Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Vyskakovací okna s reklamou

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Vyskakovací okna s reklamou

#1 Příspěvek od Sobi »

Dobrý den,

prosím o pomoc s odvirováním pc. Klikl jsem na špatný odkaz a asi jsem si něco stáhl do pc, protože mi od té doby vyskakuje reklama v okně nad hodinami. Děkuji moc.

Sobi

--------------------------

Scan
result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-07-2021 01
Ran by Jirka (administrator) on Jirka (MSI MS-7996) (26-07-2021 16:20:23)
Running from C:\Users\Martina\Desktop
Loaded Profiles: Jirka & Martina
Platform: Windows 10 Pro Version 21H1 19043.1110 (X64) Language: Čeština (Česko) -> Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogRx.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABGSWK.EXE
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\IntelCpHDCPSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Martina\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rdpclip.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\NisSrv.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Software602 a.s. -> Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
0 C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21060.9012.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
0 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21052.124.0_x64__8wekyb3d8bbwe\YourPhone.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9199104 2017-03-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC. -> CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [M17A] => C:\WINDOWS\twain_32\Brimm17a\Common\TwDsUiLaunch.exe [86120 2018-11-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2017-04-05] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2892800 2017-03-30] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3581952 2017-04-05] (Brother Industries, Ltd.) [File not signed]
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\Run: [Google Update] => C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\GoogleUpdateCore.exe [222616 2021-07-19] (Google LLC -> Google LLC)
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\MountPoints2: {bdce411a-573c-11eb-bf29-4ccc6a27804f} - "D:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\hpcpp101: C:\Windows\System32\spool\prtprocs\x64\hpcpp101.dll [323584 2010-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\CNAP2 Monitor: C:\WINDOWS\system32\CNAP2LMD.DLL [486400 2012-09-03] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [115200 2017-03-18] (pdfforge GmbH) [File not signed]
HKLM\...\Print\Monitors\Software602 XPS port monitor: C:\WINDOWS\system32\602localmon.dll [36864 2015-07-14] (Windows (R) Win 7 DDK provider) [File not signed]

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {12A59B4F-5B35-41EC-A561-A57900686B09} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147296 2021-07-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {43E49560-6E72-4738-B6E6-822C013ED54C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {539CE878-5BEF-45EE-9C42-2EBE8588FA01} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23182216 2021-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {62E0D793-1CCF-4BFF-BBEF-F32F7B02256D} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {64BA656D-66F3-4FC8-A08C-464129538E9A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {7ECCD62C-CF76-4924-98F5-1A5AE07C9AC6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {82550251-9F20-4705-8F06-91BB7277337D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002UA => C:\Users\Martina\AppData\Local\Google\Update\GoogleUpdate.exe [153752 2017-03-21] (Google Inc -> Google Inc.)
Task: {8A76323F-FBA4-48EC-A109-D80E543F60BC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23182216 2021-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {8EEF5623-21CE-4544-A4F0-B2E7E70DB0A7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B5DCB08D-9886-4BDD-A288-B0F4BEC98502} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F5377C20-A237-4446-9DE4-D1BFF6EC8EC4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002Core => C:\Users\Martina\AppData\Local\Google\Update\GoogleUpdate.exe [153752 2017-03-21] (Google Inc -> Google Inc.)
Task: {FBD13F5D-ECBC-4995-A914-50C790514D9B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147296 2021-07-24] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{9050653e-99a6-4ca5-962e-6ceffb31ca4c}: [NameServer] 10.0.0.1,8.8.8.8

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s. -> Software602 a.s.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-06-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3861839715-2628484499-211688117-1001: @kb-ext.cz/PKIComponent -> C:\Users\Jirka\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll [2016-02-26] (KOMERCNI BANKA A.S. -> Komerční banka, a.s.)
FF Plugin HKU\S-1-5-21-3861839715-2628484499-211688117-1002: @kb-ext.cz/PKIComponent -> C:\Users\Martina\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll [2021-01-25] (KOMERCNI BANKA A.S. -> Komerční banka, a.s.)
FF Plugin HKU\S-1-5-21-3861839715-2628484499-211688117-1002: @kb-tfo.cz/PKIComponent -> C:\Users\Martina\AppData\Roaming\KB-tfo\lib\x86\npPKIComponentNPAPI-tfo.dll [2015-10-06] (KOMERCNI BANKA A.S. -> Komerční banka, a.s.)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s. -> Software602 a.s.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [298496 2017-03-22] (Brother Industries, Ltd.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9056672 2021-07-18] (Microsoft Corporation -> Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5395384 2021-07-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13257000 2021-07-01] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\NisSrv.exe [2665432 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MsMpEng.exe [136640 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
R3 GemCCID; C:\WINDOWS\System32\drivers\GemCCID.sys [139632 2015-07-10] (Microsoft Windows Hardware Compatibility Publisher -> Gemalto)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-07-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [425192 2021-07-12] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [76008 2021-07-12] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-07-26 16:20 - 2021-07-26 16:20 - 000015085 _____ C:\Users\Martina\Desktop\FRST.txt
2021-07-26 16:20 - 2021-07-26 16:20 - 000000000 ____D C:\FRST
2021-07-26 16:19 - 2021-07-26 16:19 - 002300416 _____ (Farbar) C:\Users\Martina\Desktop\FRST64.exe
2021-07-26 15:24 - 2021-07-26 15:24 - 000003757 _____ C:\Users\Martina\Downloads\priloha_925469756_0_NEMPRI (1).XML
2021-07-26 15:12 - 2021-07-26 15:12 - 000001359 _____ C:\Users\Martina\Downloads\DPHKH1-7209155096-20210726-151153 (1).xml
2021-07-26 15:06 - 2021-07-26 15:06 - 000006792 _____ C:\Users\Martina\Downloads\DPHDP3-7209155096-20210726-150612-platba.pdf
2021-07-26 07:30 - 2021-07-26 07:30 - 000061436 _____ C:\Users\Martina\Downloads\866179310267_20210723.pdf
2021-07-23 11:39 - 2021-07-23 11:39 - 000423994 _____ C:\Users\Martina\Downloads\OW2144053.tif
2021-07-23 09:29 - 2021-07-23 09:29 - 000061019 _____ C:\Users\Martina\Downloads\866179310267_20210722.pdf
2021-07-23 09:29 - 2021-07-23 09:29 - 000060030 _____ C:\Users\Martina\Downloads\353272920277_20210722.pdf
2021-07-23 09:28 - 2021-07-23 09:28 - 000061269 _____ C:\Users\Martina\Downloads\866179320297_20210722.pdf
2021-07-22 14:47 - 2021-07-22 14:47 - 000073035 _____ C:\Users\Martina\Downloads\OW2135592.tif
2021-07-22 09:49 - 2021-07-22 09:49 - 000003757 _____ C:\Users\Martina\Downloads\priloha_925469756_0_NEMPRI.XML
2021-07-22 09:48 - 2021-07-22 09:48 - 000006937 _____ C:\Users\Martina\Downloads\priloha_925627402_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-A9A376678FD74CC68D12A6BEA132241D-925469756 (1).html
2021-07-22 07:58 - 2021-07-22 07:58 - 000151589 _____ C:\Users\Martina\Downloads\Zadost_o_poskytnuti_importniho_akreditivu (5).pdf
2021-07-22 07:26 - 2021-07-22 07:26 - 000061432 _____ C:\Users\Martina\Downloads\866179310267_20210721.pdf
2021-07-22 07:26 - 2021-07-22 07:26 - 000060350 _____ C:\Users\Martina\Downloads\353272920277_20210721.pdf
2021-07-22 07:25 - 2021-07-22 07:25 - 000059521 _____ C:\Users\Martina\Downloads\866179320297_20210721.pdf
2021-07-21 15:05 - 2021-07-21 15:05 - 015102721 _____ C:\Users\Martina\Downloads\ucetni zaverka 2019 s prilohami potvrzena auditorem.pdf
2021-07-21 10:26 - 2021-07-21 10:26 - 000210452 _____ C:\Users\Martina\Downloads\n 156-2021, nz 189-2021.pdf
2021-07-21 10:26 - 2021-07-21 10:26 - 000123541 _____ C:\Users\Martina\Downloads\hut vykazy 2020 v priznani.pdf
2021-07-21 10:24 - 2021-07-21 10:24 - 000321276 _____ C:\Users\Martina\Downloads\n 157-2021, nz 190-2021.pdf
2021-07-21 07:38 - 2021-07-21 07:38 - 000060821 _____ C:\Users\Martina\Downloads\866179310267_20210720.pdf
2021-07-21 06:59 - 2021-07-21 06:59 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-21 06:59 - 2021-07-21 06:59 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-21 06:59 - 2021-07-21 06:59 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-07-21 06:59 - 2021-07-21 06:59 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-07-21 06:59 - 2021-07-21 06:59 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-07-21 06:59 - 2021-07-21 06:59 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-07-20 14:20 - 2021-07-20 14:20 - 000150570 _____ C:\Users\Martina\Downloads\stejnopis elektronicky.pdf
2021-07-20 14:20 - 2021-07-20 14:20 - 000030242 _____ C:\Users\Martina\Downloads\c 79602.pdf
2021-07-20 14:18 - 2021-07-20 14:18 - 000549510 _____ C:\Users\Martina\Downloads\priloha_v_ucetni_zaverce_ve_zkracenem_rozsahu_(mala_a_mikro_uc._jednotka)(2).pdf
2021-07-20 14:18 - 2021-07-20 14:18 - 000035034 _____ C:\Users\Martina\Downloads\c 80764.pdf
2021-07-20 10:45 - 2021-07-20 10:45 - 000006937 _____ C:\Users\Martina\Downloads\priloha_925627402_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-A9A376678FD74CC68D12A6BEA132241D-925469756.html
2021-07-20 10:44 - 2021-07-20 10:44 - 000007016 _____ C:\Users\Martina\Downloads\priloha_926558028_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_RELDP-B383549946814CFFBBB8913D753541B1-926536555.html
2021-07-20 10:44 - 2021-07-20 10:44 - 000007014 _____ C:\Users\Martina\Downloads\priloha_925628324_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-F93DC0F6D988495FB2F88D5D633C5E27-925463624.html
2021-07-20 10:44 - 2021-07-20 10:44 - 000007014 _____ C:\Users\Martina\Downloads\priloha_925628139_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-2D78D1B3AF01464690DD5ACFF86A625B-925471129.html
2021-07-20 07:33 - 2021-07-20 07:33 - 000093433 _____ C:\Users\Martina\Downloads\priloha_929251495_0_vznikDpnOznam_14161985.pdf
2021-07-20 07:32 - 2021-07-20 07:32 - 000061277 _____ C:\Users\Martina\Downloads\866179310267_20210719.pdf
2021-07-20 07:31 - 2021-07-20 07:31 - 000061655 _____ C:\Users\Martina\Downloads\353272920277_20210719.pdf
2021-07-20 07:31 - 2021-07-20 07:31 - 000060275 _____ C:\Users\Martina\Downloads\866179320297_20210719.pdf
2021-07-19 15:03 - 2021-07-19 15:03 - 000452606 _____ C:\Users\Martina\Downloads\Prům_1-12_06.2021_(RESICO_25825691)_TISK.pdf
2021-07-19 11:26 - 2021-07-19 11:26 - 001420797 _____ C:\Users\Martina\Downloads\OW2143553.tiff
2021-07-19 08:59 - 2021-07-19 08:59 - 000066054 _____ C:\Users\Martina\Downloads\866179310267_20210715.pdf
2021-07-19 08:59 - 2021-07-19 08:59 - 000060772 _____ C:\Users\Martina\Downloads\353272920277_20210715.pdf
2021-07-19 08:59 - 2021-07-19 08:59 - 000059533 _____ C:\Users\Martina\Downloads\866179320297_20210715.pdf
2021-07-15 08:01 - 2021-07-15 08:01 - 000060256 _____ C:\Users\Martina\Downloads\353272920277_20210714 (1).pdf
2021-07-15 08:00 - 2021-07-15 08:00 - 000060256 _____ C:\Users\Martina\Downloads\353272920277_20210714.pdf
2021-07-14 08:08 - 2021-07-14 08:08 - 000033052 _____ C:\Users\Martina\Downloads\BIT_202106_336131290.xlsx
2021-07-14 08:07 - 2021-07-14 08:07 - 000219004 _____ C:\Users\Martina\Downloads\3361312903.pdf
2021-07-14 07:42 - 2021-07-14 07:42 - 000060770 _____ C:\Users\Martina\Downloads\866179310267_20210713.pdf
2021-07-14 07:04 - 2021-07-14 07:04 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-14 07:04 - 2021-07-14 07:04 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-14 07:04 - 2021-07-14 07:04 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-14 07:04 - 2021-07-14 07:04 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-14 07:04 - 2021-07-14 07:04 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-14 07:04 - 2021-07-14 07:04 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-14 07:03 - 2021-07-14 07:03 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-14 07:03 - 2021-07-14 07:03 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-14 07:03 - 2021-07-14 07:03 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-07-14 07:03 - 2021-07-14 07:03 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-13 08:41 - 2021-07-13 08:41 - 000028492 _____ C:\Users\Martina\Downloads\export-4180003950.pdf
2021-07-13 07:23 - 2021-07-13 07:23 - 000059265 _____ C:\Users\Martina\Downloads\1231810640207_20210712.pdf
2021-07-13 07:22 - 2021-07-13 07:22 - 000065430 _____ C:\Users\Martina\Downloads\353272920277_20210712.pdf
2021-07-13 07:22 - 2021-07-13 07:22 - 000064896 _____ C:\Users\Martina\Downloads\866179310267_20210712.pdf
2021-07-13 07:22 - 2021-07-13 07:22 - 000061714 _____ C:\Users\Martina\Downloads\866179320297_20210712.pdf
2021-07-12 07:11 - 2021-07-12 07:11 - 000061435 _____ C:\Users\Martina\Downloads\866179310267_20210709.pdf
2021-07-12 07:10 - 2021-07-12 07:10 - 000058162 _____ C:\Users\Martina\Downloads\353272920277_20210709.pdf
2021-07-12 07:10 - 2021-07-12 07:10 - 000058162 _____ C:\Users\Martina\Downloads\353272920277_20210709 (1).pdf
2021-07-08 09:58 - 2021-07-08 09:58 - 000035004 _____ C:\Users\Martina\Downloads\rocni-zprava-o-cinnosti-zamestnavatele-2020.xlsx
2021-07-08 08:39 - 2021-07-08 08:39 - 000062537 _____ C:\Users\Martina\Downloads\353272920277_20210707.pdf
2021-07-08 08:39 - 2021-07-08 08:39 - 000061120 _____ C:\Users\Martina\Downloads\866179310267_20210707.pdf
2021-07-08 07:06 - 2021-07-15 09:21 - 000000000 ____D C:\Users\Martina\Desktop\plocha
2021-07-07 14:42 - 2021-07-07 14:42 - 000217738 _____ C:\Users\Martina\Downloads\3361312627.pdf
2021-07-07 14:42 - 2021-07-07 14:42 - 000021470 _____ C:\Users\Martina\Downloads\CW_202106_3361312627.xlsx
2021-07-07 07:38 - 2021-07-07 07:38 - 000065704 _____ C:\Users\Martina\Downloads\866179310267_20210702.pdf
2021-07-07 07:37 - 2021-07-07 07:37 - 000063942 _____ C:\Users\Martina\Downloads\353272920277_20210702.pdf
2021-07-07 07:37 - 2021-07-07 07:37 - 000061535 _____ C:\Users\Martina\Downloads\866179320297_20210702.pdf
2021-07-02 11:09 - 2021-07-02 11:09 - 000060619 _____ C:\Users\Martina\Downloads\866179310267_20210701.pdf
2021-07-02 08:22 - 2021-07-02 08:22 - 000070806 _____ C:\Users\Martina\Downloads\OW2139034.tif
2021-07-01 07:14 - 2021-07-01 07:14 - 000001489 _____ C:\Users\Martina\Downloads\2100205007_out_MT707_1_1_208568463.pdf
2021-07-01 07:06 - 2021-07-01 07:06 - 000502137 _____ C:\Users\Martina\Downloads\272867410247_20210601_20210630.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000064147 _____ C:\Users\Martina\Downloads\866179310267_20210629.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000058232 _____ C:\Users\Martina\Downloads\866179310267_20210630.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000058232 _____ C:\Users\Martina\Downloads\357437750287_20210630.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000058171 _____ C:\Users\Martina\Downloads\1231810640207_20210630.pdf
2021-07-01 07:04 - 2021-07-01 07:04 - 000062213 _____ C:\Users\Martina\Downloads\353272920277_20210630.pdf
2021-07-01 07:04 - 2021-07-01 07:04 - 000059820 _____ C:\Users\Martina\Downloads\353272920277_20210629.pdf
2021-07-01 07:03 - 2021-07-01 07:03 - 000058079 _____ C:\Users\Martina\Downloads\866179320297_20210630.pdf
2021-06-29 07:27 - 2021-06-29 07:27 - 000061271 _____ C:\Users\Martina\Downloads\866179310267_20210628.pdf
2021-06-29 07:27 - 2021-06-29 07:27 - 000061200 _____ C:\Users\Martina\Downloads\353272920277_20210628.pdf
2021-06-28 07:55 - 2021-06-28 07:55 - 000060616 _____ C:\Users\Martina\Downloads\866179310267_20210625.pdf
2021-06-28 07:55 - 2021-06-28 07:55 - 000060177 _____ C:\Users\Martina\Downloads\1231810640207_20210625.pdf
2021-06-28 07:55 - 2021-06-28 07:55 - 000060177 _____ C:\Users\Martina\Downloads\1231810640207_20210625 (1).pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-07-26 16:13 - 2020-12-10 07:55 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-07-26 16:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-07-26 16:13 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-26 15:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-07-26 15:20 - 2018-01-05 08:12 - 000000000 ____D C:\Users\Martina\AppData\Local\Packages
2021-07-26 15:17 - 2017-03-20 15:34 - 000000000 ____D C:\Users\Martina\Desktop\A dokumenty
2021-07-26 14:54 - 2020-12-10 08:04 - 001605602 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-07-26 14:54 - 2019-12-07 16:43 - 000682238 _____ C:\WINDOWS\system32\perfh005.dat
2021-07-26 14:54 - 2019-12-07 16:43 - 000137054 _____ C:\WINDOWS\system32\perfc005.dat
2021-07-26 14:54 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-07-26 14:48 - 2020-12-09 10:56 - 000000000 ____D C:\Users\Martina
2021-07-26 14:48 - 2017-03-18 17:45 - 000000000 ___RD C:\Users\Martina\OneDrive
2021-07-26 14:48 - 2017-03-18 17:44 - 000000000 __SHD C:\Users\Martina\IntelGraphicsProfiles
2021-07-26 14:47 - 2020-12-10 08:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-07-26 14:47 - 2020-12-10 07:55 - 000008192 ___SH C:\DumpStack.log.tmp
2021-07-26 14:47 - 2017-03-18 17:24 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-07-26 14:47 - 2016-07-11 15:59 - 000000000 ____D C:\Intel
2021-07-24 14:58 - 2021-01-05 18:07 - 000000000 ____D C:\Program Files\Microsoft Office
2021-07-24 13:20 - 2020-06-10 05:47 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-07-24 13:20 - 2020-06-10 05:47 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-07-24 13:20 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-23 08:52 - 2019-05-02 16:36 - 000000000 ____D C:\Users\Martina\Desktop\Skenování
2021-07-23 07:03 - 2017-03-21 08:32 - 000002508 _____ C:\Users\Martina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-07-23 07:03 - 2017-03-21 08:32 - 000002471 _____ C:\Users\Martina\Desktop\Google Chrome.lnk
2021-07-22 08:09 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-07-22 08:06 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-07-22 07:54 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-07-21 15:37 - 2020-12-10 07:55 - 000314752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-21 15:37 - 2019-12-07 16:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-07-20 12:17 - 2019-12-23 09:02 - 000000000 ____D C:\Users\Martina\Desktop\ATRADIUS
2021-07-20 09:31 - 2017-05-09 17:29 - 000000000 ____D C:\ProgramData\NVMS-1000
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-19 15:33 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-19 15:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-19 15:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-07-19 06:58 - 2020-12-10 08:00 - 000003736 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002UA
2021-07-19 06:58 - 2020-12-10 08:00 - 000003468 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002Core
2021-07-19 06:55 - 2020-12-10 08:00 - 000003366 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3861839715-2628484499-211688117-1002
2021-07-19 06:55 - 2020-12-09 10:56 - 000002383 _____ C:\Users\Martina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-07-15 07:20 - 2017-03-18 16:26 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-07-15 07:20 - 2016-07-11 16:18 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-07-15 07:18 - 2016-07-11 16:18 - 133422552 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-07-12 06:58 - 2018-01-19 16:22 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-07-02 06:14 - 2021-01-20 07:49 - 000003490 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6ceb98e3f5497
2021-07-02 06:14 - 2020-12-10 08:00 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

==================== Files in the root of some directories ========

2020-07-13 09:38 - 2020-07-13 09:39 - 062697472 _____ (Česká pošta, s.p.) C:\Users\Martina\Crypta_windows_x64_2_5_0.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2021 01
Ran by Jirka (26-07-2021 16:22:32)
Running from C:\Users\Martina\Desktop
Windows 10 Pro Version 21H1 19043.1110 (X64) (2020-12-10 06:00:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3861839715-2628484499-211688117-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3861839715-2628484499-211688117-503 - Limited - Disabled)
Guest (S-1-5-21-3861839715-2628484499-211688117-501 - Limited - Disabled)
Martina (S-1-5-21-3861839715-2628484499-211688117-1002 - Limited - Enabled) => C:\Users\Martina
Jirka (S-1-5-21-3861839715-2628484499-211688117-1001 - Administrator - Enabled) => C:\Users\Jirka
WDAGUtilityAccount (S-1-5-21-3861839715-2628484499-211688117-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.005.20058 - Adobe Systems Incorporated)
BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{113D31E0-0791-4654-9000-5F77221E99F7}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{F921362C-796E-4BC7-9385-86CED819E73D}) (Version: 1.0.22.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden
Canon LBP6310 (HKLM\...\Canon LBP6310) (Version: - )
ControlCenter4 (HKLM-x32\...\{9091B952-8719-49C3-9CC7-6E20EC61081F}) (Version: 4.6.6.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
Crypta 2.5.0 (HKLM\...\5139-7455-1198-4436) (Version: 2.5.0 - Česká pošta, s.p.)
CryptoPlus KB v1.0 (HKLM-x32\...\CryptoPlus KB v1.0) (Version: 2.1.8 - Monet+,a.s.)
CryptoPlus KB v1.0 x64 (HKLM\...\CryptoPlus KB v1.0) (Version: 2.1.8 - Monet+,a.s.)
Google Chrome (HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\Google Chrome) (Version: 91.0.4472.164 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
JRF (HKLM-x32\...\JRF) (Version: 1.3.0.0 - ICZ a.s.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 92.0.902.55 - Microsoft Corporation)
Microsoft Office 2019 pro domácnosti a podnikatele - cs-cz (HKLM\...\HomeBusiness2019Retail - cs-cz) (Version: 16.0.14131.20332 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3861839715-2628484499-211688117-1001\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\OneDriveSetup.exe) (Version: 21.129.0627.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E5A95BC5-81DF-4F0C-B910-B59DD012F037}) (Version: 2.81.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
NetworkRepairTool (HKLM-x32\...\{86E68F57-FAFE-4052-BDD4-3B90C38236AE}) (Version: 1.2.16.0 - Brother Industries, Ltd.) Hidden
NVMS1000 (HKLM-x32\...\{D7079657-6D6A-4AD2-ABAB-416A10D44F66}) (Version: 1.00.0000 - ) Hidden
NVMS1000 (HKLM-x32\...\InstallShield_{D7079657-6D6A-4AD2-ABAB-416A10D44F66}) (Version: 1.00.0000 - )
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14131.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14131.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.1 - pdfforge GmbH)
Pervasive PSQL v11 Client (32-bit) SP3 (HKLM-x32\...\Pervasive PSQL v11 Client (32-bit)) (Version: 11.30.061 - Pervasive Software)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8083 - Realtek Semiconductor Corp.)
ScannerUtilityInstaller (HKLM-x32\...\{5B645FE2-19E9-4B15-B5B2-3D8766F6FA27}) (Version: 1.0.0.0 - Brother) Hidden
Software602 Form Filler (HKLM-x32\...\{04703FE3-1A8B-4467-88E6-3D6A1A0FA65A}) (Version: 4.70 - Software602 a.s.)
SoftwareUpdateNotification (HKLM-x32\...\{34F12379-C924-41E6-921D-51C71217F58C}) (Version: 1.0.9.0 - Brother Industries, Ltd.) Hidden
StatusMonitor (HKLM-x32\...\{40578A7A-6E36-457F-A4F0-45BC37EB61FD}) (Version: 1.20.1.0 - Brother Insutries Ltd.) Hidden
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.19.5 - TeamViewer)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.422\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{8B480070-D37D-4090-A063-7A429F849652}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\Martina\AppData\Local\Google\Chrome\Application\91.0.4472.164\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\igfxDTCM.dll [2020-09-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2016-11-25 10:18 - 2016-11-25 10:18 - 000139264 _____ () [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2019-05-02 16:29 - 2005-04-22 13:36 - 000143360 _____ () [File not signed] C:\WINDOWS\system32\BrSNMP64.dll
2017-03-22 17:21 - 2017-03-22 17:21 - 000491008 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrMonitor.dll
2016-07-29 17:06 - 2016-07-29 17:06 - 000180224 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BroSNMP.dll
2016-10-04 14:25 - 2016-10-04 14:25 - 001708032 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\Brother\BrStMonWRes.dll
2017-04-05 09:53 - 2017-04-05 09:53 - 000137728 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcAssoc.dll
2017-01-27 15:39 - 2017-01-27 15:39 - 000087552 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcDlgRc.dll
2017-01-27 15:39 - 2017-01-27 15:39 - 017974784 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcGrImg.dll
2017-01-27 15:33 - 2017-01-27 15:33 - 000090112 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcLCze.dll
2017-04-05 09:53 - 2017-04-05 09:53 - 000440832 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\Track.dll
2019-05-02 16:29 - 2016-11-01 11:27 - 000090112 _____ (Brother Industries, Ltd.) [File not signed] C:\WINDOWS\system32\BrNetSti.dll
2010-01-18 13:29 - 2010-01-18 13:29 - 000071680 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2010-01-18 13:29 - 2010-01-18 13:29 - 000089600 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
2021-01-05 18:28 - 2021-01-05 18:28 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2021-01-05 18:28 - 2021-01-05 18:28 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2017-03-18 18:05 - 2017-03-18 18:05 - 000115200 _____ (pdfforge GmbH) [File not signed] C:\WINDOWS\System32\pdfcmon.dll
2017-03-18 16:49 - 2015-07-14 13:27 - 000036864 _____ (Windows (R) Win 7 DDK provider) [File not signed] C:\WINDOWS\System32\602localmon.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-3861839715-2628484499-211688117-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> DefaultScope {0AFEE6DD-9215-4510-94E5-65F89730F704} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> {0AFEE6DD-9215-4510-94E5-65F89730F704} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> DefaultScope {00EBEE52-43D8-4F60-9FF0-BFE3D98FB197} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> {00EBEE52-43D8-4F60-9FF0-BFE3D98FB197} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1001\...\mojebanka.cz -> hxxps://etrading.mojebanka.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1001\...\mojeplatba.cz -> hxxps://www.mojeplatba.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\kb.cz -> hxxps://tfonline.kb.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\mojebanka.cz -> hxxps://etrading.mojebanka.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\mojeplatba.cz -> hxxps://www.mojeplatba.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\tfonline.cz -> hxxps://www.tfonline.cz

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 09:24 - 2015-10-30 09:21 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Pervasive Software\PSQL\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3861839715-2628484499-211688117-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Martina\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
DNS Servers: 10.0.0.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{F113A486-B53B-437E-813A-F4F0857CE263}C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe
FirewallRules: [TCP Query User{8ACDD491-B044-48AB-BB07-AF3F56F11F75}C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe
FirewallRules: [UDP Query User{3B988BA9-67B2-4656-B918-A1948411ADE9}\\server2012\magis\unipaas19\unirte.exe] => (Allow) \\server2012\magis\unipaas19\unirte.exe => No File
FirewallRules: [TCP Query User{4EE2EEA8-D4CC-44CA-BB78-3D3CEE1337A3}\\server2012\magis\unipaas19\unirte.exe] => (Allow) \\server2012\magis\unipaas19\unirte.exe => No File
FirewallRules: [UDP Query User{F0974A49-FBE7-4E66-A6C4-D6CFD82A856E}\\server2012\magis\magic940\mgrntw.exe] => (Allow) \\server2012\magis\magic940\mgrntw.exe => No File
FirewallRules: [TCP Query User{08B9D9E6-768D-430A-BF2B-A658B62B7D33}\\server2012\magis\magic940\mgrntw.exe] => (Allow) \\server2012\magis\magic940\mgrntw.exe => No File
FirewallRules: [UDP Query User{3F9D34A6-93FC-4C75-A26B-545F464DB2CC}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [TCP Query User{182DCE98-DCC2-4A39-9C8A-5EE3B9E40BDB}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [{4AC8F247-6A4F-4D7B-BDAC-EEB501A3861B}] => (Allow) C:\Users\Martina\Downloads\LBP6310dn_R150_V110_W64_uk_EN_1\Setup.exe (CANON INC. -> CANON INC.)
FirewallRules: [{A7B1016D-FB28-49AA-9006-A92339CE195C}] => (Allow) C:\Users\Martina\Downloads\LBP6310dn_R150_V110_W64_uk_EN_1\Setup.exe (CANON INC. -> CANON INC.)
FirewallRules: [UDP Query User{D0AD31D1-7D8E-435E-9239-D06F9120C70C}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Block) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [TCP Query User{FC0EAC9D-E202-4941-BD29-3CEBC42B7DCE}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Block) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [UDP Query User{40E88040-0969-4961-AC5F-C9112C29EED1}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{3C5C78B9-C4BE-45B1-BDF8-B66C739DE116}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{57E07433-B97C-48C0-BDAC-B6FD6B4DD9C4}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Block) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [TCP Query User{31827710-5A33-4184-BD15-8BBF2583082E}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Block) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [UDP Query User{E9E59733-6229-4F3C-83F3-8DB3438791C2}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [TCP Query User{145C3A7F-BE00-4E7E-A5B5-B0E49D540746}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [{086EE002-9FB3-448B-8C5A-AF2B50E1EA93}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4E5F7AC7-E827-4CD8-84BD-079E76FBCFD4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6E0DE26D-E701-4DC8-898D-42998B53E4F8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4D0B19FE-DB73-45E7-82D8-3DA940D6ABD1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{F94CF879-9F82-4EC6-84FF-176DE43402CD}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{F2109BFB-B7E7-44FC-9943-826F88F3C3F4}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{0C0FE1F6-D5F8-4D67-A343-720753AC8754}] => (Allow) C:\Program Files (x86)\Pervasive Software\PSQL\bin\w3dbsmgr.exe (Pervasive Software Inc. -> Pervasive Software Inc.)
FirewallRules: [{3329C5EF-DB33-4B00-84F8-86F336CFF9F4}] => (Allow) C:\Program Files (x86)\Pervasive Software\PSQL\bin\w3dbsmgr.exe (Pervasive Software Inc. -> Pervasive Software Inc.)
FirewallRules: [{B2702167-C6E7-4550-A35A-33F32A991296}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe (Software602 a.s. -> ) [File not signed]
FirewallRules: [{6AF06C33-FF45-4421-A4E5-BB19310D058D}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe (Software602 a.s. -> ) [File not signed]
FirewallRules: [TCP Query User{CEA16519-CE8C-49B6-BCF5-509DD6AE3575}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Allow) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [UDP Query User{44FFE2EA-E21B-468D-847F-B844E7204CB1}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Allow) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [TCP Query User{11D7D414-A57E-4BE3-AEEE-9D7652FDDBE0}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Allow) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [UDP Query User{42E5E91F-832B-4922-9AA6-7EA323C0FC16}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Allow) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [{743EE499-37CB-479D-9634-975ECC65D9A8}] => (Allow) LPort=54925
FirewallRules: [TCP Query User{3D3F9046-3BD6-4EBF-AC41-2C15400A5455}\\server2012\magis\magic940\mggenw.exe] => (Block) \\server2012\magis\magic940\mggenw.exe => No File
FirewallRules: [UDP Query User{56F9F2C8-C5CF-4E58-A982-075FB526000F}\\server2012\magis\magic940\mggenw.exe] => (Block) \\server2012\magis\magic940\mggenw.exe => No File
FirewallRules: [{211E8977-53B3-4E01-8D8F-28695FC39392}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8096FACC-F920-4623-97E6-7CDF85B119AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{CB4161F4-0FC4-480B-9C0E-B1B7BD8EC480}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{ED85CB7A-1425-41F3-B410-A3C9DF9EEB3C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B5A05A05-F438-4558-B8F3-512FE9BB5C1B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{52B5367F-07C7-4A82-BB7C-6B0F875664FC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0A930CBD-047C-43B9-B3B0-048BE0D3B6E6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{42B61E7A-A7EA-4BE2-820D-217031328E3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8A452940-7EE8-495B-9646-02468CCE3FBF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

==================== Restore Points =========================

21-07-2021 06:55:04 Instalační služba modulů systému Windows
22-07-2021 07:01:38 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (07/24/2021 02:58:32 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Jirka)
Description: Aplikaci nebo službu Microsoft Office SDX Helper nelze ukončit.

Error: (07/09/2021 09:54:24 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Systém Windows nemůže získat přístup k souboru z jednoho z těchto důvodů:
došlo k problému s připojením k síti, s diskem, na kterém je soubor uložen, nebo
s ovladači ukládání nainstalovanými v tomto počítači; nebo disk chybí.
Systém Windows kvůli této chybě ukončil program uniRTE.exe.

Program: uniRTE.exe
Soubor:

Hodnota chyby je uvedena v části Další údaje.
Akce uživatele
1. Otevřete soubor znovu.
Může se jednat o dočasný problém, který se při novém spuštění programu nebude opakovat.
2.
Pokud k souboru stále nelze získat přístup a:
- Nachází se v síti,
měl by správce sítě ověřit, zda nedošlo k problému se sítí a zda lze server kontaktovat.
- Je na vyměnitelném disku (například disketě nebo disku CD-ROM), ověřte, zda je disk správně vložen do počítače.
3. Zkontrolujte a opravte systém souborů pomocí nástroje CHKDSK. Ten lze spustit tak, že kliknete na tlačítko Start a příkaz Spustit, zadáte příkaz CMD a kliknete na tlačítko OK. Do příkazového řádku zadejte příkaz CHKDSK /F a stiskněte klávesu ENTER.
4. Pokud potíže potrvají, obnovte soubor ze záložní kopie.
5. Zjistěte, zda lze otevřít jiné soubory na stejném disku. Pokud ne, může být disk poškozen. Jedná-li se o pevný disk, obraťte se na správce nebo na dodavatele počítačového hardwaru
se žádostí o pomoc.

Další údaje
Hodnota chyby: C00000BE
Typ disku: 0

Error: (07/09/2021 09:54:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: uniRTE.exe, verze: 0.0.0.0, časové razítko: 0x517e54b9
Název chybujícího modulu: uniRTE.exe, verze: 0.0.0.0, časové razítko: 0x517e54b9
Kód výjimky: 0xc0000006
Posun chyby: 0x006895e9
ID chybujícího procesu: 0x1ac8
Čas spuštění chybující aplikace: 0x01d7747fe8dff4cb
Cesta k chybující aplikaci: Z:\uniPaaS19\uniRTE.exe
Cesta k chybujícímu modulu: Z:\uniPaaS19\uniRTE.exe
ID zprávy: 6f0b81e7-c5fb-41cb-8fc7-e9af5a106f5e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (07/01/2021 09:05:20 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Windows\System32\svchost.exe, identifikátor PID: 3192, identifikátor PID ProfSvc: 1384.

Error: (07/01/2021 09:05:20 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Windows\System32\svchost.exe, identifikátor PID: 2368, identifikátor PID ProfSvc: 1384.

Error: (05/06/2021 02:50:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program uniRTE.exe verze 0.0.0.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 130

Čas spuštění: 01d742761b36c0b8

Čas ukončení: 23

Cesta k aplikaci: \\Server2012\Magis\uniPaaS19\uniRTE.exe

ID hlášení: 5375dc50-40e1-44af-beb5-0bbd4dab93e7

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Cross-thread

Error: (05/06/2021 02:48:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program uniRTE.exe verze 0.0.0.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1dac

Čas spuštění: 01d74275ff4dd414

Čas ukončení: 46

Cesta k aplikaci: \\Server2012\Magis\uniPaaS19\uniRTE.exe

ID hlášení: 216c72b4-03ac-432e-a32f-6651d19d28fc

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Cross-thread

Error: (05/06/2021 06:44:38 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Jirka)
Description: Aplikaci nebo službu Microsoft Windows Search Protocol Host nelze ukončit.


System errors:
=============
Error: (07/26/2021 02:47:51 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba cphs byla ukončena s následující chybou:
Neplatný popisovač

Error: (07/26/2021 02:47:51 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (14:08:31, ‎26.‎07.‎2021) bylo neočekávané.

Error: (07/25/2021 08:10:07 AM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: Při vytváření přihlašovacích údajů TLS Klient se stala závažná chyba. Stav interní chyby je 10013.

Error: (07/22/2021 08:17:25 AM) (Source: SCardSvr) (EventID: 610) (User: )
Description: Čtečka čipových karet Gemplus USB Smart Card Reader 0 odmítla signál IOCTL POWER: Zařízení nezná tento příkaz.. Pokud chyba přetrvává, čipová karta nebo čtečka pravděpodobně nefungují správně.

Záhlaví příkazu: 01 00 00 00

Error: (07/22/2021 08:17:25 AM) (Source: SCardSvr) (EventID: 610) (User: )
Description: Čtečka čipových karet Gemplus USB Smart Card Reader 0 odmítla signál IOCTL POWER: Zařízení nezná tento příkaz.. Pokud chyba přetrvává, čipová karta nebo čtečka pravděpodobně nefungují správně.

Záhlaví příkazu: 01 00 00 00

Error: (07/22/2021 08:17:25 AM) (Source: SCardSvr) (EventID: 610) (User: )
Description: Čtečka čipových karet Gemplus USB Smart Card Reader 0 odmítla signál IOCTL POWER: Čipová karta nereaguje na signál Reset.. Pokud chyba přetrvává, čipová karta nebo čtečka pravděpodobně nefungují správně.

Záhlaví příkazu: 01 00 00 00

Error: (07/22/2021 08:09:49 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba cphs byla ukončena s následující chybou:
Neplatný popisovač

Error: (07/22/2021 08:09:21 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba cphs byla ukončena s následující chybou:
Neplatný popisovač


Windows Defender:
================
Date: 2021-07-26 07:39:00
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {370DFAD6-A32A-4128-914F-D3E192C20EA0}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-25 08:10:03
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {D28D2E01-CB69-491A-9BC8-8CE261497528}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-24 08:10:02
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {8D992605-012F-41FC-A8B9-E830272A6B5A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-23 08:10:22
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {9003699F-AD02-43AC-9430-706F7422C66D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-21 07:15:59
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {F78653AB-C01C-4EBC-A408-ABE4C55B7094}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-06-29 10:03:24
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.341.1630.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070643
Popis chyby: Při instalaci došlo k závažné chybě.

Date: 2021-06-29 10:03:22
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1630.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.

Date: 2021-06-29 10:03:22
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1630.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.

Date: 2021-06-29 10:03:22
Description:
Program Antivirová ochrana v programu Microsoft Defender zjistil chybu při pokusu o aktualizaci modulu
Nová verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Uživatel: NT AUTHORITY\SYSTEM
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2.50 02/23/2016
Motherboard: MSI H110M PRO-VH (MS-7996)
Processor: Intel(R) Pentium(R) CPU G4400 @ 3.30GHz
Percentage of memory in use: 45%
Total physical RAM: 8083.18 MB
Available physical RAM: 4434.51 MB
Total Virtual: 9363.18 MB
Available Virtual: 5962.51 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.51 GB) (Free:52.58 GB) NTFS

\\?\Volume{89767d14-7c5f-477f-af2f-b2cf098febd8}\ (Obnovení) (Fixed) (Total:0.44 GB) (Free:0.43 GB) NTFS
\\?\Volume{a6f6fd1a-d87c-4d2a-8276-cc1dd883d65b}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{6c01bb58-7b46-44ec-ae8d-2b8ca3d2f09a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: 4EDAEC5E)

Partition: GPT.

==================== End of Addition.txt =======================

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Vyskakovací okna s reklamou

#2 Příspěvek od Conder »

Ahoj :)

:arrow: Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/
  • Uloz na plochu a ukonci vsetky programy
  • Spusti AdwCleaner ako spravca
  • Odsuhlas licencne podmienky
  • Klikni na Spustit skenovani a pockaj na dokoncenie
  • V pripade nalezov nechaj vsetky nalezy oznacene a klikni na Karantena (ak nie su ziadne nalezy, tak na Spustit zakladni opravu)
  • V pripade, ze sa detekuje aj "predinstalovany software", tieto programy mozes, ale nemusis zmazat (toto nie su skodlive programy, ale iba zbytocnosti)
  • Potvrd vyzvu, pockaj na dokoncenie a potvrd restartovanie PC
  • Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
  • Otvori sa log, jeho obsah skopiruj a vloz do dalsej odpovede
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#3 Příspěvek od Sobi »

Ahoj, tady je log z Adwcleanru. Něco to našlo.

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build: 06-29-2021
# Database: 2021-06-29.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 07-27-2021
# Duration: 00:00:00
# OS: Windows 10 Pro
# Cleaned: 1
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKU\S-1-5-21-3861839715-2628484499-211688117-1002\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\hotelovy-dum-petrovice.hotel.cz

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1542 octets] - [27/07/2021 16:49:02]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#4 Příspěvek od Sobi »

Tak bohužel to vyskakuje pořád. :(

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Vyskakovací okna s reklamou

#5 Příspěvek od Conder »

Poprosím o obidva nové logy z FRST.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#6 Příspěvek od Sobi »

Ahoj, tady je.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-07-2021 01
Ran by Jirka (administrator) on Jirka (MSI MS-7996) (28-07-2021 10:04:31)
Running from C:\Users\Martina\Desktop
Loaded Profiles: Jirka & Martina
Platform: Windows 10 Pro Version 21H1 19043.1110 (X64) Language: Čeština (Česko) -> Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogRx.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABGSWK.EXE
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\IntelCpHDCPSvc.exe
(KOMERCNI BANKA A.S. -> ) C:\Users\Martina\AppData\Roaming\KB-ext\lib\x86\ProxyHostKBEXT.exe <3>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Martina\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\NisSrv.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
0 C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2021.21060.9012.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
0 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21052.124.0_x64__8wekyb3d8bbwe\YourPhone.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9199104 2017-03-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC. -> CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [M17A] => C:\WINDOWS\twain_32\Brimm17a\Common\TwDsUiLaunch.exe [86120 2018-11-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2017-04-05] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2892800 2017-03-30] (Brother Industries, Ltd.) [File not signed]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3581952 2017-04-05] (Brother Industries, Ltd.) [File not signed]
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\Run: [Google Update] => C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\GoogleUpdateCore.exe [222616 2021-07-19] (Google LLC -> Google LLC)
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\MountPoints2: {bdce411a-573c-11eb-bf29-4ccc6a27804f} - "D:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\hpcpp101: C:\Windows\System32\spool\prtprocs\x64\hpcpp101.dll [323584 2010-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\CNAP2 Monitor: C:\WINDOWS\system32\CNAP2LMD.DLL [486400 2012-09-03] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [115200 2017-03-18] (pdfforge GmbH) [File not signed]
HKLM\...\Print\Monitors\Software602 XPS port monitor: C:\WINDOWS\system32\602localmon.dll [36864 2015-07-14] (Windows (R) Win 7 DDK provider) [File not signed]

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {12A59B4F-5B35-41EC-A561-A57900686B09} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147296 2021-07-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {43E49560-6E72-4738-B6E6-822C013ED54C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {539CE878-5BEF-45EE-9C42-2EBE8588FA01} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23182216 2021-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {62E0D793-1CCF-4BFF-BBEF-F32F7B02256D} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {64BA656D-66F3-4FC8-A08C-464129538E9A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {7ECCD62C-CF76-4924-98F5-1A5AE07C9AC6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {82550251-9F20-4705-8F06-91BB7277337D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002UA => C:\Users\Martina\AppData\Local\Google\Update\GoogleUpdate.exe [153752 2017-03-21] (Google Inc -> Google Inc.)
Task: {8A76323F-FBA4-48EC-A109-D80E543F60BC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23182216 2021-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {8EEF5623-21CE-4544-A4F0-B2E7E70DB0A7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B5DCB08D-9886-4BDD-A288-B0F4BEC98502} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpCmdRun.exe [644888 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F5377C20-A237-4446-9DE4-D1BFF6EC8EC4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002Core => C:\Users\Martina\AppData\Local\Google\Update\GoogleUpdate.exe [153752 2017-03-21] (Google Inc -> Google Inc.)
Task: {FBD13F5D-ECBC-4995-A914-50C790514D9B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147296 2021-07-24] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{9050653e-99a6-4ca5-962e-6ceffb31ca4c}: [NameServer] 10.0.0.1,8.8.8.8

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s. -> Software602 a.s.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-06-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3861839715-2628484499-211688117-1001: @kb-ext.cz/PKIComponent -> C:\Users\Jirka\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll [2016-02-26] (KOMERCNI BANKA A.S. -> Komerční banka, a.s.)
FF Plugin HKU\S-1-5-21-3861839715-2628484499-211688117-1002: @kb-ext.cz/PKIComponent -> C:\Users\Martina\AppData\Roaming\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll [2021-01-25] (KOMERCNI BANKA A.S. -> Komerční banka, a.s.)
FF Plugin HKU\S-1-5-21-3861839715-2628484499-211688117-1002: @kb-tfo.cz/PKIComponent -> C:\Users\Martina\AppData\Roaming\KB-tfo\lib\x86\npPKIComponentNPAPI-tfo.dll [2015-10-06] (KOMERCNI BANKA A.S. -> Komerční banka, a.s.)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s. -> Software602 a.s.)
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [298496 2017-03-22] (Brother Industries, Ltd.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9056672 2021-07-18] (Microsoft Corporation -> Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5395384 2021-07-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13257000 2021-07-01] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\NisSrv.exe [2665432 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MsMpEng.exe [136640 2021-07-12] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
R3 GemCCID; C:\WINDOWS\System32\drivers\GemCCID.sys [139632 2015-07-10] (Microsoft Windows Hardware Compatibility Publisher -> Gemalto)
R3 MpKsl0c58376e; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F6C6F554-E824-47C1-8590-FF2FEF343596}\MpKslDrv.sys [107752 2021-07-28] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-07-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [425192 2021-07-12] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [76008 2021-07-12] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-07-28 07:41 - 2021-07-28 07:41 - 000061644 _____ C:\Users\Martina\Downloads\353272920277_20210727.pdf
2021-07-27 16:54 - 2021-07-27 16:54 - 000001712 _____ C:\Users\Jirka\Downloads\AdwCleaner[C00].txt
2021-07-27 16:53 - 2021-07-27 16:53 - 000001712 _____ C:\Users\Jirka\Desktop\AdwCleaner[C00].txt
2021-07-27 16:48 - 2021-07-27 16:49 - 000000000 ____D C:\AdwCleaner
2021-07-27 16:47 - 2021-07-27 16:47 - 008553680 _____ (Malwarebytes) C:\Users\Martina\Downloads\adwcleaner_8.3.0.exe
2021-07-27 16:47 - 2021-07-27 16:47 - 008553680 _____ (Malwarebytes) C:\Users\Martina\Desktop\adwcleaner_8.3.0.exe
2021-07-27 11:43 - 2021-07-27 11:43 - 000151589 _____ C:\Users\Martina\Downloads\Zadost_o_poskytnuti_importniho_akreditivu (6).pdf
2021-07-27 09:22 - 2021-07-27 09:22 - 005595648 _____ C:\Users\Martina\Downloads\jmenny_seznam_2021_07_20.xls
2021-07-27 07:25 - 2021-07-27 07:25 - 000060082 _____ C:\Users\Martina\Downloads\866179310267_20210726.pdf
2021-07-26 16:22 - 2021-07-26 16:28 - 000041398 _____ C:\Users\Martina\Desktop\Addition.txt
2021-07-26 16:20 - 2021-07-28 10:05 - 000014887 _____ C:\Users\Martina\Desktop\FRST.txt
2021-07-26 16:20 - 2021-07-28 10:04 - 000000000 ____D C:\FRST
2021-07-26 16:19 - 2021-07-26 16:19 - 002300416 _____ (Farbar) C:\Users\Martina\Desktop\FRST64.exe
2021-07-26 15:24 - 2021-07-26 15:24 - 000003757 _____ C:\Users\Martina\Downloads\priloha_925469756_0_NEMPRI (1).XML
2021-07-26 15:12 - 2021-07-26 15:12 - 000001359 _____ C:\Users\Martina\Downloads\DPHKH1-7209155096-20210726-151153 (1).xml
2021-07-26 15:06 - 2021-07-26 15:06 - 000006792 _____ C:\Users\Martina\Downloads\DPHDP3-7209155096-20210726-150612-platba.pdf
2021-07-26 07:30 - 2021-07-26 07:30 - 000061436 _____ C:\Users\Martina\Downloads\866179310267_20210723.pdf
2021-07-23 11:39 - 2021-07-23 11:39 - 000423994 _____ C:\Users\Martina\Downloads\OW2144053.tif
2021-07-23 09:29 - 2021-07-23 09:29 - 000061019 _____ C:\Users\Martina\Downloads\866179310267_20210722.pdf
2021-07-23 09:29 - 2021-07-23 09:29 - 000060030 _____ C:\Users\Martina\Downloads\353272920277_20210722.pdf
2021-07-23 09:28 - 2021-07-23 09:28 - 000061269 _____ C:\Users\Martina\Downloads\866179320297_20210722.pdf
2021-07-22 14:47 - 2021-07-22 14:47 - 000073035 _____ C:\Users\Martina\Downloads\OW2135592.tif
2021-07-22 09:49 - 2021-07-22 09:49 - 000003757 _____ C:\Users\Martina\Downloads\priloha_925469756_0_NEMPRI.XML
2021-07-22 09:48 - 2021-07-22 09:48 - 000006937 _____ C:\Users\Martina\Downloads\priloha_925627402_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-A9A376678FD74CC68D12A6BEA132241D-925469756 (1).html
2021-07-22 07:58 - 2021-07-22 07:58 - 000151589 _____ C:\Users\Martina\Downloads\Zadost_o_poskytnuti_importniho_akreditivu (5).pdf
2021-07-22 07:26 - 2021-07-22 07:26 - 000061432 _____ C:\Users\Martina\Downloads\866179310267_20210721.pdf
2021-07-22 07:26 - 2021-07-22 07:26 - 000060350 _____ C:\Users\Martina\Downloads\353272920277_20210721.pdf
2021-07-22 07:25 - 2021-07-22 07:25 - 000059521 _____ C:\Users\Martina\Downloads\866179320297_20210721.pdf
2021-07-21 15:05 - 2021-07-21 15:05 - 015102721 _____ C:\Users\Martina\Downloads\ucetni zaverka 2019 s prilohami potvrzena auditorem.pdf
2021-07-21 10:26 - 2021-07-21 10:26 - 000210452 _____ C:\Users\Martina\Downloads\n 156-2021, nz 189-2021.pdf
2021-07-21 10:26 - 2021-07-21 10:26 - 000123541 _____ C:\Users\Martina\Downloads\hut vykazy 2020 v priznani.pdf
2021-07-21 10:24 - 2021-07-21 10:24 - 000321276 _____ C:\Users\Martina\Downloads\n 157-2021, nz 190-2021.pdf
2021-07-21 07:38 - 2021-07-21 07:38 - 000060821 _____ C:\Users\Martina\Downloads\866179310267_20210720.pdf
2021-07-21 06:59 - 2021-07-21 06:59 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-21 06:59 - 2021-07-21 06:59 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-21 06:59 - 2021-07-21 06:59 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-07-21 06:59 - 2021-07-21 06:59 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-07-21 06:59 - 2021-07-21 06:59 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-07-21 06:59 - 2021-07-21 06:59 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-07-20 14:20 - 2021-07-20 14:20 - 000150570 _____ C:\Users\Martina\Downloads\stejnopis elektronicky.pdf
2021-07-20 14:20 - 2021-07-20 14:20 - 000030242 _____ C:\Users\Martina\Downloads\c 79602.pdf
2021-07-20 14:18 - 2021-07-20 14:18 - 000549510 _____ C:\Users\Martina\Downloads\priloha_v_ucetni_zaverce_ve_zkracenem_rozsahu_(mala_a_mikro_uc._jednotka)(2).pdf
2021-07-20 14:18 - 2021-07-20 14:18 - 000035034 _____ C:\Users\Martina\Downloads\c 80764.pdf
2021-07-20 10:45 - 2021-07-20 10:45 - 000006937 _____ C:\Users\Martina\Downloads\priloha_925627402_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-A9A376678FD74CC68D12A6BEA132241D-925469756.html
2021-07-20 10:44 - 2021-07-20 10:44 - 000007016 _____ C:\Users\Martina\Downloads\priloha_926558028_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_RELDP-B383549946814CFFBBB8913D753541B1-926536555.html
2021-07-20 10:44 - 2021-07-20 10:44 - 000007014 _____ C:\Users\Martina\Downloads\priloha_925628324_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-F93DC0F6D988495FB2F88D5D633C5E27-925463624.html
2021-07-20 10:44 - 2021-07-20 10:44 - 000007014 _____ C:\Users\Martina\Downloads\priloha_925628139_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_NEM_PRI-2D78D1B3AF01464690DD5ACFF86A625B-925471129.html
2021-07-20 07:33 - 2021-07-20 07:33 - 000093433 _____ C:\Users\Martina\Downloads\priloha_929251495_0_vznikDpnOznam_14161985.pdf
2021-07-20 07:32 - 2021-07-20 07:32 - 000061277 _____ C:\Users\Martina\Downloads\866179310267_20210719.pdf
2021-07-20 07:31 - 2021-07-20 07:31 - 000061655 _____ C:\Users\Martina\Downloads\353272920277_20210719.pdf
2021-07-20 07:31 - 2021-07-20 07:31 - 000060275 _____ C:\Users\Martina\Downloads\866179320297_20210719.pdf
2021-07-19 15:03 - 2021-07-19 15:03 - 000452606 _____ C:\Users\Martina\Downloads\Prům_1-12_06.2021_(RESICO_25825691)_TISK.pdf
2021-07-19 11:26 - 2021-07-19 11:26 - 001420797 _____ C:\Users\Martina\Downloads\OW2143553.tiff
2021-07-19 08:59 - 2021-07-19 08:59 - 000066054 _____ C:\Users\Martina\Downloads\866179310267_20210715.pdf
2021-07-19 08:59 - 2021-07-19 08:59 - 000060772 _____ C:\Users\Martina\Downloads\353272920277_20210715.pdf
2021-07-19 08:59 - 2021-07-19 08:59 - 000059533 _____ C:\Users\Martina\Downloads\866179320297_20210715.pdf
2021-07-15 08:01 - 2021-07-15 08:01 - 000060256 _____ C:\Users\Martina\Downloads\353272920277_20210714 (1).pdf
2021-07-15 08:00 - 2021-07-15 08:00 - 000060256 _____ C:\Users\Martina\Downloads\353272920277_20210714.pdf
2021-07-14 08:08 - 2021-07-14 08:08 - 000033052 _____ C:\Users\Martina\Downloads\BIT_202106_336131290.xlsx
2021-07-14 08:07 - 2021-07-14 08:07 - 000219004 _____ C:\Users\Martina\Downloads\3361312903.pdf
2021-07-14 07:42 - 2021-07-14 07:42 - 000060770 _____ C:\Users\Martina\Downloads\866179310267_20210713.pdf
2021-07-14 07:04 - 2021-07-14 07:04 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-14 07:04 - 2021-07-14 07:04 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-14 07:04 - 2021-07-14 07:04 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-14 07:04 - 2021-07-14 07:04 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-14 07:04 - 2021-07-14 07:04 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-14 07:04 - 2021-07-14 07:04 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-14 07:03 - 2021-07-14 07:03 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-14 07:03 - 2021-07-14 07:03 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-14 07:03 - 2021-07-14 07:03 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-07-14 07:03 - 2021-07-14 07:03 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-13 08:41 - 2021-07-13 08:41 - 000028492 _____ C:\Users\Martina\Downloads\export-4180003950.pdf
2021-07-13 07:23 - 2021-07-13 07:23 - 000059265 _____ C:\Users\Martina\Downloads\1231810640207_20210712.pdf
2021-07-13 07:22 - 2021-07-13 07:22 - 000065430 _____ C:\Users\Martina\Downloads\353272920277_20210712.pdf
2021-07-13 07:22 - 2021-07-13 07:22 - 000064896 _____ C:\Users\Martina\Downloads\866179310267_20210712.pdf
2021-07-13 07:22 - 2021-07-13 07:22 - 000061714 _____ C:\Users\Martina\Downloads\866179320297_20210712.pdf
2021-07-12 07:11 - 2021-07-12 07:11 - 000061435 _____ C:\Users\Martina\Downloads\866179310267_20210709.pdf
2021-07-12 07:10 - 2021-07-12 07:10 - 000058162 _____ C:\Users\Martina\Downloads\353272920277_20210709.pdf
2021-07-12 07:10 - 2021-07-12 07:10 - 000058162 _____ C:\Users\Martina\Downloads\353272920277_20210709 (1).pdf
2021-07-08 09:58 - 2021-07-08 09:58 - 000035004 _____ C:\Users\Martina\Downloads\rocni-zprava-o-cinnosti-zamestnavatele-2020.xlsx
2021-07-08 08:39 - 2021-07-08 08:39 - 000062537 _____ C:\Users\Martina\Downloads\353272920277_20210707.pdf
2021-07-08 08:39 - 2021-07-08 08:39 - 000061120 _____ C:\Users\Martina\Downloads\866179310267_20210707.pdf
2021-07-08 07:06 - 2021-07-15 09:21 - 000000000 ____D C:\Users\Martina\Desktop\plocha
2021-07-07 14:42 - 2021-07-07 14:42 - 000217738 _____ C:\Users\Martina\Downloads\3361312627.pdf
2021-07-07 14:42 - 2021-07-07 14:42 - 000021470 _____ C:\Users\Martina\Downloads\CW_202106_3361312627.xlsx
2021-07-07 07:38 - 2021-07-07 07:38 - 000065704 _____ C:\Users\Martina\Downloads\866179310267_20210702.pdf
2021-07-07 07:37 - 2021-07-07 07:37 - 000063942 _____ C:\Users\Martina\Downloads\353272920277_20210702.pdf
2021-07-07 07:37 - 2021-07-07 07:37 - 000061535 _____ C:\Users\Martina\Downloads\866179320297_20210702.pdf
2021-07-02 11:09 - 2021-07-02 11:09 - 000060619 _____ C:\Users\Martina\Downloads\866179310267_20210701.pdf
2021-07-02 08:22 - 2021-07-02 08:22 - 000070806 _____ C:\Users\Martina\Downloads\OW2139034.tif
2021-07-01 07:14 - 2021-07-01 07:14 - 000001489 _____ C:\Users\Martina\Downloads\2100205007_out_MT707_1_1_208568463.pdf
2021-07-01 07:06 - 2021-07-01 07:06 - 000502137 _____ C:\Users\Martina\Downloads\272867410247_20210601_20210630.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000064147 _____ C:\Users\Martina\Downloads\866179310267_20210629.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000058232 _____ C:\Users\Martina\Downloads\866179310267_20210630.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000058232 _____ C:\Users\Martina\Downloads\357437750287_20210630.pdf
2021-07-01 07:05 - 2021-07-01 07:05 - 000058171 _____ C:\Users\Martina\Downloads\1231810640207_20210630.pdf
2021-07-01 07:04 - 2021-07-01 07:04 - 000062213 _____ C:\Users\Martina\Downloads\353272920277_20210630.pdf
2021-07-01 07:04 - 2021-07-01 07:04 - 000059820 _____ C:\Users\Martina\Downloads\353272920277_20210629.pdf
2021-07-01 07:03 - 2021-07-01 07:03 - 000058079 _____ C:\Users\Martina\Downloads\866179320297_20210630.pdf
2021-06-29 07:27 - 2021-06-29 07:27 - 000061271 _____ C:\Users\Martina\Downloads\866179310267_20210628.pdf
2021-06-29 07:27 - 2021-06-29 07:27 - 000061200 _____ C:\Users\Martina\Downloads\353272920277_20210628.pdf
2021-06-28 07:55 - 2021-06-28 07:55 - 000060616 _____ C:\Users\Martina\Downloads\866179310267_20210625.pdf
2021-06-28 07:55 - 2021-06-28 07:55 - 000060177 _____ C:\Users\Martina\Downloads\1231810640207_20210625.pdf
2021-06-28 07:55 - 2021-06-28 07:55 - 000060177 _____ C:\Users\Martina\Downloads\1231810640207_20210625 (1).pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-07-28 10:00 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-28 09:49 - 2020-12-10 07:55 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-07-28 09:45 - 2019-05-02 16:36 - 000000000 ____D C:\Users\Martina\Desktop\Skenování
2021-07-28 09:20 - 2017-03-20 15:34 - 000000000 ____D C:\Users\Martina\Desktop\A dokumenty
2021-07-28 09:04 - 2018-01-05 08:12 - 000000000 ____D C:\Users\Martina\AppData\Local\Packages
2021-07-28 07:05 - 2017-03-18 17:45 - 000000000 ___RD C:\Users\Martina\OneDrive
2021-07-27 16:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-07-27 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-07-27 15:36 - 2020-12-10 08:04 - 001605602 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-07-27 15:36 - 2019-12-07 16:43 - 000682238 _____ C:\WINDOWS\system32\perfh005.dat
2021-07-27 15:36 - 2019-12-07 16:43 - 000137054 _____ C:\WINDOWS\system32\perfc005.dat
2021-07-27 15:36 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-07-27 15:30 - 2017-03-18 17:44 - 000000000 __SHD C:\Users\Martina\IntelGraphicsProfiles
2021-07-27 15:30 - 2017-03-18 17:24 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-07-27 15:29 - 2020-12-10 08:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-07-27 15:29 - 2020-12-10 07:55 - 000008192 ___SH C:\DumpStack.log.tmp
2021-07-27 15:29 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-07-27 15:29 - 2016-07-11 15:59 - 000000000 ____D C:\Intel
2021-07-27 06:42 - 2020-12-09 10:56 - 000000000 ____D C:\Users\Martina
2021-07-27 03:05 - 2017-03-21 08:32 - 000002508 _____ C:\Users\Martina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-07-27 03:05 - 2017-03-21 08:32 - 000002471 _____ C:\Users\Martina\Desktop\Google Chrome.lnk
2021-07-24 14:58 - 2021-01-05 18:07 - 000000000 ____D C:\Program Files\Microsoft Office
2021-07-24 13:20 - 2020-06-10 05:47 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-07-24 13:20 - 2020-06-10 05:47 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-07-24 13:20 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-22 08:06 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-07-22 07:54 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-07-21 15:37 - 2020-12-10 07:55 - 000314752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-21 15:37 - 2019-12-07 16:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-21 15:37 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-07-20 12:17 - 2019-12-23 09:02 - 000000000 ____D C:\Users\Martina\Desktop\ATRADIUS
2021-07-20 09:31 - 2017-05-09 17:29 - 000000000 ____D C:\ProgramData\NVMS-1000
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-19 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-19 15:33 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-19 15:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-19 15:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-07-19 06:58 - 2020-12-10 08:00 - 000003736 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002UA
2021-07-19 06:58 - 2020-12-10 08:00 - 000003468 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-3861839715-2628484499-211688117-1002Core
2021-07-19 06:55 - 2020-12-10 08:00 - 000003366 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3861839715-2628484499-211688117-1002
2021-07-19 06:55 - 2020-12-09 10:56 - 000002383 _____ C:\Users\Martina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-07-15 07:20 - 2017-03-18 16:26 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-07-15 07:20 - 2016-07-11 16:18 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-07-15 07:18 - 2016-07-11 16:18 - 133422552 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-07-12 06:58 - 2018-01-19 16:22 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-07-02 06:14 - 2021-01-20 07:49 - 000003490 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6ceb98e3f5497
2021-07-02 06:14 - 2020-12-10 08:00 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

==================== Files in the root of some directories ========

2020-07-13 09:38 - 2020-07-13 09:39 - 062697472 _____ (Česká pošta, s.p.) C:\Users\Martina\Crypta_windows_x64_2_5_0.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-07-2021 01
Ran by Jirka (28-07-2021 10:06:36)
Running from C:\Users\Martina\Desktop
Windows 10 Pro Version 21H1 19043.1110 (X64) (2020-12-10 06:00:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3861839715-2628484499-211688117-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3861839715-2628484499-211688117-503 - Limited - Disabled)
Guest (S-1-5-21-3861839715-2628484499-211688117-501 - Limited - Disabled)
Martina (S-1-5-21-3861839715-2628484499-211688117-1002 - Limited - Enabled) => C:\Users\Martina
Jirka (S-1-5-21-3861839715-2628484499-211688117-1001 - Administrator - Enabled) => C:\Users\Jirka
WDAGUtilityAccount (S-1-5-21-3861839715-2628484499-211688117-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.005.20058 - Adobe Systems Incorporated)
BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{113D31E0-0791-4654-9000-5F77221E99F7}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{F921362C-796E-4BC7-9385-86CED819E73D}) (Version: 1.0.22.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden
Canon LBP6310 (HKLM\...\Canon LBP6310) (Version: - )
ControlCenter4 (HKLM-x32\...\{9091B952-8719-49C3-9CC7-6E20EC61081F}) (Version: 4.6.6.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
Crypta 2.5.0 (HKLM\...\5139-7455-1198-4436) (Version: 2.5.0 - Česká pošta, s.p.)
CryptoPlus KB v1.0 (HKLM-x32\...\CryptoPlus KB v1.0) (Version: 2.1.8 - Monet+,a.s.)
CryptoPlus KB v1.0 x64 (HKLM\...\CryptoPlus KB v1.0) (Version: 2.1.8 - Monet+,a.s.)
Google Chrome (HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\Google Chrome) (Version: 92.0.4515.107 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
JRF (HKLM-x32\...\JRF) (Version: 1.3.0.0 - ICZ a.s.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 92.0.902.55 - Microsoft Corporation)
Microsoft Office 2019 pro domácnosti a podnikatele - cs-cz (HKLM\...\HomeBusiness2019Retail - cs-cz) (Version: 16.0.14131.20332 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3861839715-2628484499-211688117-1001\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\OneDriveSetup.exe) (Version: 21.129.0627.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E5A95BC5-81DF-4F0C-B910-B59DD012F037}) (Version: 2.81.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
NetworkRepairTool (HKLM-x32\...\{86E68F57-FAFE-4052-BDD4-3B90C38236AE}) (Version: 1.2.16.0 - Brother Industries, Ltd.) Hidden
NVMS1000 (HKLM-x32\...\{D7079657-6D6A-4AD2-ABAB-416A10D44F66}) (Version: 1.00.0000 - ) Hidden
NVMS1000 (HKLM-x32\...\InstallShield_{D7079657-6D6A-4AD2-ABAB-416A10D44F66}) (Version: 1.00.0000 - )
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14131.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14131.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.1 - pdfforge GmbH)
Pervasive PSQL v11 Client (32-bit) SP3 (HKLM-x32\...\Pervasive PSQL v11 Client (32-bit)) (Version: 11.30.061 - Pervasive Software)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8083 - Realtek Semiconductor Corp.)
ScannerUtilityInstaller (HKLM-x32\...\{5B645FE2-19E9-4B15-B5B2-3D8766F6FA27}) (Version: 1.0.0.0 - Brother) Hidden
Software602 Form Filler (HKLM-x32\...\{04703FE3-1A8B-4467-88E6-3D6A1A0FA65A}) (Version: 4.70 - Software602 a.s.)
SoftwareUpdateNotification (HKLM-x32\...\{34F12379-C924-41E6-921D-51C71217F58C}) (Version: 1.0.9.0 - Brother Industries, Ltd.) Hidden
StatusMonitor (HKLM-x32\...\{40578A7A-6E36-457F-A4F0-45BC37EB61FD}) (Version: 1.20.1.0 - Brother Insutries Ltd.) Hidden
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.19.5 - TeamViewer)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.422\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{8B480070-D37D-4090-A063-7A429F849652}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\localserver32 -> C:\Users\Martina\AppData\Local\Google\Chrome\Application\92.0.4515.107\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.92\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea\igfxDTCM.dll [2020-09-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2016-11-25 10:18 - 2016-11-25 10:18 - 000139264 _____ () [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2019-05-02 16:29 - 2005-04-22 13:36 - 000143360 _____ () [File not signed] C:\WINDOWS\system32\BrSNMP64.dll
2017-03-22 17:21 - 2017-03-22 17:21 - 000491008 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrMonitor.dll
2016-07-29 17:06 - 2016-07-29 17:06 - 000180224 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BroSNMP.dll
2016-10-04 14:25 - 2016-10-04 14:25 - 001708032 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\Brother\BrStMonWRes.dll
2017-04-05 09:53 - 2017-04-05 09:53 - 000137728 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcAssoc.dll
2017-01-27 15:39 - 2017-01-27 15:39 - 000087552 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcDlgRc.dll
2017-04-05 09:53 - 2017-04-05 09:53 - 000124416 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcFcnv.dll
2017-01-27 15:39 - 2017-01-27 15:39 - 017974784 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcGrImg.dll
2017-01-27 15:33 - 2017-01-27 15:33 - 000090112 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcLCze.dll
2017-04-05 09:53 - 2017-04-05 09:53 - 000078848 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrCcSmon.dll
2017-04-05 09:53 - 2017-04-05 09:53 - 000955392 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrImgProc.dll
2017-04-05 09:53 - 2017-04-05 09:53 - 000440832 _____ (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\ControlCenter4\Track.dll
2019-05-02 16:29 - 2016-11-01 11:27 - 000090112 _____ (Brother Industries, Ltd.) [File not signed] C:\WINDOWS\system32\BrNetSti.dll
2017-01-05 18:45 - 2017-01-05 18:45 - 000279040 _____ (Brother Industries,LTD.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrImageConversion.dll
2017-01-05 18:45 - 2017-01-05 18:45 - 000082944 _____ (Brother Industries,LTD.) [File not signed] C:\Program Files (x86)\ControlCenter4\BrImgPdf.dll
2017-01-05 18:44 - 2017-01-05 18:44 - 000109056 _____ (Brother Industries,LTD.) [File not signed] C:\Program Files (x86)\ControlCenter4\brTPGSplash.dll
2021-01-05 18:28 - 2021-01-05 18:28 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2021-01-05 18:28 - 2021-01-05 18:28 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2017-03-18 18:05 - 2017-03-18 18:05 - 000115200 _____ (pdfforge GmbH) [File not signed] C:\WINDOWS\System32\pdfcmon.dll
2017-03-18 16:49 - 2015-07-14 13:27 - 000036864 _____ (Windows (R) Win 7 DDK provider) [File not signed] C:\WINDOWS\System32\602localmon.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-3861839715-2628484499-211688117-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> DefaultScope {0AFEE6DD-9215-4510-94E5-65F89730F704} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> {0AFEE6DD-9215-4510-94E5-65F89730F704} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> DefaultScope {00EBEE52-43D8-4F60-9FF0-BFE3D98FB197} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> {00EBEE52-43D8-4F60-9FF0-BFE3D98FB197} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-05-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-18] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-07-07] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1001\...\mojebanka.cz -> hxxps://etrading.mojebanka.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1001\...\mojeplatba.cz -> hxxps://www.mojeplatba.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\kb.cz -> hxxps://tfonline.kb.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\mojebanka.cz -> hxxps://etrading.mojebanka.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\mojeplatba.cz -> hxxps://www.mojeplatba.cz
IE trusted site: HKU\S-1-5-21-3861839715-2628484499-211688117-1002\...\tfonline.cz -> hxxps://www.tfonline.cz

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 09:24 - 2015-10-30 09:21 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Pervasive Software\PSQL\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3861839715-2628484499-211688117-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Martina\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
DNS Servers: 10.0.0.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{F113A486-B53B-437E-813A-F4F0857CE263}C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe
FirewallRules: [TCP Query User{8ACDD491-B044-48AB-BB07-AF3F56F11F75}C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\pervasive software\psql\bin\jre\bin\javaw.exe
FirewallRules: [UDP Query User{3B988BA9-67B2-4656-B918-A1948411ADE9}\\server2012\magis\unipaas19\unirte.exe] => (Allow) \\server2012\magis\unipaas19\unirte.exe => No File
FirewallRules: [TCP Query User{4EE2EEA8-D4CC-44CA-BB78-3D3CEE1337A3}\\server2012\magis\unipaas19\unirte.exe] => (Allow) \\server2012\magis\unipaas19\unirte.exe => No File
FirewallRules: [UDP Query User{F0974A49-FBE7-4E66-A6C4-D6CFD82A856E}\\server2012\magis\magic940\mgrntw.exe] => (Allow) \\server2012\magis\magic940\mgrntw.exe => No File
FirewallRules: [TCP Query User{08B9D9E6-768D-430A-BF2B-A658B62B7D33}\\server2012\magis\magic940\mgrntw.exe] => (Allow) \\server2012\magis\magic940\mgrntw.exe => No File
FirewallRules: [UDP Query User{3F9D34A6-93FC-4C75-A26B-545F464DB2CC}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [TCP Query User{182DCE98-DCC2-4A39-9C8A-5EE3B9E40BDB}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [{4AC8F247-6A4F-4D7B-BDAC-EEB501A3861B}] => (Allow) C:\Users\Martina\Downloads\LBP6310dn_R150_V110_W64_uk_EN_1\Setup.exe (CANON INC. -> CANON INC.)
FirewallRules: [{A7B1016D-FB28-49AA-9006-A92339CE195C}] => (Allow) C:\Users\Martina\Downloads\LBP6310dn_R150_V110_W64_uk_EN_1\Setup.exe (CANON INC. -> CANON INC.)
FirewallRules: [UDP Query User{D0AD31D1-7D8E-435E-9239-D06F9120C70C}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Block) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [TCP Query User{FC0EAC9D-E202-4941-BD29-3CEBC42B7DCE}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Block) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [UDP Query User{40E88040-0969-4961-AC5F-C9112C29EED1}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{3C5C78B9-C4BE-45B1-BDF8-B66C739DE116}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{57E07433-B97C-48C0-BDAC-B6FD6B4DD9C4}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Block) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [TCP Query User{31827710-5A33-4184-BD15-8BBF2583082E}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Block) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [UDP Query User{E9E59733-6229-4F3C-83F3-8DB3438791C2}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [TCP Query User{145C3A7F-BE00-4E7E-A5B5-B0E49D540746}C:\program files (x86)\nvms-1000\nvms-1000.exe] => (Allow) C:\program files (x86)\nvms-1000\nvms-1000.exe () [File not signed]
FirewallRules: [{086EE002-9FB3-448B-8C5A-AF2B50E1EA93}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4E5F7AC7-E827-4CD8-84BD-079E76FBCFD4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6E0DE26D-E701-4DC8-898D-42998B53E4F8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4D0B19FE-DB73-45E7-82D8-3DA940D6ABD1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{F94CF879-9F82-4EC6-84FF-176DE43402CD}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{F2109BFB-B7E7-44FC-9943-826F88F3C3F4}C:\users\martina\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\martina\appdata\local\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{0C0FE1F6-D5F8-4D67-A343-720753AC8754}] => (Allow) C:\Program Files (x86)\Pervasive Software\PSQL\bin\w3dbsmgr.exe (Pervasive Software Inc. -> Pervasive Software Inc.)
FirewallRules: [{3329C5EF-DB33-4B00-84F8-86F336CFF9F4}] => (Allow) C:\Program Files (x86)\Pervasive Software\PSQL\bin\w3dbsmgr.exe (Pervasive Software Inc. -> Pervasive Software Inc.)
FirewallRules: [{B2702167-C6E7-4550-A35A-33F32A991296}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe (Software602 a.s. -> ) [File not signed]
FirewallRules: [{6AF06C33-FF45-4421-A4E5-BB19310D058D}] => (Allow) C:\Program Files (x86)\Common Files\soft602\langserv.exe (Software602 a.s. -> ) [File not signed]
FirewallRules: [TCP Query User{CEA16519-CE8C-49B6-BCF5-509DD6AE3575}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Allow) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [UDP Query User{44FFE2EA-E21B-468D-847F-B844E7204CB1}\\10.0.0.163\magis\unipaas19\unirte.exe] => (Allow) \\10.0.0.163\magis\unipaas19\unirte.exe => No File
FirewallRules: [TCP Query User{11D7D414-A57E-4BE3-AEEE-9D7652FDDBE0}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Allow) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [UDP Query User{42E5E91F-832B-4922-9AA6-7EA323C0FC16}\\10.0.0.163\magis\magic940\mgrntw.exe] => (Allow) \\10.0.0.163\magis\magic940\mgrntw.exe => No File
FirewallRules: [{743EE499-37CB-479D-9634-975ECC65D9A8}] => (Allow) LPort=54925
FirewallRules: [TCP Query User{3D3F9046-3BD6-4EBF-AC41-2C15400A5455}\\server2012\magis\magic940\mggenw.exe] => (Block) \\server2012\magis\magic940\mggenw.exe => No File
FirewallRules: [UDP Query User{56F9F2C8-C5CF-4E58-A982-075FB526000F}\\server2012\magis\magic940\mggenw.exe] => (Block) \\server2012\magis\magic940\mggenw.exe => No File
FirewallRules: [{211E8977-53B3-4E01-8D8F-28695FC39392}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8096FACC-F920-4623-97E6-7CDF85B119AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{CB4161F4-0FC4-480B-9C0E-B1B7BD8EC480}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{ED85CB7A-1425-41F3-B410-A3C9DF9EEB3C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B5A05A05-F438-4558-B8F3-512FE9BB5C1B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{52B5367F-07C7-4A82-BB7C-6B0F875664FC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0A930CBD-047C-43B9-B3B0-048BE0D3B6E6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{42B61E7A-A7EA-4BE2-820D-217031328E3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8A452940-7EE8-495B-9646-02468CCE3FBF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

==================== Restore Points =========================

21-07-2021 06:55:04 Instalační služba modulů systému Windows
22-07-2021 07:01:38 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (07/24/2021 02:58:32 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Jirka)
Description: Aplikaci nebo službu Microsoft Office SDX Helper nelze ukončit.

Error: (07/09/2021 09:54:24 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Systém Windows nemůže získat přístup k souboru z jednoho z těchto důvodů:
došlo k problému s připojením k síti, s diskem, na kterém je soubor uložen, nebo
s ovladači ukládání nainstalovanými v tomto počítači; nebo disk chybí.
Systém Windows kvůli této chybě ukončil program uniRTE.exe.

Program: uniRTE.exe
Soubor:

Hodnota chyby je uvedena v části Další údaje.
Akce uživatele
1. Otevřete soubor znovu.
Může se jednat o dočasný problém, který se při novém spuštění programu nebude opakovat.
2.
Pokud k souboru stále nelze získat přístup a:
- Nachází se v síti,
měl by správce sítě ověřit, zda nedošlo k problému se sítí a zda lze server kontaktovat.
- Je na vyměnitelném disku (například disketě nebo disku CD-ROM), ověřte, zda je disk správně vložen do počítače.
3. Zkontrolujte a opravte systém souborů pomocí nástroje CHKDSK. Ten lze spustit tak, že kliknete na tlačítko Start a příkaz Spustit, zadáte příkaz CMD a kliknete na tlačítko OK. Do příkazového řádku zadejte příkaz CHKDSK /F a stiskněte klávesu ENTER.
4. Pokud potíže potrvají, obnovte soubor ze záložní kopie.
5. Zjistěte, zda lze otevřít jiné soubory na stejném disku. Pokud ne, může být disk poškozen. Jedná-li se o pevný disk, obraťte se na správce nebo na dodavatele počítačového hardwaru
se žádostí o pomoc.

Další údaje
Hodnota chyby: C00000BE
Typ disku: 0

Error: (07/09/2021 09:54:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: uniRTE.exe, verze: 0.0.0.0, časové razítko: 0x517e54b9
Název chybujícího modulu: uniRTE.exe, verze: 0.0.0.0, časové razítko: 0x517e54b9
Kód výjimky: 0xc0000006
Posun chyby: 0x006895e9
ID chybujícího procesu: 0x1ac8
Čas spuštění chybující aplikace: 0x01d7747fe8dff4cb
Cesta k chybující aplikaci: Z:\uniPaaS19\uniRTE.exe
Cesta k chybujícímu modulu: Z:\uniPaaS19\uniRTE.exe
ID zprávy: 6f0b81e7-c5fb-41cb-8fc7-e9af5a106f5e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (07/01/2021 09:05:20 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Windows\System32\svchost.exe, identifikátor PID: 3192, identifikátor PID ProfSvc: 1384.

Error: (07/01/2021 09:05:20 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Windows\System32\svchost.exe, identifikátor PID: 2368, identifikátor PID ProfSvc: 1384.

Error: (05/06/2021 02:50:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program uniRTE.exe verze 0.0.0.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 130

Čas spuštění: 01d742761b36c0b8

Čas ukončení: 23

Cesta k aplikaci: \\Server2012\Magis\uniPaaS19\uniRTE.exe

ID hlášení: 5375dc50-40e1-44af-beb5-0bbd4dab93e7

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Cross-thread

Error: (05/06/2021 02:48:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program uniRTE.exe verze 0.0.0.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1dac

Čas spuštění: 01d74275ff4dd414

Čas ukončení: 46

Cesta k aplikaci: \\Server2012\Magis\uniPaaS19\uniRTE.exe

ID hlášení: 216c72b4-03ac-432e-a32f-6651d19d28fc

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Cross-thread

Error: (05/06/2021 06:44:38 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Jirka)
Description: Aplikaci nebo službu Microsoft Windows Search Protocol Host nelze ukončit.


System errors:
=============
Error: (07/28/2021 07:40:02 AM) (Source: SCardSvr) (EventID: 616) (User: )
Description: Sledování čtečky Gemplus USB Smart Card Reader 0 obdrželo kód nezachycené chyby: Přístup byl odepřen.

Error: (07/28/2021 07:40:02 AM) (Source: SCardSvr) (EventID: 615) (User: )
Description: Při sledování odebírání ze čtečky bylo dosaženo mezního počtu chyb: Přístup byl odepřen.

Error: (07/28/2021 12:20:34 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Intel(R) Content Protection HECI Service byla ukončena s následující chybou:
Neplatný popisovač

Error: (07/27/2021 04:49:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Content Protection HDCP Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/27/2021 04:49:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (07/27/2021 04:49:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba 602Updater byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/27/2021 04:49:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) HD Graphics Control Panel Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/27/2021 04:49:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba BrYNSvc byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
================
Date: 2021-07-27 15:20:30
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {64DA49E4-40D8-4E3D-9E45-B0BDE93FA336}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-27 15:04:04
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {E6C9764A-9F4C-493F-864C-F1C281252CFA}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-27 13:54:02
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {851B2CA3-87FC-40A4-AA62-CEDB6EE70998}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-27 12:38:53
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {567D4D79-451B-41B9-A7F4-0A5D89D8E95A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-07-27 12:33:16
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {5541F608-276B-43A3-9E9B-0D993E9A8D8F}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-06-29 10:03:24
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.341.1630.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070643
Popis chyby: Při instalaci došlo k závažné chybě.

Date: 2021-06-29 10:03:22
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1630.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.

Date: 2021-06-29 10:03:22
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1630.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.

Date: 2021-06-29 10:03:22
Description:
Program Antivirová ochrana v programu Microsoft Defender zjistil chybu při pokusu o aktualizaci modulu
Nová verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Uživatel: NT AUTHORITY\SYSTEM
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 2.50 02/23/2016
Motherboard: MSI H110M PRO-VH (MS-7996)
Processor: Intel(R) Pentium(R) CPU G4400 @ 3.30GHz
Percentage of memory in use: 40%
Total physical RAM: 8083.18 MB
Available physical RAM: 4798.12 MB
Total Virtual: 9363.18 MB
Available Virtual: 5994.64 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:222.51 GB) (Free:51.34 GB) NTFS

\\?\Volume{89767d14-7c5f-477f-af2f-b2cf098febd8}\ (Obnovení) (Fixed) (Total:0.44 GB) (Free:0.43 GB) NTFS
\\?\Volume{a6f6fd1a-d87c-4d2a-8276-cc1dd883d65b}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{6c01bb58-7b46-44ec-ae8d-2b8ca3d2f09a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: 4EDAEC5E)

Partition: GPT.

==================== End of Addition.txt =======================

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Vyskakovací okna s reklamou

#7 Příspěvek od Conder »

:arrow: Tie reklamy sa vyskytuju pod obidvoma uctami v PC alebo len jednym? Ktory webovy prehliadac sa na tomto PC pouziva?

:arrow: Otvor poznamkovy blok (Win+R -> notepad -> enter)
  • Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

    Kód: Vybrat vše

    Start
    CloseProcesses:
    CreateRestorePoint:
    
    PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
    ExportKey: HKEY_USERS\S-1-5-21-3861839715-2628484499-211688117-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome
    
    Task: {62E0D793-1CCF-4BFF-BBEF-F32F7B02256D} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.422\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
    CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
    ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
    ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> No File
    ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
    SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    
    Hosts:
    EmptyTemp:
    End
  • Uloz na plochu s nazvom fixlist.txt
  • Spusti znovu FRST a klikni na Fix
  • Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
  • Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah skopiruj a vloz do dalsej odpovede
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#8 Příspěvek od Sobi »

Dobrý den, omlouvám se za pozdní odpověď.

Na první otázku bohužel neumím odpovědět. Admin účet se tam vůbec nepoužívá, takže těžko říct. Reklamy vyskakují jen někdy a když jsem to zkoušel, tak zrovna nevyskočila, ale to asi nic neznamená.

Co se týče prohlížečů, tak nejčastěji se používá chrome a internet explorer. Zřídka Edge, když se nastaví jako výchozí nebo pro otevírání pdf. Jiné by tam neměly být nebo se používat.

-------------------------------

Fix result of Farbar Recovery Scan Tool (x64) Version: 03-08-2021
Ran by Jirka (03-08-2021 16:02:49) Run:1
Running from C:\Users\Martina\Desktop
Loaded Profiles: Jirka & Martina
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
ExportKey: HKEY_USERS\S-1-5-21-3861839715-2628484499-211688117-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome

Task: {62E0D793-1CCF-4BFF-BBEF-F32F7B02256D} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.422\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\Martina\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3861839715-2628484499-211688117-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 2
Average :
Sum : 1994
Maximum :
Minimum :
Property : Length




========= End of Powershell: =========

================== ExportKey: ===================

[HKEY_USERS\S-1-5-21-3861839715-2628484499-211688117-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"DisplayName"="Google Chrome"
"UninstallString"=""C:\Users\Martina\AppData\Local\Google\Chrome\Application\92.0.4515.107\Installer\setup.exe" --uninstall --channel=stable --verbose-logging"
"InstallLocation"="C:\Users\Martina\AppData\Local\Google\Chrome\Application"
"DisplayIcon"="C:\Users\Martina\AppData\Local\Google\Chrome\Application\chrome.exe,0"
"NoModify"="1"
"NoRepair"="1"
"Publisher"="Google LLC"
"Version"="92.0.4515.107"
"DisplayVersion"="92.0.4515.107"
"InstallDate"="20210727"
"VersionMajor"="4515"
"VersionMinor"="107"

=== End of ExportKey ===
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{62E0D793-1CCF-4BFF-BBEF-F32F7B02256D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{62E0D793-1CCF-4BFF-BBEF-F32F7B02256D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F} => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKU\S-1-5-21-3861839715-2628484499-211688117-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13748995 B
Java, Flash, Steam htmlcache => 492 B
Windows/system/drivers => 381389625 B
Edge => 790406 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 512030 B
Jirka => 95894057 B
Martina => 392116020 B

RecycleBin => 2143 B
EmptyTemp: => 853.5 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 16:03:48 ====

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Vyskakovací okna s reklamou

#9 Příspěvek od Conder »

OK. Chrome je nainštalovaný len pod tým užívateľským účtom, a FRST bol spustený pod admin účtom, takže v logu nie sú vidno podrobnosti o Chrome profile a nastaveniach. Skontroluj teda ručne nastavenia v Chrome -> Nastavenia webu -> Upozornenia -> pozri, či v zozname povolených stránok nie sú nejaké neznáme alebo podozrivé webové stránky, ak áno, odstráň ich odtiaľ (klikni na 3 body a Odstrániť).
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#10 Příspěvek od Sobi »

Ahoj, aha, mám to FRST spustit ještě pod uživatelem? Jinak, chrome jsem zkontroloval a "Odesílání oznámení je povoleno" jen pro google docs, drive a mail. Nic jiného tam není.

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#11 Příspěvek od Sobi »

Já už jsem to asi pochopil. To co mi tam vyskakovalo nebyl žádný vir, ale spíše jsem povolil nějakému webu, aby mi zobrazoval svoje oznámení, že? Což byly reklamy, atd. Chápu to správně?

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#12 Příspěvek od Sobi »

Tak bohužel reklama pořád vyskakuje.

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Vyskakovací okna s reklamou

#13 Příspěvek od Conder »

Poprosím teda aj o FRST logy vygenerované tak, že FRST spustíš z uživateľského účtu pomocou "Spustiť ako správca" a zadáš heslo k admin účtu.

Vedel by si urobiť screenshot tej reklamy a poslať (nahrať na webové uložisko, napr. imgur.com alebo ctrlv.cz a poslať odkaz)?
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Sobi
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 13 lis 2009 13:54

Re: Vyskakovací okna s reklamou

#14 Příspěvek od Sobi »

Tak vypadá to, že se mi na to podařilo přijít. Oznámení to byly ale nejspíše z Edge. Byla tam podezřelá stránka a oznámení byly povolené. Zakázal jsem je a zatím to vypadá dobře, tak snad to tak i zůstane.

Děkuji za pomoc. :)

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Vyskakovací okna s reklamou

#15 Příspěvek od Conder »

Nie je zaco :) Este upraceme po pouzitych nastrojoch:
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Odpovědět