VIRY.CZ

Dobrý den, mé sousedce vyskakuje chybová hláška z předmětu během běžného užívání notebooku. Prosím o kontrolu logu, děkuji

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-11-2021
Ran by Dagmar Hořelicová (administrator) on ASUS_NOTEBOOK (ASUSTeK Computer Inc. K52F) (07-11-2021 14:19:21)
Running from C:\Users\Dagmar Hořelicová\Desktop
Loaded Profiles: Dagmar Hořelicová
: Microsoft Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Windows\AsScrPro.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUSTeK Computer Inc. -> ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK) [File not signed] C:\Windows\SysWOW64\ACEngSvr.exe
(ATK) [File not signed] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(CyberLink -> CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmpl.exe
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmw.exe
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmwj.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (No File)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] (Conexant Systems, Inc. -> )
HKLM\...\Run: [Setwallpaper] => c:\programdata\SetWallpaper.cmd (No File)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-03] (ASUSTeK Computer Inc. -> ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUSTeK Computer Inc. -> ASUS)
HKLM-x32\...\Run: [DocuPrint M1400 RUN] => C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmRun.exe [361952 2011-04-27] (SEIKO EPSON Corporation -> )
HKLM-x32\...\Run: [StatusAutoRunM1400] => "C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmpl.exe" EPSON AL-M1400,hide,\S (No File)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [706800 2021-09-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-915393474-1160518499-4052236333-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> none
HKLM\...\Windows x64\Print Processors\sehr4apps: C:\Windows\System32\spool\prtprocs\x64\sehr4apps.dll [32768 2011-04-22] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON AL-M1400 Language Monitor: C:\Windows\system32\sehr4aLM.DLL [23040 2011-04-22] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.69\Installer\chrmstp.exe [2021-11-05] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2021-09-09] (Adobe Inc. -> Adobe Systems, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2010-03-12] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-10-09]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0C30BBEC-2899-4426-9A70-E359F32E0A52} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{F292C7E7-EACB-4E79-AEDD-1DABF27CF184}.exe <==== ATTENTION
Task: {2C9E7E45-9C50-4C0E-825D-2908F0F55D89} - System32\Tasks\{22BFEAA0-96C7-4917-8FD8-3CCFB122D53C} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.5.0.124/en/a ... d;disabled
Task: {2F391B97-5D2E-4B11-8F2F-275F2F1F3037} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [684544 2009-07-23] (ATK) [File not signed]
Task: {420B9A64-713B-4D4E-9E78-3D46DB1BC4F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
Task: {48D67CC6-AC73-4F4E-9FF9-455063845315} - System32\Tasks\Games\UpdateCheck_S-1-5-21-915393474-1160518499-4052236333-1001 => {CA22F5B1-E06F-4A2B-94FC-21E87FE53781} C:\Windows\System32\gameux.dll [2746368 2012-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {5C3BC5A8-0402-468E-A1E7-1D0E8AF51AE9} - System32\Tasks\{FE6B232F-38BF-47D7-8B5F-DC1B15F720F1} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar
Task: {62F66DD3-CFEC-401D-ADF5-BC95CF9F9934} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2648424 2021-11-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {75EEE86A-2CFF-4729-B352-31D9C509AF8F} - System32\Tasks\{866FBEDE-93C9-42E9-84DD-CEC603E6AC6C} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar
Task: {A947C995-3430-40BC-A562-436F665450A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
Task: {B9623EFC-5C3A-42D1-B2EC-012E31D69F3C} - System32\Tasks\{BEEFDA39-079D-4FFD-9B10-5602153EC11D} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.3.0.111/cs/g ... Error=1618
Task: {E2A7FFBF-8EAA-4245-BD13-20093D3EBCCC} - System32\Tasks\{2BE874B8-18FC-49DE-A682-EFAC2A50754B} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar
Task: {E3D603E8-6F0F-4653-A9F8-13FB98190125} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe
Task: {EAA548A0-E864-4B9B-9675-2344E99645E1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {F9EB1669-E187-43AD-8C16-0B002223D750} - System32\Tasks\{7409E312-8922-48B7-80A7-934371A4F30A} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.40.0.103/et ... age=tsMain
Task: {FBDBB95E-5D16-4F9B-B5FC-30E3CC69122D} - System32\Tasks\{415B0678-798F-4163-AEEF-43739C13866E} => "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/7.4.0.102/en/g ... Error=1618
Task: {FD2E35EC-84E5-4E90-9806-BE671ACBFCF0} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [339072 2010-05-28] (ASUSTeK Computer Inc. -> ATK)
Task: {FFDC257B-F0D5-4848-8AE0-1281F4A210A4} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUSTeK Computer Inc. -> ASUS)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{F292C7E7-EACB-4E79-AEDD-1DABF27CF184}.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ATTENTION (Restriction - Zones)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22188CE7-26C1-4C08-94AC-675EFAF80A15}: [DhcpNameServer] 10.0.0.138

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Dagmar Hořelicová\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-18]
Edge HomePage: Default -> hxxps://www.seznam.cz/

FireFox:
========
FF ProfilePath: C:\Users\Dagmar Hořelicová\AppData\Roaming\Mozilla\Firefox\Profiles\Fo14BbCu.default [2019-02-25]
FF Extension: (Avira Browser Safety) - C:\Users\Dagmar Hořelicová\AppData\Roaming\Mozilla\Firefox\Profiles\Fo14BbCu.default\Extensions\abs@avira.com [2019-02-25] [hxxps://download.avira.com/package/absnooffers/firefox/update_webext_no_offers.rdf]
FF Extension: (Avira Password Manager) - C:\Users\Dagmar Hořelicová\AppData\Roaming\Mozilla\Firefox\Profiles\Fo14BbCu.default\Extensions\passwordmanager@avira.com [2019-02-25]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\17.3.0.49 => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2008-12-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default [2021-11-07]
CHR Notifications: Default -> hxxps://www.postazdarma.cz
CHR Extension: (Prezentace) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-07-29]
CHR Extension: (Dokumenty) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-07-29]
CHR Extension: (Disk Google) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-07-29]
CHR Extension: (Avira Password Manager) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2021-11-05]
CHR Extension: (Tabulky) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-07-29]
CHR Extension: (Avira Browser Safety) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2021-11-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-22]
CHR Extension: (Skype) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2019-07-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1206648 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [485048 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [485048 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [574672 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [631008 2021-09-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-10-01] (Intel Corporation) [File not signed]
R2 SENADB; C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe [101336 2011-04-27] (SEIKO EPSON Corporation -> )
R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-10-01] (Intel Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\DRIVERS\athrx.sys [1594368 2010-03-02] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [68152 2019-06-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [221600 2021-11-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [177112 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36072 2019-02-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2019-02-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [35376 2019-02-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [129024 2010-07-21] (Microsoft Windows Hardware Compatibility Publisher -> ELAN Microelectronic Corp.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] (ASUSTeK Computer Inc. -> )
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2020-01-08] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] (SONIX TECHNOLOGY CO. , LTD -> )
U3 tmlwf; no ImagePath
U3 tmwfp; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-07 14:19 - 2021-11-07 14:20 - 000020455 _____ C:\Users\Dagmar Hořelicová\Desktop\FRST.txt
2021-11-07 14:18 - 2021-11-07 14:20 - 000000000 ____D C:\FRST
2021-11-07 14:15 - 2021-11-07 14:15 - 002312192 _____ (Farbar) C:\Users\Dagmar Hořelicová\Desktop\FRST64.exe
2021-11-07 14:10 - 2021-11-07 14:10 - 000007606 _____ C:\Users\Dagmar Hořelicová\AppData\Local\Resmon.ResmonCfg

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-07 14:16 - 2009-07-14 05:45 - 000022592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-11-07 14:16 - 2009-07-14 05:45 - 000022592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-11-07 14:14 - 2010-10-09 16:35 - 000000000 ____D C:\Program Files (x86)\Google
2021-11-07 13:49 - 2020-06-26 14:57 - 000002223 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-11-07 13:35 - 2013-06-06 16:13 - 000000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2021-11-07 13:35 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-11-05 12:57 - 2019-07-29 17:41 - 000002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-11-05 12:57 - 2010-10-09 16:35 - 000002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-11-03 16:08 - 2009-08-03 21:00 - 000669584 _____ C:\Windows\system32\perfh005.dat
2021-11-03 16:08 - 2009-08-03 21:00 - 000141954 _____ C:\Windows\system32\perfc005.dat
2021-11-03 16:08 - 2009-07-14 06:13 - 001586242 _____ C:\Windows\system32\PerfStringBackup.INI
2021-11-03 16:08 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2021-11-03 16:07 - 2019-02-25 20:29 - 000221600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2021-10-30 12:16 - 2011-05-24 06:00 - 000000000 ____D C:\Users\Dagmar Hořelicová\Desktop\DAZDE
2021-10-30 12:16 - 2011-05-07 16:49 - 000000000 ____D C:\Users\Dagmar Hořelicová\AppData\Roaming\SoftGrid Client
2021-10-17 09:50 - 2019-02-25 20:29 - 000003292 _____ C:\Windows\system32\Tasks\Avira_Antivirus_Systray
2021-10-16 18:23 - 2009-07-14 06:08 - 000032578 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2021-10-15 19:53 - 2015-08-17 17:40 - 000002061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-10-13 10:46 - 2013-08-16 15:58 - 000000000 ____D C:\Windows\system32\MRT
2021-10-13 10:41 - 2011-05-07 15:35 - 139806512 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-10-10 10:07 - 2020-10-29 09:43 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6ad4c6aa22d60
2021-10-10 10:07 - 2020-06-26 14:56 - 000003484 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

==================== Files in the root of some directories ========

2021-11-07 14:10 - 2021-11-07 14:10 - 000007606 _____ () C:\Users\Dagmar Hořelicová\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2021-11-05 16:00
==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-11-2021
Ran by Dagmar Hořelicová (07-11-2021 14:22:45)
Running from C:\Users\Dagmar Hořelicová\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X64) (2011-05-07 19:46:39)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-915393474-1160518499-4052236333-500 - Administrator - Disabled)
Dagmar Hořelicová (S-1-5-21-915393474-1160518499-4052236333-1001 - Administrator - Enabled) => C:\Users\Dagmar Hořelicová
Guest (S-1-5-21-915393474-1160518499-4052236333-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-915393474-1160518499-4052236333-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {AC17F611-00B5-72DF-E540-58FE9912ECC8}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {177617F5-268F-7D51-DFF0-638CE295A675}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.007.20099 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.3.181.14 - Adobe Systems Incorporated)
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.0.32.18 - Adobe Systems Incorporated)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.37 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0006 - ASUS)
Avira (HKLM-x32\...\{6156e18b-c7ce-48c3-bc6d-d09fade03fd3}) (Version: 1.2.158.786 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{9754C7FC-FBAA-4ABF-8BC9-1B101D079104}) (Version: 1.2.158.786 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.2110.2123 - Avira Operations GmbH & Co. KG)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.111.0.63 - Conexant)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
EPSON AcuLaser M1400 (HKLM-x32\...\{95057EEB-7CC5-4EFF-BCC3-8F7613F8788A}) (Version: 1.004.00 - EPSON) Hidden
EPSON AcuLaser M1400 (HKLM-x32\...\InstallShield_{95057EEB-7CC5-4EFF-BCC3-8F7613F8788A}) (Version: 1.004.00 - EPSON)
ETDWare PS/2-x64 7.0.5.13_WHQL (HKLM\...\Elantech) (Version: 7.0.5.13 - ELAN Microelectronics Corp.)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.6 - ASUS)
ffdshow v1.1.3828 [2011-04-26] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.3828.0 - )
ffdshow x64 v1.1.3836 [2011-05-02] (HKLM\...\ffdshow64_is1) (Version: 1.1.3836.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 95.0.4638.69 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.2.183.13 - Google Inc.) Hidden
Harry Potter (HKLM-x32\...\{3F50AF3B-8997-4916-0095-99D63DDB785A}) (Version: - )
Harry Potter a ohnivý pohár™ (HKLM-x32\...\{9799BD05-5F89-484C-008E-F50592F53440}) (Version: - )
Harry Potter and the Prisoner of Azkaban(TM) (HKLM-x32\...\{A4CBCF09-0C7E-40AA-0080-34B8A5CFE7FA}) (Version: - )
Harry Potter II (HKLM-x32\...\{7BF68B83-5057-4D4B-0093-28285EEB9EE3}) (Version: - )
Choice Guard (HKLM-x32\...\{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}) (Version: 1.2.87.0 - Microsoft Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2125 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
Junk Mail filter update (HKLM-x32\...\{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}) (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 95.0.1020.44 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klikni a spusť 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1011 - Microsoft Corporation)
Microsoft Office Starter 2010 - čeština (HKLM-x32\...\{90140011-0066-0405-0000-0000000FF1CE}) (Version: 14.0.4763.1011 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0405-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nástroj pro odesílání služby Windows Live (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Nero BurnLite 10 (HKLM-x32\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM-x32\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Prohlížeč Seznam.cz (HKU\S-1-5-21-915393474-1160518499-4052236333-1001\...\Seznam Browser) (Version: 6.9.0 - Seznam.cz a.s.)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype verze 8.66 (HKLM-x32\...\Skype_is1) (Version: 8.66 - Skype Technologies S.A.)
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
USB 2.0 VGA UVC WebCam (HKLM\...\USB 2.0 VGA UVC WebCam) (Version: - )
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.5.600 - Broadcom Corporation)
Windows Driver Package - Broadcom (BTHUSB) Bluetooth (02/25/2010 6.2.0.9419) (HKLM\...\85CE3A3657FAE5FD305B143E90E6FC89BA53001C) (Version: 02/25/2010 6.2.0.9419 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (01/19/2010 6.2.0.1417) (HKLM\...\7341A1B43E7FE58942EB1E820A17C18305DFBCE6) (Version: 01/19/2010 6.2.0.1417 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (07/29/2009 6.1.7100.0) (HKLM\...\2AA10AB519DC7432D599A0E860206A7DDCC27764) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
WinRAR 4.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
Zoom (HKU\S-1-5-21-915393474-1160518499-4052236333-1001\...\ZoomUMX) (Version: 5.4.1 (58698.1027) - Zoom Video Communications, Inc.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-03-02] () [File not signed]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-03-02] () [File not signed]
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-03-02] () [File not signed]
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-03-02] () [File not signed]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-02-11] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-03-02] () [File not signed]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-03-02] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [92672 2011-05-02] () [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [80896 2011-03-18] () [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2008-10-01 07:02 - 2008-10-01 07:08 - 000011264 _____ () [File not signed] C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-01-11 18:27 - 2010-01-11 18:27 - 000017920 _____ () [File not signed] C:\Program Files\P4G\DevMng.dll
2010-05-06 02:22 - 2010-05-06 02:22 - 000108544 _____ () [File not signed] C:\Program Files\P4G\OvrClk.dll
2011-05-07 23:38 - 2011-03-02 11:40 - 000164864 _____ () [File not signed] C:\Program Files\WinRAR\rarext.dll
2010-10-09 16:46 - 2009-10-01 02:48 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2005-04-08 05:38 - 2009-07-09 23:43 - 000052736 _____ (ASUSTeK) [File not signed] C:\Program Files (x86)\ASUS\Splendid\Chameleon.dll
2005-06-03 09:39 - 2006-09-12 00:46 - 000035840 _____ (ASUSTek) [File not signed] C:\Program Files (x86)\ASUS\Splendid\OVS.dll
2010-10-09 16:46 - 2009-10-01 02:48 - 000077824 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\DTMessageLib.dll
2010-10-09 16:46 - 2009-10-01 02:45 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
2019-03-27 23:48 - 2019-03-27 23:48 - 000115200 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Windows\Microsoft.Net\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
2010-10-09 16:53 - 2010-10-09 16:53 - 001605120 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_8f16b0d88731ea9c\MFC80.DLL
2010-10-09 16:53 - 2010-10-09 16:53 - 001602560 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_8f16b0d88731ea9c\MFC80U.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Version 11) (Whitelisted) ==========

HKU\S-1-5-21-915393474-1160518499-4052236333-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.msn.com/?OCID=IE11FREDHP&PC=UF01
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={s ... lz=1I7ASUT
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll => No File
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssie.dll => No File
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll => No File
Toolbar: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-915393474-1160518499-4052236333-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Dagmar Hořelicová\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: BingSvc => C:\Users\Dagmar Hořelicová\AppData\Local\Microsoft\BingSvc\BingSvc.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: LauncherM1400 => "C:\Program Files (x86)\EPSON_P2B\Printer Software\Launcher\selaunch.exe" /S EPSON AL-M1400
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Skype for Desktop => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4B44450E-D9BF-489F-8F17-FA5C208A9C58}] => (Allow) LPort=5353
FirewallRules: [{26C69F8B-E182-4146-85E5-7E9DFA7D0D96}] => (Allow) LPort=8182
FirewallRules: [{E10BB01D-CF8E-46E7-A3D4-1C154BE40116}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CEF89218-A9ED-4CEA-AAB7-67CB338B2084}] => (Allow) C:\Windows\system32\svchost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{B324C2E4-7548-4AE2-BA7B-7A6017E7381E}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{45691B58-2AD4-446E-9A59-9D2CD67CE88A}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{C9FBC8B9-27C9-4898-AAC7-1B6CCC448C09}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe => No File
FirewallRules: [{EDDBB2CB-38FB-42E6-9098-C1C924F9262C}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{28D52839-1693-4534-A767-03A2013E82AD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{842C8302-E500-4A7A-9B99-BB982B38DF81}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{EEC647CD-049A-4B4A-A4AC-DEDC1E795181}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{BF12F5B5-771D-45CC-B3C8-CD0252F11EB5}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{A88DF7A9-E70B-4921-A108-A5B9F08EBC95}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{91E25613-C372-4A3A-9EF3-CB5B5CAE0A01}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{409A10DF-3930-4C0C-8AB4-FBA38F2768CD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{B4706554-76F3-4391-9D91-54D9B94672F8}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{82AEFF26-4A4A-4EFF-9804-54BF926F816C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{085DC724-2705-4B20-93BB-D67922B67412}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{9B546EFC-AF0F-40F8-987B-122C84688A35}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{BA1F26E1-3B30-4752-ABB3-60AF26F17A2F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{013B1DBC-1CF6-4B80-BD7E-F1C8083E919C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{B10D6A8C-BEA8-4E7E-B7D9-5DCE57BB433C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{31793ECE-ED50-44F9-872F-F184205B0D8C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{86B19720-1AB2-46AB-A0E1-759AFBB4A971}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{2BAA8A9E-38AD-463A-B665-3A29B172CDDF}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{57390FC8-7D11-4359-A3F8-4D5990790897}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{B6626C55-BE07-4069-8A19-0659E1C4B1AE}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{64E9E72D-8A8B-486F-B988-71E78D28A2FC}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{382782D7-3645-46A2-BB38-C6B5BE08E9FA}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{2C359D8B-A626-46D9-9641-B61FC5D5C19D}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EE928B3A-BF9B-4A78-B486-DBA10DCAAD95}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FFB6FA67-C0B2-4A54-96E4-D1FD0FC2947E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

22-10-2021 13:48:11 Naplánovaný kontrolní bod
05-11-2021 16:07:41 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (11/07/2021 02:15:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: chrome.exe, verze: 95.0.4638.69, časové razítko: 0x6179e9ee
Název chybujícího modulu: chrome_elf.dll, verze: 95.0.4638.69, časové razítko: 0x6179e9ee
Kód výjimky: 0x80000003
Posun chyby: 0x0000000000041d48
ID chybujícího procesu: 0xbb4
Čas spuštění chybující aplikace: 0x01d7d3d9957b1942
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.69\chrome_elf.dll
ID zprávy: d6b10edc-3fcc-11ec-b684-74f06daa345a

Error: (11/07/2021 02:15:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: chrome.exe, verze: 95.0.4638.69, časové razítko: 0x6179e9ee
Název chybujícího modulu: chrome_elf.dll, verze: 95.0.4638.69, časové razítko: 0x6179e9ee
Kód výjimky: 0x80000003
Posun chyby: 0x0000000000041d48
ID chybujícího procesu: 0x6e4
Čas spuštění chybující aplikace: 0x01d7d3d99430ba1b
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.69\chrome_elf.dll
ID zprávy: d6b0e7cc-3fcc-11ec-b684-74f06daa345a

Error: (11/07/2021 01:46:05 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/05/2021 03:02:27 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/05/2021 12:36:04 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/05/2021 12:11:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: setup.exe_Google Chrome Installer, verze: 95.0.4638.54, časové razítko: 0x616a1815
Název chybujícího modulu: setup.exe, verze: 95.0.4638.54, časové razítko: 0x616a1815
Kód výjimky: 0x80000003
Posun chyby: 0x00000000000a9c7b
ID chybujícího procesu: 0x5b4
Čas spuštění chybující aplikace: 0x01d7d235ec45eff9
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.54\Installer\setup.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.54\Installer\setup.exe
ID zprávy: 2cd3470c-3e29-11ec-b02c-74f06daa345a

Error: (11/05/2021 12:09:44 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/03/2021 04:06:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program chrome.exe verze 95.0.4638.54 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: f1c

Čas spuštění: 01d7d0c3e207eb4b

Čas ukončení: 37

Cesta k aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

ID hlášení: 81586eeb-3cb7-11ec-a10d-74f06daa345a


System errors:
=============
Error: (11/07/2021 02:26:22 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {BB6DF56B-CACE-11DC-9992-0019B93A3A84} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/07/2021 01:38:18 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: Služba WMPNetworkSvc nebyla spuštěna správně, protože u funkce CoCreateInstance (CLSID_UPnPDeviceFinder) došlo k chybě 0x80004005. Zkontrolujte, zda je spuštěná služba UPnPHost a zda je správně nainstalována součást systému Windows UPnPHost.

Error: (11/07/2021 01:34:28 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/06/2021 03:14:54 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/05/2021 04:45:32 PM) (Source: ACPI) (EventID: 10) (User: )
Description: ACPI: Systém ACPI BIOS se pokouší o zápis do neplatné provozní oblasti PCI (0x4). Obraťte se na prodejce systému s žádostí o odbornou pomoc.

Error: (11/05/2021 04:45:32 PM) (Source: ACPI) (EventID: 10) (User: )
Description: ACPI: Systém ACPI BIOS se pokouší o zápis do neplatné provozní oblasti PCI (0x4). Obraťte se na prodejce systému s žádostí o odbornou pomoc.

Error: (11/05/2021 02:51:36 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/05/2021 12:50:48 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.


==================== Memory info ===========================

BIOS: American Megatrends Inc. K52F.210 08/30/2010
Motherboard: ASUSTeK Computer Inc. K52F
Processor: Intel(R) Pentium(R) CPU P6100 @ 2.00GHz
Percentage of memory in use: 76%
Total physical RAM: 3884.57 MB
Available physical RAM: 924.8 MB
Total Virtual: 3882.71 MB
Available Virtual: 844.54 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:45.15 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (DATA) (Fixed) (Total:329.79 GB) (Free:326.64 GB) NTFS
Drive q: () (Fixed) (Total:0 GB) (Free:0 GB)


==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: E0C5913D)
Partition 1: (Not Active) - (Size=19.5 GB) - (Type=1C)
Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=329.8 GB) - (Type=0F Extended)

==================== End of Addition.txt =======================

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build: 06-29-2021
# Database: 2021-10-26.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 11-08-2021
# Duration: 00:00:15
# OS: Windows 7 Home Premium
# Cleaned: 41
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\ProgramData\Partner
Deleted C:\Users\Dagmar Hořelicová\AppData\Local\Seznam.cz
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG Secure Search

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\System32\Tasks\AVG-SECURE-SEARCH-UPDATE_JUNE2013_TB_RMV
Deleted C:\Windows\Tasks\AVG-SECURE-SEARCH-UPDATE_JUNE2013_TB_RMV.JOB

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{21FA44EF-376D-4D53-9B0F-8A89D3229068}
Deleted HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKCU\Software\Seznam.cz
Deleted HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C30BBEC-2899-4426-9A70-E359F32E0A52}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG-SECURE-SEARCH-UPDATE_JUNE2013_TB_RMV
Deleted HKLM\Software\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKLM\Software\Classes\Search.BrowserWndAPI
Deleted HKLM\Software\Classes\Search.PugiObj
Deleted HKLM\Software\Classes\Search.PugiObj.1
Deleted HKLM\Software\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Deleted HKLM\Software\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\ScriptHelper.EXE
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{0C1284BA-4F3A-41C6-94B5-77446F5948A9}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKU\.DEFAULT\Software\AVG Secure Search
Deleted HKU\.DEFAULT\Software\IGearSettings
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKU\S-1-5-18\Software\AVG Secure Search
Deleted HKU\S-1-5-18\Software\IGearSettings
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [7382 octets] - [08/11/2021 11:17:20]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

OK. Dejte nové logy FRST+Addition.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09-11-2021
Ran by Dagmar Hořelicová (administrator) on ASUS_NOTEBOOK (ASUSTeK Computer Inc. K52F) (10-11-2021 11:18:28)
Running from C:\Users\Dagmar Hořelicová\Desktop
Loaded Profiles: Dagmar Hořelicová
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Windows\AsScrPro.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUSTeK Computer Inc. -> ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK) [File not signed] C:\Windows\SysWOW64\ACEngSvr.exe
(ATK) [File not signed] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\update.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(CyberLink -> CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmpl.exe
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmw.exe
(SEIKO EPSON Corporation -> ) C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmwj.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe (No File)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] (Conexant Systems, Inc. -> )
HKLM\...\Run: [Setwallpaper] => c:\programdata\SetWallpaper.cmd (No File)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-03] (ASUSTeK Computer Inc. -> ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUSTeK Computer Inc. -> ASUS)
HKLM-x32\...\Run: [DocuPrint M1400 RUN] => C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmRun.exe [361952 2011-04-27] (SEIKO EPSON Corporation -> )
HKLM-x32\...\Run: [StatusAutoRunM1400] => "C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmpl.exe" EPSON AL-M1400,hide,\S (No File)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [706800 2021-09-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-915393474-1160518499-4052236333-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> none
HKLM\...\Windows x64\Print Processors\sehr4apps: C:\Windows\System32\spool\prtprocs\x64\sehr4apps.dll [32768 2011-04-22] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON AL-M1400 Language Monitor: C:\Windows\system32\sehr4aLM.DLL [23040 2011-04-22] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.69\Installer\chrmstp.exe [2021-11-05] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2021-09-09] (Adobe Inc. -> Adobe Systems, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2010-03-12] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-10-09]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2C9E7E45-9C50-4C0E-825D-2908F0F55D89} - System32\Tasks\{22BFEAA0-96C7-4917-8FD8-3CCFB122D53C} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.5.0.124/en/a ... d;disabled hxxp://ui.skype.com/ui/0/5.5.0.124/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled (No File)
Task: {2F391B97-5D2E-4B11-8F2F-275F2F1F3037} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [684544 2009-07-23] (ATK) [File not signed]
Task: {420B9A64-713B-4D4E-9E78-3D46DB1BC4F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
Task: {48D67CC6-AC73-4F4E-9FF9-455063845315} - System32\Tasks\Games\UpdateCheck_S-1-5-21-915393474-1160518499-4052236333-1001 => {CA22F5B1-E06F-4A2B-94FC-21E87FE53781} C:\Windows\System32\gameux.dll [2746368 2012-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {5C3BC5A8-0402-468E-A1E7-1D0E8AF51AE9} - System32\Tasks\{FE6B232F-38BF-47D7-8B5F-DC1B15F720F1} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar hxxps://ui.skype.com/ui/0/7.36.0.101/en/abandoninstall?page=tsProgressBar (No File)
Task: {62F66DD3-CFEC-401D-ADF5-BC95CF9F9934} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2648424 2021-11-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {75EEE86A-2CFF-4729-B352-31D9C509AF8F} - System32\Tasks\{866FBEDE-93C9-42E9-84DD-CEC603E6AC6C} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar hxxps://ui.skype.com/ui/0/7.36.0.101/en/abandoninstall?page=tsProgressBar (No File)
Task: {A947C995-3430-40BC-A562-436F665450A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
Task: {B9623EFC-5C3A-42D1-B2EC-012E31D69F3C} - System32\Tasks\{BEEFDA39-079D-4FFD-9B10-5602153EC11D} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.3.0.111/cs/g ... Error=1618 hxxp://ui.skype.com/ui/0/5.3.0.111/cs/go/help.faq.installer?LastError=1618 (No File)
Task: {E2A7FFBF-8EAA-4245-BD13-20093D3EBCCC} - System32\Tasks\{2BE874B8-18FC-49DE-A682-EFAC2A50754B} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar hxxps://ui.skype.com/ui/0/7.36.0.101/en/abandoninstall?page=tsProgressBar (No File)
Task: {E3D603E8-6F0F-4653-A9F8-13FB98190125} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe Scan -ScheduleJob -RestrictPrivileges (No File)
Task: {EAA548A0-E864-4B9B-9675-2344E99645E1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {F9EB1669-E187-43AD-8C16-0B002223D750} - System32\Tasks\{7409E312-8922-48B7-80A7-934371A4F30A} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.40.0.103/et ... age=tsMain hxxps://ui.skype.com/ui/0/7.40.0.103/et/abandoninstall?source=lightinstaller&page=tsMain (No File)
Task: {FBDBB95E-5D16-4F9B-B5FC-30E3CC69122D} - System32\Tasks\{415B0678-798F-4163-AEEF-43739C13866E} => "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/7.4.0.102/en/g ... Error=1618 hxxp://ui.skype.com/ui/0/7.4.0.102/en/go/help.faq.installer?LastError=1618 (No File)
Task: {FD2E35EC-84E5-4E90-9806-BE671ACBFCF0} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [339072 2010-05-28] (ASUSTeK Computer Inc. -> ATK)
Task: {FFDC257B-F0D5-4848-8AE0-1281F4A210A4} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUSTeK Computer Inc. -> ASUS)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ATTENTION (Restriction - Zones)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22188CE7-26C1-4C08-94AC-675EFAF80A15}: [DhcpNameServer] 10.0.0.138

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Dagmar Hořelicová\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-18]
Edge HomePage: Default -> hxxps://www.seznam.cz/

FireFox:
========
FF ProfilePath: C:\Users\Dagmar Hořelicová\AppData\Roaming\Mozilla\Firefox\Profiles\Fo14BbCu.default [2019-02-25]
FF Extension: (Avira Browser Safety) - C:\Users\Dagmar Hořelicová\AppData\Roaming\Mozilla\Firefox\Profiles\Fo14BbCu.default\Extensions\abs@avira.com [2019-02-25] [hxxps://download.avira.com/package/absnooffers/firefox/update_webext_no_offers.rdf]
FF Extension: (Avira Password Manager) - C:\Users\Dagmar Hořelicová\AppData\Roaming\Mozilla\Firefox\Profiles\Fo14BbCu.default\Extensions\passwordmanager@avira.com [2019-02-25]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\17.3.0.49 => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2008-12-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default [2021-11-09]
CHR Notifications: Default -> hxxps://www.postazdarma.cz
CHR Extension: (Prezentace) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-07-29]
CHR Extension: (Dokumenty) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-07-29]
CHR Extension: (Disk Google) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-07-29]
CHR Extension: (Avira Password Manager) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2021-11-05]
CHR Extension: (Tabulky) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-07-29]
CHR Extension: (Avira Browser Safety) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2021-11-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-22]
CHR Extension: (Skype) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2019-07-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Dagmar Hořelicová\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1206648 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [485048 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [485048 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [574672 2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [631008 2021-09-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-10-01] (Intel Corporation) [File not signed]
R2 SENADB; C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\seksmdb.exe [101336 2011-04-27] (SEIKO EPSON Corporation -> )
R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-10-01] (Intel Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\DRIVERS\athrx.sys [1594368 2010-03-02] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [68152 2019-06-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [221600 2021-11-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [177112 2021-03-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [36072 2019-02-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2019-02-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [35376 2019-02-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [129024 2010-07-21] (Microsoft Windows Hardware Compatibility Publisher -> ELAN Microelectronic Corp.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] (ASUSTeK Computer Inc. -> )
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2020-01-08] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] (SONIX TECHNOLOGY CO. , LTD -> )
U3 tmlwf; no ImagePath
U3 tmwfp; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-10 11:18 - 2021-11-10 11:21 - 000021088 _____ C:\Users\Dagmar Hořelicová\Desktop\FRST.txt
2021-11-10 11:17 - 2021-11-10 11:17 - 000000000 ____D C:\Users\Dagmar Hořelicová\Desktop\FRST-OlderVersion
2021-11-08 11:16 - 2021-11-08 11:19 - 000000000 ____D C:\AdwCleaner
2021-11-08 11:14 - 2021-11-08 11:15 - 008553680 _____ (Malwarebytes) C:\Users\Dagmar Hořelicová\Desktop\adwcleaner_8.3.0.exe
2021-11-07 14:18 - 2021-11-10 11:20 - 000000000 ____D C:\FRST
2021-11-07 14:15 - 2021-11-10 11:17 - 002312192 _____ (Farbar) C:\Users\Dagmar Hořelicová\Desktop\FRST64.exe
2021-11-07 14:10 - 2021-11-07 14:10 - 000007606 _____ C:\Users\Dagmar Hořelicová\AppData\Local\Resmon.ResmonCfg

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-10 11:17 - 2010-10-09 16:35 - 000000000 ____D C:\Program Files (x86)\Google
2021-11-10 11:14 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-11-09 17:09 - 2009-07-14 05:45 - 000022592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-11-09 17:09 - 2009-07-14 05:45 - 000022592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-11-07 13:49 - 2020-06-26 14:57 - 000002223 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-11-05 12:57 - 2019-07-29 17:41 - 000002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-11-05 12:57 - 2010-10-09 16:35 - 000002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-11-03 16:08 - 2009-08-03 21:00 - 000669584 _____ C:\Windows\system32\perfh005.dat
2021-11-03 16:08 - 2009-08-03 21:00 - 000141954 _____ C:\Windows\system32\perfc005.dat
2021-11-03 16:08 - 2009-07-14 06:13 - 001586242 _____ C:\Windows\system32\PerfStringBackup.INI
2021-11-03 16:08 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2021-11-03 16:07 - 2019-02-25 20:29 - 000221600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2021-10-30 12:16 - 2011-05-24 06:00 - 000000000 ____D C:\Users\Dagmar Hořelicová\Desktop\DAZDE
2021-10-30 12:16 - 2011-05-07 16:49 - 000000000 ____D C:\Users\Dagmar Hořelicová\AppData\Roaming\SoftGrid Client
2021-10-17 09:50 - 2019-02-25 20:29 - 000003292 _____ C:\Windows\system32\Tasks\Avira_Antivirus_Systray
2021-10-16 18:23 - 2009-07-14 06:08 - 000032578 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2021-10-15 19:53 - 2015-08-17 17:40 - 000002061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-10-13 10:46 - 2013-08-16 15:58 - 000000000 ____D C:\Windows\system32\MRT
2021-10-13 10:41 - 2011-05-07 15:35 - 139806512 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories ========

2021-11-07 14:10 - 2021-11-07 14:10 - 000007606 _____ () C:\Users\Dagmar Hořelicová\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2021-11-05 16:00
==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-11-2021
Ran by Dagmar Hořelicová (10-11-2021 11:23:47)
Running from C:\Users\Dagmar Hořelicová\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X64) (2011-05-07 19:46:39)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-915393474-1160518499-4052236333-500 - Administrator - Disabled)
Dagmar Hořelicová (S-1-5-21-915393474-1160518499-4052236333-1001 - Administrator - Enabled) => C:\Users\Dagmar Hořelicová
Guest (S-1-5-21-915393474-1160518499-4052236333-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-915393474-1160518499-4052236333-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {AC17F611-00B5-72DF-E540-58FE9912ECC8}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {177617F5-268F-7D51-DFF0-638CE295A675}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.007.20099 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.3.181.14 - Adobe Systems Incorporated)
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.0.32.18 - Adobe Systems Incorporated)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.10 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.37 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0028 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0006 - ASUS)
Avira (HKLM-x32\...\{6156e18b-c7ce-48c3-bc6d-d09fade03fd3}) (Version: 1.2.158.786 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{9754C7FC-FBAA-4ABF-8BC9-1B101D079104}) (Version: 1.2.158.786 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.2110.2123 - Avira Operations GmbH & Co. KG)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.111.0.63 - Conexant)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
EPSON AcuLaser M1400 (HKLM-x32\...\{95057EEB-7CC5-4EFF-BCC3-8F7613F8788A}) (Version: 1.004.00 - EPSON) Hidden
EPSON AcuLaser M1400 (HKLM-x32\...\InstallShield_{95057EEB-7CC5-4EFF-BCC3-8F7613F8788A}) (Version: 1.004.00 - EPSON)
ETDWare PS/2-x64 7.0.5.13_WHQL (HKLM\...\Elantech) (Version: 7.0.5.13 - ELAN Microelectronics Corp.)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.6 - ASUS)
ffdshow v1.1.3828 [2011-04-26] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.3828.0 - )
ffdshow x64 v1.1.3836 [2011-05-02] (HKLM\...\ffdshow64_is1) (Version: 1.1.3836.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 95.0.4638.69 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.2.183.13 - Google Inc.) Hidden
Harry Potter (HKLM-x32\...\{3F50AF3B-8997-4916-0095-99D63DDB785A}) (Version: - )
Harry Potter a ohnivý pohár™ (HKLM-x32\...\{9799BD05-5F89-484C-008E-F50592F53440}) (Version: - )
Harry Potter and the Prisoner of Azkaban(TM) (HKLM-x32\...\{A4CBCF09-0C7E-40AA-0080-34B8A5CFE7FA}) (Version: - )
Harry Potter II (HKLM-x32\...\{7BF68B83-5057-4D4B-0093-28285EEB9EE3}) (Version: - )
Choice Guard (HKLM-x32\...\{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}) (Version: 1.2.87.0 - Microsoft Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2125 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
Junk Mail filter update (HKLM-x32\...\{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}) (Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 95.0.1020.44 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klikni a spusť 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1011 - Microsoft Corporation)
Microsoft Office Starter 2010 - čeština (HKLM-x32\...\{90140011-0066-0405-0000-0000000FF1CE}) (Version: 14.0.4763.1011 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0405-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nástroj pro odesílání služby Windows Live (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Nero BurnLite 10 (HKLM-x32\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM-x32\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Prohlížeč Seznam.cz (HKU\S-1-5-21-915393474-1160518499-4052236333-1001\...\Seznam Browser) (Version: 6.9.0 - Seznam.cz a.s.)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype verze 8.66 (HKLM-x32\...\Skype_is1) (Version: 8.66 - Skype Technologies S.A.)
Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
USB 2.0 VGA UVC WebCam (HKLM\...\USB 2.0 VGA UVC WebCam) (Version: - )
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.5.600 - Broadcom Corporation)
Windows Driver Package - Broadcom (BTHUSB) Bluetooth (02/25/2010 6.2.0.9419) (HKLM\...\85CE3A3657FAE5FD305B143E90E6FC89BA53001C) (Version: 02/25/2010 6.2.0.9419 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (01/19/2010 6.2.0.1417) (HKLM\...\7341A1B43E7FE58942EB1E820A17C18305DFBCE6) (Version: 01/19/2010 6.2.0.1417 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (07/29/2009 6.1.7100.0) (HKLM\...\2AA10AB519DC7432D599A0E860206A7DDCC27764) (Version: 07/29/2009 6.1.7100.0 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\6B6B5E96843E55CF5CF8C7E45FB457F1FE642FF1) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8050.1202 - Microsoft Corporation)
WinRAR 4.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
Zoom (HKU\S-1-5-21-915393474-1160518499-4052236333-1001\...\ZoomUMX) (Version: 5.4.1 (58698.1027) - Zoom Video Communications, Inc.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-03-02] () [File not signed]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-03-02] () [File not signed]
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-03-02] () [File not signed]
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-03-02] () [File not signed]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-02-11] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2021-07-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-03-02] () [File not signed]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-03-02] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [92672 2011-05-02] () [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [80896 2011-03-18] () [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2008-10-01 07:02 - 2008-10-01 07:08 - 000011264 _____ () [File not signed] C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-01-11 18:27 - 2010-01-11 18:27 - 000017920 _____ () [File not signed] C:\Program Files\P4G\DevMng.dll
2010-05-06 02:22 - 2010-05-06 02:22 - 000108544 _____ () [File not signed] C:\Program Files\P4G\OvrClk.dll
2011-05-07 23:38 - 2011-03-02 11:40 - 000164864 _____ () [File not signed] C:\Program Files\WinRAR\rarext.dll
2010-10-09 16:46 - 2009-10-01 02:48 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2005-04-08 05:38 - 2009-07-09 23:43 - 000052736 _____ (ASUSTeK) [File not signed] C:\Program Files (x86)\ASUS\Splendid\Chameleon.dll
2005-06-03 09:39 - 2006-09-12 00:46 - 000035840 _____ (ASUSTek) [File not signed] C:\Program Files (x86)\ASUS\Splendid\OVS.dll
2010-10-09 16:46 - 2009-10-01 02:48 - 000077824 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\DTMessageLib.dll
2010-10-09 16:46 - 2009-10-01 02:45 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
2019-03-27 23:48 - 2019-03-27 23:48 - 000115200 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Windows\Microsoft.Net\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
2010-10-09 16:53 - 2010-10-09 16:53 - 001605120 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_8f16b0d88731ea9c\MFC80.DLL
2010-10-09 16:53 - 2010-10-09 16:53 - 001602560 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_8f16b0d88731ea9c\MFC80U.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Version 11) (Whitelisted) ==========

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={s ... lz=1I7ASUT
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll => No File
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-915393474-1160518499-4052236333-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Dagmar Hořelicová\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: BingSvc => C:\Users\Dagmar Hořelicová\AppData\Local\Microsoft\BingSvc\BingSvc.exe
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: LauncherM1400 => "C:\Program Files (x86)\EPSON_P2B\Printer Software\Launcher\selaunch.exe" /S EPSON AL-M1400
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Skype for Desktop => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4B44450E-D9BF-489F-8F17-FA5C208A9C58}] => (Allow) LPort=5353
FirewallRules: [{26C69F8B-E182-4146-85E5-7E9DFA7D0D96}] => (Allow) LPort=8182
FirewallRules: [{E10BB01D-CF8E-46E7-A3D4-1C154BE40116}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CEF89218-A9ED-4CEA-AAB7-67CB338B2084}] => (Allow) C:\Windows\system32\svchost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{B324C2E4-7548-4AE2-BA7B-7A6017E7381E}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{45691B58-2AD4-446E-9A59-9D2CD67CE88A}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{C9FBC8B9-27C9-4898-AAC7-1B6CCC448C09}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe => No File
FirewallRules: [{EDDBB2CB-38FB-42E6-9098-C1C924F9262C}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{28D52839-1693-4534-A767-03A2013E82AD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{842C8302-E500-4A7A-9B99-BB982B38DF81}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{EEC647CD-049A-4B4A-A4AC-DEDC1E795181}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{BF12F5B5-771D-45CC-B3C8-CD0252F11EB5}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{A88DF7A9-E70B-4921-A108-A5B9F08EBC95}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{91E25613-C372-4A3A-9EF3-CB5B5CAE0A01}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{409A10DF-3930-4C0C-8AB4-FBA38F2768CD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{B4706554-76F3-4391-9D91-54D9B94672F8}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{82AEFF26-4A4A-4EFF-9804-54BF926F816C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{085DC724-2705-4B20-93BB-D67922B67412}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{9B546EFC-AF0F-40F8-987B-122C84688A35}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{BA1F26E1-3B30-4752-ABB3-60AF26F17A2F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{013B1DBC-1CF6-4B80-BD7E-F1C8083E919C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{B10D6A8C-BEA8-4E7E-B7D9-5DCE57BB433C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{31793ECE-ED50-44F9-872F-F184205B0D8C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{86B19720-1AB2-46AB-A0E1-759AFBB4A971}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{2BAA8A9E-38AD-463A-B665-3A29B172CDDF}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{57390FC8-7D11-4359-A3F8-4D5990790897}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{B6626C55-BE07-4069-8A19-0659E1C4B1AE}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{64E9E72D-8A8B-486F-B988-71E78D28A2FC}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{382782D7-3645-46A2-BB38-C6B5BE08E9FA}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{2C359D8B-A626-46D9-9641-B61FC5D5C19D}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EE928B3A-BF9B-4A78-B486-DBA10DCAAD95}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FFB6FA67-C0B2-4A54-96E4-D1FD0FC2947E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

22-10-2021 13:48:11 Naplánovaný kontrolní bod
05-11-2021 16:07:41 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (11/10/2021 11:25:02 AM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/09/2021 05:12:43 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/09/2021 02:22:58 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/09/2021 02:18:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program chrome.exe verze 95.0.4638.69 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: e34

Čas spuštění: 01d7d56b74539e98

Čas ukončení: 10

Cesta k aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

ID hlášení: 8b2fddc7-415f-11ec-9dbf-74f06daa345a

Error: (11/09/2021 01:10:04 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/08/2021 11:38:23 AM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/08/2021 11:01:46 AM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Pouze informace
(Patch task for {90140011-0066-0405-0000-0000000FF1CE}): DownloadLatest Failed:

Error: (11/07/2021 02:15:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: chrome.exe, verze: 95.0.4638.69, časové razítko: 0x6179e9ee
Název chybujícího modulu: chrome_elf.dll, verze: 95.0.4638.69, časové razítko: 0x6179e9ee
Kód výjimky: 0x80000003
Posun chyby: 0x0000000000041d48
ID chybujícího procesu: 0xbb4
Čas spuštění chybující aplikace: 0x01d7d3d9957b1942
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Google\Chrome\Application\95.0.4638.69\chrome_elf.dll
ID zprávy: d6b10edc-3fcc-11ec-b684-74f06daa345a


System errors:
=============
Error: (11/10/2021 11:27:44 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Server {BB6DF56B-CACE-11DC-9992-0019B93A3A84} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/10/2021 11:14:21 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/09/2021 05:01:54 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/09/2021 02:11:58 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/09/2021 01:54:53 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Klient zásad skupiny se po přijetí pokynu pro vypnutí neukončila správně.

Error: (11/09/2021 12:59:25 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/08/2021 11:27:26 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (11/08/2021 11:19:11 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Application Virtualization Client byla neočekávaně ukončena. Tento stav nastal již 1krát.


==================== Memory info ===========================

BIOS: American Megatrends Inc. K52F.210 08/30/2010
Motherboard: ASUSTeK Computer Inc. K52F
Processor: Intel(R) Pentium(R) CPU P6100 @ 2.00GHz
Percentage of memory in use: 85%
Total physical RAM: 3884.57 MB
Available physical RAM: 544.14 MB
Total Virtual: 3882.71 MB
Available Virtual: 676.3 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:44.58 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (DATA) (Fixed) (Total:329.79 GB) (Free:326.64 GB) NTFS
Drive q: () (Fixed) (Total:0 GB) (Free:0 GB)


==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: E0C5913D)
Partition 1: (Not Active) - (Size=19.5 GB) - (Type=1C)
Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=329.8 GB) - (Type=0F Extended)

==================== End of Addition.txt =======================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
Task: {2C9E7E45-9C50-4C0E-825D-2908F0F55D89} - System32\Tasks\{22BFEAA0-96C7-4917-8FD8-3CCFB122D53C} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.5.0.124/en/a ... d;disabled hxxp://ui.skype.com/ui/0/5.5.0.124/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled (No File)
Task: {5C3BC5A8-0402-468E-A1E7-1D0E8AF51AE9} - System32\Tasks\{FE6B232F-38BF-47D7-8B5F-DC1B15F720F1} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar hxxps://ui.skype.com/ui/0/7.36.0.101/en/abandoninstall?page=tsProgressBar (No File)
Task: {B9623EFC-5C3A-42D1-B2EC-012E31D69F3C} - System32\Tasks\{BEEFDA39-079D-4FFD-9B10-5602153EC11D} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.3.0.111/cs/g ... Error=1618 hxxp://ui.skype.com/ui/0/5.3.0.111/cs/go/help.faq.installer?LastError=1618 (No File)
Task: {A947C995-3430-40BC-A562-436F665450A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
Task: {F9EB1669-E187-43AD-8C16-0B002223D750} - System32\Tasks\{7409E312-8922-48B7-80A7-934371A4F30A} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.40.0.103/et ... age=tsMain hxxps://ui.skype.com/ui/0/7.40.0.103/et/abandoninstall?source=lightinstaller&page=tsMain (No File)
Task: {FBDBB95E-5D16-4F9B-B5FC-30E3CC69122D} - System32\Tasks\{415B0678-798F-4163-AEEF-43739C13866E} => "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/7.4.0.102/en/g ... Error=1618 hxxp://ui.skype.com/ui/0/7.4.0.102/en/go/help.faq.installer?LastError=1618 (No File)
Task: {420B9A64-713B-4D4E-9E78-3D46DB1BC4F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
U3 tmlwf; no ImagePath
U3 tmwfp; no ImagePath
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll => No File
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll No File
FirewallRules: [{B324C2E4-7548-4AE2-BA7B-7A6017E7381E}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{45691B58-2AD4-446E-9A59-9D2CD67CE88A}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{C9FBC8B9-27C9-4898-AAC7-1B6CCC448C09}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe => No File
FirewallRules: [{EDDBB2CB-38FB-42E6-9098-C1C924F9262C}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{28D52839-1693-4534-A767-03A2013E82AD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{842C8302-E500-4A7A-9B99-BB982B38DF81}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{EEC647CD-049A-4B4A-A4AC-DEDC1E795181}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{BF12F5B5-771D-45CC-B3C8-CD0252F11EB5}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{A88DF7A9-E70B-4921-A108-A5B9F08EBC95}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{91E25613-C372-4A3A-9EF3-CB5B5CAE0A01}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{409A10DF-3930-4C0C-8AB4-FBA38F2768CD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{B4706554-76F3-4391-9D91-54D9B94672F8}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{82AEFF26-4A4A-4EFF-9804-54BF926F816C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{085DC724-2705-4B20-93BB-D67922B67412}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{9B546EFC-AF0F-40F8-987B-122C84688A35}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{BA1F26E1-3B30-4752-ABB3-60AF26F17A2F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{013B1DBC-1CF6-4B80-BD7E-F1C8083E919C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{B10D6A8C-BEA8-4E7E-B7D9-5DCE57BB433C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{31793ECE-ED50-44F9-872F-F184205B0D8C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{86B19720-1AB2-46AB-A0E1-759AFBB4A971}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{2BAA8A9E-38AD-463A-B665-3A29B172CDDF}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{57390FC8-7D11-4359-A3F8-4D5990790897}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{64E9E72D-8A8B-486F-B988-71E78D28A2FC}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{382782D7-3645-46A2-BB38-C6B5BE08E9FA}] => (Allow) C:\Users\Dagmar Hořelicová\AppData\Roaming\Zoom\bin\airhost.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 09-11-2021
Ran by Dagmar Hořelicová (12-11-2021 11:15:42) Run:1
Running from C:\Users\Dagmar Hořelicová\Desktop
Loaded Profiles: Dagmar Hořelicová
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
Task: {2C9E7E45-9C50-4C0E-825D-2908F0F55D89} - System32\Tasks\{22BFEAA0-96C7-4917-8FD8-3CCFB122D53C} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.5.0.124/en/a ... d;disabled hxxp://ui.skype.com/ui/0/5.5.0.124/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled (No File)
Task: {5C3BC5A8-0402-468E-A1E7-1D0E8AF51AE9} - System32\Tasks\{FE6B232F-38BF-47D7-8B5F-DC1B15F720F1} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.36.0.101/en ... rogressBar hxxps://ui.skype.com/ui/0/7.36.0.101/en/abandoninstall?page=tsProgressBar (No File)
Task: {B9623EFC-5C3A-42D1-B2EC-012E31D69F3C} - System32\Tasks\{BEEFDA39-079D-4FFD-9B10-5602153EC11D} => "C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/5.3.0.111/cs/g ... Error=1618 hxxp://ui.skype.com/ui/0/5.3.0.111/cs/go/help.faq.installer?LastError=1618 (No File)
Task: {A947C995-3430-40BC-A562-436F665450A0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
Task: {F9EB1669-E187-43AD-8C16-0B002223D750} - System32\Tasks\{7409E312-8922-48B7-80A7-934371A4F30A} => "C:\Program Files\Internet Explorer\iexplore.exe" https://ui.skype.com/ui/0/7.40.0.103/et ... age=tsMain hxxps://ui.skype.com/ui/0/7.40.0.103/et/abandoninstall?source=lightinstaller&page=tsMain (No File)
Task: {FBDBB95E-5D16-4F9B-B5FC-30E3CC69122D} - System32\Tasks\{415B0678-798F-4163-AEEF-43739C13866E} => "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/7.4.0.102/en/g ... Error=1618 hxxp://ui.skype.com/ui/0/7.4.0.102/en/go/help.faq.installer?LastError=1618 (No File)
Task: {420B9A64-713B-4D4E-9E78-3D46DB1BC4F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-07-29] (Google Inc -> Google LLC)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
U3 tmlwf; no ImagePath
U3 tmwfp; no ImagePath
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-915393474-1160518499-4052236333-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll => No File
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll No File
FirewallRules: [{B324C2E4-7548-4AE2-BA7B-7A6017E7381E}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{45691B58-2AD4-446E-9A59-9D2CD67CE88A}] => (Allow) C:\Program Files (x86)\AVG\AVG10\avgmfapx.exe => No File
FirewallRules: [{C9FBC8B9-27C9-4898-AAC7-1B6CCC448C09}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe => No File
FirewallRules: [{EDDBB2CB-38FB-42E6-9098-C1C924F9262C}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{28D52839-1693-4534-A767-03A2013E82AD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe => No File
FirewallRules: [{842C8302-E500-4A7A-9B99-BB982B38DF81}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{EEC647CD-049A-4B4A-A4AC-DEDC1E795181}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe => No File
FirewallRules: [{BF12F5B5-771D-45CC-B3C8-CD0252F11EB5}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{A88DF7A9-E70B-4921-A108-A5B9F08EBC95}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe => No File
FirewallRules: [{91E25613-C372-4A3A-9EF3-CB5B5CAE0A01}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{409A10DF-3930-4C0C-8AB4-FBA38F2768CD}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe => No File
FirewallRules: [{B4706554-76F3-4391-9D91-54D9B94672F8}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{82AEFF26-4A4A-4EFF-9804-54BF926F816C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe => No File
FirewallRules: [{085DC724-2705-4B20-93BB-D67922B67412}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{9B546EFC-AF0F-40F8-987B-122C84688A35}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe => No File
FirewallRules: [{BA1F26E1-3B30-4752-ABB3-60AF26F17A2F}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{013B1DBC-1CF6-4B80-BD7E-F1C8083E919C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe => No File
FirewallRules: [{B10D6A8C-BEA8-4E7E-B7D9-5DCE57BB433C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{31793ECE-ED50-44F9-872F-F184205B0D8C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe => No File
FirewallRules: [{86B19720-1AB2-46AB-A0E1-759AFBB4A971}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{2BAA8A9E-38AD-463A-B665-3A29B172CDDF}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{57390FC8-7D11-4359-A3F8-4D5990790897}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => No File
FirewallRules: [{64E9E72D-8A8B-486F-B988-71E78D28A2FC}] => (Allow) C:\Users\Dagmar Ho�elicov�\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{382782D7-3645-46A2-BB38-C6B5BE08E9FA}] => (Allow) C:\Users\Dagmar Ho�elicov�\AppData\Roaming\Zoom\bin\airhost.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2C9E7E45-9C50-4C0E-825D-2908F0F55D89}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C9E7E45-9C50-4C0E-825D-2908F0F55D89}" => removed successfully
C:\Windows\System32\Tasks\{22BFEAA0-96C7-4917-8FD8-3CCFB122D53C} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{22BFEAA0-96C7-4917-8FD8-3CCFB122D53C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5C3BC5A8-0402-468E-A1E7-1D0E8AF51AE9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C3BC5A8-0402-468E-A1E7-1D0E8AF51AE9}" => removed successfully
C:\Windows\System32\Tasks\{FE6B232F-38BF-47D7-8B5F-DC1B15F720F1} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{FE6B232F-38BF-47D7-8B5F-DC1B15F720F1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B9623EFC-5C3A-42D1-B2EC-012E31D69F3C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9623EFC-5C3A-42D1-B2EC-012E31D69F3C}" => removed successfully
C:\Windows\System32\Tasks\{BEEFDA39-079D-4FFD-9B10-5602153EC11D} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BEEFDA39-079D-4FFD-9B10-5602153EC11D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A947C995-3430-40BC-A562-436F665450A0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A947C995-3430-40BC-A562-436F665450A0}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F9EB1669-E187-43AD-8C16-0B002223D750}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9EB1669-E187-43AD-8C16-0B002223D750}" => removed successfully
C:\Windows\System32\Tasks\{7409E312-8922-48B7-80A7-934371A4F30A} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7409E312-8922-48B7-80A7-934371A4F30A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBDBB95E-5D16-4F9B-B5FC-30E3CC69122D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBDBB95E-5D16-4F9B-B5FC-30E3CC69122D}" => removed successfully
C:\Windows\System32\Tasks\{415B0678-798F-4163-AEEF-43739C13866E} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{415B0678-798F-4163-AEEF-43739C13866E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{420B9A64-713B-4D4E-9E78-3D46DB1BC4F7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{420B9A64-713B-4D4E-9E78-3D46DB1BC4F7}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\System\CurrentControlSet\Services\tmlwf => removed successfully
tmlwf => service removed successfully
HKLM\System\CurrentControlSet\Services\tmwfp => removed successfully
tmwfp => service removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-915393474-1160518499-4052236333-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => removed successfully
HKU\S-1-5-21-915393474-1160518499-4052236333-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} => removed successfully
HKLM\Software\Classes\CLSID\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E} => removed successfully
HKLM\Software\Classes\PROTOCOLS\Handler\linkscanner => removed successfully
HKLM\Software\Classes\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B324C2E4-7548-4AE2-BA7B-7A6017E7381E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{45691B58-2AD4-446E-9A59-9D2CD67CE88A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C9FBC8B9-27C9-4898-AAC7-1B6CCC448C09}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EDDBB2CB-38FB-42E6-9098-C1C924F9262C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{28D52839-1693-4534-A767-03A2013E82AD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{842C8302-E500-4A7A-9B99-BB982B38DF81}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EEC647CD-049A-4B4A-A4AC-DEDC1E795181}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BF12F5B5-771D-45CC-B3C8-CD0252F11EB5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A88DF7A9-E70B-4921-A108-A5B9F08EBC95}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{91E25613-C372-4A3A-9EF3-CB5B5CAE0A01}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{409A10DF-3930-4C0C-8AB4-FBA38F2768CD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B4706554-76F3-4391-9D91-54D9B94672F8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{82AEFF26-4A4A-4EFF-9804-54BF926F816C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{085DC724-2705-4B20-93BB-D67922B67412}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9B546EFC-AF0F-40F8-987B-122C84688A35}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BA1F26E1-3B30-4752-ABB3-60AF26F17A2F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{013B1DBC-1CF6-4B80-BD7E-F1C8083E919C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B10D6A8C-BEA8-4E7E-B7D9-5DCE57BB433C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{31793ECE-ED50-44F9-872F-F184205B0D8C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{86B19720-1AB2-46AB-A0E1-759AFBB4A971}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2BAA8A9E-38AD-463A-B665-3A29B172CDDF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{57390FC8-7D11-4359-A3F8-4D5990790897}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{64E9E72D-8A8B-486F-B988-71E78D28A2FC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{382782D7-3645-46A2-BB38-C6B5BE08E9FA}" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 61349529 B
Java, Flash, Steam htmlcache => 26669 B
Windows/system/drivers => 2397787752 B
Edge => 0 B
Chrome => 343612333 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 42361427 B
systemprofile32 => 43521356 B
LocalService => 43587584 B
NetworkService => 62220564 B
Dagmar Hořelicová => 3285263335 B

RecycleBin => 54403 B
EmptyTemp: => 5.8 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 11:21:54 ====

Smazáno. Nastala nějaká změna?

Zdravím, sousedka říkala, že problém stále trvá, bohužel jsem neměl kvůli práci přístup k jejímu počítači. Ještě vyzkouším zítra udělat memtest.

Hlavně zjistěte celkovou velijost RAM v NB. Pro win7 je minimální hodnota 4GB, vzhledem k náročnosti soudobých aplikací.

Ve správci úloh systému Windows v záložce Výkon je celkem paměti 3884 MB a využití je při spuštěném prohlížeči cca 50%. Memtest nenašel žádný problém

To by mělo být OK. Při spuštění jaké aplikace hlásí PC nedostatek paměti?

Ahoj,

omlouvám se za vlez. Zkus si pohrát s velikostí stránkovacího souboru.
https://www.youtube.com/watch?v=gFHciBnei8E

Zvláštní, tohle jsem zkoušel nastavit před založením tohoto tématu podle starého příspěvku na serveru zive.cz. Nedávno jsem se k tomu vrátil a zkusil znovu bez výsledku, nicméně pak jsem zafajfkoval "Automaticky spravovat velikost stránkovacího souboru pro všechny jednotky" a prý se od té doby zatím problém nevyskytl. Předtím tam bylo nastaveno buď "Velikost určí systém" nebo "Nepoužívat stránkovací soubor", to si už nepamatuju. Podle toho videa se po zadání hodnot klikne na tlačítko "Nastavit", to jsem neudělal ani v jednom případě a dal jsem rovnou OK a pak jsem se divil, že po restartu a otevření nastavení jsou hodnoty opět prázdné. Zkusím se na to ještě zítra podívat, jen vím, že "Aktuálně přidělená hodnota", kterou jsem psal do počáteční velikosti byla 0 a "Doporučená hodnota", kterou jsem psal do největší velikosti byla skoro 6000 (snad 3884*1,5 ?)

Dobře, občas sousedku zkontroluj, jestli jsi jí problém pomohl vyřešit. Nebo aspoň jejímu počítači.