Po mnoha letech prosím o kontrolu logů

[ozana]

Je to PC tchána

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-12-2021
Ran by Miloš (administrator) on RUCKIM (Gigabyte Technology Co., Ltd. GA-78LMT-USB3 6.0) (04-12-2021 18:09:58)
Running from C:\Users\Miloš\Desktop
Loaded Profiles: Miloš
Platform: Microsoft Windows 10 Pro Version 21H1 19043.1348 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atiesrxx.exe
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(GFI Software Development Ltd. -> Kerio Technologies Inc.) C:\Program Files (x86)\Kerio\VPN Client\kvpncgui.exe
(GFI Software Development Ltd. -> Kerio Technologies Inc.) C:\Program Files (x86)\Kerio\VPN Client\kvpncsvc.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGABYTE Technology Co.,Ltd.) C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
(Huawei Technologies Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <13>
(MyHeritage (USA) Inc. -> MyHeritage) C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(VIA Technologies, Inc.) [File not signed] C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe [331776 2011-07-12] (VIA Technologies, Inc.) [File not signed]
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-14] (CANON INC. -> CANON INC.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\ecmdS.exe [167496 2021-11-04] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8459480 2015-02-25] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Family Tree Builder Update] => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [17683056 2019-03-14] (MyHeritage (USA) Inc. -> MyHeritage)
HKLM-x32\...\Run: [Kerio Control VPN Client] => C:\Program Files (x86)\Kerio\VPN Client\kvpncgui.exe [1870184 2021-05-09] (GFI Software Development Ltd. -> Kerio Technologies Inc.)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Miloslav Rucki\AppData\Roaming\Seznam.cz\szninstall.exe [1069296 2018-03-27] (Seznam.cz, a.s. -> )
HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Miloslav Rucki\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] (Seznam.cz, a.s. -> )
HKU\S-1-5-21-1866748756-4086166290-2091690358-1003\...\Run: [MicrosoftEdgeAutoLaunch_B45CD5D6764BEC0022AD6D5AFD39EE0C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
HKLM\...\Print\Monitors\CNAP2 Monitor: C:\WINDOWS\system32\CNAP2LMD.DLL [486400 2012-09-02] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\96.0.4664.45\Installer\chrmstp.exe [2021-11-22] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2017-12-25]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Windows\System32\schtasks.exe (Microsoft Windows -> Microsoft Corporation)
Startup: C:\Users\Miloslav Rucki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-09-01]
ShortcutTarget: Dropbox.lnk -> C:\Users\Miloš\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {008D34D4-A809-412D-9985-B49993D1CF11} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B" <==== ATTENTION
Task: {040FB7D4-E96E-4818-9757-E16757C753B2} - System32\Tasks\{F3FE9B16-A544-47EA-A5A0-FD7A31DD7121} => C:\WINDOWS\system32\pcalua.exe -a "C:\Users\Miloslav Rucki\Downloads\multimedialny_przewodnik.exe" -d "C:\Users\Miloslav Rucki\Downloads"
Task: {0B47304C-5033-4597-A25C-914F7E605E3C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-04-24] (Google Inc -> Google Inc.)
Task: {0E960DFB-B1D6-42E9-9F31-8FE61716F753} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe -crl -hms -pscn 15 (No File)
Task: {0F972D4C-C58A-4F15-BB8B-1D9718BE04C7} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe /StartRecording (No File)
Task: {205694CB-6563-45C5-AD80-8DBB0956CD0B} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (No File)
Task: {28B72A30-65CC-40F0-A415-7DE64786CF1F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {33EECCAC-24E7-4E14-BAFC-D6A9C44336E0} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (No File)
Task: {39DF161A-C876-4CEF-9918-7D8439249490} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
Task: {480B5766-E7F4-4B46-9EE0-30258A4294A8} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (No File)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {50386E7C-49A2-42A3-B13D-E11E08969BA5} - System32\Tasks\GoogleUpdateTaskMachineUA1d19e03ab0ff5f3 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-04-24] (Google Inc -> Google Inc.)
Task: {53259F32-D858-4C8E-B0EC-3BA1CFECFBCE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (No File)
Task: {57369373-6F61-401D-8D0B-CF65B75F874A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (No File)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5BABAD90-9E0F-4FB8-AA3B-DC6C6BA204AF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (No File)
Task: {5CDCB98F-8864-4414-9872-A8F13CA1D517} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (No File)
Task: {6B8C0269-4598-4FB8-84D3-8808FD7C45E1} - System32\Tasks\{038B0788-8B32-4295-829E-BA0932A8E644} => "c:\program files (x86)\mozilla firefox\firefox.exe" http://www.skype.com/go/downloading?sou ... tError=404 hxxp://www.skype.com/go/downloading?source=lig ... tError=404 (No File)
Task: {6E51F4D2-EDEC-450A-9602-457EF14F2F89} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (No File)
Task: {71AD59A9-E65D-48D1-863F-CDC0622F8E4B} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {7378C155-EE09-4129-A671-B8F53A67B918} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (No File)
Task: {7B1A6E92-2B64-46E6-B93F-0E17725CA2AE} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {7DE424F7-299D-48ED-A0B1-FC8F3ED6F994} - System32\Tasks\GIGABYTE OC GURU => C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe [24217744 2016-11-18] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGABYTE Technology Co.,Ltd.)
Task: {8BFC7E3F-365A-4428-8FE8-673ADEABB679} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {8F4C9234-2F3E-4A26-BB5E-653E247EBE9F} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (No File)
Task: {93BC2E09-7E5E-472F-B1AE-15E02D0D7FBD} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [10388872 2016-11-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {9BA51D36-48B3-4486-8C20-5E93B02BEF9C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972184 2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {A1A584C1-AD0A-4560-A5E3-7F7B3490C1C0} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (No File)
Task: {A30491D1-42D5-40FB-AD7E-AC17A300D264} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (No File)
Task: {A35B19EE-7F07-475E-BA60-46F12A8F5A67} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (No File)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B40C5207-2253-4112-9785-74140E546165} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (No File)
Task: {BBBAC72D-19D5-4E84-B8F5-A23272A6F363} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-04-24] (Google Inc -> Google Inc.)
Task: {BD783462-DAA2-4719-89E5-965F30077C57} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (No File)
Task: {BF4A3F13-27C5-42E4-927A-C2EB75D6F126} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (No File)
Task: {C4C044D4-E09E-4B1B-8A5D-9AF87DDAE025} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {C95C4D6C-AD55-4670-9C68-508807DE4592} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-08] (Adobe Inc. -> Adobe)
Task: {CA97BAE0-902A-4633-AD61-31180E4758BA} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {D2481D06-E7C9-461B-AE89-C701489CCCEC} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (No File)
Task: {DC293D88-0460-449D-BE6A-7770C9371501} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (No File)
Task: {DDCE02CA-CD5D-4535-B32B-7A0B0B97724F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972184 2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {EAF6E542-653E-4C47-AEB2-AF35B973B045} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (No File)
Task: {ECFE179E-8675-464A-AFEE-17972ACBA9FF} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (No File)
Task: {EF941E8D-DA26-45D7-B6E3-2CC8CDB4E54A} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {F2BEDC63-B604-44E5-B715-F29BF745885B} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {FC69892F-8861-4E37-A27C-ECD66EFBEB11} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (No File)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{0a19f466-7629-46e2-9234-e7bf60d4ee48}: [DhcpNameServer] 78.157.167.7 78.157.167.57
Tcpip\..\Interfaces\{30028b4e-c7cc-4382-9889-206937702b4b}: [DhcpNameServer] 192.168.1.1 109.231.191.1

Edge:
=======
DownloadDir: C:\Users\Miloš\Downloads
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Miloš\AppData\Local\Microsoft\Edge\User Data\Default [2021-09-21]
Edge DownloadDir: Default -> C:\Users\Miloš\Downloads

FireFox:
========
FF DefaultProfile: lhfbz4vt.default
FF ProfilePath: C:\Users\Miloš\AppData\Roaming\Mozilla\Firefox\Profiles\lhfbz4vt.default [2021-12-04]
FF Homepage: Mozilla\Firefox\Profiles\lhfbz4vt.default -> hxxp://seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\lhfbz4vt.default -> hxxps://zotify.cz
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-04-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-12-04]

Chrome:
=======
CHR Profile: C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default [2021-10-01]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR NewTab: Default -> Not-active:"chrome-extension://olfeabkoenfaoljndfecamgilllcpiak/core/chrome/content/speedDial/speedDial.html"
CHR Extension: (Prezentace) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-03]
CHR Extension: (Dokumenty) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-03]
CHR Extension: (Disk Google) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-26]
CHR Extension: (Seznam doplněk - Email) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2020-12-26]
CHR Extension: (Seznam doplněk - Esko-) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2019-09-21]
CHR Extension: (YouTube) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-30]
CHR Extension: (Adobe Acrobat) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-12-26]
CHR Extension: (Tabulky) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-01]
CHR Extension: (Seznam doplněk - Esko) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2020-12-26]
CHR Extension: (Gmail) - C:\Users\Miloš\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-26]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
S3 AppleChargerSrv; C:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] (Giga-Byte Technology -> )
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3052952 2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [3139904 2021-11-04] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [3139904 2021-11-04] (ESET, spol. s r.o. -> ESET)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [190784 2018-08-23] (Huawei Technologies Co., Ltd. -> ) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 KVPNCSvc; C:\Program Files (x86)\Kerio\VPN Client\kvpncsvc.exe [1790312 2021-05-09] (GFI Software Development Ltd. -> Kerio Technologies Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6103464 2021-11-24] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R1 AppleCharger; C:\WINDOWS\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [183408 2021-11-04] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [124496 2021-11-04] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-24] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [201984 2021-11-04] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43920 2021-11-04] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [69736 2021-11-04] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107456 2021-11-04] (ESET, spol. s r.o. -> ESET)
S3 gdrv; C:\Windows\gdrv.sys [25640 2016-04-24] (Giga-Byte Technology -> Windows (R) Server 2003 DDK provider)
R3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2014-08-28] (Giga-Byte Technology -> )
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2016-04-24] (GIGA-BYTE TECHNOLOGY CO., LTD -> )
R3 kvnet; C:\WINDOWS\System32\drivers\kvnet.sys [46736 2021-05-09] (GFI Software Development Limited -> Kerio Technologies Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-04 18:09 - 2021-12-04 18:10 - 000024856 ____C C:\Users\Miloš\Desktop\FRST.txt
2021-12-04 18:08 - 2021-12-04 18:10 - 000000000 ___DC C:\FRST
2021-12-04 18:06 - 2021-12-04 18:07 - 002311680 _____ (Farbar) C:\Users\Miloš\Desktop\FRST64.exe
2021-12-04 17:48 - 2021-12-04 17:48 - 000000000 ____D C:\WINDOWS\Panther
2021-11-30 12:17 - 2021-11-30 12:17 - 000267090 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(16).pdf
2021-11-30 12:17 - 2021-11-30 12:17 - 000267090 _____ C:\Users\Krista\Desktop\covid.pdf
2021-11-30 12:13 - 2021-11-30 12:13 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(15).pdf
2021-11-30 12:13 - 2021-11-30 12:13 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(14).pdf
2021-11-30 12:10 - 2021-11-30 12:10 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(9).pdf
2021-11-30 12:10 - 2021-11-30 12:10 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(13).pdf
2021-11-30 12:10 - 2021-11-30 12:10 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(12).pdf
2021-11-30 12:10 - 2021-11-30 12:10 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(11).pdf
2021-11-30 12:10 - 2021-11-30 12:10 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(10).pdf
2021-11-30 12:08 - 2021-11-30 12:08 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(8).pdf
2021-11-30 12:08 - 2021-11-30 12:08 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(7).pdf
2021-11-30 12:07 - 2021-11-30 12:07 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(6).pdf
2021-11-30 12:00 - 2021-11-30 12:15 - 000267090 _____ C:\Users\Krista\Desktop\Dotazník_studie_3.dávka.pdf
2021-11-30 11:59 - 2021-11-30 11:59 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(5).pdf
2021-11-30 11:59 - 2021-11-30 11:59 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(4).pdf
2021-11-30 11:59 - 2021-11-30 11:59 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(3).pdf
2021-11-30 11:59 - 2021-11-30 11:59 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(2).pdf
2021-11-30 11:59 - 2021-11-30 11:59 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka(1).pdf
2021-11-30 11:58 - 2021-11-30 11:58 - 000283146 _____ C:\Users\Krista\Downloads\Dotazník_studie_3.dávka.pdf
2021-11-24 15:00 - 2021-11-24 15:00 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-11-24 15:00 - 2021-11-24 15:00 - 000011363 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-11-24 14:59 - 2021-11-24 14:59 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-11-24 14:58 - 2021-11-24 14:58 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-11-24 14:23 - 2021-11-24 14:23 - 000000000 __HDC C:\$WinREAgent
2021-11-22 11:38 - 2021-11-30 12:08 - 000000000 ____D C:\Program Files\Common Files\Adobe
2021-11-22 11:08 - 2021-11-22 11:08 - 000001152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2021-11-22 11:08 - 2021-11-22 11:08 - 000000000 ____D C:\Program Files\PCHealthCheck
2021-11-06 19:12 - 2021-11-06 19:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-11-04 18:41 - 2021-11-06 19:12 - 000000000 ___DC C:\Program Files (x86)\Mozilla Firefox
2021-11-04 18:28 - 2021-11-06 19:28 - 000000000 ____D C:\Users\Miloslav Rucki\Desktop\koupelna rekonstrukce

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-04 17:55 - 2020-12-26 13:20 - 001874740 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-04 17:55 - 2019-12-07 15:43 - 000781566 _____ C:\WINDOWS\system32\perfh005.dat
2021-12-04 17:55 - 2019-12-07 15:43 - 000172300 _____ C:\WINDOWS\system32\perfc005.dat
2021-12-04 17:55 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-12-04 17:54 - 2019-11-18 19:39 - 000000000 ____D C:\ProgramData\Mozilla
2021-12-04 17:53 - 2017-07-15 17:49 - 000000000 ___DC C:\Users\Miloš\AppData\LocalLow\Mozilla
2021-12-04 17:50 - 2016-04-24 09:31 - 000000000 ___DC C:\Program Files (x86)\Google
2021-12-04 17:48 - 2020-12-26 13:25 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
2021-12-04 17:48 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-04 17:48 - 2017-12-25 12:53 - 000000000 ___DC C:\Users\Miloš\Documents\temp
2021-12-04 17:47 - 2020-12-26 13:05 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-04 17:47 - 2019-12-07 10:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2021-12-04 17:47 - 2017-12-25 12:50 - 000065536 ____C C:\WINDOWS\system32\spu_storage.bin
2021-12-04 17:45 - 2019-12-11 11:11 - 000000000 ____D C:\Users\Krista\AppData\Local\D3DSCache
2021-12-04 17:37 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-04 17:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-04 17:36 - 2020-12-26 13:25 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1866748756-4086166290-2091690358-1002
2021-12-04 17:36 - 2020-12-26 13:08 - 000002387 ____C C:\Users\Miloš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-12-04 17:36 - 2017-12-17 22:39 - 000000000 ___DC C:\Users\Miloš\AppData\Local\Packages
2021-12-04 17:35 - 2021-01-18 15:15 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-12-04 17:35 - 2021-01-18 15:15 - 000002280 ____C C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-11-30 12:19 - 2017-07-10 06:08 - 000000000 ___DC C:\Users\Krista\AppData\LocalLow\Mozilla
2021-11-30 12:11 - 2020-12-26 13:25 - 000004212 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{EE1849A5-2D0C-4A4E-8C76-5F634D0992BA}
2021-11-30 12:08 - 2019-12-11 11:08 - 000000000 ____D C:\Users\Miloslav Rucki\AppData\Local\D3DSCache
2021-11-30 11:58 - 2017-04-13 19:02 - 000000000 ___DC C:\Users\Miloslav Rucki\AppData\Roaming\Seznam.cz
2021-11-29 17:33 - 2017-06-17 20:51 - 000000000 ___DC C:\Users\Miloslav Rucki\AppData\LocalLow\Mozilla
2021-11-24 19:31 - 2020-12-26 13:05 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-11-24 19:02 - 2020-12-26 13:05 - 000306928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-11-24 19:01 - 2019-12-07 15:47 - 000000000 ___SD C:\WINDOWS\system32\AppV
2021-11-24 19:01 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-11-24 19:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-11-24 19:01 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-11-24 15:10 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-11-22 14:47 - 2016-04-24 09:17 - 000000000 ___DC C:\WINDOWS\system32\MRT
2021-11-22 14:42 - 2016-04-24 09:17 - 141529560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-11-22 11:37 - 2016-04-24 08:59 - 000000000 ___DC C:\ProgramData\Adobe
2021-11-22 11:24 - 2020-12-26 13:25 - 000003364 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1866748756-4086166290-2091690358-1003
2021-11-22 11:24 - 2020-12-26 13:08 - 000002390 ____C C:\Users\Krista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-11-22 11:22 - 2017-12-17 22:39 - 000000000 ___DC C:\Users\Krista\AppData\Local\Packages
2021-11-22 11:19 - 2018-07-21 11:02 - 000000000 ____D C:\ProgramData\Packages
2021-11-22 11:17 - 2016-04-24 09:31 - 000002307 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-11-22 11:17 - 2016-04-24 09:31 - 000002266 ____C C:\Users\Public\Desktop\Google Chrome.lnk
2021-11-22 11:15 - 2016-04-24 13:47 - 000000000 ___DC C:\Program Files\Microsoft Office 15
2021-11-22 11:12 - 2020-12-26 13:25 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1866748756-4086166290-2091690358-1000
2021-11-22 11:12 - 2020-12-26 13:08 - 000002414 ____C C:\Users\Miloslav Rucki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-11-22 11:11 - 2017-12-17 22:40 - 000000000 ___DC C:\Users\Miloslav Rucki\AppData\Local\Packages
2021-11-22 11:09 - 2021-01-18 15:15 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-11-22 11:09 - 2021-01-18 15:15 - 000003460 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-11-06 19:12 - 2016-04-24 09:01 - 000001169 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-11-06 19:12 - 2016-04-24 09:01 - 000000000 ___DC C:\Program Files (x86)\Mozilla Maintenance Service
2021-11-04 18:38 - 2020-11-14 08:17 - 000069736 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2021-11-04 18:38 - 2020-11-14 08:17 - 000043920 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2021-11-04 18:38 - 2020-07-28 17:10 - 000124496 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2021-11-04 18:38 - 2018-04-12 15:26 - 000107456 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2021-11-04 18:38 - 2014-08-19 09:12 - 000201984 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2021-11-04 18:38 - 2014-08-19 09:12 - 000183408 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys

==================== Files in the root of some directories ========

2016-08-16 19:38 - 2016-08-16 19:40 - 030533688 _____ () C:\Users\Miloš\vlc-2.2.4-win32.exe
2019-10-13 10:39 - 2019-10-13 10:39 - 009256960 _____ () C:\Program Files (x86)\GUTCE64.tmp

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2021
Ran by Miloš (04-12-2021 18:12:31)
Running from C:\Users\Miloš\Desktop
Microsoft Windows 10 Pro Version 21H1 19043.1348 (X64) (2020-12-26 12:25:37)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1866748756-4086166290-2091690358-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1866748756-4086166290-2091690358-503 - Limited - Disabled)
Guest (S-1-5-21-1866748756-4086166290-2091690358-501 - Limited - Disabled)
Krista (S-1-5-21-1866748756-4086166290-2091690358-1003 - Limited - Enabled) => C:\Users\Krista
Miloslav Rucki (S-1-5-21-1866748756-4086166290-2091690358-1000 - Administrator - Enabled) => C:\Users\Miloslav Rucki
Miloš (S-1-5-21-1866748756-4086166290-2091690358-1002 - Administrator - Enabled) => C:\Users\Miloš
WDAGUtilityAccount (S-1-5-21-1866748756-4086166290-2091690358-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AV: ESET Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.34 - GIGABYTE)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.007.20099 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.465 - Adobe)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
AMD Radeon Settings (HKLM\...\WUCCCApp) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Around the World in 80 Days (HKLM-x32\...\Around the World in 80 Days_is1) (Version: 1.0 - GameTop Pte. Ltd.)
AutoGreen B12.1220.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
BSPlayer (HKLM-x32\...\BSPlayer1) (Version: - )
Canon LBP7010C/7018C (HKLM\...\Canon LBP7010C/7018C) (Version: - )
CanoScan Toolbox Ver4.9 (HKLM-x32\...\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}) (Version: - )
ESET Security (HKLM\...\{BEFBE0CD-6723-4D98-8263-9A2C376BC6CD}) (Version: 15.0.18.0 - ESET, spol. s r.o.)
ET6 B15.0210.1 (HKLM-x32\...\{35D86AE6-EC16-4C56-8CE7-B85F0E5EFFA4}) (Version: 1.00.0000 - GIGABYTE) Hidden
ET6 B15.0210.1 (HKLM-x32\...\InstallShield_{35D86AE6-EC16-4C56-8CE7-B85F0E5EFFA4}) (Version: 1.00.0000 - GIGABYTE)
Excel (HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 1.90.0000 - GIGABYTE Technology Co.,Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 96.0.4664.45 - Google LLC)
HiSuite (HKLM-x32\...\Hi Suite) (Version: 8.0.1.303 - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: - )
Kerio Control VPN Client (HKLM\...\{F28017C0-8D37-4EEF-BA41-C0A547A31DC6}) (Version: 9.3.5808 - Kerio Technologies Inc.)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Kyodai Mahjongg (HKLM-x32\...\Kyodai Mahjongg_is1) (Version: - Rene-Gilles Deberdt)
Manual CanoScan LiDE 25 (HKLM-x32\...\{C45EB9E5-7165-4FB0-8C31-77FC4743362F}) (Version: - )
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 96.0.1054.43 - Microsoft Corporation)
Microsoft Office 2013 pro podnikatele - cs-cz (HKLM\...\HomeBusinessRetail - cs-cz) (Version: 15.0.5397.1002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1866748756-4086166290-2091690358-1002\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1866748756-4086166290-2091690358-1003\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM-x32\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox ESR (x86 cs) (HKLM-x32\...\Mozilla Firefox 91.3.0 ESR (x86 cs)) (Version: 91.3.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 91.3.0.7971 - Mozilla)
Mozilla Thunderbird 38.2.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 38.2.0 (x86 cs)) (Version: 38.2.0 - Mozilla)
MyHeritage Family Tree Builder (HKLM-x32\...\Family Tree Builder) (Version: 8.0.0.8516 - MyHeritage.com)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5397.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5397.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0405-0000-0000000FF1CE}) (Version: 15.0.5397.1002 - Microsoft Corporation) Hidden
ON_OFF Charge 2 B13.1028.1 (HKLM-x32\...\{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE) Hidden
ON_OFF Charge 2 B13.1028.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)
Outlook (HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
PowerPoint (HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
PowerQuest PartitionMagic 8.0 (HKLM-x32\...\InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}) (Version: 8.00.000 - PowerQuest)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.88.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7457 - Realtek Semiconductor Corp.)
Seznam Software (HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\SeznamInstall) (Version: 2.1.35 - Seznam.cz)
SSDlife Pro (HKLM-x32\...\{6F104B6D-535A-4D27-9A11-8525368AEB1F}) (Version: 2.5.82 - BinarySense Inc.)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.57a - Ghisler Software GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
Underwater Puzzle (HKLM-x32\...\Underwater Puzzle_is1) (Version: 1.0 - Media Contact LLC)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
VIA Platforma Ovladače zařízení (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.42 - VIA Technologies, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Word (HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
Zoner Photo Studio 11 (HKLM-x32\...\ZonerPhotoStudio11_CZ_is1) (Version: - ZONER software)

Packages:
=========
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.207.400.0_x86__kgqvnymyfvs32 [2021-12-04] (king.com)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.10270.0_x64__8wekyb3d8bbwe [2021-12-04] (Microsoft Studios) [MS Ad]
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-07-27] (Twitter Inc.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1866748756-4086166290-2091690358-1002_Classes\CLSID\{BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B}\InprocServer32 -> C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL (ZONER software) [File not signed]
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2021-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2021-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2021-11-04] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1_S-1-5-21-1866748756-4086166290-2091690358-1002: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers2_S-1-5-21-1866748756-4086166290-2091690358-1002: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers4_S-1-5-21-1866748756-4086166290-2091690358-1002: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]
ContextMenuHandlers6_S-1-5-21-1866748756-4086166290-2091690358-1002: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Photo Studio 11\Program\SHELLEXT64.DLL [2008-10-22] (ZONER software) [File not signed]

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2015-03-24 18:01 - 2015-03-24 18:01 - 000192512 ____C () [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvVGAConfig.dll
2015-02-09 14:11 - 2015-02-09 14:11 - 000266240 ____C (GIGABYTE Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GVBIOSLib.dll
2015-03-26 09:38 - 2015-03-26 09:38 - 000013312 ____C (GIGABYTE Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvCrypt.dll
2014-10-20 16:58 - 2014-10-20 16:58 - 000524288 ____C (GIGABYTE Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GVDisplay.dll
2015-03-26 09:38 - 2015-03-26 09:38 - 003346432 ____C (Gigabyte Technology Co.,Ltd.) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvOsd.dll
2015-03-26 09:38 - 2015-03-26 09:38 - 000016384 ____C (GIGABYTE) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvKm.dll
2014-08-28 16:47 - 2014-08-28 16:47 - 001079808 ____C (Microsoft Corporation) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\MFC80U.DLL
2015-03-21 11:49 - 2015-03-21 11:49 - 000184320 ____C (TODO: <Company name>) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvAutoUpdate.dll
2015-03-26 09:38 - 2015-03-26 09:38 - 000196608 ____C (TODO: <Company name>) [File not signed] C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvFireware.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [144]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=29530
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src ... ORM=IESR02
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src ... ORM=IESR02
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {36BA7EB5-C237-4C18-967B-D0E07F88267D} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {793A0A63-EBBF-466A-9939-E60203403804} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {870549A0-88EA-4B19-9A41-7A2F96EFF553} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {94B87BEC-11E4-42D1-913F-A2697A6B20F4} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {ACBDC414-2C3F-4B52-B4C7-05A2BF5F3CB4} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {AE1B46E0-0309-47B9-B82A-B8A3D8FBECCB} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {B05FD148-83D5-47E2-AA0A-5A663ACB8A43} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {D679E17C-5AD0-4BAB-9D81-1FD22FE835C5} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1000 -> {E7CB8447-CB1D-4D9B-8FCD-B6413527BF5C} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_29530
SearchScopes: HKU\S-1-5-21-1866748756-4086166290-2091690358-1003 -> {E5632B97-2B0D-47B0-B253-CEA35DE7ECAB} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_29530
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2021-10-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 ____C C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\AMD APP\bin\x86_64;C:\Program Files (x86)\AMD APP\bin\x86;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1866748756-4086166290-2091690358-1000\Control Panel\Desktop\\Wallpaper -> G:\Miloš\USA 2014\108NCD40\DSC_0771.JPG
HKU\S-1-5-21-1866748756-4086166290-2091690358-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1866748756-4086166290-2091690358-1003\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img2.jpg
DNS Servers: 78.157.167.7 - 78.157.167.57
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BF51E922-1AD3-450E-8D27-BBCB3FD0110C}] => (Allow) C:\Users\Miloslav Rucki\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{868F83AD-5E49-4A91-955D-399122D04A5B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{628E1623-C091-4C34-87DF-C6085E4CAF0E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{66E7167A-3785-4C14-B684-2FAF501BE4F5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{603B6847-8AEA-4B3B-8662-D89558F3D133}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{ACF1C566-0F93-43A8-AA94-A416CFA26105}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{114024E3-62AA-4628-A67B-441D48D8F921}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{881CF29E-17F6-4A45-91AF-36AEB6CF8099}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{31660C67-75F2-4597-8BC1-2ADE22B71807}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5076E68B-58CD-401C-9045-9C191F04C25B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{726D5FA2-E794-4BB0-A6BD-63AA59AEACC1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{39649C1A-C9A5-4FBA-9983-6A8DEC3405B9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3E0702D2-C47E-48BE-8DB6-8A4F88119E01}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E363FAD7-468D-48C5-9007-5C81770C74FA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{048B1DA7-332B-4BB0-A49D-CB8335A97301}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{509CA5C8-D472-4794-B2CB-9B7AC5B7A6C4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CA51114B-D8D2-44DA-B959-D4DBB0F295AC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8AC0B46C-05CD-47C6-9E05-8D0DEE8D67FB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CA3A2220-8358-4373-BEEA-6529533DD466}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{751C8FB6-3E56-4A7E-B557-E93751A02BC7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B4070854-E1A4-4D51-BE68-308BDA7903AF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{12F67E22-C69C-472F-AAE6-F290A2954635}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{81A3FE09-86E1-426D-BFF9-E2512EF522F2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51C4B865-4AB6-49AE-B51C-B28CFA0449FB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0985CC06-7BB5-45B3-86B8-92A77C78B5CD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E84F93FA-3C0B-4755-A241-1CBC25E8D57C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{440B5934-0B6B-438D-92ED-6BBC4558AC07}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{FECA08FA-3731-45AB-B730-79B1BDB91F04}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{41D7FD2C-05EE-4AA6-AA22-5C2E3F16F649}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1873C7B5-DEED-43C1-B1BF-7D722E3F769D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{FCF37E47-2532-4D94-9E2E-D6EDCF9D969E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.173.517.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:55.36 GB) (Free:2.57 GB) (5%)

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (11/30/2021 12:08:58 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Aktualizaci Adobe Acrobat Reader DC
(21.007.20099) produktu Adobe Acrobat DC (64-bit) nebylo možné nainstalovat. Kód chyby: 1603. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (11/30/2021 12:08:48 PM) (Source: MsiInstaller) (EventID: 11328) (User: NT AUTHORITY)
Description: Produkt: Adobe Acrobat DC (64-bit) -- Chyba 1328.Chyba při aplikování opravy na soubor C:\Config.Msi\PTBF49.tmp. Asi byl aktualizován jinými prostředky a nelze ho již upravovat touto opravou. Více informací získáte od dodavatele opravy. System Error: 112

Error: (11/29/2021 05:19:24 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Zálohování nebylo úspěšné. Chyba: STATUS_WAIT_2 (0x80070002).

Error: (11/29/2021 05:19:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: wbengine.exe, verze: 10.0.19041.746, časové razítko: 0x176385c2
Název chybujícího modulu: wbengine.exe, verze: 10.0.19041.746, časové razítko: 0x176385c2
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000088b26
ID chybujícího procesu: 0x2d7c
Čas spuštění chybující aplikace: 0x01d7e53cc9ff4a59
Cesta k chybující aplikaci: C:\WINDOWS\system32\wbengine.exe
Cesta k chybujícímu modulu: C:\WINDOWS\system32\wbengine.exe
ID zprávy: 5739a3fa-5dfa-449d-9545-c1c52c44df56
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/24/2021 04:33:18 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Maxtor (G:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (11/24/2021 04:06:32 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Maxtor (G:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (11/22/2021 11:39:20 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Aktualizaci Adobe Acrobat Reader DC
(21.007.20099) produktu Adobe Acrobat DC (64-bit) nebylo možné nainstalovat. Kód chyby: 1603. Instalační služba systému Windows může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error: (11/22/2021 11:39:01 AM) (Source: MsiInstaller) (EventID: 11307) (User: NT AUTHORITY)
Description: Produkt: Adobe Acrobat DC (64-bit) -- Chyba 1307.Pro instalaci tohoto souboru C:\Config.Msi\PT4CA.tmp není dost místa na disku. Uvolněte místo na disku a klepněte na Zkusit znovu, nebo klepněte na Přerušit, chcete-li skončit.


System errors:
=============
Error: (12/04/2021 05:40:29 PM) (Source: DCOM) (EventID: 10001) (User: RuckiM)
Description: Nelze spustit server DCOM: Microsoft.OneConnect_5.2011.3081.0_x64__8wekyb3d8bbwe!App.AppXe8pdgw5syxe8pgccbk3mcn5hanwamr0e.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXemn3t55segp7q92mwd35v2a5rk5mvwyz.mca

Error: (12/04/2021 05:36:09 PM) (Source: DCOM) (EventID: 10000) (User: RuckiM)
Description: Nelze spustit server DCOM: {628ACE20-B77A-456F-A88D-547DB6CEEDD5}. Došlo k chybě:
2147958101
při provádění příkazu:
"C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.43\notification_helper.exe" -Embedding

Error: (12/04/2021 05:35:48 PM) (Source: DCOM) (EventID: 10001) (User: RuckiM)
Description: Nelze spustit server DCOM: Microsoft.Messaging_4.1901.10241.1000_x64__8wekyb3d8bbwe!x27e26f40ye031y48a6yb130yd1f20388991ax.AppXnd7rsx17rcmjf7x4y33cgsex7qrrtn8z.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:x27e26f40ye031y48a6yb130yd1f20388991ax.AppX09jg2mz3yagbcrg7v3ym4r2ykqy91j5x.mca

Error: (11/30/2021 12:20:16 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5

Error: (11/30/2021 12:20:10 PM) (Source: DCOM) (EventID: 10010) (User: RuckiM)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/30/2021 12:20:10 PM) (Source: DCOM) (EventID: 10010) (User: RuckiM)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/30/2021 12:20:09 PM) (Source: DCOM) (EventID: 10010) (User: RuckiM)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/30/2021 12:20:09 PM) (Source: DCOM) (EventID: 10010) (User: RuckiM)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.


CodeIntegrity:
===============
Date: 2021-12-04 18:01:35
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET NOD32 Antivirus\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2021-12-04 18:01:35
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET NOD32 Antivirus\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

BIOS: Award Software International, Inc. F2 11/25/2014
Motherboard: Gigabyte Technology Co., Ltd. GA-78LMT-USB3 6.0
Processor: AMD Athlon(tm) II X2 250 Processor
Percentage of memory in use: 56%
Total physical RAM: 6141.55 MB
Available physical RAM: 2651.28 MB
Total Virtual: 12285.55 MB
Available Virtual: 7882.96 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:55.36 GB) (Free:2.57 GB) NTFS
Drive g: (Maxtor) (Fixed) (Total:931.51 GB) (Free:330.64 GB) NTFS

\\?\Volume{5e725f31-091a-11e6-91ad-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 55.9 GB) (Disk ID: 2A5B4CA2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=55.4 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (Size: 931.5 GB) (Disk ID: 0AA9EDC5)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

[JaRon]

Ahoj,
1. vycisti PC s CCleanerom vcetne registrov
2. vycisti PC s Adwcleanerom
3. skontroluj/vycisti disk c: podla logu je tam 2,5GB volneho miesta

[ozana]

Díky předám majiteli PC, už u něho nejsem.