zpomalené pc 2
Napsal: 19 led 2021 20:00
Dobrý den.
Synovi se seká a zabržduje NTB.Poslední dobou se mu seká i prohlížeč.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-01-2021
Ran by Davídek (administrator) on LAPTOP-1A2BAFO9 (LENOVO 80M3) (19-01-2021 19:07:06)
Running from C:\Users\Frantisek\Desktop
Loaded Profiles: Davídek
Platform: Windows 10 Home Version 1909 18363.1316 (X64) Language: Angličtina (Spojené státy)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe <2>
() [File not signed] C:\Program Files\MobiGame\aeg_launcher.exe
() [File not signed] C:\Program Files\MobiGame\MobiGameUpdater.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Cole Williams Software Limited -> ) C:\Windows\SysWOW64\Codecs\TrayMenu.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Disc Soft Ltd -> Disc Soft Ltd) [File not signed] C:\Program Files\DAEMON Tools Ultra\DTAgent.exe
(Disc Soft Ltd -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Fortemedia Inc -> ) C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Game Player) [File not signed] C:\Program Files\MobiGame\player\mobiplayer.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
(Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(IObit Information Technology -> IObit) [File not signed] C:\Program Files (x86)\Advanced SystemCare Pro\ASC_IObitDel.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\Advanced SystemCare Pro\ASCService.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\Advanced SystemCare Pro\ASCTray_IObitDel.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\ClassicStart.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\InstallServices.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\SMService.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\StartMenu_Hook.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\Lenovo.Vantage.AddinHost.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\LenovoVantageService.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(LENOVO -> Lenovo(beijing) Limited) C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe
(LENOVO -> Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(LENOVO -> Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20368.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\PrintDialog\PrintDialog.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <3>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle Corporation) [File not signed] C:\Program Files\MobiGame\vbox\MobiVBoxSVC.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] (Fortemedia Inc -> )
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (LENOVO -> Lenovo(beijing) Limited)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-17] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [175504 2020-10-26] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [isa] => C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [330240 2015-02-26] () [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-09-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [4338880 2016-02-02] (Disc Soft Ltd -> Disc Soft Ltd) [File not signed]
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\Run: [Mobigame Playstore] => C:\Program Files\MobiGame\playstore\playstore.exe [169984 2020-12-06] () [File not signed]
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2065dfb8-3ba4-11ea-9cf4-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2065dff8-3ba4-11ea-9cf4-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2ad3e17e-87eb-11ea-9cfd-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2ad3e1c1-87eb-11ea-9cfd-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {5169af39-cc5a-11ea-9d0a-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {d40eb54e-c367-11ea-9d09-b46d83ba83d9} - "F:\stub.exe"
HKU\S-1-5-18\...\RunOnce: [Application Restart #3] => C:\Program Files\Internet Explorer\iexplore.exe -restart /WERRESTART <==== ATTENTION
HKLM\...\Windows x64\Print Processors\Canon MP250 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL [28672 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\HP1020PrintProc: C:\Windows\System32\spool\prtprocs\x64\pphp1020.dll [65024 2012-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Windows x64\Print Processors\hpfpp02t: C:\Windows\System32\spool\prtprocs\x64\hpfpp02t.dll [253440 2010-05-15] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\HPM1210PrintProc: C:\Windows\System32\spool\prtprocs\x64\HPM1210PP.dll [74240 2012-09-29] () [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP250 series: C:\WINDOWS\system32\CNMLM9W.DLL [336896 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HPLJ1020LM: C:\WINDOWS\system32\zlhp1020.dll [192512 2012-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\PCL hpf3l02t: C:\WINDOWS\system32\hpf3l02t.dll [138752 2010-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] ->
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\Windows\SysWOW64\advpack.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)
IFEO\AUpdate.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\AutoUpdate.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\BigUpgrade_IU.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\CrRestore.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\DSPut.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\Feedback.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\ijplmsvc.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\ijplmui.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IObitDownloader.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\iu10Pre.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUProtip.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUService.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\iush.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUSoftUpdateTip.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUXM2020.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\Loader-IU.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\NoteIcon.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\ScreenShot.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\SecurityNotification_1.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\SendBugReportNew.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\SpecUTool.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2019-01-21]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\Codecs\TrayMenu.exe (Cole Williams Software Limited -> )
Startup: C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk [2016-02-22]
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02BE8CF1-0BB4-42CF-A39E-2B1FE999A83E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {0D4F4CCE-E055-4976-ACCA-2ADF104ADAF3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {0DCCC838-573D-44F5-8032-CF7A7F817964} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {0DF09F9E-EC13-4F1B-8418-AE256753877C} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\ScheduleEventAction.exe [24408 2020-11-05] (Lenovo -> Lenovo Group Ltd.)
Task: {10287C3A-57B4-4807-B923-E1664E2C4BDB} - System32\Tasks\StartMenu8_Start => C:\Program Files (x86)\IObit\Classic Start\Start_Active.exe [528656 2019-05-22] (IObit Information Technology -> IObit)
Task: {10A062DF-6814-4F44-A30A-BD01063EE275} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [264328 2016-12-07] (LENOVO -> )
Task: {29AEE9EB-36C9-4B9C-8A5D-210E74BD1E10} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\941de6cd-645d-4c35-9288-f4e04e91638c => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {2ACEDC19-3133-4FCB-9FFC-6C1E71FD9DC8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {2BF6ABA1-02C9-48D1-8D58-15BE5E8EAA32} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [348504 2020-11-06] (HP Inc. -> HP Inc.)
Task: {31A4CBF7-FBD7-4B29-910B-53E05D94D0C4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24612232 2020-11-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {340292CE-49E0-4C20-9152-A99ABDCA0B58} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-909588931-3475030629-4239748838-1001UA => C:\Users\Frantisek\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-05-25] (Google LLC -> Google LLC)
Task: {3AC1A547-8768-4CEF-B88B-3CCE9008146D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-909588931-3475030629-4239748838-1001Core => C:\Users\Frantisek\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-05-25] (Google LLC -> Google LLC)
Task: {3E21CFB4-E4B6-4DDE-9566-72B0B66E8177} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\Windows\system32\rundll32.exe C:\Windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
Task: {420CD1C1-86FF-4FA0-83B0-B12A5EDE55EA} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [144312 2020-09-15] (Lenovo -> Lenovo Group Ltd.)
Task: {4392A3B5-0280-40A3-919E-928DC94F6C6F} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {47B05644-B523-44B7-BE01-F7909A81F9FC} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-909588931-3475030629-4239748838-1001 => C:\Users\Frantisek\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [122344 2019-04-04] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {4A446D9D-09D0-4F7D-9ACB-078B7A1A91AD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {4BF1E12D-5EEC-4697-A386-406F17EAA49A} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832 2015-07-08] (LENOVO -> Lenovo)
Task: {4DEFED63-BC02-4525-8FF4-CBAE237FE5C1} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {52D3E5E1-9458-4E87-AE45-F47DF095D768} - System32\Tasks\PDVDServ12 Task => C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe [85432 2015-05-28] (CyberLink Corp. -> CyberLink Corp.)
Task: {5B41C75D-2A80-4A79-8A30-74C1659332CF} - System32\Tasks\CyberLink\Photo Master Gadget startup => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe [745240 2016-04-22] (CyberLink Corp. -> CyberLink Corp.)
Task: {5C7E366F-14DA-4C73-AB96-06CDF76B8EFF} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {5C91CC50-01E4-4AD2-9A53-A4F2DF3D679C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115048 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {62268D82-C708-4D01-BD0F-5E837878FB30} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [135000 2020-06-22] (HP Inc. -> HP Inc.)
Task: {72FDCC01-83BA-49B0-B301-14BFA78C934D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1443736 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {778D5342-B935-4869-9417-BD04AFD3AFE4} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\0fcf031d-c0f0-4847-9462-afc06ce2fc10 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {7841C11D-B7DE-4579-AE47-BEEE80C93F54} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1773192 2020-09-20] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {89508FB2-31F9-41F2-9F71-83F0854AC113} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {8A7C76F3-3621-4EC8-8F50-BC0DA6FEF531} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-16] (HP Inc. -> HP Inc.)
Task: {95834511-A8FA-407B-AC59-438CA5B30E7F} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-09] (Adobe Inc. -> Adobe)
Task: {97F39469-487F-4173-A1A2-89E640183F99} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\972ca26a-2d99-4c4d-8920-af5b995561ec => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {9AE8E8F7-F542-45E2-BC95-9668072163E6} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\4ff126e1-bfdb-45a6-b168-6baa303ee534 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {9D5CD83C-5568-4845-931C-246423EB0C70} - System32\Tasks\Uninstaller_SkipUac_Davídek => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5900560 2019-09-10] (IObit Information Technology -> IObit)
Task: {A5A90189-8D48-4687-8E20-0C98381D32F3} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [1321608 2016-12-07] (LENOVO -> Lenovo)
Task: {AF0CFCFE-B16F-49B8-AC47-0169C96366F2} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [10165384 2016-12-07] (LENOVO -> Lenovo)
Task: {B2039E40-E251-49DA-993D-442C4019D38F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4371880 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {BDDD7E7F-EF33-4702-9BBE-75669DCC2E8B} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [10165384 2016-12-07] (LENOVO -> Lenovo)
Task: {C484020B-4116-4825-B453-33B7B90D25F1} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [25128 2017-11-22] (HP Inc. -> )
Task: {C7B08A7E-BB5D-41D3-822C-DFC9307DE08D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24612232 2020-11-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {C84D79CA-AB3A-457E-B9C0-E442FB369D07} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [693216 2021-01-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {DEDD70B4-619A-456E-9FF5-2CF1F1124F83} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {E1AD38FF-E252-42D6-9255-3E64C0B70108} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
Task: {E3F6ADE3-1F95-4BD7-B518-226E896F7A57} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4371880 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {E9BF93CC-B03A-40F5-9492-BE2205801582} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {EA75A5BF-7D9C-4A7E-B97A-51412E19EE9A} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [62280 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {F4511039-50CC-49E9-BCFF-583D1742650A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115048 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB812180-BAE1-41E2-923C-C202025CB41B} - System32\Tasks\Lenovo\Experience Improvement => C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [287688 2016-02-08] (LENOVO -> Lenovo)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\StartMenu8_Start.job => C:\Program Files (x86)\IObit\Classic Start\Start_Active.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{4a6553e8-92b6-480f-b3e7-ea15ae64d737}: [NameServer] 208.67.222.123,208.67.220.123
Tcpip\..\Interfaces\{4a6553e8-92b6-480f-b3e7-ea15ae64d737}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{5cb98504-278a-42f5-89b8-3ce67b2dc918}: [NameServer] 208.67.222.123,208.67.220.123
Edge:
=======
DownloadDir: C:\Users\Frantisek\Downloads
Edge Notifications: HKU\S-1-5-21-909588931-3475030629-4239748838-1001 -> hxxps://www.fosshub.com; hxxps://fastshare.cz; hxxps://email08.active24.com; hxxps://www.kb.cz; hxxps://mail.google.com
Edge DefaultProfile: Default
Edge Profile: C:\Users\Frantisek\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-13]
FireFox:
========
FF DefaultProfile: s6GBKh7b.default
FF ProfilePath: C:\Users\Frantisek\AppData\Roaming\TomTom\HOME\Profiles\7ar1ighs.default [2019-05-31]
FF Extension: (No Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\5cj17zud.default-release-1589281251964 [2021-01-19]
FF user.js: detected! => C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\5cj17zud.default-release-1589281251964\user.js [2020-12-11]
FF Homepage: Mozilla\Firefox\Profiles\5cj17zud.default-release-1589281251964 -> www.seznam.cz
FF ProfilePath: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\s6GBKh7b.default [2020-12-11]
FF user.js: detected! => C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\s6GBKh7b.default\user.js [2020-12-11]
FF Extension: (Avira Browser Safety) - C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\s6GBKh7b.default\Extensions\abs@avira.com [2019-05-02]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-09] (Adobe Inc. -> )
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-09] (Adobe Inc. -> )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2014-07-02] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2014-07-02] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2020-12-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2020-12-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-07-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-07-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-01-19]
Chrome:
=======
CHR Profile: C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default [2020-12-29]
CHR Extension: (Dokumenty) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-29]
CHR Extension: (AVG SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2020-02-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-01-31]
CHR Extension: (Chrome Media Router) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-10]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
Opera:
=======
OPR Profile: C:\Users\Frantisek\AppData\Roaming\Opera Software\Opera Stable [2020-12-29]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.cz/complete/search?client=op ... utEncoding}
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
R2 AdvancedSystemCareService13; C:\Program Files (x86)\Advanced SystemCare Pro\ASCService.exe [1290000 2019-12-27] (IObit Information Technology -> IObit)
R2 AegLauncher; C:\Program Files\MobiGame\aeg_launcher.exe [7183872 2020-12-06] () [File not signed]
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-08-26] (Apple Inc. -> Apple Inc.)
S2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [688992 2017-02-27] (LENOVO -> Lenovo)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11137416 2020-11-23] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [1439424 2016-02-02] (Disc Soft Ltd -> Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-10-26] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-10-26] (ESET, spol. s r.o. -> ESET)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1155512 2015-07-30] (LENOVO -> Lenovo)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] (Canon Inc. -> )
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [330240 2015-02-26] () [File not signed]
S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2019-08-23] (IObit Information Technology -> IObit)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-02-26] () [File not signed]
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\LenovoVantageService.exe [29520 2020-11-05] (Lenovo -> Lenovo Group Ltd.)
R2 MobiGameUpdater; C:\Program Files\MobiGame\MobiGameUpdater.exe [303104 2020-12-06] () [File not signed]
S3 PACSPTISVR-Sound_Organizer; C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe [167208 2014-07-16] (Sony Corporation -> Sony Corporation)
R2 SMService; C:\Program Files (x86)\IObit\Classic Start\SMService.exe [1162000 2019-05-28] (IObit Information Technology -> IObit)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [30264 2020-07-11] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtultrausbbus; C:\WINDOWS\System32\drivers\dtultrausbbus.sys [47672 2020-07-11] (Disc Soft Ltd -> Disc Soft Ltd)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [160992 2020-10-26] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [109360 2020-10-26] (ESET, spol. s r.o. -> ESET)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [508056 2017-10-19] (Symantec Corporation -> Symantec Corporation)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15288 2020-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [190464 2020-10-26] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43720 2020-10-26] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70048 2020-10-26] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107784 2020-10-26] (ESET, spol. s r.o. -> ESET)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [158360 2017-10-19] (Symantec Corporation -> Symantec Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2020-05-25] (Martin Malik - REALiX -> REALiX(tm))
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44112 2019-07-30] (IObit Information Technology -> IObit)
R3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2019-07-30] (IObit Information Technology -> IObit)
R3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2019-07-30] (IObit Information Technology -> IObit)
R1 MEmuDrv; C:\WINDOWS\system32\DRIVERS\MEmuDrv.sys [320360 2020-10-09] (Shanghai Microvirt Software Technology Co., Ltd. -> Maiwei Corporation)
R1 MobiVBoxDrv; C:\Program Files\MobiGame\vbox\MobiVBoxDrv.sys [314688 2020-11-11] (Iron Entertainment Inc. -> Oracle Corporation)
S3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [45056 2019-04-30] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
S1 prodrv06; C:\Windows\SysWOW64\drivers\prodrv06.sys [52224 2004-01-26] (Protection Technology) [File not signed]
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [95552 2004-01-26] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2016-05-24] (Corel Corporation -> Corel Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 StillCam; C:\WINDOWS\system32\DRIVERS\serscan.sys [13312 2019-03-19] (Microsoft Corporation) [File not signed]
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-12-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429296 2020-12-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-11] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\system32\DRIVERS\WSDScan.sys [26112 2019-03-19] (Microsoft Corporation) [File not signed]
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] (CyberLink -> "CyberLink)
U4 AscRegistryFilter; \??\C:\Program Files (x86)\Advanced SystemCare Pro\drivers\win10_amd64\AscRegistryFilter.sys [X]
S3 cpuz145; \??\C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-19 19:07 - 2021-01-19 19:13 - 000038211 _____ C:\Users\Frantisek\Desktop\FRST.txt
2021-01-19 19:02 - 2021-01-19 19:11 - 000000000 ____D C:\FRST
2021-01-19 18:56 - 2021-01-19 18:57 - 002295808 _____ (Farbar) C:\Users\Frantisek\Desktop\FRST64.exe
2021-01-19 16:38 - 2021-01-19 16:38 - 000002968 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_Davídek
2021-01-19 16:38 - 2021-01-19 16:38 - 000001437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2021-01-19 16:38 - 2021-01-19 16:38 - 000001297 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2021-01-19 16:38 - 2021-01-19 16:38 - 000001297 _____ C:\ProgramData\Desktop\IObit Uninstaller.lnk
2021-01-19 16:37 - 2021-01-19 16:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2021-01-19 16:22 - 2021-01-19 16:40 - 000000536 _____ C:\Users\Frantisek\Desktop\Windows (C).lnk
2021-01-19 16:22 - 2021-01-19 16:22 - 000000513 _____ C:\Users\Frantisek\Desktop\LENOVO (D).lnk
2021-01-19 07:44 - 2021-01-19 07:44 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-01-18 14:48 - 2021-01-19 15:43 - 000000000 ____D C:\Users\Frantisek\Desktop\Granny PC
2021-01-18 10:25 - 2021-01-18 10:25 - 000000000 ____D C:\Users\Frantisek\AppData\LocalLow\DVloper
2021-01-15 08:47 - 2021-01-15 08:47 - 000138880 _____ C:\Users\Frantisek\Downloads\VY_32_INOVACE_ČJ.4.132 pololetní práce.pdf
2021-01-15 08:47 - 2021-01-15 08:47 - 000137436 _____ C:\Users\Frantisek\Downloads\Cesky jazyk 3.pdf
2021-01-14 09:28 - 2021-01-14 09:28 - 000094720 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-14 09:27 - 2021-01-14 09:27 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-14 09:27 - 2021-01-14 09:27 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-14 09:27 - 2021-01-14 09:27 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-14 09:27 - 2021-01-14 09:27 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-14 09:26 - 2021-01-14 09:26 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-14 09:26 - 2021-01-14 09:26 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-14 09:26 - 2021-01-14 09:26 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-14 09:26 - 2021-01-14 09:26 - 000053248 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-14 09:25 - 2021-01-14 09:25 - 000455680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-14 09:25 - 2021-01-14 09:25 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-14 09:25 - 2021-01-14 09:25 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-14 09:25 - 2021-01-14 09:25 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-14 09:24 - 2021-01-14 09:24 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-14 09:24 - 2021-01-14 09:24 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-14 09:23 - 2021-01-14 09:23 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-14 09:23 - 2021-01-14 09:23 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-14 09:23 - 2021-01-14 09:23 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth18.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth17.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth16.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth15.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2021-01-14 09:22 - 2021-01-14 09:22 - 000458240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-14 09:21 - 2021-01-14 09:21 - 001101312 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-14 09:21 - 2021-01-14 09:21 - 000208384 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-14 09:19 - 2021-01-14 09:19 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-14 09:19 - 2021-01-14 09:19 - 000331264 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-14 09:19 - 2021-01-14 09:19 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-14 09:18 - 2021-01-14 09:18 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-14 09:16 - 2021-01-14 09:16 - 002590720 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-14 09:16 - 2021-01-14 09:16 - 000549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-14 09:16 - 2021-01-14 09:16 - 000186368 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-14 09:14 - 2021-01-14 09:14 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-14 09:14 - 2021-01-14 09:14 - 000266752 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-14 09:12 - 2021-01-14 09:12 - 000164864 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-14 09:11 - 2021-01-14 09:11 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-14 09:11 - 2021-01-14 09:11 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-14 09:11 - 2021-01-14 09:11 - 000061440 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-01-14 09:10 - 2021-01-14 09:10 - 000453632 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-14 08:03 - 2021-01-19 08:00 - 000000000 ____D C:\Users\Frantisek\.MobiVBox
2021-01-13 15:30 - 2021-01-13 15:35 - 000000000 ____D C:\Users\Davídek\AppData\Local\MobiGame
2021-01-13 15:24 - 2021-01-13 15:33 - 000000000 ____D C:\Program Files\MobiGame
2021-01-13 15:15 - 2021-01-13 15:15 - 000000000 ____D C:\Users\Davídek
2021-01-13 15:13 - 2021-01-19 07:48 - 000000000 ____D C:\Users\Frantisek\AppData\Local\MobiGame
2021-01-13 15:09 - 2021-01-13 15:09 - 002667160 _____ () C:\Users\Frantisek\Downloads\Granny_com.dvloper.granny_gameslolc_8533348.exe
2021-01-13 14:12 - 2021-01-13 14:12 - 001227160 _____ (BlueStack Systems Inc.) C:\Users\Frantisek\Downloads\BlueStacksInstaller_4.250.0.1070_native_fc7be42215ea0fdd10070580007dbb95_R3Jhbm55(1).exe
2021-01-13 13:53 - 2021-01-13 13:54 - 001227160 _____ (BlueStack Systems Inc.) C:\Users\Frantisek\Downloads\BlueStacksInstaller_4.250.0.1070_native_fc7be42215ea0fdd10070580007dbb95_R3Jhbm55.exe
2021-01-13 13:30 - 2021-01-13 13:30 - 000000000 ____D C:\Users\Frantisek\Downloads\MEmu Download
2021-01-13 13:29 - 2021-01-13 13:29 - 000000000 ____D C:\Users\Frantisek\.MemuHyperv
2021-01-13 13:24 - 2021-01-13 13:51 - 000000000 ____D C:\Program Files (x86)\Microvirt
2021-01-13 13:19 - 2021-01-13 13:19 - 001348184 _____ () C:\Users\Frantisek\Downloads\Memu-Installer_v4.232.100.637.exe
2021-01-13 12:48 - 2021-01-13 12:48 - 000000000 ____D C:\Users\Frantisek\Desktop\angličtina nikola
2021-01-13 12:46 - 2021-01-13 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABC Kid Genius
2021-01-13 12:46 - 2021-01-13 12:46 - 000000000 ____D C:\kgdemo
2021-01-13 12:45 - 2021-01-13 12:46 - 026897528 _____ () C:\Users\Frantisek\Downloads\AbcKidGenius(1).exe
2021-01-13 12:44 - 2021-01-13 12:44 - 038589168 _____ ( ) C:\Users\Frantisek\Downloads\AbcKidGenius.exe
2021-01-13 12:32 - 2021-01-13 12:32 - 000000000 ____D C:\Users\Frantisek\AppData\Local\HiSuite
2021-01-13 10:52 - 2021-01-13 10:52 - 000468229 _____ C:\Users\Frantisek\Downloads\document(1).pdf
2021-01-12 14:44 - 2021-01-12 14:44 - 000147261 _____ C:\Users\Frantisek\Downloads\document.pdf
2021-01-08 08:20 - 2021-01-08 08:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-01-07 08:22 - 2021-01-08 14:07 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-12-31 20:47 - 2020-12-31 20:47 - 456329568 _____ (Microvirt Software Technology Co. Ltd.) C:\Users\Frantisek\Downloads\MEmu-Setup-7.3.2-had33c9d62.exe
2020-12-29 16:24 - 2020-12-29 16:24 - 000000000 ____D C:\Program Files (x86)\WinRAR
2020-12-29 16:24 - 2020-12-29 16:21 - 000165032 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-12-29 15:53 - 2020-12-29 15:53 - 030536752 _____ (Piriform Software Ltd) C:\Users\Frantisek\Downloads\ccsetup575 (1).exe
2020-12-29 15:49 - 2020-12-29 15:49 - 030536752 _____ (Piriform Software Ltd) C:\Users\Frantisek\Downloads\ccsetup575.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-19 18:50 - 2020-02-19 17:14 - 000000000 ____D C:\ProgramData\Mozilla
2021-01-19 18:48 - 2020-02-19 17:15 - 000000000 ____D C:\Users\Frantisek\AppData\LocalLow\Mozilla
2021-01-19 18:35 - 2020-07-11 11:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Singles
2021-01-19 18:32 - 2020-01-09 19:54 - 000000000 ___RD C:\Users\Frantisek\Desktop\hry
2021-01-19 18:31 - 2020-07-11 14:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barbie(TM)
2021-01-19 18:31 - 2015-09-12 07:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2021-01-19 18:30 - 2020-07-11 14:09 - 000000127 _____ C:\WINDOWS\ka.ini
2021-01-19 18:26 - 2019-12-28 11:36 - 000000000 ____D C:\Users\Frantisek\Desktop\DĚDA
2021-01-19 18:19 - 2020-11-25 11:46 - 000000000 ____D C:\Program Files (x86)\SEGA
2021-01-19 18:10 - 2020-07-11 20:22 - 000000000 ____D C:\GOG Games
2021-01-19 18:07 - 2020-07-11 13:44 - 000000000 ____D C:\Users\Frantisek\AppData\Local\Disney Interactive Studios
2021-01-19 17:54 - 2020-10-20 13:04 - 000000000 ____D C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDROMEK
2021-01-19 17:54 - 2020-10-20 13:03 - 000000000 ____D C:\Program Files (x86)\Centauri
2021-01-19 17:44 - 2020-05-25 19:44 - 000000000 ____D C:\Program Files (x86)\Advanced SystemCare Pro
2021-01-19 17:39 - 2020-11-18 20:14 - 000000000 ____D C:\Users\Frantisek\AppData\Local\Bluestacks
2021-01-19 17:29 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2021-01-19 16:28 - 2020-11-10 14:44 - 000000000 ____D C:\Users\Frantisek\Desktop\máma
2021-01-19 16:26 - 2020-11-18 12:35 - 000000000 ____D C:\Users\Frantisek\Desktop\ŠKOLA
2021-01-19 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-01-19 14:46 - 2019-08-21 20:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-01-19 14:26 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2021-01-19 14:26 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-01-19 07:43 - 2019-08-21 20:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-01-18 14:51 - 2019-03-19 05:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-01-18 09:06 - 2017-12-20 21:08 - 000000000 ____D C:\Users\Frantisek\AppData\Local\Packages
2021-01-17 17:37 - 2020-07-08 19:09 - 000000000 ____D C:\Users\Frantisek\AppData\Roaming\Kodi
2021-01-16 18:31 - 2020-12-11 10:33 - 000000000 ____D C:\ProgramData\ProductData
2021-01-15 07:58 - 2017-11-28 15:37 - 000000000 ___RD C:\Users\Frantisek\3D Objects
2021-01-15 07:58 - 2016-02-13 14:20 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-01-15 07:53 - 2019-08-22 04:04 - 000721116 _____ C:\WINDOWS\system32\perfh005.dat
2021-01-15 07:53 - 2019-08-22 04:04 - 000146546 _____ C:\WINDOWS\system32\perfc005.dat
2021-01-15 07:53 - 2019-08-21 20:38 - 001697934 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-01-15 07:51 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2021-01-15 07:47 - 2019-08-21 20:08 - 000508976 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\setup
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Com
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-01-14 20:45 - 2019-03-19 07:20 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-01-14 20:45 - 2019-03-19 07:20 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Provisioning
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\IME
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Windows Defender
2021-01-14 12:21 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-01-14 12:08 - 2016-02-17 14:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-01-14 09:49 - 2016-02-17 14:51 - 135062968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-01-14 09:09 - 2019-08-21 20:14 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-01-14 08:08 - 2017-08-28 10:21 - 000000000 ____D C:\Users\Frantisek\AppData\Local\CrashDumps
2021-01-14 08:03 - 2019-08-21 20:25 - 000000000 ____D C:\Users\Frantisek
2021-01-13 16:06 - 2020-07-08 19:22 - 000001352 _____ C:\Users\Frantisek\Desktop\kodi – zástupce.lnk
2021-01-13 14:17 - 2020-11-18 20:14 - 000000000 ____D C:\Users\Public\BlueStacks
2021-01-13 13:27 - 2017-06-26 12:50 - 000000000 ____D C:\Users\Frantisek\.android
2021-01-12 15:21 - 2015-09-12 07:43 - 000000000 ____D C:\ProgramData\Lenovo
2021-01-12 15:20 - 2016-11-17 08:58 - 000376967 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2021-01-11 08:41 - 2020-06-16 11:31 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-01-08 14:24 - 2020-03-21 13:07 - 000000000 ____D C:\Users\Frantisek\Desktop\tisk MP250
2021-01-08 14:18 - 2020-03-21 13:09 - 000000000 ____D C:\ProgramData\CanonIJ
2021-01-08 14:18 - 2020-03-21 13:06 - 000000000 ____D C:\ProgramData\CanonIJPLM
2021-01-08 14:07 - 2020-02-19 17:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-01-08 08:20 - 2020-02-19 17:14 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-01-07 08:13 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-12-29 16:24 - 2019-03-31 10:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-12-29 16:24 - 2019-03-31 10:21 - 000000000 ____D C:\Program Files (x86)\Java
2020-12-29 16:24 - 2017-02-18 18:20 - 000000000 ____D C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-12-29 16:24 - 2017-02-18 18:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-12-29 16:07 - 2017-08-01 14:25 - 000000000 ____D C:\temp
2020-12-29 15:57 - 2020-01-12 16:53 - 000000000 ____D C:\WINDOWS\Minidump
2020-12-29 15:21 - 2019-03-04 16:47 - 000000000 ____D C:\Users\Frantisek\AppData\Local\D3DSCache
2020-12-29 14:25 - 2015-09-12 07:24 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
==================== Files in the root of some directories ========
2020-01-12 16:42 - 2017-05-24 09:40 - 005711776 _____ () C:\Program Files (x86)\antiporn241.exe
2020-03-04 18:35 - 2020-03-04 18:35 - 000002597 _____ () C:\Program Files (x86)\Lepsi.TV.InstallState
2018-10-17 09:43 - 2018-10-17 09:43 - 000000002 _____ () C:\Users\Frantisek\AppData\Roaming\acc.txt
2016-05-08 12:21 - 2016-05-08 12:22 - 000001691 _____ () C:\Users\Frantisek\AppData\Roaming\fastboot.log
2020-01-08 23:32 - 2020-01-08 23:32 - 000042358 _____ () C:\Users\Frantisek\AppData\Roaming\iec_0D0A0E0M0O0N0T1F1F1I1B1V0F0StJ1V1S1F1F1J1L1G1NtF1R1F1H.txt
2020-01-08 23:32 - 2020-01-08 23:32 - 000286556 _____ () C:\Users\Frantisek\AppData\Roaming\iec_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2018-10-17 09:57 - 2018-10-17 09:57 - 000001191 _____ () C:\Users\Frantisek\AppData\Roaming\uni.txt
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Synovi se seká a zabržduje NTB.Poslední dobou se mu seká i prohlížeč.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-01-2021
Ran by Davídek (administrator) on LAPTOP-1A2BAFO9 (LENOVO 80M3) (19-01-2021 19:07:06)
Running from C:\Users\Frantisek\Desktop
Loaded Profiles: Davídek
Platform: Windows 10 Home Version 1909 18363.1316 (X64) Language: Angličtina (Spojené státy)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe <2>
() [File not signed] C:\Program Files\MobiGame\aeg_launcher.exe
() [File not signed] C:\Program Files\MobiGame\MobiGameUpdater.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Cole Williams Software Limited -> ) C:\Windows\SysWOW64\Codecs\TrayMenu.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Disc Soft Ltd -> Disc Soft Ltd) [File not signed] C:\Program Files\DAEMON Tools Ultra\DTAgent.exe
(Disc Soft Ltd -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Fortemedia Inc -> ) C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Game Player) [File not signed] C:\Program Files\MobiGame\player\mobiplayer.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
(Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(IObit Information Technology -> IObit) [File not signed] C:\Program Files (x86)\Advanced SystemCare Pro\ASC_IObitDel.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\Advanced SystemCare Pro\ASCService.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\Advanced SystemCare Pro\ASCTray_IObitDel.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\ClassicStart.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\InstallServices.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\SMService.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Classic Start\StartMenu_Hook.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\Lenovo.Vantage.AddinHost.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\LenovoVantageService.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(LENOVO -> Lenovo(beijing) Limited) C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe
(LENOVO -> Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(LENOVO -> Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20368.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\PrintDialog\PrintDialog.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <3>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle Corporation) [File not signed] C:\Program Files\MobiGame\vbox\MobiVBoxSVC.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] (Fortemedia Inc -> )
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (LENOVO -> Lenovo(beijing) Limited)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-17] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [175504 2020-10-26] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [isa] => C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [330240 2015-02-26] () [File not signed]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-09-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [4338880 2016-02-02] (Disc Soft Ltd -> Disc Soft Ltd) [File not signed]
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\Run: [Mobigame Playstore] => C:\Program Files\MobiGame\playstore\playstore.exe [169984 2020-12-06] () [File not signed]
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2065dfb8-3ba4-11ea-9cf4-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2065dff8-3ba4-11ea-9cf4-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2ad3e17e-87eb-11ea-9cfd-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {2ad3e1c1-87eb-11ea-9cfd-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {5169af39-cc5a-11ea-9d0a-b46d83ba83d9} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-909588931-3475030629-4239748838-1001\...\MountPoints2: {d40eb54e-c367-11ea-9d09-b46d83ba83d9} - "F:\stub.exe"
HKU\S-1-5-18\...\RunOnce: [Application Restart #3] => C:\Program Files\Internet Explorer\iexplore.exe -restart /WERRESTART <==== ATTENTION
HKLM\...\Windows x64\Print Processors\Canon MP250 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9W.DLL [28672 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\HP1020PrintProc: C:\Windows\System32\spool\prtprocs\x64\pphp1020.dll [65024 2012-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Windows x64\Print Processors\hpfpp02t: C:\Windows\System32\spool\prtprocs\x64\hpfpp02t.dll [253440 2010-05-15] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\HPM1210PrintProc: C:\Windows\System32\spool\prtprocs\x64\HPM1210PP.dll [74240 2012-09-29] () [File not signed]
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP250 series: C:\WINDOWS\system32\CNMLM9W.DLL [336896 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HPLJ1020LM: C:\WINDOWS\system32\zlhp1020.dll [192512 2012-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\PCL hpf3l02t: C:\WINDOWS\system32\hpf3l02t.dll [138752 2010-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] ->
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\Windows\SysWOW64\advpack.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation)
IFEO\AUpdate.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\AutoUpdate.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\BigUpgrade_IU.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\CrRestore.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\DSPut.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\Feedback.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\ijplmsvc.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\ijplmui.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IObitDownloader.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\iu10Pre.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUProtip.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUService.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\iush.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUSoftUpdateTip.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\IUXM2020.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\Loader-IU.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\NoteIcon.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\ScreenShot.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\SecurityNotification_1.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\SendBugReportNew.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
IFEO\SpecUTool.exe: [Debugger] C:\Program Files (x86)\Advanced SystemCare Pro\AutoReactivator.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2019-01-21]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\Codecs\TrayMenu.exe (Cole Williams Software Limited -> )
Startup: C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk [2016-02-22]
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02BE8CF1-0BB4-42CF-A39E-2B1FE999A83E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {0D4F4CCE-E055-4976-ACCA-2ADF104ADAF3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {0DCCC838-573D-44F5-8032-CF7A7F817964} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {0DF09F9E-EC13-4F1B-8418-AE256753877C} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\ScheduleEventAction.exe [24408 2020-11-05] (Lenovo -> Lenovo Group Ltd.)
Task: {10287C3A-57B4-4807-B923-E1664E2C4BDB} - System32\Tasks\StartMenu8_Start => C:\Program Files (x86)\IObit\Classic Start\Start_Active.exe [528656 2019-05-22] (IObit Information Technology -> IObit)
Task: {10A062DF-6814-4F44-A30A-BD01063EE275} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [264328 2016-12-07] (LENOVO -> )
Task: {29AEE9EB-36C9-4B9C-8A5D-210E74BD1E10} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\941de6cd-645d-4c35-9288-f4e04e91638c => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {2ACEDC19-3133-4FCB-9FFC-6C1E71FD9DC8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {2BF6ABA1-02C9-48D1-8D58-15BE5E8EAA32} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [348504 2020-11-06] (HP Inc. -> HP Inc.)
Task: {31A4CBF7-FBD7-4B29-910B-53E05D94D0C4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24612232 2020-11-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {340292CE-49E0-4C20-9152-A99ABDCA0B58} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-909588931-3475030629-4239748838-1001UA => C:\Users\Frantisek\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-05-25] (Google LLC -> Google LLC)
Task: {3AC1A547-8768-4CEF-B88B-3CCE9008146D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-909588931-3475030629-4239748838-1001Core => C:\Users\Frantisek\AppData\Local\Google\Update\GoogleUpdate.exe [156104 2020-05-25] (Google LLC -> Google LLC)
Task: {3E21CFB4-E4B6-4DDE-9566-72B0B66E8177} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\Windows\system32\rundll32.exe C:\Windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
Task: {420CD1C1-86FF-4FA0-83B0-B12A5EDE55EA} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [144312 2020-09-15] (Lenovo -> Lenovo Group Ltd.)
Task: {4392A3B5-0280-40A3-919E-928DC94F6C6F} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {47B05644-B523-44B7-BE01-F7909A81F9FC} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-909588931-3475030629-4239748838-1001 => C:\Users\Frantisek\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [122344 2019-04-04] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {4A446D9D-09D0-4F7D-9ACB-078B7A1A91AD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {4BF1E12D-5EEC-4697-A386-406F17EAA49A} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832 2015-07-08] (LENOVO -> Lenovo)
Task: {4DEFED63-BC02-4525-8FF4-CBAE237FE5C1} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {52D3E5E1-9458-4E87-AE45-F47DF095D768} - System32\Tasks\PDVDServ12 Task => C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe [85432 2015-05-28] (CyberLink Corp. -> CyberLink Corp.)
Task: {5B41C75D-2A80-4A79-8A30-74C1659332CF} - System32\Tasks\CyberLink\Photo Master Gadget startup => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe [745240 2016-04-22] (CyberLink Corp. -> CyberLink Corp.)
Task: {5C7E366F-14DA-4C73-AB96-06CDF76B8EFF} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {5C91CC50-01E4-4AD2-9A53-A4F2DF3D679C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115048 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {62268D82-C708-4D01-BD0F-5E837878FB30} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [135000 2020-06-22] (HP Inc. -> HP Inc.)
Task: {72FDCC01-83BA-49B0-B301-14BFA78C934D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1443736 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {778D5342-B935-4869-9417-BD04AFD3AFE4} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\0fcf031d-c0f0-4847-9462-afc06ce2fc10 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {7841C11D-B7DE-4579-AE47-BEEE80C93F54} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1773192 2020-09-20] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {89508FB2-31F9-41F2-9F71-83F0854AC113} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {8A7C76F3-3621-4EC8-8F50-BC0DA6FEF531} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-16] (HP Inc. -> HP Inc.)
Task: {95834511-A8FA-407B-AC59-438CA5B30E7F} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-09] (Adobe Inc. -> Adobe)
Task: {97F39469-487F-4173-A1A2-89E640183F99} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\972ca26a-2d99-4c4d-8920-af5b995561ec => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {9AE8E8F7-F542-45E2-BC95-9668072163E6} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\4ff126e1-bfdb-45a6-b168-6baa303ee534 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {9D5CD83C-5568-4845-931C-246423EB0C70} - System32\Tasks\Uninstaller_SkipUac_Davídek => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5900560 2019-09-10] (IObit Information Technology -> IObit)
Task: {A5A90189-8D48-4687-8E20-0C98381D32F3} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [1321608 2016-12-07] (LENOVO -> Lenovo)
Task: {AF0CFCFE-B16F-49B8-AC47-0169C96366F2} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [10165384 2016-12-07] (LENOVO -> Lenovo)
Task: {B2039E40-E251-49DA-993D-442C4019D38F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4371880 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {BDDD7E7F-EF33-4702-9BBE-75669DCC2E8B} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [10165384 2016-12-07] (LENOVO -> Lenovo)
Task: {C484020B-4116-4825-B453-33B7B90D25F1} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [25128 2017-11-22] (HP Inc. -> )
Task: {C7B08A7E-BB5D-41D3-822C-DFC9307DE08D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24612232 2020-11-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {C84D79CA-AB3A-457E-B9C0-E442FB369D07} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [693216 2021-01-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {DEDD70B4-619A-456E-9FF5-2CF1F1124F83} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {E1AD38FF-E252-42D6-9255-3E64C0B70108} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
Task: {E3F6ADE3-1F95-4BD7-B518-226E896F7A57} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4371880 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {E9BF93CC-B03A-40F5-9492-BE2205801582} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {EA75A5BF-7D9C-4A7E-B97A-51412E19EE9A} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [62280 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
Task: {F4511039-50CC-49E9-BCFF-583D1742650A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115048 2020-12-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB812180-BAE1-41E2-923C-C202025CB41B} - System32\Tasks\Lenovo\Experience Improvement => C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [287688 2016-02-08] (LENOVO -> Lenovo)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\StartMenu8_Start.job => C:\Program Files (x86)\IObit\Classic Start\Start_Active.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{4a6553e8-92b6-480f-b3e7-ea15ae64d737}: [NameServer] 208.67.222.123,208.67.220.123
Tcpip\..\Interfaces\{4a6553e8-92b6-480f-b3e7-ea15ae64d737}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{5cb98504-278a-42f5-89b8-3ce67b2dc918}: [NameServer] 208.67.222.123,208.67.220.123
Edge:
=======
DownloadDir: C:\Users\Frantisek\Downloads
Edge Notifications: HKU\S-1-5-21-909588931-3475030629-4239748838-1001 -> hxxps://www.fosshub.com; hxxps://fastshare.cz; hxxps://email08.active24.com; hxxps://www.kb.cz; hxxps://mail.google.com
Edge DefaultProfile: Default
Edge Profile: C:\Users\Frantisek\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-13]
FireFox:
========
FF DefaultProfile: s6GBKh7b.default
FF ProfilePath: C:\Users\Frantisek\AppData\Roaming\TomTom\HOME\Profiles\7ar1ighs.default [2019-05-31]
FF Extension: (No Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\5cj17zud.default-release-1589281251964 [2021-01-19]
FF user.js: detected! => C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\5cj17zud.default-release-1589281251964\user.js [2020-12-11]
FF Homepage: Mozilla\Firefox\Profiles\5cj17zud.default-release-1589281251964 -> www.seznam.cz
FF ProfilePath: C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\s6GBKh7b.default [2020-12-11]
FF user.js: detected! => C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\s6GBKh7b.default\user.js [2020-12-11]
FF Extension: (Avira Browser Safety) - C:\Users\Frantisek\AppData\Roaming\Mozilla\Firefox\Profiles\s6GBKh7b.default\Extensions\abs@avira.com [2019-05-02]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-09] (Adobe Inc. -> )
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-09] (Adobe Inc. -> )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2014-07-02] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2014-07-02] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2020-12-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2020-12-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-07-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-07-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-01-19]
Chrome:
=======
CHR Profile: C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default [2020-12-29]
CHR Extension: (Dokumenty) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-29]
CHR Extension: (AVG SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2020-02-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-01-31]
CHR Extension: (Chrome Media Router) - C:\Users\Frantisek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-10]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
Opera:
=======
OPR Profile: C:\Users\Frantisek\AppData\Roaming\Opera Software\Opera Stable [2020-12-29]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.cz/complete/search?client=op ... utEncoding}
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
R2 AdvancedSystemCareService13; C:\Program Files (x86)\Advanced SystemCare Pro\ASCService.exe [1290000 2019-12-27] (IObit Information Technology -> IObit)
R2 AegLauncher; C:\Program Files\MobiGame\aeg_launcher.exe [7183872 2020-12-06] () [File not signed]
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-08-26] (Apple Inc. -> Apple Inc.)
S2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [688992 2017-02-27] (LENOVO -> Lenovo)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11137416 2020-11-23] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [1439424 2016-02-02] (Disc Soft Ltd -> Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-10-26] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-10-26] (ESET, spol. s r.o. -> ESET)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1155512 2015-07-30] (LENOVO -> Lenovo)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] (Canon Inc. -> )
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81744 2020-09-24] (Lenovo -> Lenovo Group Ltd.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [330240 2015-02-26] () [File not signed]
S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2019-08-23] (IObit Information Technology -> IObit)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-02-26] () [File not signed]
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.4.16.0\LenovoVantageService.exe [29520 2020-11-05] (Lenovo -> Lenovo Group Ltd.)
R2 MobiGameUpdater; C:\Program Files\MobiGame\MobiGameUpdater.exe [303104 2020-12-06] () [File not signed]
S3 PACSPTISVR-Sound_Organizer; C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe [167208 2014-07-16] (Sony Corporation -> Sony Corporation)
R2 SMService; C:\Program Files (x86)\IObit\Classic Start\SMService.exe [1162000 2019-05-28] (IObit Information Technology -> IObit)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [30264 2020-07-11] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtultrausbbus; C:\WINDOWS\System32\drivers\dtultrausbbus.sys [47672 2020-07-11] (Disc Soft Ltd -> Disc Soft Ltd)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [160992 2020-10-26] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [109360 2020-10-26] (ESET, spol. s r.o. -> ESET)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [508056 2017-10-19] (Symantec Corporation -> Symantec Corporation)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15288 2020-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [190464 2020-10-26] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43720 2020-10-26] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70048 2020-10-26] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107784 2020-10-26] (ESET, spol. s r.o. -> ESET)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [158360 2017-10-19] (Symantec Corporation -> Symantec Corporation)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2020-05-25] (Martin Malik - REALiX -> REALiX(tm))
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44112 2019-07-30] (IObit Information Technology -> IObit)
R3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2019-07-30] (IObit Information Technology -> IObit)
R3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2019-07-30] (IObit Information Technology -> IObit)
R1 MEmuDrv; C:\WINDOWS\system32\DRIVERS\MEmuDrv.sys [320360 2020-10-09] (Shanghai Microvirt Software Technology Co., Ltd. -> Maiwei Corporation)
R1 MobiVBoxDrv; C:\Program Files\MobiGame\vbox\MobiVBoxDrv.sys [314688 2020-11-11] (Iron Entertainment Inc. -> Oracle Corporation)
S3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [45056 2019-04-30] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
S1 prodrv06; C:\Windows\SysWOW64\drivers\prodrv06.sys [52224 2004-01-26] (Protection Technology) [File not signed]
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [95552 2004-01-26] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2016-05-24] (Corel Corporation -> Corel Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 StillCam; C:\WINDOWS\system32\DRIVERS\serscan.sys [13312 2019-03-19] (Microsoft Corporation) [File not signed]
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-12-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429296 2020-12-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-11] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\system32\DRIVERS\WSDScan.sys [26112 2019-03-19] (Microsoft Corporation) [File not signed]
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] (CyberLink -> "CyberLink)
U4 AscRegistryFilter; \??\C:\Program Files (x86)\Advanced SystemCare Pro\drivers\win10_amd64\AscRegistryFilter.sys [X]
S3 cpuz145; \??\C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-19 19:07 - 2021-01-19 19:13 - 000038211 _____ C:\Users\Frantisek\Desktop\FRST.txt
2021-01-19 19:02 - 2021-01-19 19:11 - 000000000 ____D C:\FRST
2021-01-19 18:56 - 2021-01-19 18:57 - 002295808 _____ (Farbar) C:\Users\Frantisek\Desktop\FRST64.exe
2021-01-19 16:38 - 2021-01-19 16:38 - 000002968 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_Davídek
2021-01-19 16:38 - 2021-01-19 16:38 - 000001437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2021-01-19 16:38 - 2021-01-19 16:38 - 000001297 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2021-01-19 16:38 - 2021-01-19 16:38 - 000001297 _____ C:\ProgramData\Desktop\IObit Uninstaller.lnk
2021-01-19 16:37 - 2021-01-19 16:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2021-01-19 16:22 - 2021-01-19 16:40 - 000000536 _____ C:\Users\Frantisek\Desktop\Windows (C).lnk
2021-01-19 16:22 - 2021-01-19 16:22 - 000000513 _____ C:\Users\Frantisek\Desktop\LENOVO (D).lnk
2021-01-19 07:44 - 2021-01-19 07:44 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-01-18 14:48 - 2021-01-19 15:43 - 000000000 ____D C:\Users\Frantisek\Desktop\Granny PC
2021-01-18 10:25 - 2021-01-18 10:25 - 000000000 ____D C:\Users\Frantisek\AppData\LocalLow\DVloper
2021-01-15 08:47 - 2021-01-15 08:47 - 000138880 _____ C:\Users\Frantisek\Downloads\VY_32_INOVACE_ČJ.4.132 pololetní práce.pdf
2021-01-15 08:47 - 2021-01-15 08:47 - 000137436 _____ C:\Users\Frantisek\Downloads\Cesky jazyk 3.pdf
2021-01-14 09:28 - 2021-01-14 09:28 - 000094720 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-14 09:27 - 2021-01-14 09:27 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-14 09:27 - 2021-01-14 09:27 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-14 09:27 - 2021-01-14 09:27 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-14 09:27 - 2021-01-14 09:27 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-14 09:26 - 2021-01-14 09:26 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-14 09:26 - 2021-01-14 09:26 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-14 09:26 - 2021-01-14 09:26 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-14 09:26 - 2021-01-14 09:26 - 000053248 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-14 09:25 - 2021-01-14 09:25 - 000455680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-14 09:25 - 2021-01-14 09:25 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-14 09:25 - 2021-01-14 09:25 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-14 09:25 - 2021-01-14 09:25 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-14 09:24 - 2021-01-14 09:24 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-14 09:24 - 2021-01-14 09:24 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-14 09:23 - 2021-01-14 09:23 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-14 09:23 - 2021-01-14 09:23 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-14 09:23 - 2021-01-14 09:23 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth18.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth17.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth16.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth15.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2021-01-14 09:23 - 2021-01-14 09:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2021-01-14 09:22 - 2021-01-14 09:22 - 000458240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-14 09:21 - 2021-01-14 09:21 - 001101312 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-14 09:21 - 2021-01-14 09:21 - 000208384 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-14 09:19 - 2021-01-14 09:19 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-14 09:19 - 2021-01-14 09:19 - 000331264 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-14 09:19 - 2021-01-14 09:19 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-14 09:18 - 2021-01-14 09:18 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-14 09:16 - 2021-01-14 09:16 - 002590720 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-14 09:16 - 2021-01-14 09:16 - 000549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-14 09:16 - 2021-01-14 09:16 - 000186368 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-14 09:14 - 2021-01-14 09:14 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-14 09:14 - 2021-01-14 09:14 - 000266752 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-14 09:12 - 2021-01-14 09:12 - 000164864 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-14 09:11 - 2021-01-14 09:11 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-14 09:11 - 2021-01-14 09:11 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-14 09:11 - 2021-01-14 09:11 - 000061440 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-01-14 09:10 - 2021-01-14 09:10 - 000453632 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-14 08:03 - 2021-01-19 08:00 - 000000000 ____D C:\Users\Frantisek\.MobiVBox
2021-01-13 15:30 - 2021-01-13 15:35 - 000000000 ____D C:\Users\Davídek\AppData\Local\MobiGame
2021-01-13 15:24 - 2021-01-13 15:33 - 000000000 ____D C:\Program Files\MobiGame
2021-01-13 15:15 - 2021-01-13 15:15 - 000000000 ____D C:\Users\Davídek
2021-01-13 15:13 - 2021-01-19 07:48 - 000000000 ____D C:\Users\Frantisek\AppData\Local\MobiGame
2021-01-13 15:09 - 2021-01-13 15:09 - 002667160 _____ () C:\Users\Frantisek\Downloads\Granny_com.dvloper.granny_gameslolc_8533348.exe
2021-01-13 14:12 - 2021-01-13 14:12 - 001227160 _____ (BlueStack Systems Inc.) C:\Users\Frantisek\Downloads\BlueStacksInstaller_4.250.0.1070_native_fc7be42215ea0fdd10070580007dbb95_R3Jhbm55(1).exe
2021-01-13 13:53 - 2021-01-13 13:54 - 001227160 _____ (BlueStack Systems Inc.) C:\Users\Frantisek\Downloads\BlueStacksInstaller_4.250.0.1070_native_fc7be42215ea0fdd10070580007dbb95_R3Jhbm55.exe
2021-01-13 13:30 - 2021-01-13 13:30 - 000000000 ____D C:\Users\Frantisek\Downloads\MEmu Download
2021-01-13 13:29 - 2021-01-13 13:29 - 000000000 ____D C:\Users\Frantisek\.MemuHyperv
2021-01-13 13:24 - 2021-01-13 13:51 - 000000000 ____D C:\Program Files (x86)\Microvirt
2021-01-13 13:19 - 2021-01-13 13:19 - 001348184 _____ () C:\Users\Frantisek\Downloads\Memu-Installer_v4.232.100.637.exe
2021-01-13 12:48 - 2021-01-13 12:48 - 000000000 ____D C:\Users\Frantisek\Desktop\angličtina nikola
2021-01-13 12:46 - 2021-01-13 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABC Kid Genius
2021-01-13 12:46 - 2021-01-13 12:46 - 000000000 ____D C:\kgdemo
2021-01-13 12:45 - 2021-01-13 12:46 - 026897528 _____ () C:\Users\Frantisek\Downloads\AbcKidGenius(1).exe
2021-01-13 12:44 - 2021-01-13 12:44 - 038589168 _____ ( ) C:\Users\Frantisek\Downloads\AbcKidGenius.exe
2021-01-13 12:32 - 2021-01-13 12:32 - 000000000 ____D C:\Users\Frantisek\AppData\Local\HiSuite
2021-01-13 10:52 - 2021-01-13 10:52 - 000468229 _____ C:\Users\Frantisek\Downloads\document(1).pdf
2021-01-12 14:44 - 2021-01-12 14:44 - 000147261 _____ C:\Users\Frantisek\Downloads\document.pdf
2021-01-08 08:20 - 2021-01-08 08:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-01-07 08:22 - 2021-01-08 14:07 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-12-31 20:47 - 2020-12-31 20:47 - 456329568 _____ (Microvirt Software Technology Co. Ltd.) C:\Users\Frantisek\Downloads\MEmu-Setup-7.3.2-had33c9d62.exe
2020-12-29 16:24 - 2020-12-29 16:24 - 000000000 ____D C:\Program Files (x86)\WinRAR
2020-12-29 16:24 - 2020-12-29 16:21 - 000165032 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-12-29 15:53 - 2020-12-29 15:53 - 030536752 _____ (Piriform Software Ltd) C:\Users\Frantisek\Downloads\ccsetup575 (1).exe
2020-12-29 15:49 - 2020-12-29 15:49 - 030536752 _____ (Piriform Software Ltd) C:\Users\Frantisek\Downloads\ccsetup575.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-19 18:50 - 2020-02-19 17:14 - 000000000 ____D C:\ProgramData\Mozilla
2021-01-19 18:48 - 2020-02-19 17:15 - 000000000 ____D C:\Users\Frantisek\AppData\LocalLow\Mozilla
2021-01-19 18:35 - 2020-07-11 11:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Singles
2021-01-19 18:32 - 2020-01-09 19:54 - 000000000 ___RD C:\Users\Frantisek\Desktop\hry
2021-01-19 18:31 - 2020-07-11 14:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barbie(TM)
2021-01-19 18:31 - 2015-09-12 07:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2021-01-19 18:30 - 2020-07-11 14:09 - 000000127 _____ C:\WINDOWS\ka.ini
2021-01-19 18:26 - 2019-12-28 11:36 - 000000000 ____D C:\Users\Frantisek\Desktop\DĚDA
2021-01-19 18:19 - 2020-11-25 11:46 - 000000000 ____D C:\Program Files (x86)\SEGA
2021-01-19 18:10 - 2020-07-11 20:22 - 000000000 ____D C:\GOG Games
2021-01-19 18:07 - 2020-07-11 13:44 - 000000000 ____D C:\Users\Frantisek\AppData\Local\Disney Interactive Studios
2021-01-19 17:54 - 2020-10-20 13:04 - 000000000 ____D C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDROMEK
2021-01-19 17:54 - 2020-10-20 13:03 - 000000000 ____D C:\Program Files (x86)\Centauri
2021-01-19 17:44 - 2020-05-25 19:44 - 000000000 ____D C:\Program Files (x86)\Advanced SystemCare Pro
2021-01-19 17:39 - 2020-11-18 20:14 - 000000000 ____D C:\Users\Frantisek\AppData\Local\Bluestacks
2021-01-19 17:29 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2021-01-19 16:28 - 2020-11-10 14:44 - 000000000 ____D C:\Users\Frantisek\Desktop\máma
2021-01-19 16:26 - 2020-11-18 12:35 - 000000000 ____D C:\Users\Frantisek\Desktop\ŠKOLA
2021-01-19 15:58 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-01-19 14:46 - 2019-08-21 20:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-01-19 14:26 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2021-01-19 14:26 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-01-19 07:43 - 2019-08-21 20:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-01-18 14:51 - 2019-03-19 05:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-01-18 09:06 - 2017-12-20 21:08 - 000000000 ____D C:\Users\Frantisek\AppData\Local\Packages
2021-01-17 17:37 - 2020-07-08 19:09 - 000000000 ____D C:\Users\Frantisek\AppData\Roaming\Kodi
2021-01-16 18:31 - 2020-12-11 10:33 - 000000000 ____D C:\ProgramData\ProductData
2021-01-15 07:58 - 2017-11-28 15:37 - 000000000 ___RD C:\Users\Frantisek\3D Objects
2021-01-15 07:58 - 2016-02-13 14:20 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-01-15 07:53 - 2019-08-22 04:04 - 000721116 _____ C:\WINDOWS\system32\perfh005.dat
2021-01-15 07:53 - 2019-08-22 04:04 - 000146546 _____ C:\WINDOWS\system32\perfc005.dat
2021-01-15 07:53 - 2019-08-21 20:38 - 001697934 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-01-15 07:51 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2021-01-15 07:47 - 2019-08-21 20:08 - 000508976 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-01-14 20:49 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\setup
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-01-14 20:48 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Com
2021-01-14 20:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-01-14 20:45 - 2019-03-19 07:20 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-01-14 20:45 - 2019-03-19 07:20 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Provisioning
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\IME
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-01-14 20:45 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Windows Defender
2021-01-14 12:21 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-01-14 12:08 - 2016-02-17 14:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-01-14 09:49 - 2016-02-17 14:51 - 135062968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-01-14 09:09 - 2019-08-21 20:14 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-01-14 08:08 - 2017-08-28 10:21 - 000000000 ____D C:\Users\Frantisek\AppData\Local\CrashDumps
2021-01-14 08:03 - 2019-08-21 20:25 - 000000000 ____D C:\Users\Frantisek
2021-01-13 16:06 - 2020-07-08 19:22 - 000001352 _____ C:\Users\Frantisek\Desktop\kodi – zástupce.lnk
2021-01-13 14:17 - 2020-11-18 20:14 - 000000000 ____D C:\Users\Public\BlueStacks
2021-01-13 13:27 - 2017-06-26 12:50 - 000000000 ____D C:\Users\Frantisek\.android
2021-01-12 15:21 - 2015-09-12 07:43 - 000000000 ____D C:\ProgramData\Lenovo
2021-01-12 15:20 - 2016-11-17 08:58 - 000376967 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2021-01-11 08:41 - 2020-06-16 11:31 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-01-08 14:24 - 2020-03-21 13:07 - 000000000 ____D C:\Users\Frantisek\Desktop\tisk MP250
2021-01-08 14:18 - 2020-03-21 13:09 - 000000000 ____D C:\ProgramData\CanonIJ
2021-01-08 14:18 - 2020-03-21 13:06 - 000000000 ____D C:\ProgramData\CanonIJPLM
2021-01-08 14:07 - 2020-02-19 17:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-01-08 08:20 - 2020-02-19 17:14 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-01-07 08:13 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-12-29 16:24 - 2019-03-31 10:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-12-29 16:24 - 2019-03-31 10:21 - 000000000 ____D C:\Program Files (x86)\Java
2020-12-29 16:24 - 2017-02-18 18:20 - 000000000 ____D C:\Users\Frantisek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-12-29 16:24 - 2017-02-18 18:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-12-29 16:07 - 2017-08-01 14:25 - 000000000 ____D C:\temp
2020-12-29 15:57 - 2020-01-12 16:53 - 000000000 ____D C:\WINDOWS\Minidump
2020-12-29 15:21 - 2019-03-04 16:47 - 000000000 ____D C:\Users\Frantisek\AppData\Local\D3DSCache
2020-12-29 14:25 - 2015-09-12 07:24 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
==================== Files in the root of some directories ========
2020-01-12 16:42 - 2017-05-24 09:40 - 005711776 _____ () C:\Program Files (x86)\antiporn241.exe
2020-03-04 18:35 - 2020-03-04 18:35 - 000002597 _____ () C:\Program Files (x86)\Lepsi.TV.InstallState
2018-10-17 09:43 - 2018-10-17 09:43 - 000000002 _____ () C:\Users\Frantisek\AppData\Roaming\acc.txt
2016-05-08 12:21 - 2016-05-08 12:22 - 000001691 _____ () C:\Users\Frantisek\AppData\Roaming\fastboot.log
2020-01-08 23:32 - 2020-01-08 23:32 - 000042358 _____ () C:\Users\Frantisek\AppData\Roaming\iec_0D0A0E0M0O0N0T1F1F1I1B1V0F0StJ1V1S1F1F1J1L1G1NtF1R1F1H.txt
2020-01-08 23:32 - 2020-01-08 23:32 - 000286556 _____ () C:\Users\Frantisek\AppData\Roaming\iec_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2018-10-17 09:57 - 2018-10-17 09:57 - 000001191 _____ () C:\Users\Frantisek\AppData\Roaming\uni.txt
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
83B4:3F42:057E:0C8E:EBB4:3E6E
