version 22H2 22621.4169 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe ->) (Dell Technologies Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistOsRecovery.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_24244.507.3118.4732_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\129.0.2792.52\msedgewebview2.exe <12>
(DriverStore\FileRepository\cui_dch.inf_amd64_f47cef52ac4d1535\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f47cef52ac4d1535\igfxEM.exe
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_cc5d5bc621122d7c\WavesSvc64.exe
(Gen Digital Inc. -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f47cef52ac4d1535\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_c2c5b0e17a28a48f\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_bee333b3fb02dacb\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7ecf8d2b2b8c53e8\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7ecf8d2b2b8c53e8\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_ab7d4ea1d12c01d4\WMIRegistrationService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9c788f1d162b1224\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_fb352e66db7e0ad5\RtkAudUService64.exe <3>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_cc5d5bc621122d7c\WavesSysSvc64.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.4.0.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Michal\AppData\Local\Microsoft\OneDrive\24.171.0825.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.4166_none_e96b0c1842c424f9\TiWorker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_fb352e66db7e0ad5\RtkAudUService64.exe [3505016 2022-07-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_cc5d5bc621122d7c\WavesSvc64.exe [4653240 2022-07-22] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [196016 2024-09-02] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-4048492044-4244846042-3436823807-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Michal\AppData\Local\Microsoft\Teams\Update.exe [1789552 2019-10-13] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-4048492044-4244846042-3436823807-1001\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\S-1-5-21-4048492044-4244846042-3436823807-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45125936 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-4048492044-4244846042-3436823807-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [45125936 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-4048492044-4244846042-3436823807-1001\...\Run: [MicrosoftEdgeAutoLaunch_3D9802976EF00A6AE9398D528BE31C4A] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3798464 2024-09-19] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\hpcpp101: C:\Windows\System32\spool\prtprocs\x64\hpcpp101.dll [323584 2010-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP B011 Status Monitor: C:\WINDOWS\system32\hpinkstsB011LM.dll [331664 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3520 series): C:\WINDOWS\system32\HPDiscoPMB011.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\129.0.6668.70\Installer\chrmstp.exe [2024-09-26] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2024-09-16]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - .lnk [2019-10-23]
ShortcutAndArgument: Sledovat výstrahy inkoustu - .lnk -> C:\Windows\system32\RunDll32.exe => "C:\Program Files\HP\HP Deskjet 3520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN3C41G0ZZ05SZ;CONNECTION=NW;MONITOR=1;
Startup: C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Deskjet 3520 series (Síť).lnk [2024-09-25]
ShortcutAndArgument: Sledovat výstrahy inkoustu - HP Deskjet 3520 series (Síť).lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Deskjet 3520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN3C41G0ZZ05SZ;CONNECTION=NW;MONITOR=1;

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {F007607D-297D-4728-A480-ED4FBD371F2E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.)
Task: {094B26FC-155F-4FAC-8013-32DA27BCBC24} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [829408 2024-09-18] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {27F9907D-5987-4B1F-92B4-FBCE665EEE69} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5937456 2024-09-18] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "06c6c81e-6867-4619-a681-23fe7c7bac76" --version "6.28.11297" --silent
Task: {5BE97FDB-4B60-4BC1-BFE1-F66243CC73DE} - System32\Tasks\CCleanerSkipUAC - Michal => C:\Program Files\CCleaner\CCleaner.exe [39012144 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {11BF8F06-1E66-4B9B-AEB5-88CC601BE984} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [964936 2024-04-25] (Dell Technologies Inc. -> Dell Inc.) -> C:\Program Files\Dell\SupportAssistAgent\bin\AutoUpdate
Task: {B9831987-AA77-4543-8D9A-3E3A6FB12D2A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{DAAAAE43-C1AD-498D-A14C-BF2689EB74ED} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC)
Task: {2E92894C-59AE-4710-8AAC-B3708C9530CC} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [64472 2024-08-06] (HP Inc. -> HP Inc.)
Task: {B75A5E10-8EEB-4119-91F9-CC3248A6B495} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [64472 2024-08-06] (HP Inc. -> HP Inc.)
Task: {EE16CA9A-DB86-4926-ABC4-A1ADADEB28E9} - System32\Tasks\HPCustParticipation HP Deskjet 3520 series => C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe [4119656 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
Task: {A82EB692-10B4-4303-A74F-644E32EB00E8} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => %ProgramFiles%\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe  (No File)
Task: {37849ACE-506A-4B56-9AA1-93268F590D36} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {A79F1A32-9BCF-45DB-92E0-97AFD4122C99} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {A1125459-97CF-4116-9530-E3C31689FEAD} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (No File)
Task: {555E40A6-EA86-4E83-BBC1-F077FE7B53CB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe  RebootDialog (No File)
Task: {28F5E8E0-0F25-42FF-ACB0-BA6C5A8ADC81} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC RebootDialog (No File)
Task: {9B62166C-6279-406C-9F07-929D2DBAE48E} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery RebootDialog (No File)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 31.30.90.11 31.30.90.12
Tcpip\..\Interfaces\{7756028a-1000-498a-989b-7866949a7ab0}: [DhcpNameServer] 31.30.90.11 31.30.90.12
Tcpip\..\Interfaces\{7756028a-1000-498a-989b-7866949a7ab0}: [DhcpDomain] home
Tcpip\..\Interfaces\{c36b4658-603d-4986-9465-3f48d7d33a3a}: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{e55fc238-0fa8-4ae2-88c6-9adbdfa1f11b}: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{ecf3a5a9-0775-41d7-8f7b-789ecfed6d6d}: [DhcpNameServer] 86.49.5.221 86.49.5.222

Edge: 
=======
Edge Profile: C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default [2024-09-26]
Edge HomePage: Default -> hxxp://www.google.com/
Edge StartupUrls: Default -> "hxxp://www.google.com/"
Edge Extension: (Dokumenty Google offline) - C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-19]
Edge Extension: (Edge relevant text changes) - C:\Users\Michal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

FireFox:
========
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-09-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default [2024-09-26]
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1087792 2024-09-18] (Gen Digital Inc. -> Piriform Software Ltd)
S3 dcpm-notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [317352 2022-12-16] (Dell Inc -> Dell Inc.)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458128 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [159632 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [481680 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22224 2023-12-13] (Dell Inc -> Dell INC.)
S3 Dell.CommandPowerManager.Service; C:\WINDOWS\system32\dllhost.exe /Processid:{33E2297C-2B05-456E-8B62-15CB31898A9B} [46416 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [50392 2024-01-27] (Dell Inc -> )
S2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [159664 2023-12-22] (Dell Technologies Inc. -> Dell)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5527928 2024-09-02] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4207104 2024-09-02] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4207104 2024-09-02] (ESET, spol. s r.o. -> ESET)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [241104 2024-08-06] (HP Inc. -> HP Inc.)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [188728 2021-05-28] (Qualcomm Atheros, Inc. -> )
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [159048 2024-04-25] (Dell Technologies Inc. -> Dell Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [19433784 2024-09-17] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [2909208 2022-05-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [128376 2022-05-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ANVSOFT_WaveExtensible; C:\WINDOWS\system32\drivers\ammvrtaudio.sys [38048 2019-12-24] (深圳市安韦尔软件技术有限公司 -> )
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [43400 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> Dell Technologies)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [46640 2023-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [219984 2024-07-07] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [16336 2022-08-23] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [265944 2024-07-07] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [84136 2024-07-07] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [126480 2024-07-07] (ESET, spol. s r.o. -> ESET)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2019-11-11] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
R3 ScrHIDDriver3; C:\WINDOWS\System32\drivers\ScrHIDDriver3.sys [63296 2021-10-01] (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [48536 2022-05-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [438544 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [90384 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-09-26 10:58 - 2024-09-26 10:58 - 008790880 _____ (Malwarebytes) C:\Users\Michal\Desktop\adwcleaner.exe
2024-09-25 17:40 - 2024-09-25 17:40 - 000728484 _____ C:\WINDOWS\system32\perfh005.dat
2024-09-25 17:40 - 2024-09-25 17:40 - 000151700 _____ C:\WINDOWS\system32\perfc005.dat
2024-09-24 18:37 - 2024-09-24 18:37 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2024-09-24 18:36 - 2024-09-24 18:36 - 000001846 _____ C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MaxxAudio Pro by Waves - Ovládání zvuku reproduktorů a mikrofonů a Nx 3D zvuk.lnk
2024-09-24 18:28 - 2024-09-24 18:28 - 000000020 ___SH C:\Users\Michal\ntuser.ini
2024-09-24 18:26 - 2024-09-26 10:46 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-09-24 18:26 - 2024-09-26 10:46 - 000003516 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-09-24 18:26 - 2024-09-26 09:20 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2024-09-24 18:26 - 2024-09-25 17:32 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-09-24 18:26 - 2024-09-24 18:27 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4048492044-4244846042-3436823807-1001
2024-09-24 18:26 - 2024-09-24 18:27 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4048492044-4244846042-3436823807-1001
2024-09-24 18:26 - 2024-09-24 18:27 - 000002710 _____ C:\WINDOWS\system32\Tasks\HPCustParticipation HP Deskjet 3520 series
2024-09-24 18:26 - 2024-09-24 18:26 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-09-24 18:26 - 2024-09-24 18:26 - 000003304 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2024-09-24 18:26 - 2024-09-24 18:26 - 000002954 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2024-09-24 18:26 - 2024-09-24 18:26 - 000002256 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Michal
2024-09-24 18:26 - 2024-09-24 18:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2024-09-24 18:26 - 2024-09-24 18:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Intel
2024-09-24 18:26 - 2024-09-24 18:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2024-09-24 18:26 - 2024-09-24 18:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2024-09-24 18:26 - 2024-09-24 18:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2024-09-24 18:22 - 2024-09-24 18:26 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2024-09-24 18:22 - 2024-09-24 18:26 - 000011433 _____ C:\WINDOWS\diagerr.xml
2024-09-24 18:14 - 2024-09-24 18:14 - 000026432 _____ C:\WINDOWS\system32\emptyregdb.dat
2024-09-24 18:11 - 2024-09-24 18:11 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network
2024-09-24 18:09 - 2024-09-25 17:40 - 001718028 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-09-24 18:05 - 2024-09-24 18:05 - 000000000 ____D C:\Program Files\Waves
2024-09-24 18:02 - 2024-09-24 18:02 - 000000000 ____D C:\WINDOWS\system32\config\BFS
2024-09-24 18:01 - 2024-09-26 10:44 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-09-24 18:01 - 2024-09-25 17:32 - 000473912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-09-24 17:58 - 2024-09-24 18:27 - 000000000 ____D C:\Windows.old
2024-09-24 17:36 - 2024-09-24 18:00 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Crypto
2024-09-24 17:36 - 2024-09-24 17:36 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\SystemCertificates
2024-09-24 17:36 - 2024-09-24 17:36 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Network
2024-09-24 17:29 - 2024-09-24 17:59 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2024-09-24 17:27 - 2024-09-25 13:19 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Spelling
2024-09-24 17:27 - 2024-09-24 18:35 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Windows
2024-09-24 17:27 - 2024-09-24 18:28 - 000000000 ____D C:\Users\Michal
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Šablony
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Soubory cookie
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Poslední
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Okolní tiskárny
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Okolní síť
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Nabídka Start
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Dokumenty
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Documents\Obrázky
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Documents\Hudba
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Documents\Filmy
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\Data aplikací
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2024-09-24 17:27 - 2024-09-24 17:27 - 000000000 _SHDL C:\Users\Michal\AppData\Local\Data aplikací
2024-09-24 17:20 - 2024-09-24 18:00 - 000000000 ____D C:\WINDOWS\system32\Intel
2024-09-24 17:20 - 2024-09-24 18:00 - 000000000 ____D C:\WINDOWS\system32\cAVS
2024-09-24 17:20 - 2024-09-24 17:20 - 000000000 ____D C:\WINDOWS\Firmware
2024-09-24 17:18 - 2024-09-24 17:29 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2024-09-24 17:13 - 2024-09-24 17:13 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2024-09-24 17:13 - 2024-09-24 17:13 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-09-24 17:13 - 2024-09-24 17:13 - 000000000 ____D C:\WINDOWS\InboxApps
2024-09-24 16:47 - 2024-09-24 16:47 - 000060462 _____ C:\WINDOWS\SysWOW64\ctac.json
2024-09-24 16:47 - 2024-09-24 16:47 - 000026169 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-09-24 16:39 - 2024-09-24 16:39 - 000060462 _____ C:\WINDOWS\system32\ctac.json
2024-09-24 16:39 - 2024-09-24 16:39 - 000026169 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-09-24 16:27 - 2024-09-24 16:27 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2024-09-24 16:27 - 2024-09-24 16:27 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-09-24 16:27 - 2024-09-24 16:27 - 000000000 ____D C:\Program Files\MSBuild
2024-09-24 16:27 - 2024-09-24 16:27 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-09-24 16:27 - 2024-09-24 16:27 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-09-24 16:25 - 2024-09-24 16:25 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2024-09-24 16:25 - 2024-09-24 16:25 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2024-09-24 16:25 - 2024-09-24 16:25 - 000000000 ____D C:\WINDOWS\addins
2024-09-24 15:52 - 2024-09-24 15:52 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2024-09-24 14:33 - 2024-09-25 11:53 - 000000000 ___DC C:\WINDOWS\Panther
2024-09-23 16:08 - 2024-09-23 16:08 - 000106914 _____ C:\Users\Michal\Downloads\Google_exportované_záložky_23.09.24.html
2024-09-23 15:32 - 2024-09-23 15:32 - 000105759 _____ C:\Users\Michal\Downloads\CHROME_exportované_záložky_23.09.24.html
2024-09-22 11:32 - 2024-09-22 11:32 - 000102130 _____ C:\Users\Michal\Downloads\CHROME_exportované_záložky_22.09.24.html
2024-09-20 13:25 - 2024-09-20 13:25 - 000303363 _____ C:\Users\Michal\Downloads\DHL_doručeni inkoustu.pdf
2024-09-20 10:31 - 2024-09-20 17:24 - 000000666 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2024-09-19 15:15 - 2024-09-19 15:15 - 000002386 _____ C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-09-18 17:35 - 2024-09-18 17:35 - 000002037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-09-18 17:35 - 2024-09-18 17:35 - 000002025 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-09-18 12:04 - 2024-09-18 12:04 - 000083328 _____ C:\Users\Michal\Downloads\Alza.cz.pdf
2024-09-18 10:19 - 2024-09-18 10:19 - 000371602 _____ C:\Users\Michal\Downloads\windows_11_ukazka (4).pdf
2024-09-18 10:19 - 2024-09-18 10:19 - 000371602 _____ C:\Users\Michal\Downloads\windows_11_ukazka (3).pdf
2024-09-18 10:19 - 2024-09-18 10:19 - 000371602 _____ C:\Users\Michal\Downloads\windows_11_ukazka (2).pdf
2024-09-18 10:15 - 2024-09-18 10:16 - 000371602 _____ C:\Users\Michal\Downloads\windows_11_ukazka (1).pdf
2024-09-18 10:15 - 2024-09-18 10:15 - 000371602 _____ C:\Users\Michal\Downloads\windows_11_ukazka.pdf
2024-09-15 15:19 - 2024-09-15 15:19 - 000000000 ____D C:\Users\Michal\Documents\Poznámkové bloky aplikace OneNote
2024-09-15 15:19 - 2024-09-15 15:19 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\OneNote
2024-09-12 13:05 - 2024-09-12 13:05 - 000000000 ___HD C:\$WinREAgent
2024-09-05 15:39 - 2024-09-05 15:39 - 000320514 _____ C:\Users\Michal\Downloads\HP Instant Ink.pdf
2024-09-01 19:52 - 2024-09-01 19:52 - 000000842 _____ C:\Users\Michal\Downloads\cal.ics
2024-09-01 19:51 - 2024-09-01 19:52 - 000458438 _____ C:\Users\Michal\Downloads\slevomat-cz-voucher-pobyt-na-zamecku-v-posazavi-strava-a-v-lete-bazen-5758458700C-752 (1).pdf
2024-09-01 19:48 - 2024-09-01 19:48 - 000458438 _____ C:\Users\Michal\Downloads\slevomat-cz-voucher-pobyt-na-zamecku-v-posazavi-strava-a-v-lete-bazen-5758458700C-752.pdf
2024-09-01 11:20 - 2024-09-01 11:20 - 000038230 _____ C:\Users\Michal\Downloads\24K1D_Rekapitulace služby Nahlášení samoodečtu.pdf
2024-09-01 11:19 - 2024-09-01 11:19 - 000038337 _____ C:\Users\Michal\Downloads\L2K9Z_Rekapitulace služby Nahlášení samoodečtu (1).pdf
2024-09-01 11:18 - 2024-09-01 11:18 - 000038350 _____ C:\Users\Michal\Downloads\J1Y1K_Rekapitulace služby Nahlášení samoodečtu (1).pdf
2024-08-31 17:29 - 2024-08-31 17:29 - 000038337 _____ C:\Users\Michal\Downloads\L2K9Z_Rekapitulace služby Nahlášení samoodečtu.pdf
2024-08-31 17:28 - 2024-08-31 17:28 - 000038350 _____ C:\Users\Michal\Downloads\J1Y1K_Rekapitulace služby Nahlášení samoodečtu.pdf
2024-08-29 15:54 - 2024-08-29 15:54 - 001850954 _____ C:\Users\Michal\Downloads\dokument z uschovy 3.pdf
2024-08-28 18:05 - 2024-08-28 18:05 - 007233124 _____ C:\Users\Michal\Downloads\Plicní_FTN_07_12_2022_2čast.pdf
2024-08-28 18:04 - 2024-08-28 18:04 - 006561622 _____ C:\Users\Michal\Downloads\Plicní_FTN_07_12_2022_1čast.pdf
2024-08-28 18:02 - 2024-08-28 18:02 - 013456882 _____ C:\Users\Michal\Downloads\Plicní_FTN_07_12_2022.zip
2024-08-27 12:08 - 2024-08-27 12:08 - 003802662 _____ C:\Users\Michal\Downloads\6 skupin potravin, které pomohou při zácpě _ Aktin.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-09-26 11:14 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-09-26 11:10 - 2021-01-29 16:11 - 000000000 ____D C:\FRST
2024-09-26 10:55 - 2019-10-14 10:36 - 000000000 ____D C:\Dokumety - Michal
2024-09-26 10:51 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-09-26 10:45 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-09-26 10:45 - 2019-10-05 11:20 - 000000000 ____D C:\Users\Michal\AppData\Local\Packages
2024-09-26 10:45 - 2019-10-05 04:12 - 000000000 ____D C:\ProgramData\Packages
2024-09-26 09:35 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-09-26 09:32 - 2019-10-05 14:02 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-09-26 09:32 - 2019-10-05 14:02 - 000002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-09-26 09:27 - 2019-10-05 11:24 - 000000000 ___RD C:\Users\Michal\OneDrive
2024-09-26 09:20 - 2021-01-29 15:51 - 000000000 ____D C:\Program Files\CCleaner
2024-09-26 09:17 - 2019-10-05 11:20 - 000000000 __SHD C:\Users\Michal\IntelGraphicsProfiles
2024-09-25 17:46 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2024-09-25 17:32 - 2020-09-09 10:14 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2024-09-25 17:32 - 2019-03-19 21:30 - 000000000 ____D C:\Intel
2024-09-25 17:31 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-09-25 17:31 - 2021-01-26 20:14 - 000012288 ___SH C:\DumpStack.log.tmp
2024-09-25 17:30 - 2022-05-07 07:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-09-25 17:00 - 2019-10-05 14:36 - 000000000 ____D C:\Users\Michal\AppData\Roaming\vlc
2024-09-25 16:59 - 2019-10-05 14:35 - 000000918 _____ C:\Users\Public\Desktop\VLC media player.lnk
2024-09-25 16:55 - 2020-09-09 10:15 - 000000000 ____D C:\Users\Michal\AppData\Local\TeamViewer
2024-09-25 16:53 - 2020-09-09 10:14 - 000000000 ____D C:\Users\Michal\AppData\Roaming\TeamViewer
2024-09-25 16:06 - 2019-10-13 22:35 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Excel
2024-09-25 13:05 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\servicing
2024-09-25 13:05 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-09-25 12:15 - 2020-08-22 08:01 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2024-09-25 12:14 - 2019-10-05 11:22 - 000000000 ____D C:\Users\Michal\AppData\Local\PlaceholderTileLogoFolder
2024-09-25 11:57 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-09-25 11:12 - 2019-10-05 12:12 - 000000000 ____D C:\Users\Michal\AppData\Local\D3DSCache
2024-09-25 11:11 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2024-09-25 11:09 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\appcompat
2024-09-24 18:29 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-09-24 18:29 - 2019-03-19 22:22 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-09-24 18:27 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-09-24 18:27 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows NT
2024-09-24 18:26 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender
2024-09-24 18:26 - 2022-05-07 07:17 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2024-09-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Registration
2024-09-24 18:14 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-09-24 18:04 - 2020-08-29 11:52 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-09-24 18:04 - 2020-08-29 11:52 - 000002278 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-09-24 18:01 - 2022-05-07 07:24 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2024-09-24 18:00 - 2024-04-11 12:52 - 000000000 ____D C:\WINDOWS\system32\Dell
2024-09-24 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2024-09-24 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\spool
2024-09-24 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-09-24 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2024-09-24 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-09-24 18:00 - 2021-11-11 14:24 - 000000000 ____D C:\WINDOWS\system32\ihvmanager
2024-09-24 18:00 - 2020-09-13 11:25 - 000000000 ____D C:\WINDOWS\SHELLNEW
2024-09-24 18:00 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2024-09-24 17:59 - 2021-01-29 15:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2024-09-24 17:59 - 2021-01-02 14:40 - 000000000 ____D C:\WINDOWS\cs
2024-09-24 17:59 - 2020-09-13 11:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2024-09-24 17:59 - 2020-02-05 13:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D
2024-09-24 17:59 - 2019-10-14 09:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2024-09-24 17:59 - 2019-10-13 13:48 - 000000000 ____D C:\Program Files\UNP
2024-09-24 17:59 - 2019-10-05 15:05 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2024-09-24 17:59 - 2019-10-05 14:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2024-09-24 17:59 - 2019-03-19 21:29 - 000000000 ____D C:\Program Files\Intel
2024-09-24 17:59 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2024-09-24 17:46 - 2022-05-07 07:28 - 000000000 ____D C:\WINDOWS\Setup
2024-09-24 17:37 - 2022-05-07 07:24 - 000000000 __RHD C:\Users\Public\Libraries
2024-09-24 17:29 - 2021-07-26 11:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2024-09-24 17:27 - 2022-05-07 07:24 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2024-09-24 17:13 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\SysWOW64\cs
2024-09-24 17:13 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\system32\cs
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\F12
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\WUModels
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\UUS
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemApps
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\setup
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\id-ID
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\schemas
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\DiagTrack
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\BrowserCore
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-09-24 17:13 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\System
2024-09-24 16:27 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2024-09-24 16:27 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\MUI
2024-09-24 16:26 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\OCR
2024-09-24 16:24 - 2022-05-07 12:14 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-09-24 16:24 - 2022-05-07 12:14 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\system32\winrm
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\system32\WCN
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\system32\slmgr
2024-09-24 16:24 - 2022-05-07 12:05 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2024-09-24 16:24 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-09-23 13:05 - 2019-10-13 22:48 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Microsoft\Word
2024-09-22 10:42 - 2021-01-08 14:55 - 000000000 ___HD C:\ProgramData\CyberLink
2024-09-22 09:30 - 2021-04-28 09:56 - 000001288 _____ C:\Users\Michal\Desktop\Any Video Converter.lnk
2024-09-20 07:53 - 2019-10-13 13:34 - 000000000 ____D C:\Users\Michal\AppData\Local\CrashDumps
2024-09-19 08:39 - 2022-09-11 15:53 - 000000000 ____D C:\Users\Michal\AppData\Roaming\com.adobe.dunamis
2024-09-19 08:39 - 2019-10-05 13:59 - 000000000 ____D C:\Users\Michal\AppData\Local\Adobe
2024-09-19 08:39 - 2019-10-05 11:20 - 000000000 ____D C:\Users\Michal\AppData\Roaming\Adobe
2024-09-17 17:17 - 2019-10-05 11:20 - 000000000 ___RD C:\Users\Michal\3D Objects
2024-09-12 12:24 - 2019-10-05 11:42 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-09-12 12:22 - 2019-10-05 11:42 - 199688632 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories ========

2021-02-14 16:14 - 2021-02-14 16:14 - 000003584 _____ () C:\Users\Michal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================