Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kamarádův PC se seká

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Uživatelský avatar
PacandaMilan
Návštěvník
Návštěvník
Příspěvky: 171
Registrován: 04 úno 2011 19:55
Bydliště: Znojmo

Kamarádův PC se seká

#1 Příspěvek od PacandaMilan »

Dobrý den, dnes mi donesl kamarad PC jestli bych se na něj nepodival, ma 9leteho syna a nejspis tam nastahoval plno blbostí, mozna malwaru.
Byl bych rád kdyby jste mi někdo hodnej projel log. Měl tam dokonce 3 antiviry naráz + plno iobit blbostí atp. :D ty jsem odstranil a nechal windows defender.
Zdá se, že se to zlepšilo, ale rád bych ještě tu havěť.
Děkuji moc !


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-08-2022
Ran by PROBOOK (administrator) on DESKTOP-6O8FFM9 (Hewlett-Packard HP ProBook 4535s) (02-09-2022 20:14:24)
Running from C:\Users\PROBOOK\Desktop
Loaded Profiles: PROBOOK
Platform: Microsoft Windows 10 Home Version 21H2 19044.1645 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe ->) (IObit CO., LTD -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Pub\PubPlatform.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(explorer.exe ->) (IObit CO., LTD -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\PROBOOK\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <26>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(services.exe ->) (IObit CO., LTD -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Shanghai Microvirt Software Technology Co., Ltd. -> ) C:\Program Files\Microvirt\MEmu\MemuService.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2945080 2011-09-12] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\Run: [Advanced SystemCare] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3779152 2021-09-28] (IObit CO., LTD -> IObit)
HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\Run: [Microsoft Edge Update] => C:\Users\PROBOOK\AppData\Local\Microsoft\EdgeUpdate\1.3.167.21\MicrosoftEdgeUpdateCore.exe [253888 2022-08-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\PROBOOK\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\PROBOOK\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\RunOnce: [Uninstall 22.161.0731.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PROBOOK\AppData\Local\Microsoft\OneDrive\22.161.0731.0002" (No File)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\104.0.5112.102\Installer\chrmstp.exe [2022-08-27] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {042FA51C-CDE8-40A7-8634-F8A8704022F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2022-06-24] (Google Inc -> Google LLC)
Task: {05CAB24F-08BE-4BD8-A82E-40C2286E7E1E} - System32\Tasks\iTop Screenshot SkipUAC (PROBOOK) => C:\Program Files\iTop Screenshot\iScrShot.exe [7622656 2021-07-21] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {0660C227-F426-4655-B241-C463E573C8B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {12755593-DFEA-40D4-B27F-1363BC2D62A0} - System32\Tasks\iTop Screen Recorder UAC => C:\Program Files\iTop Screen Recorder\iScrInit.exe [1544192 2022-03-11] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {1A70D12D-F40F-4118-8967-38A9DFCAC409} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2022-06-24] (Google Inc -> Google LLC)
Task: {2EDA3FF4-E77C-4D6C-9B41-67D27012F017} - System32\Tasks\iTop Screen Recorder SkipUAC (PROBOOK) => C:\Program Files\iTop Screen Recorder\IScrRec.exe [14659584 2022-03-25] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {31DA501C-D973-4870-B934-DEB4693C74E3} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [4813392 2021-12-16] (IObit CO., LTD -> IObit)
Task: {4187e56b-7051-42ad-b5e3-ffb76487aaa4} - no filepath
Task: {43B4BC1E-8BDA-41CD-A73C-BAAAEA8A60E2} - System32\Tasks\iTop Screen Recorder Startup => C:\Program Files\iTop Screen Recorder\IScrRec.exe [14659584 2022-03-25] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {4D9764B7-477C-443F-A4F7-BC236DF0C564} - System32\Tasks\iTopVPN_SkipUAC_PROBOOK => C:\Program Files (x86)\iTop VPN\iTopVPN.exe [6338104 2022-04-01] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {538D2109-1D6F-4666-ABAD-5658F1D946A5} - System32\Tasks\ASC_SkipUac_PROBOOK => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [10708048 2021-12-16] (IObit CO., LTD -> IObit)
Task: {5899F9D3-9908-44F9-8606-C24DC566E8B2} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {607C7758-EC76-474B-A0FE-E9D44986A99C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {7F359DAC-AA69-41CA-BFBA-9ECD844357DA} - System32\Tasks\iTopVPN_Update_PROBOOK => C:\Program Files (x86)\iTop VPN\atud.exe [3102936 2022-08-24] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {7F787435-2458-4889-8A31-AEBB1278DD9A} - System32\Tasks\Sump Task (One-Time) => C:\Program Files (x86)\IObit\Software Updater\sump.exe /sup2 (No File)
Task: {9EBF6118-7A66-4FEB-A496-01C33A7EECD3} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-934655967-2770029963-2865322245-1002UA => C:\Users\PROBOOK\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [215992 2022-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {A0BFAC31-431E-4FAB-A605-9BF6173B3869} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-934655967-2770029963-2865322245-1002Core => C:\Users\PROBOOK\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [215992 2022-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {A44AAD0B-FBEE-4BD7-9406-85F0BD1199C4} - System32\Tasks\iTop Screenshot Update => C:\Program Files\iTop Screenshot\AutoUpdate.exe [2800640 2021-07-21] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {AF2259E3-945C-4E14-8CDB-6476706EE6FF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B749EF52-5EFE-4CDF-B74C-81E3E18E4DCD} - System32\Tasks\iTop Screenshot Startup => C:\Program Files\iTop Screenshot\iScrShot.exe [7622656 2021-07-21] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {C6A18F20-42C5-4003-9C65-884780FE79A8} - System32\Tasks\iTopVPN_Scheduler_PROBOOK => C:\Program Files (x86)\iTop VPN\iTopVPN.exe [6338104 2022-04-01] (ORANGE VIEW LIMITED -> iTop Inc.)
Task: {CC775701-EA05-4977-9EA9-866EC537B27E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DC350D27-F4ED-4B1C-858F-7AD6545CF762} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {EBB67469-A607-48E0-B2D9-26D0164B39AA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F5C3B219-6561-4CB0-9A9B-F936BF1BFEEE} - System32\Tasks\iTop Screen Recorder Update => C:\Program Files\iTop Screen Recorder\AutoUpdate.exe [2915840 2022-03-16] (ORANGE VIEW LIMITED -> iTop Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{5ec33ca5-500b-45dd-a6e8-b64ceb8bb7ee}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{ec29fad8-9d60-44a7-bb1e-c46d8d341542}: [DhcpNameServer] 172.16.5.59

Edge:
=======
Edge Profile: C:\Users\PROBOOK\AppData\Local\Microsoft\Edge\User Data\Default [2022-09-01]

FireFox:
========
FF DefaultProfile: vwckgd5j.default
FF ProfilePath: C:\Users\PROBOOK\AppData\Roaming\Mozilla\Firefox\Profiles\vwckgd5j.default [2022-03-13]
FF ProfilePath: C:\Users\PROBOOK\AppData\Roaming\Mozilla\Firefox\Profiles\b798zp0z.default-release [2022-09-02]
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\PROBOOK\AppData\Local\Google\Chrome\User Data\Default [2022-09-02]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\PROBOOK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-04]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 AdvancedSystemCareService15; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1873488 2021-08-21] (IObit CO., LTD -> IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [File not signed]
R2 MEmuSVC; C:\Program Files\Microvirt\MEmu\MemuService.exe [85304 2019-09-12] (Shanghai Microvirt Software Technology Co., Ltd. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 AvastWscReporter; "C:\Program Files\Avast Software\Avast\wsc_proxy.exe" /runassvc /rpcserver [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R3 AscFileFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [46552 2021-07-07] (IObit CO., LTD -> IObit)
R3 AscRegistryFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [46552 2021-07-07] (IObit CO., LTD -> IObit)
R3 Btcsrusb; C:\WINDOWS\System32\Drivers\brlinkusb.sys [205312 2022-03-13] (Microsoft Windows Hardware Compatibility Publisher -> BARROT Corporation.)
R3 cpuz150; C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys [44832 2022-09-02] (CPUID S.A.R.L.U. -> CPUID)
S3 iaLPSS2i_GPIO2_GLK; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256 2019-12-07] (Microsoft Windows -> Intel Corporation) [File not signed]
R3 iobit_monitor_server2021; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [33256 2021-08-11] (IObit CO., LTD -> IObit)
R1 MEmuDrv; C:\WINDOWS\system32\DRIVERS\MEmuDrv.sys [320360 2021-01-04] (Shanghai Microvirt Software Technology Co., Ltd. -> Maiwei Corporation)
R3 MpKslf074f0f6; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E2830AFB-A5CC-4E75-8697-201A9FDFBC0E}\MpKslDrv.sys [141576 2022-09-02] (Microsoft Windows -> Microsoft Corporation)
R3 SNP2UVCW10; C:\WINDOWS\system32\DRIVERS\snUVCg2.sys [2528352 2022-03-13] (Sonix Technology CO., LTD -> Sonix Tech. Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-09-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-09-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-09-02] (Microsoft Windows -> Microsoft Corporation)
U1 aswbdisk; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-09-02 20:14 - 2022-09-02 20:17 - 000017880 _____ C:\Users\PROBOOK\Desktop\FRST.txt
2022-09-02 20:12 - 2022-09-02 20:16 - 000000000 ____D C:\FRST
2022-09-02 20:10 - 2022-09-02 20:10 - 002371072 _____ (Farbar) C:\Users\PROBOOK\Desktop\FRST64.exe
2022-09-02 20:08 - 2022-09-02 20:08 - 002101072 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher.exe
2022-09-02 20:08 - 2022-09-02 20:08 - 000001246 _____ C:\Users\PROBOOK\Desktop\Roblox Studio.lnk
2022-09-02 20:03 - 2022-09-02 20:03 - 000000000 ____D C:\Users\PROBOOK\AppData\Local\D3DSCache
2022-09-02 19:22 - 2022-09-02 19:22 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2022-09-01 16:12 - 2022-09-01 16:12 - 000000000 ___HD C:\$WinREAgent
2022-08-31 11:09 - 2022-08-31 11:11 - 000000000 ____D C:\Users\PROBOOK\AppData\Local\PKXD-Game
2022-08-27 20:11 - 2022-08-27 20:11 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1074).exe
2022-08-27 19:32 - 2022-08-27 19:32 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1073).exe
2022-08-27 18:54 - 2022-08-27 18:54 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1072).exe
2022-08-27 16:49 - 2022-08-27 16:49 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1071).exe
2022-08-27 16:30 - 2022-08-27 16:30 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1070).exe
2022-08-27 16:14 - 2022-08-27 16:14 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1069).exe
2022-08-27 14:53 - 2022-08-27 14:53 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1068).exe
2022-08-27 13:16 - 2022-08-27 13:16 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1067).exe
2022-08-27 13:15 - 2022-08-27 13:15 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1066).exe
2022-08-27 13:13 - 2022-08-27 13:13 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1065).exe
2022-08-27 13:11 - 2022-08-27 13:11 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1064).exe
2022-08-27 13:10 - 2022-08-27 13:10 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1063).exe
2022-08-27 13:08 - 2022-08-27 13:08 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1062).exe
2022-08-27 13:07 - 2022-08-27 13:07 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1061).exe
2022-08-27 13:06 - 2022-08-27 13:06 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1060).exe
2022-08-27 13:04 - 2022-08-27 13:04 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1059).exe
2022-08-27 13:03 - 2022-08-27 13:03 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1058).exe
2022-08-27 13:02 - 2022-08-27 13:02 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1057).exe
2022-08-27 13:00 - 2022-08-27 13:00 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1056).exe
2022-08-27 12:57 - 2022-08-27 12:57 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1055).exe
2022-08-27 12:56 - 2022-08-27 12:56 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1054).exe
2022-08-26 22:50 - 2022-08-26 22:50 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1053).exe
2022-08-26 22:17 - 2022-08-26 22:17 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1052).exe
2022-08-26 21:05 - 2022-08-26 21:05 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1051).exe
2022-08-26 20:47 - 2022-08-26 20:47 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1050).exe
2022-08-26 20:45 - 2022-08-26 20:45 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1049).exe
2022-08-26 20:44 - 2022-08-26 20:44 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1048).exe
2022-08-26 20:43 - 2022-08-26 20:43 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1047).exe
2022-08-26 20:40 - 2022-08-26 20:40 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1046).exe
2022-08-26 20:38 - 2022-08-26 20:39 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1045).exe
2022-08-26 20:38 - 2022-08-26 20:38 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1044).exe
2022-08-26 20:36 - 2022-08-26 20:36 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1043).exe
2022-08-26 20:34 - 2022-08-26 20:34 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1042).exe
2022-08-26 20:33 - 2022-08-26 20:33 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1041).exe
2022-08-26 20:32 - 2022-08-26 20:32 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1040).exe
2022-08-26 15:29 - 2022-08-26 15:29 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1039).exe
2022-08-26 14:58 - 2022-08-26 14:58 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1038).exe
2022-08-26 13:47 - 2022-08-26 13:48 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1037).exe
2022-08-26 12:42 - 2022-08-26 12:43 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1036).exe
2022-08-26 11:48 - 2022-08-26 11:48 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1035).exe
2022-08-26 11:34 - 2022-08-26 11:34 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1034).exe
2022-08-26 09:13 - 2022-08-26 09:13 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1033).exe
2022-08-26 09:12 - 2022-08-26 09:12 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1032).exe
2022-08-26 09:10 - 2022-08-26 09:10 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1031).exe
2022-08-25 21:29 - 2022-08-25 21:29 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1030).exe
2022-08-25 21:28 - 2022-08-25 21:28 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1029).exe
2022-08-24 21:13 - 2022-08-24 21:13 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1028).exe
2022-08-24 20:19 - 2022-08-24 20:19 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1027).exe
2022-08-24 20:10 - 2022-08-24 20:10 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1026).exe
2022-08-24 20:07 - 2022-08-24 20:08 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1025).exe
2022-08-24 20:06 - 2022-08-24 20:06 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1024).exe
2022-08-24 20:05 - 2022-08-24 20:05 - 002056016 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1023).exe
2022-08-24 20:01 - 2022-08-24 20:01 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1022).exe
2022-08-24 16:15 - 2022-08-24 16:16 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1021).exe
2022-08-24 14:48 - 2022-08-24 14:48 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1020).exe
2022-08-24 14:45 - 2022-08-24 14:45 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1019).exe
2022-08-24 14:43 - 2022-08-24 14:44 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1018).exe
2022-08-24 14:43 - 2022-08-24 14:43 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1017).exe
2022-08-24 14:39 - 2022-08-24 14:40 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1016).exe
2022-08-24 14:38 - 2022-08-24 14:38 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1015).exe
2022-08-24 14:37 - 2022-08-24 14:37 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1014).exe
2022-08-24 14:36 - 2022-08-24 14:36 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1013).exe
2022-08-24 14:34 - 2022-08-24 14:34 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1012).exe
2022-08-24 14:34 - 2022-08-24 14:34 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1011).exe
2022-08-24 13:58 - 2022-08-24 13:58 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1010).exe
2022-08-24 13:41 - 2022-08-24 13:41 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1009).exe
2022-08-24 13:33 - 2022-08-24 13:33 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1008).exe
2022-08-24 10:59 - 2022-08-24 10:59 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1007).exe
2022-08-24 10:54 - 2022-08-24 10:55 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1006).exe
2022-08-23 20:46 - 2022-08-23 20:46 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1005).exe
2022-08-23 20:41 - 2022-08-23 20:42 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1004).exe
2022-08-23 09:44 - 2022-08-23 09:44 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1003).exe
2022-08-22 21:36 - 2022-08-22 21:37 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1002).exe
2022-08-22 20:43 - 2022-08-22 20:43 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1001).exe
2022-08-22 19:46 - 2022-08-22 19:47 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(1000).exe
2022-08-22 14:26 - 2022-08-22 14:27 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(999).exe
2022-08-22 13:10 - 2022-08-22 13:10 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(998).exe
2022-08-22 11:17 - 2022-08-22 11:18 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(997).exe
2022-08-22 11:03 - 2022-08-22 11:03 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(996).exe
2022-08-21 19:10 - 2022-08-21 19:10 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(995).exe
2022-08-21 18:25 - 2022-08-21 18:25 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(994).exe
2022-08-21 18:13 - 2022-08-21 18:13 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(993).exe
2022-08-21 18:04 - 2022-08-21 18:04 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(992).exe
2022-08-21 15:36 - 2022-08-21 15:36 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(991).exe
2022-08-21 14:37 - 2022-08-21 14:37 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(990).exe
2022-08-21 12:26 - 2022-08-21 12:26 - 000000000 _____ C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(989).exe
2022-08-21 10:34 - 2022-08-21 10:35 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(988).exe
2022-08-20 19:57 - 2022-08-20 19:57 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(987).exe
2022-08-20 19:35 - 2022-08-20 19:35 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(986).exe
2022-08-20 18:53 - 2022-08-20 18:53 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(985).exe
2022-08-20 18:00 - 2022-08-20 18:00 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(984).exe
2022-08-20 16:54 - 2022-08-20 16:54 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(983).exe
2022-08-20 15:45 - 2022-08-20 15:45 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(982).exe
2022-08-20 14:42 - 2022-08-20 14:42 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(981).exe
2022-08-20 12:00 - 2022-08-20 12:00 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(980).exe
2022-08-20 11:56 - 2022-08-20 11:57 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(979).exe
2022-08-19 15:28 - 2022-08-19 15:28 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(978).exe
2022-08-18 15:15 - 2022-08-18 15:16 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(977).exe
2022-08-18 14:09 - 2022-08-18 14:09 - 000000000 _____ C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(976).exe
2022-08-18 12:23 - 2022-08-18 12:23 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(975).exe
2022-08-18 12:22 - 2022-08-18 12:22 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(974).exe
2022-08-18 10:44 - 2022-08-18 10:44 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(973).exe
2022-08-18 10:44 - 2022-08-18 10:44 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(972).exe
2022-08-18 10:42 - 2022-08-18 10:42 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(971).exe
2022-08-18 10:36 - 2022-08-18 10:36 - 000767618 _____ C:\Users\PROBOOK\Downloads\papertoys.pdf
2022-08-18 10:27 - 2022-08-18 10:27 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(970).exe
2022-08-17 20:48 - 2022-08-17 20:48 - 002066768 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(969).exe
2022-08-17 20:40 - 2022-08-17 20:40 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(968).exe
2022-08-17 20:38 - 2022-08-17 20:38 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(967).exe
2022-08-17 18:41 - 2022-08-17 18:41 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(966).exe
2022-08-17 16:23 - 2022-08-17 16:24 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(965).exe
2022-08-17 15:39 - 2022-08-17 15:39 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(964).exe
2022-08-17 15:15 - 2022-08-17 15:15 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(963).exe
2022-08-17 15:13 - 2022-08-17 15:13 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(962).exe
2022-08-17 15:11 - 2022-08-17 15:11 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(961).exe
2022-08-16 20:41 - 2022-08-16 20:41 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(960).exe
2022-08-16 19:34 - 2022-08-16 19:34 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(959).exe
2022-08-16 19:20 - 2022-08-16 19:20 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(958).exe
2022-08-16 18:55 - 2022-08-16 18:55 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(957).exe
2022-08-16 18:23 - 2022-08-16 18:23 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(956).exe
2022-08-14 19:28 - 2022-08-14 19:28 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(955).exe
2022-08-14 18:40 - 2022-08-14 18:41 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(954).exe
2022-08-14 18:13 - 2022-08-14 18:13 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(953).exe
2022-08-14 17:27 - 2022-08-14 17:27 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(952).exe
2022-08-14 16:15 - 2022-08-14 16:15 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(951).exe
2022-08-14 15:45 - 2022-08-14 15:45 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(950).exe
2022-08-14 14:36 - 2022-08-14 14:36 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(949).exe
2022-08-14 13:05 - 2022-08-14 13:05 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(948).exe
2022-08-14 12:24 - 2022-08-14 12:25 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(947).exe
2022-08-14 11:28 - 2022-08-14 11:29 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(946).exe
2022-08-13 20:58 - 2022-08-13 20:58 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(945).exe
2022-08-13 19:13 - 2022-08-13 19:13 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(944).exe
2022-08-13 18:42 - 2022-08-13 18:42 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(943).exe
2022-08-13 18:11 - 2022-08-13 18:11 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(942).exe
2022-08-13 16:28 - 2022-08-13 16:28 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(941).exe
2022-08-13 16:00 - 2022-08-13 16:00 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(940).exe
2022-08-13 11:01 - 2022-08-13 11:02 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(939).exe
2022-08-13 10:11 - 2022-08-13 10:11 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(938).exe
2022-08-12 09:17 - 2022-08-12 09:18 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(937).exe
2022-08-11 17:59 - 2022-08-11 17:59 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(936).exe
2022-08-11 17:55 - 2022-08-11 17:55 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(935).exe
2022-08-11 17:51 - 2022-08-11 17:52 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(934).exe
2022-08-10 21:07 - 2022-08-10 21:07 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(933).exe
2022-08-10 21:06 - 2022-08-10 21:06 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(932).exe
2022-08-10 21:05 - 2022-08-10 21:05 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(931).exe
2022-08-10 21:05 - 2022-08-10 21:05 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(930).exe
2022-08-10 20:59 - 2022-08-10 20:59 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(929).exe
2022-08-10 20:54 - 2022-08-10 20:54 - 001703248 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(928).exe
2022-08-10 19:04 - 2022-08-10 19:04 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(927).exe
2022-08-10 17:34 - 2022-08-10 17:34 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(926).exe
2022-08-10 16:39 - 2022-08-10 16:40 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(925).exe
2022-08-10 12:17 - 2022-08-10 12:17 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(924).exe
2022-08-09 20:43 - 2022-08-09 20:43 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(923).exe
2022-08-09 20:00 - 2022-08-09 20:00 - 000140833 _____ C:\Users\PROBOOK\Downloads\Upozorneni_neuhrazene_pojistne_PS_3254722710.PDF
2022-08-08 18:21 - 2022-08-08 18:21 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(922).exe
2022-08-08 18:19 - 2022-08-08 18:19 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(921).exe
2022-08-08 15:31 - 2022-08-08 15:32 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(920).exe
2022-08-08 14:36 - 2022-08-08 14:37 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(919).exe
2022-08-08 11:31 - 2022-08-08 11:31 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(918).exe
2022-08-08 11:10 - 2022-08-08 11:10 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(917).exe
2022-08-08 11:08 - 2022-08-08 11:08 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(916).exe
2022-08-07 18:35 - 2022-08-07 18:35 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(915).exe
2022-08-07 16:57 - 2022-08-07 16:58 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(914).exe
2022-08-07 15:49 - 2022-08-07 15:49 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(913).exe
2022-08-07 15:47 - 2022-08-07 15:48 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(912).exe
2022-08-07 15:05 - 2022-08-07 15:05 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(911).exe
2022-08-07 12:16 - 2022-08-07 12:17 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(910).exe
2022-08-07 11:42 - 2022-08-07 11:42 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(909).exe
2022-08-07 10:54 - 2022-08-07 10:54 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(908).exe
2022-08-06 14:59 - 2022-08-06 14:59 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(907).exe
2022-08-06 12:46 - 2022-08-06 12:46 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(906).exe
2022-08-06 11:36 - 2022-08-06 11:36 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(905).exe
2022-08-06 11:15 - 2022-08-06 11:16 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(904).exe
2022-08-06 10:32 - 2022-08-06 10:32 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(903).exe
2022-08-06 10:04 - 2022-08-06 10:04 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(902).exe
2022-08-05 14:34 - 2022-08-05 14:34 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(901).exe
2022-08-05 13:53 - 2022-08-05 13:53 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(900).exe
2022-08-05 13:28 - 2022-08-05 13:28 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(899).exe
2022-08-05 12:46 - 2022-08-05 12:46 - 000000000 ____D C:\Users\PROBOOK\AppData\Local\cache
2022-08-05 12:29 - 2022-08-05 12:29 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(898).exe
2022-08-05 12:22 - 2022-08-05 12:22 - 001809272 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxStudioLauncherBeta.exe
2022-08-05 12:00 - 2022-08-05 12:00 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(897).exe
2022-08-05 11:33 - 2022-08-05 11:34 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(896).exe
2022-08-05 11:19 - 2022-08-05 11:19 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(895).exe
2022-08-05 11:18 - 2022-08-05 11:18 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(894).exe
2022-08-05 11:16 - 2022-08-05 11:16 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(893).exe
2022-08-05 10:30 - 2022-08-05 10:31 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(892).exe
2022-08-05 09:51 - 2022-08-05 09:52 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(891).exe
2022-08-04 13:51 - 2022-08-04 13:53 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(890).exe
2022-08-04 13:41 - 2022-08-04 13:43 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(889).exe
2022-08-04 13:19 - 2022-08-04 13:20 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(888).exe
2022-08-04 11:09 - 2022-08-04 11:10 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(887).exe
2022-08-04 09:42 - 2022-08-04 09:42 - 000000000 _____ C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(886).exe
2022-08-04 09:10 - 2022-08-04 09:11 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(885).exe
2022-08-03 15:27 - 2022-08-03 15:28 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(884).exe
2022-08-03 13:04 - 2022-08-03 13:04 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(883).exe
2022-08-03 11:58 - 2022-08-03 11:58 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(882).exe
2022-08-03 11:25 - 2022-08-03 11:26 - 001686392 _____ (Roblox Corporation) C:\Users\PROBOOK\Downloads\RobloxPlayerLauncher(881).exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-09-02 20:16 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-02 20:09 - 2022-06-24 16:17 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-02 20:08 - 2022-04-09 13:19 - 000000255 _____ C:\Users\PROBOOK\AppData\LocalLow\rbxcsettings.rbx
2022-09-02 20:08 - 2022-04-09 13:19 - 000000000 ____D C:\Users\PROBOOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2022-09-02 20:06 - 2022-03-26 13:15 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-934655967-2770029963-2865322245-1002
2022-09-02 20:06 - 2022-03-26 13:15 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-934655967-2770029963-2865322245-1002
2022-09-02 20:06 - 2022-03-26 12:51 - 000002383 _____ C:\Users\PROBOOK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-02 20:03 - 2022-03-13 10:28 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-09-02 20:02 - 2022-03-13 10:27 - 000000000 ____D C:\Users\PROBOOK\AppData\LocalLow\Mozilla
2022-09-02 19:57 - 2022-03-26 13:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-09-02 19:56 - 2022-06-18 10:45 - 000000000 ____D C:\ProgramData\Avast Software
2022-09-02 19:56 - 2022-03-26 12:45 - 000008192 ___SH C:\DumpStack.log.tmp
2022-09-02 19:56 - 2022-03-13 12:06 - 000000000 ____D C:\ProgramData\AVG
2022-09-02 19:56 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-09-02 19:54 - 2022-04-09 18:25 - 000000000 ____D C:\Program Files (x86)\IObit
2022-09-02 19:52 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-09-02 19:49 - 2022-03-13 10:48 - 000000000 ____D C:\ProgramData\ProductData
2022-09-02 19:26 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-02 19:21 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-09-02 18:51 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-02 18:49 - 2022-03-26 12:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-02 18:30 - 2022-03-10 01:54 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-09-02 18:04 - 2022-03-27 00:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2022-09-02 17:50 - 2022-03-13 01:44 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-09-02 17:50 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-09-01 20:00 - 2022-03-26 12:51 - 000000000 ____D C:\Users\PROBOOK
2022-09-01 19:55 - 2022-03-13 10:22 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-09-01 19:55 - 2022-03-13 10:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-09-01 16:02 - 2022-03-13 10:45 - 000000000 ____D C:\ProgramData\IObit
2022-09-01 15:54 - 2022-03-13 10:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec Pack
2022-09-01 15:53 - 2022-03-21 19:25 - 000000000 ___DC C:\WINDOWS\Panther
2022-09-01 15:52 - 2022-05-03 19:57 - 000000000 ____D C:\WINDOWS\Minidump
2022-09-01 15:52 - 2022-03-13 15:49 - 000000000 ____D C:\Users\PROBOOK\AppData\Local\CrashDumps
2022-09-01 15:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-09-01 15:50 - 2022-04-09 18:26 - 000002650 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor
2022-09-01 15:50 - 2022-04-09 18:26 - 000002544 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_PROBOOK
2022-09-01 15:47 - 2022-06-24 16:17 - 000000000 ____D C:\Users\PROBOOK\AppData\Local\Avast Software
2022-09-01 15:31 - 2022-03-26 13:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-09-01 15:29 - 2022-03-13 10:22 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-08-31 17:04 - 2022-04-18 19:46 - 000000000 ____D C:\Users\PROBOOK\AppData\Roaming\pkxd-launcher
2022-08-31 17:04 - 2022-03-13 01:52 - 000000000 ____D C:\Users\PROBOOK\AppData\Local\PlaceholderTileLogoFolder
2022-08-31 13:44 - 2022-06-24 16:17 - 000003462 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-08-31 13:44 - 2022-06-24 16:17 - 000003238 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-08-31 11:12 - 2022-04-18 19:59 - 000000000 ____D C:\Users\PROBOOK\AppData\LocalLow\PlayKids
2022-08-27 16:12 - 2022-06-24 16:22 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-08-27 16:12 - 2022-06-24 16:22 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-08-27 12:14 - 2022-03-26 12:50 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-08-27 12:14 - 2022-03-26 12:50 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-08-26 21:00 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-08-25 15:02 - 2022-04-09 18:30 - 000002398 _____ C:\WINDOWS\system32\Tasks\iTopVPN_SkipUAC_PROBOOK
2022-08-24 20:03 - 2022-04-09 18:30 - 000000000 ____D C:\Program Files (x86)\iTop VPN
2022-08-24 17:56 - 2022-03-13 11:35 - 000000000 ____D C:\Users\PROBOOK\AppData\Roaming\ROSTPAY LTD
2022-08-24 13:28 - 2022-03-13 11:35 - 000000000 ____D C:\Users\PROBOOK\AppData\Roaming\DriverHub
2022-08-22 16:45 - 2022-04-09 13:19 - 000000000 ____D C:\Users\PROBOOK\AppData\Local\Roblox
2022-08-19 16:08 - 2022-04-17 10:35 - 000003806 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-934655967-2770029963-2865322245-1002UA
2022-08-19 16:08 - 2022-04-17 10:35 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-934655967-2770029963-2865322245-1002Core
2022-08-19 16:08 - 2022-03-26 23:52 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-19 16:08 - 2022-03-26 23:52 - 000003434 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d841005d69720d
2022-08-17 16:57 - 2022-04-18 19:46 - 000002382 _____ C:\Users\PROBOOK\Desktop\PK XD iLauncher.lnk
2022-08-13 16:26 - 2022-03-13 01:45 - 000000000 ____D C:\ProgramData\Packages
2022-08-12 14:54 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2022-08-12 13:31 - 2022-03-26 10:46 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-08-12 13:14 - 2022-03-26 10:45 - 144534560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Naposledy upravil(a) PacandaMilan dne 02 zář 2022 19:57, celkem upraveno 1 x.
PERGL

Uživatelský avatar
PacandaMilan
Návštěvník
Návštěvník
Příspěvky: 171
Registrován: 04 úno 2011 19:55
Bydliště: Znojmo

Re: Kamarádův PC se seká

#2 Příspěvek od PacandaMilan »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-08-2022
Ran by PROBOOK (02-09-2022 20:34:21)
Running from C:\Users\PROBOOK\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1645 (X64) (2022-03-26 11:17:00)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-934655967-2770029963-2865322245-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-934655967-2770029963-2865322245-503 - Limited - Disabled)
Guest (S-1-5-21-934655967-2770029963-2865322245-501 - Limited - Disabled)
PROBOOK (S-1-5-21-934655967-2770029963-2865322245-1002 - Administrator - Enabled) => C:\Users\PROBOOK
WDAGUtilityAccount (S-1-5-21-934655967-2770029963-2865322245-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{3C3813E1-C370-4F32-9639-8B43C7C780CD}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{3EC77D26-799B-4CD8-914F-C1565E796173}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{F67648A4-713E-4298-BBAD-A83D8283B0F3}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{00C5525B-3CB3-467D-8100-2E6FB306CD86}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-002A-0405-1000-0000000FF1CE}_ENTERPRISE_{2659571A-3405-4486-B7D8-2F125BC0E3B2}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{2659571A-3405-4486-B7D8-2F125BC0E3B2}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{CB5EC6E0-FC8C-469B-A067-DEC8C6D17C59}) (Version: - Microsoft) Hidden
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.008.20071 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-001824458876}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Advanced SystemCare (HKLM-x32\...\Advanced SystemCare_is1) (Version: 15.1.0 - IObit)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{904DC18A-015B-594B-07DF-FF35770B4680}) (Version: 3.0.847.0 - Advanced Micro Devices, Inc.)
Catalyst Control Center - Branding (HKLM-x32\...\{11087D24-567D-7D88-69C6-D7A08B5F4C47}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Codec Pack - All In 1 6.0.3.0 (HKLM-x32\...\Cool's_Codec_pack_4.12) (Version: - )
DriverHub (HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\DriverHub) (Version: 1.2.1.1825 - ROSTPAY LTD.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 104.0.5112.102 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.13 - Google LLC) Hidden
HP Power Assistant (HKLM\...\{64355EEE-6638-4D32-9173-B8E9C42D867B}) (Version: 2.0.6.0 - Hewlett-Packard Company)
IrfanView 4.57 (64-bit) (HKLM\...\IrfanView64) (Version: 4.57 - Irfan Skiljan)
iTop Screen Recorder (HKLM-x32\...\iTop Screen Recorder_is1) (Version: 2.2.0.699 - iTop Inc.)
iTop Screenshot (HKLM-x32\...\iTop Screenshot_is1) (Version: 1.2.1.535 - iTop Inc.)
iTop VPN (HKLM-x32\...\iTop VPN_is1) (Version: 3.3.0.2805 - iTop Inc.)
MEmu (HKLM-x32\...\MEmu) (Version: 8.0.1.0 - Microvirt Software Technology Co. Ltd.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 104.0.1293.70 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 104.0.1293.70 - Microsoft Corporation)
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6215.1000 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\OneDriveSetup.exe) (Version: 22.166.0807.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (HKLM\...\{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (HKLM\...\{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30037 (HKLM-x32\...\{dfea0fad-88b2-4a1f-8536-3f8f9391f4ef}) (Version: 14.29.30037.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.29.30037 (HKLM-x32\...\{01FAEC41-B3BC-44F4-B185-5E8475AEB855}) (Version: 14.29.30037 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.29.30037 (HKLM-x32\...\{7D75664A-6C04-424C-82A1-EE88913E5F16}) (Version: 14.29.30037 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 104.0.1 (x64 cs)) (Version: 104.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 96.0.3 - Mozilla)
PK XD Launcher 0.7.0 (HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\{9a4f1e11-918d-5b11-aae8-c0121d39f0cc}) (Version: 0.7.0 - )
Roblox Player for PROBOOK (HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for PROBOOK (HKU\S-1-5-21-934655967-2770029963-2865322245-1002\...\roblox-studio) (Version: - Roblox Corporation)
SDK (HKLM-x32\...\{0DEA342C-15CB-4F52-97B6-06A9C4B9C06F}) (Version: 2.26.012 - Portrait Displays, Inc.) Hidden
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.69 - Synaptics Incorporated)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
WinRAR 5.61 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH)

Packages:
=========
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.7180.0_x64__8wekyb3d8bbwe [2022-08-03] (Microsoft Studios) [MS Ad]
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.539.400.0_x86__55nm5eh3cm0pr [2022-09-02] (ROBLOX Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0 [2022-08-05] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-934655967-2770029963-2865322245-1002_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\PROBOOK\AppData\Local\Microsoft\EdgeUpdate\1.3.167.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-934655967-2770029963-2865322245-1002_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\PROBOOK\AppData\Local\Microsoft\EdgeUpdate\1.3.167.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-934655967-2770029963-2865322245-1002_Classes\CLSID\{88B20FC8-EBD6-4181-B5F6-50F45BFF722E}\InprocServer32 -> C:\Users\PROBOOK\AppData\Local\Microsoft\EdgeUpdate\1.3.167.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2212224 2007-08-24] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2021-07-31] (IObit CO., LTD -> IObit)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2021-07-31] (IObit CO., LTD -> IObit)
ContextMenuHandlers3: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2021-07-31] (IObit CO., LTD -> IObit)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2021-07-31] (IObit CO., LTD -> IObit)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2011-09-12 18:02 - 2011-09-12 18:02 - 001083392 _____ () [File not signed] [File is in use] C:\Program Files\Hewlett-Packard\HP Power Assistant\System.Data.SQLite.dll
2014-02-11 08:08 - 2014-02-11 08:08 - 000817152 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2015-08-21 23:09 - 2015-08-21 23:09 - 000214528 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2015-08-21 23:09 - 2015-08-21 23:09 - 000127488 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-08-21 23:09 - 2015-08-21 23:09 - 000102400 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-02-11 08:08 - 2014-02-11 08:08 - 003650560 _____ () [File not signed] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2022-09-02 18:37 - 2022-09-02 18:37 - 000031232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\56a26c159afa96cae191da136d526888\A4.Foundation.ni.dll
2022-06-19 19:29 - 2022-06-19 19:29 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\692557a0014ca1e62b20a241b8eaeee1\AEM.Actions.CCAA.Shared.ni.dll
2022-06-19 19:29 - 2022-06-19 19:29 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\ff0c893ce5578a92823037efc85c305e\AEM.Plugin.EEU.Shared.ni.dll
2022-09-02 18:37 - 2022-09-02 18:37 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\41f8d28a4e3ac537f87f3edd030581c3\AEM.Plugin.Hotkeys.Shared.ni.dll
2022-06-19 19:29 - 2022-06-19 19:29 - 000016384 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.54d8abe3#\5ef7104d018e7d5ef6dcc367d67bf6cf\AEM.Plugin.DPPE.Shared.ni.dll
2022-09-02 18:38 - 2022-09-02 18:38 - 000281600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\6e3f6370b1514f9d605a97912d6db9ce\AEM.Plugin.Source.Kit.Server.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000014848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\bc9cda5fa4d9b9e62467f9364448411e\AEM.Plugin.WinMessages.Shared.ni.dll
2022-06-19 19:29 - 2022-06-19 19:29 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\e162fd68130a088bc622f55a08811d72\AEM.Plugin.REG.Shared.ni.dll
2022-06-19 19:29 - 2022-06-19 19:29 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\c86117878a7af28ea7c564da86c864dc\AEM.Plugin.GD.Shared.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\b61b414788f7ee9ae137183267092f72\AEM.Server.Shared.ni.dll
2022-09-02 18:38 - 2022-09-02 18:38 - 000267776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\03b4861741e5e370dd75d435377b700b\AEM.Server.ni.dll
2022-09-02 18:38 - 2022-09-02 18:38 - 000055808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\effe259360440cbbc3cb42c35aa5e155\APM.Foundation.ni.dll
2022-09-02 18:39 - 2022-09-02 18:39 - 000204288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\afa08c0ed618f1a20b64da6537c456e2\CCC.Implementation.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.2042675f#\c7a7e5ff7a6a48eacf63ffd8bf6c813c\CLI.Aspect.CPUPStates.Fuel.Dashboard.ni.dll
2022-09-02 18:46 - 2022-09-02 18:46 - 000154112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.21d2ac78#\cd011542f607063211a3e2d586dd23e8\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000128000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\0c0ab9bd3d3d894744412ad5b22b4a1f\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\0a564d1361106f63a67beaa9975999d3\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2022-09-02 18:47 - 2022-09-02 18:47 - 000107008 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\d19f9d1f99622d0fb8e37b1125700519\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000209920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4542c692#\a91798d59bf2c58872c44b576315e256\CLI.Aspect.DeviceCRT.Graphics.Shared.ni.dll
2022-09-02 18:46 - 2022-09-02 18:46 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.46819220#\f266938106a5b186a404c9a259be06e0\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.ni.dll
2022-09-02 18:47 - 2022-09-02 18:47 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\34d9eb5b100deea4e4df5408d2c956c4\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000152576 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4ede500c#\9557725e26c944699aef8d5673a61f4f\CLI.Aspect.DPPE.Fuel.Dashboard.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\1ff880f3cfd093752f3414b900cfd3bd\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2022-09-02 18:46 - 2022-09-02 18:46 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.59a12d95#\21ea766d3cb0a98ec820f7a3407c7e38\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000111616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.5a772e69#\85f6dba4663ee8defc5cdf5c21095ffe\CLI.Aspect.Fets.Fuel.Dashboard.ni.dll
2022-09-02 18:48 - 2022-09-02 18:48 - 000070656 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.648b65fc#\a69422bd7ca9f9bba5d15da63f7146da\CLI.Aspect.WiFi.Fuel.Dashboard.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000365056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\aba4cc48e303cdf9a382a0adc582ba2d\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2022-09-02 18:48 - 2022-09-02 18:48 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\ee5a97f0c726b93a83dbc6050beef2c2\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000678912 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.846fa813#\409c5a130865e9dbdcf60b493ac876c0\CLI.Aspect.MMVideo.Graphics.Dashboard.ni.dll
2022-09-02 18:47 - 2022-09-02 18:47 - 000745472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\93a6f510964b40b3851746f4f10504e8\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 000449536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\24676875e6dcc25d4f9834dcbb588a49\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\328cdc7a3d354b74619609cbe0ed0eec\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000158208 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a0ae52bc#\1b1f56460d1af38f0b17f35c137a6013\CLI.Aspect.DeviceLCD.Graphics.Shared.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\24d154ccb656d7fc8b18ab32b4dad3c6\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2022-09-02 18:48 - 2022-09-02 18:48 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\af524a5d6d228a7ac3917d5aab35cdeb\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000462336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\4fca71f753114bf7dfca19e3ea4537bf\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 000086528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ae5e117c#\fcbd83245f49b1ceaea322b4986d5c56\CLI.Aspect.DisplaysColour2.Graphics.Shared.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 000067072 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\8f33324aed05dcb6bf7bdc0cf0e1cc63\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2022-09-02 18:48 - 2022-09-02 18:48 - 000023552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c2a2b491#\a0ca69b7d5f186dbeec6398e09cdc293\CLI.Aspect.WiFi.Fuel.Shared.ni.dll
2022-09-02 18:46 - 2022-09-02 18:46 - 000340992 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\64f746b5c455ec81658f2d7ad05df468\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2022-06-19 19:33 - 2022-06-19 19:33 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\e207316cf39307fbc56b83214169c21c\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000081408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.caa5cc64#\24bcb6906ddea96ba9fc1be31bbdf761\CLI.Aspect.Fets.Fuel.Shared.ni.dll
2022-09-02 18:48 - 2022-09-02 18:48 - 001315840 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d7e090dc#\622274e46a0c95bfd0e92330cf6bf3c5\CLI.Aspect.User.Fuel.Dashboard.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000276480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\85867ef8885d18661f039fafe39455dc\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2022-09-02 18:47 - 2022-09-02 18:47 - 003312640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\ded6221f08b882ddea4da2a5f84d8687\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 000240640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.eda8935e#\ceff191f1e7578e6427580b29dbea23b\CLI.Aspect.MMVideo.Graphics.Shared.ni.dll
2022-09-02 18:47 - 2022-09-02 18:47 - 000047616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\e559b1ba4ff1643cab0cc9eef5c0ba17\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 000070656 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.efd83192#\d88bd02c105abbe8e95ef85d94cbe0a9\CLI.Aspect.CPUPStates.Fuel.Shared.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f45bd021#\d265bf6828de3ff51b9c10a7a5fa7a06\CLI.Aspect.DPPE.Fuel.Shared.ni.dll
2022-09-02 18:48 - 2022-09-02 18:48 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\e0bdb98a8af3a94aae82b8f9d49c2f8c\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2022-09-02 18:42 - 2022-09-02 18:42 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\e7a446e91a56f797c0591039ee4d27c3\CLI.Caste.A4.Shared.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\ee2e8f05ba6201021e753a7581458f1d\CLI.Caste.Fuel.Shared.ni.dll
2022-09-02 18:45 - 2022-09-02 18:45 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\b49587b48087fecd4e329a63a09332f1\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 001555456 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\bf69f1b2df41132ff7c5fb20767fcf80\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000587776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\53110e73e793ba0aa0844e642d22bfe6\CLI.Caste.Graphics.Dashboard.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\b76f0d089ef25888a2c473d90f300552\CLI.Component.Runtime.Shared.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\331f745ed2fcf224be20252f93a9eef5\CLI.Component.Runtime.Shared.Private.ni.dll
2022-06-19 19:37 - 2022-06-19 19:37 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\907b2b01c88122a4406836a16480ca8f\CLI.Component.Runtime.Extension.EEU.ni.dll
2022-09-02 18:39 - 2022-09-02 18:39 - 001609728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\5a553e024f9d3db61109945980b026d9\CLI.Component.Dashboard.Shared.Private.ni.dll
2022-09-02 18:40 - 2022-09-02 18:40 - 000018432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\411e196a8739110b238b78b17f0430f0\CLI.Component.Client.Shared.ni.dll
2022-09-02 18:40 - 2022-09-02 18:40 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\5286535d9cf40bd6195dea6b096b6a27\CLI.Component.Dashboard.Shared.ni.dll
2022-09-02 18:38 - 2022-09-02 18:38 - 000089600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\436b9169dd4fccd94f939bdf129da6ca\CLI.Foundation.Private.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000091136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\fc8ceea5caf2ee885b4b7990c0c0f865\CLI.Foundation.CoreAudioAPI.ni.dll
2022-09-02 18:41 - 2022-09-02 18:41 - 001079808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\832d62d645b27b5454f1a8e7423f3280\CLI.Foundation.Client.ni.dll
2022-09-02 18:38 - 2022-09-02 18:38 - 000301568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\accc56d41da48325b5d0d5bbe5fccb56\CLI.Foundation.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\8cb6fc56a001c65f709af6fdaf603bac\DEM.Foundation.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000115200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\a3c0143b23065cda75c54473596b4fd8\DEM.Graphics.I0601.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\34dfbee1666f5e58485f2bfaf710d3da\DEM.Graphics.ni.dll
2022-09-02 18:37 - 2022-09-02 18:37 - 000150016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\32bd14425ab9cff1e8296d23eabb2594\LOG.Foundation.Private.ni.dll
2022-08-18 20:28 - 2022-08-18 20:28 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\e7ea37334db399873a8a7cc95ca78832\LOG.Foundation.Implementation.Private.ni.dll
2022-09-02 18:37 - 2022-09-02 18:37 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\8a85a9f65804ae7d8ad678d902ada769\LOG.Foundation.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\e445f4b1e29be450c70744b2939e2da1\MOM.Foundation.ni.dll
2022-06-19 19:29 - 2022-06-19 19:29 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\d3cd8fca1fd07e005950783e706b4427\NEWAEM.Foundation.ni.dll
2015-08-21 23:06 - 2015-08-21 23:06 - 000005120 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamcsy.dll
2022-06-19 19:29 - 2022-06-19 19:29 - 000897024 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\71d66045028bc07fee0d28e6f49573cd\ADL.Foundation.ni.dll
2022-09-02 18:38 - 2022-09-02 18:38 - 000256000 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\2f9c5aa16a3d1cbbd19aa4cb841cb50d\APM.Server.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 000298496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9b707b25#\7bde861fff47f0a748bd13918fbcbcc0\CLI.Aspect.DeviceProperty.Graphics.Runtime.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 001654272 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.aa59351a#\c81fc6fb7caeae5e927e557bae846853\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.ni.dll
2022-09-02 18:44 - 2022-09-02 18:44 - 006336512 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e6d9f3a8#\0ed595acbaa0dc27a539d738fbdb3d4e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.ni.dll
2022-09-02 18:40 - 2022-09-02 18:40 - 000136704 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\7dc81e456ade9d7b301e36212023c159\CLI.Component.Client.Shared.Private.ni.dll
2022-06-19 19:33 - 2022-06-19 19:33 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0706\2d26931450023a6c35b0be19143c0215\DEM.Graphics.I0706.ni.dll
2022-06-19 19:34 - 2022-06-19 19:34 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\0e81dbc0f820dae174a1fa3fbbbf453c\DEM.Graphics.I0709.ni.dll
2022-06-19 19:33 - 2022-06-19 19:33 - 000012288 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\6d2b6ef60020fd0f81fae442a9d4ab01\DEM.Graphics.I0712.ni.dll
2022-06-19 19:33 - 2022-06-19 19:33 - 000018432 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\74f5fc3369cd79cd66681526bac10717\DEM.Graphics.I0804.ni.dll
2022-06-19 19:37 - 2022-06-19 19:37 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0805\bddbce063c57aa944caf6fc652175248\DEM.Graphics.I0805.ni.dll
2022-06-19 19:37 - 2022-06-19 19:37 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0812\e24e2a551468c3476ac50b407091135a\DEM.Graphics.I0812.ni.dll
2022-06-19 19:36 - 2022-06-19 19:36 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0906\2d29d077c0675a126153f5bcd14af326\DEM.Graphics.I0906.ni.dll
2022-06-19 19:33 - 2022-06-19 19:33 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0912\4e25ba6269d779ed8dc28cbc9888ddde\DEM.Graphics.I0912.ni.dll
2022-06-19 19:36 - 2022-06-19 19:36 - 000035840 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\da52a944341599c1d7b06b911fb170c0\DEM.Graphics.I1010.ni.dll
2022-06-19 19:30 - 2022-06-19 19:30 - 001139200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\6506bb498876c5abc95df9df87f34c5e\Localization.Foundation.Private.ni.dll
2022-09-02 18:40 - 2022-09-02 18:40 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\37459ee296cbc997f74671c71099b252\ResourceManagement.Foundation.Private.ni.dll
2022-09-02 18:43 - 2022-09-02 18:43 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\35c93f73ca1b6d353c680c019dc315b7\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2022-09-02 18:39 - 2022-09-02 18:39 - 002845696 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\2b95a3d9243fb59636ec78ae67929a54\CLI.Caste.Graphics.Shared.ni.dll
2011-09-12 18:02 - 2011-09-12 18:02 - 000869888 _____ (HP) [File not signed] [File is in use] C:\Program Files\Hewlett-Packard\HP Power Assistant\HP.SupportFramework.dll
2022-09-02 18:41 - 2022-09-02 18:41 - 000335360 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\bd60d1ea6b147beb1f06cf184f380dbd\Microsoft.WindowsAPICodePack.ni.dll
2022-09-02 18:42 - 2022-09-02 18:42 - 002546688 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\acc99ecdff531d5d8b22038e450a3c53\Microsoft.WindowsAPICodePack.Shell.ni.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-03-09 22:47 - 2022-03-09 22:42 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-934655967-2770029963-2865322245-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\PROBOOK\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{7A072399-05AD-4506-8547-B4A8B3A36B31}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F2B57B86-3BDB-401A-A6DA-96BDB205C8B8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3AD0F603-E310-4EF6-8E67-882F9CB39752}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E78C948C-1F16-48E7-896F-4B2A632ABAD1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{95033BF0-9E61-4971-83E3-927AADCB5F43}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{AE35124F-A10C-4002-85E6-2E7483206158}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{82325B33-2F9B-40CC-86A1-EC934F826CEA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{28B3F1AA-318B-414A-A57F-DD03DF24A719}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{FC46FCC0-782E-44C1-8A82-AC34B9E74260}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3279141C-79F4-418F-9B4D-61493E2939EC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7F8C38CC-9989-4BB5-AB36-F1215ED05518}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{32032251-ED67-44DD-AC0F-84A6A6A2C590}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F6D56F17-A420-42EA-BB7A-8B8D494403E7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2767795D-A70F-4A01-9A73-552A6ABC9FC1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{08EA779F-FF83-465A-A94D-C9EA1CF378E1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{01FA90BA-22D3-4E6B-AEBE-A72206E32E87}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\104.0.1293.70\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

31-08-2022 11:56:28 Instalační služba modulů systému Windows
31-08-2022 12:25:34 Instalační služba modulů systému Windows
31-08-2022 12:45:45 Instalační služba modulů systému Windows
31-08-2022 13:05:37 Instalační služba modulů systému Windows
31-08-2022 13:26:40 Instalační služba modulů systému Windows
31-08-2022 13:47:04 Instalační služba modulů systému Windows
31-08-2022 14:06:25 Instalační služba modulů systému Windows
31-08-2022 14:26:20 Instalační služba modulů systému Windows
31-08-2022 14:47:44 Instalační služba modulů systému Windows
31-08-2022 15:06:30 Instalační služba modulů systému Windows
31-08-2022 15:26:02 Instalační služba modulů systému Windows
31-08-2022 15:46:13 Instalační služba modulů systému Windows
31-08-2022 16:06:20 Instalační služba modulů systému Windows
31-08-2022 16:25:39 Instalační služba modulů systému Windows
31-08-2022 16:45:08 Instalační služba modulů systému Windows
01-09-2022 15:56:21 Instalační služba modulů systému Windows
01-09-2022 20:18:36 Instalační služba modulů systému Windows
02-09-2022 16:36:27 Instalační služba modulů systému Windows
02-09-2022 18:11:41 Instalační služba modulů systému Windows
02-09-2022 18:29:00 Instalační služba modulů systému Windows
02-09-2022 18:49:49 Instalační služba modulů systému Windows
02-09-2022 19:08:06 Instalační služba modulů systému Windows
02-09-2022 19:30:45 Instalační služba modulů systému Windows
02-09-2022 19:50:53 Instalační služba modulů systému Windows
02-09-2022 20:23:30 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (09/02/2022 08:23:45 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (09/02/2022 08:00:14 PM) (Source: ESENT) (EventID: 454) (User: )
Description: taskhostw (3160,R,98) WebCacheLocal: Při pokusu o obnovení nebo zotavení databáze došlo k neočekávané chybě -543.

Error: (09/02/2022 08:00:14 PM) (Source: ESENT) (EventID: 453) (User: )
Description: taskhostw (3160,R,98) WebCacheLocal: Databáze C:\Users\PROBOOK\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro úspěšné obnovení požaduje soubory protokolů 333 až 334 (C:\Users\PROBOOK\AppData\Local\Microsoft\Windows\WebCache\V010014D.log až C:\Users\PROBOOK\AppData\Local\Microsoft\Windows\WebCache\V01.log). Proces obnovení našel jenom soubory protokolu až po soubor 333 (C:\Users\PROBOOK\AppData\Local\Microsoft\Windows\WebCache\V010014D.log).

Error: (09/02/2022 07:55:52 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (09/02/2022 07:55:52 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (09/02/2022 07:55:51 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (09/02/2022 07:55:51 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (09/02/2022 07:51:20 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddWin32ServiceFiles: Unable to back up image of service avgbIDSAgent since QueryServiceConfig API failed

System Error:
Systém nemůže nalézt uvedený soubor.
.


System errors:
=============
Error: (09/02/2022 07:57:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba AvastWscReporter neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (09/02/2022 07:55:30 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby lfsvc bylo dosaženo časového limitu (30000 ms).

Error: (09/02/2022 07:55:00 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby iphlpsvc bylo dosaženo časového limitu (30000 ms).

Error: (09/02/2022 06:55:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d23): 9NXQXXLFST89-Disney.37853FC22B2CE.

Error: (09/02/2022 06:52:10 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d23): 9MZ95KL8MR0L-Microsoft.ScreenSketch.

Error: (09/02/2022 06:51:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d23): 9WZDNCRFJBH4-Microsoft.Windows.Photos.

Error: (09/02/2022 06:50:08 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d23): 9WZDNCRFJBBG-MICROSOFT.WINDOWSCAMERA.

Error: (09/02/2022 06:48:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d23): 9PKDZBMV1H3T-Microsoft.GetHelp.


Windows Defender:
================
Date: 2022-09-02 20:36:28
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/Rostpay
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Program Files (x86)\DriverHub\DriverHub.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: DESKTOP-6O8FFM9\PROBOOK
Název procesu: C:\Users\PROBOOK\Desktop\FRST64.exe
Verze bezpečnostních informací: AV: 1.373.1394.0, AS: 1.373.1394.0, NIS: 1.373.1394.0
Verze modulu: AM: 1.1.19500.2, NIS: 1.1.19500.2

Date: 2022-09-02 20:00:36
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/Rostpay
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Program Files (x86)\DriverHub\DriverHub.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: DESKTOP-6O8FFM9\PROBOOK
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.373.1394.0, AS: 1.373.1394.0, NIS: 1.373.1394.0
Verze modulu: AM: 1.1.19500.2, NIS: 1.1.19500.2

Date: 2022-09-02 19:44:50
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Trojan:Win32/Wacatac.B!ml
Závažnost: Vážné
Kategorie: Trojský kůň
Cesta: file:_C:\Users\TEMP\Downloads\FRST.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: DESKTOP-6O8FFM9\PROBOOK
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.373.1394.0, AS: 1.373.1394.0, NIS: 1.373.1394.0
Verze modulu: AM: 1.1.19500.2, NIS: 1.1.19500.2

Date: 2022-09-02 19:35:16
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {472B2F23-5E82-40B4-B35C-1FD127ADAFE4}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: DESKTOP-6O8FFM9\PROBOOK

Date: 2022-09-02 18:48:47
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {0C93C178-14DC-407D-B183-D7BFF646ADB9}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Event[0]:

Date: 2022-08-04 08:59:37
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.359.1875.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18900.3
Kód chyby: 0x80070102
Popis chyby: Vypršel časový limit operace čekání.

Date: 2022-08-04 08:52:27
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.359.1875.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18900.3
Kód chyby: 0x80240022
Popis chyby: V daném programu nelze zkontrolovat aktualizace definic.

Date: 2022-08-04 08:52:27
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.359.1875.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18900.3
Kód chyby: 0x80240022
Popis chyby: V daném programu nelze zkontrolovat aktualizace definic.

Date: 2022-04-27 06:58:19
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.359.1875.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18900.3
Kód chyby: 0x8024001e
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.

CodeIntegrity:
===============
Date: 2022-09-02 19:49:32
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\x86\snxhk.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: Hewlett-Packard 68CPC Ver. F.02 06/09/2011
Motherboard: Hewlett-Packard 168B
Processor: AMD E2-3000M APU with Radeon(tm) HD Graphics
Percentage of memory in use: 78%
Total physical RAM: 3552.16 MB
Available physical RAM: 759.63 MB
Total Virtual: 8928.16 MB
Available Virtual: 4207.2 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:464.42 GB) (Free:407.79 GB) (Model: WDC WD5000LPLX-00ZNTT0) NTFS

\\?\Volume{3cd75922-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.49 GB) (Free:0.45 GB) NTFS
\\?\Volume{3cd75922-0000-0000-0000-103a74000000}\ () (Fixed) (Total:0.85 GB) (Free:0.27 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 3CD75922)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=873 MB) - (Type=27)

==================== End of Addition.txt =======================
PERGL

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15216
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Kamarádův PC se seká

#3 Příspěvek od JaRon »

Ahoj,
hlavne odinstaluj C:\Program Files (x86)\IObit\Advanced SystemCare
a potom vycisti PC s CCleanerom vcetne registrov
Restart a hotovo :James008:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Uživatelský avatar
PacandaMilan
Návštěvník
Návštěvník
Příspěvky: 171
Registrován: 04 úno 2011 19:55
Bydliště: Znojmo

Re: Kamarádův notas se seká

#4 Příspěvek od PacandaMilan »

Ahoj, díky, už jsem to udělal a žádnej jiná havěť tam už teda není ? Zkusím restart jak to povalí teda.
Co je toto?
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Program Files (x86)\DriverHub\DriverHub.exe

Edit: Tak notebook se furt seká :/
PERGL

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15216
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Kamarádův PC se seká

#5 Příspěvek od JaRon »

Uvedeny subor otestuj na www.virustotal.com
Ak bude na viacerych AV pozitivny, tak ho Zmaz
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Uživatelský avatar
PacandaMilan
Návštěvník
Návštěvník
Příspěvky: 171
Registrován: 04 úno 2011 19:55
Bydliště: Znojmo

Re: Kamarádův PC se seká

#6 Příspěvek od PacandaMilan »

Nakonec jsem reinstaloval notebook do továrního nastavení i tak mi správce úloh ukazuje téměř nonstop 100% využítí procesoru, nejspíš bude tedy chyba v hw? Co myslíte vy?
Děkuji za pomoc
PERGL

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15216
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Kamarádův PC se seká

#7 Příspěvek od JaRon »

Treba pozriet co vytazuje CPU :???:
Zvacsa su to nejake aktualizacie alebo nejaky zblbnuty proces
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Uživatelský avatar
PacandaMilan
Návštěvník
Návštěvník
Příspěvky: 171
Registrován: 04 úno 2011 19:55
Bydliště: Znojmo

Re: Kamarádův PC se seká

#8 Příspěvek od PacandaMilan »

JaRon píše: 04 zář 2022 12:33 Treba pozriet co vytazuje CPU :???:
Zvacsa su to nejake aktualizacie alebo nejaky zblbnuty proces
CPU zvysuje např firefox 100%, potom jakýkoliv program/hra, dle mě je vadný procerssor, mohl treba spadnout nebo neco, také se mi to stalo.. A jak řikám, notebook je čistej po resintalaci
PERGL

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15216
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Kamarádův PC se seká

#9 Příspěvek od JaRon »

ak chces, mozet vlozit oba aktualne logy FRST na kontrolu
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Odpovědět