Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Totalne pomaly NTB

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Totalne pomaly NTB

#1 Příspěvek od jacho6380 »

Dobry den, syn ma totalne zasekany Notebook, mozem poprosit pomoc?

Logfile of random's system information tool 1.10 (written by random/random)
Run by 42191 at 2022-02-12 09:24:20
Microsoft Windows 11 Home
System drive C: has 4 GB (7%) free of 58 GB
Total RAM: 3467 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:24:26, on 12. 2. 2022
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.22000.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe
C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe
C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe
C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\trend micro\42191.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\98.0.1108.50\BHO\ie_to_edge_bho.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\42191\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [com.squirrel.Teams.Teams] C:\Users\42191\AppData\Local\Microsoft\Teams\Update.exe --processStart "Teams.exe" --process-start-args "--system-initiated"
O4 - HKCU\..\Run: [EpicGamesLauncher] "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
O4 - HKCU\..\Run: [Disig Web Signer] C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlansp_c.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\System32\DriverStore\FileRepository\u0370421.inf_amd64_8f365dc2ded16925\B370101\atiesrxx.exe
O23 - Service: AMD Log Utility - Unknown owner - C:\WINDOWS\System32\amdlogsr.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\System32\drivers\AdminService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_7da8a - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @oem21.inf,%ServiceDisplayName%;Dolby DAX API Service (DolbyDAXAPI) - Dolby Laboratories - C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Epic Online Services (EpicOnlineServices) - Epic Games, Inc. - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Fortemedia APO Control Service (FMAPOService) - Unknown owner - C:\WINDOWS\System32\FMService64.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files\Google\Chrome\Application\98.0.4758.82\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Print Scan Doctor Service (HPPrintScanDoctorService) - HP Inc. - C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
O23 - Service: @oem4.inf,%ImcSvcDisplayName%;System Interface Foundation Service (ImControllerService) - Lenovo Group Ltd. - C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LenovoVantageService - Lenovo Group Ltd. - C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe
O23 - Service: @oem61.inf,%ServiceDisplayName%;mcafeeintegrationservice (mcafeeintegrationservice) - McAfee - C:\WINDOWS\System32\DriverStore\FileRepository\mcafeeintegrationextension.inf_amd64_22df759ce010d03d\mcafeeintegrationservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: Qualcomm Atheros WLAN Driver Service (QcomWlanSrv) - Unknown owner - C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Universal Service (RtkAudioUniversalService) - Unknown owner - C:\WINDOWS\System32\RtkAudUService64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTrap) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile USB Connectivity Launcher (ss_conn_launcher_service) - Unknown owner - C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12192 bytes

======Listing Processes======








winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
"fontdrvhost.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-923f4467-4f7c-49d8-84c5-2582d5199b80 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-0d0d3ac0-059e-4d0d-978c-563c6dfdab25 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-95af1c3d-555b-4d49-aebb-18e964229a24 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-916d2232-8bea-4477-8165-f6c436f052c4 -LifetimeId:936cedd4-0ec0-4454-9fd3-31414fbe6e6f -DeviceGroupId: -HostArg:0
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k netprofm -p
C:\WINDOWS\system32\svchost.exe -k osprivacy -p
C:\WINDOWS\system32\svchost.exe -k NetworkService -p
C:\WINDOWS\System32\DriverStore\FileRepository\u0370421.inf_amd64_8f365dc2ded16925\B370101\atiesrxx.exe
C:\WINDOWS\System32\amdlogsr.exe
dashost.exe {74863d67-4ea3-4f15-aa8667c4cf0dabc3}
atieclxx

C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k appmodel -p
C:\WINDOWS\system32\AUDIODG.EXE 0x000000000000049C
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p
C:\WINDOWS\System32\drivers\AdminService.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService -p
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe
C:\WINDOWS\System32\FMService64.exe
"C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe"
C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe"
C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe
"C:\WINDOWS\System32\RtkAudUService64.exe"

C:\WINDOWS\System32\svchost.exe -k netsvcs
AggregatorHost.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c

"C:\WINDOWS\System32\DriverStore\FileRepository\DAX3_S~1.INF\\DAX3API.exe" -capturestream
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}


sihost.exe
C:\WINDOWS\system32\svchost.exe -k BthAppGroup -p
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"ctfmon.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" VantageCoreAddin C:\ProgramData\Lenovo\Vantage\Addins\\VantageCoreAddin\1.0.0.28\VantageCoreAddin.dll 0e307c63268946489d6cf11418a5f6cd 5b580553-851f-4449-a0f8-5594846bd697
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" DeviceSettingsSystemAddin C:\ProgramData\Lenovo\Vantage\Addins\\DeviceSettingsSystemAddin\1.0.1.58\DeviceSettingsSystemAddin.dll 18c0f41122394a64b3eede85ec0ee2b2 5b580553-851f-4449-a0f8-5594846bd697
C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" LenovoServiceBridgeAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoServiceBridgeAddin\1.0.0.54\LenovoServiceBridgeAddin.dll 2ac159aa3967480984eb9e3ca803380a 5b580553-851f-4449-a0f8-5594846bd697
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.Amd64.exe" LenovoBoostAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoBoostAddin\1.0.0.32\LenovoBoostAddin.dll 4acc021f2b8442c59640372a64595e13 5b580553-851f-4449-a0f8-5594846bd697
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.Amd64.exe" LenovoBoostSystemAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoBoostSystemAddin\1.0.0.32\LenovoBoostSystemAddin.dll d1a63d1cdef54598b6ede4205ccd1deb 5b580553-851f-4449-a0f8-5594846bd697
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21121.243.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXjd5de1g66v206tj52m9d0dtpppx4cgpn.mca
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.x86.exe" DeviceSettingsHeartbeatAddin C:\ProgramData\Lenovo\Vantage\Addins\\DeviceSettingsHeartbeatAddin\1.0.0.25\DeviceSettingsHeartbeatAddin.dll eba99358b7cb40c9b7d80a1b02f5c5e8 5b580553-851f-4449-a0f8-5594846bd697
"C:\Windows\System32\SecurityHealthSystray.exe"

"C:\Windows\System32\RtkAudUService64.exe" -background
"C:\Users\42191\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
"C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe"
-name 5831dd19-9b02-4312-8387-fc14fcaf0550 -runas -pluginName IdeaNotebookPlugin -pluginVersion 1.2.78.16
"C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\Lenovo.Vantage.AddinHost.exe" LenovoSecurityAddin C:\ProgramData\Lenovo\Vantage\Addins\\LenovoSecurityAddin\1.0.0.31\LenovoSecurityAddin.dll 9f0130fa635a465bb5a13c6aea3268ee 5b580553-851f-4449-a0f8-5594846bd697
-name 80df6e31-e100-4397-923f-cc53638e1c7d -runas -pluginName LenovoVisionProtectionPlugin -pluginVersion 1.2.98.14
"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --system-initiated
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe"
"C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/Win64/EpicWebHelper.exe" --type=gpu-process --field-trial-handle=1996,7108341891957599892,15977138843819679373,131072 --enable-features=CastMediaRouteProvider --disable-features=OutOfBlinkCors --no-sandbox --locales-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources/locales" --log-file=C:/Users/42191/AppData/Local/EpicGamesLauncher/Saved/Logs/cef3.log --log-severity=warning --product-version="EpicGamesLauncher/13.1.8-18918412+++Portal+Release-Live UnrealEngine/4.23.0-18918412+++Portal+Release-Live Chrome/84.0.4147.38" --resources-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources" --lang=en --gpu-preferences=MAAAAAAAAADgACAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --log-file=C:/Users/42191/AppData/Local/EpicGamesLauncher/Saved/Logs/cef3.log --mojo-platform-channel-handle=2012 /prefetch:2
"C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10028.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe" atlogon
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe" --type=crashpad-handler "--user-data-dir=C:\Users\42191\AppData\Roaming\Microsoft\Skype for Store" /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\42191\AppData\Roaming\Microsoft\Skype for Store\Crashpad" --url=appcenter://generic?aid=a8902fe7-ef45-455c-8513-5e56d48e36fd&iid=40a372c7-2d03-4eac-7d13-70a5f1f0316e&uid=40a372c7-2d03-4eac-7d13-70a5f1f0316e --annotation=_companyName=Skype --annotation=_productName=skype-preview --annotation=_version=8.79.0.95 --annotation=prod=Electron --annotation=ver=13.6.0 --initial-client-data=0x694,0x698,0x69c,0x690,0x6a0,0x75a7a90,0x75a7aa0,0x75a7aac
"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --type=gpu-process --field-trial-handle=1528,11652031473842646909,2830499240817006615,131072 --enable-features=ContextBridgeMutability,WebComponentsV0Enabled,WinUseBrowserSpellChecker,WinUseHybridSpellChecker --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1584 /prefetch:2
"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1528,11652031473842646909,2830499240817006615,131072 --enable-features=ContextBridgeMutability,WebComponentsV0Enabled,WinUseBrowserSpellChecker,WinUseHybridSpellChecker --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=sk --service-sandbox-type=network --enable-wer --ms-teams-less-cors=522133263 --mojo-platform-channel-handle=2260 /prefetch:8
"C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.4001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe"
"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --type=renderer --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --field-trial-handle=1528,11652031473842646909,2830499240817006615,131072 --enable-features=ContextBridgeMutability,WebComponentsV0Enabled,WinUseBrowserSpellChecker,WinUseHybridSpellChecker --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=sk --enable-wer --ms-teams-less-cors=522133263 --app-user-model-id=com.squirrel.Teams.Teams --app-path="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar" --enable-sandbox --native-window-open --preload="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar\lib\renderer\notifications\preload_notifications.js" --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2976 /prefetch:1 --msteams-process-type=notificationsManager
"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --type=renderer --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --field-trial-handle=1528,11652031473842646909,2830499240817006615,131072 --enable-features=ContextBridgeMutability,WebComponentsV0Enabled,WinUseBrowserSpellChecker,WinUseHybridSpellChecker --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=sk --enable-wer --ms-teams-less-cors=522133263 --app-user-model-id=com.squirrel.Teams.Teams --app-path="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar" --webview-tag --enable-sandbox --native-window-open --preload="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar\lib\renderer\preload.js" --world-safe-execute-javascript --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1 --msteams-process-type=mainWindow
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1528,11652031473842646909,2830499240817006615,131072 --enable-features=ContextBridgeMutability,WebComponentsV0Enabled,WinUseBrowserSpellChecker,WinUseHybridSpellChecker --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=sk --service-sandbox-type=audio --enable-wer --ms-teams-less-cors=522133263 --mojo-platform-channel-handle=3172 /prefetch:8
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe" --type=gpu-process --field-trial-handle=2248,10855228625506695052,6172956994334682983,131072 --enable-features=WinUseBrowserSpellChecker,WinUseHybridSpellChecker,WinrtGeolocationImplementation --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\42191\AppData\Roaming\Microsoft\Skype for Store" --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=2264 /prefetch:2
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2248,10855228625506695052,6172956994334682983,131072 --enable-features=WinUseBrowserSpellChecker,WinUseHybridSpellChecker,WinrtGeolocationImplementation --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=sk --service-sandbox-type=none --user-data-dir="C:\Users\42191\AppData\Roaming\Microsoft\Skype for Store" --mojo-platform-channel-handle=2504 /prefetch:8
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe" --type=renderer --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --ms-disable-indexeddb-transaction-timeout --field-trial-handle=2248,10855228625506695052,6172956994334682983,131072 --enable-features=WinUseBrowserSpellChecker,WinUseHybridSpellChecker,WinrtGeolocationImplementation --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-compositing --lang=sk --user-data-dir="C:\Users\42191\AppData\Roaming\Microsoft\Skype for Store" --app-user-model-id=Microsoft.Skype.SkypeDesktop --app-path="C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2876 /prefetch:1 --skype-process-type=Main --skype-window-id=__MAIN_ROOT_VIEW_ID__
"C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10028.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe"
C:\WINDOWS\uus\AMD64\MoUsoCoreWorker.exe
"C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/Win64/EpicWebHelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1996,7108341891957599892,15977138843819679373,131072 --enable-features=CastMediaRouteProvider --disable-features=OutOfBlinkCors --lang=en-US --service-sandbox-type=network --no-sandbox --locales-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources/locales" --log-file=C:/Users/42191/AppData/Local/EpicGamesLauncher/Saved/Logs/cef3.log --log-severity=warning --product-version="EpicGamesLauncher/13.1.8-18918412+++Portal+Release-Live UnrealEngine/4.23.0-18918412+++Portal+Release-Live Chrome/84.0.4147.38" --resources-dir-path="C:/Program Files (x86)/Epic Games/Launcher/Engine/Binaries/ThirdParty/CEF3/Win64/Resources" --lang=en --log-file=C:/Users/42191/AppData/Local/EpicGamesLauncher/Saved/Logs/cef3.log --mojo-platform-channel-handle=3396 /prefetch:8

"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --type=renderer --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --field-trial-handle=1528,11652031473842646909,2830499240817006615,131072 --enable-features=ContextBridgeMutability,WebComponentsV0Enabled,WinUseBrowserSpellChecker,WinUseHybridSpellChecker --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=sk --enable-wer --ms-teams-less-cors=522133263 --app-user-model-id=com.squirrel.Teams.Teams --app-path="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar" --enable-sandbox --native-window-open --preload="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar\lib\renderer\experienceRenderer\preload_webview.js" --background-color=#fff --guest-instance-id=5 --enable-blink-features --disable-blink-features --hidden-page --node-integration-in-subframes --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2160 /prefetch:1 --msteams-process-type=experience-renderer
"C:\Users\42191\AppData\Local\Microsoft\Teams\current\Teams.exe" --type=renderer --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --field-trial-handle=1528,11652031473842646909,2830499240817006615,131072 --enable-features=ContextBridgeMutability,WebComponentsV0Enabled,WinUseBrowserSpellChecker,WinUseHybridSpellChecker --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=sk --enable-wer --ms-teams-less-cors=522133263 --app-user-model-id=com.squirrel.Teams.Teams --app-path="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar" --no-sandbox --no-zygote --preload="C:\Users\42191\AppData\Local\Microsoft\Teams\current\resources\app.asar\lib\pluginhost\preload.js" --context-isolation --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4316 /prefetch:1 --msteams-process-type=pluginHost
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe"
C:\WINDOWS\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
"C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe"


-name 51a71d30-ec86-4ad4-ab3d-033528e5d9a1 -runas -pluginName DolbyAudioPlugin -pluginVersion 1.2.240.5
-name da82cff7-2562-402f-9c87-1a87f68d190d -runas -pluginName GenericMessagingPlugin -pluginVersion 3.2.0.57
"C:\WINDOWS\Lenovo\iMController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe" -name 5f9b8515-d819-4a8d-980d-148b59bcb8ff -runas SYSTEM -pluginName GenericTelemetryPlugin -pluginVersion 2.2.30.0
"C:\WINDOWS\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe" -name eee60d8c-0be3-4bd8-b34e-09ab6c83c690 -runas SYSTEM -pluginName LenovoAppScenarioPluginSystem -pluginVersion 1.2.190.5
"C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.4001.0_x64__8wekyb3d8bbwe\GamingServices.exe"
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy\mcafee-security.exe" -ServerName:App.AppX70z311bjdb1xmz7zp8wfg7gxg7f9v17f.mca
%systemroot%\system32\MoNotificationUx.exe /NotificationType Reboot_Engaged /FormFactor Passive /Timeout 0
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy\Win32\mcafee-security-ft.exe" /InvokerPRAID: App
"C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\Widgets.exe" -ServerName:Microsoft.Windows.DashboardServer
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files\Google\Chrome\Application\chrome.exe"
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\42191\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\42191\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\42191\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=97.0.4692.99 --initial-client-data=0xf0,0xf4,0xf8,0xcc,0xfc,0x7ffc0870a850,0x7ffc0870a860,0x7ffc0870a870
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAIAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1652 /prefetch:2
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --lang=sk --service-sandbox-type=none --mojo-platform-channel-handle=2000 /prefetch:8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --lang=sk --service-sandbox-type=utility --mojo-platform-channel-handle=2088 /prefetch:8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --lang=sk --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=8 --launch-time-ticks=451762750 --mojo-platform-channel-handle=4432 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --lang=sk --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=29 --launch-time-ticks=573002016 --mojo-platform-channel-handle=2792 /prefetch:1
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --lang=sk --service-sandbox-type=audio --mojo-platform-channel-handle=6308 /prefetch:8
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted -p
-name ac57fea0-26f5-4dae-b934-0b8f6ae896dc -runas -pluginName GenericCorePlugin -pluginVersion 1.3.4.4
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --lang=sk --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=106 --launch-time-ticks=1027597260 --mojo-platform-channel-handle=9900 /prefetch:1
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.43\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Widgets.exe --webview-exe-version=321.14700.0.0 --user-data-dir="C:\Users\42191\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disk-cache-size=52428800 --lang=sk-SK --mojo-named-platform-channel-pipe=5344.4088.739264755117398824
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.43\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\42191\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\42191\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=98.0.4758.80 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.43\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=98.0.1108.43 --initial-client-data=0xfc,0x100,0x104,0xd8,0x10c,0x7ffc08914cc0,0x7ffc08914cd0,0x7ffc08914ce0
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.43\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\42191\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=321.14700.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1960 --field-trial-handle=1992,9166045675150128327,3105450883253473483,131072 /prefetch:2
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.43\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=sk --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\42191\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=321.14700.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2060 --field-trial-handle=1992,9166045675150128327,3105450883253473483,131072 /prefetch:3
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.43\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=sk --service-sandbox-type=utility --noerrdialogs --user-data-dir="C:\Users\42191\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=321.14700.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2404 --field-trial-handle=1992,9166045675150128327,3105450883253473483,131072 /prefetch:8
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.43\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\42191\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=Widgets.exe --webview-exe-version=321.14700.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-client-side-phishing-detection --display-capture-permissions-policy-allowed --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc" --lang=sk --device-scale-factor=1.5 --num-raster-threads=1 --renderer-client-id=5 --launch-time-ticks=1066133359 --mojo-platform-channel-handle=3268 --field-trial-handle=1992,9166045675150128327,3105450883253473483,131072 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1696,7547935674476676959,17471816099498032606,131072 --lang=sk --service-sandbox-type=service --mojo-platform-channel-handle=7180 /prefetch:8
"C:\Users\42191\OneDrive\Počítač\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\98.0.1108.50\BHO\ie_to_edge_bho_64.dll [2022-02-10 530832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2021-06-27 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2021-06-27 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\98.0.1108.50\BHO\ie_to_edge_bho.dll [2022-02-10 432016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-02 154944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\WINDOWS\system32\SecurityHealthSystray.exe [2021-06-05 266240]
"RtkAudUService"=C:\WINDOWS\System32\RtkAudUService64.exe [2020-08-21 1140456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\42191\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2022-01-26 2593128]
"com.squirrel.Teams.Teams"=C:\Users\42191\AppData\Local\Microsoft\Teams\Update.exe [2021-12-16 2459304]
"EpicGamesLauncher"=C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [2022-02-10 33648608]
"Disig Web Signer"=C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe [2021-02-04 254080]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcCtnrSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\nvdimm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{53966cb1-4d46-4166-bf23-c522403cd495}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsQuic]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcCtnrSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nvdimm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{53966cb1-4d46-4166-bf23-c522403cd495}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"mixer1"=wdmaud.drv
"wave1"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave2"=wdmaud.drv
"aux1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave3"=wdmaud.drv
"aux2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave4"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.inf - open -
.inf - install -
.ini - open -
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.txt - open -

======List of files/folders created in the last 1 month======

2022-02-12 09:24:20 ----D---- C:\rsit
2022-02-12 09:24:20 ----D---- C:\Program Files\trend micro
2022-02-12 09:22:11 ----D---- C:\AdwCleaner
2022-02-12 09:04:05 ----D---- C:\WINDOWS\Panther
2022-02-11 22:33:27 ----HD---- C:\$WinREAgent
2022-02-10 19:00:49 ----A---- C:\WINDOWS\system32\RsDMFT64.dll
2022-02-10 19:00:49 ----A---- C:\WINDOWS\system32\RsDMFT_Assets.dll
2022-02-09 09:18:19 ----D---- C:\Users\42191\AppData\Roaming\vlc
2022-02-07 00:17:40 ----D---- C:\ProgramData\Microsoft OneDrive
2022-02-07 00:16:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2022-02-07 00:14:39 ----SHD---- C:\ProgramData\Templates
2022-02-07 00:14:39 ----SHD---- C:\ProgramData\Start Menu
2022-02-07 00:14:39 ----SHD---- C:\ProgramData\Documents
2022-02-07 00:14:39 ----SHD---- C:\ProgramData\Desktop
2022-02-07 00:14:39 ----SHD---- C:\ProgramData\Application Data
2022-02-07 00:09:42 ----ASH---- C:\hiberfil.sys
2022-02-07 00:08:07 ----SD---- C:\Users\42191\AppData\Roaming\Microsoft
2022-02-07 00:07:24 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2022-02-07 00:06:45 ----D---- C:\WINDOWS\system32\SleepStudy
2022-02-07 00:06:44 ----ASH---- C:\swapfile.sys
2022-02-07 00:06:44 ----ASH---- C:\pagefile.sys
2022-02-07 00:06:44 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-07 00:06:43 ----D---- C:\WINDOWS\Prefetch
2022-02-07 00:06:17 ----D---- C:\Windows.old
2022-02-07 00:02:15 ----AS---- C:\WINDOWS\bootstat.dat
2022-02-07 00:01:31 ----D---- C:\WINDOWS\system32\Microsoft
2022-02-07 00:01:31 ----D---- C:\WINDOWS\ServiceProfiles
2022-02-06 23:52:15 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2022-02-06 23:52:15 ----A---- C:\WINDOWS\system32\poqexec.exe

======List of files/folders modified in the last 1 month======

2022-02-12 09:24:20 ----RD---- C:\Program Files
2022-02-12 09:21:48 ----D---- C:\WINDOWS\Temp
2022-02-12 09:20:28 ----D---- C:\WINDOWS\AppReadiness
2022-02-12 09:20:17 ----HD---- C:\Program Files\WindowsApps
2022-02-12 09:20:13 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2022-02-12 09:12:15 ----D---- C:\WINDOWS\System32
2022-02-12 09:12:15 ----D---- C:\WINDOWS\INF
2022-02-12 09:11:22 ----D---- C:\WINDOWS\system32\config
2022-02-12 09:11:16 ----D---- C:\Program Files (x86)\Google
2022-02-12 09:11:00 ----SHDC---- C:\WINDOWS\Installer
2022-02-12 09:09:23 ----D---- C:\WINDOWS\system32\sru
2022-02-12 09:09:20 ----D---- C:\WINDOWS\CbsTemp
2022-02-12 09:09:13 ----D---- C:\WINDOWS\WinSxS
2022-02-12 09:08:59 ----RD---- C:\Program Files (x86)
2022-02-12 09:08:16 ----D---- C:\WINDOWS\SystemTemp
2022-02-12 09:08:13 ----D---- C:\WINDOWS\system32\DriverStore
2022-02-12 09:05:47 ----D---- C:\WINDOWS\Logs
2022-02-12 09:04:05 ----D---- C:\Windows
2022-02-12 09:04:00 ----D---- C:\WINDOWS\system32\LogFiles
2022-02-12 09:03:58 ----D---- C:\WINDOWS\ServiceState
2022-02-12 09:03:56 ----ASH---- C:\DumpStack.log.tmp
2022-02-12 08:59:34 ----D---- C:\Users\42191\AppData\Roaming\discord
2022-02-11 22:51:41 ----RD---- C:\WINDOWS\Microsoft.NET
2022-02-11 20:32:58 ----A---- C:\WINDOWS\system32\xgameruntime.dll
2022-02-11 20:32:57 ----A---- C:\WINDOWS\system32\gamingtcuihelpers.dll
2022-02-11 20:32:47 ----A---- C:\WINDOWS\system32\gamingservicesproxy.dll
2022-02-11 20:32:46 ----A---- C:\WINDOWS\system32\gameplatformservices.dll
2022-02-11 20:32:46 ----A---- C:\WINDOWS\system32\gamemodcontrol.exe
2022-02-11 20:32:46 ----A---- C:\WINDOWS\system32\gamelaunchhelper.dll
2022-02-11 20:32:46 ----A---- C:\WINDOWS\system32\gameconfighelper.dll
2022-02-11 20:30:25 ----D---- C:\WINDOWS\system32\MRT
2022-02-11 20:30:09 ----AC---- C:\WINDOWS\system32\MRT.exe
2022-02-11 17:14:44 ----D---- C:\WINDOWS\system32\drivers\UMDF
2022-02-11 17:14:38 ----D---- C:\WINDOWS\SysWOW64
2022-02-11 17:14:38 ----D---- C:\WINDOWS\system32\drivers
2022-02-11 13:44:03 ----D---- C:\WINDOWS\system32\WDI
2022-02-11 11:25:25 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2022-02-11 11:20:56 ----D---- C:\WINDOWS\system32\Tasks
2022-02-11 11:18:02 ----RD---- C:\Users
2022-02-10 19:00:51 ----D---- C:\WINDOWS\system32\catroot2
2022-02-10 17:51:09 ----D---- C:\WINDOWS\system32\drivers\wd
2022-02-09 07:07:15 ----D---- C:\WINDOWS\system32\Logs
2022-02-09 07:07:15 ----D---- C:\Program Files\Microsoft Update Health Tools
2022-02-07 00:32:41 ----D---- C:\ProgramData\Packages
2022-02-07 00:32:11 ----RD---- C:\WINDOWS\PrintDialog
2022-02-07 00:26:07 ----D---- C:\WINDOWS\servicing
2022-02-07 00:17:40 ----HD---- C:\ProgramData
2022-02-07 00:16:19 ----SD---- C:\ProgramData\Microsoft
2022-02-07 00:14:45 ----D---- C:\WINDOWS\system32\oobe
2022-02-07 00:14:29 ----D---- C:\WINDOWS\SoftwareDistribution
2022-02-07 00:14:26 ----D---- C:\WINDOWS\Tasks
2022-02-07 00:14:25 ----D---- C:\Program Files\Windows Defender
2022-02-07 00:09:14 ----D---- C:\Program Files\Common Files\microsoft shared
2022-02-07 00:09:11 ----RD---- C:\WINDOWS\assembly
2022-02-07 00:07:42 ----D---- C:\WINDOWS\system32\dolbyaposvc
2022-02-07 00:07:25 ----D---- C:\WINDOWS\appcompat
2022-02-07 00:07:21 ----D---- C:\WINDOWS\debug
2022-02-07 00:07:08 ----SHD---- C:\Recovery
2022-02-07 00:07:04 ----D---- C:\WINDOWS\system32\wbem
2022-02-07 00:06:27 ----D---- C:\WINDOWS\system32\WinBioDatabase
2022-02-07 00:06:26 ----RSD---- C:\WINDOWS\Fonts
2022-02-07 00:06:26 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2022-02-07 00:06:25 ----D---- C:\WINDOWS\SYSWOW64\drivers
2022-02-07 00:06:25 ----D---- C:\WINDOWS\system32\spool
2022-02-07 00:06:25 ----D---- C:\WINDOWS\system32\Samsung
2022-02-07 00:06:25 ----D---- C:\WINDOWS\system32\drivers\etc
2022-02-07 00:06:24 ----D---- C:\WINDOWS\system32\Recovery
2022-02-07 00:06:24 ----D---- C:\WINDOWS\system32\MsDtc
2022-02-07 00:06:24 ----D---- C:\Program Files\Common Files
2022-02-07 00:06:24 ----D---- C:\Program Files (x86)\Microsoft.NET
2022-02-07 00:06:24 ----D---- C:\Program Files (x86)\Microsoft
2022-02-07 00:06:24 ----D---- C:\Program Files (x86)\Common Files
2022-02-07 00:06:15 ----D---- C:\WINDOWS\Setup
2022-02-07 00:06:09 ----D---- C:\ProgramData\USOPrivate
2022-02-07 00:03:04 ----D---- C:\WINDOWS\system32\AMD
2022-02-07 00:03:02 ----D---- C:\WINDOWS\Lenovo
2022-02-07 00:00:28 ----SD---- C:\WINDOWS\system32\en-US
2022-02-07 00:00:19 ----D---- C:\WINDOWS\OCR
2022-02-06 23:58:12 ----SD---- C:\WINDOWS\SYSWOW64\F12
2022-02-06 23:58:12 ----SD---- C:\WINDOWS\system32\F12
2022-02-06 23:58:12 ----D---- C:\WINDOWS\SYSWOW64\WCN
2022-02-06 23:58:12 ----D---- C:\WINDOWS\SYSWOW64\en-US
2022-02-06 23:58:12 ----D---- C:\WINDOWS\SYSWOW64\drivers\en-US
2022-02-06 23:58:12 ----D---- C:\WINDOWS\system32\WCN
2022-02-06 23:58:12 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2022-02-06 23:58:12 ----D---- C:\WINDOWS\system32\migwiz
2022-02-06 23:58:11 ----D---- C:\WINDOWS\system32\en
2022-02-06 23:58:11 ----D---- C:\WINDOWS\system32\drivers\en-US
2022-02-06 23:58:11 ----D---- C:\WINDOWS\en-US
2022-02-06 23:58:11 ----D---- C:\Program Files\Windows Photo Viewer
2022-02-06 23:58:11 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2022-02-06 23:58:11 ----D---- C:\Program Files (x86)\Windows Defender
2022-01-28 20:04:18 ----A---- C:\WINDOWS\system32\ImController.InfInstaller.exe
2022-01-28 20:04:16 ----A---- C:\WINDOWS\system32\WudfUpdate_02000.dll
2022-01-28 20:04:16 ----A---- C:\WINDOWS\system32\ImController.CoInstaller.dll
2022-01-28 20:03:26 ----A---- C:\WINDOWS\system32\iMDriverHelper.dll
2022-01-26 09:42:28 ----D---- C:\Program Files\Microsoft Office

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdpsp;@oem45.inf,%amdpsp.SVCDESC%;AMD PSP Service; C:\WINDOWS\System32\drivers\amdpsp.sys [2020-03-24 135184]
R0 IntelPMT;@intelpmt.inf,%IntelPMT.SVCDESC%;Intel(R) Platform Monitoring Technology Service; C:\WINDOWS\System32\drivers\IntelPMT.sys [2021-06-05 74224]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2021-06-05 82256]
R0 PRM;@prm.inf,%PRM.SvcDesc%;Microsoft PRM Driver; C:\WINDOWS\System32\DriverStore\FileRepository\prm.inf_amd64_7fc9bb8ba2b73803\PRM.sys [2021-06-05 61752]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2021-06-05 77824]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2021-06-05 106808]
R1 CimFS;CimFS; C:\WINDOWS\system32\drivers\CimFS.sys [2021-06-05 155976]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2021-06-05 86016]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2021-06-05 40960]
R2 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2021-06-05 176464]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2021-06-05 540672]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2021-06-05 81920]
R3 ACPIVPC;@oem15.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2021-07-26 44024]
R3 amdacpbus;@oem50.inf,%amdacpbus.SVCDESC%;Audio Coprocessr Driver for DSP; C:\WINDOWS\System32\DriverStore\FileRepository\amdacpbus.inf_amd64_36c81572f42cc25a\amdacpbus.sys [2020-07-01 6380960]
R3 amdgpio2;@oem29.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\WINDOWS\System32\drivers\amdgpio2.sys [2020-03-16 46344]
R3 amdi2c;@oem55.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\WINDOWS\System32\drivers\amdi2c.sys [2020-07-14 65320]
R3 amdlog;@oem16.inf,%AMDLOG_svcdesc%;AMD LOG Utility Driver; C:\WINDOWS\System32\drivers\amdlog.sys [2020-06-11 88176]
R3 amdwddmg;amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0370421.inf_amd64_8f365dc2ded16925\B370101\amdkmdag.sys [2021-08-07 80463176]
R3 AtiHDAudioService;@oem51.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys [2020-06-09 107936]
R3 BtFilter;BtFilter; C:\WINDOWS\System32\drivers\btfilter.sys [2021-03-13 104728]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2021-06-05 139264]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2021-06-05 135168]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2021-06-05 155648]
R3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\WINDOWS\System32\drivers\BTHport.sys [2021-06-05 1916928]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\WINDOWS\System32\drivers\BTHUSB.sys [2021-06-05 118784]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2021-06-05 94536]
R3 gameflt;@oem70.inf,%ServiceName%;gameflt; C:\WINDOWS\System32\DriverStore\FileRepository\gameflt.inf_amd64_10c518155fa47d97\gameflt.sys [2022-02-11 134568]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2020-08-20 6114384]
R3 McAfeeIntegrationDriver;@oem20.inf,%McAfeeIntegrationDriver.SVCDESC%;McAfeeIntegrationDriver Service; C:\WINDOWS\System32\drivers\McAfeeIntegrationDriver.sys [2019-09-16 49928]
R3 MsQuic;@%SystemRoot%\system32\drivers\msquic.sys,-1; C:\WINDOWS\system32\drivers\msquic.sys [2021-06-05 377144]
R3 Qcamain10x64;@oem8.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN 11AC device driver; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2020-12-20 2455232]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2021-06-05 245760]
S0 AppleSSD;@AppleSSD.inf,%DevDesc1%;Apple Solid State Drive Device; C:\WINDOWS\System32\drivers\AppleSSD.sys [2021-06-05 112440]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2021-06-05 74040]
S0 ebdrv0;@netevbd0a.inf,%vbd_srv_desc%;QLogic Legacy Ethernet Adapter VBD; C:\WINDOWS\System32\drivers\evbd0a.sys [2021-06-05 3423032]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2021-06-05 319800]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2021-06-05 884552]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2021-06-05 176952]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2021-06-05 124240]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2021-06-05 137552]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2021-06-05 80696]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2021-06-05 100176]
S0 mpi3drvi;mpi3drvi; C:\WINDOWS\System32\drivers\mpi3drvi.sys [2021-06-05 87352]
S0 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2021-06-05 201024]
S0 nvmedisk;@nvmedisk.inf,%nvmedisk.SvcDesc%;Microsoft NVMe disk driver; C:\WINDOWS\System32\drivers\nvmedisk.sys [2021-06-05 82240]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2021-06-05 58704]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2021-06-05 68432]
S0 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2021-06-05 172360]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2021-06-05 69960]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2021-06-05 209224]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2021-06-05 53248]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\WINDOWS\system32\drivers\Acx01000.sys [2021-06-05 700416]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2021-06-05 45056]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\WINDOWS\System32\drivers\BthA2dp.sys [2021-06-05 507904]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\WINDOWS\System32\drivers\BTHMINI.sys [2021-06-05 81920]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2021-06-05 81920]
S3 ExecutionContext;@%SystemRoot%\System32\Drivers\ExecutionContext.sys,-101; C:\WINDOWS\System32\Drivers\ExecutionContext.sys [2021-06-05 61440]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_dc3260bbd08046c4\genericusbfn.sys [2021-06-05 57344]
S3 GeneStor;@oem62.inf,%GeneStor.SvcDesc%;Genesys Logic Storage Driver; C:\WINDOWS\System32\drivers\GeneStor.sys [2020-05-19 134272]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2021-06-05 86352]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\WINDOWS\System32\drivers\hidspi.sys [2021-06-05 131072]
S3 HidSpiCx;HidSpi KMDF Class Extension; C:\WINDOWS\system32\drivers\HidSpiCx.sys [2021-06-05 118784]
S3 hvservice;@hvservice.inf,%hvservice.SvcDesc%;Microsoft Hypervisor Service Driver; C:\WINDOWS\System32\drivers\hvservice.sys [2021-06-05 131400]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2021-06-05 57344]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2021-06-05 1853752]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2021-06-05 36352]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2021-06-05 91136]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2021-06-05 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2021-06-05 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2021-06-05 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2021-06-05 96256]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2021-06-05 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2021-06-05 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [2021-06-05 177152]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [2021-06-05 177664]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2021-06-05 558928]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2021-06-05 69632]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel(R) Dynamic Device Peak Power Manager Driver; C:\WINDOWS\System32\drivers\intelpmax.sys [2021-06-05 61440]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2021-06-05 94520]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2021-06-05 561480]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2021-06-05 90440]
S3 MbbCx;MBB Network Adapter Class Extension; C:\WINDOWS\system32\drivers\MbbCx.sys [2021-06-05 425984]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2021-06-05 94208]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2021-06-05 1131344]
S3 MpKsl9c375d4d;MpKsl9c375d4d; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{65251DED-1816-4266-96A3-CD8007BBC8B2}\MpKslDrv.sys []
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2021-06-05 146256]
S3 NDKPerf;NDKPerf Driver; C:\WINDOWS\system32\drivers\NDKPerf.sys [2021-06-05 78152]
S3 NDKPing;NDKPing Driver; C:\WINDOWS\system32\drivers\NDKPing.sys [2021-06-05 102712]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2021-06-05 348160]
S3 P9Rdr;@%SystemRoot%\System32\drivers\p9rdr.sys,-100; C:\WINDOWS\System32\drivers\p9rdr.sys [2021-06-05 135496]
S3 PktMon;Packet Monitor Driver; C:\WINDOWS\system32\drivers\PktMon.sys [2021-06-05 164152]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2021-06-05 49152]
S3 portcfg;portcfg; C:\WINDOWS\System32\drivers\portcfg.sys [2021-06-05 57344]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2021-06-05 1016120]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2021-06-05 143360]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2021-06-05 65856]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2021-06-05 69960]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0370421.inf_amd64_8f365dc2ded16925\B370101\atiesrxx.exe [2021-08-07 602952]
R2 AMD Log Utility;AMD Log Utility; C:\WINDOWS\System32\amdlogsr.exe [2020-06-11 486320]
R2 AtherosSvc;AtherosSvc; C:\WINDOWS\System32\drivers\AdminService.exe [2021-03-13 384432]
R2 cbdhsvc_7da8a;Používateľská služba schránky_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R2 CDPUserSvc_7da8a;Connected Devices Platform User Service_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2022-01-25 12119432]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
R2 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R2 DolbyDAXAPI;@oem21.inf,%ServiceDisplayName%;Dolby DAX API Service; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe [2020-07-06 1928648]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
R2 FMAPOService;Fortemedia APO Control Service; C:\WINDOWS\System32\FMService64.exe [2020-07-13 390400]
R2 GamingServices;Gaming Services; C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.4001.0_x64__8wekyb3d8bbwe\GamingServices.exe [2022-02-11 75240]
R2 GamingServicesNet;Gaming Services; C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.4001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe [2022-02-11 75240]
R2 HPPrintScanDoctorService;HP Print Scan Doctor Service; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [2021-05-15 288360]
R2 ImControllerService;@oem4.inf,%ImcSvcDisplayName%;System Interface Foundation Service; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [2022-01-28 84240]
R2 LenovoVantageService;LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe [2021-12-14 31016]
R2 OneSyncSvc_7da8a;Sync Host_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R2 QcomWlanSrv;Qualcomm Atheros WLAN Driver Service; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [2020-12-20 200384]
R2 RtkAudioUniversalService;Realtek Audio Universal Service; C:\WINDOWS\System32\RtkAudUService64.exe [2020-08-21 1140456]
R3 BluetoothUserService_7da8a;Služba podpory používateľov rozhrania Bluetooth_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
R3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 NPSMSvc_7da8a;NPSMSvc_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 PimIndexMaintenanceSvc_7da8a;Kontaktné údaje_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
R3 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2021-06-05 140864]
S2 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S2 edgeupdate;Microsoft Edge Update Service (edgeupdate); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-10-28 223120]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2021-02-06 154440]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 AarSvc_7da8a;Agent Activation Runtime_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 BcastDVRUserService_7da8a;GameDVR and Broadcast User Service_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 CaptureService_7da8a;CaptureService_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 ConsentUxUserSvc_7da8a;ConsentUX User Service_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2021-06-05 454888]
S3 CredentialEnrollmentManagerUserSvc_7da8a;CredentialEnrollmentManagerUserSvc_7da8a; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [2021-06-05 454888]
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 DeviceAssociationBrokerSvc_7da8a;DeviceAssociationBroker_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 DevicePickerUserSvc_7da8a;DevicePicker_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 DevicesFlowUserSvc_7da8a;DevicesFlow_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2021-06-05 110592]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 edgeupdatem;Microsoft Edge Update Service (edgeupdatem); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2020-10-28 223120]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 EpicOnlineServices;Epic Online Services; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2021-10-21 16029472]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 FrameServerMonitor;@%systemroot%\system32\FrameServerMonitor.dll,-100; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 GoogleChromeElevationService;Google Chrome Elevation Service (GoogleChromeElevationService); C:\Program Files\Google\Chrome\Application\98.0.4758.82\elevation_service.exe [2022-01-29 1505112]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2021-02-06 154440]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 mcafeeintegrationservice;@oem61.inf,%ServiceDisplayName%;mcafeeintegrationservice; C:\WINDOWS\System32\DriverStore\FileRepository\mcafeeintegrationextension.inf_amd64_22df759ce010d03d\mcafeeintegrationservice.exe [2019-09-16 2584344]
S3 McpManagementService;@%SystemRoot%\system32\McpManagementService.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 MessagingService_7da8a;MessagingService_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 MicrosoftEdgeElevationService;Microsoft Edge Elevation Service (MicrosoftEdgeElevationService); C:\Program Files (x86)\Microsoft\Edge\Application\98.0.1108.50\elevation_service.exe [2022-02-10 1542032]
S3 MixedRealityOpenXRSvc;@%SystemRoot%\system32\MixedRealityRuntime.dll,-101; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 NPSMSvc;@%SystemRoot%\system32\npsm.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 ose64;Office 64 Source Engine; c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2002-02-02 263712]
S3 P9RdrService;@%systemroot%\system32\p9rdrservice.dll,-102; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 P9RdrService_7da8a;P9RdrService_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 PenService;@%SystemRoot%\system32\PenService.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 PenService_7da8a;PenService_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe [2021-06-05 237568]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 PrintWorkflowUserSvc_7da8a;PrintWorkflow_7da8a; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2021-06-05 78880]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2021-06-05 1187840]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2021-06-05 78880]

-----------------EOF-----------------
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#2 Příspěvek od jacho6380 »

Nejde mi vypnut ani deffender a kopu aplikacii hadze chybu
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119402
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Totalne pomaly NTB

#3 Příspěvek od Rudy »

Zdravím!
Dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=154679 . RSIT je již dávno za zenitem.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#4 Příspěvek od jacho6380 »

Dobry den, to mi prave nejde, deffender mi ho zablokuje a samotny deffender otvorit nejde, to je prave to ze vela aplikacii nejde
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119402
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Totalne pomaly NTB

#5 Příspěvek od Rudy »

AV se musí vypnout, pokud považuje FRST za virus. V 11 neudělám s RSIT vůbec nic.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#6 Příspěvek od jacho6380 »

Ked chcem otvorit deffender mi napise aplikacia sa neda otvorit
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#7 Příspěvek od jacho6380 »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-02-2022
Ran by 42191 (administrator) on LAPTOP-EE1CTV48 (LENOVO 82GW) (13-02-2022 14:20:09)
Running from C:\Users\42191\Downloads
Loaded Profiles: 42191
Platform: Microsoft Windows 11 Home Version Dev 22000.1 (X64) Language: Slovenčina (Slovensko)
Default browser: Chrome
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1140456 2020-08-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\42191\AppData\Local\Microsoft\Teams\Update.exe [2459304 2021-12-16] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33648608 2022-02-10] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe [254080 2021-02-04] (Disig a.s. -> Disig a.s.)
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\Run: [OneDrive] => C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2367352 2022-02-11] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Uninstall 21.050.0310.0001\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\21.050.0310.0001\amd64" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Uninstall 21.050.0310.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\21.050.0310.0001" <==== ATTENTION
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\98.0.4758.82\Installer\chrmstp.exe [2022-02-12] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {06F39B99-9CEF-487A-946D-FA61E29EB99F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22844272 2022-01-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {19C675C4-2376-4EBD-B9B4-E93BFE6B4F0E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1BD6821E-71EE-43EE-AEEB-DB9EC27A2014} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {1C82C31B-48FA-4F6D-95AE-009C5E2BA594} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\1c5aeefa-ba9c-401f-9a4e-d4035e81eb05 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {1CCE622E-B634-4B73-BD63-EBA448DBE2DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-02-06] (Google LLC -> Google LLC)
Task: {217F0385-884F-4087-8FCB-F3F47D6F0E56} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\5395e4a9-d343-4ca1-916d-21e59be6e634 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {23CC5C77-E7CA-4CDA-9C46-A86D98049068} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {2746C2DA-44E4-44DF-BC3D-938549621245} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {304535B2-2641-4F46-94BA-A788D504C5ED} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138592 2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {59D0EF06-90D1-4DC1-9D9E-C0FEED439D09} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [38504 2021-05-15] (HP Inc. -> HP Inc.)
Task: {64F9655E-2701-4DC4-B3B9-DC095D441253} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\8adf1ec4-298b-442e-aa8a-b48082b43609 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {6EC1EBFC-B914-43AA-B433-B6824A8F8EF1} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {7ECD3C2D-F44B-4EA7-8643-BF8D3E6AC902} - System32\Tasks\Mirkat => C:\Users\42191\AppData\Local\Microsoft\WindowsApps\MirkatService.exe [0 2021-08-29] () [simlink -> ]
Task: {8991486D-33A3-4983-86AA-C12FBDD6CEA8} - System32\Tasks\LenovoUtility Startup => C:\Windows\explorer.exe lenovo-utility://
Task: {AC9B865D-C3BC-4568-8E69-B49AA0BC5C7D} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [64256 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {B74204F3-823E-470B-8F71-BA42851792F8} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {BFDB6329-77BD-4CC9-83C7-3DD75AB79E64} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\7b691cc3-1c0a-4b8b-b7da-38cab77d386b => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {C7C1CCCB-FA8E-4275-B544-F714545694DD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CAB83D19-A7D3-4BF3-983A-779D984658AD} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Task: {D0D3711F-4CF6-4CB6-9FEA-B078B5609365} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\5b6229ec-3dfa-4cbb-b8bc-ca30d69d13c6 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {D1EA65DA-03C8-4FBB-977F-93114BCF9745} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138592 2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2428E9D-946B-4D6A-8463-8091565A705E} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [145480 2021-09-09] (Lenovo -> Lenovo Group Ltd.)
Task: {D796EC8D-DA47-4FA3-BBF2-8CB8FE6DA02E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D7C9DD5F-53D6-478B-B7DD-92ECC50623E8} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [38504 2021-05-15] (HP Inc. -> HP Inc.)
Task: {E8296C3B-52FB-4550-A688-EC67CC92A743} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F580714D-9A59-4631-8190-6CE27DC30D6F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-02-06] (Google LLC -> Google LLC)
Task: {FDF18F28-6BFD-4A78-983D-FAAA3007CC92} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22844272 2022-01-25] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{84f5616d-5840-4bc2-b324-863758f9ea2d}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\42191\AppData\Local\Microsoft\Edge\User Data\Default [2022-02-07]

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-11-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\42191\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-11-27]
CHR Profile: C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-02-13]
CHR Extension: (Prezentácie) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-25]
CHR Extension: (Dokumenty) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-25]
CHR Extension: (Disk Google) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-25]
CHR Extension: (YouTube) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-25]
CHR Extension: (Tabuľky) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-25]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-25]
CHR Extension: (Gmail) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-25]
CHR Profile: C:\Users\42191\AppData\Local\Google\Chrome\User Data\System Profile [2021-11-27]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12119432 2022-01-25] (Microsoft Corporation -> Microsoft Corporation)
S2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe [1928648 2020-07-06] (Dolby Laboratories, Inc. -> Dolby Laboratories)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-21] (Epic Games Inc. -> Epic Games, Inc.)
S2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [390400 2020-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
S2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-15] (HP Inc. -> HP Inc.)
S2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
S2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe [31016 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
S3 mcafeeintegrationservice; C:\WINDOWS\System32\DriverStore\FileRepository\mcafeeintegrationextension.inf_amd64_22df759ce010d03d\mcafeeintegrationservice.exe [2584344 2019-09-16] (McAfee, LLC. -> McAfee)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe [2909208 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe [128376 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0370421.inf_amd64_8f365dc2ded16925\B370101\amdkmdag.sys [80463176 2021-08-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [134272 2020-05-19] (GENESYS LOGIC, INC. -> Genesys Logic)
S3 McAfeeIntegrationDriver; C:\WINDOWS\System32\drivers\McAfeeIntegrationDriver.sys [49928 2019-09-16] (McAfee, LLC. -> McAfee)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2020-06-01] (Valve Corp. -> )
S3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2020-06-01] (Valve Corp. -> )
S3 TDKLIB; c:\windows\TempInst\TdkLib64.sys [38312 2021-10-11] (Phoenix Technologies Ltd. -> )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2022-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [438520 2022-02-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-02-10] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl9c375d4d; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{65251DED-1816-4266-96A3-CD8007BBC8B2}\MpKslDrv.sys [X]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-02-13 14:20 - 2022-02-13 14:20 - 000017606 _____ C:\Users\42191\Downloads\FRST.txt
2022-02-13 14:20 - 2022-02-13 14:20 - 000000000 ____D C:\FRST
2022-02-13 14:19 - 2022-02-13 14:19 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2022-02-13 14:11 - 2022-02-13 14:11 - 000000000 ____D C:\WINDOWS\pss
2022-02-12 09:24 - 2022-02-12 09:24 - 000000000 ____D C:\rsit
2022-02-12 09:24 - 2022-02-12 09:24 - 000000000 ____D C:\Program Files\trend micro
2022-02-12 09:22 - 2022-02-12 09:22 - 000000000 ____D C:\AdwCleaner
2022-02-12 09:21 - 2022-02-12 09:21 - 008540344 _____ (Malwarebytes) C:\Users\42191\Downloads\adwcleaner.exe
2022-02-12 09:15 - 2022-02-12 09:15 - 002311680 _____ (Farbar) C:\Users\42191\Downloads\FRST64.exe
2022-02-12 09:04 - 2022-02-12 09:04 - 000000000 ____D C:\WINDOWS\Panther
2022-02-11 22:33 - 2022-02-11 22:33 - 000000000 ___HD C:\$WinREAgent
2022-02-11 11:24 - 2022-02-11 11:24 - 000000000 ____D C:\Users\TEMP\AppData\LocalLow\Sun
2022-02-11 11:24 - 2022-02-11 11:24 - 000000000 ____D C:\Users\TEMP\AppData\Local\OneDrive
2022-02-11 11:20 - 2022-02-11 11:20 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2718211263-957613367-2003098252-1002
2022-02-11 11:20 - 2022-02-11 11:20 - 000002355 _____ C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-02-11 11:20 - 2022-02-11 11:20 - 000000000 ___RD C:\Users\TEMP\OneDrive
2022-02-11 11:20 - 2022-02-11 11:20 - 000000000 ____D C:\Users\TEMP\AppData\Local\VirtualStore
2022-02-11 11:19 - 2022-02-11 11:19 - 000000000 ____D C:\Users\TEMP\AppData\Local\PlaceholderTileLogoFolder
2022-02-11 11:19 - 2022-02-11 11:19 - 000000000 ____D C:\Users\TEMP\AppData\Local\packages
2022-02-11 11:18 - 2022-02-13 14:20 - 000000000 ____D C:\Users\TEMP
2022-02-11 11:18 - 2022-02-11 11:19 - 000000000 ____D C:\Users\TEMP\AppData\Local\Lenovo
2022-02-11 11:18 - 2022-02-11 11:18 - 000000020 ___SH C:\Users\TEMP\ntuser.ini
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\LocalLow\AMD
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\Google
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\D3DSCache
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\ConnectedDevicesPlatform
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\AMD
2022-02-11 11:18 - 2021-10-11 13:59 - 000000000 ____D C:\Users\TEMP\AppData\Local\Epic Games
2022-02-11 11:18 - 2021-06-05 13:04 - 000001281 _____ C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2022-02-11 11:18 - 2021-06-05 13:04 - 000000407 _____ C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2022-02-11 11:14 - 2022-02-11 11:14 - 000000000 ____D C:\Users\Evka\AppData\Roaming\vlc
2022-02-11 11:13 - 2022-02-11 11:13 - 000000000 _____ C:\Users\Evka\AppData\Local\{3A4C6331-CFBA-47A9-8764-4D755AC75192}
2022-02-11 11:12 - 2022-02-11 11:12 - 000000000 ____D C:\Users\Evka\AppData\Local\Lenovo
2022-02-11 11:11 - 2022-02-11 11:11 - 000000020 ___SH C:\Users\Evka\ntuser.ini
2022-02-11 11:11 - 2022-02-11 11:11 - 000000000 ____D C:\Users\Evka\AppData\Local\Google
2022-02-11 11:11 - 2022-02-11 11:11 - 000000000 ____D C:\Users\Evka\AppData\Local\D3DSCache
2022-02-10 19:00 - 2021-06-01 07:28 - 017869208 _____ C:\WINDOWS\system32\RsDMFT_Assets.dll
2022-02-10 19:00 - 2021-06-01 07:28 - 009744808 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RsDMFT64.dll
2022-02-09 09:18 - 2022-02-11 17:15 - 000000000 ____D C:\Users\42191\AppData\Roaming\vlc
2022-02-07 13:36 - 2022-02-12 08:59 - 000000000 ____D C:\Users\42191\AppData\Local\Discord
2022-02-07 13:36 - 2022-02-07 13:36 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup (3).exe
2022-02-07 13:29 - 2022-02-07 13:29 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup (2).exe
2022-02-07 00:17 - 2022-02-07 00:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2022-02-07 00:16 - 2022-02-13 14:18 - 000803404 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-02-07 00:15 - 2022-02-13 14:05 - 000000000 ____D C:\Users\42191\AppData\Local\D3DSCache
2022-02-07 00:15 - 2022-02-07 00:15 - 000000020 ___SH C:\Users\42191\ntuser.ini
2022-02-07 00:14 - 2022-02-13 14:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-07 00:14 - 2022-02-11 11:20 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2718211263-957613367-2003098252-1002
2022-02-07 00:14 - 2022-02-07 00:14 - 000017148 _____ C:\WINDOWS\diagwrn.xml
2022-02-07 00:14 - 2022-02-07 00:14 - 000017148 _____ C:\WINDOWS\diagerr.xml
2022-02-07 00:14 - 2022-02-07 00:14 - 000004036 _____ C:\WINDOWS\system32\Tasks\LenovoUtility Startup
2022-02-07 00:14 - 2022-02-07 00:14 - 000003504 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-02-07 00:14 - 2022-02-07 00:14 - 000003386 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-02-07 00:14 - 2022-02-07 00:14 - 000003280 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-02-07 00:14 - 2022-02-07 00:14 - 000003162 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-02-07 00:14 - 2022-02-07 00:14 - 000003062 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2718211263-957613367-2003098252-1001
2022-02-07 00:14 - 2022-02-07 00:14 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2718211263-957613367-2003098252-1001
2022-02-07 00:14 - 2022-02-07 00:14 - 000002854 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2718211263-957613367-2003098252-500
2022-02-07 00:14 - 2022-02-07 00:14 - 000002016 _____ C:\WINDOWS\system32\Tasks\Mirkat
2022-02-07 00:14 - 2022-02-07 00:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2022-02-07 00:14 - 2022-02-07 00:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-02-07 00:14 - 2020-10-28 11:23 - 000002850 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-41625546-4094016361-2638902570-500
2022-02-07 00:14 - 2020-05-06 19:41 - 000003394 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3643460898-1865012685-2946422182-500
2022-02-07 00:08 - 2022-02-11 11:28 - 000000000 ____D C:\Users\42191
2022-02-07 00:08 - 2022-02-11 11:11 - 000000000 ____D C:\Users\Evka
2022-02-07 00:08 - 2021-06-05 13:04 - 000001281 _____ C:\Users\Evka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2022-02-07 00:08 - 2021-06-05 13:04 - 000001281 _____ C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2022-02-07 00:08 - 2021-06-05 13:04 - 000000407 _____ C:\Users\Evka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2022-02-07 00:08 - 2021-06-05 13:04 - 000000407 _____ C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2022-02-07 00:06 - 2022-02-13 14:14 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-02-07 00:06 - 2022-02-07 00:14 - 000000000 ____D C:\Windows.old
2022-02-07 00:06 - 2022-02-07 00:06 - 000470176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-07 00:02 - 2022-02-07 00:06 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2022-02-07 00:01 - 2022-02-07 00:02 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2022-02-07 00:01 - 2022-02-07 00:01 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2022-02-06 19:12 - 2022-02-06 19:12 - 000000000 ____D C:\Users\42191\Tracing
2022-01-31 12:21 - 2022-01-31 12:21 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup (1).exe
2022-01-31 12:19 - 2022-01-31 12:19 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-02-13 14:19 - 2021-06-05 13:09 - 000000000 ____D C:\WINDOWS\INF
2022-02-13 14:14 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\ServiceState
2022-02-13 14:14 - 2021-06-05 13:01 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-02-13 14:14 - 2020-05-06 19:33 - 000012288 ___SH C:\DumpStack.log.tmp
2022-02-13 14:12 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-02-13 14:11 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-02-13 14:10 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-02-13 14:10 - 2021-02-06 10:53 - 000000000 ____D C:\Program Files (x86)\Google
2022-02-13 14:09 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-02-12 14:02 - 2021-02-06 10:54 - 000002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-02-12 09:24 - 2021-01-11 09:07 - 000000000 ____D C:\Users\42191\AppData\Local\PlaceholderTileLogoFolder
2022-02-12 09:20 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-02-12 09:20 - 2020-10-28 11:31 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-02-12 09:00 - 2021-10-11 15:43 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2022-02-12 08:59 - 2021-09-27 16:45 - 000000000 ____D C:\Users\42191\AppData\Roaming\discord
2022-02-12 08:51 - 2021-09-27 12:04 - 000000000 ____D C:\Users\42191\AppData\Local\CrashDumps
2022-02-11 20:35 - 2021-01-15 00:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-02-11 20:32 - 2021-11-20 21:17 - 000120296 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 002237928 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000337360 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000217536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000198096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe
2022-02-11 20:30 - 2021-01-15 00:14 - 149611728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-02-11 11:25 - 2021-06-05 13:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-02-11 11:18 - 2020-05-06 19:38 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-02-11 11:11 - 2021-01-11 12:36 - 000000000 ____D C:\Users\Evka\AppData\Local\Packages
2022-02-10 17:51 - 2020-05-06 19:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-02-09 07:07 - 2021-02-24 17:37 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-02-08 15:08 - 2021-01-11 09:06 - 000000000 __RDL C:\Users\42191\OneDrive
2022-02-07 13:37 - 2021-09-27 16:45 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2022-02-07 13:37 - 2021-01-11 09:11 - 000000000 ____D C:\Users\42191\AppData\Local\SquirrelTemp
2022-02-07 00:32 - 2021-06-05 13:10 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-02-07 00:32 - 2021-01-11 09:04 - 000000000 ____D C:\Users\42191\AppData\Local\Packages
2022-02-07 00:32 - 2021-01-11 06:56 - 000000000 ____D C:\ProgramData\Packages
2022-02-07 00:26 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\servicing
2022-02-07 00:14 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-02-07 00:14 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Windows Defender
2022-02-07 00:14 - 2021-06-05 13:01 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-02-07 00:11 - 2021-06-05 13:10 - 000000000 __RHD C:\Users\Public\Libraries
2022-02-07 00:09 - 2021-09-29 15:54 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-02-07 00:09 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-02-07 00:09 - 2021-04-24 17:34 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2022-02-07 00:08 - 2021-10-11 14:04 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2022-02-07 00:07 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\appcompat
2022-02-07 00:07 - 2020-10-28 11:45 - 000000000 ____D C:\WINDOWS\system32\dolbyaposvc
2022-02-07 00:06 - 2021-12-09 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EAC MW klient
2022-02-07 00:06 - 2021-12-09 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disig Web Signer
2022-02-07 00:06 - 2021-09-29 15:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-02-07 00:06 - 2021-09-17 07:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2022-02-07 00:06 - 2021-06-27 13:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2022-02-07 00:06 - 2021-06-05 13:14 - 000000000 ____D C:\WINDOWS\Setup
2022-02-07 00:06 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2022-02-07 00:06 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\spool
2022-02-07 00:06 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\USOPrivate
2022-02-07 00:06 - 2021-06-05 13:08 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2022-02-07 00:06 - 2021-05-23 15:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje balíka Microsoft Office
2022-02-07 00:06 - 2021-03-21 19:48 - 000000000 ____D C:\WINDOWS\system32\Samsung
2022-02-07 00:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2022-02-07 00:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2022-02-07 00:03 - 2020-10-28 11:45 - 000000000 ____D C:\WINDOWS\system32\AMD
2022-02-07 00:03 - 2020-10-28 11:32 - 000000000 ____D C:\WINDOWS\Lenovo
2022-02-07 00:00 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\OCR
2022-02-06 23:58 - 2021-06-05 19:04 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2022-02-06 23:58 - 2021-06-05 19:04 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-02-06 23:58 - 2021-06-05 18:57 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2022-02-06 23:58 - 2021-06-05 18:57 - 000000000 ____D C:\WINDOWS\system32\WCN
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2022-01-28 20:04 - 2021-11-19 14:33 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\WudfUpdate_02000.dll
2022-01-28 20:04 - 2021-11-19 14:33 - 000064256 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.InfInstaller.exe
2022-01-28 20:04 - 2020-10-28 11:32 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.CoInstaller.dll
2022-01-28 20:03 - 2021-11-19 14:33 - 000431016 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2022-01-26 09:42 - 2020-10-28 11:34 - 000000000 ____D C:\Program Files\Microsoft Office
2022-01-26 09:31 - 2021-01-11 08:59 - 000002374 _____ C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)



safeboot: Minimal => The system is configured to boot to Safe Mode <==== ATTENTION
==================== End of FRST.txt ========================
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#8 Příspěvek od jacho6380 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-02-2022
Ran by 42191 (13-02-2022 14:21:04)
Running from C:\Users\42191\Downloads
Microsoft Windows 11 Home Version Dev 22000.1 (X64) (2022-02-06 23:14:46)
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

42191 (S-1-5-21-2718211263-957613367-2003098252-1001 - Administrator - Enabled) => C:\Users\42191
Administrator (S-1-5-21-2718211263-957613367-2003098252-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2718211263-957613367-2003098252-503 - Limited - Disabled)
Evka (S-1-5-21-2718211263-957613367-2003098252-1002 - Administrator - Enabled) => C:\Users\TEMP
Guest (S-1-5-21-2718211263-957613367-2003098252-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2718211263-957613367-2003098252-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.06.07.2238 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{d91b7809-0832-4ef3-8f9f-89b80409368c}) (Version: 2.06.07.2238 - Advanced Micro Devices, Inc.) Hidden
Balík softvéru eID (HKLM-x32\...\{d2c66c1e-5862-43e7-abe2-9c895312112c}) (Version: 1.0.0.0 - Ministerstvo vnútra Slovenskej republiky) Hidden
Disig Web Signer (HKLM-x32\...\{41C0F02D-2389-4AB5-975C-C2363E7C554C}) (Version: 2.0.7 - Disig)
EAC MW klient (HKLM-x32\...\{E22CF5CA-5935-451D-9B9D-EAA79DE703BD}) (Version: 3.7.0 - Ministerstvo vnútra Slovenskej republiky)
Epic Games Launcher (HKLM-x32\...\{7733DDD0-3513-4A99-BFFE-A6D73BE49B50}) (Version: 1.2.35.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 98.0.4758.82 - Google LLC)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.10.26.0 - Lenovo Group Ltd.)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.14729.20260 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 98.0.1108.50 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 98.0.1108.50 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\OneDriveSetup.exe) (Version: 22.002.0103.0004 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Teams) (Version: 1.4.00.32771 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
NVIDIA GeForce NOW 2.0.33.123 (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GeforceNOW) (Version: 2.0.33.123 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14729.20260 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14729.20260 - Microsoft Corporation) Hidden
Roblox Player for 42191 (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for 42191 (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\roblox-studio) (Version: - Roblox Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WinRAR 5.91 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10028.0_x64__0a9344xs7nr4m [2022-02-11] (Advanced Micro Devices Inc.) [Startup Task]
Dolby Audio -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudio_3.20602.609.0_x64__rz1tebttyb220 [2020-10-28] (Dolby Laboratories)
Doplnok mediálneho nástroja pre Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-02-06] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_134.1.221.0_x64__v10z8vjag6ke6 [2022-02-08] (HP Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.2.15.0_x64__5grkq8ppsgwt4 [2021-11-21] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2112.10.0_x64__k1h2ywk1493x8 [2021-12-29] (LENOVO INC.)
McAfee® Personal Security -> C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy [2021-11-17] (McAfee LLC.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-02-07] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-02-07] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-19] (Microsoft Studios) [MS Ad]
Mirkat -> C:\Program Files\WindowsApps\Mirkat.Mirkat_1.0.305.0_x64__hm0vq9nycmfde [2021-08-29] (Mirkat)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.15.227.0_x64__dt26b99r8h8gj [2021-11-01] (Realtek Semiconductor Corp)
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.512.415.0_x86__55nm5eh3cm0pr [2022-02-08] (ROBLOX Corporation)
Rozšírenie pre video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-08-29] (Microsoft Corporation)
Up in the Sky -> C:\Program Files\WindowsApps\Microsoft.UpintheSky_2.0.0.0_neutral__8wekyb3d8bbwe [2021-10-11] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2718211263-957613367-2003098252-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\42191\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21264.3\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2718211263-957613367-2003098252-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\42191\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-08-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\42191\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-2718211263-957613367-2003098252-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-26] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\sharepoint.com -> hxxps://zsmskuchyna-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\EAC MW klient\
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\42191\OneDrive\Počítač\hhhhhhhhhhhhhhhh.jpg
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{580022A0-F970-48F4-92BA-2944DC58D505}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{611EA158-3EC1-4DEF-BDB3-A4695B1DD1F3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{69B52C73-CDCF-4DBA-8502-E76CF032E0F0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5E23874A-38CD-42B2-A68A-1397764244FD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4E535A78-981B-47C4-942A-CA74BDC6306B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9FCDDEE8-F123-4633-9EC3-C128F0904792}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{C52D1EC0-7985-4B31-BD0F-C3FCF62CDB38}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{031E8818-39C1-4B3F-AF92-04B12A507684}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [{97C731F1-CE4D-4EF5-B61F-BF378140CE63}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [UDP Query User{904EE131-3E17-4CCF-A97B-F8686F98B1F6}C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe] => (Allow) C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{F9DBB306-95AA-42A7-9A94-2EE1AE1C4A6D}C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe] => (Allow) C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{924B54B6-8DC6-44FF-917B-24906C12ADE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{56CC0264-889E-4B83-A8EA-61E406567A5D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{735CE049-81EB-4E3E-8D59-BD5A754EBA7D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7222E934-51EB-4521-BABB-7C56ED5FE5BE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [UDP Query User{D5F0591B-91BE-4D24-98AC-CBE50A77CCE2}C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Block) C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{2C2593CC-CF2D-4812-88B2-56A42D156488}C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Block) C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{E3D1B428-14BE-48D0-8AC7-8B7C50A654BB}C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{3DA3E865-4646-4515-9B6A-4C29A114738B}C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{71232C3E-E479-4009-9BDC-2101E72FE134}C:\users\42191\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\42191\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{3F877831-EF54-45BD-B411-7F215F756FC9}C:\users\42191\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\42191\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{AFFCB813-39B2-4331-87F4-362F91D56192}C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe] => (Allow) C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe => No File
FirewallRules: [UDP Query User{0CDE4A7A-A8C0-4C86-9791-7BD8DA432454}C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe] => (Allow) C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe => No File
FirewallRules: [{80C0059F-BF29-4143-A68E-1F733553DED7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{8E3ACCD5-4DB0-45AD-ADD1-155E91F5F352}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.50\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:56.99 GB) (Free:4.9 GB) (9%)
Check "VSS" service


==================== Faulty Device Manager Devices ============

Name: Microsoft Hyper-V Virtualization Infrastructure Driver
Description: Microsoft Hyper-V Virtualization Infrastructure Driver
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: Vid
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Realtek(R) Audio
Description: Realtek High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: IntcAzAudAddService
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: AMD High Definition Audio Device
Description: AMD High Definition Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Advanced Micro Devices
Service: AtiHDAudioService
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Steam Streaming Microphone
Description: Steam Streaming Microphone
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Valve Corporation Audio DDK
Service: SteamStreamingMicrophone
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Steam Streaming Speakers
Description: Steam Streaming Speakers
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Valve Corporation Audio DDK
Service: SteamStreamingSpeakers
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: System Interface Foundation V2 Device
Description: System Interface Foundation V2 Device
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Lenovo
Service: WUDFRd
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: ========================

Application errors:
==================
Error: (02/13/2022 02:14:10 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.

Error: (02/13/2022 02:14:10 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (02/13/2022 02:11:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: OfficeC2RClient.exe, verzia: 16.0.14729.20254, časová značka: 0x61dc00d9
Názov chybujúceho modulu: OfficeC2RClient.exe, verzia: 16.0.14729.20254, časová značka: 0x61dc00d9
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000047206b
Identifikácia chybujúceho procesu: 0x1984
Čas spustenia chybujúcej aplikácie: 0x01d820dad959a609
Cesta chybujúcej aplikácie: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Cesta chybujúceho modulu: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Identifikácia hlásenia: 8ead5615-bc33-4411-b6a7-84f6d29662e9
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (02/13/2022 02:05:44 PM) (Source: MsiInstaller) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: Product: Epic Games Launcher -- Epic Games Launcher is currently running and the Setup Wizard can not continue. Please close the Epic Games Launcher and run the Setup Wizard again.

Error: (02/12/2022 01:54:15 PM) (Source: MsiInstaller) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: Product: Epic Games Launcher -- Epic Games Launcher is currently running and the Setup Wizard can not continue. Please close the Epic Games Launcher and run the Setup Wizard again.

Error: (02/12/2022 09:11:07 AM) (Source: MsiInstaller) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: Product: Epic Games Launcher -- Epic Games Launcher is currently running and the Setup Wizard can not continue. Please close the Epic Games Launcher and run the Setup Wizard again.

Error: (02/12/2022 09:09:39 AM) (Source: MsiInstaller) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: Product: Epic Games Launcher -- Epic Games Launcher is currently running and the Setup Wizard can not continue. Please close the Epic Games Launcher and run the Setup Wizard again.

Error: (02/12/2022 09:08:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: svchost.exe, verzia: 10.0.22000.1, časová značka: 0x5155ab18
Názov chybujúceho modulu: combase.dll, verzia: 10.0.22000.1, časová značka: 0x1f233a91
Kód výnimky: 0xc0000005
Odstup chyby: 0x0000000000068cb6
Identifikácia chybujúceho procesu: 0xc18
Čas spustenia chybujúcej aplikácie: 0x01d81fe742be3252
Cesta chybujúcej aplikácie: C:\WINDOWS\System32\svchost.exe
Cesta chybujúceho modulu: C:\WINDOWS\System32\combase.dll
Identifikácia hlásenia: 28ba1f50-9285-4f93-a447-770a0808a8c5
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:


System errors:
=============
Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{4991D34B-80A1-4291-83B6-3328366B9097}

Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}

Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{6D18AD12-BDE3-4393-B311-099C346E6DF9}

Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{03CA98D6-FF5D-49B8-ABC6-03DD84127020}

Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{659CDEA7-489E-11D9-A9CD-000D56965251}

Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{BB6DF56B-CACE-11DC-9992-0019B93A3A84}

Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{1ECCA34C-E88A-44E3-8D6A-8921BDE9E452}

Error: (02/13/2022 02:21:33 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{4D233817-B456-4E75-83D2-B17DEC544D12}


Windows Defender:
================Event[0]

Date: 2022-02-13 14:14:37
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem. ਍

Date: 2022-02-11 20:37:15
Description:
N/A

Date: 2022-02-11 20:37:15
Description:
N/A

Date: 2022-02-11 13:54:24
Description:
N/A

Date: 2022-02-10 17:23:37
Description:
N/A

==================== Memory info ===========================

BIOS: LENOVO FQCN12WW 08/21/2020
Motherboard: LENOVO LNVNB161216
Processor: AMD 3020e with Radeon Graphics
Percentage of memory in use: 41%
Total physical RAM: 3467.15 MB
Available physical RAM: 2041.9 MB
Total Virtual: 6934.3 MB
Available Virtual: 5743.68 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:56.99 GB) (Free:4.89 GB) NTFS

\\?\Volume{3bb08ad6-2cc9-4369-9696-3cae3a4f9afd}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.5 GB) NTFS
\\?\Volume{ca13d2ac-3beb-4f4c-9702-1ea0042f6826}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 58.2 GB) (Disk ID: 60DCFA44)

Partition: GPT.

==================== End of Addition.txt =======================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119402
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Totalne pomaly NTB

#9 Příspěvek od Rudy »

Teď spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#10 Příspěvek od jacho6380 »

# -------------------------------
# Malwarebytes AdwCleaner 8.3.1.0
# -------------------------------
# Build: 11-18-2021
# Database: 2022-02-03.4 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-13-2022
# Duration: 00:00:06
# OS: Windows 10 Home
# Cleaned: 7
# Awaiting reboot:1
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.LenovoIMController Folder C:\ProgramData\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Users\42191\AppData\Local\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Users\Evka\AppData\Local\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Users\TEMP\AppData\Local\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Windows\System32\Tasks\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Lenovo Dependency Package_is1
Needs Reboot Preinstalled.LenovoIMController Folder C:\Windows\LENOVO\IMCONTROLLER


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

***** Reboot Required to Complete *****


***** [ Folders ] *****

Cleaning failed C:\Windows\LENOVO\IMCONTROLLER

*************************

AdwCleaner[S00].txt - [2047 octets] - [12/02/2022 09:22:43]
AdwCleaner[S01].txt - [2108 octets] - [13/02/2022 15:36:18]
AdwCleaner[S02].txt - [2169 octets] - [13/02/2022 15:39:44]
AdwCleaner[S03].txt - [2230 octets] - [13/02/2022 15:43:22]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C03].txt ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119402
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Totalne pomaly NTB

#11 Příspěvek od Rudy »

Dejte nové kogy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#12 Příspěvek od jacho6380 »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-02-2022
Ran by 42191 (administrator) on LAPTOP-EE1CTV48 (LENOVO 82GW) (13-02-2022 18:03:44)
Running from C:\Users\42191\Downloads
Loaded Profiles: 42191
Platform: Microsoft Windows 11 Home Version 21H2 22000.318 (X64) Language: Slovenčina (Slovensko)
Default browser: Chrome
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1140456 2020-08-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\42191\AppData\Local\Microsoft\Teams\Update.exe [2489016 2022-02-13] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33648608 2022-02-10] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Run: [Disig Web Signer] => C:\Program Files (x86)\Disig\Web Signer\WebSignerTray.exe [254080 2021-02-04] (Disig a.s. -> Disig a.s.)
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\Run: [OneDrive] => C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2367352 2022-02-11] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Uninstall 21.050.0310.0001\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\21.050.0310.0001\amd64" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Uninstall 21.050.0310.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\21.050.0310.0001" <==== ATTENTION
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\98.0.4758.82\Installer\chrmstp.exe [2022-02-12] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {19C675C4-2376-4EBD-B9B4-E93BFE6B4F0E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1BD6821E-71EE-43EE-AEEB-DB9EC27A2014} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {1CCE622E-B634-4B73-BD63-EBA448DBE2DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-02-06] (Google LLC -> Google LLC)
Task: {217F0385-884F-4087-8FCB-F3F47D6F0E56} - \Lenovo\ImController\TimeBasedEvents\5395e4a9-d343-4ca1-916d-21e59be6e634 -> No File <==== ATTENTION
Task: {23CC5C77-E7CA-4CDA-9C46-A86D98049068} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
Task: {2746C2DA-44E4-44DF-BC3D-938549621245} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {28F57DD5-8139-4A1B-8C7D-8076FB7935CE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22882216 2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {3A4493B1-F586-4FAD-939F-772DF903C33A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139664 2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {59D0EF06-90D1-4DC1-9D9E-C0FEED439D09} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [38504 2021-05-15] (HP Inc. -> HP Inc.)
Task: {6413007B-DCF4-4123-8D98-8A6ACE2886C4} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139664 2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {64F9655E-2701-4DC4-B3B9-DC095D441253} - \Lenovo\ImController\TimeBasedEvents\8adf1ec4-298b-442e-aa8a-b48082b43609 -> No File <==== ATTENTION
Task: {6EC1EBFC-B914-43AA-B433-B6824A8F8EF1} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\ScheduleEventAction.exe [26408 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
Task: {7ECD3C2D-F44B-4EA7-8643-BF8D3E6AC902} - System32\Tasks\Mirkat => C:\Users\42191\AppData\Local\Microsoft\WindowsApps\MirkatService.exe [0 2021-08-29] () [simlink -> ]
Task: {8991486D-33A3-4983-86AA-C12FBDD6CEA8} - System32\Tasks\LenovoUtility Startup => C:\Windows\explorer.exe lenovo-utility://
Task: {AC9B865D-C3BC-4568-8E69-B49AA0BC5C7D} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {B74204F3-823E-470B-8F71-BA42851792F8} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {BFDB6329-77BD-4CC9-83C7-3DD75AB79E64} - \Lenovo\ImController\TimeBasedEvents\7b691cc3-1c0a-4b8b-b7da-38cab77d386b -> No File <==== ATTENTION
Task: {C7C1CCCB-FA8E-4275-B544-F714545694DD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CAB83D19-A7D3-4BF3-983A-779D984658AD} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Task: {D0D3711F-4CF6-4CB6-9FEA-B078B5609365} - \Lenovo\ImController\TimeBasedEvents\5b6229ec-3dfa-4cbb-b8bc-ca30d69d13c6 -> No File <==== ATTENTION
Task: {D2428E9D-946B-4D6A-8463-8091565A705E} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {D796EC8D-DA47-4FA3-BBF2-8CB8FE6DA02E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D7C9DD5F-53D6-478B-B7DD-92ECC50623E8} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [38504 2021-05-15] (HP Inc. -> HP Inc.)
Task: {E2850C64-F665-494B-83EE-B06EF1837CAC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22882216 2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {E8296C3B-52FB-4550-A688-EC67CC92A743} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F580714D-9A59-4631-8190-6CE27DC30D6F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-02-06] (Google LLC -> Google LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{84f5616d-5840-4bc2-b324-863758f9ea2d}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\42191\AppData\Local\Microsoft\Edge\User Data\Default [2022-02-07]

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-11-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\42191\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-11-27]
CHR Profile: C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-02-13]
CHR Extension: (Prezentácie) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-25]
CHR Extension: (Dokumenty) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-25]
CHR Extension: (Disk Google) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-25]
CHR Extension: (YouTube) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-25]
CHR Extension: (Tabuľky) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-25]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-25]
CHR Extension: (Gmail) - C:\Users\42191\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-25]
CHR Profile: C:\Users\42191\AppData\Local\Google\Chrome\User Data\System Profile [2021-11-27]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12124536 2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
S2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe [1928648 2020-07-06] (Dolby Laboratories, Inc. -> Dolby Laboratories)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-21] (Epic Games Inc. -> Epic Games, Inc.)
S2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [390400 2020-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
S2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-15] (HP Inc. -> HP Inc.)
S2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
S2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.10.26.0\LenovoVantageService.exe [31016 2021-12-14] (Lenovo -> Lenovo Group Ltd.)
S3 mcafeeintegrationservice; C:\WINDOWS\System32\DriverStore\FileRepository\mcafeeintegrationextension.inf_amd64_22df759ce010d03d\mcafeeintegrationservice.exe [2584344 2019-09-16] (McAfee, LLC. -> McAfee)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe [2909208 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe [128376 2022-02-10] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0370421.inf_amd64_8f365dc2ded16925\B370101\amdkmdag.sys [80463176 2021-08-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [134272 2020-05-19] (GENESYS LOGIC, INC. -> Genesys Logic)
S3 McAfeeIntegrationDriver; C:\WINDOWS\System32\drivers\McAfeeIntegrationDriver.sys [49928 2019-09-16] (McAfee, LLC. -> McAfee)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2020-06-01] (Valve Corp. -> )
S3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2020-06-01] (Valve Corp. -> )
S3 TDKLIB; c:\windows\TempInst\TdkLib64.sys [38312 2021-10-11] (Phoenix Technologies Ltd. -> )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2022-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [438520 2022-02-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-02-10] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl9c375d4d; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{65251DED-1816-4266-96A3-CD8007BBC8B2}\MpKslDrv.sys [X]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-02-13 15:38 - 2022-02-13 15:38 - 008540344 _____ (Malwarebytes) C:\Users\42191\Downloads\adwcleaner (1).exe
2022-02-13 15:01 - 2022-02-13 15:01 - 000002405 _____ C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams (work or school).lnk
2022-02-13 14:56 - 2022-02-13 14:56 - 000267264 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Dialogs.dll
2022-02-13 14:56 - 2022-02-13 14:56 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr
2022-02-13 14:56 - 2022-02-13 14:56 - 000014756 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-02-13 14:56 - 2022-02-13 14:56 - 000009522 _____ C:\WINDOWS\system32\ResPriUHMImageList
2022-02-13 14:56 - 2022-02-13 14:56 - 000009522 _____ C:\WINDOWS\system32\ResPriImageList
2022-02-13 14:56 - 2022-02-13 14:56 - 000009522 _____ C:\WINDOWS\system32\ResPriHMImageList
2022-02-13 14:56 - 2022-02-13 14:56 - 000009402 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2022-02-13 14:56 - 2022-02-13 14:56 - 000008964 _____ C:\WINDOWS\system32\ResPriLMImageList
2022-02-13 14:56 - 2022-02-13 14:56 - 000008870 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2022-02-13 14:56 - 2022-02-13 14:56 - 000006656 _____ C:\WINDOWS\SysWOW64\nrtapi.dll
2022-02-13 14:55 - 2022-02-13 14:55 - 000617648 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2022-02-13 14:55 - 2022-02-13 14:55 - 000425984 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-02-13 14:55 - 2022-02-13 14:55 - 000335872 _____ C:\WINDOWS\system32\Windows.Internal.UI.Dialogs.dll
2022-02-13 14:55 - 2022-02-13 14:55 - 000221184 _____ C:\WINDOWS\SysWOW64\Microsoft.Internal.FrameworkUdk.System.dll
2022-02-13 14:55 - 2022-02-13 14:55 - 000121344 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-02-13 14:55 - 2022-02-13 14:55 - 000041594 _____ C:\WINDOWS\SysWOW64\ctac.json
2022-02-13 14:55 - 2022-02-13 14:55 - 000036864 _____ C:\WINDOWS\system32\umpodev.dll
2022-02-13 14:55 - 2022-02-13 14:55 - 000003366 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2022-02-13 14:54 - 2022-02-13 14:54 - 000360448 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2022-02-13 14:54 - 2022-02-13 14:54 - 000286720 _____ C:\WINDOWS\system32\AggregatorHost.exe
2022-02-13 14:54 - 2022-02-13 14:54 - 000180224 _____ C:\WINDOWS\system32\CloudExperienceHostRedirection.dll
2022-02-13 14:54 - 2022-02-13 14:54 - 000099560 _____ C:\WINDOWS\system32\wow64con.dll
2022-02-13 14:54 - 2022-02-13 14:54 - 000077824 _____ C:\WINDOWS\system32\runexehelper.exe
2022-02-13 14:54 - 2022-02-13 14:54 - 000024576 _____ C:\WINDOWS\system32\nrtapi.dll
2022-02-13 14:54 - 2022-02-13 14:54 - 000003366 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2022-02-13 14:53 - 2022-02-13 14:53 - 000727576 _____ C:\WINDOWS\system32\TextShaping.dll
2022-02-13 14:53 - 2022-02-13 14:53 - 000614400 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-02-13 14:53 - 2022-02-13 14:53 - 000311296 _____ C:\WINDOWS\system32\Microsoft.Internal.FrameworkUdk.System.dll
2022-02-13 14:53 - 2022-02-13 14:53 - 000215552 _____ C:\WINDOWS\system32\CloudIdWxhExtension.dll
2022-02-13 14:53 - 2022-02-13 14:53 - 000172032 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-02-13 14:52 - 2022-02-13 14:52 - 000258048 _____ C:\WINDOWS\system32\CoreMas.dll
2022-02-13 14:52 - 2022-02-13 14:52 - 000208896 _____ C:\WINDOWS\system32\IHDS.dll
2022-02-13 14:52 - 2022-02-13 14:52 - 000167936 _____ C:\WINDOWS\system32\TpmTool.exe
2022-02-13 14:52 - 2022-02-13 14:52 - 000041594 _____ C:\WINDOWS\system32\ctac.json
2022-02-13 14:42 - 2022-02-13 14:42 - 000000000 ___HD C:\$WinREAgent
2022-02-13 14:21 - 2022-02-13 14:22 - 000028324 _____ C:\Users\42191\Downloads\Addition.txt
2022-02-13 14:20 - 2022-02-13 18:04 - 000016635 _____ C:\Users\42191\Downloads\FRST.txt
2022-02-13 14:20 - 2022-02-13 18:03 - 000000000 ____D C:\FRST
2022-02-13 14:19 - 2022-02-13 18:03 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2022-02-13 14:11 - 2022-02-13 18:02 - 000000000 ____D C:\WINDOWS\pss
2022-02-12 09:24 - 2022-02-12 09:24 - 000000000 ____D C:\rsit
2022-02-12 09:24 - 2022-02-12 09:24 - 000000000 ____D C:\Program Files\trend micro
2022-02-12 09:22 - 2022-02-13 15:45 - 000000000 ____D C:\AdwCleaner
2022-02-12 09:15 - 2022-02-12 09:15 - 002311680 _____ (Farbar) C:\Users\42191\Downloads\FRST64.exe
2022-02-12 09:04 - 2022-02-12 09:04 - 000000000 ____D C:\WINDOWS\Panther
2022-02-11 11:24 - 2022-02-11 11:24 - 000000000 ____D C:\Users\TEMP\AppData\LocalLow\Sun
2022-02-11 11:24 - 2022-02-11 11:24 - 000000000 ____D C:\Users\TEMP\AppData\Local\OneDrive
2022-02-11 11:20 - 2022-02-11 11:20 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2718211263-957613367-2003098252-1002
2022-02-11 11:20 - 2022-02-11 11:20 - 000002355 _____ C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-02-11 11:20 - 2022-02-11 11:20 - 000000000 ___RD C:\Users\TEMP\OneDrive
2022-02-11 11:20 - 2022-02-11 11:20 - 000000000 ____D C:\Users\TEMP\AppData\Local\VirtualStore
2022-02-11 11:19 - 2022-02-11 11:19 - 000000000 ____D C:\Users\TEMP\AppData\Local\PlaceholderTileLogoFolder
2022-02-11 11:19 - 2022-02-11 11:19 - 000000000 ____D C:\Users\TEMP\AppData\Local\packages
2022-02-11 11:18 - 2022-02-13 15:45 - 000000000 ____D C:\Users\TEMP\AppData\Local\Lenovo
2022-02-11 11:18 - 2022-02-13 14:21 - 000000000 ____D C:\Users\TEMP
2022-02-11 11:18 - 2022-02-11 11:18 - 000000020 ___SH C:\Users\TEMP\ntuser.ini
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\LocalLow\AMD
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\Google
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\D3DSCache
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\ConnectedDevicesPlatform
2022-02-11 11:18 - 2022-02-11 11:18 - 000000000 ____D C:\Users\TEMP\AppData\Local\AMD
2022-02-11 11:18 - 2021-10-11 13:59 - 000000000 ____D C:\Users\TEMP\AppData\Local\Epic Games
2022-02-11 11:18 - 2021-06-05 13:04 - 000001281 _____ C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2022-02-11 11:18 - 2021-06-05 13:04 - 000000407 _____ C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2022-02-11 11:14 - 2022-02-11 11:14 - 000000000 ____D C:\Users\Evka\AppData\Roaming\vlc
2022-02-11 11:13 - 2022-02-11 11:13 - 000000000 _____ C:\Users\Evka\AppData\Local\{3A4C6331-CFBA-47A9-8764-4D755AC75192}
2022-02-11 11:12 - 2022-02-13 15:45 - 000000000 ____D C:\Users\Evka\AppData\Local\Lenovo
2022-02-11 11:11 - 2022-02-11 11:11 - 000000020 ___SH C:\Users\Evka\ntuser.ini
2022-02-11 11:11 - 2022-02-11 11:11 - 000000000 ____D C:\Users\Evka\AppData\Local\Google
2022-02-11 11:11 - 2022-02-11 11:11 - 000000000 ____D C:\Users\Evka\AppData\Local\D3DSCache
2022-02-10 19:00 - 2021-06-01 07:28 - 017869208 _____ C:\WINDOWS\system32\RsDMFT_Assets.dll
2022-02-10 19:00 - 2021-06-01 07:28 - 009744808 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RsDMFT64.dll
2022-02-09 09:18 - 2022-02-11 17:15 - 000000000 ____D C:\Users\42191\AppData\Roaming\vlc
2022-02-07 13:36 - 2022-02-12 08:59 - 000000000 ____D C:\Users\42191\AppData\Local\Discord
2022-02-07 13:36 - 2022-02-07 13:36 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup (3).exe
2022-02-07 13:29 - 2022-02-07 13:29 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup (2).exe
2022-02-07 00:17 - 2022-02-07 00:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2022-02-07 00:16 - 2022-02-13 15:54 - 000803404 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-02-07 00:15 - 2022-02-13 14:05 - 000000000 ____D C:\Users\42191\AppData\Local\D3DSCache
2022-02-07 00:15 - 2022-02-07 00:15 - 000000020 ___SH C:\Users\42191\ntuser.ini
2022-02-07 00:14 - 2022-02-13 18:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-07 00:14 - 2022-02-13 15:45 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2022-02-07 00:14 - 2022-02-11 11:20 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2718211263-957613367-2003098252-1002
2022-02-07 00:14 - 2022-02-07 00:14 - 000017148 _____ C:\WINDOWS\diagwrn.xml
2022-02-07 00:14 - 2022-02-07 00:14 - 000017148 _____ C:\WINDOWS\diagerr.xml
2022-02-07 00:14 - 2022-02-07 00:14 - 000004036 _____ C:\WINDOWS\system32\Tasks\LenovoUtility Startup
2022-02-07 00:14 - 2022-02-07 00:14 - 000003504 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-02-07 00:14 - 2022-02-07 00:14 - 000003386 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-02-07 00:14 - 2022-02-07 00:14 - 000003280 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-02-07 00:14 - 2022-02-07 00:14 - 000003162 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-02-07 00:14 - 2022-02-07 00:14 - 000003062 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2718211263-957613367-2003098252-1001
2022-02-07 00:14 - 2022-02-07 00:14 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2718211263-957613367-2003098252-1001
2022-02-07 00:14 - 2022-02-07 00:14 - 000002854 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2718211263-957613367-2003098252-500
2022-02-07 00:14 - 2022-02-07 00:14 - 000002016 _____ C:\WINDOWS\system32\Tasks\Mirkat
2022-02-07 00:14 - 2022-02-07 00:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-02-07 00:14 - 2020-10-28 11:23 - 000002850 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-41625546-4094016361-2638902570-500
2022-02-07 00:14 - 2020-05-06 19:41 - 000003394 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3643460898-1865012685-2946422182-500
2022-02-07 00:08 - 2022-02-13 14:11 - 000000000 ____D C:\Users\42191
2022-02-07 00:08 - 2022-02-11 11:11 - 000000000 ____D C:\Users\Evka
2022-02-07 00:08 - 2021-06-05 13:04 - 000001281 _____ C:\Users\Evka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2022-02-07 00:08 - 2021-06-05 13:04 - 000001281 _____ C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2022-02-07 00:08 - 2021-06-05 13:04 - 000000407 _____ C:\Users\Evka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2022-02-07 00:08 - 2021-06-05 13:04 - 000000407 _____ C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2022-02-07 00:06 - 2022-02-13 18:01 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-02-07 00:06 - 2022-02-13 15:49 - 000470176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-07 00:06 - 2022-02-07 00:14 - 000000000 ____D C:\Windows.old
2022-02-07 00:02 - 2022-02-07 00:06 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2022-02-07 00:01 - 2022-02-07 00:02 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2022-02-07 00:01 - 2022-02-07 00:01 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2022-02-06 19:12 - 2022-02-06 19:12 - 000000000 ____D C:\Users\42191\Tracing
2022-01-31 12:21 - 2022-01-31 12:21 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup (1).exe
2022-01-31 12:19 - 2022-01-31 12:19 - 082973864 _____ (Discord Inc.) C:\Users\42191\Downloads\DiscordSetup.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-02-13 18:03 - 2021-06-05 13:09 - 000000000 ____D C:\WINDOWS\INF
2022-02-13 18:02 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\ServiceState
2022-02-13 18:02 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-02-13 18:02 - 2021-06-05 13:01 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-02-13 18:02 - 2020-05-06 19:33 - 000012288 ___SH C:\DumpStack.log.tmp
2022-02-13 18:01 - 2021-02-06 10:53 - 000000000 ____D C:\Program Files (x86)\Google
2022-02-13 17:10 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-02-13 16:11 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-02-13 16:10 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-02-13 16:09 - 2020-10-28 11:32 - 000000000 ____D C:\ProgramData\Lenovo
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemResources
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\id-ID
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2022-02-13 15:48 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-13 15:47 - 2021-06-05 19:04 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\Provisioning
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\DiagTrack
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-02-13 15:47 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Common Files\System
2022-02-13 15:47 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\servicing
2022-02-13 15:45 - 2021-01-11 09:04 - 000000000 ____D C:\Users\42191\AppData\Local\Lenovo
2022-02-13 15:32 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-02-13 15:09 - 2021-06-05 19:04 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2022-02-13 15:09 - 2021-06-05 19:04 - 000021047 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2022-02-13 14:42 - 2020-10-28 11:34 - 000000000 ____D C:\Program Files\Microsoft Office
2022-02-12 14:02 - 2021-02-06 10:54 - 000002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-02-12 09:24 - 2021-01-11 09:07 - 000000000 ____D C:\Users\42191\AppData\Local\PlaceholderTileLogoFolder
2022-02-12 09:20 - 2020-10-28 11:31 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-02-12 09:00 - 2021-10-11 15:43 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2022-02-12 08:59 - 2021-09-27 16:45 - 000000000 ____D C:\Users\42191\AppData\Roaming\discord
2022-02-12 08:51 - 2021-09-27 12:04 - 000000000 ____D C:\Users\42191\AppData\Local\CrashDumps
2022-02-11 20:35 - 2021-01-15 00:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-02-11 20:32 - 2021-11-20 21:17 - 000120296 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 002237928 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000337360 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000217536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000198096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2022-02-11 20:32 - 2021-09-27 19:00 - 000061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe
2022-02-11 20:30 - 2021-01-15 00:14 - 149611728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-02-11 11:18 - 2020-05-06 19:38 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-02-11 11:11 - 2021-01-11 12:36 - 000000000 ____D C:\Users\Evka\AppData\Local\Packages
2022-02-10 17:51 - 2020-05-06 19:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-02-09 07:07 - 2021-02-24 17:37 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-02-08 15:08 - 2021-01-11 09:06 - 000000000 __RDL C:\Users\42191\OneDrive
2022-02-07 13:37 - 2021-09-27 16:45 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2022-02-07 13:37 - 2021-01-11 09:11 - 000000000 ____D C:\Users\42191\AppData\Local\SquirrelTemp
2022-02-07 00:32 - 2021-06-05 13:10 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-02-07 00:32 - 2021-01-11 09:04 - 000000000 ____D C:\Users\42191\AppData\Local\Packages
2022-02-07 00:32 - 2021-01-11 06:56 - 000000000 ____D C:\ProgramData\Packages
2022-02-07 00:14 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Windows Defender
2022-02-07 00:14 - 2021-06-05 13:01 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-02-07 00:11 - 2021-06-05 13:10 - 000000000 __RHD C:\Users\Public\Libraries
2022-02-07 00:09 - 2021-09-29 15:54 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-02-07 00:09 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-02-07 00:09 - 2021-04-24 17:34 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2022-02-07 00:08 - 2021-10-11 14:04 - 000000000 ____D C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2022-02-07 00:07 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\appcompat
2022-02-07 00:07 - 2020-10-28 11:45 - 000000000 ____D C:\WINDOWS\system32\dolbyaposvc
2022-02-07 00:06 - 2021-12-09 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EAC MW klient
2022-02-07 00:06 - 2021-12-09 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disig Web Signer
2022-02-07 00:06 - 2021-09-29 15:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2022-02-07 00:06 - 2021-09-17 07:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2022-02-07 00:06 - 2021-06-27 13:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2022-02-07 00:06 - 2021-06-05 13:14 - 000000000 ____D C:\WINDOWS\Setup
2022-02-07 00:06 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2022-02-07 00:06 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\spool
2022-02-07 00:06 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\USOPrivate
2022-02-07 00:06 - 2021-06-05 13:08 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2022-02-07 00:06 - 2021-05-23 15:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje balíka Microsoft Office
2022-02-07 00:06 - 2021-03-21 19:48 - 000000000 ____D C:\WINDOWS\system32\Samsung
2022-02-07 00:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2022-02-07 00:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2022-02-07 00:03 - 2020-10-28 11:45 - 000000000 ____D C:\WINDOWS\system32\AMD
2022-02-07 00:03 - 2020-10-28 11:32 - 000000000 ____D C:\WINDOWS\Lenovo
2022-02-07 00:00 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\OCR
2022-02-06 23:58 - 2021-06-05 19:04 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-02-06 23:58 - 2021-06-05 18:57 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2022-02-06 23:58 - 2021-06-05 18:57 - 000000000 ____D C:\WINDOWS\system32\WCN
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-02-06 23:58 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2022-01-28 20:04 - 2021-11-19 14:33 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\WudfUpdate_02000.dll
2022-01-28 20:04 - 2021-11-19 14:33 - 000064256 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.InfInstaller.exe
2022-01-28 20:04 - 2020-10-28 11:32 - 000109312 _____ (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.CoInstaller.dll
2022-01-28 20:03 - 2021-11-19 14:33 - 000431016 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2022-01-26 09:31 - 2021-01-11 08:59 - 000002374 _____ C:\Users\42191\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)



safeboot: Minimal => The system is configured to boot to Safe Mode <==== ATTENTION
==================== End of FRST.txt ========================
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#13 Příspěvek od jacho6380 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-02-2022
Ran by 42191 (13-02-2022 18:05:20)
Running from C:\Users\42191\Downloads
Microsoft Windows 11 Home Version 21H2 22000.318 (X64) (2022-02-06 23:14:46)
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

42191 (S-1-5-21-2718211263-957613367-2003098252-1001 - Administrator - Enabled) => C:\Users\42191
Administrator (S-1-5-21-2718211263-957613367-2003098252-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2718211263-957613367-2003098252-503 - Limited - Disabled)
Evka (S-1-5-21-2718211263-957613367-2003098252-1002 - Administrator - Enabled) => C:\Users\TEMP
Guest (S-1-5-21-2718211263-957613367-2003098252-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2718211263-957613367-2003098252-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.06.07.2238 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{d91b7809-0832-4ef3-8f9f-89b80409368c}) (Version: 2.06.07.2238 - Advanced Micro Devices, Inc.) Hidden
Balík softvéru eID (HKLM-x32\...\{d2c66c1e-5862-43e7-abe2-9c895312112c}) (Version: 1.0.0.0 - Ministerstvo vnútra Slovenskej republiky) Hidden
Disig Web Signer (HKLM-x32\...\{41C0F02D-2389-4AB5-975C-C2363E7C554C}) (Version: 2.0.7 - Disig)
EAC MW klient (HKLM-x32\...\{E22CF5CA-5935-451D-9B9D-EAA79DE703BD}) (Version: 3.7.0 - Ministerstvo vnútra Slovenskej republiky)
Epic Games Launcher (HKLM-x32\...\{7733DDD0-3513-4A99-BFFE-A6D73BE49B50}) (Version: 1.2.35.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 98.0.4758.82 - Google LLC)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.10.26.0 - Lenovo Group Ltd.)
Microsoft 365 - sk-sk (HKLM\...\O365HomePremRetail - sk-sk) (Version: 16.0.14827.20192 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 98.0.1108.50 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 98.0.1108.50 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\OneDriveSetup.exe) (Version: 22.002.0103.0004 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\Teams) (Version: 1.5.00.2164 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
NVIDIA GeForce NOW 2.0.33.123 (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GeforceNOW) (Version: 2.0.33.123 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14827.20088 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14827.20158 - Microsoft Corporation) Hidden
Roblox Player for 42191 (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for 42191 (HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\roblox-studio) (Version: - Roblox Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WinRAR 5.91 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10028.0_x64__0a9344xs7nr4m [2022-02-11] (Advanced Micro Devices Inc.) [Startup Task]
Dolby Audio -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudio_3.20602.609.0_x64__rz1tebttyb220 [2020-10-28] (Dolby Laboratories)
Doplnok mediálneho nástroja pre Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-02-06] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_134.1.221.0_x64__v10z8vjag6ke6 [2022-02-08] (HP Inc.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.2.15.0_x64__5grkq8ppsgwt4 [2021-11-21] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2112.10.0_x64__k1h2ywk1493x8 [2021-12-29] (LENOVO INC.)
McAfee® Personal Security -> C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.68.0_x64__wafk5atnkzcwy [2021-11-17] (McAfee LLC.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-02-07] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-02-07] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-19] (Microsoft Studios) [MS Ad]
Mirkat -> C:\Program Files\WindowsApps\Mirkat.Mirkat_1.0.305.0_x64__hm0vq9nycmfde [2021-08-29] (Mirkat)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.15.227.0_x64__dt26b99r8h8gj [2021-11-01] (Realtek Semiconductor Corp)
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.512.415.0_x86__55nm5eh3cm0pr [2022-02-08] (ROBLOX Corporation)
Rozšírenie pre video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-08-29] (Microsoft Corporation)
Up in the Sky -> C:\Program Files\WindowsApps\Microsoft.UpintheSky_2.0.0.0_neutral__8wekyb3d8bbwe [2021-10-11] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2718211263-957613367-2003098252-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\42191\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21348.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2718211263-957613367-2003098252-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\42191\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-08-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\42191\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-2718211263-957613367-2003098252-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2021-06-27] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-02] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-13] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2718211263-957613367-2003098252-1001\...\sharepoint.com -> hxxps://zsmskuchyna-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\EAC MW klient\
HKU\S-1-5-21-2718211263-957613367-2003098252-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\42191\OneDrive\Počítač\hhhhhhhhhhhhhhhh.jpg
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{580022A0-F970-48F4-92BA-2944DC58D505}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{611EA158-3EC1-4DEF-BDB3-A4695B1DD1F3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{69B52C73-CDCF-4DBA-8502-E76CF032E0F0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5E23874A-38CD-42B2-A68A-1397764244FD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4E535A78-981B-47C4-942A-CA74BDC6306B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9FCDDEE8-F123-4633-9EC3-C128F0904792}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{C52D1EC0-7985-4B31-BD0F-C3FCF62CDB38}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{031E8818-39C1-4B3F-AF92-04B12A507684}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [{97C731F1-CE4D-4EF5-B61F-BF378140CE63}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [UDP Query User{904EE131-3E17-4CCF-A97B-F8686F98B1F6}C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe] => (Allow) C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{F9DBB306-95AA-42A7-9A94-2EE1AE1C4A6D}C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe] => (Allow) C:\users\42191\appdata\local\nvidia corporation\geforcenow\cef\geforcenow.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{924B54B6-8DC6-44FF-917B-24906C12ADE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{56CC0264-889E-4B83-A8EA-61E406567A5D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{735CE049-81EB-4E3E-8D59-BD5A754EBA7D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7222E934-51EB-4521-BABB-7C56ED5FE5BE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [UDP Query User{D5F0591B-91BE-4D24-98AC-CBE50A77CCE2}C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Block) C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{2C2593CC-CF2D-4812-88B2-56A42D156488}C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Block) C:\users\42191\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{E3D1B428-14BE-48D0-8AC7-8B7C50A654BB}C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [TCP Query User{3DA3E865-4646-4515-9B6A-4C29A114738B}C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\42191\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe
FirewallRules: [UDP Query User{71232C3E-E479-4009-9BDC-2101E72FE134}C:\users\42191\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\42191\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{3F877831-EF54-45BD-B411-7F215F756FC9}C:\users\42191\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\42191\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{AFFCB813-39B2-4331-87F4-362F91D56192}C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe] => (Allow) C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe => No File
FirewallRules: [UDP Query User{0CDE4A7A-A8C0-4C86-9791-7BD8DA432454}C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe] => (Allow) C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe => No File
FirewallRules: [{80C0059F-BF29-4143-A68E-1F733553DED7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{8E3ACCD5-4DB0-45AD-ADD1-155E91F5F352}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.50\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:56.99 GB) (Free:4.68 GB) (8%)
Check "VSS" service


==================== Faulty Device Manager Devices ============

Name: Microsoft Hyper-V Virtualization Infrastructure Driver
Description: Microsoft Hyper-V Virtualization Infrastructure Driver
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: Vid
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Realtek(R) Audio
Description: Realtek High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: IntcAzAudAddService
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: AMD High Definition Audio Device
Description: AMD High Definition Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Advanced Micro Devices
Service: AtiHDAudioService
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Steam Streaming Microphone
Description: Steam Streaming Microphone
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Valve Corporation Audio DDK
Service: SteamStreamingMicrophone
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Steam Streaming Speakers
Description: Steam Streaming Speakers
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Valve Corporation Audio DDK
Service: SteamStreamingSpeakers
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: System Interface Foundation V2 Device
Description: System Interface Foundation V2 Device
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Lenovo
Service: WUDFRd
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: ========================

Application errors:
==================
Error: (02/13/2022 03:50:28 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\LAPTOP-EE1CTV48$ via https://AMD-KeyId-578c545f796951421221a ... s/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 13 Feb 2022 14:50:28 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 20991bca-e461-469b-8735-7769f40bba80

Method: GET(547ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (02/13/2022 03:50:27 PM) (Source: EID SK Card CSP v2.0) (EventID: 26) (User: )
Description: Event-ID 26

Error: (02/13/2022 03:50:27 PM) (Source: EID SK Card CSP v2.0) (EventID: 26) (User: )
Description: Event-ID 26

Error: (02/13/2022 02:14:10 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.

Error: (02/13/2022 02:14:10 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (02/13/2022 02:11:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: OfficeC2RClient.exe, verzia: 16.0.14729.20254, časová značka: 0x61dc00d9
Názov chybujúceho modulu: OfficeC2RClient.exe, verzia: 16.0.14729.20254, časová značka: 0x61dc00d9
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000047206b
Identifikácia chybujúceho procesu: 0x1984
Čas spustenia chybujúcej aplikácie: 0x01d820dad959a609
Cesta chybujúcej aplikácie: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Cesta chybujúceho modulu: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Identifikácia hlásenia: 8ead5615-bc33-4411-b6a7-84f6d29662e9
Celé meno chybujúceho balíka:
Identifikácia chybujúcej aplikácie vzhľadom na balík:

Error: (02/13/2022 02:05:44 PM) (Source: MsiInstaller) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: Product: Epic Games Launcher -- Epic Games Launcher is currently running and the Setup Wizard can not continue. Please close the Epic Games Launcher and run the Setup Wizard again.

Error: (02/12/2022 01:54:15 PM) (Source: MsiInstaller) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: Product: Epic Games Launcher -- Epic Games Launcher is currently running and the Setup Wizard can not continue. Please close the Epic Games Launcher and run the Setup Wizard again.


System errors:
=============
Error: (02/13/2022 06:05:52 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM got error "1084" attempting to start the service EventSystem with arguments "Unavailable" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (02/13/2022 06:05:44 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{4991D34B-80A1-4291-83B6-3328366B9097}

Error: (02/13/2022 06:05:44 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{F087771F-D74F-4C1A-BB8A-E16ACA9124EA}

Error: (02/13/2022 06:05:44 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{6D18AD12-BDE3-4393-B311-099C346E6DF9}

Error: (02/13/2022 06:05:44 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{03CA98D6-FF5D-49B8-ABC6-03DD84127020}

Error: (02/13/2022 06:05:44 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{659CDEA7-489E-11D9-A9CD-000D56965251}

Error: (02/13/2022 06:05:44 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{BB6DF56B-CACE-11DC-9992-0019B93A3A84}

Error: (02/13/2022 06:05:44 PM) (Source: DCOM) (EventID: 10005) (User: LAPTOP-EE1CTV48)
Description: DCOM got error "1084" attempting to start the service BITS with arguments "Unavailable" in order to run the server:
{1ECCA34C-E88A-44E3-8D6A-8921BDE9E452}


Windows Defender:
================Event[0]

Date: 2022-02-13 18:03:02
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem. ਍

Date: 2022-02-13 14:14:37
Description:
N/A

Date: 2022-02-11 20:37:15
Description:
N/A

Date: 2022-02-11 20:37:15
Description:
N/A

Date: 2022-02-11 13:54:24
Description:
N/A

==================== Memory info ===========================

BIOS: LENOVO FQCN12WW 08/21/2020
Motherboard: LENOVO LNVNB161216
Processor: AMD 3020e with Radeon Graphics
Percentage of memory in use: 48%
Total physical RAM: 3467.15 MB
Available physical RAM: 1791.77 MB
Total Virtual: 6934.3 MB
Available Virtual: 5463.39 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:56.99 GB) (Free:4.68 GB) NTFS

\\?\Volume{3bb08ad6-2cc9-4369-9696-3cae3a4f9afd}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.5 GB) NTFS
\\?\Volume{ca13d2ac-3beb-4f4c-9702-1ea0042f6826}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 58.2 GB) (Disk ID: 60DCFA44)

Partition: GPT.

==================== End of Addition.txt =======================
Nahoru
jacho6380
Návštěvník
Návštěvník
Příspěvky: 104
Registrován: 05 pro 2007 18:14
Bydliště: Kuchyňa 531

Re: Totalne pomaly NTB

#14 Příspěvek od jacho6380 »

Nech sa paci, mohol by som potom aj vediet co to sposobilo? Dakujem
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119402
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Totalne pomaly NTB

#15 Příspěvek od Rudy »

Určitě můžete, ale nejprve ještě jedna operace. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
FirewallRules: [{9FCDDEE8-F123-4633-9EC3-C128F0904792}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{C52D1EC0-7985-4B31-BD0F-C3FCF62CDB38}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File
FirewallRules: [{031E8818-39C1-4B3F-AF92-04B12A507684}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [{97C731F1-CE4D-4EF5-B61F-BF378140CE63}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [{924B54B6-8DC6-44FF-917B-24906C12ADE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{56CC0264-889E-4B83-A8EA-61E406567A5D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{735CE049-81EB-4E3E-8D59-BD5A754EBA7D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{7222E934-51EB-4521-BABB-7C56ED5FE5BE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [TCP Query User{AFFCB813-39B2-4331-87F4-362F91D56192}C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe] => (Allow) C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe => No File
FirewallRules: [UDP Query User{0CDE4A7A-A8C0-4C86-9791-7BD8DA432454}C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe] => (Allow) C:\users\42191\appdata\local\discord\app-1.0.9003\discord.exe => No File
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\Run: [OneDrive] => C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2367352 2022-02-11] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Uninstall 21.050.0310.0001\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\21.050.0310.0001\amd64" <==== ATTENTION
HKU\S-1-5-21-2718211263-957613367-2003098252-1002\...\RunOnce: [Uninstall 21.050.0310.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\21.050.0310.0001" <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {1CCE622E-B634-4B73-BD63-EBA448DBE2DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-02-06] (Google LLC -> Google LLC)
Task: {217F0385-884F-4087-8FCB-F3F47D6F0E56} - \Lenovo\ImController\TimeBasedEvents\5395e4a9-d343-4ca1-916d-21e59be6e634 -> No File <==== ATTENTION
Task: {23CC5C77-E7CA-4CDA-9C46-A86D98049068} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
ask: {64F9655E-2701-4DC4-B3B9-DC095D441253} - \Lenovo\ImController\TimeBasedEvents\8adf1ec4-298b-442e-aa8a-b48082b43609 -> No File <==== ATTENTION
Task: {BFDB6329-77BD-4CC9-83C7-3DD75AB79E64} - \Lenovo\ImController\TimeBasedEvents\7b691cc3-1c0a-4b8b-b7da-38cab77d386b -> No File <==== ATTENTION
Task: {CAB83D19-A7D3-4BF3-983A-779D984658AD} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Task: {D0D3711F-4CF6-4CB6-9FEA-B078B5609365} - \Lenovo\ImController\TimeBasedEvents\5b6229ec-3dfa-4cbb-b8bc-ca30d69d13c6 -> No File <==== ATTENTION
Task: {D2428E9D-946B-4D6A-8463-8091565A705E} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {F580714D-9A59-4631-8190-6CE27DC30D6F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-02-06] (Google LLC -> Google LLC)
C:\Users\TEMP
C:\Users\Evka\AppData\Local\{3A4C6331-CFBA-47A9-8764-4D755AC75192}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:
End
Uložte do C:\Users\42191\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“