Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Vynechávání písmen při psaní na NTB

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Vynechávání písmen při psaní na NTB

#1 Příspěvek od RodenT »

Zdravím,

můžete mi prosím zkontrolovat NTB? V nějakých intervalech mi nejdou psát některé písmena. Je to hodně sporadické. Někdy to jde, někdy ne. Někdy když to písmenko zmáčknu třeba 20 x, tak se pak propíše.

Už jsem tohle jednou řešil a po pročištění se to zpravilo!

Notebook je starý, ale na ty internety mi to stačí :D.

PS: V logu jsem si všiml, že mám málo místa na disku. Něco jsem promazal, takže už mám necelých 30 GB.

Díky moc.

Log níže:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Hraboš at 2021-04-05 11:14:40
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 7 GB (3%) free of 227 GB
Total RAM: 3894 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:14:44, on 5.4.2021
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe
C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe
C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera_crashreporter.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\Opera\74.0.3911.218\opera.exe
C:\Program Files\trend micro\Hraboš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O4 - HKLM\..\Run: [Avira SystrayStartTrigger] "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
O4 - HKCU\..\Run: [IrisMini] "C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Inc. - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Avira Optimizer Host (AviraOptimizerHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
O23 - Service: Avira Phantom VPN (AviraPhantomVPN) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
O23 - Service: Avira Security (AviraSecurity) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
O23 - Service: Avira Updater Service (AviraUpdaterService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe
O23 - Service: Služba Poepnutí Bluetooth (BtSwitcherService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe
O23 - Service: DTSInterops (CoordinatorServiceHost) - Dassault Systemes SolidWorks Corporation - C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe
O23 - Service: Služba CSR Bluetooth Audio (CSRBtAudioService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe
O23 - Service: Služba CSR OBEX (CsrBtOBEXService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe
O23 - Service: CSR služba Bluetooth (CsrBtService) - Cambridge Silicon Radio Limited - C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service - Flexera Software LLC - C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.114\elevation_service.exe
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: TeamViewer - TeamViewer Germany GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13495 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\Antivirus\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Avira\Antivirus\avguard.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe"
"C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe"
"C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe"
"C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe"
"C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe"
"C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe"
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe"
"C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe"
"C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Avira\Antivirus\avshadow.exe" avshadowcontrol0_00000640
"C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe"
"C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe"
"C:\Program Files (x86)\Avira\Antivirus\avgnt.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe" /connectToHost
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --ran-launcher --started-from-shortcut
"C:\Program Files\Opera\74.0.3911.218\opera_crashreporter.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=74.0.3911.218 --initial-client-data=0x1f4,0x1f8,0x1fc,0x1c8,0x200,0x5c7d78c8,0x5c7d78d8,0x5c7d78e4
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=gpu-process --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --gpu-preferences=OAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAABQAAABAAAAAAAAAAAAAAAAYAAAAQAAAAAAAAAAEAAAAFAAAAEAAAAAAAAAABAAAABgAAAA== --mojo-platform-channel-handle=1120 /prefetch:2
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --service-sandbox-type=network --enable-quic --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --mojo-platform-channel-handle=1344 /prefetch:8
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --service-sandbox-type=utility --enable-quic --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --mojo-platform-channel-handle=1756 /prefetch:8
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --extension-process --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2244 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2604 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2612 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2252 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2976 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2980 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --extension-process --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3584 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --service-sandbox-type=audio --enable-quic --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --mojo-platform-channel-handle=2268 /prefetch:8
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --extension-process --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3052 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --extension-process --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3972 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --extension-process --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=utility --utility-sub-type=media.mojom.CdmService --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --service-sandbox-type=cdm --enable-quic --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --mojo-platform-channel-handle=3596 /prefetch:8
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\SwReporter\88.253.200\software_reporter_tool.exe" --engine=2 --scan-locations=1,2,3,4,5,6,7,8,10 --disabled-locations=9,11 --session-id=ojHEhWHmSw8Lfboc6tnzEPVNOR5tI9ARRaV+hxiz --registry-suffix=ESET --srt-field-trial-group-name=NewCleanerUIExperiment
"c:\users\hraboš\appdata\local\google\chrome\user data\swreporter\88.253.200\software_reporter_tool.exe" --crash-handler "--database=c:\users\hraboš\appdata\local\Google\Software Reporter Tool" --url=https://clients2.google.com/cr/report --annotation=plat=Win32 --annotation=prod=ChromeFoil --annotation=ver=88.253.200 --initial-client-data=0x160,0x164,0x168,0x134,0x16c,0x13f4e2a58,0x13f4e2a68,0x13f4e2a78
"c:\users\hraboš\appdata\local\google\chrome\user data\swreporter\88.253.200\software_reporter_tool.exe" --use-crash-handler-with-id="\\.\pipe\crashpad_6208_JZXKHBSFJCHDFBPS" --sandboxed-process-id=2 --init-done-notifier=500 --sandbox-mojo-pipe-token=16599048831090015221 --mojo-platform-channel-handle=476 --engine=2
"c:\users\hraboš\appdata\local\google\chrome\user data\swreporter\88.253.200\software_reporter_tool.exe" --use-crash-handler-with-id="\\.\pipe\crashpad_6208_JZXKHBSFJCHDFBPS" --sandboxed-process-id=3 --init-done-notifier=652 --sandbox-mojo-pipe-token=9099131840122351358 --mojo-platform-channel-handle=648
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1
"C:\Program Files\Opera\74.0.3911.218\opera.exe" --type=renderer --field-trial-handle=1112,9043281278447720870,3896457547061277919,131072 --lang=cs --with-feature:installer-experiment-test=off --with-feature:installer-use-minimal-package=off --ab_tests=DNA-90363-test5:DNA-90363 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4496 /prefetch:1

"C:\Users\HRABO~1\AppData\Local\Temp\scoped_dir5384_1342458452\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01 205416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2012-10-01 2322576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01 139368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2012-10-01 1720976]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-01-25 525312]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-06-09 2799912]
""= []
"CsrHCRPServer"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe [2012-03-22 1134288]
"CsrAudioguiCtrl"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe [2012-03-22 511696]
"CsrSyncMLServer"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe [2012-03-22 244944]
"vksts"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe [2012-03-22 25792]
"HarmonyUserStartup"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe [2012-03-22 39128]
"CSRHarmonySkypePlugin"=C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe [2012-03-22 146656]
"TrayApplication"=C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe [2012-03-22 529616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"IrisMini"=C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe [2018-07-02 485120]
""= []
"GoogleDriveSync"=C:\Program Files\Google\Drive\googledrivesync.exe [2021-03-12 50041472]
"CCleaner Smart Cleaning"=C:\Program Files\CCleaner\CCleaner64.exe [2020-12-08 32414392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2020-12-08 32414392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Smart Cleaning]
C:\Program Files\CCleaner\CCleaner64.exe [2020-12-08 32414392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount]
C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2019-04-14 735336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2011-12-21 392472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iCloudDrive]
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [2019-01-15 110392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iCloudServices]
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2019-01-15 67384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2019-01-18 302904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-06-07 27742168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
C:\Users\Hraboš\AppData\Roaming\Spotify\Spotify.exe [2021-04-04 23929928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
C:\Users\Hraboš\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~1\Office\OSA9.EXE [2017-07-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^powerTouch controlCenter.lnk]
C:\PROGRA~2\HOMAGG~1\FRAMEW~1\HOMAGG~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SOLIDWORKS 2020 Rychlé spuštění.lnk]
C:\Windows\INSTAL~1\{3F468~1\NEB90F~1.EXE [2020-11-10 335872]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Avira SystrayStartTrigger"=C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [2020-11-20 705728]
""= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-12-21 390144]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"shell"=explorer.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2021-04-05 11:14:40 ----D---- C:\rsit
2021-04-05 11:14:40 ----D---- C:\Program Files\trend micro
2021-03-27 05:29:22 ----SHD---- C:\Config.Msi
2021-03-13 21:18:26 ----D---- C:\Users\Hraboš\AppData\Roaming\vlc
2021-03-13 21:16:31 ----D---- C:\Program Files\VideoLAN

======List of files/folders modified in the last 1 month======

2021-04-05 11:14:44 ----D---- C:\Windows\Temp
2021-04-05 11:14:40 ----RD---- C:\Program Files
2021-04-05 10:54:42 ----D---- C:\Program Files\CCleaner
2021-04-05 10:40:30 ----D---- C:\Windows\System32
2021-04-05 10:40:30 ----D---- C:\Windows\inf
2021-04-05 10:40:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2021-04-05 10:33:55 ----A---- C:\Windows\SYSWOW64\log.txt
2021-04-04 16:48:32 ----D---- C:\Users\Hraboš\AppData\Roaming\Spotify
2021-04-04 10:51:20 ----D---- C:\Windows
2021-04-03 22:10:37 ----D---- C:\Windows\SysWOW64
2021-03-27 05:29:34 ----SHD---- C:\Windows\Installer
2021-03-24 12:23:09 ----D---- C:\Windows\system32\config
2021-03-24 12:12:38 ----SHD---- C:\System Volume Information
2021-03-18 17:46:28 ----D---- C:\Program Files\Opera
2021-03-15 19:53:15 ----D---- C:\Windows\system32\Tasks
2021-03-14 22:36:53 ----D---- C:\Users\Hraboš\AppData\Roaming\TeamViewer
2021-03-14 19:27:37 ----D---- C:\Windows\system32\catroot2
2021-03-13 20:11:56 ----D---- C:\Users\Hraboš\AppData\Roaming\obs-studio

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 avdevprot;avdevprot; C:\Windows\system32\DRIVERS\avdevprot.sys [2019-06-16 68152]
R0 avusbflt;avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [2019-03-04 35376]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2019-04-14 386680]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2021-03-16 177112]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2019-03-04 36072]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2021-03-16 222448]
R2 avnetflt;avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [2017-04-10 78600]
R3 csr_bthav;Profil AV Bluetooth; C:\Windows\system32\drivers\csrbthav.sys [2012-03-22 99520]
R3 csravrcp;Profil AVRCP Bluetooth; C:\Windows\system32\DRIVERS\csravrcp.sys [2012-03-22 26304]
R3 CsrBtPort;Ovladač zařízení Bluetooth CSR; C:\Windows\system32\DRIVERS\CsrBtPort.sys [2012-03-22 2784968]
R3 csrpan;Bluetooth Personal Area Network Device Driver; C:\Windows\system32\DRIVERS\csrpan.sys [2012-03-22 39616]
R3 csrserial;Ovladač zařízení SPP; C:\Windows\system32\DRIVERS\csrserial.sys [2012-03-22 61128]
R3 csrusb;CSR ovladač rozhraní USB pro hardwarový klíč Bluetooth; C:\Windows\System32\Drivers\csrusb.sys [2012-03-22 47296]
R3 csrusbfilter;CSR USB filter driver; C:\Windows\System32\Drivers\csrusbfilter.sys [2012-03-22 23752]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-12-21 12310112]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-21 317440]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2012-03-05 1857600]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-01-25 520192]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-06-09 1451056]
S3 ak9obp0x;ak9obp0x; C:\Windows\system32\drivers\ak9obp0x.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-11-20 552448]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-11-20 80384]
S3 iscFlash;iscFlash; \??\C:\SwSetup\sp60864\iscflashx64.sys [2011-01-19 49216]
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys [2017-09-07 23040]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2017-09-07 54784]
S3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2013-07-24 36864]
S3 WinUsb;Alpha; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [2021-03-16 484904]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\Antivirus\sched.exe [2021-03-16 484904]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2018-10-16 85304]
R2 Avira.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [2020-11-20 636592]
R2 AviraOptimizerHost;Avira Optimizer Host; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2020-06-03 2988544]
R2 AviraPhantomVPN;Avira Phantom VPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [2021-03-23 385568]
R2 AviraSecurity;Avira Security; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [2021-03-10 247232]
R2 AviraUpdaterService;Avira Updater Service; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [2020-12-16 161072]
R2 BtSwitcherService;Služba Pøepnutí Bluetooth; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe [2012-03-22 64216]
R2 CSRBtAudioService;Služba CSR Bluetooth Audio; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe [2012-03-22 465624]
R2 CsrBtOBEXService;Služba CSR OBEX; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe [2012-03-22 1041616]
R2 CsrBtService;CSR služba Bluetooth; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe [2012-03-22 825032]
R2 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [2020-11-10 3460072]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-07-23 268824]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2011-01-25 296448]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-07-23 2320920]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [2021-03-16 1208432]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [2021-03-16 575776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2018-03-26 107592]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2018-03-26 128584]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-31 153168]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-08-17 3148128]
S3 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2020-11-03 170056]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2020-12-09 335416]
S3 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [2012-01-05 75624]
S3 CoordinatorServiceHost;DTSInterops; C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe [2020-05-08 79360]
S3 FlexNet Licensing Service;FlexNet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe [2019-11-23 1236456]
S3 GoogleChromeElevationService;Google Chrome Elevation Service; C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.114\elevation_service.exe [2021-03-29 1509488]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-31 153168]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2019-01-18 658232]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-08-17 2168672]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-04-05 317400]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2020-11-10 79360]
S3 TeamViewer;TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2020-11-18 12720144]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-03-26 52832]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-03-26 136288]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Vynechávání písmen při psaní na NTB

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Re: Vynechávání písmen při psaní na NTB

#3 Příspěvek od RodenT »

Vypadá to, že Malwarebytes nic nedetekoval, tedy nemám ani žádný log.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Vynechávání písmen při psaní na NTB

#4 Příspěvek od Rudy »

OK Dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=154679 . Jsou přesnější, než RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Re: Vynechávání písmen při psaní na NTB

#5 Příspěvek od RodenT »

OK

Log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-04-2021
Ran by Hraboš (administrator) on HRABOSS (Hewlett-Packard HP Pavilion g6 Notebook PC) (05-04-2021 16:09:37)
Running from C:\Users\Hraboš\Desktop
Loaded Profiles: Hraboš
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Default browser: Opera
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(Cambridge Silicon Radio Ltd. -> ) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe
(Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe <2>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Iris Technologies EOOD -> IrisTech) C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Opera Software AS -> Opera Software) C:\Program Files\Opera\74.0.3911.218\opera.exe <24>
(Opera Software AS -> Opera Software) C:\Program Files\Opera\74.0.3911.218\opera_crashreporter.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [525312 2011-01-25] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2011-06-09] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [CsrHCRPServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe [1134288 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [CsrAudioguiCtrl] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe [511696 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [CsrSyncMLServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe [244944 2012-03-22] (Cambridge Silicon Radio Ltd. -> )
HKLM\...\Run: [vksts] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe [25792 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [HarmonyUserStartup] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe [39128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [CSRHarmonySkypePlugin] => C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe [146656 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [TrayApplication] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe [529616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [705728 2020-11-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [IrisMini] => C:\Users\Hraboš\AppData\Local\Iris mini\iris-mini-dynamic.exe [485120 2018-07-02] (Iris Technologies EOOD -> IrisTech)
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [50041472 2021-03-12] (Google LLC -> )
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32414392 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2017-12-25] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HCR Client Port Monitor: C:\Windows\system32\csrportmon.dll [73416 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe [2021-04-01] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2020-05-04] (Adobe Inc. -> Adobe Systems, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{5355DA8C-FE32-49b4-A567-A67535C86592}] -> C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BLEtokenCredentialProvider.dll [2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {7D60630D-B589-4ACF-9645-A45D232C1737} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [375416 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {9A8BFCFF-2454-4BEE-A508-52131C5D71BD} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2651216 2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {A1760654-2B63-4BA8-A8EE-4CEF3AC97E42} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
Task: {A36C8C5B-DFFF-461A-AAB3-CD1AC8581E1F} - System32\Tasks\AdobeAAMUpdater-1.0-Hraboss-Hraboš => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {A90B345E-3FCF-4149-B26C-12C832AC4CD0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)
Task: {C14F7085-AD2A-4395-A0C8-9036E12A7774} - System32\Tasks\Avira_Security_Update => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [234200 2021-03-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {C1F9232C-67C3-4C31-AE92-F785BA5E368F} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [29757392 2021-02-22] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {D20678AC-63DD-4E91-A546-8DE960EFEA15} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1642672 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2CA7ED1-F723-4F35-95B0-6825E458B1DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26896568 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {D3C513BD-D6A3-4458-AA85-C2C1121A475A} - System32\Tasks\Opera scheduled Autoupdate 1511381552 => C:\Program Files\Opera\launcher.exe [1598616 2021-03-11] (Opera Software AS -> Opera Software)
Task: {E08CF47D-8109-403C-8D55-6AE7819E570C} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe [1499704 2020-12-09] (Adobe Inc. -> Adobe)
Task: {E3A1FA23-2957-430D-8721-E96DFE52F9FE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [375416 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {F10B6999-A710-4092-B90B-1A063D017AE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)
Task: {FAE2AAD1-FC0C-47E8-81B3-FD981923F02D} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {FC75C945-3533-47E7-A02F-5086ED391647} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{07782E82-7C1C-4EDD-9860-7834BA0FA721}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{49753BAD-4447-4E83-8027-8969D914AAB5}: [DhcpNameServer] 10.143.128.1 10.143.128.2
Tcpip\..\Interfaces\{50F6F971-7112-424C-9763-FF94B6C0EC17}: [DhcpNameServer] 172.20.10.1

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems Incorporated -> Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default [2021-04-05]
CHR Extension: (Prezentace) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-06-03]
CHR Extension: (Dokumenty) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-06-03]
CHR Extension: (Disk Google) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (YouTube) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-06-03]
CHR Extension: (Tabulky) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-06-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-19]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-01-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Extension: (Gmail) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Hraboš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-19]
CHR HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

Opera:
=======
OPR Profile: C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable [2021-04-05]
OPR Notifications: Opera Stable -> hxxps://calendar.google.com; hxxps://download-lagu-mp3.com; hxxps://meet.google.com; hxxps://wp.aliexpress.com; hxxps://www.aliexpress.com; hxxps://www.dobre-knihy.cz; hxxps://www.kizoa.com
OPR DefaultSearchURL: Opera Stable -> hxxps://www.yourvideofile.org/
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=o ... utEncoding}
OPR Extension: (Easy Youtube Video Downloader Express) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\acghaimmohdiildbgkbcjfmkdgglpofi [2020-09-06]
OPR Extension: (AdBlock) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2017-06-04]
OPR Extension: (YouTube MP3 Downloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\danfmmfbeaomffmgdnpgofcmphkpobii [2020-05-11]
OPR Extension: (Cold Turkey Blocker) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\efnolkfmdbinpkbnfigocgfglnhahldj [2021-02-19]
OPR Extension: (Rich Hints Agent) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-03-11]
OPR Extension: (Youtube Downloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\enpmcplhdgmglcikkcgoeepoalooagbg [2020-05-11]
OPR Extension: (HD Youtube Downloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\epmeclcefjojilkhkhlegeamnlddnphn [2018-04-28]
OPR Extension: (YouTube™ Video Downloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\gfogjmppofkmldokohhnmndggpgbmjbn [2020-05-11]
OPR Extension: (Night Mode Pro) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\iamhigjememoaanilbmiekcmfmpldecn [2019-08-23]
OPR Extension: (Přeložit) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2017-05-31]
OPR Extension: (YouTube Downloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\kclijeogghhkmenkommbnjobhnndpfba [2018-04-28]
OPR Extension: (YouTube Video and Audio Downloader (Dev Edt.)) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\khgbdhkpcapllhgfekjegcinegfhjbmi [2020-05-11]
OPR Extension: (Video oDownloader) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\khieimlonldpclgmgpadhhbggikgfkab [2020-05-11]
OPR Extension: (Alitools - nákupní asistent) - C:\Users\Hraboš\AppData\Roaming\Opera Software\Opera Stable\Extensions\nkekkheibgkgeepapinkalkongndfajn [2021-03-19]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1208432 2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [484904 2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [484904 2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [575776 2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [636592 2020-11-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2988544 2020-06-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [385568 2021-03-23] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [247232 2021-03-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [161072 2020-12-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)
R2 BtSwitcherService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe [64216 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R2 CSRBtAudioService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe [465624 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R2 CsrBtOBEXService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe [1041616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R2 CsrBtService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe [825032 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-04-05] (Malwarebytes Inc -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2168672 2017-08-17] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3148128 2017-08-17] (Electronic Arts, Inc. -> Electronic Arts)
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2020-11-10] (SolidWorks) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [296448 2011-01-25] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12720144 2020-11-18] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [68152 2019-06-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [222984 2021-04-05] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [177112 2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36072 2019-03-04] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-04-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [35376 2019-03-04] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 csravrcp; C:\Windows\System32\DRIVERS\csravrcp.sys [26304 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 CsrBtPort; C:\Windows\System32\DRIVERS\CsrBtPort.sys [2784968 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 csrpan; C:\Windows\System32\DRIVERS\csrpan.sys [39616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 csrserial; C:\Windows\System32\DRIVERS\csrserial.sys [61128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 csrusb; C:\Windows\System32\Drivers\csrusb.sys [47296 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 csrusbfilter; C:\Windows\System32\Drivers\csrusbfilter.sys [23752 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 csr_bthav; C:\Windows\System32\drivers\csrbthav.sys [99520 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [199128 2021-04-05] (Malwarebytes Inc -> Malwarebytes)
S3 iscFlash; C:\SwSetup\sp60864\iscflashx64.sys [49216 2011-01-19] (Insyde Software Corp. -> Insyde Software)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220616 2021-04-05] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [198248 2021-04-05] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [77496 2021-04-05] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-04-05] (Malwarebytes Inc -> Malwarebytes)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2017-09-07] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2019-04-14] (Disc Soft Ltd -> Duplex Secure Ltd.)
R3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [520192 2011-01-25] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2017-09-07] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
U3 ake5i3cb; C:\Windows\System32\Drivers\ake5i3cb.sys [0 0000-00-00] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-04-05 16:09 - 2021-04-05 16:10 - 000026974 _____ C:\Users\Hraboš\Desktop\FRST.txt
2021-04-05 16:09 - 2021-04-05 16:10 - 000000000 ____D C:\FRST
2021-04-05 16:07 - 2021-04-05 16:07 - 002298368 _____ (Farbar) C:\Users\Hraboš\Desktop\FRST64.exe
2021-04-05 15:44 - 2021-04-05 16:06 - 398294655 _____ C:\Users\Hraboš\Downloads\Matrix Revolutions _ The Matrix Revolutions 2003, EN - CZ tit.avi.opdownload
2021-04-05 15:33 - 2021-04-05 15:33 - 000220616 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2021-04-05 15:33 - 2021-04-05 15:33 - 000198248 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2021-04-05 15:33 - 2021-04-05 15:33 - 000077496 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2021-04-05 15:33 - 2021-04-05 15:33 - 000000000 ____D C:\Users\Hraboš\AppData\LocalLow\IGDump
2021-04-05 12:22 - 2021-04-05 12:22 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2021-04-05 12:22 - 2021-04-05 12:22 - 000001960 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-04-05 12:22 - 2021-04-05 12:22 - 000001948 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2021-04-05 12:22 - 2021-04-05 12:22 - 000000000 ____D C:\Users\Hraboš\AppData\Local\mbam
2021-04-05 12:22 - 2021-04-05 12:21 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2021-04-05 12:21 - 2021-04-05 12:21 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-04-05 12:21 - 2021-04-05 12:21 - 000000000 ____D C:\Program Files\Malwarebytes
2021-04-05 12:20 - 2021-04-05 12:21 - 002084016 _____ (Malwarebytes) C:\Users\Hraboš\Desktop\MBSetup.exe
2021-04-05 11:14 - 2021-04-05 11:14 - 001222144 _____ C:\Users\Hraboš\Downloads\RSITx64.exe
2021-04-05 11:14 - 2021-04-05 11:14 - 000000000 ____D C:\rsit
2021-04-05 11:14 - 2021-04-05 11:14 - 000000000 ____D C:\Program Files\trend micro
2021-04-05 11:09 - 2021-04-05 11:18 - 000000359 _____ C:\Users\Hraboš\Desktop\Viry.txt
2021-04-03 22:03 - 2021-04-03 22:03 - 000008680 _____ C:\Users\Hraboš\Documents\cc_20210403_220319.reg
2021-03-28 01:00 - 2021-03-28 01:07 - 000000155 _____ C:\Users\Hraboš\Desktop\supersensitiv.txt
2021-03-13 21:18 - 2021-04-04 20:40 - 000000000 ____D C:\Users\Hraboš\AppData\Roaming\vlc
2021-03-13 21:16 - 2021-03-13 21:16 - 000000871 _____ C:\ProgramData\Desktop\VLC media player.lnk
2021-03-13 21:16 - 2021-03-13 21:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2021-03-13 21:16 - 2021-03-13 21:16 - 000000000 ____D C:\Program Files\VideoLAN
2021-03-13 21:15 - 2021-03-13 21:16 - 042585440 _____ C:\Users\Hraboš\Downloads\vlc-3.0.12-win64.exe
2021-03-13 19:43 - 2021-01-17 19:19 - 000021150 _____ C:\Users\Hraboš\Desktop\o2-tv-1080p.m3u

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-04-05 15:40 - 2009-07-14 17:18 - 000639312 _____ C:\Windows\system32\perfh005.dat
2021-04-05 15:40 - 2009-07-14 17:18 - 000129478 _____ C:\Windows\system32\perfc005.dat
2021-04-05 15:40 - 2009-07-14 07:13 - 001499836 _____ C:\Windows\system32\PerfStringBackup.INI
2021-04-05 15:40 - 2009-07-14 06:45 - 000014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-04-05 15:40 - 2009-07-14 06:45 - 000014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-04-05 15:40 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2021-04-05 15:35 - 2017-05-31 16:27 - 000000000 ___RD C:\Users\Hraboš\Disk Google
2021-04-05 15:34 - 2017-05-31 22:30 - 000000000 ____D C:\Program Files\CCleaner
2021-04-05 15:32 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-04-05 14:44 - 2017-05-31 19:05 - 000222984 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2021-04-05 11:28 - 2017-08-17 21:36 - 000000000 ____D C:\ProgramData\Origin
2021-04-05 11:27 - 2020-11-10 18:52 - 000000000 ____D C:\Users\Hraboš\Desktop\Nová složka (2)
2021-04-05 10:44 - 2017-05-31 18:52 - 000000000 ____D C:\Users\Hraboš\AppData\Local\Adobe
2021-04-04 16:57 - 2019-01-21 21:27 - 000000000 ____D C:\Users\Hraboš\AppData\Local\Spotify
2021-04-04 16:48 - 2019-01-21 21:27 - 000000000 ____D C:\Users\Hraboš\AppData\Roaming\Spotify
2021-04-01 15:45 - 2018-06-03 22:47 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-28 20:18 - 2017-10-27 00:43 - 000000000 ____D C:\Users\Hraboš\Downloads\Subs
2021-03-27 22:22 - 2017-09-18 16:47 - 000003292 _____ C:\Windows\system32\Tasks\Avira_Antivirus_Systray
2021-03-27 05:29 - 2017-09-23 16:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2021-03-19 19:42 - 2020-12-23 17:51 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update
2021-03-18 17:46 - 2017-05-31 16:14 - 000000000 ____D C:\Program Files\Opera
2021-03-16 21:58 - 2017-05-31 19:05 - 000177112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2021-03-15 19:53 - 2020-11-26 18:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2021-03-15 19:53 - 2020-10-28 17:36 - 000003596 _____ C:\Windows\system32\Tasks\Avira_Security_Update
2021-03-15 19:53 - 2017-11-22 22:12 - 000003832 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1511381552
2021-03-14 22:57 - 2017-09-14 18:15 - 000000000 ____D C:\Users\Hraboš\Documents\Soubory aplikace Outlook
2021-03-14 22:36 - 2020-11-28 11:30 - 000000000 ____D C:\Users\Hraboš\AppData\Roaming\TeamViewer
2021-03-13 20:11 - 2019-10-20 21:52 - 000000000 ____D C:\Users\Hraboš\AppData\Roaming\obs-studio

==================== Files in the root of some directories ========

2019-05-07 18:37 - 2019-05-07 18:37 - 000000132 _____ () C:\Users\Hraboš\AppData\Roaming\Formát PNG Adobe CC – předvolby
2019-02-25 21:22 - 2019-02-25 21:22 - 000001111 _____ () C:\Users\Hraboš\AppData\Local\gamma_ramp.reg
2017-05-30 21:15 - 2021-01-30 18:17 - 000007599 _____ () C:\Users\Hraboš\AppData\Local\Resmon.ResmonCfg
2020-11-12 18:14 - 2020-11-26 21:14 - 000000000 _____ () C:\Users\Hraboš\AppData\Local\Temptable.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2021-04-02 21:03
==================== End of FRST.txt ========================


ADDITION:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-04-2021
Ran by Hraboš (05-04-2021 16:11:31)
Running from C:\Users\Hraboš\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2017-05-30 16:40:50)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3223790122-1854364240-2541962161-500 - Administrator - Disabled)
Guest (S-1-5-21-3223790122-1854364240-2541962161-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3223790122-1854364240-2541962161-1002 - Limited - Enabled)
Hraboš (S-1-5-21-3223790122-1854364240-2541962161-1000 - Administrator - Enabled) => C:\Users\Hraboš

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {8EAC8D5C-B3AA-95AA-3DF1-2845CDD09CBE}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Avira Antivirus (Enabled - Up to date) {35CD6CB8-9590-9A24-0741-1337B657D603}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.013.20074 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.465 - Adobe)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
AIDA32 v3.93 (HKLM-x32\...\AIDA32_is1) (Version: - Tamas Miklos)
AMD Catalyst Install Manager (HKLM\...\{70F55D70-7E5F-6291-4924-2F7640F19BFE}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.)
Apowersoft Online Launcher version 1.7.5 (HKLM-x32\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.5 - APOWERSOFT LIMITED)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
Avira (HKLM-x32\...\{161e6084-b0f5-43e8-86d8-09eda5c0893d}) (Version: 1.2.153.30452 - Avira Operations GmbH & Co. KG) Hidden
Avira (HKLM-x32\...\{426D1710-5DFD-45E9-B11D-464792C5AD35}) (Version: 1.2.153.30452 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.2103.2082 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.37.2.28955 - Avira Operations GmbH & Co. KG) Hidden
Avira Security (HKLM-x32\...\Avira Security_is1) (Version: 1.1.46.16549 - Avira Operations GmbH & Co. KG) Hidden
Avira Security (HKLM-x32\...\AviraSecurityUninstaller) (Version: - Avira Operations GmbH & Co. KG;)
Avira Software Updater (HKLM-x32\...\{9F45C615-6D95-47B5-BB0C-D78F6D15DE21}) (Version: 2.0.6.42639 - Avira Operations GmbH & Co. KG) Hidden
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 6.10.0.11063 - Avira Operations GmbH & Co. KG) Hidden
Backup and Sync from Google (HKLM\...\{3CBE1074-3A4F-4BA6-95E3-7A660B54FE33}) (Version: 3.55.3625.9414 - Google, Inc.)
Basic FX Suite (HKLM\...\{C22B4160-10E1-409E-9407-B643D5000AF5}) (Version: 1.0.1 - Yamaha Corporation) Hidden
Basic FX Suite (HKLM-x32\...\InstallShield_{C22B4160-10E1-409E-9407-B643D5000AF5}) (Version: 1.0.1 - Yamaha Corporation)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.71.1081 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.75 - Piriform)
Core Temp 1.15.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.15.1 - ALCPU)
CPUID CPU-Z 1.94 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.94 - CPUID, Inc.)
CSR Harmony Wireless Software Stack (HKLM\...\{17DEA095-8EE1-49A2-AC5A-9663DB098FA9}) (Version: 2.1.63.0 - Název společnosti:)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.9.3.8190 - Steinberg Media Technologies GmbH)
ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{B18BEB15-A9DA-43D7-BAE1-C6C67484C2C0}) (Version: 5.1.1 - Hewlett-Packard)
Figma (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Figma) (Version: 65.1.0 - Figma, Inc.)
FLAC to ALAC (HKLM-x32\...\{5E34A746-E221-4263-AECF-FDACB1DA15B7}_is1) (Version: - flactoalac.com)
Free Screen Recorder v2.9 (HKLM-x32\...\Free Screen Recorder_is1) (Version: 2.9 - Nbxsoft Software Development)
FreeCAD 0.18.4 (Installed for Current User) (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\FreeCAD0184) (Version: 0.18.4 - FreeCAD Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.114 - Google LLC)
HOMAG Group InstallationSuite (HKLM-x32\...\{558AB361-3356-4DD1-B658-E9F0AA72232B}) (Version: 2.0.55.0 - HOMAG Group AG)
HOMAG Group LicenseServer (HKLM-x32\...\{2748E6D6-844F-4635-A621-535C1D86FE02}) (Version: 2.3.9.6 - HOMAG Group AG)
HOMAG Group woodNest Basic (HKLM-x32\...\{2E78D224-2C37-48EA-83E8-47D2D2F66C75}) (Version: 2.0.14.0 - HOMAG Group AG)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
IBM SPSS Statistics 27 (HKLM\...\{8EAD21F8-AD8B-4C6F-ABE6-92357CAB043E}) (Version: 27.0.0.0 - IBM Corp)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6324.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2559 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
Iris mini - Software for eye protection (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\IrisTech Iris mini) (Version: "0.4.0" - "IrisTech")
iTunes (HKLM\...\{8C125166-94A1-4721-84CC-C9739E6EA8A7}) (Version: 12.9.3.3 - Apple Inc.)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Lexicon Alpha Driver (HKLM-x32\...\Lexicon Alpha Driver) (Version: 2.7 - Lexicon)
Live 8.2.2 (HKLM-x32\...\Live 8.2.2) (Version: - )
Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
MediaLooks QuickTime Source 1.7.1.7 (DirectShow Filter) (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\MLQTSource) (Version: 1.7.1.7 - MediaLooks)
Microsoft Office 2000 Premium (HKLM-x32\...\{00000405-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation)
Microsoft Office Language Pack 2013 - Czech/čeština (HKLM\...\Office15.OMUI.cs-cz) (Version: 15.0.4454.1004 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27033 (HKLM-x32\...\{cc3a7c63-31fb-4129-9024-63ebefd86a95}) (Version: 14.16.27033.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27012 (HKLM-x32\...\{67f67547-9693-4937-aa13-56e296bd40f6}) (Version: 14.16.27012.6 - Microsoft Corporation)
Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Applications - ENU (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Applications - ENU) (Version: - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{ab213ab7-4792-4c6f-a3fa-8485d06c3475}) (Version: 14.0.23829 - Microsoft Corporation)
Microsoft Windows Debugging Symbols (HKLM-x32\...\{46EA439E-2D16-49B6-AA80-00DE992FE7CE}) (Version: 7601 - Microsoft)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (HKLM\...\{90150000-001F-0405-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (HKLM\...\{90150000-001F-041B-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 24.0.3 - OBS Project)
Opera Stable 74.0.3911.218 (HKLM-x32\...\Opera 74.0.3911.218) (Version: 74.0.3911.218 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.4.17.36908 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PDF Settings CC (HKLM-x32\...\{1FBAE18D-4DE4-47AA-83EC-D1B046F262DC}) (Version: 12.0 - Adobe Systems Incorporated) Hidden
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Podpora aplikací Apple (64bitová) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Ralink RT5390 802.11b/g/n WiFi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 3.2.12.0 - Ralink)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Skype™ 7.37 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.37.103 - Skype Technologies S.A.)
SOLIDWORKS 2020 Czech Resources (HKLM\...\{D65A373E-8584-40DA-BF93-76CD3C3B1292}) (Version: 28.130.0086 - Název společnosti:) Hidden
SOLIDWORKS 2020 SP03 (HKLM\...\{3F4681F3-B30B-4531-ADB2-3661B531F926}) (Version: 28.130.0086 - Dassault Systemes SolidWorks Corp) Hidden
SOLIDWORKS 2020 SP03 (HKLM-x32\...\SolidWorks Installation Manager 20200-40300-1100-100) (Version: 28.3.0.86 - SolidWorks Corporation)
SOLIDWORKS eDrawings 2020 SP03 (HKLM\...\{B21DE16A-42B5-46A8-A905-59579C7E70C4}) (Version: 28.30.0025 - Společnost Dassault Systemes SolidWorks Corp) Hidden
Spotify (HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Spotify) (Version: 1.1.55.498.gf9a83c60 - Spotify AB)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.11.0 - Synaptics Incorporated)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.12.4 - TeamViewer)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.12 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
WPTx64 (HKLM-x32\...\{0B2C58EB-67A2-225B-60B2-D1990E55DD33}) (Version: 8.100.26866 - Microsoft)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2021-03-12] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2021-03-12] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2021-03-12] (Google LLC -> Google)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2021-03-12] (Google LLC -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {14cb2bd0-2375-3d10-9b5d-5e18865c8959} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2021-02-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlex.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxShlEx64.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-05] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2021-03-12] (Google LLC -> Google)
ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {700866bb-c8e9-3e71-b359-abb28baed0e8} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2021-02-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {0cab5786-30e8-3185-9b3b-ccefbf1b8afe} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2021-02-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-05] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2021-03-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2017-05-31 17:19 - 2011-04-30 00:28 - 000059904 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 000114176 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_ctypes.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000172544 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_elementtree.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 002255872 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_hashlib.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000032256 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_multiprocessing.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000046080 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_psutil_windows.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000047616 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_socket.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 002824704 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_ssl.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000026112 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\_yappi.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000080896 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\bz2.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000015872 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\common.time34.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000007680 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\hashobjs_ext.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000301568 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\PIL._imaging.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000168448 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\pyexpat.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 001084416 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\pysqlite2._sqlite.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000548864 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\pythoncom27.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 000137728 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\pywintypes27.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 000010752 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\select.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000020992 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\thumbnails_ext.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000689664 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\unicodedata.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000119808 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\usb_ext.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000128512 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32api.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000438784 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32com.shell.shell.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000011776 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32crypt.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000023040 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32event.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000149504 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32file.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000223232 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32gui.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000048128 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32inet.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000029696 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32pdh.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000027648 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32pipe.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000044032 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32process.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000020480 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32profile.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000136192 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32security.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000026624 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\win32ts.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000034304 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\windows.conditional.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000037888 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\windows.connectivity.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000071680 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\windows.device_monitor.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000103936 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\windows.volumes.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000019968 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\windows.winwrap.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 001325056 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wx._controls_.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 001489408 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wx._core_.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 001007104 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wx._gdi_.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000103424 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wx._html2.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 000916992 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wx._misc_.pyd
2021-04-05 15:32 - 2021-04-05 15:32 - 001039872 _____ () [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wx._windows_.pyd
2017-12-25 11:33 - 2017-12-25 11:33 - 000172544 _____ () [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\84842098d2f03a96f67a190bd3de8940\IsdiInterop.ni.dll
2017-05-31 16:42 - 2010-03-03 14:37 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2017-06-04 15:03 - 2016-10-04 16:51 - 000076800 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2017-12-25 11:33 - 2017-12-25 11:33 - 000014336 _____ (Intel Corp.) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\7087986a1294e20a2372a0c9a6ce1488\IAStorCommon.ni.dll
2017-05-31 17:19 - 2011-04-30 00:28 - 000007168 _____ (Intel Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\cs-CZ\IAStorDataMgr.resources.dll
2017-05-31 16:42 - 2010-03-03 14:37 - 000077824 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\DTMessageLib.dll
2017-05-31 16:42 - 2010-03-03 14:32 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
2017-05-31 17:19 - 2011-04-30 00:19 - 000278528 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI.dll
2017-12-25 11:33 - 2017-12-25 11:33 - 000225792 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\21a414f4855b49d2e13c5e5b5910bce3\IAStorDataMgr.ni.dll
2017-12-25 11:33 - 2017-12-25 11:33 - 000492544 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\e7e3902987fea327bf0cd6e25ef958c0\IAStorUtil.ni.dll
2018-03-26 13:58 - 2018-03-26 13:58 - 000112128 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Windows\Microsoft.Net\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
2019-11-23 12:46 - 2019-11-23 12:46 - 000225280 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 003043328 _____ (Python Software Foundation) [File not signed] C:\Users\HRABO~1\AppData\Local\Temp\_MEI28482\python27.dll
2017-05-05 01:14 - 2017-05-05 01:14 - 001257984 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\LIBEAY32.dll
2017-05-05 01:14 - 2017-05-05 01:14 - 000291840 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\ssleay32.dll
2015-10-12 21:19 - 2015-10-12 21:19 - 000037888 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\bearer\qgenericbearer.dll
2015-10-12 21:19 - 2015-10-12 21:19 - 000039936 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\bearer\qnativewifibearer.dll
2015-10-12 21:20 - 2015-10-12 21:20 - 000991232 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\platforms\qwindows.dll
2017-12-25 14:52 - 2017-12-25 14:52 - 004621312 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Core.dll
2015-10-12 21:15 - 2015-10-12 21:15 - 004860928 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Gui.dll
2015-10-12 21:14 - 2015-10-12 21:14 - 000845312 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Network.dll
2015-10-12 21:17 - 2015-10-12 21:17 - 004420096 _____ (The Qt Company Ltd) [File not signed] C:\Users\Hraboš\AppData\Local\Iris mini\Qt5Widgets.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 000202240 _____ (wxWidgets development team) [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wxbase30u_net_vc90_x64.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 002831872 _____ (wxWidgets development team) [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wxbase30u_vc90_x64.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 001654784 _____ (wxWidgets development team) [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wxmsw30u_adv_vc90_x64.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 006542336 _____ (wxWidgets development team) [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wxmsw30u_core_vc90_x64.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 000773632 _____ (wxWidgets development team) [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wxmsw30u_html_vc90_x64.dll
2021-04-05 15:32 - 2021-04-05 15:32 - 000137216 _____ (wxWidgets development team) [File not signed] C:\Users\Hraboš\AppData\Local\Temp\_MEI28482\wxmsw30u_webview_vc90_x64.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Version 8) (Whitelisted) ==========

HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxps://www.msn.com/cs-cz/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll [2005-09-23] (Microsoft Corporation) [File not signed]
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [2017-07-17] (Microsoft Corporation) [File not signed]
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Software Sarl -> Skype Technologies)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;c:\Program Files (x86)\AMD APP\bin\x86_64;c:\Program Files (x86)\AMD APP\bin\x86;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Skype\Phone\;%SYSTEMROOT%\Homag;C:\Program Files (x86)\Smart Projects\IsoBuster;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Hraboš\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^powerTouch controlCenter.lnk => C:\Windows\pss\powerTouch controlCenter.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SOLIDWORKS 2020 Rychlé spuštění.lnk => C:\Windows\pss\SOLIDWORKS 2020 Rychlé spuštění.lnk.CommonStartup
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CCleaner Smart Cleaning => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: iCloudDrive => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
MSCONFIG\startupreg: iCloudServices => "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => C:\Users\Hraboš\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
MSCONFIG\startupreg: Spotify Web Helper => C:\Users\Hraboš\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{2251D59C-6123-47CD-9D00-8D29840003E8}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{BFD6B0F3-8E59-4D16-ADF1-04A5B6A6493B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{2C49689C-E381-45FE-A4BB-794FD64424EE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4B231A43-C255-472F-AEA6-5855457541FB}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B2A92C23-B5A7-4811-8730-F5D65530BAB6}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0C3C8861-B5DB-4E51-931B-8D7BFBB3C77B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FF761BF8-9675-471A-A951-37F1956D51E8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{9A50B0A6-FFD8-40F8-BA54-35363C562748}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{B9FCD067-CB2D-4870-92D1-E5E9A0F7EA73}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{2A3039FB-5751-46F4-8E7E-C97375979CBB}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{FB1377C4-E558-446D-823C-3FD19AA6B89E}C:\users\hraboš\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hraboš\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1C3A9F40-C5FB-4597-9CDD-B347BAB6FF20}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D349C0CB-5245-4B8D-9694-3191E692F229}] => (Allow) C:\Program Files (x86)\Homag Group\LicenseServer\LicenseServer.exe (Homag Group AG -> HOMAG Group AG)
FirewallRules: [{AF0EEE33-BCE2-45B4-A617-164560ED3EF9}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{643AAC99-D20B-4931-B8A8-392141AA947B}] => (Allow) C:\Users\Hraboš\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{81BEC03C-3A47-4534-B301-EC34C461053D}] => (Allow) C:\Users\Hraboš\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [TCP Query User{B3AF5C92-D451-4FDC-B33C-E4F4B6EFFC13}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [UDP Query User{ADF33BCF-B84F-4E59-9FC2-742F551E89CA}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [{7003D461-3011-4607-9856-3406AEA843D7}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation)
FirewallRules: [{A558ED78-3E6A-4486-96E6-1729F142280A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A28E1881-FC37-4A68-AE23-1F6B8EC9BB9D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9EE9B2F0-6D66-46BF-9CDB-CD27A29AD6D4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{36B30565-9B0E-41BA-A32E-5A6A047B5D61}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F6923A0A-09F8-4D8B-A1A1-3A9B282F30D9}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\27\stats.com (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{A307FCB3-A138-495E-9F79-2726DA640F13}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\27\WinWrapIDE.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{321ECA06-5E30-44B2-AC84-BFF1307D8E62}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\27\stats.com (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{EDAC9EB7-7064-4C1F-BBDF-524CB3004049}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\27\WinWrapIDE.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{C1BC6D57-4C8A-4C99-AE6B-B4908E47BDFB}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\27\stats.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{427C58F6-E918-4C5F-8C83-046154C61594}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\27\stats.exe (International Business Machines Corporation -> IBM Corp.)
FirewallRules: [{0DD2C9C7-1F4E-4F25-B696-2AE102697D86}] => (Allow) C:\Program Files\Opera\74.0.3911.203\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{05C20D9E-673E-401E-A9AD-A0D77B2CE9F8}] => (Allow) C:\Program Files\Opera\74.0.3911.218\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{3B62A679-FFE7-4427-AF4C-4DF03BA15944}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{98F455D0-97EB-476B-BCC1-72BF5862809E}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
FirewallRules: [{F0E28836-5F9C-40AC-A3F6-2C727F141298}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
FirewallRules: [{EFDFA63E-E220-43C5-9632-686D7F1DDA82}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

==================== Restore Points =========================

15-03-2021 20:36:04 Naplánovaný kontrolní bod
24-03-2021 12:12:29 Naplánovaný kontrolní bod
05-04-2021 13:00:02 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

Name: Synaptics PS/2 Port TouchPad
Description: Synaptics PS/2 Port TouchPad
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Synaptics
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Zařízení PCI
Description: Zařízení PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (04/05/2021 03:32:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/05/2021 03:32:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/05/2021 03:32:39 PM) (Source: usbperf) (EventID: 2001) (User: )
Description: Nelze přečíst hodnotu First Counter v klíči usbperf\Performance. Kódy stavu byly vráceny v rámci dat.

Error: (04/05/2021 03:32:39 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Nelze otevřít objekt výkonu služby serveru. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (04/05/2021 03:32:29 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/05/2021 03:32:29 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/05/2021 03:09:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/05/2021 03:09:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Audacity\audacity.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Součást 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (04/05/2021 04:09:28 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

Error: (04/05/2021 04:09:28 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

Error: (04/05/2021 04:09:28 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Byla přijata následující výstraha o závažné chybě: 70.

Error: (04/05/2021 04:06:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535

Error: (04/05/2021 04:06:56 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (04/05/2021 04:06:56 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Protokol PNRP (Peer Name Resolution Protocol) nebylo možné spustit, protože se nezdařilo vytvoření nové identity. Kód chyby: 0x80630801.

Error: (04/05/2021 04:06:55 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Protokol PNRP (Peer Name Resolution Protocol) byla ukončena s následující chybou:
%%-2140993535

Error: (04/05/2021 04:06:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Seskupování v sítích peer-to-peer závisí na službě Protokol PNRP (Peer Name Resolution Protocol), která neuspěla při spuštění v důsledku následující chyby:
%%-2140993535


==================== Memory info ===========================

BIOS: Insyde F.66 01/24/2013
Motherboard: Hewlett-Packard 1668
Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Percentage of memory in use: 93%
Total physical RAM: 3893.86 MB
Available physical RAM: 239.23 MB
Total Virtual: 7785.91 MB
Available Virtual: 3070.97 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:221.46 GB) (Free:29.21 GB) NTFS
Drive d: (disk 2) (Fixed) (Total:298.09 GB) (Free:296.59 GB) NTFS
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32

\\?\Volume{314263f4-4556-11e7-9dab-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: 85171202)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=221.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=2 GB) - (Type=0C)

==========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: 7A06B2DB)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Vynechávání písmen při psaní na NTB

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [] => [X]
Task: {A90B345E-3FCF-4149-B26C-12C832AC4CD0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)
Task: {F10B6999-A710-4092-B90B-1A063D017AE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)
C:\Users\Hraboš\AppData\Local\Temp
FirewallRules: [TCP Query User{B3AF5C92-D451-4FDC-B33C-E4F4B6EFFC13}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [UDP Query User{ADF33BCF-B84F-4E59-9FC2-742F551E89CA}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Re: Vynechávání písmen při psaní na NTB

#7 Příspěvek od RodenT »

done!

Tady je log:

Fix result of Farbar Recovery Scan Tool (x64) Version: 05-04-2021
Ran by Hraboš (05-04-2021 20:18:38) Run:1
Running from C:\Users\Hraboš\Desktop
Loaded Profiles: Hraboš
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\...\Run: [] => [X]
Task: {A90B345E-3FCF-4149-B26C-12C832AC4CD0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)
Task: {F10B6999-A710-4092-B90B-1A063D017AE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-05-31] (Google Inc -> Google Inc.)
C:\Users\Hrabo�\AppData\Local\Temp
FirewallRules: [TCP Query User{B3AF5C92-D451-4FDC-B33C-E4F4B6EFFC13}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File
FirewallRules: [UDP Query User{ADF33BCF-B84F-4E59-9FC2-742F551E89CA}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKU\S-1-5-21-3223790122-1854364240-2541962161-1000\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A90B345E-3FCF-4149-B26C-12C832AC4CD0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A90B345E-3FCF-4149-B26C-12C832AC4CD0}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F10B6999-A710-4092-B90B-1A063D017AE2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F10B6999-A710-4092-B90B-1A063D017AE2}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"C:\Users\Hrabo�\AppData\Local\Temp" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B3AF5C92-D451-4FDC-B33C-E4F4B6EFFC13}C:\counter-strike 1.6\hl.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ADF33BCF-B84F-4E59-9FC2-742F551E89CA}C:\counter-strike 1.6\hl.exe" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 26636474 B
Java, Flash, Steam htmlcache => 160035 B
Windows/system/drivers => 70867 B
Edge => 0 B
Chrome => 57313714 B
Firefox => 0 B
Opera => 321572435 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 52703 B
systemprofile32 => 169548 B
LocalService => 235776 B
NetworkService => 302004 B
Hraboš => 100729099 B

RecycleBin => 0 B
EmptyTemp: => 491.7 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:19:16 ====

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Vynechávání písmen při psaní na NTB

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Re: Vynechávání písmen při psaní na NTB

#9 Příspěvek od RodenT »

Změna nastala. Počítač je mnohem svižnější, takže moc děkuji.

Ale psaní písmen stále blbne. V průběhu co toto píšu, se mi to asi 5 x zaseklo.

Je to zvláštní - jsou to písmena "qweruiop" a taky šipka nahoru a doleva. Dělá to v nějakých náhodných intervalech. Chvilku to jde a pak zase ne.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Vynechávání písmen při psaní na NTB

#10 Příspěvek od Rudy »

Zluste k NB připojit externí klávesku a vyzkoušejte, zda se problém objevuje i tam.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Re: Vynechávání písmen při psaní na NTB

#11 Příspěvek od RodenT »

Ano to jsem si taky říkal, akorát teď doma žádnou nemám.

Každopádně, ještě jsem zkusil aktualizovat ovladače na klávesnici. Napsalo mi to, že jsou aktuální.

Pak jsem ještě jednou restartnul... No a teď, teď to vypadá, že to funguje, tak uvidím.

Pokud se to znovu objeví, tak zkusím externí.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Vynechávání písmen při psaní na NTB

#12 Příspěvek od Rudy »

Myslel jsem si ji od někoho vypůjčit.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Re: Vynechávání písmen při psaní na NTB

#13 Příspěvek od RodenT »

Chvilku to trvalo, ale mám půjčenou klávesnici! :)

Externí funguje jak má. Ta na notebooku pořád zlobí :/.

Takže buď je to přímo klávesnice nebo ještě mne napadají ty drivery.

Zajímavé, že několik let zpátky jsem již toto řešil a pročištění tady na fóru tomu pomohlo.

Zase mi přijde zvláštní, že pokud by to byl hardware tedy klávesnice, že by se to jen tak na několik let rozjelo a ozvalo se až teď.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118195
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Vynechávání písmen při psaní na NTB

#14 Příspěvek od Rudy »

Tak možné to je, možná do klávesky něco nateklo a pak zoxydovalo, nebo to může být běžná mechanická vada. V každém případě vás čeká výměna klávesky. Pochbuji, že by to dělal ovladač, z 99% to nepřipadá v úvahu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

RodenT
Návštěvník
Návštěvník
Příspěvky: 77
Registrován: 22 kvě 2013 16:01

Re: Vynechávání písmen při psaní na NTB

#15 Příspěvek od RodenT »

Je to možné. Tak asi zkusím objednat a vyměnit.

Každopádně díky za pročištění!

Zamčeno