Vzdálený neoprávněný přístup / divné certifikáty
Napsal: 17 říj 2021 03:25
Dobrý den,
asi před půl rokem jsem se potýkal s podobným problémem. Tehdy jsem udělal čistou instalaci Windows. Měl jsem za, že problém vyřešený. V posledních dvou dnech se PC začalo chovat velmi divně. Párkrát jsem měl pocit, že jsem se "přetahoval" o myš. Obraz se rozmazává a mění jas. V PC se sám od sebe naistaloval VirtualCloneDrive. Některé webové stránky se nechtějí otevřít nebo v příkazovém řádku problikne jiná adresa. Dnes se sama od sebe restartovala O2 TV na stejné wifi a nechci být paranoidní, ale z televize se ozývá různé pískání.
Nedokážu asi správně popsat, ale velmi se to podobá tady těmto dvěma případům:
https://www.bleepingcomputer.com/forums ... 270016666/
https://www.bleepingcomputer.com/forums ... hidden-os/
Prosím o pomoc. Udělal jsem logy z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-10-2021
Ran by Lucka (administrator) on DESKTOP-V4TD8T6 (ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X571GD_X571GD) (17-10-2021 04:05:09)
Running from C:\Users\Lucka\Desktop
Loaded Profiles: Lucka
Platform: Microsoft Windows 10 Home Version 2004 19041.1288 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <27>
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9de8154b682af864\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9de8154b682af864\igfxEM.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_7ad571204ec9fcd3\Intel_PIE_Service.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> ) C:\Windows\System32\OpenSSH\ssh-agent.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\Display.NvContainer\NVDisplay.Container.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_ec5ad85a0fbc74ea\RtkAudUService64.exe <2>
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4267928 2021-10-13] (Valve -> Valve Corporation)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35093120 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\MountPoints2: {8ca61ee3-80ee-11eb-b7a3-04d9f5003b5d} - "F:\OInstall.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\94.0.4606.81\Installer\chrmstp.exe [2021-10-17] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0DA3598B-4BA7-4CDD-B50E-79AD9B46CDCC} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSOptimization\AsusHotkeyExec.exe [233616 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {19D7FBAD-9239-4513-8406-6C9F26985DCA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2571F2AA-7508-4B6F-A05E-83E6CDA0BBC0} - System32\Tasks\RtkAudUService64_BG => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_ec5ad85a0fbc74ea\RtkAudUService64.exe [1212720 2020-12-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {2FA0A0D7-EC9B-435C-ABE5-A421CEFA3A63} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {359BF4FC-5934-48AE-B418-A1580FF872BE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-09-10] (Piriform Software Ltd -> Piriform)
Task: {3A16F9FB-477A-43C6-A851-ED920C89F370} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {4DAF9832-0C1A-4874-A2EB-E505E18806ED} - System32\Tasks\ASUS Update Checker 2.0 => C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSoftwareManager\AsusUpdateChecker.exe [771208 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {57959782-4596-4F4D-A31E-0DF0EFC15D33} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2021-10-17] (Google Inc -> Google Inc.)
Task: {5A85DB61-5458-41B8-AB4B-5F7F819DF749} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {6099B2C0-E8D5-41DC-9073-319DFE561B66} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {6D18B881-C2EC-40F5-AE56-8C71F26A23C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {71F2016E-EB7F-4529-B1D9-3187E11AEBB4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {74DD36C5-95C6-4DEA-96B8-C9E4689CB524} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2021-10-17] (Google Inc -> Google Inc.)
Task: {9C760713-B037-4CE0-8882-53CF09D43EBC} - System32\Tasks\CCleanerSkipUAC - Lucka => C:\Program Files\CCleaner\CCleaner.exe [29155968 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {AC0DBCB9-7F39-47BE-8BB9-0144F5D2627D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {BCCABAE2-F27F-4B74-B7BB-CA1DC95CDA87} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {E2CAD2C1-9881-4040-9BDB-454842B105B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 127.0.0.1 license.piriform.com
Tcpip\Parameters: [DhcpNameServer] 10.0.1.138
Tcpip\..\Interfaces\{10b22658-b652-4ddd-991c-b516451557cb}: [DhcpNameServer] 10.0.1.138
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
FireFox:
========
FF DefaultProfile: gdvxkqu6.default
FF ProfilePath: C:\Users\Lucka\AppData\Roaming\Mozilla\Firefox\Profiles\gdvxkqu6.default [2021-03-09]
FF ProfilePath: C:\Users\Lucka\AppData\Roaming\Mozilla\Firefox\Profiles\viyqq8ys.default-release [2021-10-17]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default [2021-10-17]
CHR StartupUrls: Default -> "hxxps//www.google.com/"
CHR Extension: (Prezentace) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-10-17]
CHR Extension: (Dokumenty) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-10-17]
CHR Extension: (Disk Google) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-17]
CHR Extension: (YouTube) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-10-17]
CHR Extension: (Tabulky) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-10-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-17]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-17]
CHR Extension: (Gmail) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-17]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65192 2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S3 AsusAppService; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\AsusAppService\AsusAppService.exe [364688 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSLinkNear; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkNear\AsusLinkNear.exe [1307792 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
S3 ASUSLinkRemote; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkRemote\AsusLinkRemote.exe [753808 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSOptimization; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSOptimization\AsusOptimization.exe [334464 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSSoftwareManager; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSoftwareManager\AsusSoftwareManager.exe [1012872 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSSystemAnalysis; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSystemAnalysis\AsusSystemAnalysis.exe [2553472 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSSystemDiagnosis; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [612760 2021-08-19] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek COMPUTER INC.)
R3 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13353768 2021-09-15] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AsusPTPDrv; C:\Windows\System32\drivers\AsusPTPFilter.sys [113496 2021-01-14] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
S3 ASUSSAIO; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSystemAnalysis\ASUSSAIO.sys [35968 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ATKWMIACPIIO; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSOptimization\atkwmiacpi64.sys [44200 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
R3 MpKsl6d252249; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DE9789D7-63EF-43CB-A03E-5157F2960700}\MpKslDrv.sys [130272 2021-10-17] (Microsoft Windows -> Microsoft Corporation)
S3 VClone; C:\Windows\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48520 2021-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [434424 2021-10-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-16] (Microsoft Windows -> Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\Windows\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Three months (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-17 04:05 - 2021-10-17 04:05 - 000016416 _____ C:\Users\Lucka\Desktop\FRST.txt
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Downloads\FRST64.exe
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Desktop\FRST64.exe
2021-10-17 03:46 - 2021-10-17 03:46 - 000000172 _____ C:\Users\Lucka\Desktop\bleeping_podezreni.txt
2021-10-17 03:13 - 2021-10-17 03:13 - 000000000 ___HD C:\$SysReset
2021-10-17 03:07 - 2021-10-17 03:07 - 000000000 ____D C:\Windows\SysWOW64\BestPractices
2021-10-17 03:07 - 2021-10-17 03:07 - 000000000 ____D C:\Windows\system32\BestPractices
2021-10-17 03:07 - 2021-10-17 03:07 - 000000000 ____D C:\inetpub
2021-10-17 02:59 - 2021-10-17 02:59 - 000001228 _____ C:\Users\FILMY\Downloads\Stažené soubory – zástupce.lnk
2021-10-17 02:54 - 2021-10-17 02:54 - 000000000 ____D C:\Users\Lucka\Downloads\CCleaner_v5.83.9050
2021-10-17 02:53 - 2021-10-17 02:54 - 036010543 _____ C:\Users\Lucka\Downloads\CCleaner_v5.83.9050.zip
2021-10-17 02:52 - 2021-10-17 02:53 - 000000000 ____D C:\Users\Lucka\Downloads\CCleaner_v5.84.9126 RePack+Portable by Dodakaedr
2021-10-17 02:51 - 2021-10-17 02:51 - 027597604 _____ (The qBittorrent project) C:\Users\Lucka\Downloads\qbittorrent_4.3.8_x64_setup.exe
2021-10-17 02:49 - 2021-10-17 03:12 - 000000000 ____D C:\Users\Lucka\AppData\Local\Google
2021-10-17 02:49 - 2021-10-17 02:49 - 000002319 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-17 02:49 - 2021-10-17 02:49 - 000002278 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-10-17 02:49 - 2021-10-17 02:49 - 000000000 ____D C:\Users\Lucka\AppData\Local\BitTorrentHelper
2021-10-17 02:49 - 2021-10-17 02:49 - 000000000 ____D C:\Program Files\Google
2021-10-17 02:48 - 2021-10-17 03:59 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-17 02:48 - 2021-10-17 02:53 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-17 02:48 - 2021-10-17 02:53 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-10-17 02:48 - 2021-10-17 02:48 - 021120176 _____ (BitTorrent, Inc.) C:\Users\Lucka\Downloads\utweb_installer.exe
2021-10-17 02:48 - 2021-10-17 02:48 - 000001865 _____ C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent Web.lnk
2021-10-17 02:48 - 2021-10-17 02:48 - 000000000 ____D C:\Users\Lucka\AppData\Local\UTW008
2021-10-17 02:38 - 2021-10-17 03:10 - 000000000 ____D C:\Program Files\CCleaner
2021-10-17 02:38 - 2021-10-17 02:55 - 000002252 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC - Lucka
2021-10-17 02:38 - 2021-10-17 02:38 - 000003936 _____ C:\Windows\system32\Tasks\CCleaner Update
2021-10-17 02:38 - 2021-10-17 02:38 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2021-10-17 02:38 - 2021-10-17 02:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-10-17 02:37 - 2021-10-17 02:37 - 036181616 _____ (Piriform Software Ltd) C:\Users\Lucka\Downloads\ccsetup585.exe
2021-10-17 02:33 - 2021-10-17 03:08 - 093323264 _____ C:\Windows\system32\config\SOFTWARE
2021-10-17 02:31 - 2021-10-17 02:33 - 000000000 ____D C:\Windows\Microsoft Antimalware
2021-10-17 02:19 - 2021-10-17 03:09 - 000000000 ____D C:\Users\Lucka\AppData\Local\Steam
2021-10-17 02:19 - 2021-10-17 02:19 - 000000000 ____D C:\Users\Lucka\AppData\Local\CEF
2021-10-17 01:48 - 2021-10-17 01:48 - 000000604 _____ C:\Users\Lucka\Downloads\startup_1.txt
2021-10-17 01:48 - 2021-10-17 01:48 - 000000604 _____ C:\Users\Lucka\Desktop\startup_1.txt
2021-10-17 01:35 - 2021-10-17 01:54 - 000000000 ____D C:\Users\Lucka\AppData\Local\ElevatedDiagnostics
2021-10-17 01:17 - 2021-10-17 01:18 - 012097716 _____ C:\Users\FILMY\Downloads\windows10.0-kb5005698-x64_ff882b0a9dccc0c3f52673ba3ecf4a2a3b2386ca.msu
2021-10-17 01:16 - 2021-10-17 01:16 - 057092126 _____ C:\Users\FILMY\Downloads\windows10.0-kb5006065-x64-ndp48_022b43043c63f17a102acfbbd06870b1bc3c45a6.msu
2021-10-17 01:08 - 2021-10-17 01:08 - 009863216 _____ C:\Users\FILMY\Downloads\BDREvilDecryptor.exe
2021-10-17 01:05 - 2021-10-17 01:06 - 000027976 _____ C:\Users\FILMY\Downloads\Addition.txt
2021-10-17 01:03 - 2021-10-17 04:05 - 000000000 ____D C:\FRST
2021-10-17 01:03 - 2021-10-17 01:06 - 000031546 _____ C:\Users\FILMY\Downloads\FRST.txt
2021-10-17 01:03 - 2021-10-17 01:03 - 002310656 _____ (Farbar) C:\Users\FILMY\Downloads\FRST64(1).exe
2021-10-17 01:03 - 2021-10-17 01:03 - 000000000 ____D C:\Users\FILMY\Downloads\FRST-OlderVersion
2021-10-17 00:39 - 2021-10-17 00:39 - 000209920 _____ (Microsoft Corporation) C:\Users\FILMY\Downloads\SpeechRuntime.exe
2021-10-17 00:18 - 2021-10-17 00:18 - 000077514 _____ C:\Users\Lucka\Desktop\startup.txt
2021-10-17 00:02 - 2021-10-17 00:02 - 036181616 _____ (Piriform Software Ltd) C:\Users\FILMY\Downloads\ccsetup585.exe
2021-10-16 09:25 - 2021-10-16 09:25 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\TeamViewer
2021-10-16 09:17 - 2021-10-16 09:17 - 000000000 ____D C:\Users\FILMY\AppData\Local\Steam
2021-10-16 09:17 - 2021-10-16 09:17 - 000000000 ____D C:\Users\FILMY\AppData\Local\CEF
2021-10-16 09:16 - 2021-10-17 03:18 - 000000000 ____D C:\Program Files (x86)\Steam
2021-10-16 09:16 - 2021-10-16 09:16 - 000001032 _____ C:\Users\Public\Desktop\Steam.lnk
2021-10-16 09:16 - 2021-10-16 09:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2021-10-16 09:15 - 2021-10-16 09:15 - 001770744 _____ C:\Users\FILMY\Downloads\SteamSetup.exe
2021-10-16 07:25 - 2021-10-16 07:26 - 000001004 _____ C:\Users\FILMY\Desktop\Total Commander.lnk
2021-10-16 06:57 - 2021-10-16 06:57 - 000000000 ____D C:\Users\FILMY\AppData\Local\OneDrive
2021-10-16 00:14 - 2021-10-16 00:14 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\GHISLER
2021-10-16 00:12 - 2021-10-16 23:59 - 000000000 ____D C:\Users\FILMY\AppData\LocalLow\Mozilla
2021-10-16 00:12 - 2021-10-16 00:12 - 000001499 _____ C:\Users\FILMY\Desktop\Firefox.lnk
2021-10-16 00:12 - 2021-10-16 00:12 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\Mozilla
2021-10-16 00:12 - 2021-10-16 00:12 - 000000000 ____D C:\Users\FILMY\AppData\Local\Mozilla
2021-10-16 00:10 - 2021-10-16 00:10 - 002111488 _____ (Digimarc) C:\Windows\SysWOW64\DMRCDecoder.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 001823296 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-10-16 00:10 - 2021-10-16 00:10 - 001393504 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-10-16 00:10 - 2021-10-16 00:10 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 001313608 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-10-16 00:10 - 2021-10-16 00:10 - 001164288 _____ C:\Windows\system32\MBR2GPT.EXE
2021-10-16 00:10 - 2021-10-16 00:10 - 000672768 _____ C:\Windows\system32\FsNVSDeviceSource.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 000611960 _____ C:\Windows\SysWOW64\TextShaping.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 000570368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2021-10-16 00:10 - 2021-10-16 00:10 - 000452096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2021-10-16 00:10 - 2021-10-16 00:10 - 000449024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2021-10-16 00:10 - 2021-10-16 00:10 - 000223744 _____ C:\Windows\SysWOW64\TpmTool.exe
2021-10-16 00:10 - 2021-10-16 00:10 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2021-10-16 00:10 - 2021-10-16 00:10 - 000122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2021-10-16 00:10 - 2021-10-16 00:10 - 000011495 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-10-16 00:09 - 2021-10-16 00:09 - 002295296 _____ (Digimarc) C:\Windows\system32\DMRCDecoder.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 002260992 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 000706536 _____ C:\Windows\system32\TextShaping.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2021-10-16 00:09 - 2021-10-16 00:09 - 000288768 _____ C:\Windows\system32\Windows.Management.InprocObjects.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 000272384 _____ C:\Windows\system32\TpmTool.exe
2021-10-16 00:09 - 2021-10-16 00:09 - 000162816 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-10-16 00:09 - 2021-10-16 00:09 - 000098304 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-10-16 00:08 - 2021-10-16 00:08 - 000000000 ____D C:\Windows\system32\Tasks\Agent Activation Runtime
2021-10-16 00:05 - 2021-10-16 00:05 - 000000000 ____D C:\Users\FILMY\AppData\Local\ASUS
2021-10-16 00:03 - 2021-10-16 00:06 - 000001345 _____ C:\Users\FILMY\Desktop\KODI.lnk
2021-10-16 00:03 - 2021-10-16 00:03 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\Kodi
2021-10-16 00:02 - 2021-10-16 00:02 - 000000000 ____D C:\Users\FILMY\AppData\Local\Comms
2021-10-16 00:01 - 2021-10-16 23:49 - 000000000 ____D C:\Users\FILMY\AppData\Local\PlaceholderTileLogoFolder
2021-10-16 00:01 - 2021-10-16 00:01 - 000000000 ___RD C:\Users\FILMY\OneDrive
2021-10-16 00:01 - 2021-10-16 00:01 - 000000000 ___HD C:\$WinREAgent
2021-10-16 00:00 - 2021-10-17 02:14 - 000000000 __SHD C:\Users\FILMY\IntelGraphicsProfiles
2021-10-16 00:00 - 2021-10-17 00:02 - 000002377 _____ C:\Users\FILMY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-16 00:00 - 2021-10-16 23:56 - 000000000 ____D C:\Users\FILMY\AppData\Local\Packages
2021-10-16 00:00 - 2021-10-16 09:35 - 000000000 ____D C:\Users\FILMY\AppData\Local\ConnectedDevicesPlatform
2021-10-16 00:00 - 2021-10-16 00:03 - 000000000 ____D C:\Users\FILMY\AppData\Local\D3DSCache
2021-10-16 00:00 - 2021-10-16 00:01 - 000000000 ____D C:\Users\FILMY\AppData\Local\Intel
2021-10-16 00:00 - 2021-10-16 00:01 - 000000000 ____D C:\Users\FILMY
2021-10-16 00:00 - 2021-10-16 00:00 - 000000020 ___SH C:\Users\FILMY\ntuser.ini
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Šablony
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Soubory cookie
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Poslední
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Okolní tiskárny
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Okolní síť
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Nabídka Start
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Dokumenty
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Documents\Obrázky
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Documents\Hudba
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Documents\Filmy
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Data aplikací
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\AppData\Local\Data aplikací
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ___RD C:\Users\FILMY\3D Objects
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\Adobe
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ____D C:\Users\FILMY\AppData\Local\VirtualStore
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ____D C:\Users\FILMY\AppData\Local\Publishers
2021-09-09 09:59 - 2021-09-09 10:22 - 430213120 _____ C:\Users\Lucka\Downloads\Farscape 04x20 Were So Screwed cz.avi
2021-08-15 13:58 - 2021-08-15 13:58 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-08-15 13:58 - 2021-08-15 13:58 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2021-08-02 18:14 - 2021-08-02 18:34 - 366737408 _____ C:\Users\Lucka\Downloads\Farscape-cz-03x19.avi
2021-07-20 19:10 - 2021-07-20 19:10 - 047944006 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
==================== Three months (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-17 04:04 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2021-10-17 03:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2021-10-17 03:23 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-17 03:11 - 2021-05-15 20:11 - 000000000 ____D C:\Users\Lucka\AppData\Local\D3DSCache
2021-10-17 03:11 - 2021-03-09 17:41 - 001683078 _____ C:\Windows\system32\PerfStringBackup.INI
2021-10-17 03:11 - 2019-12-07 16:41 - 000715662 _____ C:\Windows\system32\perfh005.dat
2021-10-17 03:11 - 2019-12-07 16:41 - 000147586 _____ C:\Windows\system32\perfc005.dat
2021-10-17 03:09 - 2021-03-09 18:06 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-17 03:08 - 2021-03-09 18:06 - 000000000 ____D C:\Users\Lucka\AppData\LocalLow\Mozilla
2021-10-17 03:08 - 2021-03-09 17:52 - 000000000 __SHD C:\Users\Lucka\IntelGraphicsProfiles
2021-10-17 03:08 - 2021-03-09 17:35 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-17 03:08 - 2021-03-09 17:35 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-10-17 03:08 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2021-10-17 03:08 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\inetsrv
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\spool
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\inetsrv
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-10-17 03:07 - 2019-12-07 11:09 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\simptcp.dll
2021-10-17 03:07 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2021-10-17 03:06 - 2021-04-09 12:01 - 000000000 ____D C:\totalcmd
2021-10-17 02:48 - 2021-05-15 20:06 - 000000000 ____D C:\ProgramData\Package Cache
2021-10-17 02:19 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\NDF
2021-10-17 01:46 - 2021-03-09 17:39 - 000000000 ____D C:\Users\Lucka\AppData\Local\Packages
2021-10-17 01:36 - 2021-03-09 17:57 - 000000000 ____D C:\Program Files\VideoLAN
2021-10-17 01:34 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\AppLocker
2021-10-17 01:14 - 2021-03-09 18:49 - 139806512 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-10-17 00:15 - 2021-03-09 17:48 - 000003176 _____ C:\Windows\system32\Tasks\ASUS Update Checker 2.0
2021-10-17 00:15 - 2021-03-09 17:48 - 000003102 _____ C:\Windows\system32\Tasks\ASUS Optimization 36D18D69AFC3
2021-10-17 00:04 - 2021-03-09 17:56 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-10-16 20:46 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-16 07:36 - 2021-05-15 20:06 - 000000000 ____D C:\Users\Lucka\AppData\Roaming\Kodi
2021-10-16 00:21 - 2021-03-09 17:35 - 000439864 _____ C:\Windows\system32\FNTCACHE.DAT
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\DiagTrack
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2021-10-16 00:20 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2021-10-16 00:17 - 2021-03-09 17:39 - 000000000 ____D C:\ProgramData\Packages
2021-10-16 00:16 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2021-10-16 00:10 - 2021-03-09 17:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-10-16 00:01 - 2021-03-09 18:07 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-16 00:00 - 2021-03-09 17:39 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-10-15 23:57 - 2021-03-09 18:49 - 000000000 ____D C:\Windows\system32\MRT
2021-10-15 23:56 - 2021-03-09 17:38 - 000002377 _____ C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-15 23:55 - 2021-03-09 17:48 - 000000000 ____D C:\Program Files\Microsoft Office
2021-10-13 14:07 - 2021-03-09 17:35 - 000000000 ____D C:\Windows\system32\SleepStudy
==================== SigCheckExt =========================
2021-10-17 01:03 - 2021-10-17 01:03 - 002310656 _____ (Farbar) C:\Users\FILMY\Downloads\FRST64(1).exe
2021-10-17 00:39 - 2021-10-17 00:39 - 000209920 _____ (Microsoft Corporation) C:\Users\FILMY\Downloads\SpeechRuntime.exe
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Desktop\FRST64.exe
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Downloads\FRST64.exe
2021-05-15 20:04 - 2021-05-15 20:04 - 068718480 _____ (XBMC Foundation) C:\Users\Lucka\Downloads\kodi-19.1-Matrix-x64.exe
2021-10-17 02:51 - 2021-10-17 02:51 - 027597604 _____ (The qBittorrent project) C:\Users\Lucka\Downloads\qbittorrent_4.3.8_x64_setup.exe
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== BCD ================================
Firmware Boot Manager
---------------------
identifier {fwbootmgr}
displayorder {bootmgr}
{7939345e-80ec-11eb-b3da-e9be631b9e3a}
{7939345f-80ec-11eb-b3da-e9be631b9e3a}
{79393460-80ec-11eb-b3da-e9be631b9e3a}
{4d79cf34-80f2-11eb-b7a4-806e6f6e6963}
{4d79cf35-80f2-11eb-b7a4-806e6f6e6963}
{4d79cf36-80f2-11eb-b7a4-806e6f6e6963}
timeout 0
Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale cs-CZ
inherit {globalsettings}
default {current}
resumeobject {79393462-80ec-11eb-b3da-e9be631b9e3a}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Firmware Application (101fffff)
-------------------------------
identifier {4d79cf34-80f2-11eb-b7a4-806e6f6e6963}
description UEFI:CD/DVD Drive
Firmware Application (101fffff)
-------------------------------
identifier {4d79cf35-80f2-11eb-b7a4-806e6f6e6963}
description UEFI:Removable Device
Firmware Application (101fffff)
-------------------------------
identifier {4d79cf36-80f2-11eb-b7a4-806e6f6e6963}
description UEFI:Network Device
Firmware Application (101fffff)
-------------------------------
identifier {7939345e-80ec-11eb-b3da-e9be631b9e3a}
description UEFI: PXE IP4 Realtek PCIe GBE Family Controller
Firmware Application (101fffff)
-------------------------------
identifier {7939345f-80ec-11eb-b3da-e9be631b9e3a}
description UEFI: PXE IP6 Realtek PCIe GBE Family Controller
Firmware Application (101fffff)
-------------------------------
identifier {79393460-80ec-11eb-b3da-e9be631b9e3a}
description ajkasdak
Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \Windows\system32\winload.efi
description Windows 10
locale cs-CZ
inherit {bootloadersettings}
recoverysequence {79393464-80ec-11eb-b3da-e9be631b9e3a}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \Windows
resumeobject {79393462-80ec-11eb-b3da-e9be631b9e3a}
nx OptIn
bootmenupolicy Standard
Windows Boot Loader
-------------------
identifier {79393464-80ec-11eb-b3da-e9be631b9e3a}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{79393465-80ec-11eb-b3da-e9be631b9e3a}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale cs-cz
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{79393465-80ec-11eb-b3da-e9be631b9e3a}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Resume from Hibernate
---------------------
identifier {79393462-80ec-11eb-b3da-e9be631b9e3a}
device partition=C:
path \Windows\system32\winresume.efi
description Windows Resume Application
locale cs-CZ
inherit {resumeloadersettings}
recoverysequence {79393464-80ec-11eb-b3da-e9be631b9e3a}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostika pamŘti syst‚mu Windows
locale cs-CZ
inherit {globalsettings}
badmemoryaccess Yes
EMS Settings
------------
identifier {emssettings}
bootems No
Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Local
RAM Defects
-----------
identifier {badmemory}
Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}
Device options
--------------
identifier {79393465-80ec-11eb-b3da-e9be631b9e3a}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-10-2021
Ran by Lucka (17-10-2021 04:06:49)
Running from C:\Users\Lucka\Desktop
Microsoft Windows 10 Home Version 2004 19041.1288 (X64) (2021-03-09 15:37:29)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2630502808-4281536773-769976474-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2630502808-4281536773-769976474-503 - Limited - Disabled)
FILMY (S-1-5-21-2630502808-4281536773-769976474-1002 - Limited - Enabled) => C:\Users\FILMY
Guest (S-1-5-21-2630502808-4281536773-769976474-501 - Limited - Disabled)
Lucka (S-1-5-21-2630502808-4281536773-769976474-1001 - Administrator - Enabled) => C:\Users\Lucka
WDAGUtilityAccount (S-1-5-21-2630502808-4281536773-769976474-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Reader XI - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 5.85 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 94.0.4606.81 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Kodi (HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\Kodi) (Version: 19.1.0.0 - XBMC Foundation)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\Proplus2019Retail - cs-cz) (Version: 16.0.14430.20270 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\OneDriveSetup.exe) (Version: 21.196.0921.0007 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2630502808-4281536773-769976474-1002\...\OneDriveSetup.exe) (Version: 21.196.0921.0007 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29914 (HKLM-x32\...\{43d1ce82-6f55-4860-a938-20e5deb28b98}) (Version: 14.28.29914.0 - Microsoft Corporation)
NVIDIA Ovladače grafiky 462.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 462.31 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20270 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20270 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.22.3 - TeamViewer)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 10.00 - Ghisler Software GmbH)
Packages:
=========
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_131.1.242.0_x64__v10z8vjag6ke6 [2021-10-16] (HP Inc.)
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2021-10-16] (INTEL CORP)
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.0.22.0_x64__qmba6cd70vzyy [2021-10-16] (ASUSTeK COMPUTER INC.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-10-16] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.20.238.0_x64__dt26b99r8h8gj [2021-10-16] (Realtek Semiconductor Corp)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\nvshext.dll [2021-04-29] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
HKU\S-1-5-21-2630502808-4281536773-769976474-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-21-2630502808-4281536773-769976474-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IESR02
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IESR02
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IE11SR
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IE11SR
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2021-03-09 17:59 - 000000864 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 license.piriform.com
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img2.jpg
HKU\S-1-5-21-2630502808-4281536773-769976474-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 10.0.1.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\StartupApproved\Run: => "NetworkResetPostReboot"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{5E2AADF1-8711-4B6A-9985-78A780789B76}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{DDCC0467-52B3-4EA3-AC47-F6D55EF0413C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F862AED9-7ED5-46DE-B009-670D67CF980D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D9ED8FD6-90A3-4E17-82E2-69503BC73D7F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6CD6913D-E3CA-4097-B625-FDF827D63F8B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{6691AB94-32B0-4CB0-8CFC-030D3AE3BAF4}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{82ED00D1-B482-43F0-9623-24559B74B55A}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [{260A1ED5-2A08-4E85-86EC-5DDB2DC41CEB}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9A13F5B7-DB60-4F95-9DB0-FD091B1D5343}] => (Allow) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{0762FBFA-7594-4F4E-8726-9DC57F01EF89}] => (Allow) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{D4266C4D-450B-42F8-A308-758D2E77AA42}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B76DFD27-355E-4C57-9532-845336D3CD40}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B41BBC75-8CE5-4A0F-82A0-F2B0078E335B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{DB33DE99-33D6-4FB8-A112-D99C78028AF7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{1EBFC61A-90DF-4BAE-BC26-A6AF4B4E5F39}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{1F35D1DA-AB5C-42D8-B5B4-2BD48B5B07CA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5BDFF847-7D1E-4264-A40B-DA23D5D22817}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{E07F405D-1177-43EC-B92A-9C0EC37510AF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C8E5451C-D493-4F1E-AD4E-CFC71A714ACC}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:85.21 GB) (Free:44.39 GB) (52%)
==================== Faulty Device Manager Devices ============
Name: Intel(R) Wireless Bluetooth(R)
Description: Intel(R) Wireless Bluetooth(R)
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Intel Corporation
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: ========================
Application errors:
==================
Error: (10/17/2021 02:57:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utweb.exe, verze: 1.2.3.3775, časové razítko: 0x60ff0267
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.1288, časové razítko: 0x027db076
Kód výjimky: 0xc0000005
Posun chyby: 0x0005f583
ID chybujícího procesu: 0x3258
Čas spuštění chybující aplikace: 0x01d7c2f0cb538c2a
Cesta k chybující aplikaci: C:\Users\Lucka\AppData\Roaming\uTorrent Web\utweb.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 8b5f5830-2e4d-435d-aeee-b91d160be27f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (10/17/2021 02:40:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:36:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:34:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:32:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:32:26 AM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A
Error: (10/17/2021 01:18:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RemovalToolGUI.exe, verze: 0.0.0.0, časové razítko: 0x614aede7
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.1288, časové razítko: 0xa280d1d6
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000ff199
ID chybujícího procesu: 0xae4
Čas spuštění chybující aplikace: 0x01d7c2e2ecfc48d4
Cesta k chybující aplikaci: C:\Users\Lucka\AppData\Local\Temp\BDRansomDecryptor\RemovalToolGUI.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 818e24d2-2c2f-4c83-b426-435749a59d8a
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (10/16/2021 08:07:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: WLANExt.exe, verze: 10.0.19041.1, časové razítko: 0x45c477dd
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.1288, časové razítko: 0xa280d1d6
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000063416
ID chybujícího procesu: 0xc7c
Čas spuštění chybující aplikace: 0x01d7c2130262171d
Cesta k chybující aplikaci: C:\Windows\system32\WLANExt.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: f2ac8df7-8228-4817-8d96-b51197947654
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (10/17/2021 03:24:19 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:17:40 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge.AppXeb42j1vh6rk395pm0vmcx57dxqjhej5d.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:17:39 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge.AppXeb42j1vh6rk395pm0vmcx57dxqjhej5d.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:15:54 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge.AppXeb42j1vh6rk395pm0vmcx57dxqjhej5d.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:09:27 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:08:19 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba MozillaMaintenance byla ukončena s následující chybou:
Nesprávná funkce.
Error: (10/17/2021 03:06:38 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 02:59:03 AM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Windows Defender:
================
Date: 2021-10-16 23:27:20
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {F5F8E822-9C99-4BF2-A816-3D9AD3D3D154}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-17 10:25:12
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {B54EEECE-9EEB-461B-A274-22EDE555164B}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-12 11:48:18
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {5FB0D15B-690C-4588-A28A-254478C7C55A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-06 09:22:00
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {BD898887-842F-4E5C-9BBC-0E9CAB9B713E}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-01 17:55:16
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {B409F797-5783-4DEE-A46E-BF5CC8A790AE}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-10-16 00:21:03
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.351.488.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18600.4
Kód chyby: 0x800706f7
Popis chyby: Zástupná procedura obdržela chybná data.
Date: 2021-06-29 18:44:15
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1610.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
Date: 2021-06-29 18:44:15
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1610.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
Date: 2021-06-29 18:44:15
Description:
Program Antivirová ochrana v programu Microsoft Defender zjistil chybu při pokusu o aktualizaci modulu
Nová verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Uživatel: NT AUTHORITY\SYSTEM
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
Date: 2021-06-29 11:07:11
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1610.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
==================== Memory info ===========================
BIOS: American Megatrends Inc. X571GD.309 12/17/2020
Motherboard: ASUSTeK COMPUTER INC. X571GD
Processor: Intel(R) Core(TM) i5-8300H CPU @ 2.30GHz
Percentage of memory in use: 51%
Total physical RAM: 8044.5 MB
Available physical RAM: 3884.34 MB
Total Virtual: 9324.5 MB
Available Virtual: 4488.23 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:85.21 GB) (Free:44.39 GB) NTFS
Drive d: (DATA) (Fixed) (Total:390.62 GB) (Free:390 GB) NTFS
\\?\Volume{ffadabea-81c9-49a2-884c-c5ca5dfdbd1d}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{5d217be8-b60b-4ebb-833a-d7f1980e89d5}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{68242f5f-f36b-4a38-85d0-8ed584ac92e1}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 4A1C1A6F)
Partition: GPT.
==================== End of Addition.txt =======================
asi před půl rokem jsem se potýkal s podobným problémem. Tehdy jsem udělal čistou instalaci Windows. Měl jsem za, že problém vyřešený. V posledních dvou dnech se PC začalo chovat velmi divně. Párkrát jsem měl pocit, že jsem se "přetahoval" o myš. Obraz se rozmazává a mění jas. V PC se sám od sebe naistaloval VirtualCloneDrive. Některé webové stránky se nechtějí otevřít nebo v příkazovém řádku problikne jiná adresa. Dnes se sama od sebe restartovala O2 TV na stejné wifi a nechci být paranoidní, ale z televize se ozývá různé pískání.
Nedokážu asi správně popsat, ale velmi se to podobá tady těmto dvěma případům:
https://www.bleepingcomputer.com/forums ... 270016666/
https://www.bleepingcomputer.com/forums ... hidden-os/
Prosím o pomoc. Udělal jsem logy z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-10-2021
Ran by Lucka (administrator) on DESKTOP-V4TD8T6 (ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X571GD_X571GD) (17-10-2021 04:05:09)
Running from C:\Users\Lucka\Desktop
Loaded Profiles: Lucka
Platform: Microsoft Windows 10 Home Version 2004 19041.1288 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <27>
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9de8154b682af864\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_9de8154b682af864\igfxEM.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_7ad571204ec9fcd3\Intel_PIE_Service.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> ) C:\Windows\System32\OpenSSH\ssh-agent.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\Display.NvContainer\NVDisplay.Container.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_ec5ad85a0fbc74ea\RtkAudUService64.exe <2>
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4267928 2021-10-13] (Valve -> Valve Corporation)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35093120 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\MountPoints2: {8ca61ee3-80ee-11eb-b7a3-04d9f5003b5d} - "F:\OInstall.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\94.0.4606.81\Installer\chrmstp.exe [2021-10-17] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0DA3598B-4BA7-4CDD-B50E-79AD9B46CDCC} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSOptimization\AsusHotkeyExec.exe [233616 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {19D7FBAD-9239-4513-8406-6C9F26985DCA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2571F2AA-7508-4B6F-A05E-83E6CDA0BBC0} - System32\Tasks\RtkAudUService64_BG => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_ec5ad85a0fbc74ea\RtkAudUService64.exe [1212720 2020-12-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {2FA0A0D7-EC9B-435C-ABE5-A421CEFA3A63} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {359BF4FC-5934-48AE-B418-A1580FF872BE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-09-10] (Piriform Software Ltd -> Piriform)
Task: {3A16F9FB-477A-43C6-A851-ED920C89F370} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {4DAF9832-0C1A-4874-A2EB-E505E18806ED} - System32\Tasks\ASUS Update Checker 2.0 => C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSoftwareManager\AsusUpdateChecker.exe [771208 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {57959782-4596-4F4D-A31E-0DF0EFC15D33} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2021-10-17] (Google Inc -> Google Inc.)
Task: {5A85DB61-5458-41B8-AB4B-5F7F819DF749} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {6099B2C0-E8D5-41DC-9073-319DFE561B66} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {6D18B881-C2EC-40F5-AE56-8C71F26A23C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {71F2016E-EB7F-4529-B1D9-3187E11AEBB4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {74DD36C5-95C6-4DEA-96B8-C9E4689CB524} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2021-10-17] (Google Inc -> Google Inc.)
Task: {9C760713-B037-4CE0-8882-53CF09D43EBC} - System32\Tasks\CCleanerSkipUAC - Lucka => C:\Program Files\CCleaner\CCleaner.exe [29155968 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {AC0DBCB9-7F39-47BE-8BB9-0144F5D2627D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {BCCABAE2-F27F-4B74-B7BB-CA1DC95CDA87} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {E2CAD2C1-9881-4040-9BDB-454842B105B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 127.0.0.1 license.piriform.com
Tcpip\Parameters: [DhcpNameServer] 10.0.1.138
Tcpip\..\Interfaces\{10b22658-b652-4ddd-991c-b516451557cb}: [DhcpNameServer] 10.0.1.138
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
FireFox:
========
FF DefaultProfile: gdvxkqu6.default
FF ProfilePath: C:\Users\Lucka\AppData\Roaming\Mozilla\Firefox\Profiles\gdvxkqu6.default [2021-03-09]
FF ProfilePath: C:\Users\Lucka\AppData\Roaming\Mozilla\Firefox\Profiles\viyqq8ys.default-release [2021-10-17]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default [2021-10-17]
CHR StartupUrls: Default -> "hxxps//www.google.com/"
CHR Extension: (Prezentace) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-10-17]
CHR Extension: (Dokumenty) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-10-17]
CHR Extension: (Disk Google) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-17]
CHR Extension: (YouTube) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-10-17]
CHR Extension: (Tabulky) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-10-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-17]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-17]
CHR Extension: (Gmail) - C:\Users\Lucka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-17]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65192 2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S3 AsusAppService; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\AsusAppService\AsusAppService.exe [364688 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSLinkNear; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkNear\AsusLinkNear.exe [1307792 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
S3 ASUSLinkRemote; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkRemote\AsusLinkRemote.exe [753808 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSOptimization; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSOptimization\AsusOptimization.exe [334464 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSSoftwareManager; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSoftwareManager\AsusSoftwareManager.exe [1012872 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSSystemAnalysis; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSystemAnalysis\AsusSystemAnalysis.exe [2553472 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
S3 ASUSSystemDiagnosis; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [612760 2021-08-19] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek COMPUTER INC.)
R3 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13353768 2021-09-15] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AsusPTPDrv; C:\Windows\System32\drivers\AsusPTPFilter.sys [113496 2021-01-14] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
S3 ASUSSAIO; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSSystemAnalysis\ASUSSAIO.sys [35968 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ATKWMIACPIIO; C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSOptimization\atkwmiacpi64.sys [44200 2021-08-19] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
R3 MpKsl6d252249; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DE9789D7-63EF-43CB-A03E-5157F2960700}\MpKslDrv.sys [130272 2021-10-17] (Microsoft Windows -> Microsoft Corporation)
S3 VClone; C:\Windows\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48520 2021-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [434424 2021-10-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-16] (Microsoft Windows -> Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\Windows\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Three months (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-17 04:05 - 2021-10-17 04:05 - 000016416 _____ C:\Users\Lucka\Desktop\FRST.txt
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Downloads\FRST64.exe
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Desktop\FRST64.exe
2021-10-17 03:46 - 2021-10-17 03:46 - 000000172 _____ C:\Users\Lucka\Desktop\bleeping_podezreni.txt
2021-10-17 03:13 - 2021-10-17 03:13 - 000000000 ___HD C:\$SysReset
2021-10-17 03:07 - 2021-10-17 03:07 - 000000000 ____D C:\Windows\SysWOW64\BestPractices
2021-10-17 03:07 - 2021-10-17 03:07 - 000000000 ____D C:\Windows\system32\BestPractices
2021-10-17 03:07 - 2021-10-17 03:07 - 000000000 ____D C:\inetpub
2021-10-17 02:59 - 2021-10-17 02:59 - 000001228 _____ C:\Users\FILMY\Downloads\Stažené soubory – zástupce.lnk
2021-10-17 02:54 - 2021-10-17 02:54 - 000000000 ____D C:\Users\Lucka\Downloads\CCleaner_v5.83.9050
2021-10-17 02:53 - 2021-10-17 02:54 - 036010543 _____ C:\Users\Lucka\Downloads\CCleaner_v5.83.9050.zip
2021-10-17 02:52 - 2021-10-17 02:53 - 000000000 ____D C:\Users\Lucka\Downloads\CCleaner_v5.84.9126 RePack+Portable by Dodakaedr
2021-10-17 02:51 - 2021-10-17 02:51 - 027597604 _____ (The qBittorrent project) C:\Users\Lucka\Downloads\qbittorrent_4.3.8_x64_setup.exe
2021-10-17 02:49 - 2021-10-17 03:12 - 000000000 ____D C:\Users\Lucka\AppData\Local\Google
2021-10-17 02:49 - 2021-10-17 02:49 - 000002319 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-17 02:49 - 2021-10-17 02:49 - 000002278 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-10-17 02:49 - 2021-10-17 02:49 - 000000000 ____D C:\Users\Lucka\AppData\Local\BitTorrentHelper
2021-10-17 02:49 - 2021-10-17 02:49 - 000000000 ____D C:\Program Files\Google
2021-10-17 02:48 - 2021-10-17 03:59 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-17 02:48 - 2021-10-17 02:53 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-10-17 02:48 - 2021-10-17 02:53 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-10-17 02:48 - 2021-10-17 02:48 - 021120176 _____ (BitTorrent, Inc.) C:\Users\Lucka\Downloads\utweb_installer.exe
2021-10-17 02:48 - 2021-10-17 02:48 - 000001865 _____ C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent Web.lnk
2021-10-17 02:48 - 2021-10-17 02:48 - 000000000 ____D C:\Users\Lucka\AppData\Local\UTW008
2021-10-17 02:38 - 2021-10-17 03:10 - 000000000 ____D C:\Program Files\CCleaner
2021-10-17 02:38 - 2021-10-17 02:55 - 000002252 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC - Lucka
2021-10-17 02:38 - 2021-10-17 02:38 - 000003936 _____ C:\Windows\system32\Tasks\CCleaner Update
2021-10-17 02:38 - 2021-10-17 02:38 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2021-10-17 02:38 - 2021-10-17 02:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-10-17 02:37 - 2021-10-17 02:37 - 036181616 _____ (Piriform Software Ltd) C:\Users\Lucka\Downloads\ccsetup585.exe
2021-10-17 02:33 - 2021-10-17 03:08 - 093323264 _____ C:\Windows\system32\config\SOFTWARE
2021-10-17 02:31 - 2021-10-17 02:33 - 000000000 ____D C:\Windows\Microsoft Antimalware
2021-10-17 02:19 - 2021-10-17 03:09 - 000000000 ____D C:\Users\Lucka\AppData\Local\Steam
2021-10-17 02:19 - 2021-10-17 02:19 - 000000000 ____D C:\Users\Lucka\AppData\Local\CEF
2021-10-17 01:48 - 2021-10-17 01:48 - 000000604 _____ C:\Users\Lucka\Downloads\startup_1.txt
2021-10-17 01:48 - 2021-10-17 01:48 - 000000604 _____ C:\Users\Lucka\Desktop\startup_1.txt
2021-10-17 01:35 - 2021-10-17 01:54 - 000000000 ____D C:\Users\Lucka\AppData\Local\ElevatedDiagnostics
2021-10-17 01:17 - 2021-10-17 01:18 - 012097716 _____ C:\Users\FILMY\Downloads\windows10.0-kb5005698-x64_ff882b0a9dccc0c3f52673ba3ecf4a2a3b2386ca.msu
2021-10-17 01:16 - 2021-10-17 01:16 - 057092126 _____ C:\Users\FILMY\Downloads\windows10.0-kb5006065-x64-ndp48_022b43043c63f17a102acfbbd06870b1bc3c45a6.msu
2021-10-17 01:08 - 2021-10-17 01:08 - 009863216 _____ C:\Users\FILMY\Downloads\BDREvilDecryptor.exe
2021-10-17 01:05 - 2021-10-17 01:06 - 000027976 _____ C:\Users\FILMY\Downloads\Addition.txt
2021-10-17 01:03 - 2021-10-17 04:05 - 000000000 ____D C:\FRST
2021-10-17 01:03 - 2021-10-17 01:06 - 000031546 _____ C:\Users\FILMY\Downloads\FRST.txt
2021-10-17 01:03 - 2021-10-17 01:03 - 002310656 _____ (Farbar) C:\Users\FILMY\Downloads\FRST64(1).exe
2021-10-17 01:03 - 2021-10-17 01:03 - 000000000 ____D C:\Users\FILMY\Downloads\FRST-OlderVersion
2021-10-17 00:39 - 2021-10-17 00:39 - 000209920 _____ (Microsoft Corporation) C:\Users\FILMY\Downloads\SpeechRuntime.exe
2021-10-17 00:18 - 2021-10-17 00:18 - 000077514 _____ C:\Users\Lucka\Desktop\startup.txt
2021-10-17 00:02 - 2021-10-17 00:02 - 036181616 _____ (Piriform Software Ltd) C:\Users\FILMY\Downloads\ccsetup585.exe
2021-10-16 09:25 - 2021-10-16 09:25 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\TeamViewer
2021-10-16 09:17 - 2021-10-16 09:17 - 000000000 ____D C:\Users\FILMY\AppData\Local\Steam
2021-10-16 09:17 - 2021-10-16 09:17 - 000000000 ____D C:\Users\FILMY\AppData\Local\CEF
2021-10-16 09:16 - 2021-10-17 03:18 - 000000000 ____D C:\Program Files (x86)\Steam
2021-10-16 09:16 - 2021-10-16 09:16 - 000001032 _____ C:\Users\Public\Desktop\Steam.lnk
2021-10-16 09:16 - 2021-10-16 09:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2021-10-16 09:15 - 2021-10-16 09:15 - 001770744 _____ C:\Users\FILMY\Downloads\SteamSetup.exe
2021-10-16 07:25 - 2021-10-16 07:26 - 000001004 _____ C:\Users\FILMY\Desktop\Total Commander.lnk
2021-10-16 06:57 - 2021-10-16 06:57 - 000000000 ____D C:\Users\FILMY\AppData\Local\OneDrive
2021-10-16 00:14 - 2021-10-16 00:14 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\GHISLER
2021-10-16 00:12 - 2021-10-16 23:59 - 000000000 ____D C:\Users\FILMY\AppData\LocalLow\Mozilla
2021-10-16 00:12 - 2021-10-16 00:12 - 000001499 _____ C:\Users\FILMY\Desktop\Firefox.lnk
2021-10-16 00:12 - 2021-10-16 00:12 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\Mozilla
2021-10-16 00:12 - 2021-10-16 00:12 - 000000000 ____D C:\Users\FILMY\AppData\Local\Mozilla
2021-10-16 00:10 - 2021-10-16 00:10 - 002111488 _____ (Digimarc) C:\Windows\SysWOW64\DMRCDecoder.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 001823296 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-10-16 00:10 - 2021-10-16 00:10 - 001393504 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-10-16 00:10 - 2021-10-16 00:10 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 001313608 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-10-16 00:10 - 2021-10-16 00:10 - 001164288 _____ C:\Windows\system32\MBR2GPT.EXE
2021-10-16 00:10 - 2021-10-16 00:10 - 000672768 _____ C:\Windows\system32\FsNVSDeviceSource.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 000611960 _____ C:\Windows\SysWOW64\TextShaping.dll
2021-10-16 00:10 - 2021-10-16 00:10 - 000570368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2021-10-16 00:10 - 2021-10-16 00:10 - 000452096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2021-10-16 00:10 - 2021-10-16 00:10 - 000449024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2021-10-16 00:10 - 2021-10-16 00:10 - 000223744 _____ C:\Windows\SysWOW64\TpmTool.exe
2021-10-16 00:10 - 2021-10-16 00:10 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2021-10-16 00:10 - 2021-10-16 00:10 - 000122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2021-10-16 00:10 - 2021-10-16 00:10 - 000011495 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-10-16 00:09 - 2021-10-16 00:09 - 002295296 _____ (Digimarc) C:\Windows\system32\DMRCDecoder.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 002260992 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 000706536 _____ C:\Windows\system32\TextShaping.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2021-10-16 00:09 - 2021-10-16 00:09 - 000288768 _____ C:\Windows\system32\Windows.Management.InprocObjects.dll
2021-10-16 00:09 - 2021-10-16 00:09 - 000272384 _____ C:\Windows\system32\TpmTool.exe
2021-10-16 00:09 - 2021-10-16 00:09 - 000162816 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-10-16 00:09 - 2021-10-16 00:09 - 000098304 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-10-16 00:08 - 2021-10-16 00:08 - 000000000 ____D C:\Windows\system32\Tasks\Agent Activation Runtime
2021-10-16 00:05 - 2021-10-16 00:05 - 000000000 ____D C:\Users\FILMY\AppData\Local\ASUS
2021-10-16 00:03 - 2021-10-16 00:06 - 000001345 _____ C:\Users\FILMY\Desktop\KODI.lnk
2021-10-16 00:03 - 2021-10-16 00:03 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\Kodi
2021-10-16 00:02 - 2021-10-16 00:02 - 000000000 ____D C:\Users\FILMY\AppData\Local\Comms
2021-10-16 00:01 - 2021-10-16 23:49 - 000000000 ____D C:\Users\FILMY\AppData\Local\PlaceholderTileLogoFolder
2021-10-16 00:01 - 2021-10-16 00:01 - 000000000 ___RD C:\Users\FILMY\OneDrive
2021-10-16 00:01 - 2021-10-16 00:01 - 000000000 ___HD C:\$WinREAgent
2021-10-16 00:00 - 2021-10-17 02:14 - 000000000 __SHD C:\Users\FILMY\IntelGraphicsProfiles
2021-10-16 00:00 - 2021-10-17 00:02 - 000002377 _____ C:\Users\FILMY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-16 00:00 - 2021-10-16 23:56 - 000000000 ____D C:\Users\FILMY\AppData\Local\Packages
2021-10-16 00:00 - 2021-10-16 09:35 - 000000000 ____D C:\Users\FILMY\AppData\Local\ConnectedDevicesPlatform
2021-10-16 00:00 - 2021-10-16 00:03 - 000000000 ____D C:\Users\FILMY\AppData\Local\D3DSCache
2021-10-16 00:00 - 2021-10-16 00:01 - 000000000 ____D C:\Users\FILMY\AppData\Local\Intel
2021-10-16 00:00 - 2021-10-16 00:01 - 000000000 ____D C:\Users\FILMY
2021-10-16 00:00 - 2021-10-16 00:00 - 000000020 ___SH C:\Users\FILMY\ntuser.ini
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Šablony
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Soubory cookie
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Poslední
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Okolní tiskárny
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Okolní síť
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Nabídka Start
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Dokumenty
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Documents\Obrázky
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Documents\Hudba
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Documents\Filmy
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\Data aplikací
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 _SHDL C:\Users\FILMY\AppData\Local\Data aplikací
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ___RD C:\Users\FILMY\3D Objects
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ____D C:\Users\FILMY\AppData\Roaming\Adobe
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ____D C:\Users\FILMY\AppData\Local\VirtualStore
2021-10-16 00:00 - 2021-10-16 00:00 - 000000000 ____D C:\Users\FILMY\AppData\Local\Publishers
2021-09-09 09:59 - 2021-09-09 10:22 - 430213120 _____ C:\Users\Lucka\Downloads\Farscape 04x20 Were So Screwed cz.avi
2021-08-15 13:58 - 2021-08-15 13:58 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-08-15 13:58 - 2021-08-15 13:58 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2021-08-02 18:14 - 2021-08-02 18:34 - 366737408 _____ C:\Users\Lucka\Downloads\Farscape-cz-03x19.avi
2021-07-20 19:10 - 2021-07-20 19:10 - 047944006 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
==================== Three months (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-10-17 04:04 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2021-10-17 03:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2021-10-17 03:23 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-17 03:11 - 2021-05-15 20:11 - 000000000 ____D C:\Users\Lucka\AppData\Local\D3DSCache
2021-10-17 03:11 - 2021-03-09 17:41 - 001683078 _____ C:\Windows\system32\PerfStringBackup.INI
2021-10-17 03:11 - 2019-12-07 16:41 - 000715662 _____ C:\Windows\system32\perfh005.dat
2021-10-17 03:11 - 2019-12-07 16:41 - 000147586 _____ C:\Windows\system32\perfc005.dat
2021-10-17 03:09 - 2021-03-09 18:06 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-17 03:08 - 2021-03-09 18:06 - 000000000 ____D C:\Users\Lucka\AppData\LocalLow\Mozilla
2021-10-17 03:08 - 2021-03-09 17:52 - 000000000 __SHD C:\Users\Lucka\IntelGraphicsProfiles
2021-10-17 03:08 - 2021-03-09 17:35 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-17 03:08 - 2021-03-09 17:35 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-10-17 03:08 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2021-10-17 03:08 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\inetsrv
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\spool
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\inetsrv
2021-10-17 03:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-10-17 03:07 - 2019-12-07 11:09 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\simptcp.dll
2021-10-17 03:07 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2021-10-17 03:06 - 2021-04-09 12:01 - 000000000 ____D C:\totalcmd
2021-10-17 02:48 - 2021-05-15 20:06 - 000000000 ____D C:\ProgramData\Package Cache
2021-10-17 02:19 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\NDF
2021-10-17 01:46 - 2021-03-09 17:39 - 000000000 ____D C:\Users\Lucka\AppData\Local\Packages
2021-10-17 01:36 - 2021-03-09 17:57 - 000000000 ____D C:\Program Files\VideoLAN
2021-10-17 01:34 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\AppLocker
2021-10-17 01:14 - 2021-03-09 18:49 - 139806512 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-10-17 00:15 - 2021-03-09 17:48 - 000003176 _____ C:\Windows\system32\Tasks\ASUS Update Checker 2.0
2021-10-17 00:15 - 2021-03-09 17:48 - 000003102 _____ C:\Windows\system32\Tasks\ASUS Optimization 36D18D69AFC3
2021-10-17 00:04 - 2021-03-09 17:56 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-10-16 20:46 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-16 07:36 - 2021-05-15 20:06 - 000000000 ____D C:\Users\Lucka\AppData\Roaming\Kodi
2021-10-16 00:21 - 2021-03-09 17:35 - 000439864 _____ C:\Windows\system32\FNTCACHE.DAT
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\DiagTrack
2021-10-16 00:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2021-10-16 00:20 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2021-10-16 00:17 - 2021-03-09 17:39 - 000000000 ____D C:\ProgramData\Packages
2021-10-16 00:16 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2021-10-16 00:10 - 2021-03-09 17:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-10-16 00:01 - 2021-03-09 18:07 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-16 00:00 - 2021-03-09 17:39 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-10-15 23:57 - 2021-03-09 18:49 - 000000000 ____D C:\Windows\system32\MRT
2021-10-15 23:56 - 2021-03-09 17:38 - 000002377 _____ C:\Users\Lucka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-15 23:55 - 2021-03-09 17:48 - 000000000 ____D C:\Program Files\Microsoft Office
2021-10-13 14:07 - 2021-03-09 17:35 - 000000000 ____D C:\Windows\system32\SleepStudy
==================== SigCheckExt =========================
2021-10-17 01:03 - 2021-10-17 01:03 - 002310656 _____ (Farbar) C:\Users\FILMY\Downloads\FRST64(1).exe
2021-10-17 00:39 - 2021-10-17 00:39 - 000209920 _____ (Microsoft Corporation) C:\Users\FILMY\Downloads\SpeechRuntime.exe
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Desktop\FRST64.exe
2021-10-17 04:04 - 2021-10-17 04:04 - 002310656 _____ (Farbar) C:\Users\Lucka\Downloads\FRST64.exe
2021-05-15 20:04 - 2021-05-15 20:04 - 068718480 _____ (XBMC Foundation) C:\Users\Lucka\Downloads\kodi-19.1-Matrix-x64.exe
2021-10-17 02:51 - 2021-10-17 02:51 - 027597604 _____ (The qBittorrent project) C:\Users\Lucka\Downloads\qbittorrent_4.3.8_x64_setup.exe
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== BCD ================================
Firmware Boot Manager
---------------------
identifier {fwbootmgr}
displayorder {bootmgr}
{7939345e-80ec-11eb-b3da-e9be631b9e3a}
{7939345f-80ec-11eb-b3da-e9be631b9e3a}
{79393460-80ec-11eb-b3da-e9be631b9e3a}
{4d79cf34-80f2-11eb-b7a4-806e6f6e6963}
{4d79cf35-80f2-11eb-b7a4-806e6f6e6963}
{4d79cf36-80f2-11eb-b7a4-806e6f6e6963}
timeout 0
Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale cs-CZ
inherit {globalsettings}
default {current}
resumeobject {79393462-80ec-11eb-b3da-e9be631b9e3a}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Firmware Application (101fffff)
-------------------------------
identifier {4d79cf34-80f2-11eb-b7a4-806e6f6e6963}
description UEFI:CD/DVD Drive
Firmware Application (101fffff)
-------------------------------
identifier {4d79cf35-80f2-11eb-b7a4-806e6f6e6963}
description UEFI:Removable Device
Firmware Application (101fffff)
-------------------------------
identifier {4d79cf36-80f2-11eb-b7a4-806e6f6e6963}
description UEFI:Network Device
Firmware Application (101fffff)
-------------------------------
identifier {7939345e-80ec-11eb-b3da-e9be631b9e3a}
description UEFI: PXE IP4 Realtek PCIe GBE Family Controller
Firmware Application (101fffff)
-------------------------------
identifier {7939345f-80ec-11eb-b3da-e9be631b9e3a}
description UEFI: PXE IP6 Realtek PCIe GBE Family Controller
Firmware Application (101fffff)
-------------------------------
identifier {79393460-80ec-11eb-b3da-e9be631b9e3a}
description ajkasdak
Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \Windows\system32\winload.efi
description Windows 10
locale cs-CZ
inherit {bootloadersettings}
recoverysequence {79393464-80ec-11eb-b3da-e9be631b9e3a}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \Windows
resumeobject {79393462-80ec-11eb-b3da-e9be631b9e3a}
nx OptIn
bootmenupolicy Standard
Windows Boot Loader
-------------------
identifier {79393464-80ec-11eb-b3da-e9be631b9e3a}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{79393465-80ec-11eb-b3da-e9be631b9e3a}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale cs-cz
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{79393465-80ec-11eb-b3da-e9be631b9e3a}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Resume from Hibernate
---------------------
identifier {79393462-80ec-11eb-b3da-e9be631b9e3a}
device partition=C:
path \Windows\system32\winresume.efi
description Windows Resume Application
locale cs-CZ
inherit {resumeloadersettings}
recoverysequence {79393464-80ec-11eb-b3da-e9be631b9e3a}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostika pamŘti syst‚mu Windows
locale cs-CZ
inherit {globalsettings}
badmemoryaccess Yes
EMS Settings
------------
identifier {emssettings}
bootems No
Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Local
RAM Defects
-----------
identifier {badmemory}
Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}
Device options
--------------
identifier {79393465-80ec-11eb-b3da-e9be631b9e3a}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-10-2021
Ran by Lucka (17-10-2021 04:06:49)
Running from C:\Users\Lucka\Desktop
Microsoft Windows 10 Home Version 2004 19041.1288 (X64) (2021-03-09 15:37:29)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2630502808-4281536773-769976474-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2630502808-4281536773-769976474-503 - Limited - Disabled)
FILMY (S-1-5-21-2630502808-4281536773-769976474-1002 - Limited - Enabled) => C:\Users\FILMY
Guest (S-1-5-21-2630502808-4281536773-769976474-501 - Limited - Disabled)
Lucka (S-1-5-21-2630502808-4281536773-769976474-1001 - Administrator - Enabled) => C:\Users\Lucka
WDAGUtilityAccount (S-1-5-21-2630502808-4281536773-769976474-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Reader XI - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 5.85 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 94.0.4606.81 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Kodi (HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\Kodi) (Version: 19.1.0.0 - XBMC Foundation)
Microsoft Office Professional Plus 2019 - cs-cz (HKLM\...\Proplus2019Retail - cs-cz) (Version: 16.0.14430.20270 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\OneDriveSetup.exe) (Version: 21.196.0921.0007 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2630502808-4281536773-769976474-1002\...\OneDriveSetup.exe) (Version: 21.196.0921.0007 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29914 (HKLM-x32\...\{43d1ce82-6f55-4860-a938-20e5deb28b98}) (Version: 14.28.29914.0 - Microsoft Corporation)
NVIDIA Ovladače grafiky 462.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 462.31 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20270 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20270 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.22.3 - TeamViewer)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 10.00 - Ghisler Software GmbH)
Packages:
=========
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_131.1.242.0_x64__v10z8vjag6ke6 [2021-10-16] (HP Inc.)
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2021-10-16] (INTEL CORP)
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.0.22.0_x64__qmba6cd70vzyy [2021-10-16] (ASUSTeK COMPUTER INC.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-10-16] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.20.238.0_x64__dt26b99r8h8gj [2021-10-16] (Realtek Semiconductor Corp)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvam.inf_amd64_cee7dc15b63c43f2\nvshext.dll [2021-04-29] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
HKU\S-1-5-21-2630502808-4281536773-769976474-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896
HKU\S-1-5-21-2630502808-4281536773-769976474-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IESR02
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IESR02
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IE11SR
SearchScopes: HKU\S-1-5-21-2630502808-4281536773-769976474-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src ... ORM=IE11SR
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-13] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2021-03-09 17:59 - 000000864 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 license.piriform.com
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img2.jpg
HKU\S-1-5-21-2630502808-4281536773-769976474-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 10.0.1.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-2630502808-4281536773-769976474-1001\...\StartupApproved\Run: => "NetworkResetPostReboot"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{5E2AADF1-8711-4B6A-9985-78A780789B76}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{DDCC0467-52B3-4EA3-AC47-F6D55EF0413C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F862AED9-7ED5-46DE-B009-670D67CF980D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D9ED8FD6-90A3-4E17-82E2-69503BC73D7F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6CD6913D-E3CA-4097-B625-FDF827D63F8B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{6691AB94-32B0-4CB0-8CFC-030D3AE3BAF4}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [UDP Query User{82ED00D1-B482-43F0-9623-24559B74B55A}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [File not signed]
FirewallRules: [{260A1ED5-2A08-4E85-86EC-5DDB2DC41CEB}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9A13F5B7-DB60-4F95-9DB0-FD091B1D5343}] => (Allow) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{0762FBFA-7594-4F4E-8726-9DC57F01EF89}] => (Allow) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_74be8ed024c977b8\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{D4266C4D-450B-42F8-A308-758D2E77AA42}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B76DFD27-355E-4C57-9532-845336D3CD40}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B41BBC75-8CE5-4A0F-82A0-F2B0078E335B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{DB33DE99-33D6-4FB8-A112-D99C78028AF7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{1EBFC61A-90DF-4BAE-BC26-A6AF4B4E5F39}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{1F35D1DA-AB5C-42D8-B5B4-2BD48B5B07CA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5BDFF847-7D1E-4264-A40B-DA23D5D22817}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{E07F405D-1177-43EC-B92A-9C0EC37510AF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C8E5451C-D493-4F1E-AD4E-CFC71A714ACC}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:85.21 GB) (Free:44.39 GB) (52%)
==================== Faulty Device Manager Devices ============
Name: Intel(R) Wireless Bluetooth(R)
Description: Intel(R) Wireless Bluetooth(R)
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Intel Corporation
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: ========================
Application errors:
==================
Error: (10/17/2021 02:57:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utweb.exe, verze: 1.2.3.3775, časové razítko: 0x60ff0267
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.1288, časové razítko: 0x027db076
Kód výjimky: 0xc0000005
Posun chyby: 0x0005f583
ID chybujícího procesu: 0x3258
Čas spuštění chybující aplikace: 0x01d7c2f0cb538c2a
Cesta k chybující aplikaci: C:\Users\Lucka\AppData\Roaming\uTorrent Web\utweb.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 8b5f5830-2e4d-435d-aeee-b91d160be27f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (10/17/2021 02:40:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:36:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:34:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:32:26 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Nelze otevřít objekt výkonu služby přesměrovače. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (10/17/2021 02:32:26 AM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Pokus získat stav uzlu clusteru se nezdařil. Vrácený kód chyby: 0x8007085A
Error: (10/17/2021 01:18:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: RemovalToolGUI.exe, verze: 0.0.0.0, časové razítko: 0x614aede7
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.1288, časové razítko: 0xa280d1d6
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000ff199
ID chybujícího procesu: 0xae4
Čas spuštění chybující aplikace: 0x01d7c2e2ecfc48d4
Cesta k chybující aplikaci: C:\Users\Lucka\AppData\Local\Temp\BDRansomDecryptor\RemovalToolGUI.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 818e24d2-2c2f-4c83-b426-435749a59d8a
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (10/16/2021 08:07:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: WLANExt.exe, verze: 10.0.19041.1, časové razítko: 0x45c477dd
Název chybujícího modulu: ntdll.dll, verze: 10.0.19041.1288, časové razítko: 0xa280d1d6
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000063416
ID chybujícího procesu: 0xc7c
Čas spuštění chybující aplikace: 0x01d7c2130262171d
Cesta k chybující aplikaci: C:\Windows\system32\WLANExt.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: f2ac8df7-8228-4817-8d96-b51197947654
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (10/17/2021 03:24:19 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:17:40 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge.AppXeb42j1vh6rk395pm0vmcx57dxqjhej5d.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:17:39 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge.AppXeb42j1vh6rk395pm0vmcx57dxqjhej5d.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:15:54 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge.AppXeb42j1vh6rk395pm0vmcx57dxqjhej5d.mca jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:09:27 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 03:08:19 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba MozillaMaintenance byla ukončena s následující chybou:
Nesprávná funkce.
Error: (10/17/2021 03:06:38 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
Error: (10/17/2021 02:59:03 AM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-V4TD8T6)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Windows Defender:
================
Date: 2021-10-16 23:27:20
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {F5F8E822-9C99-4BF2-A816-3D9AD3D3D154}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-17 10:25:12
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {B54EEECE-9EEB-461B-A274-22EDE555164B}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-12 11:48:18
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {5FB0D15B-690C-4588-A28A-254478C7C55A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-06 09:22:00
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {BD898887-842F-4E5C-9BBC-0E9CAB9B713E}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-08-01 17:55:16
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {B409F797-5783-4DEE-A46E-BF5CC8A790AE}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2021-10-16 00:21:03
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.351.488.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.18600.4
Kód chyby: 0x800706f7
Popis chyby: Zástupná procedura obdržela chybná data.
Date: 2021-06-29 18:44:15
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1610.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
Date: 2021-06-29 18:44:15
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1610.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
Date: 2021-06-29 18:44:15
Description:
Program Antivirová ochrana v programu Microsoft Defender zjistil chybu při pokusu o aktualizaci modulu
Nová verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Uživatel: NT AUTHORITY\SYSTEM
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
Date: 2021-06-29 11:07:11
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací: 1.343.25.0
Předchozí verze bezpečnostních informací: 1.341.1610.0
Zdroj aktualizace: Uživatel
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Delta
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu: 1.1.18300.4
Předchozí verze modulu: 1.1.18200.4
Kód chyby: 0x80070666
Popis chyby: Již je nainstalována jiná verze tohoto produktu. Instalaci této verze nelze dokončit. Chcete-li znovu nakonfigurovat nebo odebrat existující verzi produktu, použijte ovládací panel Přidat nebo odebrat programy.
==================== Memory info ===========================
BIOS: American Megatrends Inc. X571GD.309 12/17/2020
Motherboard: ASUSTeK COMPUTER INC. X571GD
Processor: Intel(R) Core(TM) i5-8300H CPU @ 2.30GHz
Percentage of memory in use: 51%
Total physical RAM: 8044.5 MB
Available physical RAM: 3884.34 MB
Total Virtual: 9324.5 MB
Available Virtual: 4488.23 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:85.21 GB) (Free:44.39 GB) NTFS
Drive d: (DATA) (Fixed) (Total:390.62 GB) (Free:390 GB) NTFS
\\?\Volume{ffadabea-81c9-49a2-884c-c5ca5dfdbd1d}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{5d217be8-b60b-4ebb-833a-d7f1980e89d5}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{68242f5f-f36b-4a38-85d0-8ed584ac92e1}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 4A1C1A6F)
Partition: GPT.
==================== End of Addition.txt =======================
