Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zamrzání PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
lastsaves
Návštěvník
Návštěvník
Příspěvky: 107
Registrován: 17 zář 2007 16:43

Zamrzání PC

#1 Příspěvek od lastsaves »

Prosím o kontrolu logu, zamrzá PC. Předem díky.
Addition.txt v příloze.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-12-2021
Ran by tMt-user (administrator) on TMT-DESKTOP (15-12-2021 00:10:55)
Running from C:\aa
Loaded Profiles: defaultuser0 & tMt & tMt-user & tMt-steam
Platform: Microsoft Windows 10 Pro Version 21H1 19043.1415 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Apps\IconGroups\x64\IconGroups.exe
() [File not signed] C:\Apps\OpenHardwareMonitor\OpenHardwareMonitor.exe
() [File not signed] C:\Apps\RBTray\RBTray.exe
() [File not signed] C:\Apps\Wondershare\MobileTrans\ElevationService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Alexandr Irza) [File not signed] C:\Apps\Volume2\Volume2.exe
(Amine Moufik -> Amine Mouafik) C:\Users\tMt-user\AppData\Local\Programs\ferdi\Ferdi.exe <10>
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Astonsoft Ltd. -> Astonsoft) C:\Apps\EssentialPIM Pro 9\EssentialPIM.exe <2>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\wsc_proxy.exe
(Backblaze, Inc. -> ) C:\Program Files (x86)\Backblaze\bzbui.exe
(Backblaze, Inc. -> ) C:\Program Files (x86)\Backblaze\bzfilelist.exe
(Backblaze, Inc. -> ) C:\Program Files (x86)\Backblaze\bzserv.exe
(Bartels Media GmbH -> Bartels Media GmbH) C:\Apps\PhraseExpress\phraseexpress.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe <2>
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2>
(Ditto -> ) [File not signed] C:\Apps\Ditto\Ditto.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <4>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\138.3.2340\QtWebEngineProcess.exe <2>
(F.lux Software LLC -> f.lux Software LLC) C:\Users\tMt-user\AppData\Local\FluxSoftware\Flux\flux.exe
(Firebit OU -> Rainmeter) C:\Apps\Rainmeter\Rainmeter.exe
(Ghisler Software GmbH -> Ghisler Software GmbH) C:\Apps\Total Commander\TOTALCMD64.EXE
(GNE) [File not signed] C:\Apps\Dual Monitor Tools\DMT.exe
(Greatis Software LLC -> Greatis Software, LLC) C:\Apps\BootRacer\BootRacerServ.exe
(KARPOLAN) [File not signed] C:\Apps\Keyboard Leds\KeyboardLeds.exe
(Kazuyuki Nakayama) [File not signed] C:\Apps\HotSwap\HotSwap!.EXE
(KeepSolid Inc. -> KeepSolid Inc.) C:\Apps\VPN Unlimited\vpn-unlimited-daemon.exe
(Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Martin Malik - REALiX -> REALiX) C:\Apps\HWInfo\HWiNFO64.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\tMt-user\AppData\Local\Microsoft\Teams\current\Teams.exe <9>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.59.11001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.59.11001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(mik61 (independent software developer) -> mik61) [File not signed] [File is in use] C:\Apps\Gameplay Time Tracker\Support64.exe
(mik61 (independent software developer) -> mik61) [File not signed] C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\NVDisplay.Container.exe <2>
(Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World) C:\Apps\CrystalDiskInfo\DiskInfo64.exe <2>
(Open-Shell) [File not signed] C:\Apps\Open Shell\StartMenu.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Parsec Cloud, Inc. -> Parsec) C:\Program Files\Parsec\pservice.exe
(pCloud AG -> pCloud AG) C:\Program Files\pCloud Drive\pCloud.exe
(Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(Razer USA Ltd. -> Razer Inc.) C:\Apps\Razer\Razer Cortex\RzKLService.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SOFTPERFECT PTY. LTD. -> SoftPerfect) C:\Apps\Networx\networx.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Apps\TeamViewer\TeamViewer_Service.exe
(Tonalio GmbH -> sandboxie-plus.com) C:\Apps\Sandboxie-Plus\SandMan.exe
(Tonalio GmbH -> sandboxie-plus.com) C:\Apps\Sandboxie-Plus\SbieSvc.exe
(voidtools -> voidtools) C:\Apps\Everything\Everything.exe <2>
(WDC) [File not signed] C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe
(zett42) [File not signed] C:\Apps\FlashFolder\FlashFolder.exe
(zett42) [File not signed] C:\Apps\FlashFolder\FlashFolder64.exe <2>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast\AvLaunch.exe [157464 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [NetWorx] => C:\Apps\Networx\networx.exe [7627080 2016-09-24] (SOFTPERFECT PTY. LTD. -> SoftPerfect)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412736 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [CANON P150 SVC] => C:\Windows\system32\P150SVC.dll [181760 2009-12-16] (Canon Electronics) [File not signed]
HKLM\...\Run: [MTPW] => C:\Apps\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> )
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8838400 2016-06-07] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Open-Shell Start Menu] => C:\Apps\Open Shell\StartMenu.exe [216576 2020-09-26] (Open-Shell) [File not signed]
HKLM\...\Run: [Everything] => C:\Apps\Everything\Everything.exe [2261600 2021-05-12] (voidtools -> voidtools)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8807200 2021-12-10] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Acrotray.exe [1996512 2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [RazerCortex] => C:\Apps\Razer\Razer Cortex\CortexLauncher.exe [267072 2021-03-31] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-09-27] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [AutoAD] => C:\Apps\Wondershare\MobileTrans\AutoAD.exe [73224 2021-11-24] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Apps\Opera\assistant\browser_assistant.exe [4112592 2021-12-02] (Opera Software AS -> Opera Software)
HKLM\...\Policies\Explorer\Run: [BootRacer] => C:\Apps\BootRacer\bootrace.exe [9519440 2021-01-26] (Greatis Software LLC -> Greatis Software)
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 1
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 1
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 1
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 1
HKU\S-1-5-21-2866573575-4116515599-1814928747-1002\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [1174808 2021-07-07] (Backblaze, Inc. -> )
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [f.lux] => C:\Users\tMt-user\AppData\Local\FluxSoftware\Flux\flux.exe [1515848 2021-06-18] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [GameplayTimeTracker] => C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe [932472 2018-09-17] (mik61 (independent software developer) -> mik61) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Adobe Acrobat Synchronizer] => C:\Apps\Adobe Acrobat Pro 2017\Acrobat\AdobeCollabSync.exe [886496 2021-10-05] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [112191904 2021-12-06] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [EssentialPIM Pro Portable] => C:\Apps\EssentialPIM Pro 9\EssentialPIM.exe [12368464 2021-12-11] (Astonsoft Ltd. -> Astonsoft)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [1174808 2021-07-07] (Backblaze, Inc. -> )
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Ditto] => C:\Apps\Ditto\Ditto.exe [1717872 2012-11-08] (Ditto -> ) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [KeyboardLeds.exe] => C:\Apps\Keyboard Leds\KeyboardLeds.exe [912896 2012-09-06] (KARPOLAN) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [pCloud] => C:\Program Files\pCloud Drive\pCloud.exe [3720424 2020-05-29] (pCloud AG -> pCloud AG)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\tMt-user\AppData\Local\Microsoft\Teams\Update.exe [2459304 2021-12-11] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [GNE_DualMonitorTools] => C:\Apps\Dual Monitor Tools\DMT.exe [796160 2018-06-04] (GNE) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Ferdi] => C:\Users\tMt-user\AppData\Local\Programs\ferdi\Ferdi.exe [136400840 2021-07-18] (Amine Moufik -> Amine Mouafik)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [VOLUME2] => C:\Apps\Volume2\Volume2.exe [4350464 2021-02-14] (Alexandr Irza) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [SandboxiePlus_AutoRun] => C:\Apps\Sandboxie-Plus\SandMan.exe [1110032 2021-08-08] (Tonalio GmbH -> sandboxie-plus.com)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [AutoAD] => C:\Apps\Wondershare\MobileTrans\AutoAD.exe [73224 2021-11-24] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c19-05d1-11ec-95db-5cf3708ef908} - "J:\Setup.exe"
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c2b-05d1-11ec-95db-5cf3708ef908} - "M:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493f27-05d1-11ec-95db-5cf3708ef908} - "J:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {630a72da-1940-11eb-9544-5cf3708ef908} - "O:\setup.exe"
HKU\S-1-5-18\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [1174808 2021-07-07] (Backblaze, Inc. -> )
HKLM\...\Windows x64\Print Processors\XRXS1PC: C:\Windows\System32\spool\prtprocs\x64\xrxs1pc.dll [33792 2007-02-23] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Server 2003 DDK provider)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65176 2021-05-24] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\PDF-XChange V6 Printer Port Monitor (Lite): C:\WINDOWS\system32\pxcpm5L.dll [150720 2017-06-29] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\us008 Langmon: C:\Windows\system32\us008lm.dll [31256 2016-02-15] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\96.0.4664.110\Installer\chrmstp.exe [2021-12-14] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MTWSAndroidAppHelper.lnk [2021-11-27]
ShortcutTarget: MTWSAndroidAppHelper.lnk -> C:\Apps\Wondershare\MobileTrans\WSAndroidAppHelper.exe (Wondershare Technology Co.,Ltd -> Microsoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MTWSAppHelper.lnk [2021-11-27]
ShortcutTarget: MTWSAppHelper.lnk -> C:\Apps\Wondershare\MobileTrans\WSAppHelper.exe (Wondershare Technology Co.,Ltd -> Microsoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk [2021-05-24]
ShortcutTarget: PhraseExpress.lnk -> C:\Apps\PhraseExpress\phraseexpress.exe (Bartels Media GmbH -> Bartels Media GmbH)
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk [2021-10-07]
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Apps\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2021-04-16]
ShortcutTarget: Rainmeter.lnk -> C:\Apps\Rainmeter\Rainmeter.exe (Firebit OU -> Rainmeter)
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RBTray.lnk [2017-08-22]
ShortcutTarget: RBTray.lnk -> C:\Apps\RBTray\RBTray.exe () [File not signed]
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VeBest Icon Groups.lnk [2020-05-25]
ShortcutTarget: VeBest Icon Groups.lnk -> C:\Apps\IconGroups\IconGroups.exe () [File not signed]
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0399E6AA-61DF-481F-A77D-7C3E52EB6C7A} - System32\Tasks\Zotero => C:\Apps\Zotero\zotero.exe [255336 2021-09-19] (Corporation for Digital Scholarship -> Corporation for Digital Scholarship)
Task: {0C879D8A-AC1B-4355-8FB1-721867E4BBE6} - System32\Tasks\HWiNFO => C:\Apps\HWInfo\HWiNFO64.exe [6184480 2021-10-29] (Martin Malik - REALiX -> REALiX)
Task: {14812791-2116-4D3F-8617-49A6F54D6AF0} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {194B9C7E-AE7D-4ECA-A28C-C56006DE0702} - System32\Tasks\CCleaner Update => C:\Apps\CCleaner\CCUpdate.exe [684976 2021-11-12] (Piriform Software Ltd -> Piriform)
Task: {1E5D57A3-EFB9-4E2F-B7A6-8C19A04F1734} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast\AvEmUpdate.exe [4969240 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
Task: {21843DAC-FD32-4158-A9E1-135EA66A1BF2} - System32\Tasks\Opera scheduled Autoupdate 1576927961 => C:\Apps\Opera\launcher.exe [1753808 2021-12-02] (Opera Software AS -> Opera Software)
Task: {23E29B3A-91D8-4EDF-A233-02A52BDD1241} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {244FD7EC-1966-43CE-991F-732189C82EBE} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {25BA9DA9-7394-4551-8C20-E0EAAE874445} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1790184 2021-04-29] (Avast Software s.r.o. -> Avast Software)
Task: {2BE52439-90FF-448D-9603-DEA7E083113B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Task: {2F3B9968-A678-4B97-9684-16D294663C4A} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {32E29CF4-8429-4B89-813D-9D4A22DBC131} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {330B445E-8CDB-46EC-89F0-4D3B018F9C52} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (No File)
Task: {36D86ED2-5119-48A7-9458-4D54E8B5CD58} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3C8C87BB-4D1E-4951-909E-89B051CD9A63} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {4F56E544-B7F3-4C84-9371-C19B4458AEC3} - System32\Tasks\Mozilla\Firefox Background Update 87BE11929858F73 => C:\Apps\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\87BE11929858F73\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {50442DE0-F3D0-4D8F-8115-D882054DE9D2} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {58B397D2-6D3B-4803-85B8-F86D0DDFB71B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5981E631-0BE6-44C4-B7BB-57B947816E13} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A644220-9EAC-498D-8669-8AB23A1EC5D3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {621829BF-F294-4298-A53C-631C16DAC10E} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {6512CDBB-8527-4772-9A34-A47BEC22DEBA} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6AE78B1F-6BC8-49FD-ABE1-AC64004DA7A4} - System32\Tasks\WD Discovery Service Task tmt-user => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [75504 2019-11-29] (Western Digital Technologies, Inc. -> )
Task: {7308D9FE-D213-449D-9B94-E6FDFB309B32} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {77EE2F02-5F89-474A-9EA5-C85EF2DE761B} - System32\Tasks\CrystalDiskInfo => C:\Apps\CrystalDiskInfo\DiskInfo64.exe [2799136 2021-07-11] (Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World)
Task: {7B6D526E-862A-49E6-B5FA-8AA31718B356} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {88A2F643-69DF-446B-B49A-23E6BBB12223} - System32\Tasks\OpenHardwareMonitor => C:\Apps\OpenHardwareMonitor\OpenHardwareMonitor.exe [493568 2020-12-27] () [File not signed]
Task: {89A4DBDD-7FBC-4E35-A315-EE7CA464FB9B} - System32\Tasks\CCleanerSkipUAC - tMt-user => C:\Apps\CCleaner\CCleaner.exe [29417088 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {8DEBCEE4-E236-4CC3-9930-6EDE3160BEC8} - System32\Tasks\Opera scheduled assistant Autoupdate 1597678316 => C:\Apps\Opera\launcher.exe [1753808 2021-12-02] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Apps\Opera\assistant" $(Arg0)
Task: {910461A0-666E-4794-8064-F65191AF79B4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Task: {95CD6496-7938-4491-BAAE-9F0FEF967A17} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {973F6195-877C-4732-9074-490C3DD8AADD} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {9DABE940-DF88-4156-B5DE-989C1A1A9AE2} - System32\Tasks\HotSwap! Applet => C:\Apps\HotSwap\HotSwap!.EXE [219648 2019-01-07] (Kazuyuki Nakayama) [File not signed]
Task: {9E1D9698-7DBE-4472-BC2A-A59887D1D394} - System32\Tasks\Mozilla\Firefox Default Browser Agent 87BE11929858F73 => C:\Apps\Mozilla Firefox\default-browser-agent.exe do-task "87BE11929858F73"
Task: {A5868E96-18B9-4A54-92FF-3DDB5E58B1BF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {BAF5B6E7-035E-4E02-A93C-306F7B1D4A5F} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {CA2C15C8-F967-47E9-82CD-DDF09DFBAECA} - System32\Tasks\WD Device Agent Task tmt-user => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [720624 2019-11-29] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {D03C9E07-7E75-472E-BE8B-3F7A5AA5A05A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D5468748-8F99-4C47-881A-D260B84FB6AA} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {E0B66F5A-E673-4B5D-A19B-6477ADAD8932} - System32\Tasks\Crystal Disk Info => C:\Apps\CrystalDiskInfo\DiskInfo64.exe [2799136 2021-07-11] (Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World)
Task: {E6165D36-206C-4272-B813-01505ED33EF6} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E94834FC-00B1-48A2-B1EE-511011FBED2F} - System32\Tasks\Open Hardware Monitor\Startup => C:\Apps\OpenHardwareMonitor\OpenHardwareMonitor.exe [493568 2020-12-27] () [File not signed]
Task: {EA0916D4-4D3C-4553-A93C-D3CF001C5C33} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {EC8BA3EE-54C4-4BC5-831B-CF41C5D47656} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {F9C789DF-56EC-462A-8F3D-BD968F986B9A} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412736 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {FF548FCF-FC3B-4A75-9258-3911549EBB57} - System32\Tasks\MiniToolPartitionWizard => C:\Apps\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> )

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{178072c6-a771-417b-b35b-66f5192e2773}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{759d83ac-f5e0-c89b-38c2-ca581e218a0c}: [NameServer] 10.100.0.1
Tcpip\..\Interfaces\{8b2477d5-720d-47d5-a5f1-e61b2a4b8fe2}: [DhcpNameServer] 192.168.42.129

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\tMt-user\AppData\Local\Microsoft\Edge\User Data\Default [2021-11-10]

FireFox:
========
FF DefaultProfile: mdjzqrib.default
FF DefaultProfile: 6uiofy8v.default-1625836185525
FF ProfilePath: C:\Users\tMt-user\AppData\Roaming\Zotero\Zotero\Profiles\mdjzqrib.default [2021-11-30]
FF Extension: (ZotFile) - C:\Users\tMt-user\AppData\Roaming\Zotero\Zotero\Profiles\mdjzqrib.default\Extensions\zotfile@columbia.edu.xpi [2020-02-06] [Legacy] [not signed]
FF ProfilePath: C:\Users\tMt-user\AppData\Roaming\Mozilla\Firefox\Profiles\0chh25ol.default-release [2021-11-10]
FF ProfilePath: C:\Users\tMt-user\AppData\Roaming\Mozilla\Firefox\Profiles\6uiofy8v.default-1625836185525 [2021-12-13]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin-x32: @java.com/DTPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\dtplugin\npDeployJava1.dll [2021-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\plugin2\npjp2.dll [2021-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Apps\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Air\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
StartMenuInternet: Firefox-87BE11929858F73 - C:\Apps\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default [2021-12-15]
CHR Notifications: Default -> hxxps://fitgirl-repacks.site; hxxps://meet.google.com; hxxps://my.pcloud.com; hxxps://steamcommunity.com; hxxps://topflownews.com; hxxps://trello.com
CHR HomePage: Default -> hxxp://www.google.com
CHR Extension: (Překladač Google) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-08-15]
CHR Extension: (Prezentace) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-17]
CHR Extension: (Bookmark Favicon Changer) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmfnomgphggonodopogfbmkneepfgnh [2018-09-12]
CHR Extension: (Incognito This!) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aglfgiceepbeffbpmlohbdnhmliojinm [2019-02-16]
CHR Extension: (Dokumenty) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-17]
CHR Extension: (Disk Google) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (Seznam doplněk - Email) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2020-04-06]
CHR Extension: (WOT – zabezpečení webových stránek a ochrana pro bezpečné procházení) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2021-11-26]
CHR Extension: (Block Sender) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklnjbfcmglhiaoppcckdodanccbelcg [2020-12-23]
CHR Extension: (YouTube) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-10]
CHR Extension: (uBlock Origin) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-12-03]
CHR Extension: (Adobe Acrobat) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-11-17]
CHR Extension: (Zotero Connector) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekhagklcjbdpajgpjgmbionohlpdbjgc [2021-08-19]
CHR Extension: (Urban Free VPN proxy Unblocker - Best VPN) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon [2021-11-05]
CHR Extension: (Youtube Subtitle Downloader) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\falajjjalaffofcbkhgdemihkpllibom [2021-11-14]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2021-06-28]
CHR Extension: (Tabulky) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-17]
CHR Extension: (HTTPS Everywhere) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2021-07-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-12-01]
CHR Extension: (Power Thesaurus) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhnjkanigjoiglnlopahbbjdbfhkndjk [2021-11-20]
CHR Extension: (Undo Closed Tabs Button) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieehkmoiljghfkejgahoheemdjpdinml [2021-09-14]
CHR Extension: (Boční lišta zálloh) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdbnofccmhefkmjbkkdkfiicjkgofkdh [2021-12-13]
CHR Extension: (Grammarly for Chrome) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2021-12-06]
CHR Extension: (Download Statusbar) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfjkodkjnmdeookccjmcdbhhpbgkoche [2020-05-29]
CHR Extension: (Social Video Downloader) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfnnoammpigcglgbhcbbdpnekbcddahe [2021-02-10]
CHR Extension: (Tlačítko Google Scholar) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldipcbpaocekfooobnbcddclnhejkcpn [2021-02-22]
CHR Extension: (Decentraleyes) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpochfccmkkmhdbclfhpagapcfdljkj [2021-09-09]
CHR Extension: (Change Case) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpakoahdokkkonadfppfgmednkknpgbm [2019-12-15]
CHR Extension: (Citace PRO) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncpfaidppllikakgbjppnjfidjkpafmp [2020-04-21]
CHR Extension: (Save to Pocket) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2021-11-10]
CHR Extension: (Message/Chat Downloader) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkinapjekllgfipphkgpmombekfclghe [2021-04-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Subtitles For YouTube) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oanhbddbfkjaphdibnebkklpplclomal [2021-07-03]
CHR Extension: (Context Menu Search) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocpcmghnefmdhljkoiapafejjohldoga [2017-08-18]
CHR Extension: (Charset) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oenllhgkiiljibhfagbfogdbchhdchml [2021-04-22]
CHR Extension: (Seznam doplněk - Esko) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2020-04-06]
CHR Extension: (Shindig Screen Share) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpphkjkpobfpkckdilgkemcjklfidbj [2020-06-03]
CHR Extension: (Gmail) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Privacy Badger) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2021-11-27]
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-12-15]
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1 [2021-11-30]
CHR Extension: (Prezentace) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-04-16]
CHR Extension: (Dokumenty) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2021-04-16]
CHR Extension: (Disk Google) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-04-16]
CHR Extension: (YouTube) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-04-16]
CHR Extension: (Adobe Acrobat) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-11-29]
CHR Extension: (Tabulky) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-04-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-16]
CHR Extension: (Gmail) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-04-16]
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\System Profile [2021-12-15]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

Opera:
=======
OPR Profile: C:\Users\tMt-user\AppData\Roaming\Opera Software\Opera Stable [2021-12-08]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=o ... utEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\tMt-user\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-12-01]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\tMt-user\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-10-03]
StartMenuInternet: (HKLM) OperaStable - C:\Apps\Opera\Launcher.exe

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3833088 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3603200 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 AODService; C:\Apps\AMD OverDrive\AODAssist.exe [137584 2014-01-08] (Advanced Micro Devices, Inc. -> )
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-03-16] (Apple Inc. -> Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast\aswidsagent.exe [8480848 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast\AvastSvc.exe [452888 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast\aswToolsSvc.exe [452888 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast\wsc_proxy.exe [56912 2021-05-28] (Avast Software s.r.o. -> AVAST Software)
R2 BootRacerServ; C:\Apps\BootRacer\BootRacerServ.exe [97352 2020-09-23] (Greatis Software LLC -> Greatis Software, LLC)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2020-03-22] (BitRaider LLC -> BitRaider, LLC)
R2 bzserv; C:\Program Files (x86)\Backblaze\bzserv.exe [609560 2021-07-07] (Backblaze, Inc. -> )
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44328 2021-12-10] (Dropbox, Inc -> Dropbox, Inc.)
R2 ElevationService; C:\Apps\Wondershare\MobileTrans\ElevationService.exe [913408 2021-10-28] () [File not signed]
R2 Everything; C:\Apps\Everything\Everything.exe [2261600 2021-05-12] (voidtools -> voidtools)
R2 FlashFolder; C:\Apps\FlashFolder\FlashFolder64.exe [596992 2012-07-21] (zett42) [File not signed]
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [1044176 2019-01-29] (Comodo Security Solutions, Inc. -> COMODO)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-06-12] (Logitech Inc -> Logitech)
R2 Parsec; C:\Program Files\Parsec\pservice.exe [364048 2020-05-19] (Parsec Cloud, Inc. -> Parsec)
S3 ProtonVPN Service; C:\Apps\ProtonVPN\ProtonVPNService.exe [115816 2021-11-15] (Proton Technologies AG -> )
S3 ProtonVPN Update Service; C:\Apps\ProtonVPN\ProtonVPN.UpdateService.exe [65128 2021-11-15] (Proton Technologies AG -> )
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [254224 2021-03-22] (Razer USA Ltd. -> Razer Inc)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533808 2021-01-29] (Razer USA Ltd. -> Razer Inc.)
R2 RzKLService; C:\Apps\Razer\Razer Cortex\RzKLService.exe [291320 2021-03-31] (Razer USA Ltd. -> Razer Inc.)
R2 SbieSvc; C:\Apps\Sandboxie-Plus\SbieSvc.exe [334352 2021-08-08] (Tonalio GmbH -> sandboxie-plus.com)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6138112 2021-12-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Apps\TeamViewer\TeamViewer_Service.exe [12912936 2021-11-16] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
U2 VPNUnlimitedService; C:\Apps\VPN Unlimited\vpn-unlimited-daemon.exe [47128 2021-10-26] (KeepSolid Inc. -> KeepSolid Inc.)
R2 WDBtnMgrSvc.exe; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [119296 2012-05-01] (WDC) [File not signed]
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [366720 2019-11-25] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WireGuardTunnel$VPNUWireguard; C:\Apps\VPN Unlimited\WireVPNUImpl.exe [26648 2021-10-26] (KeepSolid Inc. -> )
R2 WsAppService3; C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe [83232 2019-06-26] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3.0; C:\Apps\AMD OverDrive\amd64\AODDriver2.sys [59624 2014-01-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35720 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [222128 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [368152 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [251928 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [99352 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [21936 2021-09-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41352 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [185216 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107848 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [82912 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [852752 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [544096 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [214352 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [317680 2021-12-05] (Avast Software s.r.o. -> AVAST Software)
R1 cbfsconnect2017; C:\WINDOWS\system32\drivers\cbfsconnect2017.sys [480272 2019-10-07] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
S0 cmdboot; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [17576 2019-10-23] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 dtproscsibus; C:\WINDOWS\System32\drivers\dtproscsibus.sys [30352 2016-07-27] (Disc Soft Ltd -> Disc Soft Ltd)
R3 HWiNFO_164; C:\Users\tMt-user\AppData\Local\Temp\HWiNFO64A_164.SYS [55816 2021-12-14] (Microsoft Windows Hardware Compatibility Publisher -> REALiX(tm)) <==== ATTENTION
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 ioFakDrv; C:\WINDOWS\System32\drivers\ioFakDrv.sys [23936 2010-12-15] (KYE SYSTEMS CORP. -> KYE System Corp.)
S3 ioFakMap; C:\WINDOWS\System32\drivers\ioFakMap.sys [12672 2010-12-15] (KYE SYSTEMS CORP. -> KYE System Corp.)
S3 ioTablet; C:\WINDOWS\System32\drivers\ioTablet.sys [35328 2012-04-05] (Microsoft Windows Hardware Compatibility Publisher -> KYE System Corp.)
S3 ioTblMap; C:\WINDOWS\System32\drivers\ioTblMap.sys [13200 2011-08-25] (KYE SYSTEMS CORP. -> KYE System Corp.)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [63256 2018-08-29] (Comodo Security Solutions, Inc. -> COMODO)
S3 ProtonVPNCallout; C:\Apps\ProtonVPN\x64\Win10\ProtonVPN.CalloutDriver.sys [34176 2021-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 SbieDrv; C:\Apps\Sandboxie-Plus\SbieDrv.sys [225264 2021-08-08] (Microsoft Windows Hardware Compatibility Publisher -> sandboxie-plus.com)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [45024 2019-03-14] (ExprsVPN LLC -> The OpenVPN Project)
R3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2020-12-30] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2021-02-23] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2020-01-10] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [20704 2019-03-01] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R1 wdfsconnect2017; C:\WINDOWS\system32\drivers\wdfsconnect2017.sys [468112 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 wdvpnpbus; C:\WINDOWS\System32\drivers\wdvpnpbus.sys [20624 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
R3 WinRing0_1_2_0; C:\Apps\OpenHardwareMonitor\OpenHardwareMonitorLib.sys [14544 2021-12-14] (Noriyuki MIYAZAKI -> OpenLibSys.org)
R3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [29680 2021-11-14] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-14 23:12 - 2021-12-14 23:12 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-
2021-12-14 23:10 - 2021-12-14 23:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-14 23:06 - 2021-12-14 23:06 - 000000000 ____D C:\aa
2021-12-14 23:05 - 2021-12-14 23:05 - 000011979 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-12-14 23:04 - 2021-12-14 23:04 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-14 23:04 - 2021-12-14 23:04 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-14 23:04 - 2021-12-14 23:04 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-12-14 22:45 - 2021-12-14 22:45 - 000000000 ___HD C:\$WinREAgent
2021-12-14 21:00 - 2021-12-15 00:11 - 000000000 ____D C:\FRST
2021-12-14 17:17 - 2021-12-14 17:17 - 000001150 _____ C:\Users\tMt-user\Downloads\meetingAttendanceList (1).csv
2021-12-14 17:02 - 2021-12-14 17:02 - 000000664 _____ C:\Users\tMt-user\Downloads\meetingAttendanceList.csv
2021-12-11 11:10 - 2021-12-14 20:51 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2866573575-4116515599-1814928747-1003
2021-12-10 22:38 - 2021-12-10 22:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-12-10 01:27 - 2021-12-10 01:27 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-12-10 01:27 - 2021-12-10 01:27 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-12-10 01:27 - 2021-12-10 01:27 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-12-10 01:27 - 2021-12-10 01:27 - 000044328 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-12-09 22:45 - 2021-12-09 22:45 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\fltk.org
2021-12-09 22:45 - 2021-12-09 22:45 - 000000000 ____D C:\ProgramData\fltk.org
2021-12-08 09:55 - 2021-12-08 09:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2021-12-08 09:44 - 2021-12-08 09:44 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Proton Technologies AG
2021-12-08 09:44 - 2021-12-08 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProtonVPN
2021-12-05 09:19 - 2021-12-05 09:19 - 000340248 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2021-12-05 09:19 - 2021-12-05 09:19 - 000214352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2021-12-02 08:35 - 2021-12-02 08:36 - 000088634 _____ C:\Users\tMt-user\Downloads\label_1154153082.pdf
2021-11-28 10:32 - 2021-11-28 10:32 - 000000000 ____D C:\ProgramData\WsAppHelper
2021-11-27 23:16 - 2021-11-27 23:16 - 000000016 _____ C:\ProgramData\mntemp
2021-11-27 23:16 - 2021-11-27 23:16 - 000000000 ____D C:\Users\tMt-user\Documents\Wondershare
2021-11-27 23:15 - 2021-11-28 14:55 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Wondershare
2021-11-27 23:15 - 2021-11-27 23:15 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\MobileBackupForeverIni
2021-11-27 23:13 - 2021-11-28 14:51 - 000000000 ____D C:\ProgramData\Wondershare
2021-11-27 23:13 - 2021-11-27 23:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2021-11-27 23:13 - 2021-11-27 23:15 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Wondershare
2021-11-27 23:13 - 2021-11-27 23:13 - 000000000 ____D C:\Program Files (x86)\Wondershare
2021-11-27 23:11 - 2021-12-11 18:15 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2021-11-27 17:17 - 2021-11-27 17:17 - 000034795 _____ C:\Users\tMt-user\Downloads\claim-report.pdf
2021-11-27 17:17 - 2021-11-27 17:17 - 000034795 _____ C:\Users\tMt-user\Downloads\claim-report(1).pdf
2021-11-24 23:21 - 2021-11-29 09:22 - 000000000 ____D C:\Users\tMt-user\Documents\Sticky Passwords
2021-11-24 23:21 - 2021-11-24 23:21 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Lamantine
2021-11-24 23:20 - 2021-11-24 23:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Password
2021-11-24 23:20 - 2021-11-24 23:20 - 000000000 ____D C:\Program Files (x86)\Sticky Password
2021-11-24 22:56 - 2021-11-24 22:56 - 000000000 ____D C:\Users\tMt-user\AppData\Local\KeepSolid Inc
2021-11-24 22:54 - 2021-11-24 22:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VPN Unlimited
2021-11-23 18:41 - 2021-11-23 18:41 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-11-23 12:52 - 2021-12-08 09:39 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-11-20 23:10 - 2021-11-21 18:35 - 000000000 ___RD C:\Users\tMt-user\OneDrive - Univerzita Karlova
2021-11-19 14:03 - 2021-11-19 14:03 - 000000000 ____D C:\UserBenchmark

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-14 23:42 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-14 23:41 - 2017-07-08 04:29 - 000000000 ____D C:\Program Files (x86)\Google
2021-12-14 23:31 - 2019-10-04 07:08 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-12-14 23:18 - 2020-12-12 10:01 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Ferdi
2021-12-14 23:18 - 2020-10-12 02:41 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-14 23:18 - 2019-12-07 15:43 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2021-12-14 23:18 - 2019-12-07 15:43 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2021-12-14 23:18 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-12-14 23:15 - 2017-12-10 10:25 - 000000000 ___RD C:\Users\tMt-user\OneDrive - Fakulta humanitních studií
2021-12-14 23:15 - 2017-08-07 15:10 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Dropbox
2021-12-14 23:14 - 2017-07-23 16:02 - 000000000 ____D C:\ProgramData\NVIDIA
2021-12-14 23:14 - 2017-07-10 19:19 - 000000000 ____D C:\Users\tMt-user\AppData\Local\CrashDumps
2021-12-14 23:13 - 2020-10-12 02:31 - 000000000 ____D C:\Users\tMt-steam
2021-12-14 23:13 - 2020-10-12 02:31 - 000000000 ____D C:\Users\defaultuser0
2021-12-14 23:13 - 2020-05-25 19:32 - 003338240 _____ C:\Users\Public\Documents\bootracer.his
2021-12-14 23:13 - 2020-05-25 19:24 - 000001473 _____ C:\Users\Public\Documents\bootracer.ini
2021-12-14 23:11 - 2020-10-31 16:16 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-14 23:11 - 2020-10-12 02:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-12-14 23:11 - 2020-10-12 02:30 - 000427064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-12-14 23:11 - 2017-08-07 15:10 - 000000936 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-12-14 23:11 - 2017-07-08 04:27 - 000000000 ____D C:\ProgramData\AVAST Software
2021-12-14 23:10 - 2020-10-12 02:31 - 000000000 ____D C:\Users\tMt
2021-12-14 23:10 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-12-14 23:10 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-12-14 23:09 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-12-14 23:08 - 2021-11-01 00:35 - 000002998 _____ C:\WINDOWS\system32\Tasks\HotSwap! Applet
2021-12-14 23:08 - 2021-04-09 10:51 - 000000000 ____D C:\Users\tMt-user\AppData\Local\OpenShell
2021-12-14 23:08 - 2020-10-12 02:31 - 000000000 ____D C:\Users\tMt-user
2021-12-14 23:00 - 2020-10-12 02:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-12-14 22:44 - 2017-07-10 19:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-12-14 22:37 - 2020-10-20 17:25 - 000000000 ____D C:\Program Files\dotnet
2021-12-14 22:37 - 2017-07-10 19:22 - 137938848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-12-14 22:37 - 2017-07-07 21:33 - 000000000 ____D C:\ProgramData\Package Cache
2021-12-14 22:33 - 2017-07-10 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2021-12-14 20:51 - 2021-08-30 11:53 - 000002242 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - tMt-user
2021-12-14 20:51 - 2021-07-03 12:41 - 000002580 _____ C:\WINDOWS\system32\Tasks\CrystalDiskInfo
2021-12-14 20:51 - 2021-07-03 12:35 - 000003176 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-12-14 20:51 - 2020-10-14 17:58 - 000002314 _____ C:\WINDOWS\system32\Tasks\HWiNFO
2021-12-14 20:51 - 2020-10-12 08:59 - 000003318 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6a0382da61997
2021-12-14 20:51 - 2020-10-12 02:48 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-12-14 20:51 - 2020-10-12 02:48 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-12-14 20:51 - 2020-10-12 02:48 - 000003470 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1597678316
2021-12-14 20:51 - 2020-10-12 02:48 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-12-14 20:51 - 2020-10-12 02:48 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000003348 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2021-12-14 20:51 - 2020-10-12 02:48 - 000003288 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-12-14 20:51 - 2020-10-12 02:48 - 000003276 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1576927961
2021-12-14 20:51 - 2020-10-12 02:48 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-12-14 20:51 - 2020-10-12 02:48 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2866573575-4116515599-1814928747-1003
2021-12-14 20:51 - 2020-10-12 02:48 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002612 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-12-14 20:51 - 2020-10-12 02:48 - 000002428 _____ C:\WINDOWS\system32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}
2021-12-14 20:51 - 2020-10-12 02:48 - 000002144 _____ C:\WINDOWS\system32\Tasks\Crystal Disk Info
2021-12-14 20:51 - 2020-10-12 02:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2021-12-14 19:52 - 2017-07-11 18:33 - 000000000 ____D C:\Users\tMt-user\AppData\LocalLow\Mozilla
2021-12-14 18:37 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-14 18:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-14 13:56 - 2017-08-07 16:08 - 000000000 ____D C:\ProgramData\firebird
2021-12-14 08:26 - 2017-07-08 04:30 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-12-14 08:23 - 2020-10-12 02:48 - 000004234 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-12-14 08:23 - 2017-07-08 04:28 - 000000000 ____D C:\Program Files\Avast
2021-12-13 22:37 - 2019-01-30 00:35 - 000000000 ____D C:\ProgramData\Mozilla
2021-12-13 20:29 - 2020-07-09 18:10 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\qBittorrent
2021-12-13 19:16 - 2021-04-23 08:49 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Kiwi for Gmail
2021-12-13 09:51 - 2021-05-31 14:53 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Avast Software
2021-12-12 09:56 - 2020-06-08 07:24 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-12-11 22:07 - 2021-05-24 18:15 - 000000000 ____D C:\Users\tMt-user\Documents\PhraseExpress
2021-12-11 10:02 - 2020-09-21 17:19 - 000002389 _____ C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-12-10 22:38 - 2017-08-07 15:10 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-12-10 09:57 - 2017-11-02 18:14 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Packages
2021-12-10 00:33 - 2021-07-03 11:26 - 000000000 ____D C:\Program Files (x86)\Zotero
2021-12-10 00:33 - 2021-07-03 11:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-12-09 14:28 - 2020-10-12 10:00 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Deployment
2021-12-08 17:25 - 2021-06-25 14:32 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-12-08 09:59 - 2017-08-07 18:07 - 000000906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2021-12-08 09:55 - 2018-08-05 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2021-12-08 09:53 - 2021-07-09 13:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2021-12-08 09:48 - 2017-08-16 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2021-12-08 09:44 - 2020-05-31 20:41 - 000000000 ____D C:\Users\tMt-user\AppData\Local\ProtonVPN
2021-12-08 09:43 - 2021-07-09 11:05 - 000000748 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PicPick.lnk
2021-12-08 09:42 - 2021-07-29 08:55 - 000000000 ____D C:\Program Files\Audacity
2021-12-08 09:42 - 2021-07-09 13:13 - 000000871 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2021-12-08 09:41 - 2019-12-21 12:32 - 000000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2021-12-07 09:49 - 2020-10-12 02:31 - 000002396 _____ C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-12-05 09:19 - 2020-10-14 14:02 - 000185216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2021-12-05 09:19 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-12-05 09:19 - 2019-01-14 14:57 - 000368152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2021-12-05 09:19 - 2019-01-04 18:57 - 000251928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2021-12-05 09:19 - 2019-01-04 18:57 - 000099352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2021-12-05 09:19 - 2019-01-04 18:57 - 000035720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2021-12-05 09:19 - 2018-10-11 18:19 - 000041352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2021-12-05 09:19 - 2018-05-02 07:56 - 000852752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2021-12-05 09:19 - 2018-05-02 07:56 - 000544096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2021-12-05 09:19 - 2018-05-02 07:56 - 000317680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2021-12-05 09:19 - 2018-05-02 07:56 - 000222128 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2021-12-05 09:19 - 2018-05-02 07:56 - 000107848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2021-12-05 09:19 - 2018-05-02 07:56 - 000082912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2021-12-01 21:51 - 2020-11-07 11:44 - 000000000 ____D C:\_
2021-11-28 14:52 - 2020-01-03 11:13 - 000000000 ____D C:\Users\tMt-user\.android
2021-11-25 19:01 - 2018-05-06 00:22 - 000000000 ____D C:\Users\tMt-user\AppData\Local\D3DSCache
2021-11-23 18:42 - 2020-04-07 00:20 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Zoom
2021-11-20 23:39 - 2021-11-06 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inscryption [GOG.com]
2021-11-20 23:10 - 2021-09-25 20:35 - 000000000 ____D C:\Users\tMt-user\Documents\Rise of the Tomb Raider
2021-11-20 23:10 - 2020-04-18 11:01 - 000000000 ____D C:\Users\tMt-user\Documents\The Witcher 3
2021-11-20 23:10 - 2019-12-17 16:41 - 000000000 ____D C:\Users\tMt-user\Documents\Snagit
2021-11-20 23:10 - 2017-08-19 19:21 - 000000000 ____D C:\Users\tMt-user\Documents\Sound recordings
2021-11-20 23:10 - 2017-07-10 19:19 - 000000000 ___RD C:\Users\tMt-user\OneDrive
2021-11-20 22:04 - 2020-10-06 14:12 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Grammarly
2021-11-19 22:50 - 2018-06-20 22:57 - 000000000 ____D C:\ProgramData\Packages
2021-11-19 19:02 - 2020-04-18 08:44 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2021-11-19 19:02 - 2020-03-29 09:21 - 002224592 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2021-11-19 19:02 - 2020-03-29 09:21 - 000332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2021-11-19 19:02 - 2020-03-29 09:21 - 000217536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2021-11-19 19:02 - 2020-03-29 09:21 - 000197048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2021-11-19 19:02 - 2020-03-29 09:21 - 000061904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe
2021-11-15 09:23 - 2020-05-18 14:18 - 000000000 ____D C:\UPLOAD
2021-11-15 08:35 - 2017-08-07 15:10 - 000000932 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job

==================== Files in the root of some directories ========

2019-03-03 09:07 - 2020-01-24 21:04 - 000000151 _____ () C:\Users\tMt-user\AppData\Roaming\gcstar.log
2017-10-18 20:52 - 2017-10-22 13:18 - 000000516 _____ () C:\Users\tMt-user\AppData\Roaming\rftg
2018-03-14 00:44 - 2018-03-14 00:45 - 000000049 _____ () C:\Users\tMt-user\AppData\Roaming\~SiMPLEX.ini
2018-10-25 16:05 - 2018-10-25 16:05 - 000000000 _____ () C:\Users\tMt-user\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Přílohy
Addition.zip
(21.29 KiB) Staženo 54 x
Win10 Pro = Avast Free = Comodo Firewall Free
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118266
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zamrzání PC

#2 Příspěvek od Rudy »

Zdravím!
Spusřre tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
lastsaves
Návštěvník
Návštěvník
Příspěvky: 107
Registrován: 17 zář 2007 16:43

Re: Zamrzání PC

#3 Příspěvek od lastsaves »

Log níže.

# -------------------------------
# Malwarebytes AdwCleaner 8.3.1.0
# -------------------------------
# Build: 11-18-2021
# Database: 2021-12-02.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 12-15-2021
# Duration: 00:00:04
# OS: Windows 10 Pro
# Cleaned: 1
# Failed: 2


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

Deleted C:\END

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

Not Deleted Seznam doplněk - Email - bgjpfhpjcgdppjbgnpnjllokbmcdllig
Not Deleted Seznam doplněk - Esko - olfeabkoenfaoljndfecamgilllcpiak

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1561 octets] - [28/01/2021 23:29:08]
AdwCleaner[S01].txt - [1622 octets] - [15/12/2021 13:20:19]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
Win10 Pro = Avast Free = Comodo Firewall Free
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118266
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zamrzání PC

#4 Příspěvek od Rudy »

OK. Dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
lastsaves
Návštěvník
Návštěvník
Příspěvky: 107
Registrován: 17 zář 2007 16:43

Re: Zamrzání PC

#5 Příspěvek od lastsaves »

Log níže. Addition v příloze.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-12-2021
Ran by tMt-user (administrator) on TMT-DESKTOP (15-12-2021 17:29:56)
Running from C:\Users\tMt-user\OneDrive - Univerzita Karlova\Plocha
Loaded Profiles: tMt & tMt-user
Platform: Microsoft Windows 10 Pro Version 21H1 19043.1415 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Apps\IconGroups\x64\IconGroups.exe
() [File not signed] C:\Apps\OpenHardwareMonitor\OpenHardwareMonitor.exe
() [File not signed] C:\Apps\RBTray\RBTray.exe
() [File not signed] C:\Apps\Wondershare\MobileTrans\ElevationService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Alexandr Irza) [File not signed] C:\Apps\Volume2\Volume2.exe
(Amine Moufik -> Amine Mouafik) C:\Users\tMt-user\AppData\Local\Programs\ferdi\Ferdi.exe <10>
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Astonsoft Ltd. -> Astonsoft) C:\Apps\EssentialPIM Pro 9\EssentialPIM.exe <2>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast\wsc_proxy.exe
(Backblaze, Inc. -> ) C:\Program Files (x86)\Backblaze\bzbui.exe
(Backblaze, Inc. -> ) C:\Program Files (x86)\Backblaze\bzfilelist.exe
(Backblaze, Inc. -> ) C:\Program Files (x86)\Backblaze\bzserv.exe
(Bartels Media GmbH -> Bartels Media GmbH) C:\Apps\PhraseExpress\phraseexpress.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe <2>
(Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2>
(Ditto -> ) [File not signed] C:\Apps\Ditto\Ditto.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <4>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\138.3.2340\QtWebEngineProcess.exe <2>
(F.lux Software LLC -> f.lux Software LLC) C:\Users\tMt-user\AppData\Local\FluxSoftware\Flux\flux.exe
(Firebit OU -> Rainmeter) C:\Apps\Rainmeter\Rainmeter.exe
(GNE) [File not signed] C:\Apps\Dual Monitor Tools\DMT.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <30>
(Greatis Software LLC -> Greatis Software, LLC) C:\Apps\BootRacer\BootRacerServ.exe
(KARPOLAN) [File not signed] C:\Apps\Keyboard Leds\KeyboardLeds.exe
(Kazuyuki Nakayama) [File not signed] C:\Apps\HotSwap\HotSwap!.EXE
(KeepSolid Inc. -> KeepSolid Inc.) C:\Apps\VPN Unlimited\vpn-unlimited-daemon.exe
(Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Apps\Microsoft Office\Office15\POWERPNT.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\tMt-user\AppData\Local\Microsoft\Teams\current\Teams.exe <9>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(mik61 (independent software developer) -> mik61) [File not signed] [File is in use] C:\Apps\Gameplay Time Tracker\Support64.exe
(mik61 (independent software developer) -> mik61) [File not signed] C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\NVDisplay.Container.exe <2>
(Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World) C:\Apps\CrystalDiskInfo\DiskInfo64.exe <2>
(Open-Shell) [File not signed] C:\Apps\Open Shell\StartMenu.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Parsec Cloud, Inc. -> Parsec) C:\Program Files\Parsec\pservice.exe
(pCloud AG -> pCloud AG) C:\Program Files\pCloud Drive\pCloud.exe
(Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(Razer USA Ltd. -> Razer Inc.) C:\Apps\Razer\Razer Cortex\RzKLService.exe
(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SOFTPERFECT PTY. LTD. -> SoftPerfect) C:\Apps\Networx\networx.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Apps\TeamViewer\TeamViewer_Service.exe
(Tonalio GmbH -> sandboxie-plus.com) C:\Apps\Sandboxie-Plus\SandMan.exe
(Tonalio GmbH -> sandboxie-plus.com) C:\Apps\Sandboxie-Plus\SbieSvc.exe
(voidtools -> voidtools) C:\Apps\Everything\Everything.exe <2>
(WDC) [File not signed] C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe
(zett42) [File not signed] C:\Apps\FlashFolder\FlashFolder.exe
(zett42) [File not signed] C:\Apps\FlashFolder\FlashFolder64.exe <2>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast\AvLaunch.exe [157464 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [NetWorx] => C:\Apps\Networx\networx.exe [7627080 2016-09-24] (SOFTPERFECT PTY. LTD. -> SoftPerfect)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412736 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [CANON P150 SVC] => C:\Windows\system32\P150SVC.dll [181760 2009-12-16] (Canon Electronics) [File not signed]
HKLM\...\Run: [MTPW] => C:\Apps\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> )
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8838400 2016-06-07] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Open-Shell Start Menu] => C:\Apps\Open Shell\StartMenu.exe [216576 2020-09-26] (Open-Shell) [File not signed]
HKLM\...\Run: [Everything] => C:\Apps\Everything\Everything.exe [2261600 2021-05-12] (voidtools -> voidtools)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8807200 2021-12-10] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Acrotray.exe [1996512 2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [RazerCortex] => C:\Apps\Razer\Razer Cortex\CortexLauncher.exe [267072 2021-03-31] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-09-27] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [AutoAD] => C:\Apps\Wondershare\MobileTrans\AutoAD.exe [73224 2021-11-24] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Apps\Opera\assistant\browser_assistant.exe [4112592 2021-12-02] (Opera Software AS -> Opera Software)
HKLM\...\Policies\Explorer\Run: [BootRacer] => C:\Apps\BootRacer\bootrace.exe [9519440 2021-01-26] (Greatis Software LLC -> Greatis Software)
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 1
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 1
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 1
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 1
HKU\S-1-5-21-2866573575-4116515599-1814928747-1002\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [1174808 2021-07-07] (Backblaze, Inc. -> )
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [f.lux] => C:\Users\tMt-user\AppData\Local\FluxSoftware\Flux\flux.exe [1515848 2021-06-18] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [GameplayTimeTracker] => C:\Apps\Gameplay Time Tracker\GameplayTimeTracker.exe [932472 2018-09-17] (mik61 (independent software developer) -> mik61) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Adobe Acrobat Synchronizer] => C:\Apps\Adobe Acrobat Pro 2017\Acrobat\AdobeCollabSync.exe [886496 2021-10-05] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [112191904 2021-12-06] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [EssentialPIM Pro Portable] => C:\Apps\EssentialPIM Pro 9\EssentialPIM.exe [12368464 2021-12-11] (Astonsoft Ltd. -> Astonsoft)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [1174808 2021-07-07] (Backblaze, Inc. -> )
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Ditto] => C:\Apps\Ditto\Ditto.exe [1717872 2012-11-08] (Ditto -> ) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [KeyboardLeds.exe] => C:\Apps\Keyboard Leds\KeyboardLeds.exe [912896 2012-09-06] (KARPOLAN) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [pCloud] => C:\Program Files\pCloud Drive\pCloud.exe [3720424 2020-05-29] (pCloud AG -> pCloud AG)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\tMt-user\AppData\Local\Microsoft\Teams\Update.exe [2459304 2021-12-11] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [GNE_DualMonitorTools] => C:\Apps\Dual Monitor Tools\DMT.exe [796160 2018-06-04] (GNE) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [Ferdi] => C:\Users\tMt-user\AppData\Local\Programs\ferdi\Ferdi.exe [136400840 2021-07-18] (Amine Moufik -> Amine Mouafik)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [VOLUME2] => C:\Apps\Volume2\Volume2.exe [4350464 2021-02-14] (Alexandr Irza) [File not signed]
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [SandboxiePlus_AutoRun] => C:\Apps\Sandboxie-Plus\SandMan.exe [1110032 2021-08-08] (Tonalio GmbH -> sandboxie-plus.com)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\Run: [AutoAD] => C:\Apps\Wondershare\MobileTrans\AutoAD.exe [73224 2021-11-24] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c19-05d1-11ec-95db-5cf3708ef908} - "J:\Setup.exe"
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c2b-05d1-11ec-95db-5cf3708ef908} - "M:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493f27-05d1-11ec-95db-5cf3708ef908} - "J:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {630a72da-1940-11eb-9544-5cf3708ef908} - "O:\setup.exe"
HKU\S-1-5-18\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [1174808 2021-07-07] (Backblaze, Inc. -> )
HKLM\...\Windows x64\Print Processors\XRXS1PC: C:\Windows\System32\spool\prtprocs\x64\xrxs1pc.dll [33792 2007-02-23] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Server 2003 DDK provider)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65176 2021-05-24] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\PDF-XChange V6 Printer Port Monitor (Lite): C:\WINDOWS\system32\pxcpm5L.dll [150720 2017-06-29] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\us008 Langmon: C:\Windows\system32\us008lm.dll [31256 2016-02-15] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\96.0.4664.110\Installer\chrmstp.exe [2021-12-14] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MTWSAndroidAppHelper.lnk [2021-11-27]
ShortcutTarget: MTWSAndroidAppHelper.lnk -> C:\Apps\Wondershare\MobileTrans\WSAndroidAppHelper.exe (Wondershare Technology Co.,Ltd -> Microsoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MTWSAppHelper.lnk [2021-11-27]
ShortcutTarget: MTWSAppHelper.lnk -> C:\Apps\Wondershare\MobileTrans\WSAppHelper.exe (Wondershare Technology Co.,Ltd -> Microsoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk [2021-05-24]
ShortcutTarget: PhraseExpress.lnk -> C:\Apps\PhraseExpress\phraseexpress.exe (Bartels Media GmbH -> Bartels Media GmbH)
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk [2021-10-07]
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Apps\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2021-04-16]
ShortcutTarget: Rainmeter.lnk -> C:\Apps\Rainmeter\Rainmeter.exe (Firebit OU -> Rainmeter)
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RBTray.lnk [2017-08-22]
ShortcutTarget: RBTray.lnk -> C:\Apps\RBTray\RBTray.exe () [File not signed]
Startup: C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VeBest Icon Groups.lnk [2020-05-25]
ShortcutTarget: VeBest Icon Groups.lnk -> C:\Apps\IconGroups\IconGroups.exe () [File not signed]
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0399E6AA-61DF-481F-A77D-7C3E52EB6C7A} - System32\Tasks\Zotero => C:\Apps\Zotero\zotero.exe [255336 2021-09-19] (Corporation for Digital Scholarship -> Corporation for Digital Scholarship)
Task: {0C879D8A-AC1B-4355-8FB1-721867E4BBE6} - System32\Tasks\HWiNFO => C:\Apps\HWInfo\HWiNFO64.exe [6184480 2021-10-29] (Martin Malik - REALiX -> REALiX)
Task: {14812791-2116-4D3F-8617-49A6F54D6AF0} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {194B9C7E-AE7D-4ECA-A28C-C56006DE0702} - System32\Tasks\CCleaner Update => C:\Apps\CCleaner\CCUpdate.exe [684976 2021-11-12] (Piriform Software Ltd -> Piriform)
Task: {1CE8CC16-2FE2-4159-9B44-F7840784353D} - System32\Tasks\HotSwap! Applet => C:\Apps\HotSwap\HotSwap!.EXE [219648 2019-01-07] (Kazuyuki Nakayama) [File not signed]
Task: {21843DAC-FD32-4158-A9E1-135EA66A1BF2} - System32\Tasks\Opera scheduled Autoupdate 1576927961 => C:\Apps\Opera\launcher.exe [1753808 2021-12-02] (Opera Software AS -> Opera Software)
Task: {23E29B3A-91D8-4EDF-A233-02A52BDD1241} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {244FD7EC-1966-43CE-991F-732189C82EBE} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {25BA9DA9-7394-4551-8C20-E0EAAE874445} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1790184 2021-04-29] (Avast Software s.r.o. -> Avast Software)
Task: {2BE52439-90FF-448D-9603-DEA7E083113B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Task: {2F3B9968-A678-4B97-9684-16D294663C4A} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {32E29CF4-8429-4B89-813D-9D4A22DBC131} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {330B445E-8CDB-46EC-89F0-4D3B018F9C52} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (No File)
Task: {36D86ED2-5119-48A7-9458-4D54E8B5CD58} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3C8C87BB-4D1E-4951-909E-89B051CD9A63} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {4F56E544-B7F3-4C84-9371-C19B4458AEC3} - System32\Tasks\Mozilla\Firefox Background Update 87BE11929858F73 => C:\Apps\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\87BE11929858F73\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {50442DE0-F3D0-4D8F-8115-D882054DE9D2} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {58B397D2-6D3B-4803-85B8-F86D0DDFB71B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5981E631-0BE6-44C4-B7BB-57B947816E13} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A644220-9EAC-498D-8669-8AB23A1EC5D3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {621829BF-F294-4298-A53C-631C16DAC10E} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {6512CDBB-8527-4772-9A34-A47BEC22DEBA} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6AE78B1F-6BC8-49FD-ABE1-AC64004DA7A4} - System32\Tasks\WD Discovery Service Task tmt-user => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [75504 2019-11-29] (Western Digital Technologies, Inc. -> )
Task: {7308D9FE-D213-449D-9B94-E6FDFB309B32} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {77EE2F02-5F89-474A-9EA5-C85EF2DE761B} - System32\Tasks\CrystalDiskInfo => C:\Apps\CrystalDiskInfo\DiskInfo64.exe [2799136 2021-07-11] (Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World)
Task: {7B6D526E-862A-49E6-B5FA-8AA31718B356} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {88A2F643-69DF-446B-B49A-23E6BBB12223} - System32\Tasks\OpenHardwareMonitor => C:\Apps\OpenHardwareMonitor\OpenHardwareMonitor.exe [493568 2020-12-27] () [File not signed]
Task: {89A4DBDD-7FBC-4E35-A315-EE7CA464FB9B} - System32\Tasks\CCleanerSkipUAC - tMt-user => C:\Apps\CCleaner\CCleaner.exe [29417088 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {8DEBCEE4-E236-4CC3-9930-6EDE3160BEC8} - System32\Tasks\Opera scheduled assistant Autoupdate 1597678316 => C:\Apps\Opera\launcher.exe [1753808 2021-12-02] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Apps\Opera\assistant" $(Arg0)
Task: {910461A0-666E-4794-8064-F65191AF79B4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Task: {95CD6496-7938-4491-BAAE-9F0FEF967A17} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {973F6195-877C-4732-9074-490C3DD8AADD} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {9E1D9698-7DBE-4472-BC2A-A59887D1D394} - System32\Tasks\Mozilla\Firefox Default Browser Agent 87BE11929858F73 => C:\Apps\Mozilla Firefox\default-browser-agent.exe do-task "87BE11929858F73"
Task: {A5868E96-18B9-4A54-92FF-3DDB5E58B1BF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {BAF5B6E7-035E-4E02-A93C-306F7B1D4A5F} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13190952 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {C6F65990-74FC-4ADB-9137-7D10166E581F} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast\AvEmUpdate.exe [4969240 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
Task: {CA2C15C8-F967-47E9-82CD-DDF09DFBAECA} - System32\Tasks\WD Device Agent Task tmt-user => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [720624 2019-11-29] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {D03C9E07-7E75-472E-BE8B-3F7A5AA5A05A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D5468748-8F99-4C47-881A-D260B84FB6AA} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {E0B66F5A-E673-4B5D-A19B-6477ADAD8932} - System32\Tasks\Crystal Disk Info => C:\Apps\CrystalDiskInfo\DiskInfo64.exe [2799136 2021-07-11] (Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World)
Task: {E6165D36-206C-4272-B813-01505ED33EF6} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E94834FC-00B1-48A2-B1EE-511011FBED2F} - System32\Tasks\Open Hardware Monitor\Startup => C:\Apps\OpenHardwareMonitor\OpenHardwareMonitor.exe [493568 2020-12-27] () [File not signed]
Task: {EA0916D4-4D3C-4553-A93C-D3CF001C5C33} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5758488 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
Task: {EC8BA3EE-54C4-4BC5-831B-CF41C5D47656} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {F9C789DF-56EC-462A-8F3D-BD968F986B9A} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412736 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {FF548FCF-FC3B-4A75-9258-3911549EBB57} - System32\Tasks\MiniToolPartitionWizard => C:\Apps\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> )

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{178072c6-a771-417b-b35b-66f5192e2773}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{759d83ac-f5e0-c89b-38c2-ca581e218a0c}: [NameServer] 10.100.0.1
Tcpip\..\Interfaces\{8b2477d5-720d-47d5-a5f1-e61b2a4b8fe2}: [DhcpNameServer] 192.168.42.129

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\tMt-user\AppData\Local\Microsoft\Edge\User Data\Default [2021-11-10]

FireFox:
========
FF DefaultProfile: mdjzqrib.default
FF DefaultProfile: 6uiofy8v.default-1625836185525
FF ProfilePath: C:\Users\tMt-user\AppData\Roaming\Zotero\Zotero\Profiles\mdjzqrib.default [2021-11-30]
FF Extension: (ZotFile) - C:\Users\tMt-user\AppData\Roaming\Zotero\Zotero\Profiles\mdjzqrib.default\Extensions\zotfile@columbia.edu.xpi [2020-02-06] [Legacy] [not signed]
FF ProfilePath: C:\Users\tMt-user\AppData\Roaming\Mozilla\Firefox\Profiles\0chh25ol.default-release [2021-11-10]
FF ProfilePath: C:\Users\tMt-user\AppData\Roaming\Mozilla\Firefox\Profiles\6uiofy8v.default-1625836185525 [2021-12-13]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin-x32: @java.com/DTPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\dtplugin\npDeployJava1.dll [2021-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\plugin2\npjp2.dll [2021-10-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Apps\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Apps\Adobe Acrobat Pro 2017\Acrobat\Air\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
StartMenuInternet: Firefox-87BE11929858F73 - C:\Apps\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default [2021-12-15]
CHR Notifications: Default -> hxxps://fitgirl-repacks.site; hxxps://meet.google.com; hxxps://my.pcloud.com; hxxps://steamcommunity.com; hxxps://topflownews.com; hxxps://trello.com
CHR HomePage: Default -> hxxp://www.google.com
CHR Extension: (Překladač Google) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-08-15]
CHR Extension: (Prezentace) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-17]
CHR Extension: (Bookmark Favicon Changer) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmfnomgphggonodopogfbmkneepfgnh [2018-09-12]
CHR Extension: (Incognito This!) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aglfgiceepbeffbpmlohbdnhmliojinm [2019-02-16]
CHR Extension: (Dokumenty) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-17]
CHR Extension: (Disk Google) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (Seznam doplněk - Email) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2020-04-06]
CHR Extension: (WOT – zabezpečení webových stránek a ochrana pro bezpečné procházení) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2021-11-26]
CHR Extension: (Block Sender) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklnjbfcmglhiaoppcckdodanccbelcg [2020-12-23]
CHR Extension: (YouTube) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-10]
CHR Extension: (uBlock Origin) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-12-03]
CHR Extension: (Adobe Acrobat) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-11-17]
CHR Extension: (Zotero Connector) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekhagklcjbdpajgpjgmbionohlpdbjgc [2021-08-19]
CHR Extension: (Urban Free VPN proxy Unblocker - Best VPN) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon [2021-12-15]
CHR Extension: (Youtube Subtitle Downloader) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\falajjjalaffofcbkhgdemihkpllibom [2021-11-14]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2021-06-28]
CHR Extension: (Tabulky) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-17]
CHR Extension: (HTTPS Everywhere) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2021-07-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-12-01]
CHR Extension: (Power Thesaurus) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhnjkanigjoiglnlopahbbjdbfhkndjk [2021-11-20]
CHR Extension: (Undo Closed Tabs Button) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieehkmoiljghfkejgahoheemdjpdinml [2021-09-14]
CHR Extension: (Boční lišta zálloh) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdbnofccmhefkmjbkkdkfiicjkgofkdh [2021-12-13]
CHR Extension: (Grammarly for Chrome) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2021-12-15]
CHR Extension: (Download Statusbar) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfjkodkjnmdeookccjmcdbhhpbgkoche [2020-05-29]
CHR Extension: (Social Video Downloader) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfnnoammpigcglgbhcbbdpnekbcddahe [2021-02-10]
CHR Extension: (Tlačítko Google Scholar) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldipcbpaocekfooobnbcddclnhejkcpn [2021-02-22]
CHR Extension: (Decentraleyes) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpochfccmkkmhdbclfhpagapcfdljkj [2021-09-09]
CHR Extension: (Change Case) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpakoahdokkkonadfppfgmednkknpgbm [2019-12-15]
CHR Extension: (Citace PRO) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncpfaidppllikakgbjppnjfidjkpafmp [2020-04-21]
CHR Extension: (Save to Pocket) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2021-11-10]
CHR Extension: (Message/Chat Downloader) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkinapjekllgfipphkgpmombekfclghe [2021-04-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Subtitles For YouTube) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oanhbddbfkjaphdibnebkklpplclomal [2021-07-03]
CHR Extension: (Context Menu Search) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocpcmghnefmdhljkoiapafejjohldoga [2017-08-18]
CHR Extension: (Charset) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oenllhgkiiljibhfagbfogdbchhdchml [2021-04-22]
CHR Extension: (Seznam doplněk - Esko) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2020-04-06]
CHR Extension: (Shindig Screen Share) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpphkjkpobfpkckdilgkemcjklfidbj [2020-06-03]
CHR Extension: (Gmail) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Privacy Badger) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2021-11-27]
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-12-15]
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1 [2021-11-30]
CHR Extension: (Prezentace) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-04-16]
CHR Extension: (Dokumenty) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2021-04-16]
CHR Extension: (Disk Google) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-04-16]
CHR Extension: (YouTube) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-04-16]
CHR Extension: (Adobe Acrobat) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-11-29]
CHR Extension: (Tabulky) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-04-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-16]
CHR Extension: (Gmail) - C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-04-16]
CHR Profile: C:\Users\tMt-user\AppData\Local\Google\Chrome\User Data\System Profile [2021-12-15]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

Opera:
=======
OPR Profile: C:\Users\tMt-user\AppData\Roaming\Opera Software\Opera Stable [2021-12-08]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=o ... utEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\tMt-user\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-12-01]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\tMt-user\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-10-03]
StartMenuInternet: (HKLM) OperaStable - C:\Apps\Opera\Launcher.exe

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3833088 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3603200 2021-09-07] (Adobe Inc. -> Adobe Systems, Incorporated)
S2 AODService; C:\Apps\AMD OverDrive\AODAssist.exe [137584 2014-01-08] (Advanced Micro Devices, Inc. -> )
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-03-16] (Apple Inc. -> Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast\aswidsagent.exe [8480848 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast\AvastSvc.exe [452888 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast\aswToolsSvc.exe [452888 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast\wsc_proxy.exe [56912 2021-05-28] (Avast Software s.r.o. -> AVAST Software)
R2 BootRacerServ; C:\Apps\BootRacer\BootRacerServ.exe [97352 2020-09-23] (Greatis Software LLC -> Greatis Software, LLC)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2020-03-22] (BitRaider LLC -> BitRaider, LLC)
R2 bzserv; C:\Program Files (x86)\Backblaze\bzserv.exe [609560 2021-07-07] (Backblaze, Inc. -> )
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44328 2021-12-10] (Dropbox, Inc -> Dropbox, Inc.)
R2 ElevationService; C:\Apps\Wondershare\MobileTrans\ElevationService.exe [913408 2021-10-28] () [File not signed]
R2 Everything; C:\Apps\Everything\Everything.exe [2261600 2021-05-12] (voidtools -> voidtools)
R2 FlashFolder; C:\Apps\FlashFolder\FlashFolder64.exe [596992 2012-07-21] (zett42) [File not signed]
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [1044176 2019-01-29] (Comodo Security Solutions, Inc. -> COMODO)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-06-12] (Logitech Inc -> Logitech)
R2 Parsec; C:\Program Files\Parsec\pservice.exe [364048 2020-05-19] (Parsec Cloud, Inc. -> Parsec)
S3 ProtonVPN Service; C:\Apps\ProtonVPN\ProtonVPNService.exe [115816 2021-11-15] (Proton Technologies AG -> )
S3 ProtonVPN Update Service; C:\Apps\ProtonVPN\ProtonVPN.UpdateService.exe [65128 2021-11-15] (Proton Technologies AG -> )
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [254224 2021-03-22] (Razer USA Ltd. -> Razer Inc)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533808 2021-01-29] (Razer USA Ltd. -> Razer Inc.)
R2 RzKLService; C:\Apps\Razer\Razer Cortex\RzKLService.exe [291320 2021-03-31] (Razer USA Ltd. -> Razer Inc.)
R2 SbieSvc; C:\Apps\Sandboxie-Plus\SbieSvc.exe [334352 2021-08-08] (Tonalio GmbH -> sandboxie-plus.com)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6138112 2021-12-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Apps\TeamViewer\TeamViewer_Service.exe [12912936 2021-11-16] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
U2 VPNUnlimitedService; C:\Apps\VPN Unlimited\vpn-unlimited-daemon.exe [47128 2021-10-26] (KeepSolid Inc. -> KeepSolid Inc.)
R2 WDBtnMgrSvc.exe; C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [119296 2012-05-01] (WDC) [File not signed]
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [366720 2019-11-25] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WireGuardTunnel$VPNUWireguard; C:\Apps\VPN Unlimited\WireVPNUImpl.exe [26648 2021-10-26] (KeepSolid Inc. -> )
R2 WsAppService3; C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe [83232 2019-06-26] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3.0; C:\Apps\AMD OverDrive\amd64\AODDriver2.sys [59624 2014-01-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [36784 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [223176 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [369216 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [252992 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [100416 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [21936 2021-09-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42416 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [186280 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [108912 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83976 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [853800 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [545176 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [215432 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [318760 2021-12-15] (Avast Software s.r.o. -> AVAST Software)
R1 cbfsconnect2017; C:\WINDOWS\system32\drivers\cbfsconnect2017.sys [480272 2019-10-07] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
S0 cmdboot; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [17576 2019-10-23] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 dtproscsibus; C:\WINDOWS\System32\drivers\dtproscsibus.sys [30352 2016-07-27] (Disc Soft Ltd -> Disc Soft Ltd)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO)
S3 ioFakDrv; C:\WINDOWS\System32\drivers\ioFakDrv.sys [23936 2010-12-15] (KYE SYSTEMS CORP. -> KYE System Corp.)
S3 ioFakMap; C:\WINDOWS\System32\drivers\ioFakMap.sys [12672 2010-12-15] (KYE SYSTEMS CORP. -> KYE System Corp.)
S3 ioTablet; C:\WINDOWS\System32\drivers\ioTablet.sys [35328 2012-04-05] (Microsoft Windows Hardware Compatibility Publisher -> KYE System Corp.)
S3 ioTblMap; C:\WINDOWS\System32\drivers\ioTblMap.sys [13200 2011-08-25] (KYE SYSTEMS CORP. -> KYE System Corp.)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [63256 2018-08-29] (Comodo Security Solutions, Inc. -> COMODO)
S3 ProtonVPNCallout; C:\Apps\ProtonVPN\x64\Win10\ProtonVPN.CalloutDriver.sys [34176 2021-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 SbieDrv; C:\Apps\Sandboxie-Plus\SbieDrv.sys [225264 2021-08-08] (Microsoft Windows Hardware Compatibility Publisher -> sandboxie-plus.com)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [45024 2019-03-14] (ExprsVPN LLC -> The OpenVPN Project)
R3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2020-12-30] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2021-02-23] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2020-01-10] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [20704 2019-03-01] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R1 wdfsconnect2017; C:\WINDOWS\system32\drivers\wdfsconnect2017.sys [468112 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 wdvpnpbus; C:\WINDOWS\System32\drivers\wdvpnpbus.sys [20624 2017-11-21] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies, Inc.)
R3 WinRing0_1_2_0; C:\Apps\OpenHardwareMonitor\OpenHardwareMonitorLib.sys [14544 2021-12-15] (Noriyuki MIYAZAKI -> OpenLibSys.org)
R3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [29680 2021-11-14] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-15 14:03 - 2021-12-15 14:03 - 000000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-
2021-12-15 13:36 - 2021-12-15 13:36 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2021-12-15 13:35 - 2021-12-15 13:35 - 000340248 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2021-12-15 13:35 - 2021-12-15 13:35 - 000215432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2021-12-14 23:10 - 2021-12-14 23:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-14 23:06 - 2021-12-15 00:36 - 000000000 ____D C:\aa
2021-12-14 23:05 - 2021-12-14 23:05 - 000011979 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-12-14 23:04 - 2021-12-14 23:04 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-14 23:04 - 2021-12-14 23:04 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-14 23:04 - 2021-12-14 23:04 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-12-14 22:45 - 2021-12-14 22:45 - 000000000 ___HD C:\$WinREAgent
2021-12-14 21:00 - 2021-12-15 17:30 - 000000000 ____D C:\FRST
2021-12-14 17:17 - 2021-12-14 17:17 - 000001150 _____ C:\Users\tMt-user\Downloads\meetingAttendanceList (1).csv
2021-12-14 17:02 - 2021-12-14 17:02 - 000000664 _____ C:\Users\tMt-user\Downloads\meetingAttendanceList.csv
2021-12-11 11:10 - 2021-12-15 01:30 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2866573575-4116515599-1814928747-1003
2021-12-10 22:38 - 2021-12-10 22:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-12-10 01:27 - 2021-12-10 01:27 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-12-10 01:27 - 2021-12-10 01:27 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-12-10 01:27 - 2021-12-10 01:27 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-12-10 01:27 - 2021-12-10 01:27 - 000044328 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-12-09 22:45 - 2021-12-09 22:45 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\fltk.org
2021-12-09 22:45 - 2021-12-09 22:45 - 000000000 ____D C:\ProgramData\fltk.org
2021-12-08 09:55 - 2021-12-08 09:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2021-12-08 09:44 - 2021-12-08 09:44 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Proton Technologies AG
2021-12-08 09:44 - 2021-12-08 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProtonVPN
2021-12-02 08:35 - 2021-12-02 08:36 - 000088634 _____ C:\Users\tMt-user\Downloads\label_1154153082.pdf
2021-11-28 10:32 - 2021-11-28 10:32 - 000000000 ____D C:\ProgramData\WsAppHelper
2021-11-27 23:16 - 2021-11-27 23:16 - 000000016 _____ C:\ProgramData\mntemp
2021-11-27 23:16 - 2021-11-27 23:16 - 000000000 ____D C:\Users\tMt-user\Documents\Wondershare
2021-11-27 23:15 - 2021-11-28 14:55 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Wondershare
2021-11-27 23:15 - 2021-11-27 23:15 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\MobileBackupForeverIni
2021-11-27 23:13 - 2021-11-28 14:51 - 000000000 ____D C:\ProgramData\Wondershare
2021-11-27 23:13 - 2021-11-27 23:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2021-11-27 23:13 - 2021-11-27 23:15 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Wondershare
2021-11-27 23:13 - 2021-11-27 23:13 - 000000000 ____D C:\Program Files (x86)\Wondershare
2021-11-27 23:11 - 2021-12-11 18:15 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2021-11-27 17:17 - 2021-11-27 17:17 - 000034795 _____ C:\Users\tMt-user\Downloads\claim-report.pdf
2021-11-27 17:17 - 2021-11-27 17:17 - 000034795 _____ C:\Users\tMt-user\Downloads\claim-report(1).pdf
2021-11-24 23:21 - 2021-11-29 09:22 - 000000000 ____D C:\Users\tMt-user\Documents\Sticky Passwords
2021-11-24 23:21 - 2021-11-24 23:21 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Lamantine
2021-11-24 23:20 - 2021-11-24 23:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Password
2021-11-24 23:20 - 2021-11-24 23:20 - 000000000 ____D C:\Program Files (x86)\Sticky Password
2021-11-24 22:56 - 2021-11-24 22:56 - 000000000 ____D C:\Users\tMt-user\AppData\Local\KeepSolid Inc
2021-11-24 22:54 - 2021-11-24 22:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VPN Unlimited
2021-11-23 18:41 - 2021-11-23 18:41 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-11-23 12:52 - 2021-12-08 09:39 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-11-20 23:10 - 2021-11-21 18:35 - 000000000 ___RD C:\Users\tMt-user\OneDrive - Univerzita Karlova
2021-11-19 14:03 - 2021-11-19 14:03 - 000000000 ____D C:\UserBenchmark

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-15 17:28 - 2021-04-09 10:51 - 000000000 ____D C:\Users\tMt-user\AppData\Local\OpenShell
2021-12-15 17:28 - 2020-10-12 02:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-12-15 16:52 - 2017-07-11 18:33 - 000000000 ____D C:\Users\tMt-user\AppData\LocalLow\Mozilla
2021-12-15 16:43 - 2019-10-04 07:08 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-12-15 16:40 - 2017-07-08 04:29 - 000000000 ____D C:\Program Files (x86)\Google
2021-12-15 15:27 - 2021-04-23 08:49 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Kiwi for Gmail
2021-12-15 14:33 - 2020-12-12 10:01 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Ferdi
2021-12-15 14:32 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-15 14:09 - 2020-10-12 02:41 - 001693140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-15 14:09 - 2019-12-07 15:43 - 000716770 _____ C:\WINDOWS\system32\perfh005.dat
2021-12-15 14:09 - 2019-12-07 15:43 - 000144948 _____ C:\WINDOWS\system32\perfc005.dat
2021-12-15 14:09 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-12-15 14:06 - 2017-12-10 10:25 - 000000000 ___RD C:\Users\tMt-user\OneDrive - Fakulta humanitních studií
2021-12-15 14:06 - 2017-08-07 15:10 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Dropbox
2021-12-15 14:05 - 2017-08-07 16:08 - 000000000 ____D C:\ProgramData\firebird
2021-12-15 14:04 - 2017-07-23 16:02 - 000000000 ____D C:\ProgramData\NVIDIA
2021-12-15 14:04 - 2017-07-10 19:19 - 000000000 ____D C:\Users\tMt-user\AppData\Local\CrashDumps
2021-12-15 14:03 - 2020-05-25 19:32 - 003346432 _____ C:\Users\Public\Documents\bootracer.his
2021-12-15 14:03 - 2020-05-25 19:24 - 000001474 _____ C:\Users\Public\Documents\bootracer.ini
2021-12-15 14:02 - 2020-10-31 16:16 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-15 14:02 - 2020-10-12 02:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-12-15 14:02 - 2017-08-07 15:10 - 000000936 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-12-15 14:02 - 2017-07-08 04:28 - 000000000 ____D C:\Program Files\Avast
2021-12-15 14:02 - 2017-07-08 04:27 - 000000000 ____D C:\ProgramData\AVAST Software
2021-12-15 14:01 - 2020-10-12 02:31 - 000000000 ____D C:\Users\tMt-steam
2021-12-15 14:01 - 2020-10-12 02:31 - 000000000 ____D C:\Users\defaultuser0
2021-12-15 14:01 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-12-15 13:35 - 2020-10-14 14:02 - 000186280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2021-12-15 13:35 - 2020-10-12 02:48 - 000003960 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-12-15 13:35 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-12-15 13:35 - 2019-01-14 14:57 - 000369216 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2021-12-15 13:35 - 2019-01-04 18:57 - 000252992 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2021-12-15 13:35 - 2019-01-04 18:57 - 000100416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2021-12-15 13:35 - 2019-01-04 18:57 - 000036784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2021-12-15 13:35 - 2018-10-11 18:19 - 000042416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2021-12-15 13:35 - 2018-05-02 07:56 - 000853800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2021-12-15 13:35 - 2018-05-02 07:56 - 000545176 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2021-12-15 13:35 - 2018-05-02 07:56 - 000318760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2021-12-15 13:35 - 2018-05-02 07:56 - 000223176 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2021-12-15 13:35 - 2018-05-02 07:56 - 000108912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2021-12-15 13:35 - 2018-05-02 07:56 - 000083976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2021-12-15 13:20 - 2021-01-28 23:25 - 000000000 ____D C:\AdwCleaner
2021-12-15 11:24 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-15 11:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-15 11:23 - 2020-04-18 08:44 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2021-12-15 11:23 - 2020-03-29 09:21 - 002225640 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2021-12-15 11:23 - 2020-03-29 09:21 - 000333288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2021-12-15 11:23 - 2020-03-29 09:21 - 000217536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2021-12-15 11:23 - 2020-03-29 09:21 - 000197048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2021-12-15 11:23 - 2020-03-29 09:21 - 000062952 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe
2021-12-15 01:31 - 2021-11-01 00:35 - 000002998 _____ C:\WINDOWS\system32\Tasks\HotSwap! Applet
2021-12-15 01:30 - 2021-08-30 11:53 - 000002242 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - tMt-user
2021-12-15 01:30 - 2021-07-03 12:41 - 000002580 _____ C:\WINDOWS\system32\Tasks\CrystalDiskInfo
2021-12-15 01:30 - 2021-07-03 12:35 - 000003176 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-12-15 01:30 - 2020-10-14 17:58 - 000002314 _____ C:\WINDOWS\system32\Tasks\HWiNFO
2021-12-15 01:30 - 2020-10-12 08:59 - 000003318 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6a0382da61997
2021-12-15 01:30 - 2020-10-12 02:48 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-12-15 01:30 - 2020-10-12 02:48 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-12-15 01:30 - 2020-10-12 02:48 - 000003470 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1597678316
2021-12-15 01:30 - 2020-10-12 02:48 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-12-15 01:30 - 2020-10-12 02:48 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000003348 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2021-12-15 01:30 - 2020-10-12 02:48 - 000003288 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-12-15 01:30 - 2020-10-12 02:48 - 000003276 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1576927961
2021-12-15 01:30 - 2020-10-12 02:48 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-12-15 01:30 - 2020-10-12 02:48 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2866573575-4116515599-1814928747-1003
2021-12-15 01:30 - 2020-10-12 02:48 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002612 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-12-15 01:30 - 2020-10-12 02:48 - 000002428 _____ C:\WINDOWS\system32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}
2021-12-15 01:30 - 2020-10-12 02:48 - 000002144 _____ C:\WINDOWS\system32\Tasks\Crystal Disk Info
2021-12-15 01:04 - 2020-10-12 02:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2021-12-14 23:11 - 2020-10-12 02:30 - 000427064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-12-14 23:10 - 2020-10-12 02:31 - 000000000 ____D C:\Users\tMt
2021-12-14 23:10 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-12-14 23:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-12-14 23:09 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-12-14 23:08 - 2020-10-12 02:31 - 000000000 ____D C:\Users\tMt-user
2021-12-14 22:44 - 2017-07-10 19:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-12-14 22:37 - 2020-10-20 17:25 - 000000000 ____D C:\Program Files\dotnet
2021-12-14 22:37 - 2017-07-10 19:22 - 137938848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-12-14 22:37 - 2017-07-07 21:33 - 000000000 ____D C:\ProgramData\Package Cache
2021-12-14 22:33 - 2017-07-10 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2021-12-14 08:26 - 2017-07-08 04:30 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-12-13 22:37 - 2019-01-30 00:35 - 000000000 ____D C:\ProgramData\Mozilla
2021-12-13 20:29 - 2020-07-09 18:10 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\qBittorrent
2021-12-13 09:51 - 2021-05-31 14:53 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Avast Software
2021-12-12 09:56 - 2020-06-08 07:24 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-12-11 22:07 - 2021-05-24 18:15 - 000000000 ____D C:\Users\tMt-user\Documents\PhraseExpress
2021-12-11 10:02 - 2020-09-21 17:19 - 000002389 _____ C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-12-10 22:38 - 2017-08-07 15:10 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-12-10 09:57 - 2017-11-02 18:14 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Packages
2021-12-10 00:33 - 2021-07-03 11:26 - 000000000 ____D C:\Program Files (x86)\Zotero
2021-12-10 00:33 - 2021-07-03 11:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-12-09 14:28 - 2020-10-12 10:00 - 000000000 ____D C:\Users\tMt-user\AppData\Local\Deployment
2021-12-08 17:25 - 2021-06-25 14:32 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-12-08 09:59 - 2017-08-07 18:07 - 000000906 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2021-12-08 09:55 - 2018-08-05 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2021-12-08 09:53 - 2021-07-09 13:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2021-12-08 09:48 - 2017-08-16 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2021-12-08 09:44 - 2020-05-31 20:41 - 000000000 ____D C:\Users\tMt-user\AppData\Local\ProtonVPN
2021-12-08 09:43 - 2021-07-09 11:05 - 000000748 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PicPick.lnk
2021-12-08 09:42 - 2021-07-29 08:55 - 000000000 ____D C:\Program Files\Audacity
2021-12-08 09:42 - 2021-07-09 13:13 - 000000871 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2021-12-08 09:41 - 2019-12-21 12:32 - 000000915 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2021-12-07 09:49 - 2020-10-12 02:31 - 000002396 _____ C:\Users\tMt-user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-12-01 21:51 - 2020-11-07 11:44 - 000000000 ____D C:\_
2021-11-28 14:52 - 2020-01-03 11:13 - 000000000 ____D C:\Users\tMt-user\.android
2021-11-25 19:01 - 2018-05-06 00:22 - 000000000 ____D C:\Users\tMt-user\AppData\Local\D3DSCache
2021-11-23 18:42 - 2020-04-07 00:20 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Zoom
2021-11-20 23:39 - 2021-11-06 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inscryption [GOG.com]
2021-11-20 23:10 - 2021-09-25 20:35 - 000000000 ____D C:\Users\tMt-user\Documents\Rise of the Tomb Raider
2021-11-20 23:10 - 2020-04-18 11:01 - 000000000 ____D C:\Users\tMt-user\Documents\The Witcher 3
2021-11-20 23:10 - 2019-12-17 16:41 - 000000000 ____D C:\Users\tMt-user\Documents\Snagit
2021-11-20 23:10 - 2017-08-19 19:21 - 000000000 ____D C:\Users\tMt-user\Documents\Sound recordings
2021-11-20 23:10 - 2017-07-10 19:19 - 000000000 ___RD C:\Users\tMt-user\OneDrive
2021-11-20 22:04 - 2020-10-06 14:12 - 000000000 ____D C:\Users\tMt-user\AppData\Roaming\Grammarly
2021-11-19 22:50 - 2018-06-20 22:57 - 000000000 ____D C:\ProgramData\Packages
2021-11-15 09:23 - 2020-05-18 14:18 - 000000000 ____D C:\UPLOAD
2021-11-15 08:35 - 2017-08-07 15:10 - 000000932 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job

==================== Files in the root of some directories ========

2019-03-03 09:07 - 2020-01-24 21:04 - 000000151 _____ () C:\Users\tMt-user\AppData\Roaming\gcstar.log
2017-10-18 20:52 - 2017-10-22 13:18 - 000000516 _____ () C:\Users\tMt-user\AppData\Roaming\rftg
2018-03-14 00:44 - 2018-03-14 00:45 - 000000049 _____ () C:\Users\tMt-user\AppData\Roaming\~SiMPLEX.ini
2018-10-25 16:05 - 2018-10-25 16:05 - 000000000 _____ () C:\Users\tMt-user\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Přílohy
Addition.zip
(21.08 KiB) Staženo 53 x
Win10 Pro = Avast Free = Comodo Firewall Free
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118266
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zamrzání PC

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-09-27] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c19-05d1-11ec-95db-5cf3708ef908} - "J:\Setup.exe"
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c2b-05d1-11ec-95db-5cf3708ef908} - "M:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493f27-05d1-11ec-95db-5cf3708ef908} - "J:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {630a72da-1940-11eb-9544-5cf3708ef908} - "O:\setup.exe"
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {2BE52439-90FF-448D-9603-DEA7E083113B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Task: {910461A0-666E-4794-8064-F65191AF79B4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}
CustomCLSID: HKU\S-1-5-21-2866573575-4116515599-1814928747-1003_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0x70AC6F9F5034D60170AC6F9F5034D601010000000900000000000000 => No File
C:\Users\tMt-user\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:728B799F [372]
FirewallRules: [TCP Query User{FB985F04-C053-4C00-9320-71C5513AAE1A}C:\apps\essentialpim pro 8\essentialpim.exe] => (Block) C:\apps\essentialpim pro 8\essentialpim.exe => No File
FirewallRules: [UDP Query User{F809C33E-F7B9-4365-BEC9-89D83E65919F}C:\apps\essentialpim pro 8\essentialpim.exe] => (Block) C:\apps\essentialpim pro 8\essentialpim.exe => No File
FirewallRules: [TCP Query User{AD78A009-1EC3-44D3-8194-D847B5CDFC19}C:\apps\essentialpim pro 8\essentialpim.exe] => (Allow) C:\apps\essentialpim pro 8\essentialpim.exe => No File
FirewallRules: [UDP Query User{A33208AA-F528-46C0-9D43-2EDE921C9EA9}C:\apps\essentialpim pro 8\essentialpim.exe] => (Allow) C:\apps\essentialpim pro 8\essentialpim.exe => No File

EmptyTemp:
Hosts:
End
Uložte C:\Users\tMt-user\OneDrive - Univerzita Karlova\Plocha plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
lastsaves
Návštěvník
Návštěvník
Příspěvky: 107
Registrován: 17 zář 2007 16:43

Re: Zamrzání PC

#7 Příspěvek od lastsaves »

Provedeno, log níže.

Fix result of Farbar Recovery Scan Tool (x64) Version: 11-12-2021
Ran by tMt-user (16-12-2021 10:54:43) Run:1
Running from C:\Users\tMt-user\OneDrive - Univerzita Karlova\Plocha
Loaded Profiles: defaultuser0 & tMt & tMt-user & tMt-steam
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-09-27] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c19-05d1-11ec-95db-5cf3708ef908} - "J:\Setup.exe"
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493c2b-05d1-11ec-95db-5cf3708ef908} - "M:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {1e493f27-05d1-11ec-95db-5cf3708ef908} - "J:\setup.exe" /autorun
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\...\MountPoints2: {630a72da-1940-11eb-9544-5cf3708ef908} - "O:\setup.exe"
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {2BE52439-90FF-448D-9603-DEA7E083113B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Task: {910461A0-666E-4794-8064-F65191AF79B4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-07-08] (Google Inc -> Google Inc.)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}
CustomCLSID: HKU\S-1-5-21-2866573575-4116515599-1814928747-1003_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0x70AC6F9F5034D60170AC6F9F5034D601010000000900000000000000 => No File
C:\Users\tMt-user\AppData\Local\Temp
AlternateDataStreams: C:\ProgramData\TEMP:728B799F [372]
FirewallRules: [TCP Query User{FB985F04-C053-4C00-9320-71C5513AAE1A}C:\apps\essentialpim pro 8\essentialpim.exe] => (Block) C:\apps\essentialpim pro 8\essentialpim.exe => No File
FirewallRules: [UDP Query User{F809C33E-F7B9-4365-BEC9-89D83E65919F}C:\apps\essentialpim pro 8\essentialpim.exe] => (Block) C:\apps\essentialpim pro 8\essentialpim.exe => No File
FirewallRules: [TCP Query User{AD78A009-1EC3-44D3-8194-D847B5CDFC19}C:\apps\essentialpim pro 8\essentialpim.exe] => (Allow) C:\apps\essentialpim pro 8\essentialpim.exe => No File
FirewallRules: [UDP Query User{A33208AA-F528-46C0-9D43-2EDE921C9EA9}C:\apps\essentialpim pro 8\essentialpim.exe] => (Allow) C:\apps\essentialpim pro 8\essentialpim.exe => No File

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1e493c19-05d1-11ec-95db-5cf3708ef908} => removed successfully
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1e493c2b-05d1-11ec-95db-5cf3708ef908} => removed successfully
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1e493f27-05d1-11ec-95db-5cf3708ef908} => removed successfully
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{630a72da-1940-11eb-9544-5cf3708ef908} => removed successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2BE52439-90FF-448D-9603-DEA7E083113B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2BE52439-90FF-448D-9603-DEA7E083113B}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{910461A0-666E-4794-8064-F65191AF79B4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{910461A0-666E-4794-8064-F65191AF79B4}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
C:\WINDOWS\system32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => moved successfully
HKU\S-1-5-21-2866573575-4116515599-1814928747-1003_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817} => removed successfully
C:\Users\tMt-user\AppData\Local\Temp => moved successfully
C:\ProgramData\TEMP => ":728B799F" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FB985F04-C053-4C00-9320-71C5513AAE1A}C:\apps\essentialpim pro 8\essentialpim.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F809C33E-F7B9-4365-BEC9-89D83E65919F}C:\apps\essentialpim pro 8\essentialpim.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{AD78A009-1EC3-44D3-8194-D847B5CDFC19}C:\apps\essentialpim pro 8\essentialpim.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A33208AA-F528-46C0-9D43-2EDE921C9EA9}C:\apps\essentialpim pro 8\essentialpim.exe" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 2883584 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 140461647 B
Java, Flash, Steam htmlcache => 1065 B
Windows/system/drivers => 11225075 B
Edge => 59431 B
Chrome => 559175545 B
Firefox => 503273031 B
Opera => 231958974 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 106382 B
NetworkService => 106382 B
defaultuser0 => 106382 B
tMt => 594702 B
tMt-user => 11916622 B
tMt-steam => 11916622 B

RecycleBin => 7480 B
EmptyTemp: => 1.4 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 10:57:12 ====
Win10 Pro = Avast Free = Comodo Firewall Free
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118266
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zamrzání PC

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
lastsaves
Návštěvník
Návštěvník
Příspěvky: 107
Registrován: 17 zář 2007 16:43

Re: Zamrzání PC

#9 Příspěvek od lastsaves »

Zatím bez zamrznutí. Uvidíme za pár dní.
Díky za pomoc.
Win10 Pro = Avast Free = Comodo Firewall Free
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118266
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Zamrzání PC

#10 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“