Pomalé PC

Zpráva

Petura · #46 Příspěvek od **Petura** » 07 led 2022 22:08

Je to lepší....uvidíme...kdyžtak se potom ozvu, zatím díky.

#47 Příspěvek od **Rudy** » 08 led 2022 11:25

I zde platí možnost defragmentace disku.

Petura · #48 Příspěvek od **Petura** » 24 led 2022 13:22

Dobrý den, mám tu další notebook, který je strašně pomalý,prosím o kontrolu...díky.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-01-2022
Ran by Pavel (administrator) on PAVEL-PC (TOSHIBA Satellite Pro L500) (24-01-2022 12:30:03)
Running from C:\Users\Pavel\Downloads
Loaded Profiles: Pavel
Platform: Microsoft Windows 10 Pro Version 21H1 19043.1415 (X86) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\Windows-KB890830-V5.97.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotification.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotificationUx.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1371_none_21fd3b90c425147a\TiWorker.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <27>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\w32x86\3\E_TATIYUE.EXE
(Seiko Epson Corporation) [File not signed] C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
(Seznam.cz, a.s. -> Seznam.cz) C:\Users\Pavel\AppData\Roaming\Seznam Browser\Seznam.cz.exe <7>
(Seznam.cz, a.s. -> Seznam.cz) C:\Users\Pavel\AppData\Roaming\Seznam Browser\sznAgent\Seznam.cz.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [143128 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [TeamsMachineInstaller] => C:\Program Files\Teams Installer\Teams.exe [107879704 2020-10-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [File not signed]
HKLM\...\Run: [EPPCCMON] => C:\Program Files\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [445800 2021-10-08] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [BingSvc] => C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [146312 2020-08-13] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd) [File not signed]
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_TATIYUE.EXE [410712 2020-09-11] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\RunOnce: [Application Restart #2] => C:\Users\Pavel\AppData\Roaming\Seznam Browser\Seznam.cz.exe [2017448 2021-12-22] (Seznam.cz, a.s. -> Seznam.cz)
HKLM\...\Windows NT x86\Print Processors\Epson Laser02: C:\Windows\System32\spool\prtprocs\W32X86\EP0LB03F.DLL [34304 2009-07-14] (Microsoft Windows -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L210 Series 32MonitorBE: C:\WINDOWS\system32\E_TLBI2E.DLL [95232 2015-01-14] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L3260 Series 32MonitorBE: C:\WINDOWS\system32\E_TLMBYUE.DLL [148480 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [385024 2016-09-14] (SEIKO EPSON CORPORATION) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\97.0.4692.99\Installer\chrmstp.exe [2022-01-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Monitor.lnk [2015-12-22]
ShortcutTarget: Bluetooth Monitor.lnk -> C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe (TOSHIBA CORPORATION -> TOSHIBA CORPORATION)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {030E4B8C-B8EF-4AFC-9889-4CFCBA17AA1A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6332312 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {046A889C-5F65-4E63-9E99-AA880B6F3ED0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {0CF34519-7C48-4F17-9E24-CBEDA387DB5B} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (No File)
Task: {140F5687-0A6A-4349-B8BD-211C6193B9CA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {1AC53BE3-482B-4F11-9F66-6293C7314C10} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (No File)
Task: {1FD6B283-BFF3-46E5-A81C-3912809F2AEB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (No File)
Task: {243A1BBC-C4A0-4BF3-8FA0-B048022F85C0} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File)
Task: {24FA84A0-E087-48EC-BC51-2B9C4C815D78} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {27DAB192-2E65-4925-B196-A1CB356523D5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [108872 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {282A0010-AD22-4A08-B0D2-3216A241D96F} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (No File)
Task: {29E600A9-D1EF-441D-A1F8-DDEA429D7427} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (No File)
Task: {29ECEE08-B5AE-4FF9-BDAF-A7DF017C4131} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {2A834D30-D819-41E9-BAA7-EA63805DBF0C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [108872 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {31B79A74-E0E0-43B7-ACBF-E0D4FEA60844} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (No File)
Task: {367F930A-A3DB-4112-B1F1-50E92A171C88} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {38BF360A-CF95-4F6C-9404-F1EFCD84F62F} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (No File)
Task: {49744D88-A648-47EA-B449-9BCB4D7CBCB3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {501E5D8A-29A3-4CF0-B75E-12F174AF57AB} - System32\Tasks\{8E23F4FB-DC6C-4740-BF86-143146CBB9CE} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.85.112/cs/abandoninstall?page=tsProgressBar
Task: {51533A34-8547-4F26-8FA2-0F6A79CF7752} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (No File)
Task: {5301B6C6-E973-4D1B-902D-123A7BD328A5} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {53A43B77-E6EA-4E5B-AF68-B021E4D7807A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6332312 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {5AAE0789-575C-4E16-9B06-9E8CF8F1774F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (No File)
Task: {5B845E1F-7592-4CAB-87A1-8DE6C9B1E244} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (No File)
Task: {6050A94A-CE40-4355-AA55-B583C9ADE785} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-07-15] (Adobe Inc. -> Adobe)
Task: {64B85F96-045C-486D-861B-8F0BA1174D83} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (No File)
Task: {673357AE-5E4E-4CC0-8BEE-486F52476EA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17768320 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {68114295-4BE7-4D4D-9554-6E5536B7CAEC} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {68885C4A-1EFC-4E05-BB55-ED67D673881F} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (No File)
Task: {6BEC043B-424B-4DA6-BE2D-823BA8CC01CB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (No File)
Task: {6CB5F397-500D-4C53-BFED-218A4D2AAE81} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {6D741A88-28E4-41E3-9350-60E7E9B90201} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1546480 2021-04-30] (Avast Software s.r.o. -> Avast Software)
Task: {6DFF9C28-3480-4A4E-83D7-D8C8177D91D1} - System32\Tasks\CCleanerSkipUAC - Pavel => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd) [File not signed]
Task: {6E5D8C4F-D543-4E59-9F50-A1A5FAED73D0} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (No File)
Task: {72DAE7BA-35BF-4A15-AA20-2BDC0110A19C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {74CCFB59-B44A-48F7-8460-24407C243470} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (No File)
Task: {7505606D-5EFE-4697-96FA-01F5F257883B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1331792 2020-05-07] (Adobe Inc. -> Adobe Inc.)
Task: {7835D3BA-D792-4255-BFA0-74EC9E63B505} - System32\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E} => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_TTSYUE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {783F82E5-7211-4AF6-A703-93B3F1DEC4FF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {86DEF50E-451C-453B-97BE-2A2331DF034E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {8F307A27-3936-4AC7-9182-1CF06CD153AB} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {8FC287B3-C8C5-47AE-835B-9D1F86303241} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {90B0D851-D686-45F4-A84A-7B3F38B2C77A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-12-07] (Piriform Software Ltd -> Piriform)
Task: {95A4EFC1-75AC-4996-856A-A2E3050FCA5B} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4398872 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
Task: {9B795048-9881-448B-86F4-9ABC5F474841} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe (No File)
Task: {9EED01A3-6313-4C67-B611-A3B7AC07CCBC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A01CFF99-F68D-4609-A832-22ED59D24223} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {A0325E26-8B8A-46F4-9655-544B1071F892} - System32\Tasks\{45BDAF88-325C-4F05-A48C-FEC67BF466DD} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.85.112/cs/abandoninstall?page=tsProgressBar
Task: {A329608C-4350-447F-B625-3707011D0451} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {A47A209D-E6D3-4667-88AE-8D2E5BFE5A2D} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {A9BA4840-1D37-4949-BC3D-9BC2228A9E70} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (No File)
Task: {AE8FACF2-3DE4-4B46-88BD-659617113EC2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17768320 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {B9AB882D-F8A1-4401-8421-0A747CB60EDA} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (No File)
Task: {C04CB74A-5BF5-4ABA-9321-4EC5BAEBAB89} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (No File)
Task: {C1B0DB6C-63ED-44CB-BA91-74A6D89CA248} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {C4409E3B-8398-4228-8733-7CFF9D80B349} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CDC56251-1E00-44E2-93B7-909B980831A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {CF872801-5307-445E-B830-EC49EFE15919} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (No File)
Task: {DA7C48B3-FE7A-4F7F-ADD8-829FC101D40E} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_32_0_0_403_Plugin.exe [1475640 2020-07-15] (Adobe Inc. -> Adobe)
Task: {DF7747AC-5103-418B-9B94-DF67CC311254} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {E22653E0-75E5-4E8E-8DC0-E364E0C69CEF} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {E5D3816A-C383-4DC1-BE0A-782E1A99AE19} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {E62B9157-B0E2-4E07-948C-D206C188131F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (No File)
Task: {E79B2998-8F63-451A-A56D-26EDC0A5098A} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {E7A9178F-8C59-42C3-BC40-D29DC1397A38} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe -crl -hms -pscn 15 (No File)
Task: {ED6BC8CC-6558-42D8-9ABA-DB9DD8ABBA21} - System32\Tasks\{71FC3F65-1DE0-45BD-9D5D-1B4ADCEA61F5} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.85.109/cs/abandoninstall?page=tsProgressBar
Task: {F4DB41C7-172E-438D-8917-99BAD1993D7C} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {F637AB83-B411-4792-8A5C-2FBAE6117872} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {FC4B2529-0B6A-4A7C-9F7F-347DB10C4CAA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {FD03C97A-C3B9-427A-907A-7C3716AB0336} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (No File)
Task: {FD3D629C-39BA-4598-AA5B-62D4707A64AD} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe /StartRecording (No File)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\WINDOWS\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E}.job => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_TTSYUE.EXE:/EXE:{DA2AE56B-C752-491B-8535-5DBE7D21451E} /F:UpdateWORKGROUP\PAVEL-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{1d11bf92-a030-46c6-b895-2205de0f81eb}: [DhcpNameServer] 193.165.67.250 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{498730db-71fb-474a-bf0d-d7f245ef9a92}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{74cb453d-141b-44dd-9141-3162b8cf1fe4}: [NameServer] 194.228.211.33,160.218.161.60
Tcpip\..\Interfaces\{b557036a-5bd5-4507-8aa0-ebcc343e4ec6}: [DhcpNameServer] 192.168.1.1 0.0.0.0

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Pavel\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-24]

FireFox:
========
FF DefaultProfile: n1u6nex7.default
FF ProfilePath: C:\Users\Pavel\AppData\Roaming\TomTom\HOME\Profiles\8zvzyjae.default [2015-11-25]
FF Extension: (No Name) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default [2022-01-24]
FF Homepage: Mozilla\Firefox\Profiles\n1u6nex7.default -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\n1u6nex7.default -> hxxps://mslezsky.os.tc; hxxps://www.firsttofuck.com
FF Extension: (Bing Search) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\bingsearch.full@microsoft.com [2015-04-23] [Legacy] [not signed]
FF Extension: (Bing Search) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-03-23] [Legacy]
FF Extension: (Avast Passwords) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2020-02-11] [UpdateUrl:hxxps://pamcdn.avast.com/pamcdn/extensions/firefox/update.json]
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\sp@avast.com.xpi [2021-11-01]
FF Extension: (No Name) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-11-25]
FF SearchPlugin: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\searchplugins\bing-.xml [2016-03-23]
FF SearchPlugin: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\searchplugins\seznam-avast.xml [2014-09-14]
FF Extension: (Skype) - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] [Legacy]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.9.799 => not found
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2016-01-04] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_403.dll [2020-07-15] (Adobe Inc. -> )
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll [No File]
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-317401563-2454302601-1562231924-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Pavel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-04] (Unity Technologies SF -> Unity Technologies ApS)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default [2022-01-09]
CHR StartupUrls: Default -> "hxxps://www.google.cz/"
CHR Extension: (Prezentace) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-12-31]
CHR Extension: (Dokumenty) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-12-31]
CHR Extension: (Disk Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-02-20]
CHR Extension: (YouTube) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Vyhledávání Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-26]
CHR Extension: (Tabulky) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-12-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-09]
CHR Extension: (Skype) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2019-12-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-03]
CHR Extension: (Gmail) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-02-20]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
CHR HKU\S-1-5-21-317401563-2454302601-1562231924-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [169032 2020-05-07] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-07-15] (Adobe Inc. -> Adobe)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7627856 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [428312 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [427800 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-06-04] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8337296 2021-12-08] (Microsoft Corporation -> Microsoft Corporation)
S3 cloudidsvc; C:\WINDOWS\system32\cloudidsvc.dll [81408 2021-11-11] (Microsoft Windows -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc.exe [260064 2021-06-21] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_05; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE [142432 2015-01-14] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4752832 2021-12-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 uhssvc; C:\Program Files\Microsoft Update Health Tools\uhssvc.exe [283960 2021-09-08] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [2250992 2019-12-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [85240 2019-12-19] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [33592 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [186288 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [308776 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [207368 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [91656 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [19400 2021-11-18] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39288 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [154512 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [393032 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [92752 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71912 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [690704 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [454408 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [161376 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [266184 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [200192 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [104448 2019-12-07] (Microsoft Corporation) [File not signed]
S3 cxwmbclass; C:\WINDOWS\System32\drivers\cxwmbclass.sys [107520 2021-02-14] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [131952 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [562176 2019-12-07] (Microsoft Windows -> Realtek)
R3 rtl8192se; C:\WINDOWS\System32\drivers\rtl8192se.sys [1113600 2019-12-07] (Microsoft Windows -> Realtek Semiconductor Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [148336 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [42088 2015-12-31] (TOSHIBA CORPORATION -> Toshiba Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [37472 2019-12-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [278456 2019-12-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [39368 2019-12-19] (Microsoft Windows -> Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\System32\drivers\WUDFRd.sys [213504 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-01-24 12:30 - 2022-01-24 12:44 - 000033926 _____ C:\Users\Pavel\Downloads\FRST.txt
2022-01-24 12:25 - 2022-01-24 12:40 - 000000000 ____D C:\FRST
2022-01-24 12:06 - 2022-01-24 12:06 - 002019328 _____ (Farbar) C:\Users\Pavel\Downloads\FRST.exe
2022-01-24 12:06 - 2022-01-24 12:06 - 000000000 ___HD C:\$WinREAgent
2022-01-24 11:58 - 2022-01-24 11:58 - 000001062 _____ C:\Users\Pavel\Desktop\Seznam.cz.lnk
2022-01-24 11:56 - 2022-01-24 11:59 - 000000000 ____D C:\Users\Pavel\AppData\Roaming\Seznam Browser
2022-01-24 08:13 - 2022-01-24 11:28 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-01-09 19:16 - 2022-01-09 19:16 - 000030445 _____ C:\Users\Pavel\Desktop\Image_20220109_0003.pdf
2022-01-09 19:14 - 2022-01-09 19:14 - 000334402 _____ C:\Users\Pavel\Desktop\Image_20220109_0002.pdf
2022-01-09 19:12 - 2022-01-09 19:12 - 000000000 ____D C:\Users\Pavel\AppData\Local\Seiko_Epson_Corporation
2022-01-09 19:11 - 2022-01-09 19:11 - 000216304 _____ C:\Users\Pavel\Desktop\Image_20220109_0001.pdf
2022-01-09 18:28 - 2022-01-09 18:28 - 000002047 _____ C:\Users\Pavel\Desktop\Epson ScanSmart.lnk
2022-01-09 18:01 - 2022-01-24 07:32 - 000000943 _____ C:\WINDOWS\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E}.job
2022-01-09 18:01 - 2022-01-17 22:37 - 000003492 _____ C:\WINDOWS\system32\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E}
2022-01-09 17:59 - 2022-01-09 17:59 - 000000000 ____D C:\Program Files\EpsonNet
2022-01-09 17:57 - 2021-06-21 18:31 - 000147472 _____ (TWAIN Working Group) C:\WINDOWS\system32\twaindsm.dll
2022-01-09 17:55 - 2018-06-15 04:14 - 000148480 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\E_TLMBYUE.DLL
2022-01-09 17:45 - 2022-01-09 17:45 - 009634528 _____ (Seiko Epson Corporation. ) C:\Users\Pavel\Downloads\epson642532eu.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-01-24 12:42 - 2014-07-01 07:44 - 000000000 ____D C:\Program Files\Google
2022-01-24 12:36 - 2014-05-08 16:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-24 12:26 - 2014-05-08 16:31 - 142270864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-01-24 12:02 - 2014-05-01 18:11 - 000000000 ____D C:\ProgramData\Mozilla
2022-01-24 12:00 - 2016-11-23 15:08 - 000000000 ____D C:\Users\Pavel\AppData\LocalLow\Mozilla
2022-01-24 11:59 - 2016-11-21 23:26 - 000001071 _____ C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Seznam.cz.lnk
2022-01-24 11:59 - 2016-11-21 23:26 - 000000000 ____D C:\Users\Pavel\AppData\Local\Seznam.cz
2022-01-24 11:28 - 2021-10-25 13:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-01-24 11:28 - 2020-08-11 18:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-24 11:28 - 2014-05-01 18:11 - 000001099 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-01-24 11:28 - 2014-05-01 18:11 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2022-01-24 10:48 - 2019-12-07 07:12 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-24 08:40 - 2014-07-01 07:46 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-01-24 08:27 - 2020-08-11 18:53 - 000003462 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-24 08:27 - 2020-08-11 18:53 - 000003338 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-24 08:27 - 2018-10-03 18:45 - 000000000 ____D C:\Users\Pavel\AppData\Local\CrashDumps
2022-01-24 08:26 - 2021-02-06 12:05 - 000000000 ____D C:\Users\Pavel\Desktop\vypas2021
2022-01-24 08:24 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-01-24 08:23 - 2019-12-07 07:12 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-24 08:21 - 2020-08-30 12:37 - 000002388 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-24 08:11 - 2020-08-30 12:36 - 000003572 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-24 08:11 - 2020-08-30 12:36 - 000003448 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-24 08:10 - 2017-11-26 08:10 - 000000000 ____D C:\Users\Pavel\AppData\Local\AVAST Software
2022-01-24 07:40 - 2020-08-11 18:53 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2022-01-24 07:36 - 2020-08-11 18:53 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-01-24 07:32 - 2020-08-11 18:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-01-24 07:32 - 2020-08-11 18:09 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-17 22:37 - 2021-11-13 21:16 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Pavel
2022-01-17 22:37 - 2020-08-11 18:53 - 000002226 _____ C:\WINDOWS\system32\Tasks\{8E23F4FB-DC6C-4740-BF86-143146CBB9CE}
2022-01-17 22:37 - 2020-08-11 18:53 - 000002226 _____ C:\WINDOWS\system32\Tasks\{71FC3F65-1DE0-45BD-9D5D-1B4ADCEA61F5}
2022-01-17 22:37 - 2020-08-11 18:53 - 000002226 _____ C:\WINDOWS\system32\Tasks\{45BDAF88-325C-4F05-A48C-FEC67BF466DD}
2022-01-17 22:37 - 2020-08-11 18:53 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2022-01-14 16:39 - 2020-08-11 18:14 - 000000000 ____D C:\Users\Pavel
2022-01-09 18:58 - 2015-09-25 19:17 - 000000000 ____D C:\Users\Pavel\AppData\Roaming\EPSON
2022-01-09 18:24 - 2019-04-27 08:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2022-01-09 18:24 - 2016-01-04 10:45 - 000000000 ____D C:\Program Files\EPSON Software
2022-01-09 18:23 - 2014-07-15 11:38 - 000000000 ____D C:\ProgramData\EPSON
2022-01-09 18:21 - 2015-01-27 14:34 - 000000000 ____D C:\Program Files\epson
2022-01-09 18:21 - 2014-05-03 18:42 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2022-01-09 17:58 - 2014-07-15 11:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2022-01-09 17:57 - 2019-12-07 07:10 - 000000000 ____D C:\WINDOWS\INF

==================== Files in the root of some directories ========

2015-07-07 17:38 - 2015-07-07 17:38 - 001125056 _____ (Adobe Systems Incorporated) C:\Users\Pavel\flashplayer18_ga_install.exe
2015-07-07 17:40 - 2015-07-07 17:40 - 001124072 _____ (Adobe Systems Incorporated) C:\Users\Pavel\readerdc_cz_ga_install.exe
2014-05-10 18:23 - 2014-05-30 20:49 - 000000000 _____ () C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
2014-05-09 18:01 - 2014-05-09 18:01 - 000033193 _____ () C:\Users\Pavel\AppData\Roaming\UserTile.png

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-01-2022
Ran by Pavel (24-01-2022 12:47:29)
Running from C:\Users\Pavel\Downloads
Microsoft Windows 10 Pro Version 21H1 19043.1415 (X86) (2020-08-11 17:56:32)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-317401563-2454302601-1562231924-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-317401563-2454302601-1562231924-503 - Limited - Disabled)
Guest (S-1-5-21-317401563-2454302601-1562231924-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-317401563-2454302601-1562231924-1002 - Limited - Enabled)
Pavel (S-1-5-21-317401563-2454302601-1562231924-1000 - Administrator - Enabled) => C:\Users\Pavel
WDAGUtilityAccount (S-1-5-21-317401563-2454302601-1562231924-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.009.20074 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.403 - Adobe)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 21.10.2498 - Avast Software)
Bluetooth Monitor 4 (HKLM\...\{61539202-097E-487E-9237-B291AB56D54C}) (Version: 4.03.000 - TOSHIBA)
CCleaner (HKLM\...\CCleaner) (Version: 5.87 - Piriform)
Dropbox (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Epson Event Manager (HKLM\...\{DBC38C08-9FB5-43A5-B6BA-EB10AC7DA570}) (Version: 3.11.0053 - Seiko Epson Corporation)
Epson E-Web Print (HKLM\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
EPSON L210 Series Printer Uninstall (HKLM\...\EPSON L210 Series) (Version: - SEIKO EPSON Corporation)
EPSON L3260 Series Printer Uninstall (HKLM\...\EPSON L3260 Series) (Version: - Seiko Epson Corporation)
Epson Manuals (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 2.0.1.0 - Seiko Epson Corporation)
Epson Photo+ (HKLM\...\{15000BAD-6D4B-4330-824E-3712C0DF4F9A}) (Version: 3.4.0.0 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM\...\{C4D8E138-C67B-41D5-B493-F54BB72B43E0}) (Version: 3.3.0.0 - Seiko Epson Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Scan 2 (HKLM\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
EPSON Scan PDF EXtensions (HKLM\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.02 - SEIKO EPSON Corp.)
Epson ScanSmart (HKLM\...\{D310BDCC-D4B4-4DC1-B9DF-D1D7367CAC4F}) (Version: 3.6.1 - Seiko Epson Corporation)
Epson Software Updater (HKLM\...\{14898485-6509-496B-8C30-D5DB8C1C8639}) (Version: 4.6.3 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
Google Chrome (HKLM\...\Google Chrome) (Version: 97.0.4692.99 - Google LLC)
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.14701.20262 - Microsoft Corporation)
Microsoft Edge (HKLM\...\Microsoft Edge) (Version: 97.0.1072.69 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM\...\Microsoft EdgeWebView) (Version: 97.0.1072.69 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\OneDriveSetup.exe) (Version: 20.124.0621.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{14059FF8-04A2-4B6E-B4BD-FEDE2BFF22F2}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox (x86 cs) (HKLM\...\Mozilla Firefox 96.0.2 (x86 cs)) (Version: 96.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-0000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Prohlížeč Seznam.cz (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Seznam Browser) (Version: 6.19.0 - Seznam.cz a.s.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Starshine 1.díl (HKLM\...\{73B3C57B-3ED7-40DB-A554-32EB5D35F84E}) (Version: 1.00.000 - )
Teams Machine-Wide Installer (HKLM\...\{39AF0813-FA7B-4860-ADBE-93B9B214B914}) (Version: 1.3.0.28779 - Microsoft Corporation)
Testy SŽDC a ČD (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\afb03a3d3cf24e4b) (Version: 1.0.0.9 - Martin Brož)
Unity Web Player (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\UnityWebPlayer) (Version: 4.5.2f1 - Unity Technologies ApS)
Update for Windows 10 (KB4023057) (HKLM\...\{5F01BF33-E873-4B83-B2CC-E4DEF494073E}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR 5.91 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Packages:
=========
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.209.700.0_x86__kgqvnymyfvs32 [2022-01-14] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x86__8wekyb3d8bbwe [2019-09-17] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x86__8wekyb3d8bbwe [2020-08-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x86__8wekyb3d8bbwe [2022-01-14] (Microsoft Studios) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x86__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0 [2022-01-09] (Spotify AB) [Startup Task]
Trains on Bridges PREMIUM -> C:\Program Files\WindowsApps\Microsoft.TrainsonBridgesPREMIUM_1.0.0.0_neutral__8wekyb3d8bbwe [2020-08-05] (Microsoft Corporation)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-12] (Twitter Inc.)
Vodafone Mobile Broadband -> C:\Program Files\WindowsApps\VodafoneGroupServices.VodafoneMobileBroadband_2.10.46.0_x86__cx08jceyq9bcp [2019-11-02] (Vodafone Group Services)
WindowsDVDPlayer -> C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x86__8wekyb3d8bbwe [2016-05-24] (Microsoft Corporation)
World Oceans Day PREMIUM -> C:\Program Files\WindowsApps\Microsoft.WorldOceansDayPREMIUM_1.0.0.0_neutral__8wekyb3d8bbwe [2020-08-05] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Pavel\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies SF -> Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{9d7602e2-51fa-4133-8d8b-5277272dd0a2}\localserver32 -> C:\Users\Pavel\AppData\Roaming\Seznam Browser\sznAgent\Seznam.cz.exe (Seznam.cz, a.s. -> Seznam.cz)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-317401563-2454302601-1562231924-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-317401563-2454302601-1562231924-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-317401563-2454302601-1562231924-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2021-12-22 12:24 - 2021-12-22 12:24 - 002510848 _____ () [File not signed] \\?\C:\Users\Pavel\AppData\Roaming\Seznam Browser\node_modules\sbrowser-sqlite3\lib\binding\napi-v3-win32-ia32\node_sqlite3.node
2021-12-22 12:24 - 2021-12-10 01:20 - 000328192 _____ () [File not signed] C:\Users\Pavel\AppData\Roaming\Seznam Browser\libegl.dll
2021-12-22 12:24 - 2021-12-10 01:20 - 005801984 _____ () [File not signed] C:\Users\Pavel\AppData\Roaming\Seznam Browser\libglesv2.dll
2020-02-07 17:20 - 2020-02-07 17:20 - 000132096 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files\EPSON Software\Event Manager\epnsm.dll
2018-03-05 16:41 - 2018-03-05 16:41 - 000057856 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files\EPSON Software\Event Manager\EPNWPSHDevFinder.DLL
2009-10-21 17:39 - 2009-10-21 17:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files\EPSON Software\Event Manager\LcMgr.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000385024 ____S (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll
2021-12-22 12:24 - 2021-12-10 01:20 - 148810240 _____ (Seznam.cz) [File not signed] C:\Users\Pavel\AppData\Roaming\Seznam Browser\nw.dll
2021-12-22 12:24 - 2021-12-10 01:20 - 000792064 _____ (Seznam.cz) [File not signed] C:\Users\Pavel\AppData\Roaming\Seznam Browser\nw_elf.dll
2021-12-22 12:24 - 2021-12-10 01:20 - 002864640 _____ (The NW.js Community) [File not signed] C:\Users\Pavel\AppData\Roaming\Seznam Browser\ffmpeg.dll
2021-12-22 12:24 - 2021-12-10 01:20 - 013406720 _____ (The NW.js Community) [File not signed] C:\Users\Pavel\AppData\Roaming\Seznam Browser\node.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-317401563-2454302601-1562231924-1000 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-317401563-2454302601-1562231924-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={BADA8F32-7AF2-494A-87FE-05042F07451B}&mid=3ea75982c76f47d295b4d16f640f053d-93320a10ef78ac78bb1e6b6bc8eaccc0fd40dd7a&lang=cs&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-05-10 19:23:31&v=18.1.6.542&pid=safeguard&sg=&sap=dsp&q={searchTerms}
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll [2014-08-11] (AVG Technologies -> AVG Secure Search)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\sharepoint.com -> hxxps://sosfm365-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2020-01-26 13:40 - 000000878 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-317401563-2454302601-1562231924-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "TeamsMachineInstaller"
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\StartupApproved\Run: => "BingSvc"
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C20959EC-B91C-4B88-9EBB-179AD985AA20}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{22F70E8B-E37D-42D7-8B2A-59379558FF96}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{49425AA1-7828-409C-8A8D-3D18B45CF63B}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{7286B694-C129-42B3-978B-E8F784A6BEB0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{04D57D3C-653F-4551-A74C-1EC067A2A156}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{02F56C70-B696-4574-84AD-82A52AD132A6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5EC42275-F05B-4DE8-89C9-4BEC23D3E514}] => (Allow) C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{5B650DED-FC2E-42DF-A34D-C1C23F560F6D}] => (Allow) C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{CFC88587-3C05-4311-9E2B-187BBFBAC383}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0B45EB32-591B-47F2-A98B-893E39BB007D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{FBD9A84F-8D72-4E2E-B284-4063CC4547BB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{F3F5E942-B264-4F18-8D05-88AD42B156BD}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A8E044C8-E196-43E5-9385-9769ED2C423D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E1C9512-CFCB-479E-B002-022E76BA40B7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E5E0CA9-F509-4C26-A4F5-21D59C610C33}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{DD4D4C9E-3FA7-45F4-84A8-4AB5C15CD1EB}C:\program files\avast software\avast\avastui.exe] => (Block) C:\program files\avast software\avast\avastui.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [UDP Query User{5AB7C20D-24F4-4F93-A2FE-586EE16D4165}C:\program files\avast software\avast\avastui.exe] => (Block) C:\program files\avast software\avast\avastui.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{182937A3-A04A-49E4-8A6B-2E37D98B4D13}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F524FA69-55D8-4E9D-A312-16248E449352}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{DF4194F2-8097-4DC3-840D-16CE37C1E5AF}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{1F2D48FF-A04A-4646-98DD-5759E7B454BA}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{16192A44-5D22-4F4E-9BC4-76751E77B7F4}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{8D1B852A-0C9F-4D6F-9441-6D658357D1FF}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{BAB44224-7A43-411F-B312-2C7BB1EBFF06}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{B61362FB-68EC-4923-A06D-EE11662580E3}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe (Seiko Epson Corporation) [File not signed]
FirewallRules: [{8D59D4A4-0CE1-416B-A7B5-8B463EE828AA}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe (Seiko Epson Corporation) [File not signed]
FirewallRules: [{73C7044F-4757-4D3B-8BE8-32C432C1EED3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{14134AC1-1136-4178-BAD8-61F194694FD3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2A8A27EB-D24E-4BF8-A7D3-1FF168A1B8BC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8EB1B93A-14E2-4F46-B165-69769372EC22}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A0DBD105-D26A-45BC-8A65-D6D5A2561A31}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BC280845-7B53-4AC2-82B8-F119AD1005D1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F154E759-09BA-4D8F-893F-BBBD664F1036}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{76B22446-7853-4E1C-A518-6160D2D6411F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2A045234-9613-4987-A022-7437BE542F83}] => (Allow) C:\Program Files\Microsoft\EdgeWebView\Application\97.0.1072.69\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F96F0CE8-D7FF-4913-90FB-7326B59FA6D7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

12-01-2022 18:46:59 Naplánovaný kontrolní bod
24-01-2022 09:44:33 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (01/24/2022 12:24:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program CHXSmartScreen.exe verze 10.0.19041.423 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2f5c

Čas spuštění: 01d8111483b0d21b

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

ID hlášení: 9a26f552-dd6c-455f-a3df-d8e3da859b9a

Úplný název balíčku s chybou: Microsoft.Windows.Apprep.ChxApp_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (01/24/2022 11:59:20 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 11:54:09 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 11:53:38 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 11:53:20 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 11:53:03 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 11:52:50 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 11:52:38 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

System errors:
=============
Error: (01/24/2022 07:32:59 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_3e56b byla ukončena s následující chybou:
Zařízení není připraveno.

Error: (01/24/2022 07:32:58 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby avast! Tools bylo dosaženo časového limitu (30000 ms).

Error: (01/24/2022 07:32:18 AM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT AUTHORITY)
Description: Nepodařilo se zavést knihovnu DLL oznámení o heslech "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter" kvůli chybě 126. Ověřte, zda cesta ke knihovně DLL oznámení definovaná v registru (HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages) odkazuje na správnou absolutní cestu (<jednotka>:\<cesta>\<název_souboru>.<přípona>). Pokud je cesta ke knihovně DLL správná, ověřte, zda jsou ve stejném adresáři umístěny všechny podpůrné soubory a zda má systémový účet přístup pro čtení k cestě knihovny DLL i všem podpůrným souborům. O další podporu můžete požádat poskytovatele knihovny DLL oznámení. Podrobnější informace najdete na adrese http://go.microsoft.com/fwlink/?LinkId=245898.

Error: (01/24/2022 07:32:18 AM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT AUTHORITY)
Description: Nepodařilo se zavést knihovnu DLL oznámení o heslech C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter kvůli chybě 126. Ověřte, zda cesta ke knihovně DLL oznámení definovaná v registru (HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages) odkazuje na správnou absolutní cestu (<jednotka>:\<cesta>\<název_souboru>.<přípona>). Pokud je cesta ke knihovně DLL správná, ověřte, zda jsou ve stejném adresáři umístěny všechny podpůrné soubory a zda má systémový účet přístup pro čtení k cestě knihovny DLL i všem podpůrným souborům. O další podporu můžete požádat poskytovatele knihovny DLL oznámení. Podrobnější informace najdete na adrese http://go.microsoft.com/fwlink/?LinkId=245898.

Error: (01/24/2022 07:32:20 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (1:59:43, ‎18.‎01.‎2022) bylo neočekávané.

Error: (01/16/2022 10:50:25 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (01/15/2022 11:12:01 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (01/14/2022 10:36:43 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

CodeIntegrity:
===============
Date: 2022-01-24 12:03:39
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2022-01-24 07:38:51
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: TOSHIBA V1.80 10/28/2009
Motherboard: TOSHIBA KSWAA
Processor: Intel(R) Core(TM)2 Duo CPU T5870 @ 2.00GHz
Percentage of memory in use: 94%
Total physical RAM: 1912.87 MB
Available physical RAM: 112.26 MB
Total Virtual: 4730.23 MB
Available Virtual: 515.19 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:146.05 GB) (Free:48.58 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:151.6 GB) (Free:134.28 GB) NTFS

\\?\Volume{3f7dc220-0000-0000-0000-408324000000}\ () (Fixed) (Total:0.44 GB) (Free:0.1 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 3F7DC220)
Partition 1: (Active) - (Size=146.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 MB) - (Type=27)
Partition 3: (Not Active) - (Size=151.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

#49 Příspěvek od **Rudy** » 24 led 2022 14:26

Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Petura · #50 Příspěvek od **Petura** » 25 led 2022 18:06

# -------------------------------
# Malwarebytes AdwCleaner 8.3.1.0
# -------------------------------
# Build: 11-18-2021
# Database: 2021-11-18.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-25-2022
# Duration: 00:00:26
# OS: Windows 10 Pro
# Cleaned: 35
# Failed: 0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files\AVG SafeGuard toolbar
Deleted C:\Program Files\AVG Security Toolbar
Deleted C:\Program Files\Common Files\AVG Secure Search
Deleted C:\ProgramData\AVG SafeGuard toolbar
Deleted C:\ProgramData\AVG Secure Search
Deleted C:\ProgramData\AVG Security Toolbar
Deleted C:\ProgramData\AVG_UPDATE_0814TB
Deleted C:\Users\Pavel\AppData\LocalLow\AVG SafeGuard toolbar
Deleted C:\Users\Pavel\AppData\Local\AVG SafeGuard toolbar
Deleted C:\Users\Pavel\AppData\Local\Seznam.cz

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\AppDataLow\Software\Smartbar
Deleted HKCU\Software\Conduit
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Deleted HKCU\Software\Seznam.cz
Deleted HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Deleted HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Deleted HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
Deleted HKLM\Software\AVG Security Toolbar
Deleted HKLM\Software\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Deleted HKLM\Software\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Deleted HKLM\Software\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Deleted HKLM\Software\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Deleted HKLM\Software\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
Deleted HKLM\Software\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Deleted HKLM\Software\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Deleted HKLM\Software\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Deleted HKLM\Software\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Deleted HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Deleted HKLM\Software\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Deleted HKLM\Software\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Deleted HKLM\Software\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Deleted HKLM\Software\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted Conduit

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4412 octets] - [25/01/2022 17:59:18]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Petura · #51 Příspěvek od **Petura** » 25 led 2022 18:07

Po startu je počítač pomalý, ale hlevně když spustím Firefox, tak trvá 5 minut než se zobrazí stránka.

#52 Příspěvek od **JaRon** » 25 led 2022 18:13

Prepac, ALE pokial bude mat NTB 2GB RAM bude iba pomaly

Petura · #53 Příspěvek od **Petura** » 25 led 2022 18:29

Ok, snad trošku pomuže to pročištění.

#54 Příspěvek od **Rudy** » 25 led 2022 19:38

Dejte nové logy FRST+Addition.

Petura · #55 Příspěvek od **Petura** » 25 led 2022 20:00

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-01-2022
Ran by Pavel (administrator) on PAVEL-PC (TOSHIBA Satellite Pro L500) (25-01-2022 19:44:06)
Running from C:\Users\Pavel\Downloads
Loaded Profiles: Pavel & DefaultAppPool
Platform: Microsoft Windows 10 Pro Version 21H1 19043.1466 (X86) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [143128 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [TeamsMachineInstaller] => C:\Program Files\Teams Installer\Teams.exe [107879704 2020-10-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [1310720 2020-02-10] (Seiko Epson Corporation) [File not signed]
HKLM\...\Run: [EPPCCMON] => C:\Program Files\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [445800 2021-10-08] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [BingSvc] => C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [146312 2020-08-13] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd) [File not signed]
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_TATIYUE.EXE [410712 2020-09-11] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\RunOnce: [Application Restart #2] => C:\Users\Pavel\AppData\Roaming\Seznam Browser\Seznam.cz.exe [2017448 2021-12-22] (Seznam.cz, a.s. -> Seznam.cz)
HKLM\...\Windows NT x86\Print Processors\Epson Laser02: C:\Windows\System32\spool\prtprocs\W32X86\EP0LB03F.DLL [34304 2009-07-14] (Microsoft Windows -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L210 Series 32MonitorBE: C:\WINDOWS\system32\E_TLBI2E.DLL [95232 2015-01-14] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L3260 Series 32MonitorBE: C:\WINDOWS\system32\E_TLMBYUE.DLL [148480 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [385024 2016-09-14] (SEIKO EPSON CORPORATION) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\97.0.4692.99\Installer\chrmstp.exe [2022-01-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Monitor.lnk [2015-12-22]
ShortcutTarget: Bluetooth Monitor.lnk -> C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe (TOSHIBA CORPORATION -> TOSHIBA CORPORATION)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {030E4B8C-B8EF-4AFC-9889-4CFCBA17AA1A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6332312 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {046A889C-5F65-4E63-9E99-AA880B6F3ED0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {0CF34519-7C48-4F17-9E24-CBEDA387DB5B} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (No File)
Task: {140F5687-0A6A-4349-B8BD-211C6193B9CA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {1AC53BE3-482B-4F11-9F66-6293C7314C10} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (No File)
Task: {1FD6B283-BFF3-46E5-A81C-3912809F2AEB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (No File)
Task: {243A1BBC-C4A0-4BF3-8FA0-B048022F85C0} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File)
Task: {24FA84A0-E087-48EC-BC51-2B9C4C815D78} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {27DAB192-2E65-4925-B196-A1CB356523D5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [108872 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {282A0010-AD22-4A08-B0D2-3216A241D96F} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (No File)
Task: {29E600A9-D1EF-441D-A1F8-DDEA429D7427} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (No File)
Task: {29ECEE08-B5AE-4FF9-BDAF-A7DF017C4131} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {2A834D30-D819-41E9-BAA7-EA63805DBF0C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [108872 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {31B79A74-E0E0-43B7-ACBF-E0D4FEA60844} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (No File)
Task: {367F930A-A3DB-4112-B1F1-50E92A171C88} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {38BF360A-CF95-4F6C-9404-F1EFCD84F62F} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (No File)
Task: {49744D88-A648-47EA-B449-9BCB4D7CBCB3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {501E5D8A-29A3-4CF0-B75E-12F174AF57AB} - System32\Tasks\{8E23F4FB-DC6C-4740-BF86-143146CBB9CE} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.85.112/cs/abandoninstall?page=tsProgressBar
Task: {51533A34-8547-4F26-8FA2-0F6A79CF7752} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (No File)
Task: {5301B6C6-E973-4D1B-902D-123A7BD328A5} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {53A43B77-E6EA-4E5B-AF68-B021E4D7807A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6332312 2021-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {5AAE0789-575C-4E16-9B06-9E8CF8F1774F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (No File)
Task: {5B845E1F-7592-4CAB-87A1-8DE6C9B1E244} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (No File)
Task: {6050A94A-CE40-4355-AA55-B583C9ADE785} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-07-15] (Adobe Inc. -> Adobe)
Task: {64B85F96-045C-486D-861B-8F0BA1174D83} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (No File)
Task: {673357AE-5E4E-4CC0-8BEE-486F52476EA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17768320 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {68114295-4BE7-4D4D-9554-6E5536B7CAEC} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {68885C4A-1EFC-4E05-BB55-ED67D673881F} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (No File)
Task: {6BEC043B-424B-4DA6-BE2D-823BA8CC01CB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (No File)
Task: {6CB5F397-500D-4C53-BFED-218A4D2AAE81} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {6D741A88-28E4-41E3-9350-60E7E9B90201} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1546480 2021-04-30] (Avast Software s.r.o. -> Avast Software)
Task: {6DFF9C28-3480-4A4E-83D7-D8C8177D91D1} - System32\Tasks\CCleanerSkipUAC - Pavel => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd) [File not signed]
Task: {6E5D8C4F-D543-4E59-9F50-A1A5FAED73D0} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (No File)
Task: {72DAE7BA-35BF-4A15-AA20-2BDC0110A19C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {74CCFB59-B44A-48F7-8460-24407C243470} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (No File)
Task: {7505606D-5EFE-4697-96FA-01F5F257883B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1331792 2020-05-07] (Adobe Inc. -> Adobe Inc.)
Task: {7835D3BA-D792-4255-BFA0-74EC9E63B505} - System32\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E} => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_TTSYUE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {783F82E5-7211-4AF6-A703-93B3F1DEC4FF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {86DEF50E-451C-453B-97BE-2A2331DF034E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {8F307A27-3936-4AC7-9182-1CF06CD153AB} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {8FC287B3-C8C5-47AE-835B-9D1F86303241} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {90B0D851-D686-45F4-A84A-7B3F38B2C77A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-12-07] (Piriform Software Ltd -> Piriform)
Task: {95A4EFC1-75AC-4996-856A-A2E3050FCA5B} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4398872 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
Task: {9B795048-9881-448B-86F4-9ABC5F474841} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe (No File)
Task: {9EED01A3-6313-4C67-B611-A3B7AC07CCBC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A01CFF99-F68D-4609-A832-22ED59D24223} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {A0325E26-8B8A-46F4-9655-544B1071F892} - System32\Tasks\{45BDAF88-325C-4F05-A48C-FEC67BF466DD} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.85.112/cs/abandoninstall?page=tsProgressBar
Task: {A329608C-4350-447F-B625-3707011D0451} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {A47A209D-E6D3-4667-88AE-8D2E5BFE5A2D} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {A9BA4840-1D37-4949-BC3D-9BC2228A9E70} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (No File)
Task: {AE8FACF2-3DE4-4B46-88BD-659617113EC2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [17768320 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {B9AB882D-F8A1-4401-8421-0A747CB60EDA} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (No File)
Task: {C04CB74A-5BF5-4ABA-9321-4EC5BAEBAB89} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (No File)
Task: {C1B0DB6C-63ED-44CB-BA91-74A6D89CA248} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {C4409E3B-8398-4228-8733-7CFF9D80B349} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CDC56251-1E00-44E2-93B7-909B980831A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {CF872801-5307-445E-B830-EC49EFE15919} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (No File)
Task: {DA7C48B3-FE7A-4F7F-ADD8-829FC101D40E} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_32_0_0_403_Plugin.exe [1475640 2020-07-15] (Adobe Inc. -> Adobe)
Task: {DF7747AC-5103-418B-9B94-DF67CC311254} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {E22653E0-75E5-4E8E-8DC0-E364E0C69CEF} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {E5D3816A-C383-4DC1-BE0A-782E1A99AE19} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {E62B9157-B0E2-4E07-948C-D206C188131F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (No File)
Task: {E79B2998-8F63-451A-A56D-26EDC0A5098A} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {E7A9178F-8C59-42C3-BC40-D29DC1397A38} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe -crl -hms -pscn 15 (No File)
Task: {ED6BC8CC-6558-42D8-9ABA-DB9DD8ABBA21} - System32\Tasks\{71FC3F65-1DE0-45BD-9D5D-1B4ADCEA61F5} => "c:\program files\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.18.85.109/cs/abandoninstall?page=tsProgressBar
Task: {F4DB41C7-172E-438D-8917-99BAD1993D7C} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {F637AB83-B411-4792-8A5C-2FBAE6117872} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {FC4B2529-0B6A-4A7C-9F7F-347DB10C4CAA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {FD03C97A-C3B9-427A-907A-7C3716AB0336} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (No File)
Task: {FD3D629C-39BA-4598-AA5B-62D4707A64AD} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe /StartRecording (No File)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\WINDOWS\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E}.job => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_TTSYUE.EXE:/EXE:{DA2AE56B-C752-491B-8535-5DBE7D21451E} /F:UpdateWORKGROUP\PAVEL-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.28.195 192.168.10.11
Tcpip\..\Interfaces\{1d11bf92-a030-46c6-b895-2205de0f81eb}: [DhcpNameServer] 193.165.67.250 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{498730db-71fb-474a-bf0d-d7f245ef9a92}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{74cb453d-141b-44dd-9141-3162b8cf1fe4}: [NameServer] 194.228.211.33,160.218.161.60
Tcpip\..\Interfaces\{b557036a-5bd5-4507-8aa0-ebcc343e4ec6}: [DhcpNameServer] 192.168.28.195 192.168.10.11

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Pavel\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-24]

FireFox:
========
FF DefaultProfile: n1u6nex7.default
FF ProfilePath: C:\Users\Pavel\AppData\Roaming\TomTom\HOME\Profiles\8zvzyjae.default [2015-11-25]
FF Extension: (No Name) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default [2022-01-25]
FF Homepage: Mozilla\Firefox\Profiles\n1u6nex7.default -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\n1u6nex7.default -> hxxps://mslezsky.os.tc; hxxps://www.firsttofuck.com
FF Extension: (Bing Search) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\bingsearch.full@microsoft.com [2015-04-23] [Legacy] [not signed]
FF Extension: (Bing Search) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-03-23] [Legacy]
FF Extension: (Avast Passwords) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2020-02-11] [UpdateUrl:hxxps://pamcdn.avast.com/pamcdn/extensions/firefox/update.json]
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\sp@avast.com.xpi [2021-11-01]
FF Extension: (No Name) - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-11-25]
FF SearchPlugin: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\searchplugins\bing-.xml [2016-03-23]
FF SearchPlugin: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\n1u6nex7.default\searchplugins\seznam-avast.xml [2014-09-14]
FF Extension: (Skype) - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] [Legacy]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.9.799 => not found
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2016-01-04] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_403.dll [2020-07-15] (Adobe Inc. -> )
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll [No File]
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-317401563-2454302601-1562231924-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Pavel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-04] (Unity Technologies SF -> Unity Technologies ApS)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default [2022-01-09]
CHR StartupUrls: Default -> "hxxps://www.google.cz/"
CHR Extension: (Prezentace) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-12-31]
CHR Extension: (Dokumenty) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-12-31]
CHR Extension: (Disk Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-02-20]
CHR Extension: (YouTube) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Vyhledávání Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-26]
CHR Extension: (Tabulky) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-12-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-09]
CHR Extension: (Skype) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2019-12-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-03]
CHR Extension: (Gmail) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-02-20]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
CHR HKU\S-1-5-21-317401563-2454302601-1562231924-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdobeARMservice; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [169032 2020-05-07] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-07-15] (Adobe Inc. -> Adobe)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7627856 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [428312 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [427800 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-06-04] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8337296 2021-12-08] (Microsoft Corporation -> Microsoft Corporation)
S3 cloudidsvc; C:\WINDOWS\system32\cloudidsvc.dll [81408 2021-11-11] (Microsoft Windows -> Microsoft Corporation)
S2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc.exe [260064 2021-06-21] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S2 EPSON_PM_RPCV4_05; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE [142432 2015-01-14] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4752816 2022-01-24] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 uhssvc; C:\Program Files\Microsoft Update Health Tools\uhssvc.exe [283960 2021-09-08] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [2250992 2019-12-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [85240 2019-12-19] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [33592 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [186288 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [308776 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [207368 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [91656 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [19400 2021-11-18] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39288 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [154512 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [393032 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [92752 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71912 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [690704 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [454408 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [161376 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [266184 2021-12-12] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [200192 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [104448 2019-12-07] (Microsoft Corporation) [File not signed]
S3 cxwmbclass; C:\WINDOWS\System32\drivers\cxwmbclass.sys [107520 2021-02-14] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [131952 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [562176 2019-12-07] (Microsoft Windows -> Realtek)
R3 rtl8192se; C:\WINDOWS\System32\drivers\rtl8192se.sys [1113600 2019-12-07] (Microsoft Windows -> Realtek Semiconductor Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [148336 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [42088 2015-12-31] (TOSHIBA CORPORATION -> Toshiba Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [37472 2019-12-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [278456 2019-12-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [39368 2019-12-19] (Microsoft Windows -> Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\System32\drivers\WUDFRd.sys [213504 2022-01-24] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-01-25 13:35 - 2022-01-25 17:59 - 000000000 ____D C:\AdwCleaner
2022-01-25 13:33 - 2022-01-25 13:33 - 008540344 _____ (Malwarebytes) C:\Users\Pavel\Downloads\adwcleaner_8.3.1.exe
2022-01-24 14:33 - 2022-01-24 14:33 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-24 13:47 - 2022-01-24 13:47 - 000000000 ___HD C:\$WinREAgent
2022-01-24 12:47 - 2022-01-24 13:46 - 000035684 _____ C:\Users\Pavel\Downloads\Addition.txt
2022-01-24 12:30 - 2022-01-25 19:47 - 000032444 _____ C:\Users\Pavel\Downloads\FRST.txt
2022-01-24 12:25 - 2022-01-25 19:46 - 000000000 ____D C:\FRST
2022-01-24 12:06 - 2022-01-24 12:06 - 002019328 _____ (Farbar) C:\Users\Pavel\Downloads\FRST.exe
2022-01-24 11:58 - 2022-01-24 11:58 - 000001062 _____ C:\Users\Pavel\Desktop\Seznam.cz.lnk
2022-01-24 11:56 - 2022-01-24 11:59 - 000000000 ____D C:\Users\Pavel\AppData\Roaming\Seznam Browser
2022-01-24 08:13 - 2022-01-25 16:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-01-09 19:16 - 2022-01-09 19:16 - 000030445 _____ C:\Users\Pavel\Desktop\Image_20220109_0003.pdf
2022-01-09 19:14 - 2022-01-09 19:14 - 000334402 _____ C:\Users\Pavel\Desktop\Image_20220109_0002.pdf
2022-01-09 19:12 - 2022-01-09 19:12 - 000000000 ____D C:\Users\Pavel\AppData\Local\Seiko_Epson_Corporation
2022-01-09 19:11 - 2022-01-09 19:11 - 000216304 _____ C:\Users\Pavel\Desktop\Image_20220109_0001.pdf
2022-01-09 18:28 - 2022-01-09 18:28 - 000002047 _____ C:\Users\Pavel\Desktop\Epson ScanSmart.lnk
2022-01-09 18:01 - 2022-01-24 07:32 - 000000943 _____ C:\WINDOWS\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E}.job
2022-01-09 18:01 - 2022-01-17 22:37 - 000003492 _____ C:\WINDOWS\system32\Tasks\EPSON L3260 Series Update {DA2AE56B-C752-491B-8535-5DBE7D21451E}
2022-01-09 17:59 - 2022-01-09 17:59 - 000000000 ____D C:\Program Files\EpsonNet
2022-01-09 17:57 - 2021-06-21 18:31 - 000147472 _____ (TWAIN Working Group) C:\WINDOWS\system32\twaindsm.dll
2022-01-09 17:55 - 2018-06-15 04:14 - 000148480 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\E_TLMBYUE.DLL
2022-01-09 17:45 - 2022-01-09 17:45 - 009634528 _____ (Seiko Epson Corporation. ) C:\Users\Pavel\Downloads\epson642532eu.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-01-25 19:43 - 2020-08-11 18:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-25 19:43 - 2016-11-23 15:08 - 000000000 ____D C:\Users\Pavel\AppData\LocalLow\Mozilla
2022-01-25 19:32 - 2014-07-01 07:44 - 000000000 ____D C:\Program Files\Google
2022-01-25 18:59 - 2019-12-07 07:12 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-25 18:03 - 2014-05-01 18:11 - 000000000 ____D C:\ProgramData\Mozilla
2022-01-25 17:20 - 2020-08-11 18:53 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2022-01-25 17:10 - 2020-08-11 18:53 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-01-25 16:48 - 2017-11-26 08:10 - 000000000 ____D C:\Users\Pavel\AppData\Local\AVAST Software
2022-01-25 16:14 - 2020-08-11 18:12 - 001915046 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-25 16:14 - 2019-12-07 13:21 - 000796220 _____ C:\WINDOWS\system32\perfh005.dat
2022-01-25 16:14 - 2019-12-07 13:21 - 000179124 _____ C:\WINDOWS\system32\perfc005.dat
2022-01-25 16:14 - 2019-12-07 07:10 - 000000000 ____D C:\WINDOWS\INF
2022-01-25 16:10 - 2020-08-11 18:10 - 000440776 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-01-25 16:05 - 2020-08-11 18:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-01-25 16:05 - 2020-08-11 18:09 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-25 16:04 - 2019-12-07 07:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-01-25 16:03 - 2019-12-07 07:12 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-01-25 16:03 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\SystemResources
2022-01-25 16:03 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-01-25 16:03 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-01-25 16:02 - 2019-12-07 13:23 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-01-25 16:02 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-01-25 16:01 - 2014-05-01 18:11 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2022-01-25 06:42 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-01-24 15:08 - 2020-08-11 18:14 - 000000000 ____D C:\Users\Pavel
2022-01-24 14:53 - 2019-12-07 07:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-01-24 14:32 - 2014-05-01 16:49 - 000413786 __RSH C:\bootmgr
2022-01-24 13:19 - 2014-05-08 16:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-24 12:26 - 2014-05-08 16:31 - 142270864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-01-24 11:59 - 2016-11-21 23:26 - 000001071 _____ C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Seznam.cz.lnk
2022-01-24 11:28 - 2021-10-25 13:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-01-24 11:28 - 2014-05-01 18:11 - 000001099 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-01-24 08:40 - 2014-07-01 07:46 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-01-24 08:27 - 2020-08-11 18:53 - 000003462 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-24 08:27 - 2020-08-11 18:53 - 000003338 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-24 08:27 - 2018-10-03 18:45 - 000000000 ____D C:\Users\Pavel\AppData\Local\CrashDumps
2022-01-24 08:26 - 2021-02-06 12:05 - 000000000 ____D C:\Users\Pavel\Desktop\vypas2021
2022-01-24 08:23 - 2019-12-07 07:12 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-24 08:21 - 2020-08-30 12:37 - 000002388 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-24 08:11 - 2020-08-30 12:36 - 000003572 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-24 08:11 - 2020-08-30 12:36 - 000003448 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-17 22:37 - 2021-11-13 21:16 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Pavel
2022-01-17 22:37 - 2020-08-11 18:53 - 000002226 _____ C:\WINDOWS\system32\Tasks\{8E23F4FB-DC6C-4740-BF86-143146CBB9CE}
2022-01-17 22:37 - 2020-08-11 18:53 - 000002226 _____ C:\WINDOWS\system32\Tasks\{71FC3F65-1DE0-45BD-9D5D-1B4ADCEA61F5}
2022-01-17 22:37 - 2020-08-11 18:53 - 000002226 _____ C:\WINDOWS\system32\Tasks\{45BDAF88-325C-4F05-A48C-FEC67BF466DD}
2022-01-17 22:37 - 2020-08-11 18:53 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2022-01-09 18:58 - 2015-09-25 19:17 - 000000000 ____D C:\Users\Pavel\AppData\Roaming\EPSON
2022-01-09 18:24 - 2019-04-27 08:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2022-01-09 18:24 - 2016-01-04 10:45 - 000000000 ____D C:\Program Files\EPSON Software
2022-01-09 18:23 - 2014-07-15 11:38 - 000000000 ____D C:\ProgramData\EPSON
2022-01-09 18:21 - 2015-01-27 14:34 - 000000000 ____D C:\Program Files\epson
2022-01-09 18:21 - 2014-05-03 18:42 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2022-01-09 17:58 - 2014-07-15 11:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

==================== Files in the root of some directories ========

2015-07-07 17:38 - 2015-07-07 17:38 - 001125056 _____ (Adobe Systems Incorporated) C:\Users\Pavel\flashplayer18_ga_install.exe
2015-07-07 17:40 - 2015-07-07 17:40 - 001124072 _____ (Adobe Systems Incorporated) C:\Users\Pavel\readerdc_cz_ga_install.exe
2014-05-10 18:23 - 2014-05-30 20:49 - 000000000 _____ () C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
2014-05-09 18:01 - 2014-05-09 18:01 - 000033193 _____ () C:\Users\Pavel\AppData\Roaming\UserTile.png

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-01-2022
Ran by Pavel (25-01-2022 19:49:14)
Running from C:\Users\Pavel\Downloads
Microsoft Windows 10 Pro Version 21H1 19043.1466 (X86) (2020-08-11 17:56:32)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-317401563-2454302601-1562231924-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-317401563-2454302601-1562231924-503 - Limited - Disabled)
Guest (S-1-5-21-317401563-2454302601-1562231924-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-317401563-2454302601-1562231924-1002 - Limited - Enabled)
Pavel (S-1-5-21-317401563-2454302601-1562231924-1000 - Administrator - Enabled) => C:\Users\Pavel
WDAGUtilityAccount (S-1-5-21-317401563-2454302601-1562231924-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.009.20074 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.403 - Adobe)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 21.10.2498 - Avast Software)
Bluetooth Monitor 4 (HKLM\...\{61539202-097E-487E-9237-B291AB56D54C}) (Version: 4.03.000 - TOSHIBA)
CCleaner (HKLM\...\CCleaner) (Version: 5.87 - Piriform)
Dropbox (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Epson Event Manager (HKLM\...\{DBC38C08-9FB5-43A5-B6BA-EB10AC7DA570}) (Version: 3.11.0053 - Seiko Epson Corporation)
Epson E-Web Print (HKLM\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
EPSON L210 Series Printer Uninstall (HKLM\...\EPSON L210 Series) (Version: - SEIKO EPSON Corporation)
EPSON L3260 Series Printer Uninstall (HKLM\...\EPSON L3260 Series) (Version: - Seiko Epson Corporation)
Epson Manuals (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 2.0.1.0 - Seiko Epson Corporation)
Epson Photo+ (HKLM\...\{15000BAD-6D4B-4330-824E-3712C0DF4F9A}) (Version: 3.4.0.0 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM\...\{C4D8E138-C67B-41D5-B493-F54BB72B43E0}) (Version: 3.3.0.0 - Seiko Epson Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Scan 2 (HKLM\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
EPSON Scan PDF EXtensions (HKLM\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.02 - SEIKO EPSON Corp.)
Epson ScanSmart (HKLM\...\{D310BDCC-D4B4-4DC1-B9DF-D1D7367CAC4F}) (Version: 3.6.1 - Seiko Epson Corporation)
Epson Software Updater (HKLM\...\{14898485-6509-496B-8C30-D5DB8C1C8639}) (Version: 4.6.3 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
Google Chrome (HKLM\...\Google Chrome) (Version: 97.0.4692.99 - Google LLC)
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.14701.20262 - Microsoft Corporation)
Microsoft Edge (HKLM\...\Microsoft Edge) (Version: 97.0.1072.69 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM\...\Microsoft EdgeWebView) (Version: 97.0.1072.69 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\OneDriveSetup.exe) (Version: 20.124.0621.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{14059FF8-04A2-4B6E-B4BD-FEDE2BFF22F2}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox (x86 cs) (HKLM\...\Mozilla Firefox 96.0.2 (x86 cs)) (Version: 96.0.2 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-0000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Prohlížeč Seznam.cz (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Seznam Browser) (Version: 6.19.0 - Seznam.cz a.s.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Starshine 1.díl (HKLM\...\{73B3C57B-3ED7-40DB-A554-32EB5D35F84E}) (Version: 1.00.000 - )
Teams Machine-Wide Installer (HKLM\...\{39AF0813-FA7B-4860-ADBE-93B9B214B914}) (Version: 1.3.0.28779 - Microsoft Corporation)
Testy SŽDC a ČD (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\afb03a3d3cf24e4b) (Version: 1.0.0.9 - Martin Brož)
Unity Web Player (HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\UnityWebPlayer) (Version: 4.5.2f1 - Unity Technologies ApS)
Update for Windows 10 (KB4023057) (HKLM\...\{5F01BF33-E873-4B83-B2CC-E4DEF494073E}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR 5.91 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Packages:
=========
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.209.700.0_x86__kgqvnymyfvs32 [2022-01-14] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x86__8wekyb3d8bbwe [2019-09-17] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x86__8wekyb3d8bbwe [2020-08-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x86__8wekyb3d8bbwe [2022-01-14] (Microsoft Studios) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x86__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0 [2022-01-09] (Spotify AB) [Startup Task]
Trains on Bridges PREMIUM -> C:\Program Files\WindowsApps\Microsoft.TrainsonBridgesPREMIUM_1.0.0.0_neutral__8wekyb3d8bbwe [2020-08-05] (Microsoft Corporation)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-12] (Twitter Inc.)
Vodafone Mobile Broadband -> C:\Program Files\WindowsApps\VodafoneGroupServices.VodafoneMobileBroadband_2.10.46.0_x86__cx08jceyq9bcp [2019-11-02] (Vodafone Group Services)
WindowsDVDPlayer -> C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x86__8wekyb3d8bbwe [2016-05-24] (Microsoft Corporation)
World Oceans Day PREMIUM -> C:\Program Files\WindowsApps\Microsoft.WorldOceansDayPREMIUM_1.0.0.0_neutral__8wekyb3d8bbwe [2020-08-05] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Pavel\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies SF -> Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{9d7602e2-51fa-4133-8d8b-5277272dd0a2}\localserver32 -> C:\Users\Pavel\AppData\Roaming\Seznam Browser\sznAgent\Seznam.cz.exe (Seznam.cz, a.s. -> Seznam.cz)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-317401563-2454302601-1562231924-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-12-12] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-317401563-2454302601-1562231924-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-317401563-2454302601-1562231924-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-317401563-2454302601-1562231924-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Pavel\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2016-09-14 14:31 - 2016-09-14 14:31 - 000385024 ____S (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/?clid=22668
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-317401563-2454302601-1562231924-1000 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\sharepoint.com -> hxxps://sosfm365-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2020-01-26 13:40 - 000000878 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-317401563-2454302601-1562231924-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.28.195 - 192.168.10.11
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "TeamsMachineInstaller"
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\StartupApproved\Run: => "BingSvc"
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C20959EC-B91C-4B88-9EBB-179AD985AA20}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{22F70E8B-E37D-42D7-8B2A-59379558FF96}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{49425AA1-7828-409C-8A8D-3D18B45CF63B}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{7286B694-C129-42B3-978B-E8F784A6BEB0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{04D57D3C-653F-4551-A74C-1EC067A2A156}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{02F56C70-B696-4574-84AD-82A52AD132A6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5EC42275-F05B-4DE8-89C9-4BEC23D3E514}] => (Allow) C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{5B650DED-FC2E-42DF-A34D-C1C23F560F6D}] => (Allow) C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{CFC88587-3C05-4311-9E2B-187BBFBAC383}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0B45EB32-591B-47F2-A98B-893E39BB007D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{FBD9A84F-8D72-4E2E-B284-4063CC4547BB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{F3F5E942-B264-4F18-8D05-88AD42B156BD}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A8E044C8-E196-43E5-9385-9769ED2C423D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E1C9512-CFCB-479E-B002-022E76BA40B7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E5E0CA9-F509-4C26-A4F5-21D59C610C33}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{DD4D4C9E-3FA7-45F4-84A8-4AB5C15CD1EB}C:\program files\avast software\avast\avastui.exe] => (Block) C:\program files\avast software\avast\avastui.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [UDP Query User{5AB7C20D-24F4-4F93-A2FE-586EE16D4165}C:\program files\avast software\avast\avastui.exe] => (Block) C:\program files\avast software\avast\avastui.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{182937A3-A04A-49E4-8A6B-2E37D98B4D13}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F524FA69-55D8-4E9D-A312-16248E449352}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{DF4194F2-8097-4DC3-840D-16CE37C1E5AF}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{1F2D48FF-A04A-4646-98DD-5759E7B454BA}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{16192A44-5D22-4F4E-9BC4-76751E77B7F4}] => (Block) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{8D1B852A-0C9F-4D6F-9441-6D658357D1FF}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{BAB44224-7A43-411F-B312-2C7BB1EBFF06}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{B61362FB-68EC-4923-A06D-EE11662580E3}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe (Seiko Epson Corporation) [File not signed]
FirewallRules: [{8D59D4A4-0CE1-416B-A7B5-8B463EE828AA}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe (Seiko Epson Corporation) [File not signed]
FirewallRules: [{73C7044F-4757-4D3B-8BE8-32C432C1EED3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{14134AC1-1136-4178-BAD8-61F194694FD3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2A8A27EB-D24E-4BF8-A7D3-1FF168A1B8BC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8EB1B93A-14E2-4F46-B165-69769372EC22}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A0DBD105-D26A-45BC-8A65-D6D5A2561A31}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BC280845-7B53-4AC2-82B8-F119AD1005D1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F154E759-09BA-4D8F-893F-BBBD664F1036}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{76B22446-7853-4E1C-A518-6160D2D6411F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2A045234-9613-4987-A022-7437BE542F83}] => (Allow) C:\Program Files\Microsoft\EdgeWebView\Application\97.0.1072.69\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F96F0CE8-D7FF-4913-90FB-7326B59FA6D7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

12-01-2022 18:46:59 Naplánovaný kontrolní bod
24-01-2022 09:44:33 Naplánovaný kontrolní bod
24-01-2022 13:36:41 Instalační služba modulů systému Windows
24-01-2022 13:47:52 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (01/25/2022 06:10:36 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/25/2022 04:16:00 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/25/2022 04:14:16 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe, identifikátor PID: 2284, identifikátor PID ProfSvc: 1516.

Error: (01/25/2022 06:43:18 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 01:48:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (01/24/2022 01:38:04 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (01/24/2022 01:29:12 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generování kontextu aktivace pro C:\Program Files\CCleaner\CCleaner.exe se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files\CCleaner\CCleaner.exe na řádku 0.
Neplatná syntaxe XML.

Error: (01/24/2022 12:24:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program CHXSmartScreen.exe verze 10.0.19041.423 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2f5c

Čas spuštění: 01d8111483b0d21b

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

ID hlášení: 9a26f552-dd6c-455f-a3df-d8e3da859b9a

Úplný název balíčku s chybou: Microsoft.Windows.Apprep.ChxApp_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

System errors:
=============
Error: (01/25/2022 05:59:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (01/25/2022 05:59:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba EPSON V3 Service4(05) byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/25/2022 05:59:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Adobe Acrobat Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/25/2022 05:59:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Epson Scanner Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (01/25/2022 04:15:50 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Search přestala během spouštění reagovat.

Error: (01/25/2022 04:14:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Služba zasílání zpráv_fbf3d byla ukončena s následující chybou:
Zařízení není připraveno.

Error: (01/25/2022 04:08:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba AppX Deployment Service (AppXSVC) závisí na službě Služba State Repository, která neuspěla při spuštění v důsledku následující chyby:
Při spouštění služba uvízla ve spouštěcím stavu.

Error: (01/25/2022 04:08:37 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Služba State Repository přestala během spouštění reagovat.

CodeIntegrity:
===============
Date: 2022-01-25 18:06:13
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2022-01-25 16:11:59
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume1\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: TOSHIBA V1.80 10/28/2009
Motherboard: TOSHIBA KSWAA
Processor: Intel(R) Core(TM)2 Duo CPU T5870 @ 2.00GHz
Percentage of memory in use: 78%
Total physical RAM: 1912.87 MB
Available physical RAM: 404.18 MB
Total Virtual: 4472.87 MB
Available Virtual: 2666.39 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:146.05 GB) (Free:46.51 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:151.6 GB) (Free:134.28 GB) NTFS

\\?\Volume{3f7dc220-0000-0000-0000-408324000000}\ () (Fixed) (Total:0.44 GB) (Free:0.1 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 3F7DC220)
Partition 1: (Active) - (Size=146.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 MB) - (Type=27)
Partition 3: (Not Active) - (Size=151.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

#56 Příspěvek od **Rudy** » 25 led 2022 21:10

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [BingSvc] => C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [146312 2020-08-13] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {046A889C-5F65-4E63-9E99-AA880B6F3ED0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {140F5687-0A6A-4349-B8BD-211C6193B9CA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {1AC53BE3-482B-4F11-9F66-6293C7314C10} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (No File)
Task: {1FD6B283-BFF3-46E5-A81C-3912809F2AEB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (No File)
Task: {243A1BBC-C4A0-4BF3-8FA0-B048022F85C0} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File
Task: {282A0010-AD22-4A08-B0D2-3216A241D96F} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (No File)
Task: {29E600A9-D1EF-441D-A1F8-DDEA429D7427} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (No File)
Task: {29ECEE08-B5AE-4FF9-BDAF-A7DF017C4131} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {31B79A74-E0E0-43B7-ACBF-E0D4FEA60844} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (No File)
Task: {38BF360A-CF95-4F6C-9404-F1EFCD84F62F} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (No File)
Task: {49744D88-A648-47EA-B449-9BCB4D7CBCB3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {51533A34-8547-4F26-8FA2-0F6A79CF7752} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (No File)
sk: {5AAE0789-575C-4E16-9B06-9E8CF8F1774F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (No File)
Task: {5B845E1F-7592-4CAB-87A1-8DE6C9B1E244} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (No File)
Task: {64B85F96-045C-486D-861B-8F0BA1174D83} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (No File)
Task: {68114295-4BE7-4D4D-9554-6E5536B7CAEC} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {68885C4A-1EFC-4E05-BB55-ED67D673881F} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (No File)
Task: {6BEC043B-424B-4DA6-BE2D-823BA8CC01CB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (No File)
Task: {6CB5F397-500D-4C53-BFED-218A4D2AAE81} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {74CCFB59-B44A-48F7-8460-24407C243470} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (No File)
Task: {783F82E5-7211-4AF6-A703-93B3F1DEC4FF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {86DEF50E-451C-453B-97BE-2A2331DF034E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {8F307A27-3936-4AC7-9182-1CF06CD153AB} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {9B795048-9881-448B-86F4-9ABC5F474841} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe (No File)
Task: {9EED01A3-6313-4C67-B611-A3B7AC07CCBC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A01CFF99-F68D-4609-A832-22ED59D24223} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {A9BA4840-1D37-4949-BC3D-9BC2228A9E70} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (No File)
Task: {B9AB882D-F8A1-4401-8421-0A747CB60EDA} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (No File)
Task: {C04CB74A-5BF5-4ABA-9321-4EC5BAEBAB89} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (No File)
Task: {C4409E3B-8398-4228-8733-7CFF9D80B349} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CDC56251-1E00-44E2-93B7-909B980831A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {DF7747AC-5103-418B-9B94-DF67CC311254} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {E22653E0-75E5-4E8E-8DC0-E364E0C69CEF} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {E62B9157-B0E2-4E07-948C-D206C188131F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (No File)
Task: {E7A9178F-8C59-42C3-BC40-D29DC1397A38} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe -crl -hms -pscn 15 (No File)
Task: {F637AB83-B411-4792-8A5C-2FBAE6117872} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {FC4B2529-0B6A-4A7C-9F7F-347DB10C4CAA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {FD03C97A-C3B9-427A-907A-7C3716AB0336} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (No File)
Task: {FD3D629C-39BA-4598-AA5B-62D4707A64AD} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe /StartRecording (No File)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.9.799 => not found
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll [No File]
U3 idsvc; no ImagePath
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\Tasks\{8E23F4FB-DC6C-4740-BF86-143146CBB9CE}
C:\WINDOWS\system32\Tasks\{71FC3F65-1DE0-45BD-9D5D-1B4ADCEA61F5}
C:\WINDOWS\system32\Tasks\{45BDAF88-325C-4F05-A48C-FEC67BF466DD}
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
FirewallRules: [{8D1B852A-0C9F-4D6F-9441-6D658357D1FF}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{BAB44224-7A43-411F-B312-2C7BB1EBFF06}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File

EmptyTemp:
End

Uložte do C:\Users\Pavel\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Petura · #57 Příspěvek od **Petura** » 25 led 2022 21:35

Fix result of Farbar Recovery Scan Tool (x86) Version: 22-01-2022
Ran by Pavel (25-01-2022 21:13:57) Run:1
Running from C:\Users\Pavel\Downloads
Loaded Profiles: Pavel & DefaultAppPool
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-317401563-2454302601-1562231924-1000\...\Run: [BingSvc] => C:\Users\Pavel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [146312 2020-08-13] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {046A889C-5F65-4E63-9E99-AA880B6F3ED0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {140F5687-0A6A-4349-B8BD-211C6193B9CA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {1AC53BE3-482B-4F11-9F66-6293C7314C10} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (No File)
Task: {1FD6B283-BFF3-46E5-A81C-3912809F2AEB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (No File)
Task: {243A1BBC-C4A0-4BF3-8FA0-B048022F85C0} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (No File
Task: {282A0010-AD22-4A08-B0D2-3216A241D96F} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (No File)
Task: {29E600A9-D1EF-441D-A1F8-DDEA429D7427} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (No File)
Task: {29ECEE08-B5AE-4FF9-BDAF-A7DF017C4131} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {31B79A74-E0E0-43B7-ACBF-E0D4FEA60844} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (No File)
Task: {38BF360A-CF95-4F6C-9404-F1EFCD84F62F} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (No File)
Task: {49744D88-A648-47EA-B449-9BCB4D7CBCB3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {51533A34-8547-4F26-8FA2-0F6A79CF7752} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (No File)
sk: {5AAE0789-575C-4E16-9B06-9E8CF8F1774F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (No File)
Task: {5B845E1F-7592-4CAB-87A1-8DE6C9B1E244} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (No File)
Task: {64B85F96-045C-486D-861B-8F0BA1174D83} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (No File)
Task: {68114295-4BE7-4D4D-9554-6E5536B7CAEC} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {68885C4A-1EFC-4E05-BB55-ED67D673881F} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (No File)
Task: {6BEC043B-424B-4DA6-BE2D-823BA8CC01CB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (No File)
Task: {6CB5F397-500D-4C53-BFED-218A4D2AAE81} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {74CCFB59-B44A-48F7-8460-24407C243470} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (No File)
Task: {783F82E5-7211-4AF6-A703-93B3F1DEC4FF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {86DEF50E-451C-453B-97BE-2A2331DF034E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {8F307A27-3936-4AC7-9182-1CF06CD153AB} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {9B795048-9881-448B-86F4-9ABC5F474841} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe (No File)
Task: {9EED01A3-6313-4C67-B611-A3B7AC07CCBC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A01CFF99-F68D-4609-A832-22ED59D24223} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION
Task: {A9BA4840-1D37-4949-BC3D-9BC2228A9E70} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (No File)
Task: {B9AB882D-F8A1-4401-8421-0A747CB60EDA} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (No File)
Task: {C04CB74A-5BF5-4ABA-9321-4EC5BAEBAB89} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (No File)
Task: {C4409E3B-8398-4228-8733-7CFF9D80B349} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CDC56251-1E00-44E2-93B7-909B980831A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {DF7747AC-5103-418B-9B94-DF67CC311254} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)
Task: {E22653E0-75E5-4E8E-8DC0-E364E0C69CEF} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {E62B9157-B0E2-4E07-948C-D206C188131F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (No File)
Task: {E7A9178F-8C59-42C3-BC40-D29DC1397A38} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe -crl -hms -pscn 15 (No File)
Task: {F637AB83-B411-4792-8A5C-2FBAE6117872} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {FC4B2529-0B6A-4A7C-9F7F-347DB10C4CAA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {FD03C97A-C3B9-427A-907A-7C3716AB0336} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (No File)
Task: {FD3D629C-39BA-4598-AA5B-62D4707A64AD} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe /StartRecording (No File)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.9.799 => not found
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll [No File]
U3 idsvc; no ImagePath
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\Tasks\{8E23F4FB-DC6C-4740-BF86-143146CBB9CE}
C:\WINDOWS\system32\Tasks\{71FC3F65-1DE0-45BD-9D5D-1B4ADCEA61F5}
C:\WINDOWS\system32\Tasks\{45BDAF88-325C-4F05-A48C-FEC67BF466DD}
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - No File
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
FirewallRules: [{8D1B852A-0C9F-4D6F-9441-6D658357D1FF}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File
FirewallRules: [{BAB44224-7A43-411F-B312-2C7BB1EBFF06}] => (Allow) C:\Users\Pavel\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
"HKU\S-1-5-21-317401563-2454302601-1562231924-1000\Software\Microsoft\Windows\CurrentVersion\Run\\BingSvc" => removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{503739d0-4c5e-4cfd-b3ba-d881334f0df2}" => removed successfully.
HKLM\SOFTWARE\Policies\Mozilla => removed successfully.
HKLM\SOFTWARE\Policies\Google => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{046A889C-5F65-4E63-9E99-AA880B6F3ED0}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{046A889C-5F65-4E63-9E99-AA880B6F3ED0}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{140F5687-0A6A-4349-B8BD-211C6193B9CA}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{140F5687-0A6A-4349-B8BD-211C6193B9CA}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1AC53BE3-482B-4F11-9F66-6293C7314C10}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1AC53BE3-482B-4F11-9F66-6293C7314C10}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ConfigureInternetTimeService" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1FD6B283-BFF3-46E5-A81C-3912809F2AEB}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1FD6B283-BFF3-46E5-A81C-3912809F2AEB}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\mcupdate => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{243A1BBC-C4A0-4BF3-8FA0-B048022F85C0}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{243A1BBC-C4A0-4BF3-8FA0-B048022F85C0}" => removed successfully.
C:\Windows\System32\Tasks\AVAST Software\Avast settings backup => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVAST Software\Avast settings backup" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{282A0010-AD22-4A08-B0D2-3216A241D96F}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{282A0010-AD22-4A08-B0D2-3216A241D96F}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\InstallPlayReady" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{29E600A9-D1EF-441D-A1F8-DDEA429D7427}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29E600A9-D1EF-441D-A1F8-DDEA429D7427}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\SqlLiteRecoveryTask" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{29ECEE08-B5AE-4FF9-BDAF-A7DF017C4131}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29ECEE08-B5AE-4FF9-BDAF-A7DF017C4131}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{31B79A74-E0E0-43B7-ACBF-E0D4FEA60844}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{31B79A74-E0E0-43B7-ACBF-E0D4FEA60844}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscovery" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{38BF360A-CF95-4F6C-9404-F1EFCD84F62F}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38BF360A-CF95-4F6C-9404-F1EFCD84F62F}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PeriodicScanRetry" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{49744D88-A648-47EA-B449-9BCB4D7CBCB3}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49744D88-A648-47EA-B449-9BCB4D7CBCB3}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{51533A34-8547-4F26-8FA2-0F6A79CF7752}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51533A34-8547-4F26-8FA2-0F6A79CF7752}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURActivate" => removed successfully.
sk: {5AAE0789-575C-4E16-9B06-9E8CF8F1774F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (No File) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5B845E1F-7592-4CAB-87A1-8DE6C9B1E244}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B845E1F-7592-4CAB-87A1-8DE6C9B1E244}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW1" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64B85F96-045C-486D-861B-8F0BA1174D83}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64B85F96-045C-486D-861B-8F0BA1174D83}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{68114295-4BE7-4D4D-9554-6E5536B7CAEC}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68114295-4BE7-4D4D-9554-6E5536B7CAEC}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{68885C4A-1EFC-4E05-BB55-ED67D673881F}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68885C4A-1EFC-4E05-BB55-ED67D673881F}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ReindexSearchRoot" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6BEC043B-424B-4DA6-BE2D-823BA8CC01CB}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6BEC043B-424B-4DA6-BE2D-823BA8CC01CB}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\DispatchRecoveryTasks" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6CB5F397-500D-4C53-BFED-218A4D2AAE81}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CB5F397-500D-4C53-BFED-218A4D2AAE81}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74CCFB59-B44A-48F7-8460-24407C243470}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74CCFB59-B44A-48F7-8460-24407C243470}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW2" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{783F82E5-7211-4AF6-A703-93B3F1DEC4FF}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{783F82E5-7211-4AF6-A703-93B3F1DEC4FF}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{86DEF50E-451C-453B-97BE-2A2331DF034E}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86DEF50E-451C-453B-97BE-2A2331DF034E}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8F307A27-3936-4AC7-9182-1CF06CD153AB}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8F307A27-3936-4AC7-9182-1CF06CD153AB}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{9B795048-9881-448B-86F4-9ABC5F474841}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9B795048-9881-448B-86F4-9ABC5F474841}" => removed successfully.
C:\Windows\System32\Tasks\AutoKMS => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9EED01A3-6313-4C67-B611-A3B7AC07CCBC}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9EED01A3-6313-4C67-B611-A3B7AC07CCBC}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A01CFF99-F68D-4609-A832-22ED59D24223}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A01CFF99-F68D-4609-A832-22ED59D24223}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A9BA4840-1D37-4949-BC3D-9BC2228A9E70}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A9BA4840-1D37-4949-BC3D-9BC2228A9E70}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{B9AB882D-F8A1-4401-8421-0A747CB60EDA}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9AB882D-F8A1-4401-8421-0A747CB60EDA}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RecordingRestart" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C04CB74A-5BF5-4ABA-9321-4EC5BAEBAB89}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C04CB74A-5BF5-4ABA-9321-4EC5BAEBAB89}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C4409E3B-8398-4228-8733-7CFF9D80B349}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4409E3B-8398-4228-8733-7CFF9D80B349}" => removed successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CDC56251-1E00-44E2-93B7-909B980831A4}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CDC56251-1E00-44E2-93B7-909B980831A4}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DF7747AC-5103-418B-9B94-DF67CC311254}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DF7747AC-5103-418B-9B94-DF67CC311254}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E22653E0-75E5-4E8E-8DC0-E364E0C69CEF}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E22653E0-75E5-4E8E-8DC0-E364E0C69CEF}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E62B9157-B0E2-4E07-948C-D206C188131F}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E62B9157-B0E2-4E07-948C-D206C188131F}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\MediaCenterRecoveryTask" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7A9178F-8C59-42C3-BC40-D29DC1397A38}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7A9178F-8C59-42C3-BC40-D29DC1397A38}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate_scheduled" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F637AB83-B411-4792-8A5C-2FBAE6117872}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F637AB83-B411-4792-8A5C-2FBAE6117872}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FC4B2529-0B6A-4A7C-9F7F-347DB10C4CAA}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FC4B2529-0B6A-4A7C-9F7F-347DB10C4CAA}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD03C97A-C3B9-427A-907A-7C3716AB0336}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD03C97A-C3B9-427A-907A-7C3716AB0336}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RegisterSearch" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD3D629C-39BA-4598-AA5B-62D4707A64AD}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD3D629C-39BA-4598-AA5B-62D4707A64AD}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Media Center\StartRecording => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\StartRecording" => removed successfully.
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => removed successfully.
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => removed successfully.
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => removed successfully.
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => removed successfully.
"HKLM\Software\Mozilla\Firefox\Extensions\\avg@toolbar" => removed successfully.
HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin => removed successfully.
HKLM\System\CurrentControlSet\Services\idsvc => removed successfully.
idsvc => service removed successfully.
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
C:\WINDOWS\system32\Tasks\{8E23F4FB-DC6C-4740-BF86-143146CBB9CE} => moved successfully
C:\WINDOWS\system32\Tasks\{71FC3F65-1DE0-45BD-9D5D-1B4ADCEA61F5} => moved successfully
C:\WINDOWS\system32\Tasks\{45BDAF88-325C-4F05-A48C-FEC67BF466DD} => moved successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => removed successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233}" => removed successfully.
HKLM\Software\Classes\PROTOCOLS\Handler\skype4com => removed successfully.
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File) => Error: No automatic fix found for this entry.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8D1B852A-0C9F-4D6F-9441-6D658357D1FF}" => removed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BAB44224-7A43-411F-B312-2C7BB1EBFF06}" => removed successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 35695785 B
Java, Flash, Steam htmlcache => 1172 B
Windows/system/drivers => 13275241 B
Edge => 45568 B
Chrome => 28588893 B
Firefox => 71396341 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
LocalService => 19512 B
NetworkService => 19512 B
Pavel => 4798525 B
DefaultAppPool => 4798525 B

RecycleBin => 8498 B
EmptyTemp: => 151.3 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 21:17:50 ====

#58 Příspěvek od **Rudy** » 25 led 2022 22:02

Smazáno. Zrychlil se chod?

Petura · #59 Příspěvek od **Petura** » 25 led 2022 22:04

Zrychlení jen nepatrné

#60 Příspěvek od **Rudy** » 25 led 2022 22:05

Zkuste defragmentovat disk.

VIRY.CZ

Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC

Re: Pomalé PC