Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-12-2021
Ran by Draeg (administrator) on DESKTOP-HONZA (Gigabyte Technology Co., Ltd. A320M-S2H) (13-12-2021 17:49:30)
Running from E:\Stažené soubory
Loaded Profiles: Draeg
Platform: Microsoft Windows 11 Pro Version 21H2 22000.318 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Program Files (x86)\DSDCS\InputMapper 1.7\HidGuardian\InputMapperCerberusWhitelister.exe
() <==== ATTENTION [zero byte File/Folder] C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373733.inf_amd64_a70fcd9f085a1b58\B373745\atieclxx.exe
(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0373733.inf_amd64_a70fcd9f085a1b58\B373745\atiesrxx.exe
(Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
(Electronic Arts, Inc. -> Electronic Arts) E:\origin\OriginWebHelperService.exe
(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <29>
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Draeg\AppData\Local\Microsoft\Teams\current\Teams.exe <10>
(Microsoft Corporation -> Microsoft Corporation) E:\Microsoft VS Code\Code.exe <14>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.2001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.2001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(NortonLifeLock Inc. -> Broadcom) C:\Program Files\Norton Security\Engine\22.21.10.40\NortonSecurity.exe <2>
(NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.21.10.40\nsWscSvc.exe
(OOO "XMAC" -> ) E:\HoneyGain\Honeygain.exe
(Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.185.0.12\OverwolfHelper.exe
(Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.185.0.12\OverwolfHelper64.exe
(Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\0.185.0.12\OverwolfBrowser.exe <3>
(Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Pango Inc. -> Pango Inc.) C:\Program Files (x86)\Hotspot Shield\10.22.4\bin\cmw_srv.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtWebEngineProcess.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corp. -> Valve Corporation) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve Corp. -> Valve Corporation) E:\Steam\steam.exe
(ZONER software, a.s. -> ZONER software) C:\Users\Draeg\AppData\Local\Programs\Zoner\ZPS X\binary\Program32\ZPSTray.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [961824 2019-08-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [101284632 2020-09-16] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Run: [GoogleChromeAutoLaunch_32C7B48F92CD06D05B6EE9E3E54CA62B] => "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Run: [Steam] => E:\Steam\steam.exe [4267432 2021-11-22] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Run: [EpicGamesLauncher] => E:\EpicGames\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33585632 2021-12-08] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Draeg\AppData\Local\Microsoft\Teams\Update.exe [2459344 2021-12-06] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1807192 2021-11-23] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Users\Draeg\AppData\Local\Programs\Zoner\ZPS X\binary\Program32\ZPSTRAY.EXE [814240 2021-11-11] (ZONER software, a.s. -> ZONER software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\96.0.4664.93\Installer\chrmstp.exe [2021-12-09] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HoneygainUpdater.lnk [2021-06-02]
ShortcutTarget: HoneygainUpdater.lnk -> E:\HoneyGain\HoneygainUpdater.exe (OOO "XMAC" -> Honeygain)
Startup: C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2021-04-07]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00B49A01-85E4-4899-A777-4536400A8AF5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22799320 2021-12-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {02F2409B-269D-402D-A240-401F8635C85E} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [55288 2021-11-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {05D3EE42-5F32-4E86-90E4-74B5BB964AD2} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709048 2021-11-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {254BDDD3-167E-4B2B-B3ED-B3D0628E8C8B} - System32\Tasks\AutoStartTask => C:\Users\Draeg\AppData\Local\DriverAssist\app-5.0.0-retail0017\DriverAssist.exe /Autostart (No File)
Task: {2C5FE631-7155-4343-A52A-7EFD0D7738AD} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4189840 2021-12-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {3046D3E4-08ED-4E91-9B17-7A4C471FD9EF} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files\Norton Security\Engine\22.21.10.40\SymErr.exe [108752 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc)
Task: {3AD39A79-B07F-4A26-BECB-D6E082A5C5E9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8386448 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {417BE8E2-0AAD-4147-BEEE-5037CFC359CC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8386448 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {623E9AB2-11F8-4EAA-8C81-F8ADD93DBBE9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22799320 2021-12-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {7275187B-A9D1-479A-A6B9-662392F82C4A} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files\Norton Security\Engine\22.21.10.40\SymErr.exe [108752 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc)
Task: {797E78AB-E220-4922-B6C5-9BE90D22E6CC} - System32\Tasks\Zoner.Updater.S-1-5-21-2893592886-4133754699-2489620301-1001 => C:\ProgramData\Zoner\Zoner.Installer.Core\Updater.exe [1602464 2021-07-09] (ZONER software, a.s. -> ZONER software, a.s.)
Task: {7DD5F619-3492-4C0B-8972-7A35BB258BC0} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709048 2021-11-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {97E66349-4A3A-4C45-BC89-171A9C9B073E} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709048 2021-11-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {A286E0D0-2D5B-4B73-83AF-D7821D354E94} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139656 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {AE08FBEE-02AD-4C3A-903E-187C7905814A} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2484056 2021-11-23] (Overwolf Ltd -> Overwolf LTD)
Task: {BC362D43-5D52-447B-BB9B-F32E2AE12165} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [329216 2021-11-16] (Advanced Micro Devices, Inc.) [File not signed]
Task: {C0CD7972-E260-45E0-969D-332F5E51AF3D} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe [2352488 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Task: {D04DE528-688B-4EE5-A399-A7189D0245FF} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.21.10.40\WSCStub.exe [646520 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {DC81F515-3543-4BF3-BB51-7815F5A4F631} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [1145 2020-12-04] () [File not signed]
Task: {E4302D83-8A16-4968-9A2B-6ABE40283EE0} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files\Norton Security\Engine\22.21.10.40\SymErr.exe [108752 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc)
Task: {E5756B3F-73F4-499E-B5E0-62937169EF24} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139656 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {F01D8315-4CBA-4C99-AB79-53A14DFCADE5} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [260600 2021-11-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {F5CC1621-B5B8-4462-AB50-CB949F4AB376} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NoUACCheck
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{01e84170-00bb-4287-a61e-bf149ab03eaf}: [DhcpNameServer] 192.168.0.1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Draeg\AppData\Local\Microsoft\Edge\User Data\Default [2021-12-11]
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2021-09-15] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2021-09-15] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [File not signed]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default [2021-12-13]
CHR DownloadDir: E:\Stažené soubory
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.omniboxes.com/?type=hp&ts=142409595 ... oogle.com/"
CHR Extension: (Prezentace) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-24]
CHR Extension: (Talend API Tester - Free Edition) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aejoelaoggembcahagimdiliamlcdmfm [2021-11-08]
CHR Extension: (Dokumenty) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-24]
CHR Extension: (Disk Google) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-24]
CHR Extension: (JSON Formatter) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjindcccaagfpapjjmafapmmgkkhgoa [2021-10-26]
CHR Extension: (Seznam doplněk - Email) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2021-10-26]
CHR Extension: (YouTube) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-24]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-11-24]
CHR Extension: (Watch2Gether) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\cimpffimgeipdhnhjohpbehjkcdpjolg [2021-12-12]
CHR Extension: (Tampermonkey) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2021-06-04]
CHR Extension: (Anti Testportal) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpgfbfopkfdfmlfdpmoanamopdnibhkl [2021-02-25]
CHR Extension: (Tabulky) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-24]
CHR Extension: (WebSocket Test Client) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgponpodhbmadfljofbimhhlengambbn [2021-12-13]
CHR Extension: (Norton Safe Web) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnpbeacklnhmkkilekogeiekaglbmmka [2021-10-07]
CHR Extension: (Dokumenty Google offline) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-12-01]
CHR Extension: (Hangouts Google) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2021-08-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Draeg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-24]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12129160 2021-12-02] (Microsoft Corporation -> Microsoft Corporation)
R2 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [10008216 2021-12-09] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2021-10-01] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [926176 2021-03-16] (Epic Games Inc. -> Epic Games, Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-08] (HP Inc. -> HP Inc.)
R2 hshld_10.22.4; C:\Program Files (x86)\Hotspot Shield\10.22.4\bin\cmw_srv.exe [242776 2021-10-22] (Pango Inc. -> Pango Inc.)
R2 InputMapper Cerberus Whitelister; C:\Program Files (x86)\DSDCS\InputMapper 1.7\HidGuardian\InputMapperCerberusWhitelister.exe [15360 2020-01-10] () [File not signed]
R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.21.10.40\NortonSecurity.exe [343336 2021-10-29] (NortonLifeLock Inc. -> Broadcom)
R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.21.10.40\nsWscSvc.exe [1059176 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
S3 Origin Client Service; E:\origin\OriginClientService.exe [2533952 2021-01-21] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; E:\origin\OriginWebHelperService.exe [3479624 2021-01-21] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2484056 2021-11-23] (Overwolf Ltd -> Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2021-03-22] (Even Balance, Inc. -> )
S3 Rockstar Service; E:\Rockstar Games\Launcher\RockstarService.exe [1934744 2021-07-22] (Rockstar Games, Inc. -> Rockstar Games)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5549632 2021-11-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 VBoxSDS; E:\oracle\Virtual Box\VBoxSDS.exe [746504 2020-10-16] (Oracle Corporation -> Oracle Corporation)
S3 wampapache64; E:\wamp64\bin\apache\apache2.4.41\bin\httpd.exe [29696 2019-08-09] (Apache Software Foundation) [File not signed]
S3 wampmariadb64; E:\wamp64\bin\mariadb\mariadb10.4.10\bin\mysqld.exe [15837608 2019-11-07] (MariaDB Corporation Ab -> )
S3 wampmysqld64; E:\wamp64\bin\mysql\mysql8.0.18\bin\mysqld.exe [48781920 2019-09-20] (Oracle America, Inc. -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\NisSrv.exe [2772856 2021-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\MsMpEng.exe [136640 2021-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 AdobeUpdateService; "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [25016 2021-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV19; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [43336 2021-07-07] (Advanced Micro Devices INC. -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_50fee1227e96ec14\amdsafd.sys [100792 2021-08-04] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0373733.inf_amd64_a70fcd9f085a1b58\B373745\amdkmdag.sys [80543792 2021-11-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [65168 2021-08-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.20.5.40\Definitions\BASHDefs\20211211.011\BHDrvx64.sys [2018784 2021-09-15] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\ccSetx64.sys [192256 2021-10-29] (Symantec Corporation -> Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [509904 2021-11-09] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [145376 2021-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S3 gdrv2; C:\Windows\gdrv2.sys [32600 2020-12-24] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 HidGuardian; C:\WINDOWS\System32\drivers\HidGuardian.sys [26736 2017-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
R3 hsstap; C:\WINDOWS\System32\drivers\hsstap.sys [39424 2020-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Pango)
R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.20.5.40\Definitions\IPSDefs\20211212.061\IDSvia64.sys [1480144 2021-09-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2021-01-02] (SoftEther Corporation -> SoftEther Corporation)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-12-11] (Insecure.Com LLC -> Insecure.Com LLC.)
S3 nsvst_NGC; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\nsvst.sys [56080 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
R1 pango_netfilter2; C:\WINDOWS\System32\drivers\pango_netfilter2.sys [94600 2021-10-22] (Pango Inc. -> Pango Inc)
R1 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\SRTSP64.SYS [892600 2021-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\SRTSPX64.SYS [48824 2021-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\SYMEFASI64.SYS [2030792 2021-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\SymELAM.sys [31984 2021-10-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [93152 2021-08-06] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.20.5.40\SymPlatform\SymEvnt.sys [712432 2021-07-13] (Symantec Corporation -> Symantec Corporation)
R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\Ironx64.SYS [319152 2021-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\symnets.sys [575344 2021-10-29] (Symantec Corporation -> Symantec Corporation)
R3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [239432 2020-10-16] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [249344 2020-10-16] (Oracle Corporation -> Oracle Corporation)
R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [165744 2020-12-14] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
R3 vjoy; C:\WINDOWS\System32\drivers\vjoy.sys [67448 2019-07-14] (On-site Dental Systems (Justin Shafer) -> Shaul Eizikovich)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2021-09-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [433384 2021-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\16150A0.028\wpCtrlDrv.sys [1015760 2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-12-12 23:03 - 2021-12-12 23:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2021-12-11 16:24 - 2021-12-11 16:24 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2893592886-4133754699-2489620301-1001
2021-12-11 11:29 - 2021-12-11 11:29 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsignd4b8ca819dcaf240
2021-12-11 11:29 - 2021-12-11 11:29 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign627875649c7231f3
2021-12-11 11:29 - 2021-12-11 11:29 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign295c2d348c5368a2
2021-12-11 11:29 - 2021-12-11 11:29 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign0b3792c5888057c1
2021-12-11 11:17 - 2021-12-11 11:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign3ce674d826d60ac1
2021-12-11 10:23 - 2021-12-11 10:23 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsignfd7742352c882535
2021-12-11 10:23 - 2021-12-11 10:23 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsigne81f2b08b331cfe8
2021-12-11 10:23 - 2021-12-11 10:23 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsignbde0582a450bf8c2
2021-12-11 10:23 - 2021-12-11 10:23 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign941ff53abe63c91b
2021-12-11 10:22 - 2021-12-11 13:33 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\Adobe
2021-12-11 10:11 - 2021-12-11 10:15 - 000000000 ____D C:\Program Files (x86)\hMailServer
2021-12-11 10:11 - 2021-12-11 10:11 - 000000000 ____D C:\Users\Draeg\AppData\Local\Halvar Information
2021-12-11 10:11 - 2021-12-11 10:11 - 000000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2021-12-11 10:11 - 2021-12-11 10:11 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2021-12-09 20:28 - 2021-12-09 20:28 - 000000000 ____D C:\Users\Draeg\AppData\LocalLow\Gaggle Studios INC
2021-12-09 20:26 - 2021-12-09 20:26 - 000000203 _____ C:\Users\Draeg\Desktop\Goose Goose Duck.url
2021-12-08 15:35 - 2021-12-08 15:35 - 002633676 _____ C:\WINDOWS\Minidump\120821-10234-01.dmp
2021-12-06 21:50 - 2021-12-06 21:50 - 002742484 _____ C:\WINDOWS\Minidump\120621-12437-01.dmp
2021-12-06 16:32 - 2021-12-06 16:32 - 000002402 _____ C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams (work or school).lnk
2021-12-06 16:32 - 2021-12-06 16:32 - 000002394 _____ C:\Users\Draeg\Desktop\Microsoft Teams (work or school).lnk
2021-12-05 19:34 - 2021-12-11 13:33 - 002845927 _____ C:\Users\Draeg\Documents\slevy-shopnet.psd
2021-12-05 16:34 - 2021-12-05 16:34 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign74e47fa15f46fa0c
2021-12-05 16:33 - 2021-12-05 16:33 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsigncc47ca0efdb82fc2
2021-12-05 16:19 - 2021-12-05 16:19 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign9a5dbde9468a8bc6
2021-12-05 16:19 - 2021-12-05 16:19 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign82d985cc1fe5170c
2021-12-05 16:17 - 2021-12-05 16:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign6b99ef86be5dda1a
2021-12-05 16:17 - 2021-12-05 16:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign5491fb59991580c6
2021-12-05 16:17 - 2021-12-05 16:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign17ea239da3f277a8
2021-12-05 12:26 - 2021-12-05 12:26 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign923601f313bcad10
2021-12-05 12:26 - 2021-12-05 12:26 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign6aa5247a606e42a5
2021-12-05 12:25 - 2021-12-05 12:25 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsignc7df4a3a21589619
2021-12-05 12:25 - 2021-12-05 12:25 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign38c73b76a015a037
2021-12-05 12:17 - 2021-12-05 12:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsigncbbeb008e14a2487
2021-12-05 12:17 - 2021-12-05 12:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign97b1323da4c76491
2021-12-05 12:17 - 2021-12-05 12:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign8d1b98620be0e980
2021-12-05 12:17 - 2021-12-05 12:17 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign635bca1356738448
2021-12-05 11:24 - 2021-12-05 11:24 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsignf405fd0afc530e9b
2021-12-05 11:24 - 2021-12-05 11:24 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsignb427f4eef496a33e
2021-12-05 11:24 - 2021-12-05 11:24 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsignb0cc24169b93b8ba
2021-12-05 11:24 - 2021-12-05 11:24 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsigna987540ad10b2b1b
2021-12-05 11:24 - 2021-12-05 11:24 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign9479d10496d78c7d
2021-12-05 11:24 - 2021-12-05 11:24 - 000000000 ____D C:\Users\Draeg\AppData\Local\Tempzxpsign78729adefb48ba7d
2021-11-29 21:54 - 2021-11-30 15:16 - 000000616 _____ C:\Users\Draeg\Desktop\QuadcoreM2.lnk
2021-11-29 21:54 - 2021-11-29 21:54 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QuadcoreM2
2021-11-27 12:18 - 2021-11-27 12:18 - 002812436 _____ C:\WINDOWS\Minidump\112721-11031-01.dmp
2021-11-26 17:10 - 2021-11-26 17:10 - 000074730 _____ C:\Users\Draeg\Documents\LO-2021-Diplom.pdf
2021-11-26 16:03 - 2021-11-26 16:03 - 000000000 ____D C:\Users\Draeg\AppData\Local\AMDIdentifyWindow
2021-11-26 16:01 - 2021-12-13 16:58 - 000003114 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2021-11-26 16:01 - 2021-12-13 16:58 - 000003078 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2021-11-26 16:01 - 2021-11-26 16:01 - 000003488 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2021-11-26 16:01 - 2021-11-26 16:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool
2021-11-26 16:00 - 2021-11-26 16:00 - 000003160 _____ C:\WINDOWS\system32\Tasks\StartCN
2021-11-26 16:00 - 2021-11-26 16:00 - 000003080 _____ C:\WINDOWS\system32\Tasks\StartDVR
2021-11-26 16:00 - 2021-11-26 16:00 - 000002622 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask
2021-11-26 16:00 - 2021-11-26 16:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Software
2021-11-26 16:00 - 2021-11-26 16:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Link For Windows
2021-11-26 16:00 - 2021-11-17 02:48 - 000109504 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdkmpfd.sys
2021-11-26 15:59 - 2021-11-26 16:02 - 000000000 ____D C:\ProgramData\AMD
2021-11-26 15:59 - 2021-11-17 00:39 - 002413080 _____ (AMD Inc.) C:\WINDOWS\SysWOW64\AMDBugReportTool.exe
2021-11-26 15:57 - 2021-11-26 15:57 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\ATI
2021-11-26 15:57 - 2021-11-17 02:49 - 001875520 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 001875520 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 001450560 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 001450560 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 001115432 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 001115432 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000968600 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000968600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000839720 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 000788520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000665664 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000548928 _____ C:\WINDOWS\system32\GameManager64.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000516136 _____ C:\WINDOWS\system32\atieah64.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 000492072 _____ C:\WINDOWS\system32\dgtrayicon.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 000482864 _____ C:\WINDOWS\system32\EEURestart.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 000410176 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000384552 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 000335400 _____ C:\WINDOWS\system32\clinfo.exe
2021-11-26 15:57 - 2021-11-17 02:49 - 000251944 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000210984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000193088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000172608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000170024 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000158240 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000149568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000134208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000132648 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000082496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mcl64.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000067136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mcl32.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000038464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000035368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000019912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2021-11-26 15:57 - 2021-11-17 02:49 - 000019912 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 084027936 _____ C:\WINDOWS\system32\amd_comgr.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 069085736 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 001839648 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 001528360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiacm64.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 001386560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 001386560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000933424 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000760880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000460352 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000458288 _____ C:\WINDOWS\system32\amdlogum.exe
2021-11-26 15:57 - 2021-11-17 02:48 - 000202680 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000193432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000170232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000157344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000141888 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000130600 _____ C:\WINDOWS\system32\atidxx64.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000129064 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000124960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000122920 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000105000 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000104488 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000101416 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2021-11-26 15:57 - 2021-11-17 02:48 - 000061992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 069800496 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 001689376 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 001368224 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000548928 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000535544 _____ C:\WINDOWS\system32\amdmiracast.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000412192 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000150072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000139728 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000139728 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000125592 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000111064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2021-11-26 15:57 - 2021-11-17 02:47 - 000111056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2021-11-26 15:57 - 2021-11-17 00:20 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2021-11-26 15:57 - 2021-11-17 00:20 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2021-11-26 15:57 - 2021-11-17 00:18 - 000204952 _____ C:\WINDOWS\SysWOW64\ativvsvl.dat
2021-11-26 15:57 - 2021-11-17 00:18 - 000204952 _____ C:\WINDOWS\system32\ativvsvl.dat
2021-11-26 15:57 - 2021-11-17 00:18 - 000157144 _____ C:\WINDOWS\SysWOW64\ativvsva.dat
2021-11-26 15:57 - 2021-11-17 00:18 - 000157144 _____ C:\WINDOWS\system32\ativvsva.dat
2021-11-26 15:57 - 2021-11-17 00:12 - 058799224 _____ C:\WINDOWS\system32\amdxc64.so
2021-11-26 15:57 - 2021-11-17 00:09 - 000563184 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2021-11-26 15:57 - 2021-11-17 00:09 - 000563184 _____ C:\WINDOWS\system32\atiapfxx.blb
2021-11-26 15:57 - 2021-10-29 13:04 - 000586680 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendrsr.exe
2021-11-26 15:57 - 2021-10-29 13:04 - 000147872 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdfendr.sys
2021-11-26 15:57 - 2021-10-29 13:04 - 000025016 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdfendrmgr.sys
2021-11-26 15:57 - 2021-08-17 17:34 - 000065168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdxe.sys
2021-11-26 15:57 - 2021-08-03 06:55 - 000246200 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\AtihdWT6.sys
2021-11-26 15:57 - 2020-12-08 21:15 - 000128048 _____ C:\WINDOWS\system32\kapp_ci.sbin
2021-11-26 15:57 - 2020-12-02 07:56 - 000012344 _____ C:\WINDOWS\system32\brandingRSX.bmp
2021-11-26 15:57 - 2020-10-22 05:36 - 000012344 _____ C:\WINDOWS\system32\brandingWS_RSX.bmp
2021-11-26 15:57 - 2020-08-05 08:50 - 000011014 _____ C:\WINDOWS\system32\atiacmLocalisation.ini
2021-11-26 15:57 - 2020-07-17 19:29 - 000076237 _____ C:\WINDOWS\system32\AMDKernelEvents.man
2021-11-26 15:57 - 2020-05-22 16:23 - 000000822 _____ C:\WINDOWS\system32\branding.bmp
2021-11-26 15:57 - 2019-01-11 23:27 - 000121168 _____ C:\WINDOWS\system32\kapp_si.sbin
2021-11-26 15:57 - 2016-09-02 16:24 - 000154384 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin
2021-11-26 15:57 - 2013-12-12 14:53 - 000138832 _____ C:\WINDOWS\system32\samu_krnl_isv_ci.sbin
2021-11-24 20:32 - 2021-11-24 20:32 - 000000000 ____D C:\Program Files\ViGEm HidGuardian
2021-11-24 20:16 - 2021-11-24 20:16 - 000002122 _____ C:\Users\Public\Desktop\InputMapper.lnk
2021-11-24 20:16 - 2021-11-24 20:16 - 000000000 ____D C:\Users\Draeg\AppData\Local\Geckofx
2021-11-24 20:16 - 2021-11-24 20:16 - 000000000 ____D C:\ProgramData\Caphyon
2021-11-24 20:16 - 2021-11-24 20:16 - 000000000 ____D C:\Program Files (x86)\DSDCS
2021-11-24 20:15 - 2021-11-24 20:23 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\InputMapper
2021-11-24 20:15 - 2021-11-24 20:15 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\DSDCS
2021-11-24 20:15 - 2021-11-24 20:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InputMapper 1.7
2021-11-23 22:31 - 2021-11-23 22:31 - 000119296 _____ C:\WINDOWS\SysWOW64\zlib.dll
2021-11-23 22:31 - 2021-11-23 22:31 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\PowerUp Software
2021-11-23 22:31 - 2021-11-23 22:31 - 000000000 ____D C:\ProgramData\PowerUp Software
2021-11-23 22:31 - 2016-01-03 11:32 - 001227264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dx8vb.dll
2021-11-23 22:31 - 2016-01-03 11:32 - 000057344 _____ () C:\WINDOWS\SysWOW64\ADsSecurity.dll
2021-11-23 22:31 - 2016-01-03 11:32 - 000045056 _____ (vbAccelerator) C:\WINDOWS\SysWOW64\SSubTmr6.dll
2021-11-23 22:31 - 2016-01-03 11:32 - 000045056 _____ (Microsoft) C:\WINDOWS\SysWOW64\NTSVC.ocx
2021-11-23 22:31 - 2001-04-05 05:43 - 000094208 ___RS (Microsoft Corporation) C:\WINDOWS\SysWOW64\msstkprp.dll
2021-11-23 22:31 - 1998-06-17 23:00 - 000089360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB5DB.DLL
2021-11-23 22:22 - 2021-11-23 22:22 - 000000000 ____D C:\Program Files\Nefarius Software Solutions
2021-11-23 22:22 - 2021-11-23 22:22 - 000000000 ____D C:\Program Files\dotnet
2021-11-19 12:57 - 2021-11-19 12:57 - 000000000 ___HD C:\$WinREAgent
2021-11-17 09:33 - 2021-12-09 15:46 - 000003490 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7d68632ff0254
2021-11-15 20:36 - 2021-11-15 20:36 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\Valve Corporation
2021-11-14 22:16 - 2021-12-08 15:36 - 000000000 ____D C:\WINDOWS\Minidump
2021-11-14 22:16 - 2021-11-14 22:16 - 001997932 _____ C:\WINDOWS\Minidump\111421-10468-01.dmp
2021-11-13 09:37 - 2021-12-12 11:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton Security
2021-11-13 09:37 - 2021-11-13 09:37 - 000003378 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration
2021-11-13 09:37 - 2021-11-13 09:37 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-12-13 17:49 - 2021-10-26 09:02 - 000000000 ____D C:\FRST
2021-12-13 17:49 - 2021-06-05 13:09 - 000000000 ____D C:\WINDOWS\INF
2021-12-13 17:44 - 2020-12-24 22:52 - 000000000 ____D C:\Program Files (x86)\Google
2021-12-13 17:35 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-13 17:03 - 2021-09-28 18:41 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\Code
2021-12-13 17:02 - 2021-09-28 18:41 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2021-12-13 15:39 - 2020-12-24 22:50 - 000000000 ____D C:\Users\Draeg\AppData\Local\D3DSCache
2021-12-13 15:35 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-13 15:35 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-13 15:22 - 2021-01-29 20:08 - 000002321 _____ C:\Users\Draeg\Desktop\Porofessor.gg.lnk
2021-12-13 15:22 - 2021-01-29 20:05 - 000000000 ____D C:\Users\Draeg\AppData\Local\Overwolf
2021-12-13 15:22 - 2020-12-24 23:55 - 000000000 ___RD C:\Users\Draeg\OneDrive - Vyssi odborna skola a Stredni skola technicka Ceska Trebova
2021-12-13 15:22 - 2020-12-24 22:33 - 000000000 ___RD C:\Users\Draeg\OneDrive
2021-12-12 23:03 - 2020-12-25 00:30 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\discord
2021-12-12 23:01 - 2020-12-25 00:30 - 000000000 ____D C:\Users\Draeg\AppData\Local\Discord
2021-12-12 17:00 - 2020-12-25 00:20 - 000000000 ____D C:\ProgramData\Riot Games
2021-12-11 13:33 - 2021-01-28 18:48 - 000000000 ____D C:\Users\Draeg\AppData\LocalLow\Adobe
2021-12-11 13:06 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-11 11:29 - 2021-01-28 18:48 - 000000033 _____ C:\Users\Draeg\AppData\Roaming\AdobeWLCMCache.dat
2021-12-11 08:11 - 2021-11-10 23:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-12-11 08:11 - 2020-09-27 08:58 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-12-11 08:11 - 2020-09-27 08:58 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-12-10 21:01 - 2020-12-24 23:53 - 000000000 ____D C:\Users\Draeg\AppData\Local\AMD_Common
2021-12-10 14:06 - 2020-12-25 00:21 - 000000000 ____D C:\Program Files\Microsoft Office
2021-12-09 20:26 - 2021-06-16 07:00 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-12-09 16:26 - 2020-12-24 23:06 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-12-09 16:26 - 2020-12-24 23:06 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-12-09 15:46 - 2021-11-10 23:56 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-12-08 23:12 - 2021-11-10 23:27 - 000000000 ____D C:\Users\Draeg
2021-12-08 18:09 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\Registration
2021-12-08 15:42 - 2021-11-11 00:04 - 001714894 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-08 15:42 - 2021-06-05 18:22 - 000724600 _____ C:\WINDOWS\system32\perfh005.dat
2021-12-08 15:42 - 2021-06-05 18:22 - 000150562 _____ C:\WINDOWS\system32\perfc005.dat
2021-12-08 15:36 - 2020-12-24 22:32 - 000000000 ____D C:\Users\Draeg\AppData\Local\Packages
2021-12-08 15:36 - 2020-09-27 08:59 - 000000000 ____D C:\ProgramData\Packages
2021-12-08 15:35 - 2021-11-10 23:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-12-08 15:35 - 2021-10-21 18:52 - 1447440555 _____ C:\WINDOWS\MEMORY.DMP
2021-12-08 15:35 - 2020-09-27 06:55 - 000012288 ___SH C:\DumpStack.log.tmp
2021-12-07 22:27 - 2021-06-05 13:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-12-07 16:22 - 2020-12-25 13:41 - 002229736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2021-12-07 16:22 - 2020-12-25 13:41 - 000332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2021-12-07 16:22 - 2020-12-25 13:41 - 000218600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2021-12-07 16:22 - 2020-12-25 13:41 - 000198120 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2021-12-07 16:22 - 2020-12-25 13:41 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2021-12-07 16:22 - 2020-12-25 13:41 - 000062952 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe
2021-12-06 21:50 - 2021-06-05 13:01 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-12-05 22:03 - 2020-12-25 00:36 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\TS3Client
2021-12-05 19:33 - 2020-12-27 15:28 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\.minecraft
2021-12-05 10:53 - 2020-12-24 22:34 - 000000000 ____D C:\Users\Draeg\AppData\Local\PlaceholderTileLogoFolder
2021-12-02 18:58 - 2021-01-29 20:07 - 000000000 ____D C:\Program Files (x86)\Overwolf
2021-11-30 19:20 - 2021-11-10 23:56 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2893592886-4133754699-2489620301-1001
2021-11-30 19:20 - 2020-12-24 22:30 - 000002381 _____ C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-11-27 18:28 - 2020-12-25 11:21 - 000000000 ____D C:\Users\Draeg\.VirtualBox
2021-11-27 18:24 - 2020-12-25 11:21 - 000000000 ____D C:\ProgramData\VirtualBox
2021-11-27 18:19 - 2021-02-25 22:22 - 000000000 ____D C:\Users\Draeg\VirtualBox VMs
2021-11-27 10:05 - 2021-01-13 12:59 - 000000000 ____D C:\Users\Draeg\AppData\Local\CrashDumps
2021-11-27 09:24 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-11-27 08:32 - 2020-12-24 23:52 - 000000000 ____D C:\Users\Draeg\AppData\Local\AMD
2021-11-26 16:01 - 2020-12-24 23:01 - 000000000 ____D C:\Users\Draeg\AppData\LocalLow\AMD
2021-11-26 16:00 - 2021-11-10 23:26 - 000000000 ____D C:\WINDOWS\system32\AMD
2021-11-26 16:00 - 2020-12-24 23:18 - 000000000 ____D C:\ProgramData\Package Cache
2021-11-26 16:00 - 2020-12-24 22:56 - 000000000 ____D C:\Program Files\AMD
2021-11-26 15:58 - 2021-06-05 13:01 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-11-26 15:57 - 2020-12-24 23:28 - 000000000 ____D C:\AMD
2021-11-25 16:00 - 2020-12-25 12:02 - 000000000 ____D C:\ProgramData\Zoner
2021-11-24 22:49 - 2020-12-24 22:56 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2021-11-24 22:37 - 2021-11-10 23:54 - 000565008 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-11-24 22:18 - 2020-12-24 22:32 - 000000000 ____D C:\Users\Draeg\AppData\Local\ConnectedDevicesPlatform
2021-11-23 22:35 - 2021-01-29 20:08 - 000000000 ____D C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2021-11-23 22:31 - 2020-12-24 23:22 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2021-11-22 16:30 - 2021-11-10 22:52 - 000000000 ___DC C:\WINDOWS\Panther
2021-11-20 15:30 - 2021-02-12 17:02 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-11-17 12:33 - 2021-11-03 22:26 - 000000000 ____D C:\Users\Draeg\Cisco Packet Tracer 8.0.1
2021-11-17 12:33 - 2021-01-08 11:24 - 000000428 _____ C:\Users\Draeg\.packettracer
2021-11-15 20:34 - 2020-12-25 00:37 - 000000000 ___RD C:\Users\Draeg\Desktop\Honza
2021-11-13 18:08 - 2020-12-25 12:04 - 000001563 _____ C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Zoner Photo Studio X.lnk
2021-11-13 18:08 - 2020-12-25 12:04 - 000001561 _____ C:\Users\Draeg\Desktop\Zoner Photo Studio X.lnk
2021-11-13 10:02 - 2020-12-25 00:42 - 000000000 ____D C:\Program Files\Common Files\AV
2021-11-13 09:37 - 2021-06-05 13:10 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-11-13 09:37 - 2020-12-24 23:23 - 000002429 _____ C:\Users\Public\Desktop\Norton Security.lnk
2021-11-13 09:37 - 2020-12-24 23:16 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64
2021-11-13 09:10 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
==================== Files in the root of some directories ========
2021-01-28 18:48 - 2021-12-11 11:29 - 000000033 _____ () C:\Users\Draeg\AppData\Roaming\AdobeWLCMCache.dat
2021-01-20 08:24 - 2021-01-20 08:24 - 000000110 _____ () C:\Users\Draeg\AppData\Roaming\debug.log
2021-01-31 09:52 - 2021-05-20 10:21 - 000007380 _____ () C:\Users\Draeg\AppData\Local\oobelibMkey.log
2021-09-21 20:03 - 2021-09-21 20:03 - 000000715 _____ () C:\Users\Draeg\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-12-2021
Ran by Draeg (13-12-2021 17:50:19)
Running from E:\Stažené soubory
Microsoft Windows 11 Pro Version 21H2 22000.318 (X64) (2021-11-10 23:01:16)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2893592886-4133754699-2489620301-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2893592886-4133754699-2489620301-503 - Limited - Disabled)
Draeg (S-1-5-21-2893592886-4133754699-2489620301-1001 - Administrator - Enabled) => C:\Users\Draeg
Guest (S-1-5-21-2893592886-4133754699-2489620301-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2893592886-4133754699-2489620301-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Norton Security (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Security (Enabled - Up to date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}
AV: Norton Security (Enabled - Up to date) {9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}
FW: Norton Security (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E}
FW: Norton Security (Enabled) {A6045214-8EAD-7B9C-2E68-BA2B11C858F1}
FW: Norton Security (Enabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\uTorrent) (Version: 3.5.5.45852 - BitTorrent Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.9.0.327 - Adobe Systems Incorporated)
Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_0_0) (Version: 21.0.0 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 21.11.3 - Advanced Micro Devices, Inc.)
Anaconda3 2021.05 (Python 3.8.8 64-bit) (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Anaconda3 2021.05 (Python 3.8.8 64-bit)) (Version: 2021.05 - Anaconda, Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Branding64 (HKLM\...\{C871FC62-0186-40ED-BAEA-7C65BE367755}) (Version: 1.00.0006 - Advanced Micro Devices, Inc.) Hidden
Cisco Packet Tracer 8.0 64Bit (HKLM\...\Cisco Packet Tracer 8.0 64Bit_is1) (Version: - Cisco Systems, Inc.)
Cisco Packet Tracer 8.0.1 64Bit (HKLM\...\Cisco Packet Tracer 8.0.1 64Bit_is1) (Version: - Cisco Systems, Inc.)
Dia (pouze odstranit) (HKLM-x32\...\Dia) (Version: - )
Discord (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 12.0.171.5063 - Electronic Arts) Hidden
EA app (HKLM-x32\...\{d3e84f4a-a180-492d-985f-40cdbc8681a1}) (Version: 12.0.171.5063 - Electronic Arts)
Epic Games Launcher (HKLM-x32\...\{FEF3A9BA-A962-4469-AD62-04839D4BB847}) (Version: 1.1.298.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{0B736177-814A-4ADE-81D1-66A0FDD55BB4}) (Version: 1.1.11.0 - Epic Games, Inc.)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
GlassFish Server Open Source Edition 4.1.1 (HKLM\...\nbi-glassfish-mod-4.1.1.0.1) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 96.0.4664.93 - Google LLC)
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Honeygain (HKLM-x32\...\{C1922E93-B15E-460D-9C01-53E71109C2C6}) (Version: 0.10.2.0 - Honeygain)
Hotspot Shield 10.22.4 (HKLM-x32\...\{4de134ec-1612-4548-bed4-35bf05f8cfe2}) (Version: 10.22.4.12022 - Pango Inc.)
Hotspot Shield 10.22.4 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925F287F119}) (Version: 10.22.4.12022 - Pango Inc.) Hidden
Hotspot Shield 10.22.4 (HKLM-x32\...\HotspotShield) (Version: 10.22.4 - Pango Inc.) Hidden
HotspotShield TAP-Windows 9.24.4 (HKLM\...\HotspotShield TAP-Windows) (Version: 9.24.4 - Pango Inc.) Hidden
Cheat Engine 7.2 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine)
InputMapper 1.7 (HKLM-x32\...\{E42A4987-1F86-4E8F-A708-60CAAC1E3DA7}) (Version: 1.7.7452.13622 - DSDCS) Hidden
InputMapper 1.7 (HKLM-x32\...\InputMapper 1.7 1.7.7452.13622) (Version: 1.7.7452.13622 - DSDCS)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java SE Development Kit 8 Update 101 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180101}) (Version: 8.0.1010.13 - Oracle Corporation)
JavaFX Scene Builder 2.0 (HKLM-x32\...\{B4665EB1-1F7A-44F5-AD07-C20A938E8BC2}) (Version: 2.0 - Oracle)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{E496AFB7-CB04-46CF-8FBB-5D665BC8811B}) (Version: 3.3.2110.22002 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.14701.20226 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 96.0.1054.53 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 96.0.1054.53 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\OneDriveSetup.exe) (Version: 21.230.1107.0004 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 ENU (HKLM-x32\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Teams) (Version: 1.4.00.31569 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29913 (HKLM-x32\...\{855e31d2-9031-46e1-b06d-c9d7777deefb}) (Version: 14.28.29913.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.63.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.12 (x64) (HKLM-x32\...\{ce8037d8-35f7-4142-ad18-23609ac5db17}) (Version: 5.0.12.30623 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{27B34E47-68AE-4802-822A-9F0C187AF84A}) (Version: 1.0.0.0 - Mojang)
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Nefarius Virtual Gamepad Emulation Bus Driver (HKLM\...\{93D91F60-7C94-4A79-863F-EA713D2EB3F3}) (Version: 1.17.333.0 - Nefarius Software Solutions e.U.)
NetBeans IDE 8.1 (HKLM\...\nbi-nb-base-8.1.0.0.201510222201) (Version: 8.1 - NetBeans.org)
Norton Security (HKLM-x32\...\NGC) (Version: 22.21.10.40 - NortonLifeLock Inc)
Npcap (HKLM-x32\...\NpcapInst) (Version: 1.10 - Nmap Project)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 26.1.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20226 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20226 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 6.1.16 (HKLM\...\{8979282D-1F43-4810-B819-AA1B06F2C085}) (Version: 6.1.16 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.91.46291 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.185.0.12 - Overwolf Ltd.)
Pomocník s instalací Windows 11 (HKLM-x32\...\{115DF11E-4B4C-4EA9-9A79-00DB0C7EF02D}) (Version: 1.4.19041.1341 - Microsoft Corporation)
Porofessor.gg (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\Overwolf_pibhbkkgefgheeglaeemkkfjlhidhcedalapdggh) (Version: 2.7.95 - Overwolf app)
PSPad editor (HKLM-x32\...\PSPad editor_is1) (Version: 5.0.4.543 - Jan Fiala)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Python 3.9.6 (64-bit) (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\{178e8fd0-1b1d-4cdf-8e5c-f5f53d25e0e4}) (Version: 3.9.6150.0 - Python Software Foundation)
Python 3.9.6 Core Interpreter (64-bit) (HKLM\...\{C4B7FF79-1195-436F-AA85-28EE995151B7}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 Development Libraries (64-bit) (HKLM\...\{D6580352-5B95-49A9-B2F3-313D12D13968}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 Documentation (64-bit) (HKLM\...\{2994270E-FE74-49E5-98BB-E65F5F0EC304}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 Executables (64-bit) (HKLM\...\{9BE9E7F0-F9F1-487B-A2FC-790CD2898388}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 pip Bootstrap (64-bit) (HKLM\...\{69BCB7EC-54AF-47F2-A891-D335CE44A530}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 Standard Library (64-bit) (HKLM\...\{4DD10049-CC97-48AE-BE76-4CB6E3111F7B}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 Tcl/Tk Support (64-bit) (HKLM\...\{7C56D977-225C-4EBA-8308-E47DF9FA867F}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 Test Suite (64-bit) (HKLM\...\{5C5B7907-C4E8-4E09-8CD6-3E844C7D65E2}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python 3.9.6 Utility Scripts (64-bit) (HKLM\...\{511119D2-41C4-48E1-A3DA-0A6A1E68AC76}) (Version: 3.9.6150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{3CC89AD9-6FF2-40BE-ADF4-8ADDD3030FCE}) (Version: 3.9.7483.0 - Python Software Foundation)
Quest Software Toad Data Modeler Freeware 2.25 (HKLM-x32\...\Quest Software Toad Data Modeler Freeware 2.25_is1) (Version: - Quest Software, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.32.1206.2018 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8773.1 - Realtek Semiconductor Corp.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.42.369 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.8.5 - Rockstar Games)
RyzenMasterSDK (HKLM\...\{EA8C6C72-2CEE-4568-8CFA-F4B8C362C022}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
SPEEDLINK STRIKE Gamepad (HKLM-x32\...\{DFF7CD2E-2BB5-40C3-9592-078F64677EFF}) (Version: 1.00.0000 - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.26064 - Microsoft Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.6 - TeamSpeak Systems GmbH)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 117.0.10324 - Ubisoft)
USB RACING WHEEL (HKLM-x32\...\{DED994FF-D39B-4937-9DB9-87EC4E91B316}) (Version: 1.00.0000 - Y-J-R)
VEGAS Pro 18.0 (HKLM\...\{75111FE1-CE55-11EA-8B12-00155D43CFCE}) (Version: 18.0.284 - VEGAS)
vJoy Device Driver 2.1.9.1 (HKLM\...\{8E31F76F-74C3-47F1-9550-E041EEDC5FBB}_is1) (Version: 2.1.9.1 - Shaul Eizikovich)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Vzum (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\6cfa0c5674100ff8) (Version: 1.0.0.38 - Vzum)
Wampserver64 3.2.0 (HKLM\...\{wampserver64}_is1) (Version: 3.2.0 - Dominique Ottello aka Otomatic)
WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
Wireshark 3.4.3 64-bit (HKLM-x32\...\Wireshark) (Version: 3.4.3 - The Wireshark developer community, hxxps://www.wireshark.org)
Zoner Callisto 5 FREE (HKLM-x32\...\ZonerCallisto5_CZ_is1) (Version: 5.0.5000.16 - ZONER software)
Zoner Photo Studio X CS (HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\ZPS X) (Version: 19.2109.2.352 - ZONER software)
Packages:
=========
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-10-25] (Microsoft Corporation)
Forza Horizon 5 -> C:\Program Files\WindowsApps\Microsoft.624F8B84B80_3.414.967.0_x64__8wekyb3d8bbwe [2021-12-04] (Microsoft Studios)
Forza Horizon 5 Expansion 1 -> C:\Program Files\WindowsApps\Microsoft.Expansion1FH5_1.0.0.0_x64__8wekyb3d8bbwe [2021-11-26] (Microsoft Studios)
Forza Horizon 5 Expansion 2 -> C:\Program Files\WindowsApps\Microsoft.Expansion2FH5_1.0.0.0_x64__8wekyb3d8bbwe [2021-11-26] (Microsoft Studios)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_133.1.340.0_x64__v10z8vjag6ke6 [2021-12-13] (HP Inc.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.11.12030.0_x64__8wekyb3d8bbwe [2021-12-09] (Microsoft Studios) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.57.43142.0_x64__8wekyb3d8bbwe [2021-11-20] (Microsoft Corporation) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.4.188.0_x64__dt26b99r8h8gj [2020-12-24] (Realtek Semiconductor Corp)
Sea of Thieves -> C:\Program Files\WindowsApps\Microsoft.SeaofThieves_2.106.3544.2_x64__8wekyb3d8bbwe [2021-12-06] (ms-resource:PublisherDisplayName)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0 [2021-12-11] (Spotify AB) [Startup Task]
Telly TV -> C:\Program Files\WindowsApps\4NET.TV.DIGI2GO_1.1.6.0_x64__2epghj4njp6fy [2021-01-23] (4NET.TV)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2893592886-4133754699-2489620301-1001_Classes\CLSID\{04271989-C4D2-4FF5-359E-7F768727B0C6} -> [OneDrive - Vyssi odborna skola a Stredni skola technicka Ceska Trebova] => C:\Users\Draeg\OneDrive - Vyssi odborna skola a Stredni skola technicka Ceska Trebova [2020-12-24 23:55]
CustomCLSID: HKU\S-1-5-21-2893592886-4133754699-2489620301-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Draeg\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21229.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2893592886-4133754699-2489620301-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems Incorporated -> Adobe Systems)
CustomCLSID: HKU\S-1-5-21-2893592886-4133754699-2489620301-1001_Classes\CLSID\{ED90173A-3B4C-4E7E-B9CF-79714425D4B5}\InprocServer32 -> C:\Program Files (x86)\PSPad editor\pspshellx64.dll () [File not signed]
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] (Adobe Systems Incorporated -> )
ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.10.40\NavShExt.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.10.40\NavShExt.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-11-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] (Adobe Systems Incorporated -> )
ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.10.40\buShell.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.10.40\NavShExt.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-2893592886-4133754699-2489620301-1001: [EditWithPSPad] -> {ED90173A-3B4C-4E7E-B9CF-79714425D4B5} => C:\Program Files (x86)\PSPad editor\pspshellx64.dll [2014-11-02] () [File not signed]
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Hangouts Google.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl
ShortcutWithArgument: C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda3 (64-bit)\Anaconda Prompt (anaconda).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> "/K" E:\anaconda\Scripts\activate.bat E:\anaconda
==================== Loaded Modules (Whitelisted) =============
2021-04-21 03:01 - 2021-04-21 03:01 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2021-11-20 08:23 - 2021-10-06 02:30 - 126961152 _____ () [File not signed] E:\Steam\bin\cef\cef.win7x64\libcef.dll
2021-11-20 08:23 - 2021-10-06 02:30 - 000384000 _____ () [File not signed] E:\Steam\bin\cef\cef.win7x64\libegl.dll
2021-11-20 08:23 - 2021-10-06 02:30 - 008006656 _____ () [File not signed] E:\Steam\bin\cef\cef.win7x64\libglesv2.dll
2021-07-07 05:37 - 2021-07-07 05:37 - 000562688 _____ (Advanced Micro Devices) [File not signed] C:\Program Files\AMD\CNext\CNext\Device.dll
2021-07-07 05:37 - 2021-07-07 05:37 - 000058880 _____ (Advanced Micro Devices) [File not signed] C:\Program Files\AMD\CNext\CNext\Platform.dll
2017-09-04 23:15 - 2017-09-04 23:15 - 004396032 _____ (Microsoft Corporation) [File not signed] C:\Program Files\AMD\CNext\CNext\D3DCompiler_47.dll
2020-12-25 01:04 - 2020-12-25 01:04 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-12-25 01:04 - 2020-12-25 01:04 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2021-11-20 08:23 - 2021-10-06 02:30 - 000983552 _____ (The Chromium Authors) [File not signed] E:\Steam\bin\cef\cef.win7x64\chrome_elf.dll
2021-12-09 20:02 - 2021-12-09 20:02 - 002815488 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libcrypto-1_1-x64.dll
2021-12-09 20:02 - 2021-12-09 20:02 - 000678400 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libssl-1_1-x64.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] E:\origin\LIBEAY32.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] E:\origin\ssleay32.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 001611264 _____ (The Qt Company Ltd) [File not signed] E:\origin\platforms\qwindows.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 005487104 _____ (The Qt Company Ltd) [File not signed] E:\origin\Qt5Core.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 005841920 _____ (The Qt Company Ltd) [File not signed] E:\origin\Qt5Gui.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 001179136 _____ (The Qt Company Ltd) [File not signed] E:\origin\Qt5Network.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 000146432 _____ (The Qt Company Ltd) [File not signed] E:\origin\Qt5WebSockets.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 005089792 _____ (The Qt Company Ltd) [File not signed] E:\origin\Qt5Widgets.dll
2021-01-29 19:07 - 2021-01-13 14:18 - 000184832 _____ (The Qt Company Ltd) [File not signed] E:\origin\Qt5Xml.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000057856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\audio\qtaudio_windows.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000039424 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000031232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000415232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000532992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 001455104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 001227776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000135680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 006270976 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 006947328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000740352 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Multimedia.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000123392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5MultimediaQuick.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 001110528 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000326656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 003798528 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000440832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QmlModels.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000054784 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QmlWorkerScript.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 004255744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000171520 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 001128448 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000206336 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000334336 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000396800 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 102854656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000133120 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 005611008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000210432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 002877440 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000056832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000267776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtMultimedia\declarative_multimedia.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQml\qmlplugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000290816 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000336896 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000134144 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000106496 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000325120 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000045568 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2021-04-21 03:01 - 2021-04-21 03:01 - 000093184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll
2021-12-09 20:02 - 2021-12-09 20:02 - 000046592 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\bearer\qgenericbearer.dll
2021-12-09 20:02 - 2021-12-09 20:02 - 006270976 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Core.dll
2021-12-09 20:02 - 2021-12-09 20:02 - 001389568 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Network.dll
2021-12-09 20:02 - 2021-12-09 20:02 - 000157184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5WebSockets.dll
2021-12-09 20:02 - 2021-12-09 20:02 - 000210432 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Xml.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\WINDOWS\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\WINDOWS\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\WINDOWS\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2021-09-15] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2021-09-15] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.21.10.40\coIEPlg.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.21.10.40\coIEPlg.dll [2021-10-29] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\sharepoint.com -> hxxps://eskola-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 10:14 - 2020-12-25 12:14 - 000000039 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Draeg\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
Network Binding:
=============
VPN - VPN Client: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)
VPN - VPN Client: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)
Připojení k místní síti: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)
Připojení k místní síti: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)
Ethernet 2: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)
Ethernet 2: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)
Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)
Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_32C7B48F92CD06D05B6EE9E3E54CA62B"
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2893592886-4133754699-2489620301-1001\...\StartupApproved\Run: => "electron.app.Honey Miner"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{AF5B1F30-F0DC-4949-9A0A-425128464B48}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F9135B17-2D2B-4BF8-B001-CCFE5642B6F1}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A7915891-C99B-4086-9A18-E5A4ACC385C9}] => (Allow) E:\Steam\steamapps\common\New World\NewWorldLauncher.exe (Amazon.com Services LLC -> EasyAntiCheat Ltd)
FirewallRules: [{AF0D3F48-306F-4C53-9C3A-0F0F84D0821A}] => (Allow) E:\Steam\steamapps\common\New World\NewWorldLauncher.exe (Amazon.com Services LLC -> EasyAntiCheat Ltd)
FirewallRules: [{F696734C-8A40-4807-9E3A-9AE5CC79779D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{942D62ED-92B6-40C4-ABBC-1CDE66984410}] => (Allow) E:\Steam\steamapps\common\Battlerite\Battlerite.exe (Stunlock Studios AB -> )
FirewallRules: [{45111B9F-D6D0-47B8-ABB8-6E8AD53BE625}] => (Allow) E:\Steam\steamapps\common\Battlerite\Battlerite.exe (Stunlock Studios AB -> )
FirewallRules: [{81A51F57-493D-46E3-9D14-6A5C30D987C2}] => (Allow) E:\Steam\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{014AE090-6ECB-45B2-B151-13C8E2F930B1}] => (Allow) E:\Steam\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{F1F7682C-675B-41C8-8AAD-9DB00CBF31FB}] => (Allow) E:\Steam\steamapps\common\Valheim\valheim.exe () [File not signed]
FirewallRules: [{EFBACA34-F7A1-4822-954B-E8CA986E602D}] => (Allow) E:\Steam\steamapps\common\Valheim\valheim.exe () [File not signed]
FirewallRules: [{EF9504C1-CC1F-4460-94DC-1CFD979BDA8F}] => (Allow) E:\Steam\steamapps\common\Fall Guys\FallGuys_client_game.exe () [File not signed]
FirewallRules: [{D5C8311D-1671-4395-BBC2-58B580DD0442}] => (Allow) E:\Steam\steamapps\common\Fall Guys\FallGuys_client_game.exe () [File not signed]
FirewallRules: [{9E5DCF8E-193C-4302-A802-43CCC87F09A7}] => (Allow) E:\Steam\steamapps\common\Fall Guys\FallGuys_client.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{2FA5BB3E-0633-47D4-AE80-8EB0C1796C88}] => (Allow) E:\Steam\steamapps\common\Fall Guys\FallGuys_client.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{54F649E5-948A-42FF-B328-A3E9DD76DB0F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{1DAD2631-B15E-4D40-9007-DB544DC4979C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{34E249B1-D8CF-414D-8E91-05DE7B44EC9B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{809F83AB-4D26-4A4C-8A09-476AB28CC1E0}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{8D59CBD9-2718-4D22-88E6-0510686D4465}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FirewallRules: [{E05E572F-4218-43AA-9D43-D7D39C1E980E}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FirewallRules: [{E6323F55-855F-4D22-AA6E-4B983BEE74B3}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{8137D1EB-C72E-4366-975B-DEB43C7FD01C}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FF558230-5D62-4F98-A35F-7AB0029D50AC}] => (Allow) E:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{D49A019F-2BD0-40C0-8AF0-3F415E2C1FA6}] => (Allow) E:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{D5651ECA-3978-43E1-97DC-8531CFA7DEDF}] => (Allow) C:\Users\Draeg\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{9F4BC991-69AE-47B7-BD36-A123C383E16D}] => (Allow) C:\Users\Draeg\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{498FABEE-2903-4791-A288-B2483BA54951}] => (Allow) E:\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe () [File not signed]
FirewallRules: [{931FD824-1193-4640-9031-A0AAB32B9DBF}] => (Allow) E:\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe () [File not signed]
FirewallRules: [{C5A72D48-42F2-4142-BCDE-08C47DC7A684}] => (Allow) E:\Steam\steamapps\common\Among Us\Among Us.exe () [File not signed]
FirewallRules: [{AB7CE6E2-DA04-416A-BBC6-6587895A9067}] => (Allow) E:\Steam\steamapps\common\Among Us\Among Us.exe () [File not signed]
FirewallRules: [UDP Query User{D29A3B5D-9CDD-41E1-B3AA-8E1D69E20D37}C:\program files\amd\cnext\cnext\radeonsoftware.exe] => (Allow) C:\program files\amd\cnext\cnext\radeonsoftware.exe (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
FirewallRules: [TCP Query User{64C85F5C-4424-48D0-B97A-29C6E3031580}C:\program files\amd\cnext\cnext\radeonsoftware.exe] => (Allow) C:\program files\amd\cnext\cnext\radeonsoftware.exe (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
FirewallRules: [{A7A89DC4-3D6F-44A1-96DE-FFDE56C92B9A}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )
FirewallRules: [{812E963D-F288-4D0C-A1CA-B183E9049DAD}] => (Allow) E:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )
FirewallRules: [{73C2C48B-808A-4E41-8187-64CA631164F6}] => (Allow) E:\Steam\steamapps\common\Grand Theft Auto V\PlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{E17B764B-F9AD-4A05-987C-19EFC6E142DE}] => (Allow) E:\Steam\steamapps\common\Grand Theft Auto V\PlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{50821D0C-0447-48CB-A305-D85745520898}] => (Allow) E:\Steam\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{84BBAACE-28A3-4ECC-BBE5-15BF34A07BB3}] => (Allow) E:\Steam\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{3E17CF80-0AA3-4FE8-913A-AE1A4C7EBDB2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{760ECFED-30C9-49BD-9630-AAA043E016AF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AC27C5D5-81BE-4E45-898A-2FD0996D71D7}] => (Allow) E:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{762E22DE-3C23-45B0-ADDA-AE582D217DA3}] => (Allow) E:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{190A3C4F-3582-4A7C-88ED-B5C115F7BF0E}] => (Allow) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
FirewallRules: [{0E07D406-2790-4FCE-BE35-BBE2F0A18741}] => (Allow) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
FirewallRules: [{171AAB2A-3677-49F3-9DDE-8343814E29B8}] => (Block) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
FirewallRules: [{BF9118CE-1245-4EBC-AE3D-5087ED404D0A}] => (Block) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
FirewallRules: [{1FC11151-CD0C-429A-BD83-51C69870E391}] => (Allow) C:\Program Files (x86)\Overwolf\0.185.0.12\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{19038D82-F65C-42AE-A395-96C030B9DBB9}] => (Allow) C:\Program Files (x86)\Overwolf\0.185.0.12\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{292B60A3-69C3-4141-9292-F46C4D2A5E3C}] => (Block) C:\Program Files (x86)\Overwolf\0.185.0.12\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{2301F837-EED2-4B04-997A-E8821AD0D8AD}] => (Block) C:\Program Files (x86)\Overwolf\0.185.0.12\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{595DB1C6-9AE5-41FD-84EB-FA1A9BAEEFE2}] => (Allow) E:\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe () [File not signed]
FirewallRules: [{7352DA34-6F5B-46E5-93CF-3AAD82BDBADF}] => (Allow) E:\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe () [File not signed]
FirewallRules: [{EFDDBDC6-A0AF-4D23-BBA8-8A7BB97DC741}] => (Allow) E:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [File not signed]
FirewallRules: [{D3DA234C-A01D-429E-AD1D-BD5627DEF110}] => (Allow) E:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [File not signed]
FirewallRules: [{A78A6694-CC5D-4C94-AF61-57B6308FB6D2}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21323.200.1078.109_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D8798ACF-AFD1-4680-975C-85A0E72A8150}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21323.200.1078.109_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8E3FA2B4-54A9-4FF6-9DB5-2E6045AE5CF7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{6EC22A37-5259-4E8F-8397-FEF90CBB80F5}] => (Allow) E:\Steam\steamapps\common\Goose Goose Duck\Goose Goose Duck.exe (Gaggle Studios, Inc -> )
FirewallRules: [{D41BE946-94A0-4942-BBEC-3F59E10E2E3C}] => (Allow) E:\Steam\steamapps\common\Goose Goose Duck\Goose Goose Duck.exe (Gaggle Studios, Inc -> )
FirewallRules: [{72F8CEBF-D1A1-4A40-B759-4DE45221C855}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BC05F66F-8093-4AC9-AB75-28CA2C0DF50B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BC9808E4-3A0C-445C-87C0-5B2F90BA2FFA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7C9FE52D-9CA2-4108-B66E-E2E4758F18CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{84DDF9FE-CFE5-4BCE-97F9-A6763DAB8270}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{99F130E4-D1D9-4F23-88DF-D85469B56C51}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{03B486DC-5A04-4573-B9BE-0C0AA21E5A0C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EF6B9F62-8648-4B9E-A702-88EE71D98B9F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C415DA7E-4D53-4022-95D9-6EEF8709C418}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.53\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E647379-4BD1-4D69-87E2-3072CA189477}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CF980A3A-4895-47B5-BF7C-C353C40ACB2C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{974BD7AC-6876-4E50-A0C1-E936B17E46A3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8A9FD5D9-D166-419E-8468-7CB1B79741CE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:111.15 GB) (Free:29.82 GB) (27%)
==================== Faulty Device Manager Devices ============
Name: VPN Client Adapter - VPN
Description: VPN Client Adapter - VPN
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: SoftEther Corporation
Service: Neo_VPN
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: ========================
Application errors:
==================
Error: (12/12/2021 10:26:51 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1018) (User: DESKTOP-HONZA)
Description: Sběr dat čítače výkonu od služby Lsa byl vypnut z důvodu jedné nebo více chyb generovaných knihovnou čítače výkonu pro tuto službu. Chyby, která vyvolaly tuto akci, byly zapsány do protokolu událostí aplikace.
Error: (12/12/2021 10:26:51 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-HONZA)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
Error: (12/12/2021 10:26:34 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1018) (User: DESKTOP-HONZA)
Description: Sběr dat čítače výkonu od služby Lsa byl vypnut z důvodu jedné nebo více chyb generovaných knihovnou čítače výkonu pro tuto službu. Chyby, která vyvolaly tuto akci, byly zapsány do protokolu událostí aplikace.
Error: (12/12/2021 10:26:34 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-HONZA)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
Error: (12/12/2021 10:23:29 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1018) (User: DESKTOP-HONZA)
Description: Sběr dat čítače výkonu od služby Lsa byl vypnut z důvodu jedné nebo více chyb generovaných knihovnou čítače výkonu pro tuto službu. Chyby, která vyvolaly tuto akci, byly zapsány do protokolu událostí aplikace.
Error: (12/12/2021 10:23:29 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-HONZA)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
Error: (12/12/2021 10:23:27 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1018) (User: DESKTOP-HONZA)
Description: Sběr dat čítače výkonu od služby Lsa byl vypnut z důvodu jedné nebo více chyb generovaných knihovnou čítače výkonu pro tuto službu. Chyby, která vyvolaly tuto akci, byly zapsány do protokolu událostí aplikace.
Error: (12/12/2021 10:23:27 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-HONZA)
Description: Pokus o vyhledání procedury Open OpenLsaPerformanceData v knihovně DLL C:\Windows\System32\Secur32.dll pro službu Lsa selhal s kódem chyby Win32 127. Data o výkonu pro tuto službu nebudou k dispozici.
System errors:
=============
Error: (12/13/2021 03:22:08 PM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{0208B5F8-5C6C-4C2A-9146-EEC23075B527}, protože jiný počítač v síti má stejný název. Server nelze spustit.
Error: (12/13/2021 03:22:08 PM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{01E84170-00BB-4287-A61E-BF149AB03EAF}, protože jiný počítač v síti má stejný název. Server nelze spustit.
Error: (12/12/2021 11:03:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-HONZA)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.
Error: (12/12/2021 11:03:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-HONZA)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.
Error: (12/12/2021 11:03:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-HONZA)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.
Error: (12/12/2021 11:03:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-HONZA)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.
Error: (12/12/2021 11:03:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-HONZA)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.
Error: (12/12/2021 11:03:44 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-HONZA)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.
CodeIntegrity:
===============
Date: 2021-12-13 15:22:34
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume6\Program Files\Norton Security\Engine\22.21.10.40\symamsi.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. F52 08/03/2020
Motherboard: Gigabyte Technology Co., Ltd. A320M-S2H-CF
Processor: AMD Ryzen 5 2600X Six-Core Processor
Percentage of memory in use: 49%
Total physical RAM: 16335.21 MB
Available physical RAM: 8320.98 MB
Total Virtual: 19279.21 MB
Available Virtual: 5329.91 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:111.15 GB) (Free:29.82 GB) NTFS
Drive d: (škola) (Fixed) (Total:37.27 GB) (Free:33.22 GB) NTFS
Drive e: (Nový svazek) (Fixed) (Total:931.4 GB) (Free:242.86 GB) NTFS
\\?\Volume{720b0721-b665-474f-b2cf-921973e0af9a}\ () (Fixed) (Total:0.62 GB) (Free:0.08 GB) NTFS
\\?\Volume{f5b2cb1e-107e-a4ea-1b52-3ed1d603aec9}\ () (Fixed) (Total:101.92 GB) (Free:0 GB) NTFS
\\?\Volume{2c8d4a56-5754-8dc0-bdb2-51d4222273ae}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS
\\?\Volume{5a1847b4-f61e-e681-1673-885e9dc9b270}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS
\\?\Volume{126f0fba-3125-46dd-b0d9-efcbe18e62db}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 37.3 GB) (Disk ID: A49DC55B)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 54B26478)
Partition: GPT.
==========================================================
Disk: 2 (Protective MBR) (Size: 111.8 GB) (Disk ID: 00000000)
Partition: GPT.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 3.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 4.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 5.
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu PC, děkuji.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 118244
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu PC, děkuji.
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte do E:\Stažené soubory plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {254BDDD3-167E-4B2B-B3ED-B3D0628E8C8B} - System32\Tasks\AutoStartTask => C:\Users\Draeg\AppData\Local\DriverAssist\app-5.0.0-retail0017\DriverAssist.exe /Autostart (No File)
C:\DumpStack.log.tmp
AlternateDataStreams: C:\WINDOWS\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\WINDOWS\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\WINDOWS\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
FirewallRules: [{190A3C4F-3582-4A7C-88ED-B5C115F7BF0E}] => (Allow) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
FirewallRules: [{0E07D406-2790-4FCE-BE35-BBE2F0A18741}] => (Allow) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
FirewallRules: [{171AAB2A-3677-49F3-9DDE-8343814E29B8}] => (Block) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
FirewallRules: [{BF9118CE-1245-4EBC-AE3D-5087ED404D0A}] => (Block) C:\Program Files (x86)\Overwolf\0.184.0.35\OverwolfBrowser.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?