Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-03-2022
Ran by micha (administrator) on MUJ-DESKTOP (MSI MS-7823) (15-03-2022 14:30:25)
Running from C:\Users\micha\Downloads
Loaded Profiles: micha
Platform: Microsoft Windows 10 Home Version 21H1 19043.1586 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe ->) (Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCopyAccelerator.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe <2>
(explorer.exe ->) (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_13.0.201.0_x86__nzyj5cx40ttqa\iCloud\ApplePhotoStreams.exe
(explorer.exe ->) (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_13.0.201.0_x86__nzyj5cx40ttqa\iCloud\iCloudDrive.exe
(explorer.exe ->) (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_13.0.201.0_x86__nzyj5cx40ttqa\iCloud\iCloudPhotos.exe
(explorer.exe ->) (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_13.0.201.0_x86__nzyj5cx40ttqa\iCloud\iCloudServices.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <13>
(explorer.exe ->) (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (SpeedBit Ltd.) [File not signed] C:\Program Files (x86)\DAP\DAP.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Smart Connect software -> ) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(services.exe ->) (Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(services.exe ->) (Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72959b4e763ac8f5\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_13.0.201.0_x86__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(svchost.exe ->) (Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_13.0.201.0_x86__nzyj5cx40ttqa\iCloud\secd.exe
(svchost.exe ->) (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21102.11411.0_x64__8wekyb3d8bbwe\Music.UI.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\Live Update.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11102800 2021-08-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [6608096 2022-02-26] (Adobe Inc. -> Adobe Systems Inc.) [File not signed]
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178400 2015-07-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26327864 2021-04-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [CAMTray] => C:\Program Files (x86)\CyberLink\AppManager\CAMTray.exe [458408 2022-01-19] (CyberLink Corp. -> CyberLink Corp.)
HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\Run: [Spotify] => C:\Users\micha\AppData\Roaming\Spotify\Spotify.exe [19227064 2022-01-22] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\Run: [Adobe Acrobat Synchronizer] => "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe" (No File)
HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2617208 2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\Run: [DownloadAccelerator] => C:\Program Files (x86)\DAP\DAP.EXE [6959104 2009-06-15] (SpeedBit Ltd.) [File not signed]
HKLM\...\Windows x64\Print Processors\HP1006PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1006PP.dll [65024 2013-04-15] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [203936 2021-12-24] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\HP1006LM: C:\Windows\system32\HP1006LM.DLL [198144 2013-04-15] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\99.0.4844.51\Installer\chrmstp.exe [2022-03-04] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk [2020-04-04]
ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray.exe (Intel Corporation) [File not signed]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0926EB57-4FC1-4294-B233-A9036E98236E} - System32\Tasks\GoogleUpdateTaskMachineUA{1A97C83B-DBB4-4EB9-A968-D1AD2A8572E8} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-27] (Google LLC -> Google LLC)
Task: {10624DCD-5ECB-4981-A4FE-5BEACEE58EB5} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [97960 2022-01-19] (CyberLink Corp. -> CyberLink Corp.)
Task: {131DB3CD-0A65-46A1-97F5-7C37DFBDA652} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {208D5152-6D57-4090-955B-9DCBEC7D5854} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4158880 2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {2FDFA942-E968-450D-82A5-49D6E64564FC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [137072 2022-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {35F3CB88-E59B-46AD-B20C-7B76AA537022} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-11-16] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {3942D47C-F37E-478C-8308-743A41473A50} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-01-19] (CyberLink Corp. -> )
Task: {3CE95BF5-343C-4F0A-A5D3-1FA71B92A225} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {5A9ECC95-C2C8-49B4-A522-FD5F5434AA98} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [59232 2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {61AE2EC8-BE42-438A-833F-28B13E0068C1} - System32\Tasks\com.amazon.kpr.ncd => C:\Users\micha\AppData\Local\Amazon\Kindle Previewer 3\KPR_NCD.exe [2265440 2022-01-03] (Amazon.com Services LLC -> )
Task: {63D4A553-509A-41E8-B8D4-BD151076FB7D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22580696 2022-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {68B24635-BE74-4993-9F47-AF2594EE0A86} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {760A0259-FEA2-42C0-BAB3-6B634F07E16E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7705B78B-C18E-4E64-B70C-273AA9D1E2CA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649216 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {91416ACF-3DB4-4FCB-925A-96883A5AFF63} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {A1970053-CCA9-4184-ADFF-9509351F97CB} - System32\Tasks\infatica_p2b_expire => C:\Program Files (x86)\Infatica P2B\unins000.exe [1931781 2022-03-04] () [File not signed]
Task: {AC2B3E8A-EECF-42D8-8316-445B64C230A1} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {AE92C6F8-9000-472F-999D-D2F866D8BE8B} - System32\Tasks\GoogleUpdateTaskMachineCore{76EB4ACE-6156-4B41-9F00-DDEB2313362E} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-27] (Google LLC -> Google LLC)
Task: {AEB71057-6043-4114-B402-71282AF4C1C3} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [834856 2020-04-06] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {AFA46ABF-5346-462A-916B-BBA4D3E2638B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MpCmdRun.exe [979568 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B026CDE4-AA4C-4BE0-B421-1F8156D42557} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {B1FE300C-B0DB-4ACC-8AE4-E98A5BB2DDF5} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {B5FA1252-CAE1-4F6A-A5C9-95E068AE4631} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-818692692-3257762959-2457337926-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4158880 2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {B67022CA-E79C-43EA-9D0C-3DFBAD91B88E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [137072 2022-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC68C0C8-B645-46C8-8F96-2013291B3719} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3341312 2021-12-09] (Nvidia Corporation -> NVIDIA Corporation)
Task: {CA40E2EE-430F-45E7-9022-AF8DED651AC8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22580696 2022-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {D0F6A007-2AA8-4C7F-9DAE-7CF54B17340D} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2022-03-02] () [File not signed]
Task: {E488C368-819E-4980-AA94-9FD886257999} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {E648C004-32A1-4A49-8A6A-9A4BC43C7F59} - System32\Tasks\Opera scheduled Autoupdate 1647166927 => C:\Users\micha\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {E975728B-9852-43F8-A9E4-3E9A821E0221} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {EB03D09C-2205-489F-B96B-BE5015184620} - System32\Tasks\infatica_p2b => C:\Program Files (x86)\Infatica P2B\infatica-service-app.exe [20072 2021-12-04] (Infatica pte ltd -> )
Task: {EFDFE50F-9478-419B-85A4-EED497D80BD4} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {F4CED6AC-DC64-4BBE-BB59-FA11A3174AFE} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-01-19] (CyberLink Corp. -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 127.0.0.1 license.piriform.com
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{0ef66ab4-2aa9-4889-81a4-2d924095442d}: [DhcpNameServer] 10.0.0.138
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-13]
Edge Profile: C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2022-03-13]
Edge HomePage: Profile 1 -> hxxp://www.seznam.cz/
Edge Extension: (Záložky na iCloudu) - C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\fkepacicchenbjecpbpbclokcabebhah [2022-01-09]
Edge Extension: (MSN New Tab) - C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\lklfbkdigihjaaeamncibechhgalldgl [2022-01-09]
Edge Extension: (Video DownloadHelper) - C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2022-01-09]
Edge Profile: C:\Users\micha\AppData\Local\Microsoft\Edge\User Data\Profile 2 [2022-03-13]
FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\Firefox\Extensions: [KVAllmytube@KeepVid.com] - C:\Program Files (x86)\Wondershare\Wondershare AllMyTube\BrowserPlugin\kvallmytube@keepvid.com_xpi => not found
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.) [File not signed]
Chrome:
=======
CHR DefaultProfile: Profile 4
CHR Profile: C:\Users\micha\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-03-13]
CHR Profile: C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4 [2022-03-15]
CHR Notifications: Profile 4 -> hxxps://membership.cyberlink.com; hxxps://www.facebook.com; hxxps://www.instagram.com
CHR HomePage: Profile 4 -> hxxp://www.seznam.cz/
CHR StartupUrls: Profile 4 -> "hxxp://www.seznam.cz/","hxxp://www.facebook.co ... google.com"
CHR Extension: (Disk Google) - C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-02-27]
CHR Extension: (Night Mode for Instagram) - C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\bkiiljdcpccihhoigelmohcfkehdnjej [2022-03-14]
CHR Extension: (YouTube) - C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-02-27]
CHR Extension: (Dokumenty Google offline) - C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-14]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-27]
CHR Extension: (Bookmarks clean up) - C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\oncbjlgldmiagjophlhobkogeladjijl [2022-02-27]
CHR Extension: (Gmail) - C:\Users\micha\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-02-27]
CHR Profile: C:\Users\micha\AppData\Local\Google\Chrome\User Data\System Profile [2022-03-13]
CHR HKU\S-1-5-21-818692692-3257762959-2457337926-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3849472 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3617024 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11649952 2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncHelper.exe [3381152 2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [149032 2012-08-16] (Intel(R) Smart Connect software -> )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [452576 2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [901088 2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2210104 2021-04-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.033.0213.0002\OneDriveUpdaterService.exe [3852152 2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [626344 2022-01-19] (CyberLink Corp. -> CyberLink)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe [3046608 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe [132504 2022-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72959b4e763ac8f5\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72959b4e763ac8f5\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Co., Ltd. -> AnvSoft Inc.)
S3 AVerPola; C:\WINDOWS\system32\DRIVERS\AVerPola.sys [871056 2015-05-21] (Microsoft Windows Hardware Compatibility Publisher -> AVerMedia TECHNOLOGIES, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-26] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R1 UimBus; C:\WINDOWS\System32\drivers\UimBus.sys [102576 2015-11-10] (Paragon Software GmbH -> )
R1 Uim_DEVIM; C:\WINDOWS\System32\drivers\uim_devim.sys [25904 2015-11-10] (Paragon Software GmbH -> )
R1 Uim_IM; C:\WINDOWS\System32\drivers\uim_im.sys [701360 2015-11-10] (Paragon Software GmbH -> )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-03-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [439544 2022-03-15] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-03-15] (Microsoft Windows -> Microsoft Corporation)
R3 WPRO_41_2001; C:\WINDOWS\System32\drivers\WPRO_41_2001.sys [34752 2022-03-13] (Intel(R) Smart Connect software -> )
S3 MpKslad1ffe3b; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{257FDBA1-7B09-4969-85BB-A11EFF493690}\MpKslDrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-03-15 14:30 - 2022-03-15 14:30 - 000030453 _____ C:\Users\micha\Downloads\FRST.txt
2022-03-15 14:30 - 2022-03-15 14:30 - 000000000 ____D C:\FRST
2022-03-15 14:29 - 2022-03-15 14:29 - 002364928 _____ (Farbar) C:\Users\micha\Downloads\FRST64.exe
2022-03-15 13:37 - 2022-03-15 13:37 - 003549147 _____ C:\Users\micha\Downloads\Akcie_Michaela_Strnadova-dan_z_prijmu_2022.pdf
2022-03-13 20:53 - 2022-03-13 20:53 - 973143194 _____ C:\WINDOWS\MEMORY.DMP
2022-03-13 20:53 - 2022-03-13 20:53 - 001143692 _____ C:\WINDOWS\Minidump\031322-7468-01.dmp
2022-03-13 20:52 - 2022-03-13 20:52 - 000000112 ___SH C:\bootTel.dat
2022-03-13 11:22 - 2022-03-13 11:22 - 000004186 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1647166927
2022-03-13 11:20 - 2022-03-13 11:20 - 000000000 ____D C:\Users\micha\AppData\Local\Adaware
2022-03-13 11:08 - 2022-03-13 11:08 - 000000000 ____D C:\Users\micha\AppData\Local\Softdeluxe
2022-03-13 11:08 - 2022-03-13 11:08 - 000000000 ____D C:\Users\micha\AppData\Local\cache
2022-03-13 11:06 - 2022-03-13 11:06 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2022-03-13 11:05 - 2022-03-13 11:06 - 000003522 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2022-03-13 11:02 - 2022-03-13 11:02 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-03-13 11:01 - 2022-03-13 11:01 - 000002084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2022-03-13 11:01 - 2022-03-13 11:01 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-03-13 11:01 - 2022-03-13 11:01 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2022-03-13 11:01 - 2022-03-13 11:01 - 000000000 ____D C:\Program Files\Common Files\Adobe
2022-03-13 11:01 - 2022-03-13 11:01 - 000000000 ____D C:\Program Files\Adobe
2022-03-13 09:04 - 2022-03-13 09:15 - 000000000 ____D C:\Program Files (x86)\DAP
2022-03-13 09:04 - 2022-03-13 09:04 - 000479298 _____ (Stardock.Net, Inc) C:\WINDOWS\SysWOW64\wbocx.ocx
2022-03-13 09:04 - 2022-03-13 09:04 - 000172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: hxxp://www.jcomsoft.com) C:\WINDOWS\SysWOW64\AniGIF.ocx
2022-03-13 09:04 - 2022-03-13 09:04 - 000050688 _____ (Stardock.Net, Inc) C:\WINDOWS\SysWOW64\wbhelp2.dll
2022-03-13 09:04 - 2022-03-13 09:04 - 000001110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Download Accelerator Plus (DAP).lnk
2022-03-13 09:04 - 2022-03-13 09:04 - 000000000 ____D C:\Users\micha\OneDrive\Dokumenty\My Completed Downloads
2022-03-13 09:04 - 2022-03-13 09:04 - 000000000 ____D C:\ProgramData\SpeedBit
2022-03-13 09:04 - 2022-03-13 09:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Download Accelerator Plus (DAP)
2022-03-09 13:42 - 2022-03-09 13:42 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-03-09 13:42 - 2022-03-09 13:42 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-03-09 13:42 - 2022-03-09 13:42 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-03-09 13:42 - 2022-03-09 13:42 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-03-09 13:42 - 2022-03-09 13:42 - 000011911 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-03-09 13:37 - 2022-03-09 13:37 - 000000000 ___HD C:\$WinREAgent
2022-03-06 13:34 - 2022-03-06 13:34 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Screen Recorder 4.lnk
2022-03-06 13:34 - 2022-03-06 13:34 - 000002136 _____ C:\Users\Public\Desktop\CyberLink Screen Recorder 4.lnk
2022-03-06 13:33 - 2022-03-06 13:33 - 000003602 _____ C:\WINDOWS\system32\Tasks\CLToast
2022-03-06 13:33 - 2022-03-06 13:33 - 000003428 _____ C:\WINDOWS\system32\Tasks\CLToastRun
2022-03-06 13:33 - 2022-03-06 13:33 - 000003274 _____ C:\WINDOWS\system32\Tasks\PowerDirectorStyleAgent
2022-03-06 13:33 - 2022-03-06 13:33 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 365.lnk
2022-03-06 13:33 - 2022-03-06 13:33 - 000002053 _____ C:\Users\Public\Desktop\CyberLink PowerDirector 365.lnk
2022-03-06 13:33 - 2022-03-06 13:33 - 000001289 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Notification Center.lnk
2022-03-06 13:29 - 2022-03-06 13:29 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Application Manager.lnk
2022-03-06 13:29 - 2022-03-06 13:29 - 000002288 _____ C:\Users\Public\Desktop\CyberLink Application Manager.lnk
2022-03-04 17:37 - 2022-03-04 17:37 - 000001138 _____ C:\Users\Public\Desktop\TFM Audio Tool.lnk
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\Users\micha\AppData\Roaming\Real
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\Users\micha\AppData\Local\Real
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\ProgramData\Real
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TFM Audio Tool
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Alternative
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3File
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\Program Files (x86)\TFM Audio Tool
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\Program Files (x86)\Real Alternative
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\Program Files (x86)\ffdshow
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\Program Files (x86)\AC3Filter
2022-03-04 17:37 - 2022-03-04 17:37 - 000000000 ____D C:\Program Files (x86)\AC3File
2022-03-04 17:37 - 2009-12-05 19:42 - 000085504 _____ C:\WINDOWS\SysWOW64\ff_vfw.dll
2022-03-04 17:37 - 2009-08-11 21:22 - 000580096 _____ C:\WINDOWS\system32\ac3filter64.acm
2022-03-04 17:37 - 2009-08-11 21:18 - 000497664 _____ C:\WINDOWS\SysWOW64\ac3filter.acm
2022-03-04 17:37 - 2008-09-10 20:56 - 000185920 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\rmoc3260.dll
2022-03-04 17:37 - 2001-06-23 00:31 - 000278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll
2022-03-04 17:37 - 1998-05-12 19:36 - 000005632 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5032.dll
2022-03-04 17:37 - 1998-03-26 03:57 - 000006656 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\pndx5016.dll
2022-03-04 15:08 - 2022-03-04 15:08 - 000003390 _____ C:\WINDOWS\system32\Tasks\infatica_p2b_expire
2022-03-04 15:08 - 2022-03-04 15:08 - 000003300 _____ C:\WINDOWS\system32\Tasks\klcp_update
2022-03-04 15:08 - 2022-03-04 15:08 - 000003292 _____ C:\WINDOWS\system32\Tasks\infatica_p2b
2022-03-04 15:08 - 2022-03-04 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2022-03-04 15:08 - 2022-03-04 15:08 - 000000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2022-03-04 15:08 - 2022-03-04 15:08 - 000000000 ____D C:\Program Files (x86)\Infatica P2B
2022-03-04 14:00 - 2022-03-04 14:00 - 000000000 ____D C:\Users\micha\AppData\Local\bunkus.org
2022-03-04 14:00 - 2022-03-04 14:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVToolNix
2022-03-04 14:00 - 2022-03-04 14:00 - 000000000 ____D C:\Program Files\MKVToolNix
2022-03-04 13:58 - 2022-03-04 13:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AoA Audio Extractor
2022-03-04 13:58 - 2022-03-04 13:58 - 000000000 ____D C:\Program Files (x86)\AoA Audio Extractor
2022-03-04 13:58 - 2007-05-13 12:24 - 000086683 _____ (Open Source Software community project) C:\WINDOWS\SysWOW64\pthreadGC2.dll
2022-02-27 10:13 - 2022-03-04 11:09 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-02-27 10:13 - 2022-03-04 11:09 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-02-27 10:13 - 2022-02-27 10:13 - 000003550 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{1A97C83B-DBB4-4EB9-A968-D1AD2A8572E8}
2022-02-27 10:13 - 2022-02-27 10:13 - 000003426 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{76EB4ACE-6156-4B41-9F00-DDEB2313362E}
2022-02-27 10:13 - 2022-02-27 10:13 - 000000000 ____D C:\Program Files\Google
2022-02-27 08:47 - 2022-03-13 20:53 - 000000000 ____D C:\WINDOWS\Minidump
2022-02-25 17:22 - 2022-02-25 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2022-02-25 17:22 - 2022-02-25 17:22 - 000000000 ____D C:\Program Files (x86)\qBittorrent
2022-02-19 10:18 - 2022-03-13 20:53 - 000094656 _____ (CACE Technologies) C:\WINDOWS\system32\WPRO_41_2001woem.tmp
2022-02-19 10:13 - 2022-02-19 10:13 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-19 10:13 - 2022-02-19 10:13 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-03-15 14:30 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-03-15 14:18 - 2020-04-04 14:04 - 000000000 ____D C:\Program Files (x86)\Google
2022-03-15 13:44 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-03-15 13:03 - 2020-04-06 11:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-03-15 13:02 - 2020-04-04 12:19 - 000000000 ____D C:\ProgramData\NVIDIA
2022-03-14 18:00 - 2021-09-28 09:11 - 000000000 ____D C:\Program Files\Microsoft Office
2022-03-14 17:56 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-03-13 21:01 - 2021-02-14 09:22 - 000000000 ____D C:\Users\micha
2022-03-13 21:00 - 2021-02-14 09:30 - 001694140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-03-13 21:00 - 2019-12-07 15:41 - 000717008 _____ C:\WINDOWS\system32\perfh005.dat
2022-03-13 21:00 - 2019-12-07 15:41 - 000145186 _____ C:\WINDOWS\system32\perfc005.dat
2022-03-13 20:59 - 2020-08-29 19:54 - 000000000 ____D C:\Users\micha\OneDrive\Dokumenty\Soubory Outlooku
2022-03-13 20:53 - 2021-10-17 13:46 - 000034752 _____ C:\WINDOWS\system32\Drivers\WPRO_41_2001.sys
2022-03-13 20:53 - 2021-02-14 09:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-03-13 20:53 - 2021-02-14 09:20 - 000008192 ___SH C:\DumpStack.log.tmp
2022-03-13 20:53 - 2021-02-14 09:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-03-13 20:46 - 2020-04-05 15:34 - 000000000 ____D C:\Users\micha\AppData\Roaming\vlc
2022-03-13 11:27 - 2020-08-23 14:59 - 000000000 ____D C:\Users\micha\AppData\Roaming\Opera Software
2022-03-13 11:27 - 2020-08-23 14:59 - 000000000 ____D C:\Users\micha\AppData\Local\Opera Software
2022-03-13 11:26 - 2020-09-06 21:29 - 000000000 ____D C:\Users\micha\AppData\Local\JDownloader 2.0
2022-03-13 11:22 - 2020-08-23 15:00 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2022-03-13 11:16 - 2021-02-14 09:20 - 008701304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-03-13 11:15 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-03-13 11:06 - 2021-12-29 21:21 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2022-03-13 11:06 - 2020-04-04 14:15 - 000000000 ____D C:\Users\micha\AppData\Local\CrashDumps
2022-03-13 11:06 - 2020-04-04 13:55 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2022-03-13 11:05 - 2020-04-05 14:50 - 000000000 ____D C:\Users\micha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-03-13 11:05 - 2020-04-05 14:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-03-13 11:04 - 2021-12-28 13:02 - 000000000 ____D C:\Program Files\CCleaner
2022-03-13 11:04 - 2020-04-05 14:50 - 000000000 ____D C:\Program Files\WinRAR
2022-03-13 11:01 - 2020-04-05 15:03 - 000000000 ____D C:\ProgramData\Adobe
2022-03-13 10:59 - 2020-04-04 12:20 - 000000000 ____D C:\Users\micha\AppData\Local\Packages
2022-03-13 10:59 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-03-13 10:46 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-03-13 09:14 - 2021-12-28 21:44 - 000000000 ____D C:\ProgramData\Temp
2022-03-12 12:58 - 2020-06-28 20:53 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-03-11 18:50 - 2021-03-20 22:06 - 000000000 ____D C:\Users\micha\AppData\Roaming\qBittorrent
2022-03-11 17:32 - 2021-10-03 18:11 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-03-11 12:05 - 2020-04-04 15:14 - 000000000 ____D C:\Users\micha\AppData\Local\ElevatedDiagnostics
2022-03-10 17:05 - 2021-12-28 08:09 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-818692692-3257762959-2457337926-1001
2022-03-10 17:05 - 2021-09-28 08:37 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-03-10 17:05 - 2021-09-28 08:37 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-03-09 15:14 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-09 15:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-03-09 15:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-03-09 15:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-03-09 15:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-03-09 15:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-03-09 15:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-03-09 15:14 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2022-03-09 13:58 - 2020-08-29 18:54 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-03-09 13:45 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-03-09 13:42 - 2021-02-14 09:22 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-03-09 13:37 - 2020-04-06 16:26 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-03-09 13:35 - 2020-04-06 16:26 - 145666720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-03-09 13:30 - 2021-03-04 08:16 - 000003490 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d702ab186aecf2
2022-03-09 13:30 - 2021-02-14 09:28 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-03-06 13:34 - 2021-12-30 10:13 - 000000000 ____D C:\Program Files\CyberLink
2022-03-06 13:34 - 2020-04-05 15:49 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2022-03-06 13:34 - 2020-04-05 15:44 - 000000000 ____D C:\ProgramData\install_backup
2022-03-06 13:34 - 2020-04-05 15:44 - 000000000 ____D C:\ProgramData\CLSK
2022-03-06 13:34 - 2020-04-04 13:55 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-03-06 13:33 - 2020-04-05 16:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Boris FX Continuum CYBERLINK
2022-03-06 13:33 - 2020-04-05 15:44 - 000000000 ____D C:\ProgramData\install_clap
2022-03-06 13:29 - 2021-12-30 10:09 - 000000000 ____D C:\Program Files (x86)\CyberLink
2022-02-27 10:13 - 2020-04-04 14:04 - 000000000 ____D C:\Users\micha\AppData\Local\Google
2022-02-19 10:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-19 10:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-19 10:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-19 10:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-19 10:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-19 10:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-14 21:06 - 2020-08-29 18:54 - 000600944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2022-02-14 21:06 - 2020-08-29 18:54 - 000482120 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
==================== Files in the root of some directories ========
2021-09-28 09:01 - 2021-09-28 09:01 - 000000369 _____ () C:\Users\micha\AppData\Roaming\SaraBat.bat
2021-09-28 09:01 - 2021-09-28 09:01 - 000196984 _____ (Microsoft Corporation) C:\Users\micha\AppData\Roaming\SetupProd_Act.exe
2020-04-06 20:02 - 2022-03-13 09:05 - 000000615 _____ () C:\Users\micha\AppData\Local\oobelibMkey.log
2020-04-04 17:07 - 2020-04-04 17:07 - 000000017 _____ () C:\Users\micha\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2022
Ran by micha (15-03-2022 14:31:41)
Running from C:\Users\micha\Downloads
Microsoft Windows 10 Home Version 21H1 19043.1586 (X64) (2021-02-14 08:28:33)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-818692692-3257762959-2457337926-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-818692692-3257762959-2457337926-503 - Limited - Disabled)
Guest (S-1-5-21-818692692-3257762959-2457337926-501 - Limited - Disabled)
micha (S-1-5-21-818692692-3257762959-2457337926-1001 - Administrator - Enabled) => C:\Users\micha
WDAGUtilityAccount (S-1-5-21-818692692-3257762959-2457337926-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AC3File 0.7b (HKLM-x32\...\AC3File_is1) (Version: 0.7b - Alexander Vigovsky)
AC3Filter 1.63b (HKLM-x32\...\AC3Filter_is1) (Version: 1.63b - Alexander Vigovsky)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1033-FFFF-7760-BC15014EA700}) (Version: 21.011.20039 - Adobe)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 7.6.0.52 - Adobe Inc.)
AoA Audio Extractor (HKLM-x32\...\{D1725D54-279A-40C5-A70D-23C1785DB920}_is1) (Version: - AoAMedia.com)
aTube Catcher verze 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
AVerMedia C039P USB Capture Card 10.2.64.116 (HKLM-x32\...\AVerMedia C039P USB Capture Card) (Version: 10.2.64.116 - AVerMedia TECHNOLOGIES, Inc.)
Boris FX Continuum Plug-ins 11 for Cyberlink (HKLM\...\{7E607B62-1788-40CB-BADB-DC1511627F6C}_is1) (Version: - Boris FX, Inc.)
CCleaner (HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\{A559093D-FCCB-1B3D-5504-74D07E48A7FB}) (Version: PRO v.5.86.9258 - 21.10.2021 - libbi)
CyberLink Application Manager (HKLM-x32\...\{D25D3E15-CABD-420c-B62C-70C1C5EE63FD}) (Version: 4.0.1319.0 - CyberLink Corp.)
CyberLink Bloggers Social Media Pack (HKLM-x32\...\{1FBAAADF-FCC1-4909-9651-5BDD428ECE49}) (Version: 1.0 - CyberLink Corp.)
CyberLink Bloggers Social Media Pack Vol. 2 (HKLM-x32\...\{25CF0C1B-44D9-4261-A73B-BAE18BD5C7CB}) (Version: 1.0 - CyberLink Corp.)
CyberLink Glitch Transitions Pack (HKLM-x32\...\{1072DA4B-8EC3-4BFD-AE64-3E29B9493425}) (Version: 1.0 - CyberLink Corp.)
CyberLink Light Leak Overlay Pack (HKLM-x32\...\{21976A56-9D1B-4DCB-9396-C0F4A08F1CFD}) (Version: 1.0 - CyberLink Corp.)
CyberLink Lightning Sticker Pack (HKLM-x32\...\{C1D76B9E-A00F-4A67-AE12-82CD1F688735}) (Version: 1.0 - CyberLink Corp.)
CyberLink Music Festival Pack (HKLM-x32\...\{8A593418-299F-43CF-9692-DE6B580E4C55}) (Version: 1.0 - CyberLink Corp.)
CyberLink PhotoDirector Animated Overlay Pack Cloud and Bubbles (HKLM-x32\...\{21CA2D59-F8CB-4d31-BFC1-9A804EFF4F6A}) (Version: 1.0.1122.0 - CyberLink Corp.)
CyberLink PhotoDirector Overlay Pack Light Leak (HKLM-x32\...\{6f109a7c-fc37-4a97-84c5-6e3626b0f58e}) (Version: 1.0.1126.0 - CyberLink Corp.)
CyberLink PowerDirector 365 (HKLM-x32\...\{278A8296-12A6-4CD0-8A8E-6947948477C5}) (Version: 20.1.2519.0 - CyberLink Corp.)
CyberLink Quote Titles (HKLM-x32\...\{00964073-089A-4AC3-9268-FFA670126147}) (Version: 1.0 - CyberLink Corp.)
CyberLink Romance Pack 4 (HKLM-x32\...\{AD20B0C3-A3A3-44BB-B32D-45A9A89396D9}) (Version: 1.0 - CyberLink Corp.)
CyberLink Romance Pack v3 (HKLM-x32\...\{D66DE2CC-64DF-402D-B270-33F2A6C67F0C}) (Version: 2.0 - CyberLink Corp.)
CyberLink Screen Recorder 4 (HKLM-x32\...\{6819D136-7F3F-4A0D-96C1-368BE830BFDA}) (Version: 4.2.9.15396 - CyberLink Corp.)
CyberLink Social Motion Graphics (HKLM-x32\...\{F0FB3E56-BAE8-4099-8C52-1C4DC86DF147}) (Version: 1.0 - CyberLink Corp.)
CyberLink Special Effects Sticker Pack Vol. 1 (HKLM-x32\...\{EC09F5B6-F489-44BF-A3E8-846F60956A72}) (Version: 1.0 - CyberLink Corp.)
CyberLink Special Effects Sticker Pack Vol. 2 (HKLM-x32\...\{A7827870-A226-4259-8B05-9C6CD9D13876}) (Version: 2.0 - CyberLink Corp.)
CyberLink Special Moment Pack (HKLM-x32\...\{B382190C-CAEF-4148-887B-44853CEF9442}) (Version: 1.0 - CyberLink Corp.)
CyberLink Time Titles (HKLM-x32\...\{9EEDC090-0983-461F-94FF-929560023A1C}) (Version: 1.0 - CyberLink Corp.)
CyberLink Weather Particle Pack (HKLM-x32\...\{FC0AE611-A16A-4152-860C-5CDA63C4115A}) (Version: 1.0 - CyberLink Corp.)
CyberLink Wedding Pack (HKLM-x32\...\{741635DB-36DA-4BCF-BB52-0F4C1C4E0DFB}) (Version: 1.0 - CyberLink Corp.)
CyberLink Wedding Pack Vol.2 (HKLM-x32\...\{5F531B10-A2E9-4FD3-A301-DFA84B5B569C}) (Version: 2.0 - CyberLink Corp.)
Download Accelerator Plus (DAP) (HKLM-x32\...\Download Accelerator Plus (DAP)) (Version: 9100 (Build 904) - Speedbit Ltd.)
ffdshow [rev 3154] [2009-12-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 99.0.4844.51 - Google LLC)
iCloud Outlook (HKLM\...\{B87F5B14-C118-472C-93C9-05F35D0361DB}) (Version: 11.3.0.59 - Apple Inc.)
Infatica P2B Network (HKLM-x32\...\{043C71DF-992B-4A8C-B584-DE65480802F8}_is1) (Version: 1.0.5.7 - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Smart Connect Technology 3.0 x64 (HKLM\...\{F83950A5-A88C-4E35-877B-88440836EF9B}) (Version: 3.0.41.1571 - Intel)
Intel® Chipset Device Software (HKLM-x32\...\{44ded3eb-1686-46a6-9770-fd79096c29f7}) (Version: 10.1.1.45 - Intel(R) Corporation) Hidden
JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kindle Previewer 3 (HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\Kindle Previewer 3) (Version: 3.61.0 - Amazon)
K-Lite Codec Pack 16.8.7 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 16.8.7 - KLCP)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Malwarebytes Anti-Malware verze 1.80.2.1012 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.80.2.1012 - Malwarebytes Corporation)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.14931.20132 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.14931.20132 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 99.0.1150.39 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 99.0.1150.39 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.033.0213.0002 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Support and Recovery Assistant (HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\0527a644a4ddd31d) (Version: 17.0.7259.3 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{5016990D-7F61-4A20-9451-A915D6616DD9}) (Version: 3.66.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
MKVToolNix 65.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 65.0.0 - Moritz Bunkus)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.74 - MSI)
NVIDIA FrameView SDK 1.2.4999.30397803 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.4999.30397803 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.24.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.24.0.126 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.38.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.60 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 472.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 472.12 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14931.20010 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14931.20094 - Microsoft Corporation) Hidden
PatchCleaner (HKLM-x32\...\{18DA8D88-5BCD-4B26-B712-F00EF2CB8AF7}) (Version: 1.2.0 - HomeDev)
PhotoDirector Sky Pack Vol.5 (HKLM-x32\...\{55D326B5-B12E-4427-BA99-5A15EC6B8CEA}) (Version: 1.0.2006.0 - CyberLink Corp.)
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22925 - Microsoft Corporation)
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.115.3 - proDAD GmbH)
proDAD Adorage 3.0 (HKLM-x32\...\proDAD-Adorage-3.0) (Version: 3.0.117.2 - proDAD GmbH)
proDAD Vitascene 3.0 (64bit) (HKLM\...\proDAD-Vitascene-3.0) (Version: 3.0.258 - proDAD GmbH)
proDAD Vitascene 3.0 (HKLM-x32\...\proDAD-Vitascene-3.0) (Version: 3.0.258 - proDAD GmbH)
qBittorrent 4.4.1 (HKLM-x32\...\qBittorrent) (Version: 4.4.1 - The qBittorrent project)
Real Alternative 1.9.0 Lite (HKLM-x32\...\RealAlt_is1) (Version: 1.9.0 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.38.1118.2019 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9225.1 - Realtek Semiconductor Corp.)
Spotify (HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\Spotify) (Version: 1.1.77.643.g3c4c6fc6 - Spotify AB)
TFM Audio Tool 1.3.0.0 Beta (HKLM-x32\...\{97368464-B643-422D-A496-29B409988488}_is1) (Version: - The Mask Productions)
VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WinRAR 6.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH)
Packages:
=========
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.213.200.0_x64__kgqvnymyfvs32 [2022-03-11] (king.com)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.12.419.0_x64__rz1tebttyb220 [2022-03-03] (Dolby Laboratories)
iCloud -> C:\Program Files\WindowsApps\AppleInc.iCloud_13.0.201.0_x86__nzyj5cx40ttqa [2021-12-28] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-04-06] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-04-06] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.2180.0_x64__8wekyb3d8bbwe [2022-02-25] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-01-21] (NVIDIA Corp.)
Rozšíření pro video HEVC -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensions_1.0.50362.0_x64__8wekyb3d8bbwe [2022-02-19] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{01CCF4FF-88E3-4C95-B996-9CD9C3C2743F} -> [Fotky na iCloudu] => C:\Users\micha\iCloudPhotos\Photos [2021-12-29 13:53]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{5A2EFB6E-8CED-409A-9262-722DAC158FB5} -> [iCloud Drive] => C:\Users\micha\iCloudDrive [2021-12-28 11:11]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{63B0005A-92A7-4BC4-AF3D-847B1192081D} -> [iCloud Drive] => C:\Users\micha\iCloudDrive [2021-12-28 11:11]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{6D681B89-DA8B-4943-947C-F43A578D54A7} -> [Fotky na iCloudu] => C:\Users\micha\iCloudPhotos\Photos [2021-12-29 13:53]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{A272D8C1-C02A-4A62-BA12-0337A0B9F0AB} -> [Fotky na iCloudu] => C:\Users\micha\iCloudPhotos\Photos [2021-12-29 13:53]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{AD8F2D2A-A270-4829-8B96-54CBF5027938} -> [iCloud Drive] => C:\Users\micha\iCloudDrive [2021-12-28 11:11]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{B7F359C1-268D-47A9-9A38-4BED1790E33D} -> [Fotky na iCloudu] => C:\Users\micha\iCloudPhotos\Photos [2021-12-29 13:53]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{C2B86548-936E-46BF-92F6-EBB84E9D6F01} -> [Fotky na iCloudu] => C:\Users\micha\iCloudPhotos\Photos [2021-12-29 13:53]
CustomCLSID: HKU\S-1-5-21-818692692-3257762959-2457337926-1001_Classes\CLSID\{D94772EB-C99E-4BC4-B3E0-DEBAF9991D45} -> [Fotky na iCloudu] => C:\Users\micha\iCloudPhotos\Photos [2021-12-29 13:53]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1-x32: [DAP_ShredMenu] -> {BED4C38B-F765-45AC-8C56-613F76BBF43E} => C:\Program Files (x86)\DAP\Privacy Package\DAPCtxMenuShell.dll [2022-03-13] (Speed-Bit LTD -> Speedbit Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll [2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4-x32: [DAP_ShredMenu] -> {BED4C38B-F765-45AC-8C56-613F76BBF43E} => C:\Program Files (x86)\DAP\Privacy Package\DAPCtxMenuShell.dll [2022-03-13] (Speed-Bit LTD -> Speedbit Ltd.)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.033.0213.0002\FileSyncShell64.dll [2022-03-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_72959b4e763ac8f5\nvshext.dll [2022-01-06] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll [2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\system32\prodad-codec.dll [607256 2021-07-16] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [msacm.ac3filter] => C:\Windows\system32\ac3filter64.acm [580096 2009-08-11] () [File not signed]
HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\SysWOW64\prodad-codec.dll [506392 2013-08-17] (proDAD GmbH -> proDAD GmbH)
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [85504 2009-12-05] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3filter] => C:\Windows\SysWOW64\ac3filter.acm [497664 2009-08-11] () [File not signed]
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\micha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"
==================== Loaded Modules (Whitelisted) =============
2022-03-13 09:04 - 2022-03-13 09:04 - 000053248 _____ () [File not signed] C:\Program Files (x86)\DAP\zlib.dll
2021-07-04 08:38 - 2005-07-18 12:43 - 000160256 _____ () [File not signed] C:\Program Files (x86)\MSI\Live Update\unrar.dll
2021-02-01 21:49 - 2021-02-01 21:49 - 000010240 _____ () [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\AcroTray.cze
2021-12-24 20:03 - 2021-12-24 20:03 - 000021504 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2012-08-16 19:33 - 2012-08-16 19:33 - 002207744 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\LServ.dll
2022-03-13 09:04 - 2022-03-13 09:04 - 000813568 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\DAP\dbghelp.dll
2022-03-13 09:04 - 2022-03-13 09:04 - 000995383 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\DAP\MFC42.DLL
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:A9662AE0 [114]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-818692692-3257762959-2457337926-1001 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-07-10 12:04 - 2021-12-28 13:02 - 000000866 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 license.piriform.com
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-818692692-3257762959-2457337926-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\micha\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\20171115_221745000_ios.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run: => ""
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-818692692-3257762959-2457337926-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{0FCABD3D-4500-4FFD-AD27-7FFF6325EB81}C:\users\micha\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micha\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{C29DF6ED-8FD2-4821-B082-BC643175F474}C:\users\micha\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micha\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E7D90C78-115F-404F-9995-A651CC422ABD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{56DE6123-C5ED-4EBA-B350-1EEFEE6B49EC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{23D71531-5552-482D-8BD8-D7847EE514CD}C:\users\micha\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micha\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{92D85EA5-D0DA-45FD-A144-9ED24A4860A2}C:\users\micha\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micha\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{D42B390E-11E1-435C-A391-E927E3DFFC5A}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{B743255D-6755-47CE-8A0F-BF187BF4E8FE}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{ADCC0F10-9184-4D3A-B79C-A461FFD9010C}C:\program files (x86)\qbittorrent\qbittorrent.exe] => (Block) C:\program files (x86)\qbittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [UDP Query User{FFE7A94D-6592-4DC6-8487-ED2025EBDBB1}C:\program files (x86)\qbittorrent\qbittorrent.exe] => (Block) C:\program files (x86)\qbittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{1F7B6405-C308-480B-8F1B-048A53750BB2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{17CD7001-0F1B-4A6B-B6FE-65FD63BE035A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{74834DE6-66FB-4665-A1B6-6EDF2E91064D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{51214FA7-E237-4EC9-8325-6F29BB8AE82E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{42572059-91F9-4B50-B465-0D855394C388}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E5AD5700-5377-448F-A52A-B62116326D68}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5DE91E3E-AE98-4549-AA3E-71A84D7C79BD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7D702349-EDF6-4987-9B8D-5B77B67B1809}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2F6ED162-0710-45DB-B532-18AF1C822E12}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6001F56B-C8E0-44A4-BAF8-F29982ECD630}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{DF59066A-E2F1-49E5-91EE-90856ADD5725}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{57C355F9-7DB3-46CE-96B8-07A847BB5597}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{75600BA2-2C05-4ECF-9B80-F4EA2824F61C}] => (Allow) C:\Users\micha\AppData\Local\Programs\Opera\84.0.4316.31\opera.exe => No File
FirewallRules: [{FECF6BDC-E3BE-46CA-BF78-1CA0932E48ED}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\99.0.1150.39\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:110.71 GB) (Free:55.81 GB) (50%)
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (03/13/2022 11:06:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CCleaner64.exe, verze: 5.86.0.9258, časové razítko: 0x616eb335
Název chybujícího modulu: CCleaner64.exe, verze: 5.86.0.9258, časové razítko: 0x616eb335
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000b60d6
ID chybujícího procesu: 0xaa0
Čas spuštění chybující aplikace: 0x01d836c1c47694f6
Cesta k chybující aplikaci: C:\Program Files\CCleaner\CCleaner64.exe
Cesta k chybujícímu modulu: C:\Program Files\CCleaner\CCleaner64.exe
ID zprávy: 0ddf422f-ff8d-4776-ad0f-94e46cd9355c
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (03/13/2022 11:04:05 AM) (Source: Windows Installer 3.1) (EventID: 4373) (User: )
Description: Event-ID 4373
Error: (03/13/2022 10:39:38 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e.manifest.
Součást 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984.manifest.
Error: (03/13/2022 10:39:34 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e.manifest.
Součást 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984.manifest.
Error: (03/13/2022 10:39:33 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e.manifest.
Součást 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984.manifest.
Error: (03/13/2022 10:39:03 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e.manifest.
Součást 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984.manifest.
Error: (03/13/2022 10:39:02 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e.manifest.
Součást 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984.manifest.
Error: (03/13/2022 10:38:53 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe se nezdařilo. Chyba v souboru manifestu nebo zásad na řádku .
Verze součásti požadovaná aplikací je v konfliktu s jinou verzí součásti, která je již aktivní.
Konfliktní součásti:
Součást 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e.manifest.
Součást 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984.manifest.
System errors:
=============
Error: (03/14/2022 06:00:51 PM) (Source: DCOM) (EventID: 10010) (User: MUJ-DESKTOP)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.
Error: (03/14/2022 06:00:50 PM) (Source: DCOM) (EventID: 10010) (User: MUJ-DESKTOP)
Description: Server Microsoft.AAD.BrokerPlugin_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider se v daném časovém limitu neregistroval u služby DCOM.
Error: (03/14/2022 06:00:50 PM) (Source: DCOM) (EventID: 10010) (User: MUJ-DESKTOP)
Description: Server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} se v daném časovém limitu neregistroval u služby DCOM.
Error: (03/13/2022 09:02:30 PM) (Source: Microsoft-Windows-Time-Service) (EventID: 34) (User: NT AUTHORITY)
Description: The time service has detected that the system time needs to be changed by 75136 seconds. The time service will not change the system time by more than 54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->20.101.57.9:123) is working properly.
Error: (03/13/2022 09:02:29 PM) (Source: Microsoft-Windows-Time-Service) (EventID: 34) (User: NT AUTHORITY)
Description: The time service has detected that the system time needs to be changed by 75136 seconds. The time service will not change the system time by more than 54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->20.101.57.9:123) is working properly.
Error: (03/13/2022 09:02:28 PM) (Source: Microsoft-Windows-Time-Service) (EventID: 34) (User: NT AUTHORITY)
Description: The time service has detected that the system time needs to be changed by 75136 seconds. The time service will not change the system time by more than 54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->20.101.57.9:123) is working properly.
Error: (03/13/2022 09:02:27 PM) (Source: Microsoft-Windows-Time-Service) (EventID: 34) (User: NT AUTHORITY)
Description: The time service has detected that the system time needs to be changed by 75136 seconds. The time service will not change the system time by more than 54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->20.101.57.9:123) is working properly.
Error: (03/13/2022 09:02:25 PM) (Source: Microsoft-Windows-Time-Service) (EventID: 34) (User: NT AUTHORITY)
Description: The time service has detected that the system time needs to be changed by 75136 seconds. The time service will not change the system time by more than 54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->20.101.57.9:123) is working properly.
Windows Defender:
================
Date: 2022-03-13 11:22:03
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Misleading:Win32/Lodi
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Users\micha\AppData\Local\JDownloader 2.0\i4j6246875631153118949.tmp
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: MUJ-DESKTOP\micha
Název procesu: C:\Users\micha\AppData\Local\Temp\GenericSetup.exe_1647170458\Carrier.exe
Verze bezpečnostních informací: AV: 1.359.1875.0, AS: 1.359.1875.0, NIS: 1.359.1875.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3
Date: 2022-03-13 11:20:57
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUA:Win32/PcMechanic
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: amsi:_\Device\HarddiskVolume4\Users\micha\AppData\Local\Temp\7zS0CA90374\GenericSetup.exe; file:_C:\Users\micha\Downloads\JDownloaderSetup (1).exe; file:_C:\Users\micha\Downloads\JDownloaderSetup.exe; webfile:_C:\Users\micha\Downloads\JDownloaderSetup (1).exe|https://sdl.adaware.com/?bundleid=JD001 ... 3657317583; webfile:_C:\Users\micha\Downloads\JDownloaderSetup.exe|https://sdl.adaware.com/?bundleid=JD001 ... 2247094133; webfile:_C:\Users\micha\Downloads\JDownloaderSetup.exe|https://sdl.adaware.com/?bundleid=JD001 ... 2735963501
Původ detekce: Internet
Typ detekce: Konkrétní
Zdroj detekce: Soubory ke stažení a přílohy
Uživatel: MUJ-DESKTOP\micha
Název procesu: C:\Users\micha\AppData\Local\Temp\7zS0CA90374\GenericSetup.exe
Verze bezpečnostních informací: AV: 1.359.1875.0, AS: 1.359.1875.0, NIS: 1.359.1875.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3
Date: 2022-03-13 11:20:56
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUA:Win32/PcMechanic
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: amsi:_\Device\HarddiskVolume4\Users\micha\AppData\Local\Temp\7zS0CA90374\GenericSetup.exe; file:_C:\Users\micha\Downloads\JDownloaderSetup (1).exe; file:_C:\Users\micha\Downloads\JDownloaderSetup.exe; webfile:_C:\Users\micha\Downloads\JDownloaderSetup (1).exe|https://sdl.adaware.com/?bundleid=JD001 ... 3657317583; webfile:_C:\Users\micha\Downloads\JDownloaderSetup.exe|https://sdl.adaware.com/?bundleid=JD001 ... 2247094133; webfile:_C:\Users\micha\Downloads\JDownloaderSetup.exe|https://sdl.adaware.com/?bundleid=JD001 ... 2735963501
Původ detekce: Internet
Typ detekce: Konkrétní
Zdroj detekce: Soubory ke stažení a přílohy
Uživatel: MUJ-DESKTOP\micha
Název procesu: C:\Users\micha\AppData\Local\Temp\7zS0CA90374\GenericSetup.exe
Verze bezpečnostních informací: AV: 1.359.1875.0, AS: 1.359.1875.0, NIS: 1.359.1875.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3
Date: 2022-03-13 11:19:44
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUA:Win32/PcMechanic
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Users\micha\Downloads\JDownloaderSetup (1).exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: MUJ-DESKTOP\micha
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.1875.0, AS: 1.359.1875.0, NIS: 1.359.1875.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3
Date: 2022-03-13 11:19:36
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUA:Win32/PcMechanic
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Users\micha\Downloads\JDownloaderSetup (1).exe; file:_C:\Users\micha\Downloads\JDownloaderSetup.exe; webfile:_C:\Users\micha\Downloads\JDownloaderSetup (1).exe|https://sdl.adaware.com/?bundleid=JD001 ... 3657317583; webfile:_C:\Users\micha\Downloads\JDownloaderSetup.exe|https://sdl.adaware.com/?bundleid=JD001 ... 2247094133; webfile:_C:\Users\micha\Downloads\JDownloaderSetup.exe|https://sdl.adaware.com/?bundleid=JD001 ... 2735963501
Původ detekce: Internet
Typ detekce: FastPath
Zdroj detekce: Soubory ke stažení a přílohy
Uživatel: MUJ-DESKTOP\micha
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.1875.0, AS: 1.359.1875.0, NIS: 1.359.1875.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3
==================== Memory info ===========================
BIOS: American Megatrends Inc. V3.7 05/30/2014
Motherboard: MSI B85M-G43 (MS-7823)
Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 54%
Total physical RAM: 8120.03 MB
Available physical RAM: 3693.53 MB
Total Virtual: 9400.03 MB
Available Virtual: 3200.12 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:110.71 GB) (Free:55.81 GB) NTFS
Drive d: (PC MISA ZALOHA) (Fixed) (Total:931.51 GB) (Free:865.14 GB) NTFS
Drive e: (RODINA ZALOHA) (Fixed) (Total:931.51 GB) (Free:188.43 GB) NTFS
Drive m: (WD DISK) (Fixed) (Total:7444.04 GB) (Free:3439.44 GB) NTFS
\\?\Volume{c99e3ddb-f049-4874-a4fe-a8b6568bdba2}\ (Obnovení) (Fixed) (Total:0.44 GB) (Free:0.43 GB) NTFS
\\?\Volume{2cd0a82c-f120-4326-87d0-11f7b824b9ad}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS
\\?\Volume{eb988059-a49c-4977-830d-5bb1cd95b9e2}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 0017902E)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 15B65200)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 15B65201)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==========================================================
Disk: 3 (Protective MBR) (Size: 7452 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
Přispějete na provoz fóra?