Dobrý večer,
potreboval by som skontrolovať logy, keďže posledné 2 týždne mám v niektorých hrách veľmi veľký FPS drop až o 90%, systém sem tam zamŕza a je celkovo spomalený. Tieto problémy nie sú stále, ale už viac a viac sa objavujú. Drivery som preinštaloval.. PC je výkonný, čiže s hardwareom nie je problém.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2024
Ran by robol (administrator) on ROBKO (ASUS System Product Name) (17-03-2024 22:20:41)
Running from C:\Users\robol\Downloads\FRST64 (1).exe
Loaded Profiles: robol
Platform: Microsoft Windows 11 Home Version 23H2 22631.3296 (X64) Language: Slovenčina (Slovensko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2>
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.270.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.92\msedgewebview2.exe <6>
(cmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\atieclxx.exe
(explorer.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <39>
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.363\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.363\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\atiesrxx.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.270.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [122427152 2021-07-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [3306416 2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [utweb] => C:\Users\robol\AppData\Roaming\uTorrent Web\utweb.exe [6418944 2023-04-04] (Rainberry Inc -> BitTorrent Inc.)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [Discord] => C:\Users\robol\AppData\Local\Discord\Update.exe [1525016 2022-12-09] (Discord Inc. -> GitHub)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\robol\AppData\Local\Microsoft\Teams\Update.exe [2587320 2023-05-10] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37397480 2024-03-04] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [MicrosoftEdgeAutoLaunch_5603079CBB1F77F87420E0C901855587] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4060712 2024-03-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Run: [AMDNoiseSuppression] => C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe [145336 2023-08-10] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\122.0.6261.129\Installer\chrmstp.exe [2024-03-15] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {74E37EB1-30D1-44D2-9206-BE4042642EAE} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-02-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {8D4C0F8E-3416-4AF3-B028-0E3F320F15AA} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-02-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {0596FA45-9BCD-4B17-B87D-D0D1DB5C76B6} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183736 2024-02-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9} - System32\Tasks\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {C4C99949-B8A1-4E70-B186-308152C191DB} - System32\Tasks\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {916DB71A-A25B-41B7-B9F9-F777DFC9530A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916640 2024-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {211C62EF-67F5-4AC9-8D0B-32BBB80FE71E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916640 2024-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {D87E21F2-C152-426A-B8DE-FDBFC092D08D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141496 2024-02-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {326776A1-E119-40A7-B60E-54E3E7586D17} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141496 2024-02-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {99377B0F-FD0E-43A4-A700-19E29AFC52A1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C3A52E3A-2549-40B1-9379-EB32892E7206} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {690564CF-FFA0-40CE-B84A-0A59F01961E0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8117B265-06D8-4664-A127-08E4F6E11808} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E26658B9-4337-49BF-A9CE-0CA0D9FE21C7} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-02-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {70D4BAC1-6E6A-4DB8-813E-C743485ED2CB} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671136 2024-02-26] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {97B64276-9168-4D15-BBCD-146096DD4604} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34720 2024-02-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {3329A76B-AB15-4A27-AA3A-5D47CF66887E} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4205984 2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D8C47A7-AC97-41F9-9D49-8A383FC05F83} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4205984 2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {BA183C2E-B1BB-4DC6-9F9C-380337BD7EBB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File)
Task: {5AB41692-0E99-445D-B511-04D9B6FECD74} - System32\Tasks\Service\Data => "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.exe" -> "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.dat" <==== ATTENTION
Task: {DF580547-B3E2-45A9-9882-A23E6D104B43} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60344 2024-02-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {AC909B43-8958-48E4-B7DC-211E02CE9924} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324024 2024-02-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{78595d6d-ab8f-40ff-8f0b-62742176ec7c}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{78595d6d-ab8f-40ff-8f0b-62742176ec7c}: [DhcpDomain] home
Edge:
=======
Edge Profile: C:\Users\robol\AppData\Local\Microsoft\Edge\User Data\Default [2024-03-17]
Edge Extension: (Dokumenty Google v režime offline) - C:\Users\robol\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-11]
Edge Extension: (Edge relevant text changes) - C:\Users\robol\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-12]
FireFox:
========
FF DefaultProfile: 2mnrp8dj.default
FF ProfilePath: C:\Users\robol\AppData\Roaming\Mozilla\Firefox\Profiles\2mnrp8dj.default [2023-03-09]
FF ProfilePath: C:\Users\robol\AppData\Roaming\Mozilla\Firefox\Profiles\o1ycwp9a.default-release [2024-02-26]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default [2024-03-17]
CHR Notifications: Default -> hxxps://sugg.erothots.co
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-02-26]
CHR Extension: (AdBlock - najlepší blokovač reklám) - C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2024-03-14]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-12-02]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [1132000 2024-03-14] (ASUSTeK COMPUTER INC. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9202360 2024-01-16] (Microsoft Corporation -> Microsoft Corporation)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-05-01] (Epic Games Inc. -> Epic Games, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncHelper.exe [3516832 2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [347408 2022-11-22] (Underwriters Laboratories Inc. -> Futuremark)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.040.0225.0003\OneDriveUpdaterService.exe [3856400 2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [20738360 2023-07-31] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe [3191272 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe [133688 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\Windows\System32\drivers\amdfendrmgr.sys [36800 2023-09-28] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [36928 2022-09-16] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R2 AMDRyzenMasterDriverV20; C:\Windows\system32\AMDRyzenMasterDriver.sys [58952 2024-02-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_54807f69fe156f14\amdsafd.sys [113088 2023-04-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amduw23g; C:\Windows\System32\DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\amdkmdag.sys [100094904 2024-02-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [544768 2023-11-16] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [106496 2022-11-23] (Microsoft Corporation) [File not signed]
S3 e2f68; C:\Windows\System32\drivers\e2f68.sys [507904 2022-05-06] (Microsoft Windows -> Intel Corporation)
S3 e2fexpress; C:\Windows\System32\DriverStore\FileRepository\e2f.inf_amd64_2d5cb0c750512550\e2f.sys [536168 2022-07-18] (Intel Corporation -> Intel Corporation)
R3 e2fnexpress; C:\Windows\System32\DriverStore\FileRepository\e2fn.inf_amd64_fcb868ac03f43b71\e2fn.sys [1427528 2023-07-03] (Intel Corporation -> Intel Corporation)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
R3 SteamStreamingMicrophone; C:\Windows\system32\drivers\SteamStreamingMicrophone.sys [40736 2020-06-01] (Valve Corp. -> )
R3 SteamStreamingSpeakers; C:\Windows\system32\drivers\SteamStreamingSpeakers.sys [40736 2020-06-01] (Valve Corp. -> )
R0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20928 2024-03-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [603416 2024-03-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105752 2024-03-13] (Microsoft Windows -> Microsoft Corporation)
S4 amdwddmg; \SystemRoot\System32\DriverStore\FileRepository\u0395307.inf_amd64_04945749e6d18630\B395312\amdkmdag.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-03-17 22:20 - 2024-03-17 22:21 - 000019991 _____ C:\Users\robol\Downloads\FRST.txt
2024-03-17 22:20 - 2024-03-17 22:20 - 000000000 ____D C:\FRST
2024-03-17 22:19 - 2024-03-17 22:19 - 002391040 _____ (Farbar) C:\Users\robol\Downloads\Nepotvrdené 223169.crdownload
2024-03-17 22:19 - 2024-03-17 22:19 - 002391040 _____ (Farbar) C:\Users\robol\Downloads\FRST64 (1).exe
2024-03-14 16:10 - 2024-03-14 16:10 - 000049064 _____ C:\Windows\system32\perfh01B.dat
2024-03-14 16:10 - 2024-03-14 16:10 - 000012206 _____ C:\Windows\system32\perfc01B.dat
2024-03-14 16:02 - 2024-03-17 21:26 - 000003098 _____ C:\Windows\system32\Tasks\AMDInstallLauncher
2024-03-14 16:02 - 2024-03-17 21:26 - 000003090 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2024-03-14 16:02 - 2024-03-14 16:02 - 000003484 _____ C:\Windows\system32\Tasks\ModifyLinkUpdate
2024-03-14 16:02 - 2024-03-14 16:02 - 000003152 _____ C:\Windows\system32\Tasks\StartCN
2024-03-14 16:02 - 2024-03-14 16:02 - 000003072 _____ C:\Windows\system32\Tasks\StartDVR
2024-03-14 16:02 - 2024-03-14 16:02 - 000002618 _____ C:\Windows\system32\Tasks\AMDRyzenMasterSDKTask
2024-03-14 16:02 - 2024-03-14 16:02 - 000000000 ____D C:\Windows\LastGood.Tmp
2024-03-14 16:02 - 2024-03-14 16:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition
2024-03-14 16:02 - 2024-03-14 16:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool
2024-03-14 16:01 - 2024-02-23 09:10 - 002090936 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-03-14 16:01 - 2024-02-23 09:10 - 002090936 _____ C:\Windows\system32\vulkaninfo.exe
2024-03-14 16:01 - 2024-02-23 09:10 - 001649080 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-03-14 16:01 - 2024-02-23 09:10 - 001649080 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2024-03-14 16:01 - 2024-02-23 09:10 - 001456072 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2024-03-14 16:01 - 2024-02-23 09:10 - 001456072 _____ C:\Windows\system32\vulkan-1.dll
2024-03-14 16:01 - 2024-02-23 09:10 - 001297408 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-03-14 16:01 - 2024-02-23 09:10 - 001297408 _____ C:\Windows\SysWOW64\vulkan-1.dll
2024-03-14 16:01 - 2024-02-23 09:10 - 000721336 _____ C:\Windows\system32\hiprt0200064.dll
2024-03-14 16:01 - 2024-02-23 09:10 - 000542648 _____ C:\Windows\system32\libamdsmi_guest.dll
2024-03-14 16:01 - 2024-02-23 09:10 - 000524216 _____ C:\Windows\system32\libamdsmi_host.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 002119712 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 001630752 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 001630752 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000989216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2024-03-14 16:01 - 2024-02-23 09:09 - 000598456 _____ C:\Windows\system32\GameManager64.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000527392 _____ C:\Windows\system32\atieah64.exe
2024-03-14 16:01 - 2024-02-23 09:09 - 000494112 _____ C:\Windows\system32\EEURestart.exe
2024-03-14 16:01 - 2024-02-23 09:09 - 000463392 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000453048 _____ C:\Windows\SysWOW64\GameManager32.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000396320 _____ C:\Windows\SysWOW64\atieah32.exe
2024-03-14 16:01 - 2024-02-23 09:09 - 000257056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000219168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000186400 _____ (AMD) C:\Windows\system32\atimuixx.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000174624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000138784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000132528 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amfrt64.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000108472 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amfrt32.dll
2024-03-14 16:01 - 2024-02-23 09:09 - 000064952 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2024-03-14 16:01 - 2024-02-23 09:08 - 011516448 _____ C:\Windows\system32\amdsmi.exe
2024-03-14 16:01 - 2024-02-23 09:08 - 002245552 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsasrv64.dll
2024-03-14 16:01 - 2024-02-23 09:08 - 001328560 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsacli64.dll
2024-03-14 16:01 - 2024-02-23 09:08 - 001244704 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2024-03-14 16:01 - 2024-02-23 09:08 - 001049632 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdsacli32.dll
2024-03-14 16:01 - 2024-02-23 09:08 - 001045432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2024-03-14 16:01 - 2024-02-23 09:08 - 000128952 _____ C:\Windows\system32\amdxc64.dll
2024-03-14 16:01 - 2024-02-23 09:08 - 000104992 _____ C:\Windows\SysWOW64\amdxc32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 105432608 _____ C:\Windows\system32\amd_comgr_2.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 105422880 _____ C:\Windows\system32\amd_comgr.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 088626208 _____ C:\Windows\SysWOW64\amd_comgr32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 018713528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64_6.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 007549472 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdadlx64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 007329312 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdadlx32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 001701144 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 001378448 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000791584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000668704 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000560056 _____ C:\Windows\system32\amdgfxinfo64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000557552 _____ C:\Windows\system32\amdmiracast.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000533536 _____ C:\Windows\system32\dgtrayicon.exe
2024-03-14 16:01 - 2024-02-23 09:07 - 000515104 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000461344 _____ C:\Windows\system32\amdlogum.exe
2024-03-14 16:01 - 2024-02-23 09:07 - 000423968 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000380960 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000365168 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdfendr.stz
2024-03-14 16:01 - 2024-02-23 09:07 - 000350752 _____ C:\Windows\system32\clinfo.exe
2024-03-14 16:01 - 2024-02-23 09:07 - 000166944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000156080 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000156072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000148784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000135712 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000127432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000127432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000122200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000046704 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdfendrmgr.stz
2024-03-14 16:01 - 2024-02-23 09:07 - 000041504 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2024-03-14 16:01 - 2024-02-23 09:07 - 000038432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2024-03-14 16:01 - 2024-02-23 09:06 - 021752248 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2024-03-14 16:01 - 2024-02-23 09:06 - 000166336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2024-03-14 16:01 - 2024-02-23 09:06 - 000141272 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2024-03-14 16:01 - 2024-02-23 08:08 - 105663344 _____ C:\Windows\system32\amdxc64.so
2024-03-14 16:01 - 2023-08-10 20:45 - 000049584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ANR-bgproc-Lib.dll
2024-03-14 16:01 - 2023-05-24 12:42 - 000061888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\amdxe.sys
2024-03-14 16:00 - 2024-03-14 16:01 - 742365976 _____ (Advanced Micro Devices, Inc.) C:\Users\robol\Downloads\whql-amd-software-adrenalin-edition-24.2.1-win10-win11-feb26-rdna.exe
2024-03-13 16:47 - 2024-03-13 16:47 - 000020023 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-03-13 16:47 - 2024-03-13 16:47 - 000020023 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2024-02-28 22:41 - 2024-02-28 22:41 - 000469740 _____ C:\Users\robol\Downloads\PL. ÚS 2_2024.pdf
2024-02-26 11:29 - 2024-03-13 17:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-02-26 11:29 - 2024-02-26 11:29 - 000167383 _____ C:\Users\robol\Desktop\vehicle_protocol - Protokol pri vrateni.pdf
2024-02-21 19:59 - 2024-02-21 19:59 - 000000000 ____D C:\Users\robol\Documents\Zoom
2024-02-21 11:20 - 2024-02-21 11:20 - 010146743 _____ C:\Users\robol\Desktop\Candle Bible 2.pdf
2024-02-18 00:29 - 2024-02-18 00:29 - 000002971 _____ C:\Users\robol\Desktop\Order flow & Footprint TradeCamp.lnk
2024-02-17 22:17 - 2024-02-17 22:17 - 000002639 _____ C:\Users\robol\Desktop\Eaconomy Calibrate Academy.lnk
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-03-17 22:19 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-03-17 22:11 - 2022-12-02 15:28 - 000000000 ____D C:\Program Files (x86)\Steam
2024-03-17 22:03 - 2023-06-24 11:12 - 000000000 ____D C:\Users\robol\AppData\Local\AMD_Common
2024-03-17 21:50 - 2022-12-02 15:06 - 000000000 ____D C:\Program Files (x86)\Google
2024-03-17 21:50 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SystemTemp
2024-03-17 21:32 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\AppReadiness
2024-03-17 21:26 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-03-16 18:31 - 2023-05-10 19:48 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-03-16 18:31 - 2023-05-10 14:52 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-03-16 18:31 - 2023-05-10 14:52 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-03-16 18:31 - 2022-12-02 15:02 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-1001
2024-03-16 18:25 - 2023-01-17 13:51 - 000002242 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-03-16 18:25 - 2022-11-24 00:23 - 000002404 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-03-15 17:48 - 2022-11-24 00:23 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-03-15 17:47 - 2022-12-02 15:07 - 000002219 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-03-15 10:21 - 2022-05-07 06:22 - 000000000 ____D C:\Windows\INF
2024-03-14 18:25 - 2022-12-02 15:01 - 000000000 ____D C:\Users\robol\AppData\Local\D3DSCache
2024-03-14 16:10 - 2022-11-24 00:30 - 000894386 _____ C:\Windows\system32\PerfStringBackup.INI
2024-03-14 16:04 - 2022-12-02 15:01 - 000000000 ____D C:\Users\robol\AppData\Local\AMD
2024-03-14 16:03 - 2023-08-07 17:11 - 000000000 ____D C:\Program Files\TeamViewer
2024-03-14 16:03 - 2023-06-24 11:12 - 000000000 ____D C:\AMD
2024-03-14 16:03 - 2022-11-24 23:52 - 001180016 _____ () C:\Windows\system32\wpbbin.exe
2024-03-14 16:03 - 2022-11-24 23:52 - 001132000 _____ C:\Windows\system32\AsusUpdateCheck.exe
2024-03-14 16:03 - 2022-11-24 00:23 - 000012288 ___SH C:\DumpStack.log.tmp
2024-03-14 16:03 - 2022-11-24 00:23 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-03-14 16:03 - 2022-05-07 06:17 - 000786432 _____ C:\Windows\system32\config\BBI
2024-03-14 16:02 - 2023-06-24 11:12 - 000000000 ____D C:\Program Files (x86)\AMD
2024-03-14 16:02 - 2022-12-02 15:01 - 000000000 ____D C:\Users\robol\AppData\Local\Packages
2024-03-14 16:02 - 2022-11-25 00:09 - 000000000 ____D C:\Program Files\AMD
2024-03-14 16:01 - 2022-11-24 00:25 - 000000000 ____D C:\ProgramData\Packages
2024-03-13 17:17 - 2023-03-09 13:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-03-13 17:17 - 2022-11-24 00:23 - 000474808 _____ C:\Windows\system32\FNTCACHE.DAT
2024-03-13 17:16 - 2023-10-12 08:03 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SystemResources
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\oobe
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\appraiser
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\ShellExperiences
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\ShellComponents
2024-03-13 17:16 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\bcastdvr
2024-03-13 17:16 - 2022-05-07 06:17 - 000000000 ____D C:\Windows\servicing
2024-03-13 17:13 - 2022-11-25 00:06 - 000000000 ____D C:\Windows\system32\MRT
2024-03-13 17:12 - 2022-11-25 00:06 - 190470136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-03-13 17:01 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-03-13 16:49 - 2022-05-07 06:17 - 000000000 ____D C:\Windows\CbsTemp
2024-03-13 16:47 - 2022-11-24 00:25 - 003213824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-03-13 09:43 - 2022-11-24 00:23 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-03-11 22:06 - 2023-12-19 15:12 - 000000000 ____D C:\Program Files\MetaTrader 5
2024-03-11 09:24 - 2022-12-02 15:29 - 000000000 ____D C:\Users\robol\AppData\Local\Steam
2024-03-10 10:42 - 2023-05-10 14:53 - 000000000 ____D C:\Users\robol\AppData\Roaming\Microsoft\Excel
2024-03-10 10:42 - 2022-12-02 15:02 - 000000000 ___RD C:\Users\robol\OneDrive
2024-03-07 15:36 - 2024-01-19 20:21 - 000000000 ____D C:\Program Files (x86)\Eightcap MetaTrader 4
2024-03-05 20:24 - 2022-11-24 00:23 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-03-05 20:24 - 2022-11-24 00:23 - 000003508 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-02-26 17:23 - 2023-03-09 13:01 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-02-26 11:29 - 2023-03-09 13:01 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-02-21 10:33 - 2023-05-18 19:48 - 000000000 ____D C:\Users\robol\AppData\Roaming\Microsoft\Word
2024-02-21 10:30 - 2023-12-19 15:12 - 000000000 ____D C:\Users\robol\AppData\Roaming\MetaQuotes
2024-02-21 09:27 - 2023-05-10 14:50 - 000000000 ____D C:\Program Files\Microsoft Office
2024-02-18 13:43 - 2024-01-18 15:14 - 000000163 _____ C:\Users\robol\Desktop\Infinity forex funds.txt
2024-02-18 00:29 - 2023-11-26 21:16 - 000000000 ____D C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome
2024-02-17 22:17 - 2023-11-26 21:27 - 000002617 _____ C:\Users\robol\Desktop\Home Eaconomy.lnk
2024-02-16 01:14 - 2023-06-24 11:15 - 002969864 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\AMDBugReportTool.exe
==================== Files in the root of some directories ========
2022-12-02 15:13 - 2022-12-03 10:10 - 000007601 _____ () C:\Users\robol\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.03.2024
Ran by robol (17-03-2024 22:21:25)
Running from C:\Users\robol\Downloads
Microsoft Windows 11 Home Version 23H2 22631.3296 (X64) (2022-12-02 13:47:23)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-400773837-108167856-4107033148-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-400773837-108167856-4107033148-503 - Limited - Disabled)
Guest (S-1-5-21-400773837-108167856-4107033148-501 - Limited - Disabled)
robol (S-1-5-21-400773837-108167856-4107033148-1001 - Administrator - Enabled) => C:\Users\robol
WDAGUtilityAccount (S-1-5-21-400773837-108167856-4107033148-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.)
AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.121 - Advanced Micro Devices, Inc.) Hidden
AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden
AMD Product Verification Tool version 1.0.6.4 (HKLM\...\{4242685A-EF3E-45FF-B4AE-758E49020936}}_is1) (Version: 1.0.6.4 - AMD)
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.24.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 8.0.0.13 - Advanced Micro Devices, Inc.) Hidden
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 24.2.1 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{94dc9043-935f-4e10-ac8b-5ce0ac055188}) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.) Hidden
Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden
CPUID HWMonitor 1.51 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.51 - CPUID, Inc.)
Cyberpunk 2077 (HKLM-x32\...\Cyberpunk 2077_is1) (Version: 0.0.0 - DODI-Repacks)
Discord (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Discord) (Version: 1.0.9008 - Discord Inc.)
Eightcap MetaTrader 4 (HKLM-x32\...\Eightcap MetaTrader 4) (Version: 4.00 - MetaQuotes Ltd.)
Epic Games Launcher (HKLM-x32\...\{AA85EF40-193C-42D2-898C-2C4E7713DF4F}) (Version: 1.3.80.0 - Epic Games, Inc.)
Epic Online Services (HKLM-x32\...\{35905844-0610-427D-86A0-2103FABE3D4D}) (Version: 2.0.42.0 - Epic Games, Inc.)
FACEIT (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\FACEIT) (Version: 1.31.12 - FACEIT Ltd.)
Futuremark SystemInfo (HKLM-x32\...\{79B7A817-AEB4-48A0-B8C5-7DA335D166FA}) (Version: 5.55.1142.0 - Futuremark)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 122.0.6261.129 - Google LLC)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
MetaTrader (HKLM\...\MetaTrader) (Version: 5.00 - MetaQuotes Ltd.)
MetaTrader 5 (HKLM\...\MetaTrader 5) (Version: 5.00 - MetaQuotes Ltd.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 122.0.2365.92 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 122.0.2365.92 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - en-us (HKLM\...\ProPlus2021Volume - en-us) (Version: 16.0.14332.20637 - Microsoft Corporation)
Microsoft Office LTSC Professional Plus 2021 - sk-sk (HKLM\...\ProPlus2021Volume - sk-sk) (Version: 16.0.14332.20637 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.040.0225.0003 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\Teams) (Version: 1.6.00.11166 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130 (HKLM-x32\...\{1de5e707-82da-4db6-b810-5d140cc4cbb3}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33130 (HKLM\...\{C31777DB-51C1-4B19-9F80-38EF5C1D7C89}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33130 (HKLM\...\{1CA7421F-A225-4A9C-B320-A36981A2B789}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 sk) (HKLM\...\Mozilla Firefox 123.0 (x64 sk)) (Version: 123.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 110.0.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20637 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20637 - Microsoft Corporation) Hidden
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.0.0 - Advanced Micro Devices, Inc.) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9088.1 - Realtek Semiconductor Corp.)
RyzenMasterSDK (HKLM\...\{94DF0438-99E8-4BBD-BB4A-7066D9879E27}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Shadow Of The Tomb Raider (HKLM-x32\...\{96F650BA-50B7-4E7B-B026-8C847F45ED92}_is1) (Version: - SQUARENIX)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.44.5 - TeamViewer)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 2.6.3.0 - Zenimax Online Studios)
UE Prerequisites (x64) (HKLM\...\{90BFD504-ACB6-4FC9-9BA5-964FA4CB76C0}) (Version: 1.0.18.0 - Epic Games, Inc.) Hidden
UE Prerequisites (x64) (HKLM-x32\...\{2c4a7cc2-986f-41a8-a4d3-86c8177f87cf}) (Version: 1.0.18.0 - Epic Games, Inc.) Hidden
uTorrent Web (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\utweb) (Version: 1.3.0 - Rainberry, Inc.)
WinRAR 6.11 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH)
xStation5 (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\xStation5) (Version: 2.41.1-Build4 - XTB)
Zoom (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\ZoomUMX) (Version: 5.16.10 (26186) - Zoom Video Communications, Inc.)
Chrome apps:
============
Currency Strength Meter (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\8af7c8d13a8a7d3622225bd44c3d81b7) (Version: 1.0 - Google\Chrome)
CurrencyStrengthMeter (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\6f96964f9f4905a62fca70569f6691bc) (Version: 1.0 - Google\Chrome)
Eaconomy Calibrate Academy (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\be94e742762bfc01b7b7226a90eb9099) (Version: 1.0 - Google\Chrome)
Economic Calendar - Investing.com (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\2c2f7c7d314ce5f304944b7825d137b1) (Version: 1.0 - Google\Chrome)
Home | Eaconomy (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\4984671d46ed56164b9ee81f5905ff94) (Version: 1.0 - Google\Chrome)
Home | Eaconomy (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\b33011b6462537cbdd9aeac919c01572) (Version: 1.0 - Google\Chrome)
Linktree | The Only Link You'll Ever Need (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\b6e560344c7101785a52b21c5f17e340) (Version: 1.0 - Google\Chrome)
ManaraFX Scanner (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\3630b0e4a65654d6cb8d8c34922754c3) (Version: 1.0 - Google\Chrome)
Order flow & Footprint | TradeCamp (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\d0c3895df83f4c32254fb8066726d534) (Version: 1.0 - Google\Chrome)
Telegram Web (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\3c8f4e030490669c74fde9b27a77e967) (Version: 1.0 - Google\Chrome)
The RoboForex Members (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\b1897f84eec4be355b220378f82256ca) (Version: 1.0 - Google\Chrome)
Trhy (HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\15d638ea78f8d2da250b47acaa9cc2d4) (Version: 1.0 - Google\Chrome)
Packages:
=========
AMD Radeon Software -> C:\Program Files\AMD\CNext\CNext [2024-03-14] (Advanced Micro Devices Inc.)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1100.416.0_x64__8wekyb3d8bbwe [2024-02-23] (Microsoft Corporation)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2023.11.13.0_neutral__6rarf9sa4v8jt [2024-03-14] (Disney)
Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.23306.1292.0_x64__8wekyb3d8bbwe [2023-12-01] (Microsoft Corporation)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-09-17] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21110.548.0_x64__8wekyb3d8bbwe [2024-03-13] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2023-07-23] (Microsoft Corporation)
Microsoft.D3DMappingLayers -> C:\Program Files\WindowsApps\Microsoft.D3DMappingLayers_1.2403.5.0_x64__8wekyb3d8bbwe [2024-03-13] (Microsoft Corporation)
Microsoft.MPEG2VideoExtension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2023-08-21] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-03-13] (Microsoft Corporation)
Minecraft Education -> C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.20.1305.0_x64__8wekyb3d8bbwe [2023-12-10] (Microsoft Studios)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0 [2024-03-14] (Spotify AB) [Startup Task]
TradingView -> C:\Program Files\WindowsApps\TradingView.Desktop_2.7.5.5815_x64__n534cwy3pjxzj [2024-03-13] (TradingView, Inc.) [Startup Task]
Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-03-13] (Microsoft Corporation)
WinRAR -> C:\Program Files\WinRAR [2022-12-05] (win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-400773837-108167856-4107033148-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\robol\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.23089.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.040.0225.0003\FileSyncShell64.dll [2024-03-16] (Microsoft Corporation -> Microsoft Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\robol\Desktop\Currency Strength Meter.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=imilfcjiegobdfmcjhggeaffabimmhnk
ShortcutWithArgument: C:\Users\robol\Desktop\CurrencyStrengthMeter.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=emgnocmkolimiabedpbmaejfffljemfi
ShortcutWithArgument: C:\Users\robol\Desktop\Eaconomy Calibrate Academy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ljnlpecenmidmmbejjpninoffpfcbjfe
ShortcutWithArgument: C:\Users\robol\Desktop\Economic Calendar - Investing.com.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hdfenpcippepnjbejbdlkpmdnnncaehd
ShortcutWithArgument: C:\Users\robol\Desktop\Home Eaconomy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nfcfpabikcllngcphnhncjbggiabogoi
ShortcutWithArgument: C:\Users\robol\Desktop\ManaraFX Scanner.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ijmfakognlineojdkpkaeacfefokfehg
ShortcutWithArgument: C:\Users\robol\Desktop\OneVision.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nejfceaihggkdbcknkhjhepfcamkkiph
ShortcutWithArgument: C:\Users\robol\Desktop\Order flow & Footprint TradeCamp.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=eddoiffhfkkccohbkdlkigpjegjjidlf
ShortcutWithArgument: C:\Users\robol\Desktop\Telegram Web.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi
ShortcutWithArgument: C:\Users\robol\Desktop\The RoboForex Members.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mpfeacidpdbfkhfpccjgcedljfoeiioc
ShortcutWithArgument: C:\Users\robol\Desktop\Trhy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gfppnpijbimhnmdnidcoglgdedemaecj
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nfcfpabikcllngcphnhncjbggiabogoi\Home Eaconomy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nfcfpabikcllngcphnhncjbggiabogoi
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nejfceaihggkdbcknkhjhepfcamkkiph\Linktree The Only Link You'll Ever Need.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nejfceaihggkdbcknkhjhepfcamkkiph
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mpfeacidpdbfkhfpccjgcedljfoeiioc\The RoboForex Members.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mpfeacidpdbfkhfpccjgcedljfoeiioc
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mblapikjlnhkpfgmdahdicnohejjcejn\Home Eaconomy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mblapikjlnhkpfgmdahdicnohejjcejn
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_ljnlpecenmidmmbejjpninoffpfcbjfe\Eaconomy Calibrate Academy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ljnlpecenmidmmbejjpninoffpfcbjfe
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_imilfcjiegobdfmcjhggeaffabimmhnk\Currency Strength Meter.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=imilfcjiegobdfmcjhggeaffabimmhnk
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_ijmfakognlineojdkpkaeacfefokfehg\ManaraFX Scanner.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ijmfakognlineojdkpkaeacfefokfehg
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_ibblmnobmgdmpoeblocemifbpglakpoi\Telegram Web.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_hdfenpcippepnjbejbdlkpmdnnncaehd\Economic Calendar - Investing.com.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hdfenpcippepnjbejbdlkpmdnnncaehd
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_gfppnpijbimhnmdnidcoglgdedemaecj\Trhy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gfppnpijbimhnmdnidcoglgdedemaecj
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_emgnocmkolimiabedpbmaejfffljemfi\CurrencyStrengthMeter.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=emgnocmkolimiabedpbmaejfffljemfi
ShortcutWithArgument: C:\Users\robol\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_eddoiffhfkkccohbkdlkigpjegjjidlf\Order flow & Footprint TradeCamp.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=eddoiffhfkkccohbkdlkigpjegjjidlf
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Currency Strength Meter.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=imilfcjiegobdfmcjhggeaffabimmhnk
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\CurrencyStrengthMeter.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=emgnocmkolimiabedpbmaejfffljemfi
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Eaconomy Calibrate Academy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ljnlpecenmidmmbejjpninoffpfcbjfe
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Economic Calendar - Investing.com.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hdfenpcippepnjbejbdlkpmdnnncaehd
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Home Eaconomy (1).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nfcfpabikcllngcphnhncjbggiabogoi
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Home Eaconomy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mblapikjlnhkpfgmdahdicnohejjcejn
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Linktree The Only Link You'll Ever Need.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nejfceaihggkdbcknkhjhepfcamkkiph
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\ManaraFX Scanner.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ijmfakognlineojdkpkaeacfefokfehg
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Order flow & Footprint TradeCamp.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=eddoiffhfkkccohbkdlkigpjegjjidlf
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Telegram Web.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\The RoboForex Members.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mpfeacidpdbfkhfpccjgcedljfoeiioc
ShortcutWithArgument: C:\Users\robol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikácie Chrome\Trhy.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gfppnpijbimhnmdnidcoglgdedemaecj
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-05-10] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2022-05-07 06:24 - 2022-05-07 06:22 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-400773837-108167856-4107033148-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\robol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\StartupApproved\Run: => "utweb"
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-400773837-108167856-4107033148-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{0D1A8A0B-C31E-4994-92C4-39249D01FB74}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9A2E25D9-0321-4FB6-9E16-3F18208FDC3A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{994EC639-BDD4-44BD-8D35-27632C272C1F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{98FF41E4-18E1-4DF2-8F95-3B5074D07FC5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A02BF8F7-F3EA-4531-87C1-33B38F676313}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve Corp. -> )
FirewallRules: [{1216F898-963A-4051-ABCF-16FD8B6FB86A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve Corp. -> )
FirewallRules: [{4E2BFC1B-3C90-4A84-B35E-7A2FE49BB8B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{0B0ED339-DEAB-4E4C-AFC7-F151A7AD6334}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{C527D002-D1D8-4419-96C5-34877EE5BB95}] => (Allow) C:\Users\robol\AppData\Roaming\uTorrent Web\utweb.exe (Rainberry Inc -> BitTorrent Inc.)
FirewallRules: [{829A4A7F-0084-4087-8214-6723C2654A52}] => (Allow) C:\Users\robol\AppData\Roaming\uTorrent Web\utweb.exe (Rainberry Inc -> BitTorrent Inc.)
FirewallRules: [{A264DBA7-415E-4F9E-A514-C0A52E1EEB11}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [{1E3B5F10-3FAE-458A-A384-76928576A196}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [TCP Query User{0324C7BF-7A13-44E9-BE72-A0F7646446BD}C:\program files (x86)\dodi-repacks\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\dodi-repacks\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT SPÓŁKA AKCYJNA -> CD PROJEKT S.A.)
FirewallRules: [UDP Query User{3A54D5ED-F50A-448F-8579-3D88ACB24B89}C:\program files (x86)\dodi-repacks\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\dodi-repacks\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT SPÓŁKA AKCYJNA -> CD PROJEKT S.A.)
FirewallRules: [{96AEADC1-E4F6-45B4-B5F8-8B320EB499AE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life SDK\Hammer Editor\hammer.exe (Valve, L.L.C.) [File not signed]
FirewallRules: [{04DF465D-8331-4A38-9C67-7172BD7FADC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life SDK\Hammer Editor\hammer.exe (Valve, L.L.C.) [File not signed]
FirewallRules: [TCP Query User{27560DB9-17DC-4BA3-8DAC-1B93C03CFDC7}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [UDP Query User{E8805AC1-0694-4D31-BA55-D63D9910BF8B}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [TCP Query User{2C41949E-0955-4F6E-86E4-5833430B30AF}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [UDP Query User{09FAA6F8-4149-4D6E-847E-6F9998180539}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [{09C0EBA9-87CD-475A-9072-F0E5A00FF115}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Uncharted Legacy of Thieves Collection\u4.exe () [File not signed]
FirewallRules: [{B6922A5C-FE74-4409-A5AF-4C88535071E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Uncharted Legacy of Thieves Collection\u4.exe () [File not signed]
FirewallRules: [{8F281551-6912-45D7-826C-87DAC89621DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{6FAD9D86-78B9-4327-949D-6E6BF26F687C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{FEA531A0-47C5-40F5-8BEC-5554E2E6E678}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{81DBE79B-DBFD-4230-8CED-FF41CF051E07}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BBE258F2-FF6A-4F59-9B35-DD1C2DAA1F21}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe (Underwriters Laboratories Inc. -> )
FirewallRules: [{8B14E30B-4E9F-4464-9B0D-66752B6BC8DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe (Underwriters Laboratories Inc. -> )
FirewallRules: [{97139DC8-07C9-4361-BA19-EC8B67BEB1F4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5046800D-E522-4006-8D89-C3E7ABE3DFA4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{790457A5-4422-43DF-A956-DD389AC6153C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{27F5F8E2-A3A5-4378-8E87-F185BBB6C7B2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4B62A814-25A3-4E02-B7FB-A68B362CB250}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{2150EFA7-6B60-4249-9E58-65A5D486B444}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{C733FEF9-C857-4589-A1FB-15A59EBAF19A}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{F976A48E-6610-4376-80CB-75A9B935843F}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{A5758AE3-48B8-468B-9F79-0B1E89F9BDFE}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{9E1B417B-5560-482D-A100-A17AD2D914AA}C:\users\robol\appdata\local\unrealengine\common\unrealtrace\bin\0001000d\unrealtraceserver.exe] => (Allow) C:\users\robol\appdata\local\unrealengine\common\unrealtrace\bin\0001000d\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [UDP Query User{1B48A48E-B55E-41EF-B9D3-2638C0C7225D}C:\users\robol\appdata\local\unrealengine\common\unrealtrace\bin\0001000d\unrealtraceserver.exe] => (Allow) C:\users\robol\appdata\local\unrealengine\common\unrealtrace\bin\0001000d\unrealtraceserver.exe (Epic Games Inc. -> Epic Games)
FirewallRules: [TCP Query User{68005278-F3F9-4E9D-9CB4-D90142735214}C:\program files\epic games\ue_5.2\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.2\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{C4FCCD8A-0CD0-4C9D-9E7C-827174ECA724}C:\program files\epic games\ue_5.2\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.2\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{347AF302-4558-4BFB-9665-622AAE26C426}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{1200D8D4-304B-489A-A727-FCCD9FC8D7DE}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4F845336-1DFE-4182-967D-1DF0FDFC9B0C}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{800A2CFD-4B71-444C-B190-DE461C3CD1FF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{57225EBB-D2C2-4A09-94D1-AC81E0D38C33}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{2350BD88-3F29-4957-8470-44BAD442E1AF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D3A88374-F5B3-4DC7-955A-4A5795610871}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{803BEDBC-1E5D-4A5D-A461-CAD10463B724}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{DE89B94A-FE6C-42E9-B5C2-7BDD24537392}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [UDP Query User{FA31260C-4041-44BF-9537-DB4E6E673F80}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{8DCD1749-DC25-4F9F-9394-39AEF2758A28}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{61A52C37-3F59-49C4-A5DF-55BEC5FE8256}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{55F30010-FD2C-4914-B214-981BED362A95}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{0CB3A2F7-954D-4811-81F0-F47537351CD1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.20.1305.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{49AE2013-FCEF-41F4-BD38-C2CEE39C4627}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.20.1305.0_x64__8wekyb3d8bbwe\Minecraft.Windows.exe (Microsoft Corporation -> )
FirewallRules: [{B083DA55-B1E5-437A-8CE5-EE2919C807C9}] => (Allow) C:\Program Files\MetaTrader\metatester64.exe (MetaQuotes Ltd -> MetaQuotes Ltd.)
FirewallRules: [{6F30E5C9-75D0-4413-83A3-3791D198694D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24047.202.2704.38_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{40D0EEFA-E0D8-4DDB-8E9F-4AD6D30D9E65}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24047.202.2704.38_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{094D537E-899E-498F-8FB4-AE039A4027DC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C0E76ED6-A960-4DEE-8451-950060C7D932}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{0A5E0007-43B7-4369-B47C-858F7A6CF4EA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{FCE252DF-A6AD-4863-B5D2-653731AE9D72}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8BE4BCA5-EEC0-4B8A-905F-B8E33E699905}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A1ADCEDF-D869-4E2B-86E3-754A6E90FE88}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F53EBE4B-7EFD-4102-BAF2-8502162042AC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{6844A23F-EBA2-4E59-9D20-1FB6DA5D46A4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{381D9184-AAC0-46FB-9CF7-69492BDAECE0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9359D042-098C-4424-B1CC-D81634BAF7C3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1039.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DBD56B4C-2189-4B5C-940F-EFEC6E8E8AB2}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{152BF595-2D3D-4C9F-A604-BD733C194DD4}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.92\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
08-03-2024 15:00:21 Windows Update
08-03-2024 15:00:21 Windows Update
11-03-2024 21:23:08 Windows Update
14-03-2024 16:01:47 Radeon Installer
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (03/13/2024 05:16:39 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.]
Error: (03/11/2024 09:23:12 PM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {4658e951-e02c-45b5-b617-62d9b07f26f0}
Error: (03/08/2024 03:00:31 PM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {e57ae1a7-3c81-4c61-b037-718fb455f242}
Error: (03/08/2024 03:00:26 PM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {e57ae1a7-3c81-4c61-b037-718fb455f242}
Error: (03/04/2024 08:06:26 AM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {e0688055-e4b4-458b-9929-ecac20370d6c}
Error: (03/04/2024 08:06:20 AM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {e0688055-e4b4-458b-9929-ecac20370d6c}
Error: (03/04/2024 08:06:15 AM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {e0688055-e4b4-458b-9929-ecac20370d6c}
Error: (02/29/2024 02:19:18 PM) (Source: VSS) (EventID: 12344) (User: )
Description: Volume Shadow Copy Error: An error 0x00000000c000014d was encountered while Registry Writer was preparing the registry for a shadow
copy. Check the Application and System event logs for any related errors.
Operation:
OnFreeze event
Freeze Event
Context:
Execution Context: Registry Writer
Execution Context: Writer
Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Name: Registry Writer
Writer Instance ID: {30f0d47a-e4e4-4bb7-abae-eb81a8a41376}
System errors:
=============
Error: (03/16/2024 06:26:35 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16398) (User: NT AUTHORITY)
Description: A new BITS job could not be created. The current job count for the user Robko\robol (60) is equal to or greater than the job limit (60) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits.
Error: (03/16/2024 06:26:35 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16398) (User: NT AUTHORITY)
Description: A new BITS job could not be created. The current job count for the user Robko\robol (60) is equal to or greater than the job limit (60) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits.
Error: (03/15/2024 05:49:16 PM) (Source: DCOM) (EventID: 10010) (User: ROBKO)
Description: The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout.
Error: (03/15/2024 08:58:49 AM) (Source: DCOM) (EventID: 10010) (User: ROBKO)
Description: The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout.
Error: (03/14/2024 03:47:30 PM) (Source: DCOM) (EventID: 10010) (User: ROBKO)
Description: The server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} did not register with DCOM within the required timeout.
Error: (03/14/2024 02:16:14 PM) (Source: DCOM) (EventID: 10010) (User: ROBKO)
Description: The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout.
Error: (03/13/2024 05:12:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Zlyhanie inštalácie: Systému Windows sa nepodarilo nainštalovať nasledujúcu aktualizáciu. Vyskytla sa chyba 0x80073d02: 9NCBCSZSJRSB-SpotifyAB.SpotifyMusic.
Error: (03/13/2024 08:50:28 AM) (Source: DCOM) (EventID: 10010) (User: ROBKO)
Description: The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout.
Windows Defender:
================
Date: 2024-03-16 18:25:20
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-03-13 16:45:40
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-03-11 21:23:05
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-03-10 22:16:16
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-03-09 15:45:04
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]
Date: 2023-08-02 21:47:10
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.393.1991.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.23060.1005
Error code: 0x80240438
Error description: Počas vyhľadávania aktualizácií sa vyskytol neočakávaný problém. Informácie o inštalácii aktualizácií a riešení problémov s aktualizáciami nájdete v Pomoci a technickej podpore.
CodeIntegrity:
===============
Date: 2023-12-01 20:56:11
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2023-11-20 20:24:26
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.
Date: 2023-11-20 20:24:26
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\SystemSettings.DataModel.dll because the set of per-page image hashes could not be found on the system.
Date: 2023-10-19 19:37:23
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 2803 04/27/2022
Motherboard: ASUSTeK COMPUTER INC. ROG STRIX B550-F GAMING
Processor: AMD Ryzen 9 5900X 12-Core Processor
Percentage of memory in use: 26%
Total physical RAM: 32680.05 MB
Available physical RAM: 24123.67 MB
Total Virtual: 37544.05 MB
Available Virtual: 24470.51 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:930.42 GB) (Free:299.79 GB) (Model: Samsung SSD 980 PRO 1TB) NTFS
\\?\Volume{ea1e7ea2-c458-491e-87c1-375a555a8bfc}\ () (Fixed) (Total:0.98 GB) (Free:0.19 GB) NTFS
\\?\Volume{8624635f-3666-4b08-b21d-bab20639de29}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
kontrola logu - problémy s PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu - problémy s PC
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: kontrola logu - problémy s PC
nech sa páči pane 
# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build: 03-04-2024
# Database: 2024-03-04.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-18-2024
# Duration: 00:00:00
# OS: Windows 11 (Build 22631.3296)
# Cleaned: 0
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
No malicious registry entries cleaned.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [1420 octets] - [18/03/2024 09:54:53]
AdwCleaner[S01].txt - [1481 octets] - [18/03/2024 09:56:20]
AdwCleaner[S02].txt - [1542 octets] - [18/03/2024 09:56:51]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########
# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build: 03-04-2024
# Database: 2024-03-04.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-18-2024
# Duration: 00:00:00
# OS: Windows 11 (Build 22631.3296)
# Cleaned: 0
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
No malicious registry entries cleaned.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [1420 octets] - [18/03/2024 09:54:53]
AdwCleaner[S01].txt - [1481 octets] - [18/03/2024 09:56:20]
AdwCleaner[S02].txt - [1542 octets] - [18/03/2024 09:56:51]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu - problémy s PC
Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:
Uložte do C:\Users\robol\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
Task: {12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9} - System32\Tasks\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {C4C99949-B8A1-4E70-B186-308152C191DB} - System32\Tasks\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
ask: {BA183C2E-B1BB-4DC6-9F9C-380337BD7EBB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File)
Task: {5AB41692-0E99-445D-B511-04D9B6FECD74} - System32\Tasks\Service\Data => "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.exe" -> "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.dat" <==== ATTENTION
FirewallRules: [{4E2BFC1B-3C90-4A84-B35E-7A2FE49BB8B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{0B0ED339-DEAB-4E4C-AFC7-F151A7AD6334}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{A264DBA7-415E-4F9E-A514-C0A52E1EEB11}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [{1E3B5F10-3FAE-458A-A384-76928576A196}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [TCP Query User{27560DB9-17DC-4BA3-8DAC-1B93C03CFDC7}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [UDP Query User{E8805AC1-0694-4D31-BA55-D63D9910BF8B}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [TCP Query User{2C41949E-0955-4F6E-86E4-5833430B30AF}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [UDP Query User{09FAA6F8-4149-4D6E-847E-6F9998180539}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [{8F281551-6912-45D7-826C-87DAC89621DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{6FAD9D86-78B9-4327-949D-6E6BF26F687C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{61A52C37-3F59-49C4-A5DF-55BEC5FE8256}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{55F30010-FD2C-4914-B214-981BED362A95}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: kontrola logu - problémy s PC
Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2024
Ran by robol (18-03-2024 14:35:10) Run:1
Running from C:\Users\robol\Downloads
Loaded Profiles: robol
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
Task: {12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9} - System32\Tasks\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {C4C99949-B8A1-4E70-B186-308152C191DB} - System32\Tasks\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
ask: {BA183C2E-B1BB-4DC6-9F9C-380337BD7EBB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File)
Task: {5AB41692-0E99-445D-B511-04D9B6FECD74} - System32\Tasks\Service\Data => "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.exe" -> "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.dat" <==== ATTENTION
FirewallRules: [{4E2BFC1B-3C90-4A84-B35E-7A2FE49BB8B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{0B0ED339-DEAB-4E4C-AFC7-F151A7AD6334}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{A264DBA7-415E-4F9E-A514-C0A52E1EEB11}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [{1E3B5F10-3FAE-458A-A384-76928576A196}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [TCP Query User{27560DB9-17DC-4BA3-8DAC-1B93C03CFDC7}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [UDP Query User{E8805AC1-0694-4D31-BA55-D63D9910BF8B}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [TCP Query User{2C41949E-0955-4F6E-86E4-5833430B30AF}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [UDP Query User{09FAA6F8-4149-4D6E-847E-6F9998180539}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [{8F281551-6912-45D7-826C-87DAC89621DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{6FAD9D86-78B9-4327-949D-6E6BF26F687C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{61A52C37-3F59-49C4-A5DF-55BEC5FE8256}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{55F30010-FD2C-4914-B214-981BED362A95}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C4C99949-B8A1-4E70-B186-308152C191DB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4C99949-B8A1-4E70-B186-308152C191DB}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
ask: {BA183C2E-B1BB-4DC6-9F9C-380337BD7EBB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5AB41692-0E99-445D-B511-04D9B6FECD74}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5AB41692-0E99-445D-B511-04D9B6FECD74}" => removed successfully
C:\Windows\System32\Tasks\Service\Data => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Service\Data" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4E2BFC1B-3C90-4A84-B35E-7A2FE49BB8B5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0B0ED339-DEAB-4E4C-AFC7-F151A7AD6334}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A264DBA7-415E-4F9E-A514-C0A52E1EEB11}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1E3B5F10-3FAE-458A-A384-76928576A196}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{27560DB9-17DC-4BA3-8DAC-1B93C03CFDC7}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E8805AC1-0694-4D31-BA55-D63D9910BF8B}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2C41949E-0955-4F6E-86E4-5833430B30AF}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{09FAA6F8-4149-4D6E-847E-6F9998180539}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8F281551-6912-45D7-826C-87DAC89621DF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6FAD9D86-78B9-4327-949D-6E6BF26F687C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{61A52C37-3F59-49C4-A5DF-55BEC5FE8256}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{55F30010-FD2C-4914-B214-981BED362A95}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 718779543 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 848373314 B
Windows/system/drivers => 97879963 B
Edge => 0 B
Chrome => 1353067871 B
Firefox => 98470589 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 460127 B
systemprofile32 => 461264 B
LocalService => 1123316 B
NetworkService => 1543378 B
robol => 6816418 B
RecycleBin => 0 B
EmptyTemp: => 2.9 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 14:36:19 ====
Ran by robol (18-03-2024 14:35:10) Run:1
Running from C:\Users\robol\Downloads
Loaded Profiles: robol
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
Task: {12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9} - System32\Tasks\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {C4C99949-B8A1-4E70-B186-308152C191DB} - System32\Tasks\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-12-02] (Google LLC -> Google LLC)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
ask: {BA183C2E-B1BB-4DC6-9F9C-380337BD7EBB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File)
Task: {5AB41692-0E99-445D-B511-04D9B6FECD74} - System32\Tasks\Service\Data => "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.exe" -> "C:\Users\robol\AppData\Roaming\ServiceData\Balmer.dat" <==== ATTENTION
FirewallRules: [{4E2BFC1B-3C90-4A84-B35E-7A2FE49BB8B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{0B0ED339-DEAB-4E4C-AFC7-F151A7AD6334}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File
FirewallRules: [{A264DBA7-415E-4F9E-A514-C0A52E1EEB11}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [{1E3B5F10-3FAE-458A-A384-76928576A196}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\3DMarkLauncher.exe => No File
FirewallRules: [TCP Query User{27560DB9-17DC-4BA3-8DAC-1B93C03CFDC7}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [UDP Query User{E8805AC1-0694-4D31-BA55-D63D9910BF8B}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe] => (Allow) C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe => No File
FirewallRules: [TCP Query User{2C41949E-0955-4F6E-86E4-5833430B30AF}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [UDP Query User{09FAA6F8-4149-4D6E-847E-6F9998180539}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe => No File
FirewallRules: [{8F281551-6912-45D7-826C-87DAC89621DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{6FAD9D86-78B9-4327-949D-6E6BF26F687C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => No File
FirewallRules: [{61A52C37-3F59-49C4-A5DF-55BEC5FE8256}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{55F30010-FD2C-4914-B214-981BED362A95}] => (Allow) C:\Users\robol\AppData\Roaming\Zoom\bin\airhost.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12FB5AC0-5225-4A1B-AC89-6EF54EFF0EB9}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore{CA7A80B4-048E-465D-879C-784C8110DDC8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C4C99949-B8A1-4E70-B186-308152C191DB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4C99949-B8A1-4E70-B186-308152C191DB}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA{B7166CFC-8A7C-4794-9900-39516A935EB1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
ask: {BA183C2E-B1BB-4DC6-9F9C-380337BD7EBB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-400773837-108167856-4107033148-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5AB41692-0E99-445D-B511-04D9B6FECD74}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5AB41692-0E99-445D-B511-04D9B6FECD74}" => removed successfully
C:\Windows\System32\Tasks\Service\Data => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Service\Data" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4E2BFC1B-3C90-4A84-B35E-7A2FE49BB8B5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0B0ED339-DEAB-4E4C-AFC7-F151A7AD6334}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A264DBA7-415E-4F9E-A514-C0A52E1EEB11}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1E3B5F10-3FAE-458A-A384-76928576A196}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{27560DB9-17DC-4BA3-8DAC-1B93C03CFDC7}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E8805AC1-0694-4D31-BA55-D63D9910BF8B}C:\users\robol\appdata\local\faceit\app-1.31.10\faceit.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2C41949E-0955-4F6E-86E4-5833430B30AF}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{09FAA6F8-4149-4D6E-847E-6F9998180539}C:\users\robol\appdata\local\discord\app-1.0.9008\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8F281551-6912-45D7-826C-87DAC89621DF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6FAD9D86-78B9-4327-949D-6E6BF26F687C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{61A52C37-3F59-49C4-A5DF-55BEC5FE8256}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{55F30010-FD2C-4914-B214-981BED362A95}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 718779543 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 848373314 B
Windows/system/drivers => 97879963 B
Edge => 0 B
Chrome => 1353067871 B
Firefox => 98470589 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 460127 B
systemprofile32 => 461264 B
LocalService => 1123316 B
NetworkService => 1543378 B
robol => 6816418 B
RecycleBin => 0 B
EmptyTemp: => 2.9 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 14:36:19 ====
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu - problémy s PC
Smazáno. Nastala změna k lepšímu?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: kontrola logu - problémy s PC
sem tam sa videá sekajú a streamy na twitchi, ale hry už šlapú v pohode 
Ďakujem pekne
Ďakujem pekne
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu - problémy s PC
Ještě můžete defragmentovat disk. Zatím není ztač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu - problémy s PC
OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: kontrola logu - problémy s PC
pri používaní Chrome mám stále také mikro zamrzanie(sekanie) 
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu - problémy s PC
Zkuste v chrome nejprve smazat cache.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: kontrola logu - problémy s PC
stále nič :/ pri prehrávaní youtube videí to zvykáva sekať :/
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: kontrola logu - problémy s PC
V jiném prohlížeči je to OK?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?