VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Kontrola logu

https://forum.viry.cz:443/viewtopic.php?t=157855

Stránka 1 z 1

Kontrola logu

Napsal: 09 úno 2021 10:09
od danek
Dobrý den, prosím o kontrolu logu.

Nejde mi připojit se na firemní VPN. V pátek to ještě šlo. Šlo by zjistit, k jakým změnám v nastavení došlo přes víkend, které to mohly způsobit?

Prosím o kontrolu logu. Děkuji.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-02-2021 01
Ran by danie (administrator) on JILM (HP HP Pavilion x360 Convertible 14-dh0xxx) (09-02-2021 10:08:39)
Running from C:\Users\danie\Desktop
Loaded Profiles: danie & Iva & Filip & SAS
Platform: Windows 10 Home Version 2004 19041.746 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_a7be790d73ea14eb\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_a7be790d73ea14eb\x64\TouchpointGpuInfo.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_06530f962635deac\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_06530f962635deac\x64\BridgeCommunication.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_06530f962635deac\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_06530f962635deac\x64\SysInfoCap.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.9.1548.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7b8fb5f6ba170ca0\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7b8fb5f6ba170ca0\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_f75fa513cf0ccec1\esif_uf.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_944ac9a3321ebe76\RstMwService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_27bc2b5aa4e51896\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_571135b54b64fe92\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_571135b54b64fe92\IntelCpHeciSvc.exe
(Intel(R) Software Development Products -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_fafb1d329fdfe2c6\aesm_service.exe
(Intel(R) Trust Services -> Intel(R) Corporation) C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_a93205b6238060e4\lib\SocketHeciServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20122.11121.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <6>
(Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(SentryBay Limited -> Mozilla Corporation) C:\Program Files (x86)\SentryBay\ArmoredClient.exe
(SentryBay Limited -> SentryBay) C:\Program Files (x86)\SentryBay\Armored Client\Armored Client.exe
(SentryBay Limited -> SentryBay) C:\Program Files (x86)\SentryBay\Armored Client\configtray.exe
(SentryBay Limited -> SentryBay) C:\Program Files (x86)\SentryBay\Armored Client\service.exe
(SentryBay Limited -> SentryBay) C:\Program Files (x86)\SentryBay\Armored Client\session.exe
(Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [EzTiltPenSrvc] => C:\Program Files\ELAN\EzTiltPen\EzTiltPenAgent.exe [238280 2019-04-22] (ELAN Microelectronics Corporation -> ELAN) [File not signed]
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [117352 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [TuneupUI.exe] => C:\Program Files\Avast Software\Cleanup\TuneupUI.exe [2596704 2020-12-01] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [DriverUpdUI.exe] => C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe [2863840 2021-01-05] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-08-19] (Corel Corporation -> Corel Corporation)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436704 2020-08-19] (Corel Corporation -> WinZip Computing, S.L.)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [1941352 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [1941352 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\Run: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [1941352 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\Run: [466F9362F8D864522CA0247FF83233AA5403792B._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\danie\AppData\Local\Microsoft\Teams\Update.exe [2453688 2021-01-29] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\MountPoints2: {25e3f2bc-6ddd-11ea-819d-c0b5d7e075b8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-93754314-3111490570-4120607304-1015\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HpseuHostLauncher.exe [528392 2020-09-15] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-93754314-3111490570-4120607304-1015\...\Run: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [1941352 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-93754314-3111490570-4120607304-1015\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Iva\AppData\Local\Microsoft\Teams\Update.exe [2452656 2021-02-02] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-93754314-3111490570-4120607304-1017\...\Run: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [1941352 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-93754314-3111490570-4120607304-1285\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe /thfirstsetup
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 3050 J610 series): C:\WINDOWS\system32\HPDiscoPM9311.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
BootExecute: autocheck autochk * icarus_rvrt.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {06ED511B-BCB1-4E25-B7D8-02B89BE6D755} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [2856304 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {179BB404-F79F-433D-B311-D6764B5957F3} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-08-19] (Corel Corporation -> Corel Corporation)
Task: {3927BF12-1FD8-4AAB-8663-F2800121CC51} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5199272 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {46E7E871-B8EC-43F2-AC9C-96FC780F5563} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1188968 2020-11-19] (Avast Software s.r.o. -> AVAST Software)
Task: {4B843749-2454-4F39-B076-E7E088F6F9E7} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1741416 2020-09-17] (Avast Software s.r.o. -> Avast Software)
Task: {4BF32C2F-B35E-4FC0-BDC4-F55D42908C1C} - System32\Tasks\Avast Software\Avast Cleanup Update BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [2812624 2020-12-01] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid dff818f1-8add-4d0c-a509-de2121ec3343
Task: {4F7613C8-488D-4B7B-BD6D-17C3B305003D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5199272 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {61206386-D307-4890-BFD8-60FC33CC5E90} - System32\Tasks\Avast Software\Avast Driver Updater BugReport => C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe [4648160 2021-01-05] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 148 --programpath "C:\Program Files\Avast Software\Driver Updater\Setup\.." --configpath "C:\Program Files\Avast Software\Driver Updater\Setup" --path "C:\ProgramData\Avast Software\Driver Updater\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 346fde62-9570-4365-96e8-45d6a5ee28e3
Task: {67EFB312-4726-443B-830B-1748E8AE011E} - System32\Tasks\SentryBayUpdateTaskMachineCore => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe [149512 2021-02-09] (SentryBay Limited -> SentryBay)
Task: {6DD77523-3DB6-466D-BBD7-066FE545F706} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4661856 2020-11-19] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 01a4b0e3-0a4b-4911-b95a-7a902180a277
Task: {75A86C2E-68EB-45FE-9BFD-888AF11BEF25} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [135000 2020-10-01] (HP Inc. -> HP Inc.)
Task: {919ECE32-6FEB-40BD-BDED-E37BAACB9776} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\RtkAudUService64.exe [1141544 2020-09-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {9A1FA14D-EA23-47D5-BC0A-BD54DFF3B6EF} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
Task: {A232E375-A989-4445-8867-4704EB6758AE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993288 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5BC104A-69E2-479F-B977-D66394565874} - System32\Tasks\Avast Software\Avast Driver Updater Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-du\icarus.exe [5491424 2021-01-04] (Avast Software s.r.o. -> Avast Software)
Task: {AB5EF077-0DDE-49E4-B683-A6E5B8171C8E} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-08-19] (Corel Corporation -> Corel Corporation)
Task: {B4DF6EA7-3271-45F2-842A-F171A0D658D0} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [5442656 2020-11-16] (Avast Software s.r.o. -> Avast Software)
Task: {C3DD5242-9EA1-49D6-AA85-98499D1581F1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993288 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {D12815C9-33BB-4BA1-AC1C-ABBAD9D651A0} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142184 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {D5764289-0BAE-4D3F-930C-785B69B2999C} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-08-19] (Corel Corporation -> Corel Corporation)
Task: {D8C1866F-522F-4992-9176-3A50491F1250} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [677344 2021-02-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {DF3141EA-4465-4D01-88D3-0CF73AC11A88} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4621920 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
Task: {E43CC5BF-43F8-4DAA-8BF3-BA8F07C83F1B} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [5442656 2020-11-25] (Avast Software s.r.o. -> Avast Software)
Task: {FA992740-D279-4EF6-B88C-F479E2A7DCB7} - System32\Tasks\SentryBayUpdateTaskMachineUA => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe [149512 2021-02-09] (SentryBay Limited -> SentryBay)
Task: {FEC299B2-F09B-4D59-8D1B-7EBA1FFD9A96} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142184 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\SentryBayUpdateTaskMachineCore.job => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe
Task: C:\WINDOWS\Tasks\SentryBayUpdateTaskMachineUA.job => C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 79.98.72.27 79.98.72.2 8.8.8.8 8.8.4.4 1.1.1.1
Tcpip\..\Interfaces\{082f372d-431e-48b2-b9bd-127e8bf4a128}: [DhcpNameServer] 192.168.1.254 79.98.72.27 79.98.72.2 8.8.8.8 8.8.4.4 1.1.1.1
Tcpip\..\Interfaces\{319facf1-c9ca-44a0-b2f9-b15813f65d0a}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{bc508dde-ec9c-40ee-bc47-8a3b67925bee}: [NameServer] 100.120.184.1
Tcpip\..\Interfaces\{c6c67d0a-14ee-46f0-a5bd-6c2dbc95ae39}: [DhcpNameServer] 172.168.0.5

Edge:
=======
DownloadDir: C:\Users\danie\Downloads
Edge DefaultProfile: Profile 1
Edge Profile: C:\Users\danie\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2021-02-09]

FireFox:
========
FF DefaultProfile: gorjaooa.default
FF ProfilePath: C:\Users\danie\AppData\Roaming\Mozilla\Firefox\Profiles\gorjaooa.default [2020-10-02]
FF Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\danie\AppData\Roaming\Mozilla\Firefox\Profiles\gorjaooa.default\Extensions\sp@avast.com.xpi [2019-10-02]
FF ProfilePath: C:\Users\danie\AppData\Roaming\Mozilla\Firefox\Profiles\y61xj8xk.default-release [2021-02-09]
FF Session Restore: Mozilla\Firefox\Profiles\y61xj8xk.default-release -> is enabled.
FF Extension: (Cisco Webex Extension) - C:\Users\danie\AppData\Roaming\Mozilla\Firefox\Profiles\y61xj8xk.default-release\Extensions\ciscowebexstart1@cisco.com.xpi [2020-12-17]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2020-03-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.sentrybay.com/SentryBay Update;version=8 -> C:\Program Files (x86)\SentryBay\Update\1.0.0.13544\npSentryBayOneClick8.dll [2021-02-09] (SentryBay Limited -> SentryBay)
FF Plugin ProgramFiles/Appdata: C:\Users\danie\AppData\Roaming\mozilla\plugins\npatgpc.dll [2020-12-17]
StartMenuInternet: Firefox-CEDE86F0486F9A4E - C:\Program Files (x86)\SentryBay\ArmoredClient.exe

Chrome:
=======
CHR Profile: C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default [2020-12-13]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Prezentace) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-10-02]
CHR Extension: (Dokumenty) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-10-02]
CHR Extension: (Disk Google) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-10-02]
CHR Extension: (YouTube) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-10-02]
CHR Extension: (Tabulky) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-10-02]
CHR Extension: (Dokumenty Google offline) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-06-03]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-12-09]
CHR Extension: (Gmail) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-10-02]
CHR Extension: (Chrome Media Router) - C:\Users\danie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-06-03]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8477080 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [621728 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [1230608 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [351848 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [58048 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [12968552 2020-12-01] (Avast Software s.r.o. -> AVAST Software)
S4 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8902024 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
S4 CWAUpdaterService; C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe [40544 2020-03-11] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
R2 DriverUpdSvc; C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe [5986528 2021-01-05] (Avast Software s.r.o. -> AVAST Software)
S2 epinjectsvc; C:\Program Files (x86)\SentryBay\EntryProtect\inject.exe [498216 2019-07-22] (SentryBay Limited -> SentryBay)
S4 FileSyncHelper; C:\Program Files (x86)\Microsoft OneDrive\21.002.0104.0005\FileSyncHelper.exe [2194288 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
S4 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [38328 2018-08-31] (GoPro Media, Inc. -> )
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_06530f962635deac\x64\AppHelperCap.exe [694520 2020-12-10] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_06530f962635deac\x64\NetworkCap.exe [692984 2020-12-10] (HP Inc. -> HP Inc.)
S4 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2018-06-07] (HP Inc. -> HP)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_06530f962635deac\x64\SysInfoCap.exe [693496 2020-12-10] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_a7be790d73ea14eb\x64\TouchpointAnalyticsClientService.exe [476424 2020-11-04] (HP Inc. -> HP Inc.)
S4 OneDrive Updater Service; C:\Program Files (x86)\Microsoft OneDrive\21.002.0104.0005\OneDriveUpdaterService.exe [2567552 2021-02-06] (Microsoft Corporation -> Microsoft Corporation)
S2 sbupdate; C:\Program Files (x86)\SentryBay\Update\SentryBayUpdate.exe [149512 2021-02-09] (SentryBay Limited -> SentryBay)
R2 SECUREACCESSSYSTEM; C:\Program Files (x86)\SentryBay\Armored Client\service.exe [5601200 2020-06-16] (SentryBay Limited -> SentryBay)
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [7897696 2020-11-19] (Avast Software s.r.o. -> AVAST Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [208672 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [332880 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [247888 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [97360 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16832 2020-12-16] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42424 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [176384 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [522480 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [108928 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84496 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851256 2020-12-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [468888 2021-01-08] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [214808 2021-01-07] (Avast Software s.r.o. -> AVAST Software)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2020-09-13] (AVAST Software s.r.o. -> The OpenVPN Project)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [324904 2021-01-07] (Avast Software s.r.o. -> AVAST Software)
S3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [59312 2020-09-13] (Avast Software s.r.o. -> Avast Software)
R2 entryprotectdrv; C:\Program Files (x86)\SentryBay\EntryProtect\entryprotect.sys [61480 2019-07-22] (SentryBay Limited -> SentryBay)
R1 epinject6; C:\Program Files (x86)\SentryBay\EntryProtect\epinject.sys [154664 2019-07-22] (SentryBay Limited -> )
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [25024 2019-04-18] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [25608 2020-09-23] (AVG Technologies CZ, s.r.o. -> SlimWare Utilities, Inc.)
R1 vbdenum; C:\WINDOWS\System32\drivers\vbdenum.sys [119432 2019-12-16] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
S3 EverestDriver; \??\C:\Users\danie\AppData\Local\Temp\EverestDriver.sys [X] <==== ATTENTION

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-02-09 10:07 - 2021-02-09 10:08 - 000043352 _____ C:\Users\danie\Desktop\Addition.txt
2021-02-09 10:07 - 2021-02-09 10:08 - 000043352 _____ C:\Users\danie\Desktop\Addition.txt
2021-02-09 10:05 - 2021-02-09 10:09 - 000028646 _____ C:\Users\danie\Desktop\FRST.txt
2021-02-09 10:05 - 2021-02-09 10:09 - 000028646 _____ C:\Users\danie\Desktop\FRST.txt
2021-02-09 10:05 - 2021-02-09 10:08 - 000000000 ____D C:\FRST
2021-02-09 10:03 - 2021-02-09 10:03 - 002297344 _____ (Farbar) C:\Users\danie\Desktop\FRST64.exe
2021-02-09 10:03 - 2021-02-09 10:03 - 002297344 _____ (Farbar) C:\Users\danie\Desktop\FRST64.exe
2021-02-09 09:21 - 2021-02-09 09:21 - 000000426 _____ C:\DelFix.txt
2021-02-09 09:19 - 2021-02-09 09:31 - 000000000 ____D C:\Users\SAS\AppData\Local\CrashDumps
2021-02-09 09:19 - 2021-02-09 09:31 - 000000000 ____D C:\Users\SAS\AppData\Local\CrashDumps
2021-02-09 09:18 - 2021-02-09 09:41 - 000000000 ____D C:\Users\SAS\AppData\Roaming\SentryBay
2021-02-09 09:18 - 2021-02-09 09:41 - 000000000 ____D C:\Users\SAS\AppData\Roaming\SentryBay
2021-02-09 09:18 - 2021-02-09 09:18 - 000000020 ___SH C:\Users\SAS\ntuser.ini
2021-02-09 09:18 - 2021-02-09 09:18 - 000000020 ___SH C:\Users\SAS\ntuser.ini
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 _SHDL C:\Users\SAS\Soubory cookie
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 _SHDL C:\Users\SAS\Soubory cookie
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 _SHDL C:\Users\SAS\AppData\Local\Data aplikací
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 _SHDL C:\Users\SAS\AppData\Local\Data aplikací
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\Roaming\Mozilla
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\Roaming\Mozilla
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\LocalLow\Intel
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\LocalLow\Intel
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\Local\SentryBay
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\Local\SentryBay
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\Local\Mozilla
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS\AppData\Local\Mozilla
2021-02-09 09:18 - 2021-02-09 09:18 - 000000000 ____D C:\Users\SAS
2021-02-09 09:13 - 2021-02-09 09:13 - 000594160 _____ (SentryBay) C:\Users\danie\Downloads\ArmoredClient(1).exe
2021-02-09 09:13 - 2021-02-09 09:13 - 000594160 _____ (SentryBay) C:\Users\danie\Downloads\ArmoredClient(1).exe
2021-02-09 09:10 - 2021-02-09 09:04 - 000061391 _____ C:\Users\danie\Desktop\LogFiles_daniel.marcik@cz.mufg.jp.zip
2021-02-09 09:10 - 2021-02-09 09:04 - 000061391 _____ C:\Users\danie\Desktop\LogFiles_daniel.marcik@cz.mufg.jp.zip
2021-02-09 08:59 - 2021-02-09 09:17 - 000000990 _____ C:\WINDOWS\Tasks\SentryBayUpdateTaskMachineUA.job
2021-02-09 08:59 - 2021-02-09 09:17 - 000000986 _____ C:\WINDOWS\Tasks\SentryBayUpdateTaskMachineCore.job
2021-02-09 08:59 - 2021-02-09 09:16 - 000003952 _____ C:\WINDOWS\system32\Tasks\SentryBayUpdateTaskMachineUA
2021-02-09 08:59 - 2021-02-09 09:16 - 000003720 _____ C:\WINDOWS\system32\Tasks\SentryBayUpdateTaskMachineCore
2021-02-09 08:58 - 2021-02-09 08:58 - 000594160 _____ (SentryBay) C:\Users\danie\Downloads\ArmoredClient(5).exe
2021-02-09 08:58 - 2021-02-09 08:58 - 000594160 _____ (SentryBay) C:\Users\danie\Downloads\ArmoredClient(5).exe
2021-02-08 20:13 - 2021-02-08 20:13 - 000540944 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-02-07 22:22 - 2021-02-07 22:22 - 000994379 _____ C:\Users\danie\Downloads\03_2021_01_01_MND_Plyn_z_prvni_ruky_Cenik_2022_PPD.pdf
2021-02-07 22:22 - 2021-02-07 22:22 - 000994379 _____ C:\Users\danie\Downloads\03_2021_01_01_MND_Plyn_z_prvni_ruky_Cenik_2022_PPD.pdf
2021-02-07 22:22 - 2021-02-07 22:22 - 000962351 _____ C:\Users\danie\Downloads\03_2021_01_01_MND_Plyn_z_prvni_ruky_PPD.pdf
2021-02-07 22:22 - 2021-02-07 22:22 - 000962351 _____ C:\Users\danie\Downloads\03_2021_01_01_MND_Plyn_z_prvni_ruky_PPD.pdf
2021-02-06 22:27 - 2021-02-06 22:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-02-06 12:08 - 2021-02-06 12:08 - 000106742 _____ C:\Users\danie\Downloads\Vypis_5966625001_CZK_2021_001.pdf
2021-02-06 12:08 - 2021-02-06 12:08 - 000106742 _____ C:\Users\danie\Downloads\Vypis_5966625001_CZK_2021_001.pdf
2021-02-06 10:29 - 2021-02-06 10:34 - 2382440914 _____ C:\Users\danie\Downloads\Chlast - Druk + cz titulky.mkv
2021-02-06 10:29 - 2021-02-06 10:34 - 2382440914 _____ C:\Users\danie\Downloads\Chlast - Druk + cz titulky.mkv
2021-02-06 10:28 - 2021-02-06 10:34 - 1651495010 _____ C:\Users\danie\Downloads\Občan Kane _ Citizen Kane 1941, EN - CZ tit-edwaldr.avi
2021-02-06 10:28 - 2021-02-06 10:34 - 1651495010 _____ C:\Users\danie\Downloads\Občan Kane _ Citizen Kane 1941, EN - CZ tit-edwaldr.avi
2021-02-06 10:24 - 2021-02-06 10:30 - 2082630847 _____ C:\Users\danie\Downloads\Telefon (2020) cz tit.mp4
2021-02-06 10:24 - 2021-02-06 10:30 - 2082630847 _____ C:\Users\danie\Downloads\Telefon (2020) cz tit.mp4
2021-02-06 10:22 - 2021-02-06 10:29 - 2280146916 _____ C:\Users\danie\Downloads\Wonder Woman1984-(akcni)-(2020)--cz-titulky.https __uloz.to_ partner=6791050.mkv
2021-02-06 10:22 - 2021-02-06 10:29 - 2280146916 _____ C:\Users\danie\Downloads\Wonder Woman1984-(akcni)-(2020)--cz-titulky.https __uloz.to_ partner=6791050.mkv
2021-02-06 10:21 - 2021-02-06 10:23 - 1339124659 _____ C:\Users\danie\Downloads\Kadáver-(drama)-(2020)--cz-titulky.https __uloz.to_ partner=6791050.mkv
2021-02-06 10:21 - 2021-02-06 10:23 - 1339124659 _____ C:\Users\danie\Downloads\Kadáver-(drama)-(2020)--cz-titulky.https __uloz.to_ partner=6791050.mkv
2021-02-06 10:18 - 2021-02-06 10:19 - 1187070430 _____ C:\Users\danie\Downloads\Chlast-(drama)-(2020)--cz-titulky.https __uloz.to_ partner=6791050.mkv
2021-02-06 10:18 - 2021-02-06 10:19 - 1187070430 _____ C:\Users\danie\Downloads\Chlast-(drama)-(2020)--cz-titulky.https __uloz.to_ partner=6791050.mkv
2021-02-05 15:20 - 2021-02-05 15:20 - 001976379 _____ C:\Users\danie\Downloads\hi-lex czech s.r.o._ucetni zaverka fy2019.pdf
2021-02-05 15:20 - 2021-02-05 15:20 - 001976379 _____ C:\Users\danie\Downloads\hi-lex czech s.r.o._ucetni zaverka fy2019.pdf
2021-02-04 18:33 - 2021-02-04 18:33 - 000000000 ____D C:\Users\Iva\AppData\Local\OneDrive
2021-02-04 18:33 - 2021-02-04 18:33 - 000000000 ____D C:\Users\Iva\AppData\Local\OneDrive
2021-02-03 16:30 - 2021-02-08 15:46 - 000011629 _____ C:\Users\danie\Desktop\COVID.xlsx
2021-02-03 16:30 - 2021-02-08 15:46 - 000011629 _____ C:\Users\danie\Desktop\COVID.xlsx
2021-02-03 16:28 - 2021-02-03 16:35 - 1316509273 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (5.) (ČSSR, 1974).mp4
2021-02-03 16:28 - 2021-02-03 16:35 - 1316509273 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (5.) (ČSSR, 1974).mp4
2021-02-03 16:27 - 2021-02-03 16:36 - 1548114575 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (4.) (ČSSR, 1974).mp4
2021-02-03 16:27 - 2021-02-03 16:36 - 1548114575 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (4.) (ČSSR, 1974).mp4
2021-02-03 16:27 - 2021-02-03 16:35 - 1332239368 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (3.) (ČSSR, 1974).mp4
2021-02-03 16:27 - 2021-02-03 16:35 - 1332239368 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (3.) (ČSSR, 1974).mp4
2021-02-03 16:27 - 2021-02-03 16:34 - 1117081074 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (2.) (ČSSR, 1974).mp4
2021-02-03 16:27 - 2021-02-03 16:34 - 1117081074 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (2.) (ČSSR, 1974).mp4
2021-02-03 16:26 - 2021-02-03 16:34 - 1272459871 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (1.) (ČSSR, 1974).mp4
2021-02-03 16:26 - 2021-02-03 16:34 - 1272459871 _____ C:\Users\danie\Downloads\Byl jednou jeden dům (1.) (ČSSR, 1974).mp4
2021-02-02 12:44 - 2021-02-06 12:12 - 000002514 _____ C:\Users\Iva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-02-02 12:44 - 2021-02-06 12:12 - 000002514 _____ C:\Users\Iva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-02-02 12:44 - 2021-02-06 12:12 - 000002506 _____ C:\Users\Iva\Desktop\Microsoft Teams.lnk
2021-02-02 12:44 - 2021-02-06 12:12 - 000002506 _____ C:\Users\Iva\Desktop\Microsoft Teams.lnk
2021-02-02 12:44 - 2021-02-02 12:44 - 000000000 ____D C:\Users\Iva\AppData\Roaming\Teams
2021-02-02 12:44 - 2021-02-02 12:44 - 000000000 ____D C:\Users\Iva\AppData\Roaming\Teams
2021-02-02 12:43 - 2021-02-02 12:44 - 000000000 ____D C:\Users\Iva\AppData\Local\SquirrelTemp
2021-02-02 12:43 - 2021-02-02 12:44 - 000000000 ____D C:\Users\Iva\AppData\Local\SquirrelTemp
2021-02-01 17:20 - 2021-02-01 17:33 - 2538945591 _____ C:\Users\danie\Downloads\Čtyřicetiletá verze - The Forty-Year-Old Version 2020 CZ titulky 1080p Komedie Drama.mkv
2021-02-01 17:20 - 2021-02-01 17:33 - 2538945591 _____ C:\Users\danie\Downloads\Čtyřicetiletá verze - The Forty-Year-Old Version 2020 CZ titulky 1080p Komedie Drama.mkv
2021-02-01 17:20 - 2021-02-01 17:32 - 1919860468 _____ C:\Users\danie\Downloads\Mosul (2019) cz.titl.avi
2021-02-01 17:20 - 2021-02-01 17:32 - 1919860468 _____ C:\Users\danie\Downloads\Mosul (2019) cz.titl.avi
2021-02-01 17:07 - 2021-02-01 17:30 - 1830891831 _____ C:\Users\danie\Downloads\Borat 2 (2020) HD CZ titulky V OBRAZE.mkv
2021-02-01 17:07 - 2021-02-01 17:30 - 1830891831 _____ C:\Users\danie\Downloads\Borat 2 (2020) HD CZ titulky V OBRAZE.mkv
2021-02-01 17:07 - 2021-02-01 17:29 - 1542574481 _____ C:\Users\danie\Downloads\Borat---Nakoukání-do-amery.....(720x400-2Mbps)-2006-CZ-Dab.-5.1-384kbps-byzld.mkv
2021-02-01 17:07 - 2021-02-01 17:29 - 1542574481 _____ C:\Users\danie\Downloads\Borat---Nakoukání-do-amery.....(720x400-2Mbps)-2006-CZ-Dab.-5.1-384kbps-byzld.mkv
2021-02-01 17:05 - 2021-02-01 17:31 - 2660291079 _____ C:\Users\danie\Downloads\Chicagský tribunál 2020 CZ tit.mkv
2021-02-01 17:05 - 2021-02-01 17:31 - 2660291079 _____ C:\Users\danie\Downloads\Chicagský tribunál 2020 CZ tit.mkv
2021-02-01 17:01 - 2021-02-01 17:05 - 1044674014 _____ C:\Users\danie\Downloads\Mank_2020_Cz_Dabing.mp4
2021-02-01 17:01 - 2021-02-01 17:05 - 1044674014 _____ C:\Users\danie\Downloads\Mank_2020_Cz_Dabing.mp4
2021-02-01 16:57 - 2021-02-01 17:08 - 3412923021 _____ C:\Users\danie\Downloads\Smrt do roku 2020 _ Death to 2020 (2020)Dokument EN Cz Titul 1920x1080p.mkv
2021-02-01 16:57 - 2021-02-01 17:08 - 3412923021 _____ C:\Users\danie\Downloads\Smrt do roku 2020 _ Death to 2020 (2020)Dokument EN Cz Titul 1920x1080p.mkv
2021-02-01 16:52 - 2021-02-01 17:04 - 3399589672 _____ C:\Users\danie\Downloads\Zvíře - CZ dabing, celý film, Belmondo (1977).avi
2021-02-01 16:52 - 2021-02-01 17:04 - 3399589672 _____ C:\Users\danie\Downloads\Zvíře - CZ dabing, celý film, Belmondo (1977).avi
2021-02-01 16:51 - 2021-02-01 16:57 - 1468545024 _____ C:\Users\danie\Downloads\Leon.1994.AC3.DVDRip.XviD.CZ.avi
2021-02-01 16:51 - 2021-02-01 16:57 - 1468545024 _____ C:\Users\danie\Downloads\Leon.1994.AC3.DVDRip.XviD.CZ.avi
2021-02-01 16:50 - 2021-02-01 16:56 - 1751960556 _____ C:\Users\danie\Downloads\Příběh Marie - 2014 (CZ-tit).mkv
2021-02-01 16:50 - 2021-02-01 16:56 - 1751960556 _____ C:\Users\danie\Downloads\Příběh Marie - 2014 (CZ-tit).mkv
2021-02-01 16:50 - 2021-02-01 16:54 - 733177856 _____ C:\Users\danie\Downloads\RRRrrrr!!---Komedie-(2004)-CZ-dabing.avi
2021-02-01 16:50 - 2021-02-01 16:54 - 733177856 _____ C:\Users\danie\Downloads\RRRrrrr!!---Komedie-(2004)-CZ-dabing.avi
2021-01-31 17:54 - 2021-01-31 18:13 - 000349325 _____ C:\Users\danie\Downloads\pokus.gpx
2021-01-31 17:54 - 2021-01-31 18:13 - 000349325 _____ C:\Users\danie\Downloads\pokus.gpx
2021-01-31 17:29 - 2021-01-31 17:29 - 000264682 _____ C:\Users\danie\Downloads\Afternoon_Walk(2).gpx
2021-01-31 17:29 - 2021-01-31 17:29 - 000264682 _____ C:\Users\danie\Downloads\Afternoon_Walk(2).gpx
2021-01-31 17:29 - 2021-01-31 17:29 - 000092683 _____ C:\Users\danie\Downloads\Afternoon_Walk.gpx
2021-01-31 17:29 - 2021-01-31 17:29 - 000092683 _____ C:\Users\danie\Downloads\Afternoon_Walk.gpx
2021-01-31 17:29 - 2021-01-31 17:29 - 000036328 _____ C:\Users\danie\Downloads\Afternoon_Walk(1).gpx
2021-01-31 17:29 - 2021-01-31 17:29 - 000036328 _____ C:\Users\danie\Downloads\Afternoon_Walk(1).gpx
2021-01-30 09:03 - 2021-02-06 23:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\Tray2Agent
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\Tray2Agent
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\FilterInfo
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\FilterInfo
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\CaliTray2Agent
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\CaliTray2Agent
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\Agent2Tray
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\Agent2Tray
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\Agent2CaliTray
2021-01-28 16:57 - 2021-01-28 16:57 - 000000000 ____D C:\Users\Filip\AppData\Local\Agent2CaliTray
2021-01-28 15:28 - 2021-02-06 12:09 - 000000000 ____D C:\WINDOWS\Minidump
2021-01-24 22:05 - 2021-01-24 22:32 - 000021116 _____ C:\Users\danie\Desktop\covid ockovani.xlsx
2021-01-24 22:05 - 2021-01-24 22:32 - 000021116 _____ C:\Users\danie\Desktop\covid ockovani.xlsx
2021-01-24 21:59 - 2021-01-24 22:04 - 000019723 _____ C:\Users\danie\Downloads\covid ockovani.xlsx
2021-01-24 21:59 - 2021-01-24 22:04 - 000019723 _____ C:\Users\danie\Downloads\covid ockovani.xlsx
2021-01-24 13:36 - 2021-01-24 13:36 - 000000000 ____D C:\WINDOWS\Panther
2021-01-24 12:05 - 2021-01-24 12:05 - 000000000 _____ C:\end
2021-01-24 12:04 - 2021-01-24 12:04 - 000000330 _____ C:\nsispromotion_log.txt
2021-01-24 12:03 - 2021-01-24 12:03 - 038408368 _____ C:\Users\danie\Desktop\GOMPLAYERGLOBALSETUP_NEW.EXE
2021-01-24 12:03 - 2021-01-24 12:03 - 038408368 _____ C:\Users\danie\Desktop\GOMPLAYERGLOBALSETUP_NEW.EXE
2021-01-22 19:58 - 2021-01-22 19:58 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-01-21 19:33 - 2021-01-21 19:34 - 000000000 ____D C:\Users\danie\Desktop\garáž
2021-01-21 19:33 - 2021-01-21 19:34 - 000000000 ____D C:\Users\danie\Desktop\garáž
2021-01-21 19:32 - 2021-01-21 19:32 - 000822599 _____ C:\Users\danie\Downloads\varianta_1__viz_1.jpg.zip
2021-01-21 19:32 - 2021-01-21 19:32 - 000822599 _____ C:\Users\danie\Downloads\varianta_1__viz_1.jpg.zip
2021-01-13 21:43 - 2021-01-13 21:43 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-13 21:43 - 2021-01-13 21:43 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-13 21:43 - 2021-01-13 21:43 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-13 21:43 - 2021-01-13 21:43 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-13 21:43 - 2021-01-13 21:43 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-13 21:43 - 2021-01-13 21:43 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-13 21:42 - 2021-01-13 21:42 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-13 21:42 - 2021-01-13 21:42 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-13 21:42 - 2021-01-13 21:42 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-13 21:42 - 2021-01-13 21:42 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-13 21:42 - 2021-01-13 21:42 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-13 21:42 - 2021-01-13 21:42 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-01-13 21:42 - 2021-01-13 21:42 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-13 21:42 - 2021-01-13 21:42 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-13 21:42 - 2021-01-13 21:42 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-13 21:42 - 2021-01-13 21:42 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-13 21:42 - 2021-01-13 21:42 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-13 21:42 - 2021-01-13 21:42 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-13 21:42 - 2021-01-13 21:42 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-13 21:42 - 2021-01-13 21:42 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-13 21:42 - 2021-01-13 21:42 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-13 21:42 - 2021-01-13 21:42 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-13 21:42 - 2021-01-13 21:42 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-13 21:42 - 2021-01-13 21:42 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-13 21:42 - 2021-01-13 21:42 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-13 21:42 - 2021-01-13 21:42 - 000010894 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-01-13 21:41 - 2021-01-13 21:41 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-13 21:41 - 2021-01-13 21:41 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-13 21:41 - 2021-01-13 21:41 - 001162240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-01-13 21:41 - 2021-01-13 21:41 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-01-13 21:41 - 2021-01-13 21:41 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-13 21:41 - 2021-01-13 21:41 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-13 21:41 - 2021-01-13 21:41 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-13 21:41 - 2021-01-13 21:41 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-13 21:41 - 2021-01-13 21:41 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-13 21:41 - 2021-01-13 21:41 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-13 21:41 - 2021-01-13 21:41 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-13 21:41 - 2021-01-13 21:41 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-01-13 21:40 - 2021-01-13 21:40 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-13 21:40 - 2021-01-13 21:40 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-01-11 20:11 - 2021-01-11 20:11 - 000001955 _____ C:\Users\danie\Downloads\endomondo-2021-01-01(1).zip
2021-01-11 20:11 - 2021-01-11 20:11 - 000001955 _____ C:\Users\danie\Downloads\endomondo-2021-01-01(1).zip
2021-01-10 19:28 - 2021-01-10 19:28 - 009015837 _____ C:\Users\danie\Downloads\prijimacky9_mat2021_reseni (1).pdf
2021-01-10 19:28 - 2021-01-10 19:28 - 009015837 _____ C:\Users\danie\Downloads\prijimacky9_mat2021_reseni (1).pdf
2021-01-10 19:28 - 2021-01-10 19:28 - 004696827 _____ C:\Users\danie\Downloads\prijimacky9_cjl2021_reseni_14-8-2020 (1).pdf
2021-01-10 19:28 - 2021-01-10 19:28 - 004696827 _____ C:\Users\danie\Downloads\prijimacky9_cjl2021_reseni_14-8-2020 (1).pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-02-09 10:02 - 2020-01-11 19:57 - 000000000 ____D C:\Users\danie\AppData\Local\CrashDumps
2021-02-09 10:02 - 2020-01-11 19:57 - 000000000 ____D C:\Users\danie\AppData\Local\CrashDumps
2021-02-09 09:51 - 2020-12-12 23:02 - 000000000 ____D C:\Program Files (x86)\GOM
2021-02-09 09:51 - 2020-01-03 00:19 - 000000000 ____D C:\Users\danie\AppData\Roaming\GRETECH
2021-02-09 09:51 - 2020-01-03 00:19 - 000000000 ____D C:\Users\danie\AppData\Roaming\GRETECH
2021-02-09 09:25 - 2020-09-14 12:27 - 001707744 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-02-09 09:25 - 2019-12-07 15:41 - 000718922 _____ C:\WINDOWS\system32\perfh005.dat
2021-02-09 09:25 - 2019-12-07 15:41 - 000155082 _____ C:\WINDOWS\system32\perfc005.dat
2021-02-09 09:25 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-02-09 09:20 - 2020-03-09 22:31 - 000000000 ____D C:\Users\danie\AppData\LocalLow\Mozilla
2021-02-09 09:20 - 2020-03-09 22:31 - 000000000 ____D C:\Users\danie\AppData\LocalLow\Mozilla
2021-02-09 09:18 - 2020-03-19 12:10 - 000000000 ____D C:\Program Files (x86)\SentryBay
2021-02-09 09:17 - 2020-09-14 12:26 - 000004028 _____ C:\WINDOWS\system32\Tasks\Avast SecureLine VPN Update
2021-02-09 09:17 - 2020-09-14 12:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-02-09 09:17 - 2020-09-14 12:19 - 000008192 ___SH C:\DumpStack.log.tmp
2021-02-09 09:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-02-09 09:17 - 2019-12-07 10:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2021-02-09 09:17 - 2019-09-23 20:40 - 000000000 __SHD C:\Users\danie\IntelGraphicsProfiles
2021-02-09 09:17 - 2019-09-23 20:40 - 000000000 __SHD C:\Users\danie\IntelGraphicsProfiles
2021-02-09 09:17 - 2019-08-08 23:05 - 000000000 ____D C:\Intel
2021-02-09 08:32 - 2020-09-14 12:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-02-08 12:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-02-08 12:30 - 2020-09-14 12:26 - 000002314 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2021-02-08 12:27 - 2020-09-14 12:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2021-02-08 12:08 - 2020-03-21 18:51 - 000000000 ____D C:\Users\danie\AppData\Local\AVAST Software
2021-02-08 12:08 - 2020-03-21 18:51 - 000000000 ____D C:\Users\danie\AppData\Local\AVAST Software
2021-02-08 12:02 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-02-08 11:34 - 2020-03-20 17:55 - 000000000 ____D C:\Users\danie\AppData\Local\D3DSCache
2021-02-08 11:34 - 2020-03-20 17:55 - 000000000 ____D C:\Users\danie\AppData\Local\D3DSCache
2021-02-08 10:56 - 2020-12-01 12:44 - 000002530 _____ C:\Users\danie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-02-08 10:56 - 2020-12-01 12:44 - 000002530 _____ C:\Users\danie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-02-08 10:56 - 2020-12-01 12:44 - 000002522 _____ C:\Users\danie\Desktop\Microsoft Teams.lnk
2021-02-08 10:56 - 2020-12-01 12:44 - 000002522 _____ C:\Users\danie\Desktop\Microsoft Teams.lnk
2021-02-08 10:56 - 2020-09-30 23:21 - 000001189 _____ C:\Users\danie\Desktop\EVEREST Home Edition.lnk
2021-02-08 10:56 - 2020-09-30 23:21 - 000001189 _____ C:\Users\danie\Desktop\EVEREST Home Edition.lnk
2021-02-06 23:01 - 2020-03-09 22:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-02-06 21:12 - 2020-10-07 09:16 - 000002734 _____ C:\WINDOWS\system32\Tasks\WinZip Update Notifier 2
2021-02-06 21:12 - 2020-10-07 09:16 - 000002732 _____ C:\WINDOWS\system32\Tasks\WinZip Update Notifier 3
2021-02-06 21:12 - 2020-10-07 09:16 - 000002732 _____ C:\WINDOWS\system32\Tasks\WinZip Update Notifier 1
2021-02-06 21:12 - 2020-09-14 12:26 - 000002788 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2021-02-06 21:04 - 2020-01-04 15:00 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2021-02-06 14:27 - 2020-12-20 19:43 - 000026590 _____ C:\Users\danie\Desktop\Sešit1.xlsx
2021-02-06 14:27 - 2020-12-20 19:43 - 000026590 _____ C:\Users\danie\Desktop\Sešit1.xlsx
2021-02-06 12:13 - 2019-05-14 00:52 - 000000000 ____D C:\Program Files\HP
2021-02-06 12:13 - 2019-05-14 00:52 - 000000000 ____D C:\Program Files (x86)\HP
2021-02-06 12:10 - 2020-09-14 12:26 - 000003572 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-02-06 12:10 - 2020-09-14 12:26 - 000003348 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-02-06 12:09 - 2020-11-14 17:23 - 000000000 ____D C:\Users\Iva\AppData\Local\CrashDumps
2021-02-06 12:09 - 2020-11-14 17:23 - 000000000 ____D C:\Users\Iva\AppData\Local\CrashDumps
2021-02-06 11:07 - 2019-09-23 20:28 - 000000000 ____D C:\Users\danie\AppData\Local\Packages
2021-02-06 11:07 - 2019-09-23 20:28 - 000000000 ____D C:\Users\danie\AppData\Local\Packages
2021-02-06 09:25 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-02-06 09:14 - 2020-11-13 18:24 - 000000000 ___RD C:\Users\Iva\OneDrive
2021-02-06 09:14 - 2020-11-13 18:24 - 000000000 ___RD C:\Users\Iva\OneDrive
2021-02-06 09:14 - 2020-01-04 15:00 - 000000000 ___RD C:\Users\defaultuser100000\OneDrive
2021-02-06 09:14 - 2020-01-04 15:00 - 000000000 ___RD C:\Users\defaultuser100000\OneDrive
2021-02-06 09:14 - 2019-09-23 20:42 - 000000000 ___RD C:\Users\danie\OneDrive
2021-02-06 09:14 - 2019-09-23 20:42 - 000000000 ___RD C:\Users\danie\OneDrive
2021-02-05 18:29 - 2020-11-13 18:34 - 000000000 ____D C:\Users\Iva\AppData\LocalLow\Mozilla
2021-02-05 18:29 - 2020-11-13 18:34 - 000000000 ____D C:\Users\Iva\AppData\LocalLow\Mozilla
2021-02-05 18:21 - 2020-11-13 18:25 - 000000000 __SHD C:\Users\Iva\IntelGraphicsProfiles
2021-02-05 18:21 - 2020-11-13 18:25 - 000000000 __SHD C:\Users\Iva\IntelGraphicsProfiles
2021-02-05 08:34 - 2020-09-14 12:26 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-02-03 18:13 - 2020-11-13 18:34 - 000000000 ____D C:\Users\Iva\AppData\Local\PlaceholderTileLogoFolder
2021-02-03 18:13 - 2020-11-13 18:34 - 000000000 ____D C:\Users\Iva\AppData\Local\PlaceholderTileLogoFolder
2021-02-03 16:41 - 2019-05-14 00:54 - 000000000 ____D C:\Program Files\Microsoft Office
2021-02-03 10:03 - 2020-09-14 08:16 - 000000000 ____D C:\Users\danie\Desktop\jiné
2021-02-03 10:03 - 2020-09-14 08:16 - 000000000 ____D C:\Users\danie\Desktop\jiné
2021-02-01 17:04 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-01-30 21:30 - 2020-11-13 18:24 - 000000000 ____D C:\Users\Iva\AppData\Local\Packages
2021-01-30 21:30 - 2020-11-13 18:24 - 000000000 ____D C:\Users\Iva\AppData\Local\Packages
2021-01-28 23:28 - 2020-09-14 12:08 - 000000000 ____D C:\Users\danie
2021-01-28 23:11 - 2020-09-14 12:08 - 000000000 ____D C:\Users\Filip
2021-01-28 23:11 - 2020-04-13 15:41 - 000000000 ____D C:\Users\Filip\AppData\Local\HP_Inc
2021-01-28 23:11 - 2020-04-13 15:41 - 000000000 ____D C:\Users\Filip\AppData\Local\HP_Inc
2021-01-28 23:11 - 2020-04-01 19:19 - 000000000 __SHD C:\Users\Filip\IntelGraphicsProfiles
2021-01-28 23:11 - 2020-04-01 19:19 - 000000000 __SHD C:\Users\Filip\IntelGraphicsProfiles
2021-01-28 16:59 - 2020-04-12 10:22 - 000000000 ____D C:\Users\Filip\AppData\Local\Publishers
2021-01-28 16:59 - 2020-04-12 10:22 - 000000000 ____D C:\Users\Filip\AppData\Local\Publishers
2021-01-28 16:59 - 2020-04-01 19:19 - 000000000 ____D C:\Users\Filip\AppData\Local\Packages
2021-01-28 16:59 - 2020-04-01 19:19 - 000000000 ____D C:\Users\Filip\AppData\Local\Packages
2021-01-28 16:57 - 2020-09-14 11:57 - 000000000 ____D C:\WINDOWS\HoloShell
2021-01-24 12:26 - 2019-09-23 20:42 - 000000000 ____D C:\Users\danie\AppData\Local\PlaceholderTileLogoFolder
2021-01-24 12:26 - 2019-09-23 20:42 - 000000000 ____D C:\Users\danie\AppData\Local\PlaceholderTileLogoFolder
2021-01-19 23:30 - 2020-09-26 20:35 - 000000000 ____D C:\Users\danie\AppData\Local\ElevatedDiagnostics
2021-01-19 23:30 - 2020-09-26 20:35 - 000000000 ____D C:\Users\danie\AppData\Local\ElevatedDiagnostics
2021-01-19 22:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-01-14 20:24 - 2019-12-07 15:44 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-01-14 20:24 - 2019-12-07 15:44 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-01-14 20:24 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-01-13 21:40 - 2020-09-14 12:21 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-01-13 21:35 - 2019-09-26 23:43 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-01-13 21:33 - 2019-09-26 23:43 - 135062968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories ========

2020-01-03 00:19 - 2020-01-03 00:19 - 000002151 _____ () C:\Program Files\GOM Player.lnk
2021-01-24 12:05 - 2021-01-24 12:05 - 000370070 _____ () C:\Users\danie\AppData\Roaming\logo_empire_desktop.ico
2020-04-30 11:58 - 2020-04-30 11:58 - 000006908 _____ () C:\Users\danie\AppData\Local\recently-used.xbel
2020-04-05 12:22 - 2020-04-22 13:01 - 000000286 _____ () C:\Users\danie\AppData\Local\zenmap.exe.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ================

Re: Kontrola logu

Napsal: 09 úno 2021 10:23
od Rudy
Zdravím!
Nevím, zda to půjde zjistit, problém může být i v samotné VPN. Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Re: Kontrola logu

Napsal: 09 úno 2021 11:25
od danek
Zdravím,

kontaktoval jsem firemní IT oddělení, údajně není problém ve VPN, z jiného počítače se jde připojit. Problém je údajně v mém počítači.

Dle návodu jsem chtěl stáhnout ADW, ale ve změti reklam na odkazované stránce jsem omylem nejdřív nainstaloval nějakou free verzi Malware bytes, snad jsem něco nezkazil. Až potom jsem si všiml, že tam je ještě dole jeden odkaz na ADW, stáhnul jsem a nainstaloval. Přeposílám log. Chtělo to smazat nějaký předinstalovaný software HP. Může to být něco škodlivého, nebo je to v pořádku?

Děkuji.

# -------------------------------
# Malwarebytes AdwCleaner 8.0.9.1
# -------------------------------
# Build: 01-20-2021
# Database: 2021-01-26.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-09-2021
# Duration: 00:00:01
# OS: Windows 10 Home
# Cleaned: 12
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

Deleted C:\END
Deleted C:\Windows\System32\drivers\swdumon.sys

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.HPCleanFLC Registry HKU\S-1-5-21-93754314-3111490570-4120607304-1015\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|HPSEU_Host_Launcher
Deleted Preinstalled.HPCleanFLC Registry HKU\S-1-5-21-93754314-3111490570-4120607304-1015\Software\Microsoft\Windows\CurrentVersion\Run|HPSEU_Host_Launcher
Deleted Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPTouchpointAnalyticsClient Folder C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2866 octets] - [09/02/2021 11:18:44]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Re: Kontrola logu

Napsal: 09 úno 2021 15:29
od Rudy
OK. Dejte nové logy FRST+Addition.

Re: Kontrola logu

Napsal: 09 úno 2021 15:43
od danek
Tak problém je zřejmě vyřešen. Přístup na server byl obnoven. Problém způsobil program Avast Cleanup Premium, který jsem si o víkendu nainstaloval a který provedl údržbu počítače a zřejmě v rámci té údržby se smazal nějaký důležitý soubor, bez kterého nešlo se vzdáleně připojit. Díky funkci vrátit změny jsem všechny změny vrátil do stavu před údržbou a poté připojení už zase funguje.

Přikládám log z FRST.
FRST.rar
(20.8 KiB) Staženo 80 x

Re: Kontrola logu

Napsal: 09 úno 2021 16:03
od Rudy
To jsem rád, že se problém vyřešil. Chcete-li, můžeme ještě dočistit. Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
S3 EverestDriver; \??\C:\Users\danie\AppData\Local\Temp\EverestDriver.sys [X] <==== ATTENTION
C:\DumpStack.log.tmp

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Kontrola logu

Napsal: 09 úno 2021 21:41
od danek
Super. Díky.

Zde je log:

Fix result of Farbar Recovery Scan Tool (x64) Version: 08-02-2021 01
Ran by danie (09-02-2021 21:39:08) Run:1
Running from C:\Users\danie\Desktop
Loaded Profiles: danie & Iva & Filip & SAS
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
S3 EverestDriver; \??\C:\Users\danie\AppData\Local\Temp\EverestDriver.sys [X] <==== ATTENTION
C:\DumpStack.log.tmp

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\System\CurrentControlSet\Services\EverestDriver => removed successfully
EverestDriver => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

BITS transfer queue => 11821056 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 53130531 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 76337688 B
Edge => 0 B
Chrome => 0 B
Firefox => 370517868 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 756408 B
NetworkService => 756408 B
danie => 32621897 B
defaultuser100000 => 32621897 B
Iva => 35976802 B
Filip => 35988512 B
SAS => 49869856 B
SAS.JAVOR => 49869856 B
SAS.JILM => 49869856 B

RecycleBin => 16687612 B
EmptyTemp: => 779 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 09-02-2021 21:40:41)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 21:40:41 ====

Re: Kontrola logu

Napsal: 09 úno 2021 22:02
od Rudy
Smazáno, log je již OK.

Re: Kontrola logu

Napsal: 12 úno 2021 09:26
od danek
Díky!

Re: Kontrola logu

Napsal: 12 úno 2021 10:29
od Rudy
Nemáte zač! :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz