prosím o kontrolu logů:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-10-2019
Ran by Turbosport (administrator) on LAPTOP-R9D65U9F (Acer Swift SF114-32) (29-10-2019 16:54:15)
Running from C:\Users\Turbosport\Desktop
Loaded Profiles: Turbosport (Available Profiles: Turbosport)
Platform: Windows 10 Home Version 1803 17134.137 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AutoComSoft s.r.o. -> AutoComSoft s.r.o.) C:\Auto-diagnostika\ADnews.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9b07ffc7fa5e6661\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9b07ffc7fa5e6661\IntelCpHeciSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18388928 2018-04-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_ASC] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1505728 2018-04-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ADnews.lnk [2019-03-15]
ShortcutTarget: ADnews.lnk -> C:\Auto-diagnostika\ADnews.exe (AutoComSoft s.r.o. -> AutoComSoft s.r.o.)
Startup: C:\Users\Turbosport\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RT-Updater-SVO.lnk [2019-10-29]
ShortcutTarget: RT-Updater-SVO.lnk -> C:\Ross-Tech\VCDS-SVO\VCDS.exe (Ross-Tech, LLC -> Ross-Tech, LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {40CA2B88-2584-478A-B17D-C99D993BBF5E} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-855504488-749823507-3481339690-1001 => C:\Users\Turbosport\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe [2522720 2019-03-29] () [File not signed]
Task: {4DB6281F-0617-4F51-8903-81BD7EB85339} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Turbosport\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe [2522720 2019-03-29] () [File not signed]
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{11564a8e-6489-4a78-ad7a-e1e033d41b43}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{f1ef202c-9ff7-48d8-a281-0d8f4a915c70}: [DhcpNameServer] 172.19.128.24
Internet Explorer:
==================
HKU\S-1-5-21-855504488-749823507-3481339690-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-855504488-749823507-3481339690-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 esifsvc; C:\Windows\System32\Intel\DPTF\esif_uf.exe [1705040 2017-11-08] (Intel Corporation -> Intel Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AcerAirplaneModeController; C:\Windows\System32\drivers\AcerAirplaneModeController.sys [30520 2017-10-27] (Acer Incorporated -> Acer Incorporated)
S3 AX88772; C:\Windows\System32\drivers\ax88772.sys [111616 2018-04-12] (Microsoft Windows -> ASIX Electronics Corp.)
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [74144 2017-11-08] (Intel Corporation -> Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [69536 2017-11-08] (Intel Corporation -> Intel Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [382880 2017-11-08] (Intel Corporation -> Intel Corporation)
S3 ETDI2C; C:\Windows\System32\drivers\ETDI2C.sys [218184 2017-11-16] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronic Corp.)
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [115864 2017-10-18] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [198208 2018-03-29] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 Netwtw06; C:\Windows\System32\drivers\Netwtw06.sys [8742976 2018-03-23] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
S3 RT-USB; C:\Windows\system32\drivers\RT-USB64.SYS [97152 2014-05-12] (Ross-Tech, LLC -> Ross-Tech LLC)
R3 SynRMIHID; C:\Windows\System32\drivers\SynRMIHID.sys [57432 2017-11-28] (Synaptics Incorporated -> Synaptics Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-10-29 16:51 - 2019-10-29 16:54 - 000008022 _____ C:\Users\Turbosport\Desktop\FRST.txt
2019-10-29 16:51 - 2019-10-29 16:54 - 000000000 ____D C:\FRST
2019-10-29 16:51 - 2019-10-29 16:35 - 001618944 _____ (Farbar) C:\Users\Turbosport\Desktop\FRST64.exe
2019-10-29 16:44 - 2019-10-29 16:53 - 000020823 _____ C:\Users\Turbosport\Desktop\Addition.txt
2019-10-29 16:42 - 2019-10-29 16:36 - 001222144 _____ C:\Users\Turbosport\Desktop\RSITx64.exe
2019-10-29 16:24 - 2019-10-29 16:24 - 000000765 _____ C:\Users\Turbosport\Desktop\VCDS SVO 19.6.lnk
2019-10-29 16:24 - 2019-10-29 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VCDS SVO
2019-10-29 16:21 - 2019-10-29 15:27 - 051029160 _____ (Ross-Tech, LLC) C:\Users\Turbosport\Desktop\VCDS_CZ (1).exe
2019-10-29 16:12 - 2019-10-29 16:12 - 000000512 _____ C:\PhysicalMBR.bin
2019-10-29 15:39 - 2019-10-29 15:39 - 000000000 ____D C:\Users\Turbosport\AppData\Local\D3DSCache
2019-10-29 14:50 - 2019-10-29 15:08 - 000000000 ____D C:\Users\Turbosport\AppData\Local\ElevatedDiagnostics
2019-10-16 09:24 - 2019-10-16 09:24 - 001694492 _____ C:\Windows\Minidump\101619-14515-01.dmp
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-10-29 16:53 - 2018-09-13 17:52 - 001689050 _____ C:\Windows\system32\PerfStringBackup.INI
2019-10-29 16:53 - 2018-04-28 00:18 - 000717712 _____ C:\Windows\system32\perfh005.dat
2019-10-29 16:53 - 2018-04-28 00:18 - 000144954 _____ C:\Windows\system32\perfc005.dat
2019-10-29 16:53 - 2018-04-12 00:36 - 000000000 ____D C:\Windows\INF
2019-10-29 16:49 - 2018-09-13 17:43 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-10-29 16:49 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-10-29 16:48 - 2018-04-11 22:04 - 000524288 _____ C:\Windows\system32\config\BBI
2019-10-29 16:22 - 2018-12-14 06:25 - 000000000 ____D C:\Ross-Tech
2019-10-29 14:59 - 2018-04-12 00:38 - 000000000 ____D C:\Windows\LiveKernelReports
2019-10-29 13:40 - 2018-09-13 17:42 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-10-24 10:01 - 2019-03-15 09:49 - 000000000 ____D C:\Auto-diagnostika
2019-10-16 09:45 - 2018-12-14 05:57 - 000000000 ____D C:\Users\Turbosport
2019-10-16 09:24 - 2019-06-06 08:55 - 695329544 _____ C:\Windows\MEMORY.DMP
2019-10-16 09:24 - 2019-05-03 12:20 - 000000000 ____D C:\Windows\Minidump
2019-10-14 11:40 - 2019-03-19 13:59 - 000035216 _____ C:\Users\Turbosport\Documents\LOG-01-001-003-011.CSV
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-10-2019
Ran by Turbosport (29-10-2019 16:55:10)
Running from C:\Users\Turbosport\Desktop
Windows 10 Home Version 1803 17134.137 (X64) (2018-12-14 04:50:02)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-855504488-749823507-3481339690-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-855504488-749823507-3481339690-503 - Limited - Disabled)
Guest (S-1-5-21-855504488-749823507-3481339690-501 - Limited - Disabled)
Turbosport (S-1-5-21-855504488-749823507-3481339690-1001 - Administrator - Enabled) => C:\Users\Turbosport
WDAGUtilityAccount (S-1-5-21-855504488-749823507-3481339690-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Auto-diagnostika VCDS . (HKLM-x32\...\Auto-diagnostika VCDS) (Version: . - AutoComSoft)
Balíček ovladače systému Windows - Ross-Tech HIDClass (01/05/2014 6.3.0.3) (HKLM\...\3A9B09BBD4F12A76FBBD3A428729660930BA5F13) (Version: 01/05/2014 6.3.0.3 - Ross-Tech)
Balíček ovladače systému Windows - Ross-Tech USB Driver Package (05/12/2014 2.10.00) (HKLM\...\88B02C4BD09AA7910C55C4E74BE8F036244B5CF9) (Version: 05/12/2014 2.10.00 - Ross-Tech)
Fcom - Diagnostic tool for Ford/Mazda (HKLM-x32\...\Secons Fcom) (Version: 1.0.18463 - Secons)
LogView (HKLM-x32\...\{C896A23B-9BD1-4BCD-8FB5-79078DD94B98}) (Version: 1.6.1.1 - DIESELPOWER s.r.o.)
Microsoft OneDrive (HKU\S-1-5-21-855504488-749823507-3481339690-1001\...\OneDriveSetup.exe) (Version: 19.033.0218.0009 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8416 - Realtek Semiconductor Corp.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{1FD817A6-63E1-4519-BFD4-228DABB7AB6B}) (Version: 2.55.0.0 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{344F3227-F502-4219-9DC4-1967E586FAFA}) (Version: 2.51.0.0 - Microsoft Corporation)
VCDS Release 18.9.1 (HKLM-x32\...\VCDS Release) (Version: 18.9.1 - Ross-Tech)
VCDS SVO 19.6 (HKLM-x32\...\VCDS SVO) (Version: SVO 19.6.1 - Ross-Tech, LLC)
Packages:
=========
Acer Collection S -> C:\Program Files\WindowsApps\AcerIncorporated.AcerCollectionS_1.0.3000.0_x64__48frkmn4z8aw4 [2018-09-13] (Acer Incorporated)
Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3003.0_x64__48frkmn4z8aw4 [2018-09-13] (Acer Incorporated)
Booking.com Partner App -> C:\Program Files\WindowsApps\4AE8B7C2.Booking.comPartnerApp_1.1.2.1000_x64__6wqyppa9wfhnr [2019-03-16] (Booking.com B.V.)
Evernote -> C:\Program Files\WindowsApps\Evernote.Evernote_6.17.8292.0_x86__q4d96b2w5wcc2 [2019-03-17] (Evernote)
Hearts Deluxe -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.HeartsDeluxe_6.4.16.0_x64__kx24dqmazqk8j [2019-03-17] (Random Salad Games LLC) [MS Ad]
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.0.1.0_neutral__w1wdnht996qgy [2018-09-13] (LinkedIn)
Microsoft Access 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16010.9126.2116.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1707.2.0_x64__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1707.2.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-03-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-03-17] (Microsoft Corporation) [MS Ad]
Microsoft Excel 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16010.9126.2116.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16010.9126.2116.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
Microsoft Outlook 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16010.9126.2116.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
Microsoft PowerPoint 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16010.9126.2116.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
Microsoft Publisher 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16010.9126.2116.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.3.3042.0_x86__8wekyb3d8bbwe [2019-03-17] (Microsoft Studios) [MS Ad]
Microsoft Word 2016 -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16010.9126.2116.0_x86__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe [2019-03-17] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.33.167.0_x64__mcm4njqhnhss8 [2018-09-13] (Netflix, Inc.)
Pošta a Kalendář -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11231.20192.0_x64__8wekyb3d8bbwe [2019-03-17] (Microsoft Corporation) [MS Ad]
Simple Mahjong -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleMahjong_5.1.20.0_x64__kx24dqmazqk8j [2018-09-13] (Random Salad Games LLC) [MS Ad]
Simple Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_6.13.46.0_x64__kx24dqmazqk8j [2019-03-17] (Random Salad Games LLC) [MS Ad]
Spades -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.Spades_5.2.24.0_x64__kx24dqmazqk8j [2018-09-13] (Random Salad Games LLC) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-855504488-749823507-3481339690-1001_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 -> C:\Users\Turbosport\AppData\Local\Microsoft\OneDrive\19.033.0218.0009\amd64\FileCoAuthLib64.dll => No File
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-04-12 00:38 - 2018-04-12 00:36 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-855504488-749823507-3481339690-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Acer01.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
MpsSvc => Firewall Service is not running.
bfe => Firewall Service is not running.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{028EF6E1-A5BC-4051-B748-D5C4E44B3E09}] => (Allow) C:\Ross-Tech\VCDS\VCDS.EXE (Ross-Tech, LLC -> Ross-Tech, LLC)
FirewallRules: [{77DEE2CA-2FFA-45F4-BF61-0B3DF18E7EE1}] => (Allow) C:\Ross-Tech\VCDS\VCIConfig.EXE (Ross-Tech, LLC -> Ross-Tech, LLC)
FirewallRules: [{59CE6E87-9EE8-43F7-AF5E-BA477CA3F0E5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.11328.20146.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
29-10-2019 16:11:50 OTL Restore Point - 29.10.2019 16:11:49
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (10/29/2019 04:51:03 PM) (Source: Software Protection Platform Service) (EventID: 1001) (User: )
Description: Spuštění služby Ochrana softwaru se nezdařilo. 0x80070005
10.0.17134.112
Error: (10/29/2019 04:49:01 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...) došlo k neočekávané chybě. hr= 0x80070005, Přístup byl odepřen.
.
Operace:
Inicializace modulu pro zápis
Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {aa459ab5-636c-4e7a-aadf-e2e8e5abe069}
Error: (10/29/2019 04:32:04 PM) (Source: Software Protection Platform Service) (EventID: 1001) (User: )
Description: Spuštění služby Ochrana softwaru se nezdařilo. 0x80070005
10.0.17134.112
Error: (10/29/2019 04:09:32 PM) (Source: Software Protection Platform Service) (EventID: 1001) (User: )
Description: Spuštění služby Ochrana softwaru se nezdařilo. 0x80070005
10.0.17134.112
Error: (10/29/2019 04:07:31 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...) došlo k neočekávané chybě. hr= 0x80070005, Přístup byl odepřen.
.
Operace:
Inicializace modulu pro zápis
Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {a2afb0bc-11d4-453a-94db-85ef01ed4c96}
Error: (10/29/2019 03:30:09 PM) (Source: Software Protection Platform Service) (EventID: 1001) (User: )
Description: Spuštění služby Ochrana softwaru se nezdařilo. 0x80070005
10.0.17134.112
Error: (10/29/2019 03:28:08 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...) došlo k neočekávané chybě. hr= 0x80070005, Přístup byl odepřen.
.
Operace:
Inicializace modulu pro zápis
Kontext:
ID třídy modulu pro zápis: {e8132975-6f93-4464-a53e-1050253ae220}
Název modulu pro zápis: System Writer
ID instance modulu pro zápis: {acf0508c-8588-4ced-aecd-ae4c57a1537a}
Error: (10/29/2019 03:05:41 PM) (Source: Software Protection Platform Service) (EventID: 1001) (User: )
Description: Spuštění služby Ochrana softwaru se nezdařilo. 0x80070005
10.0.17134.112
System errors:
=============
Error: (10/29/2019 04:55:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Klient DHCP byla ukončena s následující chybou:
Přístup byl odepřen.
Error: (10/29/2019 04:55:36 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba WinHTTP WPAD závisí na službě Klient DHCP, která neuspěla při spuštění v důsledku následující chyby:
Operace byla dokončena úspěšně.
Error: (10/29/2019 04:55:36 PM) (Source: Microsoft-Windows-Dhcp-Client) (EventID: 1004) (User: NT AUTHORITY)
Description: Při zastavení služby klienta DHCPv4 došlo k chybě. Kód chyby: 5. Hodnota příznaku vypnutí: 0
Error: (10/29/2019 04:55:36 PM) (Source: Microsoft-Windows-Dhcp-Client) (EventID: 17270) (User: NT AUTHORITY)
Description: Při inicializaci služby DHCPv4 došlo k chybě. Kód chyby: 5
Error: (10/29/2019 04:55:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Klient DHCP byla ukončena s následující chybou:
Přístup byl odepřen.
Error: (10/29/2019 04:55:36 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba Služba WinHTTP WPAD závisí na službě Klient DHCP, která neuspěla při spuštění v důsledku následující chyby:
Operace byla dokončena úspěšně.
Error: (10/29/2019 04:55:36 PM) (Source: Microsoft-Windows-Dhcp-Client) (EventID: 1004) (User: NT AUTHORITY)
Description: Při zastavení služby klienta DHCPv4 došlo k chybě. Kód chyby: 5. Hodnota příznaku vypnutí: 0
Error: (10/29/2019 04:55:36 PM) (Source: Microsoft-Windows-Dhcp-Client) (EventID: 17270) (User: NT AUTHORITY)
Description: Při inicializaci služby DHCPv4 došlo k chybě. Kód chyby: 5
Windows Defender:
===================================
Date: 2019-06-05 09:38:18.532
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {BA53845C-1526-43E6-A94A-1BCCA9A9FB99}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-05-30 10:50:13.987
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {238BF194-D509-4953-8B64-95F6A088511D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-10-29 16:49:07.605
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.291.652.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15800.1
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.
Date: 2019-10-29 16:49:07.604
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.291.652.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15800.1
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.
Date: 2019-10-29 16:49:07.604
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.291.652.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15800.1
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.
Date: 2019-10-29 16:49:07.366
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.291.652.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15800.1
Kód chyby: 0x8024402c
Popis chyby

Date: 2019-10-29 16:49:04.859
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Windows Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Systém kontroly sítě
Kód chyby: 0x8007042c
Popis chyby: Nepodařilo se zahájit závislou službu nebo skupinu.
Důvod: V systému chybí aktualizace potřebné ke spuštění systému kontroly sítě. Nainstalujte potřebné aktualizace a restartujte zařízení.
CodeIntegrity:
===================================
Date: 2019-03-28 16:26:13.572
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.
Date: 2019-03-28 16:26:13.555
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.
Date: 2019-03-28 16:26:13.449
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.
Date: 2019-03-28 16:26:13.429
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system.
Date: 2019-03-28 16:26:13.405
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system.
Date: 2019-03-28 16:26:13.386
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system.
Date: 2019-03-28 16:26:13.182
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2019-03-28 16:26:13.145
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
BIOS: Insyde Corp. V1.03 05/02/2018
Motherboard: GLK Sapporo_GL_S
Processor: Intel(R) Pentium(R) Silver N5000 CPU @ 1.10GHz
Percentage of memory in use: 60%
Total physical RAM: 3902.67 MB
Available physical RAM: 1556.03 MB
Total Virtual: 4606.67 MB
Available Virtual: 2345.7 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:118.13 GB) (Free:92.86 GB) NTFS
Drive d: (USB DISK) (Removable) (Total:3.74 GB) (Free:3.53 GB) FAT32
\\?\Volume{c8783954-3d2c-4bd5-b045-1182ed7765ff}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.63 GB) NTFS
\\?\Volume{505824b9-ce21-488c-be2e-11c2c4091e00}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.05 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 0D2FFC61)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 3.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================