Prosím o kontrolu logu.

[paolov]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-04-2022
Ran by Marcelka a Pavlíček (administrator) on DESKTOP-79A5PSH (LENOVO 20089) (02-04-2022 20:37:47)
Running from C:\Users\Marcelka a Pavlíček\Downloads
Loaded Profiles: Marcelka a Pavlíček
Platform: Microsoft Windows 10 Home Version 21H2 19044.1620 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCopyAccelerator.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <31>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Java\jre1.8.0_321\bin\javaw.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1613_none_7df538047ca074bb\TiWorker.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3951280 2016-01-07] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707256 2021-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [105280 2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {345DF6DB-9BA0-4343-93FB-8122BF5147E6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {36D4B4B5-4F2F-4341-9FCE-F01911345157} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {37CB6B30-6292-431F-8ADB-B4342E3C6D40} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5AA50D10-E1FF-4236-B5B2-E56C41D9E26E} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {8E0DC14D-2A8F-45FF-BEE0-C4AAA5163EB7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A9BE4C25-6E09-4516-A81D-6585C9F14F6B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {C731C317-F5BB-41DC-8339-672ED6B30381} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6c242e33-4261-4d0b-a821-86a78574e0a0}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9ea2f77b-4681-4f2a-a8b5-723fe2cfe311}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a4d78430-550a-4fd0-b1c6-9da366229c8b}: [DhcpNameServer] 192.168.0.1

Edge:
=======
DownloadDir: C:\Users\Marcelka a Pavlíček\Downloads
Edge HomeButtonPage: HKU\S-1-5-21-3884071663-162100166-419435186-1001 -> hxxp://www.seznam.cz/
Edge Notifications: HKU\S-1-5-21-3884071663-162100166-419435186-1001 -> hxxps://www.tipsport.cz
Edge Extension: (uBlock Origin) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2020-04-11]
Edge Extension: (Translator pro Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2020-04-11]
Edge DefaultProfile: Profile 1
Edge Profile: C:\Users\Marcelka a Pavlíček\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2020-09-07]
Edge Profile: C:\Users\Marcelka a Pavlíček\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2022-03-29]
Edge StartupUrls: Profile 1 -> "hxxp://www.seznam.cz/"

FireFox:
========
FF DefaultProfile: 75qnsple.default
FF ProfilePath: C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\75qnsple.default [2021-09-19]
FF ProfilePath: C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release [2022-04-02]
FF Homepage: Mozilla\Firefox\Profiles\l82wqagt.default-release -> www.seznam.cz
FF Session Restore: Mozilla\Firefox\Profiles\l82wqagt.default-release -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\l82wqagt.default-release -> hxxps://www.aliexpress.com
FF Extension: (Copy PlainText) - C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release\Extensions\copyplaintext@eros.man.xpi [2021-10-19]
FF Extension: (LeechBlock NG) - C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release\Extensions\leechblockng@proginosko.com.xpi [2022-03-21]
FF Extension: (uBlock Origin) - C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release\Extensions\uBlock0@raymondhill.net.xpi [2022-04-01]
FF Extension: (ImTranslator: Překladač, Slovník, Hlas) - C:\Users\Marcelka a Pavlíček\AppData\Roaming\Mozilla\Firefox\Profiles\l82wqagt.default-release\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2021-12-20]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-03-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.321.2 -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\dtplugin\npDeployJava1.dll [2022-01-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.321.2 -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\plugin2\npjp2.dll [2022-01-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.14 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13166512 2022-03-15] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe [3046608 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe [132504 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
R3 MpKsl4cfc8584; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{0047BC53-0C97-40A3-BF5E-0EE1CEF0A45E}\MpKslDrv.sys [137464 2022-04-02] (Microsoft Windows -> Microsoft Corporation)
S3 nmwcd; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [19968 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 nmwcdc; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [27136 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [9216 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [9216 2012-01-09] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R3 VClone; C:\WINDOWS\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-03-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [439544 2022-03-15] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-03-15] (Microsoft Windows -> Microsoft Corporation)
S3 semav6msr64; \??\C:\WINDOWS\system32\drivers\semav6msr64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-04-02 20:37 - 2022-04-02 20:38 - 000014268 _____ C:\Users\Marcelka a Pavlíček\Downloads\FRST.txt
2022-04-02 20:31 - 2022-04-02 20:31 - 000000000 ____D C:\Users\Marcelka a Pavlíček\Downloads\FRST-OlderVersion
2022-04-02 20:20 - 2022-04-02 20:40 - 350944896 _____ C:\Users\Marcelka a Pavlíček\Downloads\202.QnJpZGdlcnRvbi5TMDIuMTA4MHAuTkYuV0VCUmlwLkREUDUuMS5BdG1vcy54MjY0LVRFUEVTLUNaRU5EQUI.7z.001.8899534248062772103.part
2022-03-29 21:42 - 2022-03-29 21:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.3
2022-03-29 21:40 - 2022-03-29 21:41 - 000000000 ____D C:\Program Files\LibreOffice
2022-03-27 21:58 - 2022-03-27 21:58 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-03-27 21:58 - 2022-03-27 21:58 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2022-03-27 21:58 - 2022-03-27 21:58 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2022-03-27 21:58 - 2022-03-27 21:58 - 000011791 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-03-27 21:46 - 2022-03-27 21:46 - 000000000 ___HD C:\$WinREAgent
2022-03-27 17:56 - 2022-03-27 17:56 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\Local\Warner Bros. Interactive Entertainment
2022-03-27 17:51 - 2022-03-27 17:51 - 000000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2022-03-27 17:47 - 2022-03-27 17:47 - 000000000 ____D C:\Program Files (x86)\Warner Bros. Interactive Entertainment
2022-03-24 16:15 - 2022-03-27 07:47 - 000000000 ____D C:\Program Files\Mozilla Firefox

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-04-02 20:38 - 2021-09-17 10:45 - 000000000 ____D C:\FRST
2022-04-02 20:31 - 2021-09-17 10:44 - 002365440 _____ (Farbar) C:\Users\Marcelka a Pavlíček\Downloads\FRST64.exe
2022-04-02 20:22 - 2020-11-17 00:29 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\Roaming\vlc
2022-04-02 20:14 - 2020-06-08 22:53 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-04-02 18:45 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-04-02 15:18 - 2019-08-28 22:45 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\LocalLow\Mozilla
2022-04-01 07:47 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-04-01 07:47 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-04-01 07:40 - 2020-06-08 23:01 - 001696380 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-04-01 07:40 - 2019-12-07 16:41 - 000719042 _____ C:\WINDOWS\system32\perfh005.dat
2022-04-01 07:40 - 2019-12-07 16:41 - 000145638 _____ C:\WINDOWS\system32\perfc005.dat
2022-04-01 07:40 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-04-01 07:35 - 2020-06-08 23:00 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-04-01 07:35 - 2020-06-08 23:00 - 000003460 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-03-30 11:56 - 2020-11-03 22:33 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-03-29 21:21 - 2020-02-21 11:46 - 000000000 ____D C:\Users\Marcelka a Pavlíček\Documents\Inkaso a další platby
2022-03-28 19:10 - 2020-06-08 08:29 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-03-28 07:23 - 2020-06-08 23:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-03-28 07:22 - 2020-06-08 22:53 - 000008192 ___SH C:\DumpStack.log.tmp
2022-03-27 22:21 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-03-27 22:17 - 2020-06-08 22:53 - 000544816 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-03-27 22:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-03-27 22:15 - 2020-06-08 22:33 - 000000000 ____D C:\Users\Marcelka a Pavlíček
2022-03-27 22:03 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-03-27 19:41 - 2020-12-06 00:51 - 000000000 ____D C:\WINDOWS\Minidump
2022-03-27 19:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-03-27 07:47 - 2019-08-28 22:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-03-26 13:31 - 2019-09-13 15:51 - 000001435 _____ C:\Users\Marcelka a Pavlíček\Desktop\Roblox Player.lnk
2022-03-26 13:31 - 2019-09-13 15:45 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2022-03-26 12:23 - 2021-12-13 17:50 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3884071663-162100166-419435186-1001
2022-03-26 12:23 - 2020-06-08 23:00 - 000003404 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3884071663-162100166-419435186-1001
2022-03-26 12:23 - 2020-06-08 22:33 - 000002419 _____ C:\Users\Marcelka a Pavlíček\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-03-25 16:42 - 2021-10-31 14:50 - 000000000 ____D C:\Users\NeroMediaHomeUser.4
2022-03-25 15:33 - 2021-10-06 16:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-03-25 15:33 - 2019-08-28 22:45 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-03-24 16:10 - 2020-09-12 10:29 - 000000000 ____D C:\Users\Marcelka a Pavlíček\AppData\Local\CrashDumps
2022-03-23 14:58 - 2021-12-13 18:57 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-03-23 14:58 - 2020-06-08 23:00 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-03-15 14:41 - 2019-08-28 22:28 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-03-12 14:34 - 2020-03-09 22:26 - 000000000 ____D C:\Program Files (x86)\FastShare
2022-03-11 21:37 - 2021-02-21 15:44 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-03-10 09:53 - 2020-06-08 22:59 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-03-10 09:42 - 2019-08-28 23:03 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-03-10 09:38 - 2019-08-28 23:03 - 145666720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-03-03 22:08 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

==================== Files in the root of some directories ========

2021-10-22 23:07 - 2021-10-22 23:07 - 000000209 _____ () C:\Users\Marcelka a Pavlíček\AppData\Roaming\DESKTOP-79A5PSH.MTBF.txt
2021-02-02 20:55 - 2021-02-02 21:00 - 000000128 _____ () C:\Users\Marcelka a Pavlíček\AppData\Roaming\winscp.rnd
2021-10-22 23:09 - 2021-10-22 23:09 - 000003584 _____ () C:\Users\Marcelka a Pavlíček\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-10-01 21:04 - 2022-02-27 17:26 - 000026996 _____ () C:\Users\Marcelka a Pavlíček\AppData\Local\FSDownloader.err
2019-09-22 15:24 - 2022-01-30 13:39 - 000001128 _____ () C:\Users\Marcelka a Pavlíček\AppData\Local\FSDownloader.nast
2021-08-27 20:44 - 2021-08-27 20:44 - 000000017 _____ () C:\Users\Marcelka a Pavlíček\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-04-2022
Ran by Marcelka a Pavlíček (02-04-2022 20:40:13)
Running from C:\Users\Marcelka a Pavlíček\Downloads
Microsoft Windows 10 Home Version 21H2 19044.1620 (X64) (2020-06-08 21:00:31)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3884071663-162100166-419435186-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3884071663-162100166-419435186-503 - Limited - Disabled)
Guest (S-1-5-21-3884071663-162100166-419435186-501 - Limited - Disabled)
Marcelka a Pavlíček (S-1-5-21-3884071663-162100166-419435186-1001 - Administrator - Enabled) => C:\Users\Marcelka a Pavlíček
WDAGUtilityAccount (S-1-5-21-3884071663-162100166-419435186-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 21.07 (x64) (HKLM\...\7-Zip) (Version: 21.07 - Igor Pavlov)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 22.001.20085 - Adobe)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{E2078C11-E9EC-BD96-037C-A3423082F2BF}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Audacity 3.1.3 (HKLM\...\Audacity_is1) (Version: 3.1.3 - Audacity Team)
Avidemux VC++ 64bits (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\{6f2741ee-cfa1-4818-9d91-3317ddf5802d}) (Version: 2.8.0 - Mean)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Balíček ovladače systému Windows - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
Diablo II CZ verze 1.13c (HKLM-x32\...\{F380060E-D8AC-4823-91B8-71B9054C8DD2}_is1) (Version: 1.13c - )
Doom 3 verze 1.3.1 (HKLM-x32\...\{412432A1-677C-438F-A7D3-BB17DE4AF32D}_is1) (Version: 1.3.1 - )
FastShare.cz verze 2.4.0 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.4.0 - )
FFmpeg v2.2.2 for Audacity - 64bit (HKLM\...\FFmpeg for Audacity_is1) (Version: - )
Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3097 - Intel Corporation)
Java 8 Update 321 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180321F0}) (Version: 8.0.3210.7 - Oracle Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
LEGO® Batman™ (HKLM-x32\...\InstallShield_{0FFC48C5-C74B-498E-B908-74CB44D30E32}) (Version: 1.00.0000 - Warner Bros. Interactive Entertainment)
LibreOffice 7.3.1.3 (HKLM\...\{2AB46F12-061D-4BB1-BE17-FD65830DE46B}) (Version: 7.3.1.3 - The Document Foundation)
Microsoft .NET Runtime - 5.0.12 (x64) (HKLM-x32\...\{5bd6ae15-bcab-4509-86af-c5dfc54b60d7}) (Version: 5.0.12.30622 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 99.0.1150.55 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\OneDriveSetup.exe) (Version: 22.045.0227.0004 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\Teams) (Version: 1.4.00.29469 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{5016990D-7F61-4A20-9451-A915D6616DD9}) (Version: 3.66.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.30.30704 (HKLM-x32\...\{4d8dcf8c-a72a-43e1-9833-c12724db736e}) (Version: 14.30.30704.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 98.0.2 (x64 cs)) (Version: 98.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.0.2 - Mozilla)
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
Nokia Connectivity Cable Driver (HKLM-x32\...\{A57025CC-5F2E-4D01-B387-06DB10500D43}) (Version: 7.1.78.0 - Nokia)
Nokia PC Suite (HKLM-x32\...\{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}) (Version: 7.1.180.94 - Nokia) Hidden
Nokia PC Suite (HKLM-x32\...\Nokia PC Suite) (Version: 7.1.180.94 - Nokia)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
PC Connectivity Solution (HKLM-x32\...\{644F4910-E812-49AD-93EC-86828CB81A0D}) (Version: 12.0.27.0 - Nokia)
Roblox Player for Marcelka a Pavlíček (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Marcelka a Pavlíček (HKU\S-1-5-21-3884071663-162100166-419435186-1001\...\roblox-studio) (Version: - Roblox Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.1 - Synaptics Incorporated)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.28.5 - TeamViewer)
The Elder Scrolls V Skyrim LE (HKLM-x32\...\The Elder Scrolls V Skyrim LE_is1) (Version: - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 10.00 - Ghisler Software GmbH)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.2.0 - Elaborate Bytes)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WinSCP 5.17.10 (HKLM-x32\...\winscp3_is1) (Version: 5.17.10 - Martin Prikryl)

Packages:
=========
Artinii Cinema Player -> C:\Program Files\WindowsApps\Artinii.ArtiniiCinemaPlayer_1.0.692.0_x64__3p48kjqbq46a6 [2022-02-24] (Artinii)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-03-04] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-08-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-08-30] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.3171.0_x64__8wekyb3d8bbwe [2022-03-26] (Microsoft Studios) [MS Ad]
uBlock Origin -> C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2020-04-11] (Nik Rolls)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3884071663-162100166-419435186-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Marcelka a Pavlíček\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21209.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [msacm.l3acm] => C:\Windows\SysWOW64\l3codecp.acm [189440 2019-12-07] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2022-02-16 15:32 - 2022-02-16 15:32 - 000031232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\5afdd758ee9ec7c38c5fc09e2d92dbbc\A4.Foundation.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\c175dbdcc2299bcd082c6e254d5ce32a\AEM.Actions.CCAA.Shared.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\ce1083ef7b39e3bf53669f77ec496ce1\AEM.Plugin.EEU.Shared.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\ddc93b6b44f3d6a17e85fd165cb45b74\AEM.Plugin.Hotkeys.Shared.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000016384 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.54d8abe3#\d45f3c80369dc1b4aff18d6c4c27e74f\AEM.Plugin.DPPE.Shared.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000281600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\ef61a8aef2307bfcd6e406251599e771\AEM.Plugin.Source.Kit.Server.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000014848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\c89fecaa110c9592b80ae5ea440d4043\AEM.Plugin.WinMessages.Shared.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\5bfdcc9eb6555c83ba0e33e61460d1f8\AEM.Plugin.REG.Shared.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\dd06bf29115caf3ff7cee91f4addaa87\AEM.Plugin.GD.Shared.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\61fb677f246e38c86f4bb7267d40d288\AEM.Server.Shared.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000267776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\0a2c85bdba6434495bc880bfa3f562f2\AEM.Server.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000055808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\b4b087fc3c28ac01d81f32e73d26a329\APM.Foundation.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000122880 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ATICCCom\8c9ec6bee63972393e1e84a14460deaa\ATICCCom.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000204288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\e5fbbe2b60394af0d9429a6b131bd68a\CCC.Implementation.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000154112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.21d2ac78#\78d4b44601daa04da87c6a6498355e9b\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000128000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\a4930158150b063136e8ddeb19f5c3a4\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\6a28252014c560f45553ae594bc0ad79\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000045568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\624ac49daf56a9800a488193d7681a8b\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000107008 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\d401add65d0882a13c64faff81918b50\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.46819220#\16198d5dbfde1c489176323c95ebd708\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\ba999536660fcad5fc6e49114f4fa3d3\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\94c37cd8078e4889b8e6550806fe94c7\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.59a12d95#\4760ea632a5fa3f314919904c5838dc5\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000263168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.73911eb5#\c72e196bb5c9df9d700b9691342b008a\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000365056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\ad13d95a135b198e0dc33343c6add3aa\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\95e93a9800f95be8df4ec4da722d61e1\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000678912 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.846fa813#\b758cc413cf79fc6f5a719ba086b2ad7\CLI.Aspect.MMVideo.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000745472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\66ef99a5036a84212077ed8f5567df7b\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000449536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\b086e23e3510d42bec5b1dfa003b5f97\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\7dc4e59e8fc2ec8c30aa964c3efafa09\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\d442e12cbcc2873ebf120a1d2a99517f\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\1d1aea4dc3c86cd70641874a1afedc85\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000462336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\133bdeef598dc35fc652f2bd3d56e8dd\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000067072 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\fab89796a8f4c5e62b55aa1830ce2117\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000340992 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\102b3e5f48bb51f37fead6386639bdf1\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\b15d3262a58dbdf48bd1aa7c79af66d2\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000096256 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4f2f79c#\e5cdf90f9c893108dfafaf5c5a73b933\CLI.Aspect.CrossFireX.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000276480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\f3087c753be96d3ed6cbc24d701b1464\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 003312640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\43d668e57f0488953f9040e358c00404\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000240640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.eda8935e#\0ab28e511ed560bf94dd47635870f696\CLI.Aspect.MMVideo.Graphics.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000047616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\4e62b4c33524bb4c0633a92f1a93cd5a\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\542ea7297ec8e715b48b82b6980d4179\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000051200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\78730a2bc6f408103ddedfdb8f94b7a8\CLI.Caste.A4.Runtime.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\02ecaae12d57403bea3a81d479a1a7ff\CLI.Caste.A4.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\826c0861208ce06335d0e4d8c414ab6f\CLI.Caste.A4.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\ba7593347d5f8cdf7f4eb085a89c0ca7\CLI.Caste.Fuel.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000311296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\f583886385bbba988fd2ca6fb2365df7\CLI.Caste.Fuel.Runtime.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\ca919e509ad9324cfcd1f8fbb3f19c54\CLI.Caste.Fuel.Dashboard.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\769d3351048f5a1969dd6392b3d11309\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 001555456 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\e453f7eb2268f61c5fbb90a4e0dfe2cb\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000587776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\3d561885f322304656ea3dcde027a3c6\CLI.Caste.Graphics.Dashboard.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\d5d3053b2716a95d1a6def8f5a24e63d\CLI.Caste.HydraVision.Runtime.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\c2ef4a7addaaafd0e836ca91d079dd42\CLI.Caste.HydraVision.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\14b9a2f89403b1046deff99d7e93024b\CLI.Caste.HydraVision.Dashboard.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\9f8e2468d7ccad7e2c8bbfc20355411a\CLI.Caste.Platform.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000044032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\fbf048d1f06246fac39cafa8940b36bd\CLI.Caste.Platform.Runtime.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\44dffec1af4aaf8c01f84f3a9afe0774\CLI.Caste.Platform.Dashboard.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\3e61e24d8c1ffaf88acb25a2072a7ab0\CLI.Component.Runtime.Shared.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000901632 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone26c9c557#\f46e3f8395610069ea997dc682727ecc\CLI.Component.Systemtray.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000173568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\578aa988ecf0632db764ae26d88c3e66\CLI.Component.Dashboard.ProfileManager2.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\fac63cc1b8a800fcb85bbff471d19a78\CLI.Component.Runtime.Shared.Private.ni.dll
2022-02-11 15:21 - 2022-02-11 15:21 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\8d06cbe01fd6074be078b6fdaeee81e8\CLI.Component.Runtime.Extension.EEU.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 001609728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\288a15863e7e40d000347145af2965bd\CLI.Component.Dashboard.Shared.Private.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000018432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\a913ee9b4de15812332ac8e696ade8a4\CLI.Component.Client.Shared.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\37edad5bd714591a6f6f58c537bafa55\CLI.Component.Dashboard.Shared.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000495104 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Component.Eeu\d8c71769a59f3e5de9f987e96f001049\CLI.Component.Eeu.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000089600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\e3c869aa51f6f47de320d58a22054bb2\CLI.Foundation.Private.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000061440 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\fc650e7658672f08763a3f689b1df637\CLI.Foundation.XManifest.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000091136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\f1493d6cd2028b9c6478e4e9d041dbfa\CLI.Foundation.CoreAudioAPI.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 001079808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\7f3de701038ec765d9bf07441d7b17b7\CLI.Foundation.Client.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000301568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\0a2999b028a652d341d16555d7f88c63\CLI.Foundation.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\9fa8cbad75572ca179de0fbe83f1f2b5\DEM.Foundation.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000115200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\69204f03c3257a5432860768ddba6bac\DEM.Graphics.I0601.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\5730e9cfd126165d577a36f3dbd3bc06\DEM.Graphics.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\62986e697cbce332804fb7c3149274dc\Fuel.Foundation.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000296960 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\18e4bc5ef770f5bf977145a8bc1e98cd\LOG.Foundation.Implementation.ni.dll
2022-02-16 15:32 - 2022-02-16 15:32 - 000150016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\71dadef8fd844aa56e06f3eee69143ee\LOG.Foundation.Private.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\d59e9ac92fe5a6db0ece645eef51fdcf\LOG.Foundation.Implementation.Private.ni.dll
2022-02-16 15:32 - 2022-02-16 15:32 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\2aa5e21ed67bbe080756026c0073cef9\LOG.Foundation.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\61a46de5bd43b7a91dacb9bf8d0412d9\MOM.Foundation.ni.dll
2022-02-16 17:58 - 2022-02-16 17:58 - 000402944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\2669b5db8766cd07b0d9e89930ae939a\MOM.Implementation.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\bb34cc6ca73c18c1590fa521aa09aab6\NEWAEM.Foundation.ni.dll
2015-11-04 17:40 - 2015-11-04 17:40 - 000005120 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamcsy.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 000897024 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\a4fbecf4ccac1e5646bd7459461b9fab\ADL.Foundation.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000256000 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\1c415cb5871777fe366ceaa790606928\APM.Server.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000783872 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.79734f7a#\203f9e4ac9f5759bd9374ff638a466f4\CLI.Aspect.PowerXpress.Graphics.Runtime.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000357888 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b3da5a8f#\6ca22c0eebd6b319797b47149b69a644\CLI.Aspect.PowerXpress.Graphics.Shared.ni.dll
2022-02-16 15:34 - 2022-02-16 15:34 - 000595456 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4846ba2#\c040a707964369a40957dee239a55996\CLI.Aspect.PowerXpress.Graphics.Dashboard.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 008027648 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\91def63eaabd6f0d7daa9e73d852e97c\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000136704 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\98a8a1eb0629a34e44fbdda7eac200a7\CLI.Component.Client.Shared.Private.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000234496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\9b828509926b06b07db6f099a56dee24\CLI.Component.Runtime.ni.dll
2022-02-16 17:57 - 2022-02-16 17:57 - 000929280 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\4e8b7bdfd48489a6283c4693f3e43922\CLI.Component.Dashboard.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000011264 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0702\0a8967aa83450b4a752b434db5004c0b\DEM.Graphics.I0702.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\f248369267ec9ebaf13239fbc7e1570f\DEM.Graphics.I0709.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0710\9718aeea7593833472fab767a823e29a\DEM.Graphics.I0710.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000012288 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\be8f144ef61c7c769afcc119d314a9d5\DEM.Graphics.I0712.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000018432 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\c64a1a1ec05a281173efae3e7f673a2c\DEM.Graphics.I0804.ni.dll
2022-02-11 00:08 - 2022-02-11 00:08 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0901\e44b24f194e03e22e6eebec023ebfcbe\DEM.Graphics.I0901.ni.dll
2022-02-11 00:09 - 2022-02-11 00:09 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0906\825cb4a2795c60095ebd52671b02ff02\DEM.Graphics.I0906.ni.dll
2022-02-11 00:09 - 2022-02-11 00:09 - 000035840 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\fe965c3c075816525190992ed5fdb1b2\DEM.Graphics.I1010.ni.dll
2022-02-11 00:07 - 2022-02-11 00:07 - 001139200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\fba3d1d3181dad6105c75155fa2bcdfc\Localization.Foundation.Private.ni.dll
2022-02-16 17:58 - 2022-02-16 17:58 - 000244736 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\a8a65af98655b945e15922699dd95817\ResourceManagement.Foundation.Implementation.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\d5d5dfb12e7f02ea95eeeb893d3d0c43\ResourceManagement.Foundation.Private.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\f3d157dcfd1ad107a9b8e2ff1498a290\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 002845696 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\e97bb291bdb8a434edd7438f5c0907dd\CLI.Caste.Graphics.Shared.ni.dll
2022-02-16 15:35 - 2022-02-16 15:35 - 003268096 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\f3e1539bcb68aa51b489327fc3ad01d4\CLI.Caste.Graphics.Runtime.ni.dll
2022-02-02 23:41 - 2021-12-26 16:00 - 000093696 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2014-05-18 21:32 - 2019-09-22 15:54 - 000441220 _____ (Java(TM) Native Access (JNA)) [File not signed] C:\Users\Marcelka a Pavlíček\Documents\FreeRapid-0.9u4\lib\jnidispatch32.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 000335360 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\2f98ddd623317bdff55a8797c570a0a3\Microsoft.WindowsAPICodePack.ni.dll
2022-02-16 15:33 - 2022-02-16 15:33 - 002546688 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\db400b4fd3647c492c50c351020aecc6\Microsoft.WindowsAPICodePack.Shell.ni.dll
2012-06-26 14:08 - 2012-06-26 14:08 - 000026624 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
2012-06-26 12:58 - 2012-06-26 12:58 - 001262592 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\NGSCM64.DLL
2012-06-26 14:08 - 2012-06-26 14:08 - 000572928 _____ (Nokia) [File not signed] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\ssv.dll [2022-01-19] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\jp2ssv.dll [2022-01-19] (Oracle America, Inc. -> Oracle Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

2020-12-08 17:41 - 2021-12-07 20:40 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\AMD APP\bin\x86_64;C:\Program Files (x86)\AMD APP\bin\x86;C:\Program Files (x86)\PC Connectivity Solution\;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\dotnet\;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static
HKU\S-1-5-21-3884071663-162100166-419435186-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{38F8A0BA-CDB0-4D19-B4F7-4C7F6039A585}C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{1DDCC2AA-E680-4B66-BE7D-4330682FD8B8}C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\.tlauncher\jvms\jre1.8.0_51\bin\javaw.exe
FirewallRules: [{53643E65-E92D-421E-BA91-54BC289C98EF}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{EFFF745D-6577-4BD1-A3C9-507BF4B7374F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{8F35D91C-6D9A-4C23-B4FB-796822209522}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{1F98D6DB-5E6B-46E1-A1D6-AB9D438511A5}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{BB5D7EFD-720C-4777-AD23-31C4C4191B48}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{D8FB6E9E-E524-4B0B-BA30-3B8DF8F9E87A}C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\marcelka a pavlíček\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8371B502-DDC4-4D92-81AB-EE643A00F084}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [UDP Query User{4B0333F9-1361-4461-BB77-1EACC88AAEA9}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [TCP Query User{F0C3F816-CDFD-456E-A4F1-C66F022888CC}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{BBE7992A-5D10-461D-B837-0A5B4595D7E4}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{59BC1102-E02E-4CCC-8786-D98089F1C3FA}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{1A7C740F-F171-447E-AF6F-6E2078A19B5C}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\RM.exe => No File
FirewallRules: [{E477F6A0-A0DE-408A-ACE2-A43060DF7FCE}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{654B1228-32DE-485E-B7B5-FEA57AB71112}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\NGStudio.exe => No File
FirewallRules: [{F1295005-EFDC-4A5E-97D6-4834E5E61CC4}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [{0AE36D2A-4B48-451A-B13E-36B3A22B9161}] => (Allow) C:\Program Files\Pinnacle\Studio 22\programs\UMI.exe => No File
FirewallRules: [TCP Query User{9B3B40A3-BB3C-4C79-9D45-10DFEDA5D567}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [UDP Query User{E4F2D633-10F6-4EFA-B09B-F27C92746EF7}C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_311\bin\javaw.exe => No File
FirewallRules: [TCP Query User{D9E83077-B0C1-4493-B873-4C7F1B760208}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe
FirewallRules: [UDP Query User{5E8F353E-792D-4503-9673-3043A94113AD}C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_321\bin\javaw.exe
FirewallRules: [{F6D9696D-5398-45EE-8CBC-071C448870C4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{12CC1550-D3C5-4D1B-906A-DB5515565504}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8AAA31F5-14C5-47F5-B616-24BD24E04CDB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B67DDC3A-30E0-4A11-8FED-221C0386CB29}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.82.404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{64D93DAB-78ED-4A91-847E-A2A56CB6CE1C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{2ACB7256-51AB-41ED-BBDF-C26A9F660519}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{E6057C32-013F-4612-866B-E4A1118C5B3B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{DD1C2C38-A22C-4FBC-A729-A5B8A5953222}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:110.64 GB) (Free:13.07 GB) (12%)

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (04/02/2022 11:00:26 AM) (Source: Firefox Default Browser Agent) (EventID: 12007) (User: )
Description: Event-ID 12007

Error: (04/02/2022 11:00:26 AM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: )
Description: Event-ID 0

Error: (03/25/2022 03:33:45 PM) (Source: Firefox Default Browser Agent) (EventID: 12007) (User: )
Description: Event-ID 12007

Error: (03/25/2022 03:33:45 PM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: )
Description: Event-ID 0

Error: (03/24/2022 04:10:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AcroCEF.exe, verze: 22.1.20085.0, časové razítko: 0x621fbf55
Název chybujícího modulu: AcroCEF.exe, verze: 22.1.20085.0, časové razítko: 0x621fbf55
Kód výjimky: 0x80000003
Posun chyby: 0x000000000001055d
ID chybujícího procesu: 0x281c
Čas spuštění chybující aplikace: 0x01d83f88ef22c36b
Cesta k chybující aplikaci: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe
ID zprávy: dbd06c67-98b9-4542-9f14-791da5bee301
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (03/24/2022 04:10:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: AcroCEF.exe, verze: 22.1.20085.0, časové razítko: 0x621fbf55
Název chybujícího modulu: libcef.dll, verze: 108.0.0.0, časové razítko: 0x620ba8dd
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000027bc697
ID chybujícího procesu: 0x2b18
Čas spuštění chybující aplikace: 0x01d83f88edc1acb6
Cesta k chybující aplikaci: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe
Cesta k chybujícímu modulu: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\libcef.dll
ID zprávy: bc118e96-857b-4cde-9933-633f17feb947
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (03/17/2022 12:47:09 AM) (Source: EventSystem) (EventID: 4622) (User: )
Description: Systém událostí modelu COM+ nemohl sdružit odběratele pro odběr {EE5F002C-2383-4A0C-9AEB-851657033F36}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. Výsledek HRESULT byl 8007071a.

Error: (02/20/2022 07:16:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe verze 10.0.19041.1566 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: ef4

Čas spuštění: 01d82679bc593c08

Čas ukončení: 0

Cesta k aplikaci: C:\Windows\explorer.exe

ID hlášení: ce696ec6-8df8-4a7a-b833-ade905cfa802

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Unknown


System errors:
=============
Error: (04/02/2022 12:01:09 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: Při vytváření přihlašovacích údajů TLS Klient se stala závažná chyba. Stav interní chyby je 10013.

Error: (03/30/2022 08:55:48 PM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR4.

Error: (03/27/2022 07:47:33 AM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY)
Description: Byl spuštěn systémový časovač sledovacího zařízení.

Error: (03/27/2022 07:48:59 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (21:49:40, ‎26.‎03.‎2022) bylo neočekávané.

Error: (03/20/2022 07:14:46 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY)
Description: Byl spuštěn systémový časovač sledovacího zařízení.

Error: (03/20/2022 07:16:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (12:57:02, ‎20.‎03.‎2022) bylo neočekávané.

Error: (03/19/2022 02:31:33 PM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR3.

Error: (03/19/2022 02:31:31 PM) (Source: disk) (EventID: 11) (User: )
Description: Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR3.


Windows Defender:
================
Date: 2022-04-02 14:57:17
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {436B4D33-C898-488B-A4B6-194CDF0FE8C4}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-04-02 12:01:00
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {C881E81B-4AED-4D83-A620-283F5C95C8EB}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-03-31 15:08:04
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {6191590A-C573-4E50-A2E7-87F56BFA9BA0}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-03-30 17:40:21
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {8121C9AA-024A-450A-8963-882893BA2385}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-03-29 18:07:12
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {40F03BDC-D02C-4BE9-88A1-079BF0BE5D82}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

CodeIntegrity:
===============
Date: 2021-10-17 13:30:57
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

BIOS: LENOVO 40CN08WW(V3.07) 09/19/2011
Motherboard: LENOVO Base Board Product Name
Processor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
Percentage of memory in use: 85%
Total physical RAM: 4039.86 MB
Available physical RAM: 568.66 MB
Total Virtual: 12532.5 MB
Available Virtual: 5128.75 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:110.64 GB) (Free:13.06 GB) NTFS
Drive e: () (Fixed) (Total:80.52 GB) (Free:28.33 GB) FAT32
Drive f: () (Fixed) (Total:217.55 GB) (Free:78.88 GB) NTFS

\\?\Volume{f70accae-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.57 GB) (Free:0.53 GB) NTFS
\\?\Volume{f70accae-0000-0000-0000-70cd1b000000}\ () (Fixed) (Total:0.58 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: F70ACCAE)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=110.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=592 MB) - (Type=27)

==========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: DEA6F72A)
Partition 1: (Not Active) - (Size=80.5 GB) - (Type=0B)
Partition 2: (Not Active) - (Size=217.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

[Rudy]

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
C:\DumpStack.log.tmp
C:\Users\Marcelka a Pavlíček\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
FirewallRules: [TCP Query User{8371B502-DDC4-4D92-81AB-EE643A00F084}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [UDP Query User{4B0333F9-1361-4461-BB77-1EACC88AAEA9}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [TCP Query User{8371B502-DDC4-4D92-81AB-EE643A00F084}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [UDP Query User{4B0333F9-1361-4461-BB77-1EACC88AAEA9}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File

EmptyTemp:
End

Uložte do C:\Users\Marcelka a Pavlíček\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[paolov]

Fix result of Farbar Recovery Scan Tool (x64) Version: 01-04-2022
Ran by Marcelka a Pavlíček (02-04-2022 22:06:07) Run:2
Running from C:\Users\Marcelka a Pavlíček\Downloads
Loaded Profiles: Marcelka a Pavlíček
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
C:\DumpStack.log.tmp
C:\Users\Marcelka a Pavlíček\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
FirewallRules: [TCP Query User{8371B502-DDC4-4D92-81AB-EE643A00F084}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [UDP Query User{4B0333F9-1361-4461-BB77-1EACC88AAEA9}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [TCP Query User{8371B502-DDC4-4D92-81AB-EE643A00F084}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File
FirewallRules: [UDP Query User{4B0333F9-1361-4461-BB77-1EACC88AAEA9}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe] => (Block) C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\Users\Marcelka a Pavlíček\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8371B502-DDC4-4D92-81AB-EE643A00F084}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4B0333F9-1361-4461-BB77-1EACC88AAEA9}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8371B502-DDC4-4D92-81AB-EE643A00F084}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4B0333F9-1361-4461-BB77-1EACC88AAEA9}C:\users\marcelka a pavlíček\appdata\roaming\xiaomi\miphonemanager\plugin\xunlei\download\minithunderplatform.exe" => not found

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 100735742 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 2783579 B
Edge => 0 B
Firefox => 1430552622 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 7168 B
ProgramData => 7168 B
Public => 7168 B
systemprofile => 7168 B
systemprofile32 => 7168 B
LocalService => 7168 B
NetworkService => 407550 B
Marcelka a Pavlíček => 232463313 B
NeroMediaHomeUser.4 => 232463313 B

RecycleBin => 2304000 B
EmptyTemp: => 1.9 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 02-04-2022 22:12:34)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 22:12:34 ====

[Rudy]

Smazáno, log je již OK.

[paolov]

Díky za opravu, bylo tam něco co by stálo za řeč. Dík za odpověď.

[Rudy]

Byly tam pouze zbytečnosti.