Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2021
Ran by lamas (administrator) on MICHALZICH (Dell Inc. Inspiron 3593) (06-10-2021 20:01:36)
Running from C:\Users\lamas\Downloads
Loaded Profiles: lamas
Platform: Windows 10 Home Version 21H2 22000.194 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Dell Inc -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(Facebook Inc) C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\Messenger.exe <6>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <36>
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\esif_uf.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_dd349ca1e8d98184\LMS.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <5>
(Microsoft Windows -> ) C:\Windows\System32\AggregatorHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Scans\MsMpEngCP.exe
(OpenVPN Inc. -> ) C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(OpenVPN Inc. -> The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpn.exe
(OpenVPN Inc. -> The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCD\SupportAssist\Dsapi.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1141544 2020-09-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_f9e3e5f664173b9e\WavesSvc64.exe [1774688 2020-09-03] (Waves Inc -> Waves Audio Ltd.)
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [288184 2021-08-10] (Intel Corporation -> Intel)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2340224 2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2340224 2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2340224 2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\lamas\appdata\local\microsoft\teams\Update.exe [2455256 2021-09-29] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\Run: [] => [X]
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [669112 2019-10-31] (OpenVPN Inc. -> )
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\Run: [DeepL] => C:\ProgramData\lamas\DeepL\app-2.9.2501\DeepL.exe [141360 2021-09-25] (DeepL GmbH -> DeepL GmbH)
HKLM\...\Print\Monitors\us008 Langmon: C:\WINDOWS\system32\us008lm.dll [31256 2016-02-15] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /t REG_SZ /d "C:\Program Files\OpenVPN\bin\openvpn-gui.exe" /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\94.0.4606.71\Installer\chrmstp.exe [2021-10-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\94.1.30.87\Installer\chrmstp.exe [2021-10-02] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\Software\...\Winlogon\GPExtensions: [{8472C2C4-6B70-4301-A20D-A6CEA5F82B7E}] -> C:\WINDOWS\System32\StartTileData.dll [2021-09-13] (Microsoft Windows -> Microsoft Corporation)
Startup: C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2020-10-02]
ShortcutTarget: GameRanger.lnk -> C:\Users\lamas\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
Startup: C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2021-10-05]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0C064AF8-8AD7-44E3-8494-F37CABF8185D} - System32\Tasks\Microsoft\Windows\AppListBackup\Backup => {E0DCC2CC-3354-45F2-8914-519E07809082} C:\WINDOWS\system32\AppListBackupLauncher.dll [110592 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
Task: {1252A84C-8F10-40E8-A3DB-1C30B0D37B16} - System32\Tasks\Microsoft\Windows\Printing\PrinterCleanupTask => {C56F065E-DE49-4E42-BE7C-305C45609D25} C:\Windows\System32\PrinterCleanupTask.dll [118784 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
Task: {25DABF92-6809-41AD-AF36-12B2295DD266} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Passport for Work alert created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {2BEB8C7E-183F-4A18-AA7C-64DCD72C6F85} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2F735F1E-E2A4-4242-AF1F-74B14590B951} - System32\Tasks\Microsoft\Windows\Kernel\La57Cleanup => C:\WINDOWS\system32\la57setup.exe [36864 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
Task: {318D7E32-98F1-42A1-A2C7-245BFDAFB513} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [681400 2021-08-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {39BDCE6C-3B60-491E-BA1F-E52FD29394DB} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistInstaller.exe [1060384 2021-08-20] (Dell Inc -> Dell Inc.)
Task: {3A931A9C-0407-4BA6-B090-AEF8B0522E82} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {42E1BD8F-7DEB-402C-98F4-820696DA968A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {4EBA7B35-9796-47FA-A58C-8F77822C3BFC} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\PushRenewal => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {5229D831-02A3-48A6-8FB4-021705B88EF8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1551256 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B19304E-A302-4B5C-BB28-307DCB77498E} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {6C50FD2B-6E41-42D6-935F-9C649F38AB2A} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Schedule #1 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {7AB72538-1652-4AC0-A87E-2124F9480E15} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Schedule #2 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {7C3B27B7-1FEB-41C4-983A-C3F665914ED7} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {82670F64-033B-406A-ADD2-26A17FD5DB93} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Schedule to run OMADMClient by client => C:\WINDOWS\system32\omadmclient.exe [450560 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
Task: {83E7DBD0-3119-4213-BCA2-45AFD2B01447} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729200 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {865C1CC6-E229-485E-99D5-E296F45506C1} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3075936 2021-07-21] (Intel Corporation -> Intel Corporation)
Task: {8785D04A-9290-403F-A715-700A0E93F02D} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Provisioning initiated session => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {9D812998-1EF4-409C-94C3-E2AB030BEC2A} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Schedule created by enrollment client for renewal of certificate warning => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {9E2723D6-BF78-4364-818F-4FAF85A00B83} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134504 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {A113AD26-AA99-4C14-9101-6C53FDBA2241} - System32\Tasks\Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup => C:\WINDOWS\system32\MdmDiagnosticsTool.exe [90112 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {A5E45BCC-DE8C-487B-8C49-9953CC47CF24} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {A79BA140-4629-44DD-88F3-26A23688E8F2} - System32\Tasks\microsoft\windows\capabilityaccessmanager\maintenancetasks => %windir%\system32\rundll32.exe %windir%\system32\CapabilityAccessManager.dll,CapabilityAccessManagerDoStoreMaintenance
Task: {AD17FDCC-F3EF-44FF-B691-EDE9C07A616E} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3977072 2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {B2A6AF0E-C246-4FA1-AF15-1249F99A2AC3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729200 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {BEBEA9B6-E74E-4AD4-8430-4BB02D7A57E7} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\OS Edition Upgrade event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {C017E83D-7A42-41F0-AAF8-9346DF155FC7} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Schedule #3 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {C0834920-9146-4692-9853-A7F05F35DFAB} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4103280 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {C6011FD0-35D2-4566-A99D-E2AE2CF1F091} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {CB614C11-F9BE-4453-A14B-E4A135C8E09F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe
Task: {D154AD10-E56B-4E18-8A60-029A50919241} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134504 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {D25DC36E-8E1C-4672-90F1-3D83D36FAA60} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\PushUpgrade => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {DBB429E7-5C23-4790-9AA6-C335979AB8CB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-04-03] (Google LLC -> Google LLC)
Task: {DF1F4569-AC0D-46CC-A0EA-324B5919E83A} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3075936 2021-07-21] (Intel Corporation -> Intel Corporation)
Task: {E23CF514-6E2B-447F-8935-3731F13A3D01} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Schedule to run OMADMClient by server => C:\WINDOWS\system32\omadmclient.exe [450560 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
Task: {E86DB898-0B87-4F5B-B407-4627F86451DF} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\PushLaunch => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {ED476BAD-B100-4DE5-A82A-0A48AB6DC971} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-04-03] (Google LLC -> Google LLC)
Task: {EE923EBC-0FD5-44E3-8D1B-DAA50EE7ACC5} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F97F399-8A09-446E-8B52-42E097F5026B\Win10 S Mode event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [487424 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {F21E75C8-2470-408B-90B9-0C16A9649589} - System32\Tasks\Microsoft\Windows\Shell\ThemesSyncedImageDownload => {79F8E185-4E45-4B74-8182-02AA430661E4} C:\Windows\System32\Themes.SsfDownload.ScheduledTask.dll [200704 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
Task: {F307A1A1-A5C6-40CD-9256-98EDFFDB2C53} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {F41BE135-6BAF-4CA8-ACB2-91E67CAD3B21} - System32\Tasks\SmartByte Telemetry => C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe [95072 2020-08-14] (Rivet Networks LLC -> DELL)
Task: {F53E0D7C-E609-45DB-A4D8-326892F4FA38} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 07 C:\WINDOWS\SysWOW64\nlansp_c.dll [83456 2021-06-05] (Microsoft Windows -> Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 07 C:\Windows\system32\nlansp_c.dll [126976 2021-06-05] (Microsoft Windows -> Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 86.49.5.221 86.49.5.222
Tcpip\..\Interfaces\{02152c23-48b5-463b-b4fd-4ca2533077c5}: [DhcpNameServer] 147.251.6.10 147.251.4.33
Tcpip\..\Interfaces\{0e3c8def-2bea-4880-94b8-3a133d0a4120}: [DhcpNameServer] 147.251.4.33 147.251.6.10
Tcpip\..\Interfaces\{92122bf3-6403-4cdc-9c9d-7846e2b069fd}: [DhcpNameServer] 77.48.254.254 77.48.100.254
Tcpip\..\Interfaces\{d9f01dc5-a066-4c6d-b3e4-f104e3c4edbb}: [DhcpNameServer] 147.251.4.33 147.251.6.10
Tcpip\..\Interfaces\{e17a547e-b113-4acb-9dab-233bde85000d}: [DhcpNameServer] 213.46.172.38 213.46.172.39
Tcpip\..\Interfaces\{f4a69acf-a4da-4338-b893-ee6a8e33d2df}: [DhcpNameServer] 86.49.5.221 86.49.5.222
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\lamas\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-06]
FireFox:
========
FF DefaultProfile: ks9z3nnx.default
FF ProfilePath: C:\Users\lamas\AppData\Roaming\Mozilla\Firefox\Profiles\ks9z3nnx.default [2021-07-19]
FF ProfilePath: C:\Users\lamas\AppData\Roaming\Mozilla\Firefox\Profiles\gb77tiix.default-release [2021-09-29]
FF Extension: (LastPass: Free Password Manager) - C:\Users\lamas\AppData\Roaming\Mozilla\Firefox\Profiles\gb77tiix.default-release\Extensions\
support@lastpass.com.xpi [2021-08-07]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-09-25] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default [2021-10-06]
CHR HomePage: Default -> hxxp://
www.google.com/
CHR Session Restore: Default -> is enabled.
CHR Extension: (Překladač Google) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-08-17]
CHR Extension: (Prezentace) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-04-03]
CHR Extension: (Dokumenty) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-04-03]
CHR Extension: (Disk Google) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (DuckDuckGo) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2021-10-01]
CHR Extension: (YouTube) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-04-03]
CHR Extension: (DjVu Viewer and Reader) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\chnjifppcgdoacjkgnmkhphgfgdnkfjk [2021-09-10]
CHR Extension: (uBlock Origin) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-10-05]
CHR Extension: (Tabulky) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-04-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-09-30]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2021-09-30]
CHR Extension: (Unpaywall) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\iplffkdpngmdjhlpjmppncnlhomiipha [2021-08-01]
CHR Extension: (Web Scraper - Free Web Scraping) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnhgnonknehpejjnehehllkliplmbmhn [2021-08-25]
CHR Extension: (Save to Pocket) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2020-11-11]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Profile: C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-10-06]
CHR Profile: C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1 [2021-10-06]
CHR Notifications: Profile 1 -> hxxps://mail.google.com
CHR Extension: (Prezentace) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-08-03]
CHR Extension: (Dokumenty) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2021-08-03]
CHR Extension: (Disk Google) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-08-03]
CHR Extension: (YouTube) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-08-03]
CHR Extension: (Tabulky) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-08-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-09-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-03]
CHR Extension: (Gmail) - C:\Users\lamas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-08-03]
CHR Profile: C:\Users\lamas\AppData\Local\Google\Chrome\User Data\System Profile [2021-10-06]
Brave:
=======
BRA Profile: C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2021-03-07]
BRA Extension: (LastPass: Free Password Manager) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2021-03-06]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2021-03-06]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2021-03-07]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2021-03-07]
BRA Extension: (Brave NTP sponsored images) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2021-03-07]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2021-03-06]
BRA Extension: (Brave Ad Block Updater (CZE, SVK: EasyList Czech and Slovak)) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\omkkefoeihpbpebhhbhmjekpnegokpbj [2021-03-07]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\lamas\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2021-03-06]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-06] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-06] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)
S3 dcpm-notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [315008 2021-05-13] (Dell Inc -> Dell Inc.)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [426528 2021-08-02] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3835424 2021-08-02] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [452640 2021-08-02] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [50888 2021-06-24] (Dell Inc -> )
R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCD\SupportAssist\Dsapi.exe [1020584 2021-07-28] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [19128 2021-07-08] (Dell Inc -> Dell INC.)
S3 Dell.CommandPowerManager.Service; C:\WINDOWS\system32\dllhost.exe /Processid:{5A4E1D3D-D97D-487E-8A66-42533AC9D6B8} [45368 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [38600 2021-07-20] (Dell Inc -> )
S2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [36792 2021-08-10] (Intel Corporation -> Intel)
S3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [176568 2021-08-10] (Intel Corporation -> Intel)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncHelper.exe [3249520 2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
S3 FrameServerMonitor; C:\WINDOWS\system32\FrameServerMonitor.dll [319488 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
S3 McpManagementService; C:\WINDOWS\System32\McpManagementService.dll [319488 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
S3 NPSMSvc; C:\WINDOWS\System32\npsm.dll [233472 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 NPSMSvc; C:\WINDOWS\SysWOW64\npsm.dll [163840 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [45368 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.180.0905.0007\OneDriveUpdaterService.exe [3718016 2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [24192 2018-03-06] (OpenVPN Technologies, Inc. -> )
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [66488 2019-10-31] (OpenVPN Inc. -> The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [66488 2019-10-31] (OpenVPN Inc. -> The OpenVPN Project)
S3 P9RdrService; C:\WINDOWS\system32\p9rdrservice.dll [122880 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
S2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [188728 2021-05-28] (Qualcomm Atheros, Inc. -> )
S2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [64848 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [64856 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
S2 SmartByte Analytics Service; C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe [1630576 2020-08-14] (Rivet Networks LLC -> Rivet Networks)
R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2385256 2020-08-14] (Rivet Networks LLC -> Rivet Networks)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [39968 2021-08-20] (Dell Inc -> Dell Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [43400 2021-07-28] (Microsoft Windows Hardware Compatibility Publisher -> Dell Technologies)
S0 ebdrv; C:\WINDOWS\System32\drivers\evbda.sys [3440440 2021-06-05] (Microsoft Windows -> Marvell Semiconductor Inc.)
S0 ebdrv0; C:\WINDOWS\System32\drivers\evbd0a.sys [3423032 2021-06-05] (Microsoft Windows -> QLogic Corporation)
S3 ExecutionContext; C:\WINDOWS\System32\Drivers\ExecutionContext.sys [61440 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 HidSpiCx; C:\WINDOWS\System32\drivers\HidSpiCx.sys [118784 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_ICL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_icl.inf_amd64_90beccc7e046abab\iaLPSS2_GPIO2_ICL.sys [132872 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ICL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_icl.inf_amd64_c8c0638291b9b209\iaLPSS2_I2C_ICL.sys [200456 2020-04-28] (Intel Corporation -> Intel Corporation)
R0 IntelPMT; C:\WINDOWS\System32\drivers\IntelPMT.sys [74224 2021-06-05] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S0 megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [100176 2021-06-05] (Microsoft Windows -> Broadcom Inc)
S0 mpi3drvi; C:\WINDOWS\System32\drivers\mpi3drvi.sys [87352 2021-06-05] (Microsoft Windows -> Broadcom Limited)
S3 NDKPerf; C:\WINDOWS\System32\drivers\NDKPerf.sys [78152 2021-06-05] (Microsoft Windows -> )
S0 nvmedisk; C:\WINDOWS\System32\drivers\nvmedisk.sys [82240 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [164424 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 Usb4DeviceRouter; C:\WINDOWS\System32\DriverStore\FileRepository\usb4devicerouter.inf_amd64_8d9a17bd8e5b4b11\Usb4DeviceRouter.sys [831800 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
S3 Usb4HostRouter; C:\WINDOWS\System32\DriverStore\FileRepository\usb4hostrouter.inf_amd64_acb1b78bb0ae3528\Usb4HostRouter.sys [557368 2021-09-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-05] (Microsoft Windows -> Microsoft Corporation)
S4 DBUtilDrv2; \SystemRoot\System32\drivers\DBUtilDrv2.sys [X]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-06 20:01 - 2021-10-06 20:01 - 002308096 _____ (Farbar) C:\Users\lamas\Downloads\FRST64.exe
2021-10-06 20:01 - 2021-10-06 20:01 - 000000000 ____D C:\Users\lamas\Downloads\FRST-OlderVersion
2021-10-06 18:52 - 2021-10-06 18:54 - 000000000 ____D C:\AdwCleaner
2021-10-06 18:52 - 2021-10-06 18:52 - 008553680 _____ (Malwarebytes) C:\Users\lamas\Downloads\adwcleaner_8.3.0.exe
2021-10-06 08:59 - 2021-10-06 09:07 - 000052682 _____ C:\Users\lamas\Downloads\Addition.txt
2021-10-06 08:41 - 2021-10-06 20:02 - 000036004 _____ C:\Users\lamas\Downloads\FRST.txt
2021-10-06 08:41 - 2021-10-06 20:01 - 000000000 ____D C:\FRST
2021-10-06 08:23 - 2021-10-06 08:23 - 003412544 _____ C:\Users\lamas\Downloads\SS_Odinstalator.exe
2021-10-05 21:52 - 2021-10-05 21:52 - 031679995 _____ C:\Users\lamas\Downloads\arm64.appxsym
2021-10-05 21:52 - 2021-10-05 21:52 - 000001850 _____ C:\Users\lamas\Downloads\TranslucentTB.appinstaller
2021-10-05 21:47 - 2021-10-05 22:03 - 000000254 _____ C:\Users\lamas\AppData\Local\rtb.json
2021-10-05 21:44 - 2021-10-05 21:44 - 005056392 _____ C:\Users\lamas\Downloads\RoundedTB_R3.zip
2021-10-05 17:04 - 2021-10-05 17:04 - 003272671 _____ C:\Users\lamas\Downloads\Niki Lambropoulos - Educational Social Software for Context-Aware Learning_ Collaborative Methods and Human Interaction (Premier Reference Source) (2009) - libgen.lc.pdf
2021-10-05 12:31 - 2021-10-05 12:31 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-015006-000000.txt
2021-10-05 09:00 - 2021-10-05 09:00 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-10-05 08:58 - 2021-10-05 08:58 - 000000020 ___SH C:\Users\lamas\ntuser.ini
2021-10-05 08:57 - 2021-10-06 14:48 - 000004212 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{326694B8-4184-4BDD-88EA-DAA8C6D20B98}
2021-10-05 08:57 - 2021-10-05 12:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-05 08:57 - 2021-10-05 08:57 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2021-10-05 08:57 - 2021-10-05 08:57 - 000011433 _____ C:\WINDOWS\diagerr.xml
2021-10-05 08:57 - 2021-10-05 08:57 - 000003512 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-05 08:57 - 2021-10-05 08:57 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-10-05 08:57 - 2021-10-05 08:57 - 000003420 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA
2021-10-05 08:57 - 2021-10-05 08:57 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-05 08:57 - 2021-10-05 08:57 - 000003318 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d71741fe994e22
2021-10-05 08:57 - 2021-10-05 08:57 - 000003288 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-05 08:57 - 2021-10-05 08:57 - 000003274 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2021-10-05 08:57 - 2021-10-05 08:57 - 000003196 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore
2021-10-05 08:57 - 2021-10-05 08:57 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-10-05 08:57 - 2021-10-05 08:57 - 000003042 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2021-10-05 08:57 - 2021-10-05 08:57 - 000002970 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2021-10-05 08:57 - 2021-10-05 08:57 - 000002716 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2021-10-05 08:57 - 2021-10-05 08:57 - 000002678 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2021-10-05 08:57 - 2021-10-05 08:57 - 000002604 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2021-10-05 08:57 - 2021-10-05 08:57 - 000002258 _____ C:\WINDOWS\system32\Tasks\SmartByte Telemetry
2021-10-05 08:57 - 2021-10-05 08:57 - 000000000 ____D C:\WINDOWS\system32\Tasks\S-1-5-21-3376143671-3383002286-3793547419-1001
2021-10-05 08:57 - 2021-10-05 08:57 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-10-05 08:57 - 2021-10-05 08:57 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-10-05 08:57 - 2020-01-06 21:36 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4142148808-3688044604-2645567298-500
2021-10-05 08:56 - 2021-10-05 12:36 - 001714958 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-05 08:54 - 2021-10-06 17:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-05 08:53 - 2021-10-05 08:57 - 000000000 ____D C:\Windows.old
2021-10-05 08:44 - 2021-10-05 08:53 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-10-05 08:43 - 2021-10-05 08:58 - 000000000 ____D C:\Users\lamas
2021-10-05 08:43 - 2021-10-05 08:53 - 000000000 ____D C:\WINDOWS\system32\Intel
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Šablony
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Soubory cookie
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Poslední
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Okolní tiskárny
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Okolní síť
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Nabídka Start
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Dokumenty
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\Data aplikací
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 _SHDL C:\Users\lamas\AppData\Local\Data aplikací
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 ____D C:\WINDOWS\system32\cAVS
2021-10-05 08:43 - 2021-10-05 08:43 - 000000000 ____D C:\WINDOWS\Firmware
2021-10-05 08:43 - 2021-06-05 14:04 - 000001281 _____ C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2021-10-05 08:43 - 2021-06-05 14:04 - 000000407 _____ C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2021-10-05 08:42 - 2021-10-05 08:44 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-10-05 08:41 - 2021-10-05 08:41 - 000000000 __RSD C:\WINDOWS\SysWOW64\WindowsDevicePortal
2021-10-05 08:41 - 2021-10-05 08:41 - 000000000 __RSD C:\WINDOWS\system32\WindowsDevicePortal
2021-10-05 08:41 - 2021-10-05 08:41 - 000000000 ___RD C:\WINDOWS\WebManagement
2021-10-05 08:34 - 2021-10-05 08:34 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2021-10-05 08:34 - 2021-10-05 08:34 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-10-05 08:34 - 2021-10-05 08:34 - 000000000 ____D C:\Program Files\MSBuild
2021-10-05 08:34 - 2021-10-05 08:34 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-10-05 08:34 - 2021-10-05 08:34 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-10-05 08:29 - 2021-10-05 08:29 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-10-05 08:22 - 2021-10-06 19:15 - 000000000 ___DC C:\WINDOWS\Panther
2021-10-05 08:20 - 2021-10-05 08:22 - 000000036 _____ C:\WINDOWS\progress.ini
2021-10-05 08:06 - 2021-10-05 08:20 - 000000000 ___HD C:\$GetCurrent
2021-10-05 08:06 - 2021-10-05 08:20 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant
2021-10-02 12:54 - 2021-10-02 12:54 - 000002146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-09-29 23:50 - 2021-09-29 23:50 - 000002370 _____ C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-09-28 11:22 - 2021-10-05 08:53 - 000000000 ____D C:\WINDOWS\system32\ihvmanager
2021-09-28 11:19 - 2021-09-28 11:19 - 000000000 ____D C:\Riot Games
2021-09-28 10:10 - 2021-09-28 10:10 - 000002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-09-25 20:37 - 2021-09-25 20:37 - 000000000 ____D C:\Users\lamas\AppData\Local\Sentry
2021-09-16 20:08 - 2021-09-16 20:08 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-015005-000000.txt
2021-09-16 20:07 - 2021-09-17 07:42 - 000000000 ____D C:\Users\lamas\AppData\Local\Notepad
2021-09-16 18:58 - 2021-09-16 18:58 - 000000000 ___HD C:\$WinREAgent
2021-09-13 17:48 - 2021-09-13 17:48 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-09-13 17:48 - 2021-09-13 17:48 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-09-13 17:48 - 2021-09-13 17:48 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-09-13 17:48 - 2021-09-13 17:48 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-09-13 17:41 - 2021-09-13 17:41 - 002764800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-09-13 17:41 - 2021-09-13 17:41 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-09-13 17:41 - 2021-09-13 17:41 - 000659456 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-09-13 17:41 - 2021-09-13 17:41 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-09-13 17:41 - 2021-09-13 17:41 - 000377136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-09-13 17:41 - 2021-09-13 17:41 - 000269112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-09-13 17:41 - 2021-09-13 17:41 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr
2021-09-13 17:41 - 2021-09-13 17:41 - 000009522 _____ C:\WINDOWS\system32\ResPriUHMImageList
2021-09-13 17:41 - 2021-09-13 17:41 - 000009522 _____ C:\WINDOWS\system32\ResPriImageList
2021-09-13 17:41 - 2021-09-13 17:41 - 000009522 _____ C:\WINDOWS\system32\ResPriHMImageList
2021-09-13 17:41 - 2021-09-13 17:41 - 000009402 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2021-09-13 17:41 - 2021-09-13 17:41 - 000008964 _____ C:\WINDOWS\system32\ResPriLMImageList
2021-09-13 17:41 - 2021-09-13 17:41 - 000008870 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2021-09-13 17:40 - 2021-09-13 17:40 - 002310384 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-09-13 17:40 - 2021-09-13 17:40 - 001856848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-09-13 17:40 - 2021-09-13 17:40 - 001745736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-13 17:40 - 2021-09-13 17:40 - 000727584 _____ C:\WINDOWS\system32\TextShaping.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000617136 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000614400 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000453120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-09-13 17:40 - 2021-09-13 17:40 - 000425984 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000360448 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000335872 _____ C:\WINDOWS\system32\Windows.Internal.UI.Dialogs.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000267264 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Dialogs.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000221184 _____ C:\WINDOWS\SysWOW64\Microsoft.Internal.FrameworkUdk.System.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000180224 _____ C:\WINDOWS\system32\CloudExperienceHostRedirection.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmview.ocx
2021-09-13 17:40 - 2021-09-13 17:40 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmview.ocx
2021-09-13 17:40 - 2021-09-13 17:40 - 000099560 _____ C:\WINDOWS\system32\wow64con.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000077824 _____ C:\WINDOWS\system32\runexehelper.exe
2021-09-13 17:40 - 2021-09-13 17:40 - 000041594 _____ C:\WINDOWS\SysWOW64\ctac.json
2021-09-13 17:40 - 2021-09-13 17:40 - 000036864 _____ C:\WINDOWS\system32\umpodev.dll
2021-09-13 17:40 - 2021-09-13 17:40 - 000014566 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-09-13 17:40 - 2021-09-13 17:40 - 000003366 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2021-09-13 17:40 - 2021-09-13 17:40 - 000003366 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2021-09-13 17:39 - 2021-09-13 17:39 - 000626688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-09-13 17:39 - 2021-09-13 17:39 - 000311296 _____ C:\WINDOWS\system32\Microsoft.Internal.FrameworkUdk.System.dll
2021-09-13 17:39 - 2021-09-13 17:39 - 000258048 _____ C:\WINDOWS\system32\CoreMas.dll
2021-09-13 17:39 - 2021-09-13 17:39 - 000172032 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-13 17:39 - 2021-09-13 17:39 - 000041594 _____ C:\WINDOWS\system32\ctac.json
2021-09-12 15:57 - 2021-04-22 18:52 - 001790232 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-09-12 15:57 - 2021-04-22 18:52 - 001790232 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-09-12 15:57 - 2021-04-22 18:52 - 001386280 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-09-12 15:57 - 2021-04-22 18:52 - 001386280 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-09-12 15:57 - 2021-04-22 18:52 - 001096328 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 001096328 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000949384 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000949384 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000613712 _____ C:\WINDOWS\system32\ze_tracing_layer.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000426832 _____ C:\WINDOWS\system32\ze_loader.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000308640 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000256056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000172048 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000147360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2021-09-12 15:57 - 2021-04-22 18:52 - 000143704 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2021-09-12 15:57 - 2021-04-22 18:51 - 026655552 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2021-09-12 15:57 - 2021-04-22 18:51 - 013486912 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2021-09-12 15:57 - 2021-04-22 18:50 - 000326992 _____ C:\WINDOWS\system32\control_api.dll
2021-09-08 10:30 - 2021-09-09 10:28 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2021-09-06 10:11 - 2021-10-05 08:53 - 000000000 ____D C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DeepL GmbH
2021-09-06 10:11 - 2021-09-30 15:58 - 000000000 ____D C:\Users\lamas\AppData\Local\DeepL_GmbH
2021-09-06 10:11 - 2021-09-06 10:11 - 000000000 ____D C:\Users\lamas\AppData\Local\DeepL
2021-09-06 10:11 - 2021-09-06 10:11 - 000000000 ____D C:\ProgramData\lamas
2021-09-06 10:10 - 2021-09-28 10:10 - 000000000 ____D C:\Program Files\Microsoft OneDrive
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-06 19:55 - 2021-06-05 14:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-06 19:51 - 2021-07-19 16:12 - 000000000 ____D C:\Users\lamas\AppData\LocalLow\Mozilla
2021-10-06 19:20 - 2020-04-03 17:01 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-06 19:15 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-10-06 19:09 - 2020-01-07 21:30 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2021-10-06 18:59 - 2021-06-05 14:09 - 000000000 ____D C:\WINDOWS\INF
2021-10-06 18:58 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\Registration
2021-10-06 08:19 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\appcompat
2021-10-06 08:15 - 2020-04-03 17:02 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-05 22:06 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-05 21:53 - 2021-06-05 14:10 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-05 21:53 - 2020-04-03 16:11 - 000000000 ____D C:\Users\lamas\AppData\Local\Packages
2021-10-05 21:53 - 2020-01-07 21:45 - 000000000 ____D C:\ProgramData\Packages
2021-10-05 18:44 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-10-05 13:24 - 2020-04-03 16:13 - 000000000 ____D C:\Users\lamas\AppData\Local\PlaceholderTileLogoFolder
2021-10-05 12:50 - 2020-04-04 13:54 - 000000000 ____D C:\Users\lamas\AppData\Local\D3DSCache
2021-10-05 12:46 - 2020-04-03 16:13 - 000000000 ___RD C:\Users\lamas\OneDrive
2021-10-05 12:36 - 2021-06-05 19:20 - 000727326 _____ C:\WINDOWS\system32\perfh005.dat
2021-10-05 12:36 - 2021-06-05 19:20 - 000151236 _____ C:\WINDOWS\system32\perfc005.dat
2021-10-05 12:31 - 2021-08-05 14:08 - 000012288 ___SH C:\DumpStack.log.tmp
2021-10-05 12:31 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-05 12:31 - 2021-06-05 14:01 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-10-05 12:31 - 2020-04-03 16:11 - 000000000 __SHD C:\Users\lamas\IntelGraphicsProfiles
2021-10-05 12:31 - 2020-01-07 21:26 - 000000000 ____D C:\Intel
2021-10-05 12:05 - 2021-06-05 14:01 - 000000000 ____D C:\WINDOWS\servicing
2021-10-05 12:05 - 2021-06-05 14:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-05 11:50 - 2021-06-05 14:10 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-10-05 11:50 - 2020-01-06 21:18 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-05 08:58 - 2021-06-05 14:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-05 08:58 - 2020-01-06 21:34 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-10-05 08:57 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-05 08:57 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files\Windows NT
2021-10-05 08:57 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files\Windows Defender
2021-10-05 08:57 - 2021-06-05 14:01 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-10-05 08:56 - 2021-03-06 22:52 - 000002376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2021-10-05 08:55 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-10-05 08:55 - 2021-03-12 15:15 - 000027972 _____ C:\WINDOWS\system32\emptyregdb.dat
2021-10-05 08:54 - 2021-06-05 14:08 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-10-05 08:54 - 2020-08-30 01:02 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-05 08:53 - 2021-08-25 19:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2021-10-05 08:53 - 2021-08-24 20:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics
2021-10-05 08:53 - 2021-08-07 20:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2021-10-05 08:53 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\spool
2021-10-05 08:53 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-10-05 08:53 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2021-10-05 08:53 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-10-05 08:53 - 2021-05-22 13:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2021-10-05 08:53 - 2021-04-02 13:13 - 000000000 ____D C:\WINDOWS\system32\Samsung
2021-10-05 08:53 - 2020-10-15 07:58 - 000000000 ____D C:\Users\lamas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-10-05 08:53 - 2020-05-31 05:01 - 000000000 ____D C:\Program Files\UNP
2021-10-05 08:53 - 2020-04-03 18:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2021-10-05 08:53 - 2020-04-03 17:06 - 000000000 ____D C:\Program Files\Intel
2021-10-05 08:53 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-10-05 08:53 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-10-05 08:47 - 2021-06-05 14:10 - 000000000 __RHD C:\Users\Public\Libraries
2021-10-05 08:47 - 2021-06-05 14:10 - 000000000 ____D C:\ProgramData\USOPrivate
2021-10-05 08:44 - 2021-08-25 19:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2021-10-05 08:43 - 2021-06-05 14:14 - 000000000 ____D C:\WINDOWS\Setup
2021-10-05 08:43 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-05 08:41 - 2021-06-05 19:27 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-10-05 08:41 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SystemApps
2021-10-05 08:40 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\OCR
2021-10-05 08:39 - 2021-06-05 19:28 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-10-05 08:39 - 2021-06-05 19:28 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\system32\winrm
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\system32\WCN
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\system32\slmgr
2021-10-05 08:39 - 2021-06-05 19:20 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-10-05 08:39 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2021-10-05 08:34 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2021-10-05 08:34 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\MUI
2021-10-05 08:32 - 2020-07-19 04:16 - 000021968 _____ (Thales) C:\WINDOWS\system32\axaltocm.dll
2021-10-01 15:19 - 2020-01-06 21:29 - 000000000 ____D C:\Program Files\Microsoft Office
2021-09-29 18:10 - 2021-08-07 20:34 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-09-29 18:10 - 2021-07-19 16:12 - 000000000 ____D C:\ProgramData\Mozilla
2021-09-28 14:56 - 2020-04-03 18:03 - 000000000 ____D C:\ProgramData\Riot Games
2021-09-28 11:22 - 2020-01-07 21:29 - 000000000 ____D C:\Program Files (x86)\Qualcomm
2021-09-28 11:21 - 2020-12-29 19:05 - 000000000 ____D C:\ProgramData\Intel Package Cache {d8170687-85fa-4716-bafd-087205d0db72}
2021-09-28 11:21 - 2020-12-29 19:05 - 000000000 ____D C:\ProgramData\Intel Package Cache {9f9c9e51-d42f-4462-a27a-7d419da18045}
2021-09-28 11:21 - 2020-12-29 19:05 - 000000000 ____D C:\ProgramData\Intel Package Cache {29d6077f-6adb-42de-abac-1c60aeb0e237}
2021-09-28 11:21 - 2020-12-29 19:05 - 000000000 ____D C:\ProgramData\Intel Package Cache {1CEAC85D-2590-4760-800F-8DE5E91F3700}
2021-09-28 11:21 - 2020-04-03 17:06 - 000000000 ____D C:\Program Files (x86)\Intel
2021-09-17 07:42 - 2021-08-05 13:25 - 000000000 ____D C:\Users\lamas\OneDrive\Dokumenty\Onenotové poznámkové bloky
2021-09-16 08:56 - 2020-04-04 18:31 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-09-16 08:56 - 2020-04-04 18:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SystemResources
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\id-ID
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\Provisioning
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-09-13 17:50 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files\Common Files\System
2021-09-13 17:49 - 2021-06-05 19:28 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-09-13 17:49 - 2021-06-05 19:28 - 000021047 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2021-09-12 21:41 - 2021-08-07 20:30 - 000000000 ____D C:\Users\lamas\AppData\Roaming\obs-studio
2021-09-12 16:04 - 2020-04-20 18:33 - 000000000 ____D C:\Users\lamas\AppData\Local\ElevatedDiagnostics
2021-09-09 20:22 - 2021-07-19 16:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-09 10:28 - 2021-08-02 13:42 - 000001069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-09-06 10:11 - 2020-04-03 17:38 - 000000000 ____D C:\Users\lamas\AppData\Local\SquirrelTemp
==================== Files in the root of some directories ========
2020-10-15 16:50 - 2020-10-20 01:51 - 000000330 _____ () C:\Users\lamas\AppData\Roaming\debug.log
2020-04-04 13:57 - 2021-08-04 21:46 - 000007659 _____ () C:\Users\lamas\AppData\Local\Resmon.ResmonCfg
2021-10-05 21:47 - 2021-10-05 22:03 - 000000254 _____ () C:\Users\lamas\AppData\Local\rtb.json
2021-10-05 21:47 - 2021-10-05 22:12 - 000016138 _____ () C:\Users\lamas\AppData\Local\rtb.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
=======================================================================================================================================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2021
Ran by lamas (06-10-2021 20:05:17)
Running from C:\Users\lamas\Downloads
Windows 10 Home Version 21H2 22000.194 (X64) (2021-10-05 06:57:35)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3376143671-3383002286-3793547419-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3376143671-3383002286-3793547419-503 - Limited - Disabled)
Guest (S-1-5-21-3376143671-3383002286-3793547419-501 - Limited - Disabled)
lamas (S-1-5-21-3376143671-3383002286-3793547419-1001 - Administrator - Enabled) => C:\Users\lamas
WDAGUtilityAccount (S-1-5-21-3376143671-3383002286-3793547419-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.007.20095 - Adobe Systems Incorporated)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 94.1.30.87 - Autoři prohlížeče Brave)
DeepL (HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\DeepL) (Version: 2.9.2501 - DeepL GmbH)
Dell Digital Delivery Services (HKLM-x32\...\{560DFD4A-23E2-45DD-A223-A4B3FA356913}) (Version: 4.0.92.0 - Dell Inc.)
Dell Mobile Connect Drivers (HKLM\...\{0B5978E6-D912-4E4F-B117-A164F68BC95C}) (Version: 3.0.9346 - Screenovate Technologies Ltd.)
Dell Power Manager Service (HKLM\...\{18469ED8-8C36-4CF7-BD43-0FC9B1931AF8}) (Version: 3.9.0 - Dell Inc.)
Dell SupportAssist (HKLM\...\{9EF0AEB0-9AD2-40E6-8667-D7520C508941}) (Version: 3.10.3.3 - Dell Inc.)
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM\...\{900D0BCD-0B86-4DAA-B639-89BE70449569}) (Version: 5.4.1.14954 - Dell Inc.) Hidden
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM-x32\...\{ec40a028-983b-4213-af2c-77ed6f6fe1d5}) (Version: 5.4.1.14954 - Dell Inc.)
Dell SupportAssist Remediation (HKLM\...\{795931D8-2EBF-4969-A678-4219B161F676}) (Version: 5.4.3.15135 - Dell Inc.) Hidden
Dell SupportAssist Remediation (HKLM-x32\...\{555298fa-14a9-48f2-a7a0-9602f31785da}) (Version: 5.4.3.15135 - Dell Inc.)
Dell Update for Windows 10 (HKLM\...\{41D2D254-D869-4CD8-B440-5DF49083C4BA}) (Version: 4.3.0 - Dell Inc.)
Dynamic Application Loader Host Interface Service (HKLM\...\{90BC69B6-C3DD-45E3-B2EE-354635A0329B}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
GameRanger (HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\GameRanger) (Version: - GameRanger Technologies)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 94.0.4606.71 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
IBM SPSS Statistics 25 (HKLM\...\{C2D1E17D-CB8A-4742-84FA-1DB5C6A1ABDD}) (Version: 25.0.0.0 - IBM Corp)
Intel Driver && Support Assistant (HKLM-x32\...\{BC82D1AD-802A-4733-BB90-A8E59AB8434A}) (Version: 21.5.33.3 - Intel) Hidden
Intel Software Package (HKLM-x32\...\{e1d93543-7ba0-4927-aa7f-09c5fc7f25df}) (Version: 8.7.10600.20700 - Intel) Hidden
Intel(R) Computing Improvement Program (HKLM\...\{88B98508-2D8F-46F1-90AD-557BE40C7067}) (Version: 2.4.07642 - Intel Corporation)
Intel(R) Dynamic Tuning (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.7.10600.20700 - Intel Corporation)
Intel(R) Dynamic Tuning Technology (HKLM-x32\...\{7a82309b-956d-4788-8207-25897660c3d6}) (Version: 8.7.10400.15556 - Intel) Hidden
Intel(R) Graphics Driver Software (HKLM-x32\...\{899f8bb6-99cd-4f33-a004-c70d9ec22260}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) Graphics Driver Software (HKLM-x32\...\{9454a0e6-0762-48ec-b153-2a75b252d1fb}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 2.2.1.377 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2110.15.0.2210 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{b09ce953-882c-4131-a693-2e1d73b1e50d}) (Version: 21.5.33.3 - Intel)
Intel® System Usage Report for gameplay.intel.com (HKLM-x32\...\{9eaf9956-0255-4764-87e4-2ccfc18920c6}) (Version: 2.0.1901 - Intel Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{C7BC60AB-23E3-4F47-8FBE-283937D010AA}) (Version: 2.1.2106.23002 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Microsoft 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 16.0.14430.20234 - Microsoft Corporation)
Microsoft 365 Apps pro velké organizace - cs-cz (HKLM\...\O365ProPlusRetail - cs-cz) (Version: 16.0.14430.20234 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.38 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 94.0.992.31 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 21.180.0905.0007 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\Teams) (Version: 1.4.00.26376 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B981965-2FBC-433C-B4B3-E183EE97CD29}) (Version: 2.83.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 90.0.2 (x64 cs)) (Version: 90.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 78.12.0 - Mozilla)
Mozilla Thunderbird 78.14.0 (x64 cs) (HKLM\...\Mozilla Thunderbird 78.14.0 (x64 cs)) (Version: 78.14.0 - Mozilla)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.0.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20234 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20234 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
OpenVPN 2.4.8-I602-Win10 (HKLM\...\OpenVPN) (Version: 2.4.8-I602-Win10 - OpenVPN Technologies, Inc.)
OptaneDowngradeGuard (HKLM\...\{86B0E6C1-32E0-42CC-BC4F-BF3C0730CECB}) (Version: 18.0.0.0 - Intel Corporation) Hidden
Pomocník s instalací Windows 11 (HKLM-x32\...\{115DF11E-4B4C-4EA9-9A79-00DB0C7EF02D}) (Version: 1.4.19041.1285 - Microsoft Corporation)
Qualcomm 11ac Wireless LAN&Bluetooth Installer (HKLM-x32\...\{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.10527 - Qualcomm)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9018.1 - Realtek Semiconductor Corp.)
RstDowngradeGuard (HKLM\...\{13C2A26E-7AD4-4D82-BB4F-DEA6E871B958}) (Version: 18.0.0.0 - Intel Corporation) Hidden
SmartByte Drivers and Services (HKLM\...\{9668B1BB-D0FE-4C0C-800C-B1555E069A62}) (Version: 3.1.940 - Název společnosti:)
TAP-Windows 9.24.2 (HKLM\...\TAP-Windows) (Version: 9.24.2 - OpenVPN Technologies, Inc.)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.4461 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\ZoomUMX) (Version: 5.3.2 (53291.1011) - Zoom Video Communications, Inc.)
Packages:
=========
Adobe Photoshop Express: Editor obrazů, úpravy, filtry, efekty, okraje -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobePhotoshopExpress_3.4.353.0_x64__ynb6jyjzte8ga [2021-07-19] (Adobe Inc.)
Canon Office Printer Utility -> C:\Program Files\WindowsApps\34791E63.CanonOfficePrinterUtility_12.7.0.0_x64__6e5tt8cgb93ep [2020-10-02] (Canon Inc.)
Dell CinemaColor -> C:\Program Files\WindowsApps\PortraitDisplays.DellCinemaColor_2.3.57.0_x64__2dgmkzkw4h30c [2021-07-30] (Portrait Displays)
Dell Customer Connect -> C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.3.0.0_x64__htrsf667h5kn2 [2021-08-10] (Dell Inc)
Dell Digital Delivery -> C:\Program Files\WindowsApps\DellInc.DellDigitalDelivery_4.0.92.0_x64__htrsf667h5kn2 [2021-08-25] (Dell Inc)
Dell Power Manager -> C:\Program Files\WindowsApps\DellInc.DellPowerManager_3.9.11.0_x64__htrsf667h5kn2 [2021-10-05] (Dell Inc)
Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.10.6.0_x64__htrsf667h5kn2 [2021-10-05] (Dell Inc)
Dell Update -> C:\Program Files\WindowsApps\DellInc.DellUpdate_4.3.12.0_x86__htrsf667h5kn2 [2021-08-03] (Dell Inc)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-04-05] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-09-13] (Microsoft Corporation)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2020-04-03] (Dropbox Inc.)
Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1020.0_x64__8j3eq9eme6ctt [2021-09-03] (INTEL CORP)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt [2021-10-05] (Facebook Inc) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation) [MS Ad]
Microsoft Teams -> C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft) [Startup Task]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.53.42632.0_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation) [Startup Task]
Microsoft.UI.Xaml.CBS -> C:\Windows\SystemApps\Microsoft.UI.Xaml.CBS_8wekyb3d8bbwe [2021-10-05] (Microsoft Platform Extensions)
My Dell -> C:\Program Files\WindowsApps\DellInc.MyDell_1.91.7.0_x64__htrsf667h5kn2 [2021-08-07] (Dell Inc)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2021-08-23] (Netflix, Inc.)
OneDrive -> C:\Program Files\Microsoft OneDrive\21.180.0905.0007 [2021-10-05] (0)
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt [2021-07-22] (INTEL CORP) [Startup Task]
Paint -> C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation)
Power Automate -> C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation)
Python 3.9 -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.9_3.9.2032.0_x64__qbz5n2kfra8p0 [2021-09-02] (Python Software Foundation)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-08-28] (Microsoft Corporation)
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2020-10-02] (Samsung Electronics Co. Ltd.)
SmartByte -> C:\Program Files\WindowsApps\RivetNetworks.SmartByte_3.1.995.0_x64__rh07ty8m5nkag [2021-08-16] (Rivet Networks LLC)
Speedtest by Ookla -> C:\Program Files\WindowsApps\Ookla.SpeedtestbyOokla_1.15.163.0_x64__43tkc6nmykmb6 [2021-10-03] (Ookla)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0 [2021-10-03] (Spotify AB) [Startup Task]
Translator -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2020-04-03] (Microsoft Corporation)
TranslucentTB -> C:\Program Files\WindowsApps\28017CharlesMilette.TranslucentTB_2021.4.0.0_x64__v826wp6bftszj [2021-10-05] (Charles Milette) [Startup Task]
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-10-05] (Twitter Inc.)
Waves MaxxAudio Pro for Dell 2019 -> C:\Program Files\WindowsApps\WavesAudio.MaxxAudioProforDell2019_2.0.54.0_x64__fh4rh281wavaa [2020-01-07] (Waves Audio)
WiFi Analyzer -> C:\Program Files\WindowsApps\19965MATTHAFNER.WIFIANALYZER_2.6.1.0_x64__gs5k5vmxr2ste [2021-08-02] (Matt Hafner)
Windows Notepad -> C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation)
Windows Terminal -> C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation) [Startup Task]
Windows Web Experience Pack -> C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20031.315.0_x64__cw5n1h2txyewy [2021-10-05] (Microsoft Windows)
Xbox -> C:\Program Files\WindowsApps\Microsoft.GamingApp_2105.900.24.0_x64__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation)
Zabezpečení Windows -> C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.22000.1.0_neutral__8wekyb3d8bbwe [2021-10-05] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3376143671-3383002286-3793547419-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\lamas\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21161.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3376143671-3383002286-3793547419-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\lamas\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\WINDOWS\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_21802104c9b3e45d\OptaneShellExt.dll [2021-03-17] (Intel(R) Rapid Storage Technology -> )
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\WINDOWS\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_21802104c9b3e45d\OptaneShellExt.dll [2021-03-17] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.180.0905.0007\FileSyncShell64.dll [2021-09-28] (Microsoft Corporation -> Microsoft Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2021-10-05 11:55 - 2021-10-05 11:55 - 054230016 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\addon.node
2021-10-05 11:55 - 2021-10-05 11:55 - 000763392 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\keytar.node
2021-10-05 11:55 - 2021-10-05 11:55 - 000750080 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\logging.node
2021-10-05 11:55 - 2021-10-05 11:55 - 001037824 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\spellchecker_win.node
2021-10-05 11:55 - 2021-10-05 11:55 - 001218560 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\systeminfo.node
2021-10-05 11:55 - 2021-10-05 11:55 - 000614912 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\windows.applicationmodel.node
2021-10-05 11:55 - 2021-10-05 11:55 - 000202240 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\windows.networking.pushnotifications.node
2021-10-05 11:55 - 2021-10-05 11:55 - 001144832 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\windows.storage.node
2021-10-05 11:55 - 2021-10-05 11:55 - 000681984 _____ () [File not signed] \\?\C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1240.4.118.0_x64__8xx8rvfyw5nnt\app\Archon\app\resources\app.asar.unpacked\build\windows.ui.notifications.node
2020-12-01 01:14 - 2020-12-01 01:14 - 001638912 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files\Dell\SupportAssistAgent\bin\x64\SQLite.Interop.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\nvdimm.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{53966cb1-4d46-4166-bf23-c522403cd495} => ""="ScmDisk"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nvdimm.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{53966cb1-4d46-4166-bf23-c522403cd495} => ""="ScmDisk"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://
www.msn.com/?pc=DCTE
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://
www.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-3376143671-3383002286-3793547419-1001 -> DefaultScope {AB93DFC2-045F-4F4B-932A-09AA92221FF3} URL =
SearchScopes: HKU\S-1-5-21-3376143671-3383002286-3793547419-1001 -> {AB93DFC2-045F-4F4B-932A-09AA92221FF3} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\sharepoint.com -> hxxps://ucnmuni-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2020-04-20 16:01 - 2020-04-20 16:09 - 000000506 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img19.jpg
DNS Servers: 147.251.6.10 - 147.251.4.33
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\StartupFolder: => "GameRanger.lnk"
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\StartupFolder: => "Poslat do aplikace OneNote.lnk"
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
HKU\S-1-5-21-3376143671-3383002286-3793547419-1001\...\StartupApproved\Run: => "Samsung DeX"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{DF8EA1ED-ACA0-439B-872D-209B4894A530}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{8E2ECAA9-75BF-45C2-A02F-18DF05EDA64D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{787DF416-35EC-4E48-8A30-22ADE10ECD5F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{37AAF221-B8F7-450C-8AE7-3A9292D15513}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{628561A8-5230-42CD-8902-1EA7C114BB5C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1E2CA783-234A-455F-95C8-04E98A3D6CDA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A1009C6F-674A-4B2D-9CF9-D7237ADCB610}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F7BC41BE-64EC-4A71-9935-42F69966CBD1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{431585BF-A50B-42EA-A748-B091B62F9A45}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9521962B-7EA3-44B0-ACB7-9387A0FB4E12}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.169.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{5F4CE184-728C-4C59-8DDB-959DEA18FB14}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{938F4FDC-1631-486D-956E-2A25087A594C}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{22707A19-5CE0-4B21-86DE-F5A25BD03414}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\94.0.992.31\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FDD17D8F-ABEB-4B40-ABBA-E9FF52024086}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\25\stats.exe (IBM -> IBM Corp.) [File not signed]
FirewallRules: [{04F4D7B3-3336-4610-8D4B-835BA4828C9E}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\25\stats.exe (IBM -> IBM Corp.) [File not signed]
FirewallRules: [{5E5EDFA7-249F-4E2B-8D54-0585D5F9395F}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\25\stats.com (IBM -> IBM Corp.) [File not signed]
FirewallRules: [{85B1D622-1450-4870-9821-2AC8B7D39725}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\25\WinWrapIDE.exe (IBM -> IBM Corp.) [File not signed]
FirewallRules: [{338CBE1F-3F1B-42C2-B7DA-308B7F09836B}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\25\stats.com (IBM -> IBM Corp.) [File not signed]
FirewallRules: [{8539728C-2348-43B9-9ED4-D5B9E75BC5F9}] => (Allow) C:\Program Files\IBM\SPSS\Statistics\25\WinWrapIDE.exe (IBM -> IBM Corp.) [File not signed]
FirewallRules: [{396C4446-8F87-4727-8CBA-31F5389AB30F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D5015870-A41F-441A-A460-31B17F3D9A5A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E8E31D1E-2AA5-4E03-9F4F-0A8F933707DC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C6030D3B-F545-4CAD-A2C9-8177EDEA6A9E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F72139C8-26E2-4AAF-B3DC-6736D20599BD}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.3.9803.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [{487E6031-DA3E-4F97-9785-0E884982B979}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.3.9803.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [{46BDAF38-2B2B-4024-807A-2A7693BC3406}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{E1231E67-4ED3-460A-9FDC-DDE9467F825E}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{ED154544-9B3C-4248-BC75-F93691E86D95}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{46A5DC10-44C4-4768-A33B-948B8E71B1F2}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{97CEBAA3-6B35-42A5-9632-A422FB2B30C0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9D25793F-48B8-43DF-9D84-76121F07AF89}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{20C4BDC7-3352-4B2D-BCD4-6A4B0D38679B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{513F147B-0669-4368-84DC-6E32F707CA8B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{943677B6-CB3B-471A-8232-B3633202E62D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{63B72462-4CA0-4978-8262-A271247BB8C3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{3D0D964E-927F-4D6B-8C40-930C3B8AAB6F}C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B1278C38-464B-4C9E-9CE6-C09A04C9897F}C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{375C42A3-8E60-43B7-A0CB-156074E4F272}C:\users\lamas\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\lamas\appdata\roaming\gameranger\gameranger\gameranger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
FirewallRules: [UDP Query User{DC5494FD-FBDC-4BDD-A498-BA5CE96D1ADA}C:\users\lamas\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\lamas\appdata\roaming\gameranger\gameranger\gameranger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
FirewallRules: [TCP Query User{7906EBF8-8972-4529-A2D3-67A72B18F322}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{B9AA09A8-8426-4730-AFBA-B46F0B0D5847}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{856E3A1A-3E52-40DF-A723-04B469A1087D}C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{E8582FFB-4086-4215-96B9-88A422027158}C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\lamas\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E7DF0DE-FE01-4F3C-B370-2C4BEECCEF4C}] => (Allow) C:\Users\lamas\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{F03BC4E9-1F6C-42B3-885B-9B49F7644EB2}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C89BE2A6-6EE7-447F-B57E-415C9141E306}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1C81B4A4-C6E1-4FE1-9B79-60B91B0C1A95}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:220.92 GB) (Free:41.59 GB) (19%)
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (10/06/2021 01:38:38 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (10/06/2021 01:32:36 PM) (Source: openvpnserv) (EventID: 0) (User: )
Description: Event-ID 0
Error: (10/05/2021 10:12:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RoundedTB.exe, verze: 1.0.0.0, časové razítko: 0xe50724bd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.22000.132, časové razítko: 0xf5a91e93
Kód výjimky: 0xc000041d
Posun chyby: 0x0013e7b2
ID chybujícího procesu: 0x3668
Čas spuštění chybující aplikace: 0x01d7ba21c6b2e7e5
Cesta k chybující aplikaci: C:\Tweaks\RoundedTB_R3\RoundedTB.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: f13be3c3-e570-4fc8-aaa5-bcd0a507188f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (10/05/2021 10:12:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RoundedTB.exe, verze: 1.0.0.0, časové razítko: 0xe50724bd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.22000.132, časové razítko: 0xf5a91e93
Kód výjimky: 0xe0434352
Posun chyby: 0x0013e7b2
ID chybujícího procesu: 0x3668
Čas spuštění chybující aplikace: 0x01d7ba21c6b2e7e5
Cesta k chybující aplikaci: C:\Tweaks\RoundedTB_R3\RoundedTB.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 6f255185-70d0-4b9f-aecf-327992f76304
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (10/05/2021 10:12:54 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: RoundedTB.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.OutOfMemoryException
na System.Windows.Media.Composition.DUCE+Channel.SyncFlush()
na System.Windows.Media.MediaContext.CompleteRender()
na System.Windows.Interop.HwndTarget.OnResize()
na System.Windows.Interop.HwndTarget.HandleMessage(MS.Internal.Interop.WindowMessage, IntPtr, IntPtr)
na System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.HwndSubclass.DefWndProcWrapper(IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.UnsafeNativeMethods.CallWindowProc(IntPtr, IntPtr, Int32, IntPtr, IntPtr)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
Error: (10/05/2021 10:12:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: MiniSearchHost.exe, verze: 421.21000.0.0, časové razítko: 0x6102fc94
Název chybujícího modulu: twinapi.appcore.dll, verze: 10.0.22000.132, časové razítko: 0xf9ab3e3e
Kód výjimky: 0xc000027b
Posun chyby: 0x000000000010a4f4
ID chybujícího procesu: 0x3bbc
Čas spuštění chybující aplikace: 0x01d7b9db6c7cda4c
Cesta k chybující aplikaci: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
Cesta k chybujícímu modulu: C:\Windows\System32\twinapi.appcore.dll
ID zprávy: 326b991c-2218-47d7-a211-75dcdee5bc14
Úplný název chybujícího balíčku: MicrosoftWindows.Client.CBS_1000.22000.194.0_x64__cw5n1h2txyewy
ID aplikace související s chybujícím balíčkem: MiniSearchUI
Error: (10/05/2021 09:35:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program googleChatElectron.exe verze 2.3.0.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 40b4
Čas spuštění: 01d7ba1f747f5ec6
Čas ukončení: 4294967295
Cesta k aplikaci: C:\Program Files\WindowsApps\37781ZooInc.GChatforDesktop_1.0.9.0_x64__xb7zxn0ry2ahe\app\googleChatElectron.exe
ID hlášení: 672e998e-d3e4-4214-93c1-6b51b7f60ade
Úplný název balíčku s chybou: 37781ZooInc.GChatforDesktop_1.0.9.0_x64__xb7zxn0ry2ahe
ID aplikace relativní podle balíčku s chybou: googleChatElectron
Typ zablokování: Quiesce
Error: (10/05/2021 12:47:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe verze 10.0.22000.120 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 1c40
Čas spuštění: 01d7b9d4372b8a3c
Čas ukončení: 0
Cesta k aplikaci: C:\Windows\explorer.exe
ID hlášení: 4bce047e-66f5-4ca4-9b97-df254a9ec158
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Cross-thread
System errors:
=============
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Dell Hardware Support byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Dell Data Vault Collector byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Driver & Support Assistant Updater byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Driver & Support Assistant byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (10/06/2021 06:54:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Energy Server Service queencreek byla neočekávaně ukončena. Tento stav nastal již 1krát.
Windows Defender:
================Event[0]
Date: 2021-10-06 18:47:16
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=1
Název: PUA:Win32/Seznam
Závažnost: Vážné
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\OneDriveTemp\S-1-5-21-3376143671-3383002286-3793547419-1001\83B617378ACAA294!103-83B617378ACAA294!34051-83B617378ACAA294!32746-a4ff5f23d48ed826925beee5b6aec78df81e946a.temp
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: MICHALZICH\lamas
Název procesu: C:\Program Files\Microsoft OneDrive\OneDrive.exe
Verze bezpečnostních informací: AV: 1.349.2033.0, AS: 1.349.2033.0, NIS: 1.349.2033.0
Verze modulu: AM: 1.1.18600.4, NIS: 1.1.18600.4
Event[1]
Date: 2021-10-06 18:37:04
Description:
N/A
Event[2]
Date: 2021-10-06 18:27:28
Description:
N/A
Event[3]
Date: 2021-10-06 18:17:12
Description:
N/A
Event[4]
Date: 2021-10-06 18:07:04
Description:
N/A
==================== Memory info ===========================
BIOS: Dell Inc. 1.17.0 07/27/2021
Motherboard: Dell Inc. 04N9HV
Processor: Intel(R) Core(TM) i5-1035G1 CPU @ 1.00GHz
Percentage of memory in use: 87%
Total physical RAM: 7959.47 MB
Available physical RAM: 989.73 MB
Total Virtual: 23319.47 MB
Available Virtual: 12796.89 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:220.92 GB) (Free:41.59 GB) NTFS
\\?\Volume{97ae6464-aadf-4cc3-9575-24f7ecdebe59}\ () (Fixed) (Total:1.07 GB) (Free:0.08 GB) NTFS
\\?\Volume{04f176fb-f1e2-463e-9ae3-c387df39b9d4}\ (IMAGE) (Fixed) (Total:13.88 GB) (Free:0.15 GB) NTFS
\\?\Volume{7628162a-900c-4052-b2db-5ae32c638466}\ (DELLSUPPORT) (Fixed) (Total:1.72 GB) (Free:0.83 GB) NTFS
\\?\Volume{7a9cb0af-6ad2-4051-993e-7fe1d39e629b}\ (ESP) (Fixed) (Total:0.73 GB) (Free:0.64 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 1F5EF3A0)
Partition: GPT.
==================== End of Addition.txt =======================