VIRY.CZ

Dobrý den,
prosím o pomoc. Snad píšu do správné rubriky... Po zapnutí NTB se mi objevila hláška Lenovo Vantage:

"Doporučujeme, abyste je ihned nainstalovali a optimalizovali tak svůj počítač. Vezměte prosím na vědomí, že následující aktualizace mohou vyžadovat vícenásobné restartování systému. Doporučujeme vám uložit si vaši práci, abyste byli připraveni na vypnutí systému.

BIOS Update - W10 (64) / Win11

VAROVÁNÍ: Stisknutím tlačítka OK zahájíte instalaci a může být nutné restartovat systém."

Můžu instalovat, je to nutné, nebo je to nějaký vir? Není to nějaký update na w11? Na to ale prý nemám kompatibilní ntb. NTB mám krátce, vše vždy bylo v pořádku, antivir mám jen Windows Defender, který byl v ntb původně. Ntb je Lenovo, W 10. V případě, že mi W10 vyhovuje a nechci měnit na W11, je možné někde nastavit, aby se hláška už neobjevovala?
Děkuji za radu, pěkný den, vev

Zdravím!
U win 10 se obvykle (v defaultním nastavení) instalují aktualizace samy. Systém vás upozorní pouze v případě, že je nutný restart. Nevím, jak ta hláška vypadá. Bylo by dobré sem dát logy FRST+Addition. Jinak můžete v nastavení zkontrolovat, zda máte instelovány všechny potřebné aktualizace: https://cs.joecomp.com/how-to-check-for ... windows-10 . Instalace win 11 to určitě není.

Tomu BIOSu úplně nerozumím. Každopádně NTB mám nový, zakoupený loni na podzim, zprovozňoval mi ho technik na prodejně s počítači. Ve Start - Nastavení - Aktualizace a zabezpečení mám vše aktuální, to jsem kontrolovala.
Vkládám tedy logy z frst a prosím o kontrolu, zda je vše v pořádku. Moc děkuji!

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2022
Ran by Uživatel (administrator) on VEV (LENOVO 82KD) (12-03-2022 14:00:58)
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel
Platform: Microsoft Windows 10 Home Version 21H2 19044.1586 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(DeviceSettingsHeartbeatAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(DeviceSettingsSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoBoostAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoBoostSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoSecurityAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoSystemUpdateAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(SmartInteractAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe <2>
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe <3>
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <3>
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5ce88e30ad5362fb\LenovoUtilityService.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5ce88e30ad5362fb\FnHotkeyUtility.exe
(DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atieclxx.exe
(LNBITSSvc.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\AutoModeDetect.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\atiesrxx.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe <2>
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5ce88e30ad5362fb\LenovoUtilityService.exe
(services.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\LNBITSSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\ElevocControlService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e879bbabfd265223\RtkAudUService64.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e879bbabfd265223\RtkAudUService64.exe [1342856 2021-09-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35646080 2022-02-14] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\99.0.4844.51\Installer\chrmstp.exe [2022-03-08] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0102AB2D-0DD7-49D5-A735-9BAD0F9095A5} - System32\Tasks\McAfeeTsk\OOBEUpgrader => C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe /Run (No File)
Task: {0CBF75B7-4D15-455B-85DE-AF0C722963B6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {252EA0E8-2514-41DB-8249-67A1E185BBBC} - System32\Tasks\CCleanerSkipUAC - Uživatel => C:\Program Files\CCleaner\CCleaner.exe [29764224 2022-02-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2D6B93D4-34A1-4787-80B2-14332FC8D640} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [64256 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {5605575F-1F2B-4660-B130-5361DE3FEC6E} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {5647A735-FEA7-48DD-9A7B-83867B8B1526} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {6525BF9C-555B-4D93-93FC-A04C7421046A} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [179952 2021-12-19] (Lenovo -> Lenovo Group Ltd.)
Task: {67056FF8-BA67-4800-92CB-A9704C62C6DA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-02-14] (Piriform Software Ltd -> Piriform)
Task: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {80812E19-FBED-44AE-A66B-BB5E4C56742D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\494fdb9c-6546-4011-bc72-6cf1a922dc8b => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {944B60B5-35F3-4D4D-8584-AA80E9348616} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {9A9D3A58-0D01-409A-B933-CCC5A9B8FF1E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A4EA29B3-3C61-43BB-9E6B-229F18D18D3C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {A9871E77-6095-4DD0-9B90-7F37B26C70F0} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {AC353F25-FE83-4E22-BF02-DF3B1C904A51} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\ad079e3e-1fb5-4194-8fa6-93431dc99007 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {AE8A06CB-51EA-48FB-BE25-AB3813444532} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {B65443A6-41F2-4E5A-BEFC-3E476A5C84EC} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758792 2021-09-22] (Lenovo -> )
Task: {BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758792 2021-09-22] (Lenovo -> )
Task: {BEC4020B-33DB-405C-9683-417562BD7D9D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\91b99a1f-7ed4-4b2f-b443-8c743f221554 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {C461C4FE-31F0-4A24-AEF1-C50E6F4B9550} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {C54456D4-8885-48B7-B351-18005A2A505E} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [89840 2021-12-19] (Lenovo -> Lenovo Group Ltd.)
Task: {CA958B36-436C-40AC-B24C-0A6C65666A8A} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\40e97e50-5ea7-42a2-b3b1-ee63bf289a9b => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [145480 2021-09-09] (Lenovo -> Lenovo Group Ltd.)
Task: {DE66F7B0-C59E-41D0-AC33-53373A1D698D} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {E936C949-8D0D-4770-9D9C-F41BF32F19F3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ECEFF2BE-3BEE-40C1-A39D-F1DBC8D7ED47} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {F2D15FEB-BE4E-4CF2-A183-D6311684F4CC} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\8792a728-146c-41f0-85cc-9fbfb054fe97 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{629a3f1e-ed44-44f3-abad-11f770678120}: [DhcpNameServer] 150.209.1.2
Tcpip\..\Interfaces\{7ded90ca-d510-4ddb-ac0c-00741b03bb2a}: [DhcpNameServer] 62.129.50.20 85.135.32.100

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Uživatel\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-04]

FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default [2022-03-12]
CHR DownloadDir: C:\Users\Uživatel\Desktop
CHR Notifications: Default -> hxxps://cs.joecomp.com
CHR Extension: (Prezentace) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-12-05]
CHR Extension: (Dokumenty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-12-05]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-12-05]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-12-05]
CHR Extension: (Tabulky) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-12-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-02-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-12-05]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-12-05]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe [2173912 2020-10-15] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 ElevocService; C:\WINDOWS\System32\ElevocControlService.exe [164568 2020-11-30] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5ce88e30ad5362fb\LenovoUtilityService.exe [394536 2022-01-16] (Lenovo -> Lenovo(beijing) Limited)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe [28928 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1820080 2021-02-06] (Lenovo -> Lenovo(beijing) Limited)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [69368 2021-12-19] (Lenovo -> Lenovo Group Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe [2909208 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe [128376 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\amdkmdag.sys [80471928 2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [134272 2020-05-19] (GENESYS LOGIC, INC. -> Genesys Logic)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2022-01-15] (Malwarebytes Corporation -> Malwarebytes Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2022-02-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [438520 2022-02-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-02-14] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-03-12 14:00 - 2022-03-12 14:01 - 000019588 _____ C:\Users\Uživatel\Desktop\FRST.txt
2022-03-12 13:59 - 2022-03-12 13:59 - 000000333 _____ C:\Users\Uživatel\Desktop\dotaz.txt
2022-03-12 13:57 - 2022-03-12 13:57 - 002364928 _____ (Farbar) C:\Users\Uživatel\Desktop\FRST64.exe
2022-03-12 10:05 - 2022-03-12 10:05 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-03-12 10:05 - 2022-03-12 10:05 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-03-12 10:05 - 2022-03-12 10:05 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-03-12 10:05 - 2022-03-12 10:05 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-03-12 10:05 - 2022-03-12 10:05 - 000011911 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-03-12 10:01 - 2022-03-12 10:01 - 000000000 ___HD C:\$WinREAgent
2022-03-12 09:42 - 2022-03-12 14:00 - 000002388 _____ C:\WINDOWS\storelibdebug.txt
2022-03-12 09:40 - 2021-09-02 01:21 - 000018816 _____ C:\WINDOWS\system32\RtEventLog.dll
2022-03-12 09:40 - 2021-09-02 01:11 - 048467652 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2022-02-20 21:13 - 2021-07-30 06:40 - 007986128 _____ (Sunplus Innovation Technology Inc.) C:\WINDOWS\system32\SPITDevMft64.dll
2022-02-14 21:35 - 2022-02-14 21:35 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-14 21:35 - 2022-02-14 21:35 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-03-12 14:01 - 2022-01-28 22:17 - 000000000 ____D C:\FRST
2022-03-12 14:00 - 2021-12-06 02:32 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-03-12 13:46 - 2022-01-15 15:01 - 000000000 ____D C:\Program Files\CCleaner
2022-03-12 13:46 - 2021-12-06 02:32 - 000000000 ___HD C:\Program Files\WindowsApps
2022-03-12 13:46 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-03-12 10:34 - 2021-12-05 21:30 - 000000000 ____D C:\Program Files (x86)\Google
2022-03-12 10:27 - 2021-12-06 02:56 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-03-12 10:27 - 2021-12-06 02:34 - 000717850 _____ C:\WINDOWS\system32\perfh005.dat
2022-03-12 10:27 - 2021-12-06 02:34 - 000144992 _____ C:\WINDOWS\system32\perfc005.dat
2022-03-12 10:27 - 2021-12-06 02:31 - 000000000 ____D C:\WINDOWS\INF
2022-03-12 10:23 - 2021-12-06 02:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-03-12 10:23 - 2021-12-06 02:39 - 000634256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-03-12 10:23 - 2021-12-06 02:39 - 000008192 ___SH C:\DumpStack.log.tmp
2022-03-12 10:23 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\ServiceState
2022-03-12 10:23 - 2021-12-06 02:29 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SystemResources
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-03-12 10:22 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\servicing
2022-03-12 10:07 - 2021-12-06 03:06 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-03-12 10:07 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-03-12 10:05 - 2021-12-06 02:42 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-03-12 10:01 - 2021-12-06 03:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-03-12 10:00 - 2021-12-06 03:05 - 145666720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-03-12 09:51 - 2021-12-05 21:28 - 000000000 ____D C:\WINDOWS\TempInst
2022-03-12 09:42 - 2021-12-06 02:40 - 000000000 ____D C:\ProgramData\Lenovo
2022-03-12 09:40 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\ElevocConfig
2022-03-08 21:34 - 2022-01-05 20:59 - 000000000 ____D C:\Users\Uživatel\Desktop\Ulož exterňák
2022-03-08 21:00 - 2021-12-05 21:31 - 000002258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-03-08 21:00 - 2021-12-05 21:31 - 000002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-03-07 17:46 - 2021-12-29 17:57 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4032367770-2957954575-1367609206-1001
2022-03-07 17:46 - 2021-12-06 02:52 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4032367770-2957954575-1367609206-1001
2022-03-07 17:46 - 2021-12-06 02:49 - 000002401 _____ C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-03-05 14:51 - 2021-12-06 02:40 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-02-20 21:30 - 2022-01-15 15:01 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-02-20 21:04 - 2022-01-12 22:11 - 000003321 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-14 21:38 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-02-14 21:06 - 2021-12-06 03:06 - 000600944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2022-02-14 21:06 - 2021-12-06 03:06 - 000482120 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Addition log:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-03-2022
Ran by Uživatel (12-03-2022 14:03:17)
Running from C:\Users\Uživatel\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1586 (X64) (2021-12-06 01:47:32)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-4032367770-2957954575-1367609206-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4032367770-2957954575-1367609206-503 - Limited - Disabled)
Guest (S-1-5-21-4032367770-2957954575-1367609206-501 - Limited - Disabled)
Uživatel (S-1-5-21-4032367770-2957954575-1367609206-1001 - Administrator - Enabled) => C:\Users\Uživatel
WDAGUtilityAccount (S-1-5-21-4032367770-2957954575-1367609206-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.011.20039 - Adobe Systems Incorporated)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)
CCleaner (HKLM\...\CCleaner) (Version: 5.90 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 99.0.4844.51 - Google LLC)
IrfanView 4.59 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.59 - Irfan Skiljan)
Jpeg Resampler Vs 6+ (HKLM-x32\...\JpegResampler2010_is1) (Version: - Jpeg Resampler)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.07.0131 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.11.20.0 - Lenovo Group Ltd.)
LibreOffice 7.2.3.2 (HKLM\...\{81490660-3C36-47B4-AE9F-73B6C5BD4F98}) (Version: 7.2.3.2 - The Document Foundation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 99.0.1150.30 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\OneDriveSetup.exe) (Version: 22.033.0213.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{5016990D-7F61-4A20-9451-A915D6616DD9}) (Version: 3.66.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720 (HKLM-x32\...\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}) (Version: 14.26.28720.3 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 94.0.2 (x64 cs)) (Version: 94.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 94.0.2 - Mozilla)
Skype verze 8.79 (HKLM-x32\...\Skype_is1) (Version: 8.79 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\advancedmicrodevicesinc-2.amdradeonsoftware_10.20.40028.0_x64__0a9344xs7nr4m [2021-12-06] (Advanced Micro Devices Inc.) [Startup Task]
AV1 Video Extension -> C:\Program Files\WindowsApps\microsoft.av1videoextension_1.1.41601.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Dolby Audio -> C:\Program Files\WindowsApps\dolbylaboratories.dolbyaudio_3.20800.804.0_x64__rz1tebttyb220 [2021-12-06] (Dolby Laboratories)
Elevoc Vocplus System -> C:\Program Files\WindowsApps\elevoctechnologyco.ltd.elevocvocplussystem_1.0.29.0_x64__ttaqwwhyt5s6t [2021-12-06] (Elevoc Technology Co., Ltd.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.2.33.0_x64__5grkq8ppsgwt4 [2022-02-27] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2202.9.0_x64__k1h2ywk1493x8 [2022-03-07] (LENOVO INC.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.2180.0_x64__8wekyb3d8bbwe [2022-03-07] (Microsoft Studios) [MS Ad]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.28.255.0_x64__dt26b99r8h8gj [2022-03-12] (Realtek Semiconductor Corp)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\microsoft.mpeg2videoextension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0 [2022-03-07] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers1: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers6: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-19] (Fox Magic Software) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2022-01-15 15:36 - 2010-09-06 18:21 - 000538435 _____ () [File not signed] C:\Program Files (x86)\JpegResampler2010\JRcm64.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\Lenovo\LenovoWallPaper.jpg
DNS Servers: 62.129.50.20 - 85.135.32.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{67638477-FE00-415C-8C0B-34DA633255C9}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> )
FirewallRules: [{55047435-0DE3-480E-8A13-DA9AA543287B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> )
FirewallRules: [{5BCF31A0-C0CC-4860-A54E-B8AC1C1E85C8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CC30323A-543E-4971-8B5E-37EA1FAB18C3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BAF93F76-171B-45E0-944B-8188218D9E42}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1641552C-D1E0-488B-A1AB-8D995B92C46C}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{60D09550-D1F0-4970-92F8-D320236AF8DA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{31EFE34F-EAFD-4711-80EA-6B99498F03B2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{551A93DC-A604-422A-A603-80B0D1CD52EC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BAEF6C7B-D505-4729-9C83-DE111147F842}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2C81354D-5F45-4E48-9F4F-C9D38FC1864A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{003B2AAF-2D30-4F90-872E-1E5F0AF579FA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5DD1694F-E4DF-49BF-BCD8-F64A49F8EBD1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{ED19080A-6133-48CC-966E-2716E9C777DF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{FA068195-1BA4-4FE1-9BAF-AAF20C164408}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{621B08C3-B7C3-4AD3-A1AA-3B687AAE8366}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E0AC92AD-07C6-4DDD-B58E-B888844C646A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0432BA35-3D3A-4554-8056-EA8DA51A0564}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BB1291E4-FE28-4236-AE13-F78A157DB104}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

12-01-2022 22:15:11 Instalační služba modulů systému Windows
23-01-2022 18:45:00 Instalační služba modulů systému Windows
27-01-2022 21:30:05 Instalační služba modulů systému Windows
12-02-2022 17:14:31 Instalační služba modulů systému Windows
20-02-2022 21:12:44 Instalační služba modulů systému Windows
12-03-2022 10:01:09 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (03/12/2022 10:23:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (03/12/2022 10:23:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (03/01/2022 09:12:34 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (03/01/2022 09:12:34 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (03/01/2022 09:12:34 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (02/27/2022 09:22:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: backgroundTaskHost.exe, verze: 10.0.19041.546, časové razítko: 0x1d3a15e7
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1503, časové razítko: 0xb2acaea9
Kód výjimky: 0xc000027b
Posun chyby: 0x000000000010b382
ID chybujícího procesu: 0x176c
Čas spuštění chybující aplikace: 0x01d82c17bb11934d
Cesta k chybující aplikaci: C:\WINDOWS\system32\backgroundTaskHost.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 2fadf335-a1e0-44a1-bc94-8be4cc2cc000
Úplný název chybujícího balíčku: Microsoft.Windows.Search_1.14.3.19041_neutral_neutral_cw5n1h2txyewy
ID aplikace související s chybujícím balíčkem: ShellFeedsUI

Error: (02/07/2022 08:54:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe verze 10.0.19041.1469 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2f2c

Čas spuštění: 01d81c5a638f49db

Čas ukončení: 0

Cesta k aplikaci: C:\Windows\explorer.exe

ID hlášení: 6f010862-4bb5-4194-b198-38a3f2ef6671

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Unknown

Error: (02/05/2022 02:42:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CCleaner64.exe, verze: 5.89.0.9401, časové razítko: 0x61eff15b
Název chybujícího modulu: CCleaner64.exe, verze: 5.89.0.9401, časové razítko: 0x61eff15b
Kód výjimky: 0xc000041d
Posun chyby: 0x0000000000c12a1f
ID chybujícího procesu: 0x824
Čas spuštění chybující aplikace: 0x01d81a9637be1160
Cesta k chybující aplikaci: C:\Program Files\CCleaner\CCleaner64.exe
Cesta k chybujícímu modulu: C:\Program Files\CCleaner\CCleaner64.exe
ID zprávy: 4b062763-6314-497a-83ac-5ceb886764f4
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (03/12/2022 09:49:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/04/2022 10:23:30 PM) (Source: DCOM) (EventID: 10010) (User: VEV)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (03/04/2022 10:21:29 PM) (Source: DCOM) (EventID: 10000) (User: VEV)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (02/27/2022 09:27:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (02/20/2022 09:04:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 2krát.

Error: (02/15/2022 09:02:42 PM) (Source: DCOM) (EventID: 10001) (User: VEV)
Description: Nelze spustit server DCOM: MicrosoftWindows.Client.CBS_120.2212.3920.0_x64__cw5n1h2txyewy!InputApp jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca

Error: (02/15/2022 09:00:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (02/10/2022 09:38:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
================
Date: 2022-03-08 21:32:08
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/InstallCore
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_E:\NOVÝ NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel:
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.1570.0, AS: 1.359.1570.0, NIS: 1.359.1570.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-02-27 21:33:08
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/InstallCore
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_E:\NOVÝ NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.1039.0, AS: 1.359.1039.0, NIS: 1.359.1039.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-02-20 21:20:46
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/CandyOpen
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\MOJE\Setup - instalačky\atubecatcher-setup.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.570.0, AS: 1.359.570.0, NIS: 1.359.570.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-02-20 21:20:45
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/PiriformBundler
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\MOJE\Setup - instalačky\ccsetup321.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.570.0, AS: 1.359.570.0, NIS: 1.359.570.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-02-20 21:20:45
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUA:Win32/Vigua.A
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\MOJE\Setup - instalačky\ashampoo_burning_studio_6_free_6.80_4312.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.570.0, AS: 1.359.570.0, NIS: 1.359.570.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

CodeIntegrity:
===============
Date: 2021-12-06 02:49:11
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\McAfee\Platform\Core\vtploader.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: LENOVO GLCN40WW 07/23/2021
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 3 5300U with Radeon Graphics
Percentage of memory in use: 60%
Total physical RAM: 6005.99 MB
Available physical RAM: 2345.33 MB
Total Virtual: 6965.99 MB
Available Virtual: 2435.04 MB

==================== Drives ================================

Drive c: (Windows-SSD) (Fixed) (Total:237.23 GB) (Free:156.05 GB) NTFS

\\?\Volume{c7a9fb56-068b-4170-8dea-d818eca51e93}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.48 GB) NTFS
\\?\Volume{f097b473-34ff-4680-a182-4ff678b8b272}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 4263E35A)

Partition: GPT.

==================== End of Addition.txt =======================

Pokud NB funguje jak má, není třeba v biosu cokoli měnit. Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Ano, myslím, že notebook funguje normálně, nebo jsem si alespoň ničeho nevšimla.
V tom Vámi zaslaném programu nebyla možnost "čištění a opravy" pouze možnost "karanténa", tak jsem klikla na to a zobrazilo mi to tento log:
Děkuji


# -------------------------------
# Malwarebytes AdwCleaner 8.3.1.0
# -------------------------------
# Build: 11-18-2021
# Database: 2022-02-03.4 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-12-2022
# Duration: 00:00:04
# OS: Windows 10 Home
# Cleaned: 8
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.LenovoIMController Folder C:\ProgramData\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Users\Uživatel\AppData\Local\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Windows\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Windows\System32\Tasks\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Lenovo Dependency Package_is1
Deleted Preinstalled.LenovoUpdate Folder C:\Program Files (x86)\LENOVO\SYSTEM UPDATE
Deleted Preinstalled.LenovoUpdate Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{03C6CC92-68F2-4961-9A73-CAECA350BD08}
Deleted Preinstalled.LenovoUpdate Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\TVSU_is1


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2188 octets] - [29/01/2022 12:49:39]
AdwCleaner[S01].txt - [2249 octets] - [29/01/2022 12:50:40]
AdwCleaner[S02].txt - [2310 octets] - [12/03/2022 16:41:17]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########

To je OK. Teď dejte nové logy FRST+Addition.

Děkuji

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2022
Ran by Uživatel (administrator) on VEV (LENOVO 82KD) (12-03-2022 17:04:49)
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel
Platform: Microsoft Windows 10 Home Version 21H2 19044.1586 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(DeviceSettingsHeartbeatAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(DeviceSettingsSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoBoostAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoBoostSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoSecurityAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(SmartInteractAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantage-(VantageCoreAddin).exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e879bbabfd265223\RtkAudUService64.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e879bbabfd265223\RtkAudUService64.exe [1342856 2021-09-02] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35646080 2022-02-14] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\99.0.4844.51\Installer\chrmstp.exe [2022-03-08] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0102AB2D-0DD7-49D5-A735-9BAD0F9095A5} - System32\Tasks\McAfeeTsk\OOBEUpgrader => C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe /Run (No File)
Task: {0CBF75B7-4D15-455B-85DE-AF0C722963B6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {252EA0E8-2514-41DB-8249-67A1E185BBBC} - System32\Tasks\CCleanerSkipUAC - Uživatel => C:\Program Files\CCleaner\CCleaner.exe [29764224 2022-02-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2D6B93D4-34A1-4787-80B2-14332FC8D640} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {5605575F-1F2B-4660-B130-5361DE3FEC6E} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {5647A735-FEA7-48DD-9A7B-83867B8B1526} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {6525BF9C-555B-4D93-93FC-A04C7421046A} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [179952 2021-12-19] (Lenovo -> Lenovo Group Ltd.)
Task: {67056FF8-BA67-4800-92CB-A9704C62C6DA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-02-14] (Piriform Software Ltd -> Piriform)
Task: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {80812E19-FBED-44AE-A66B-BB5E4C56742D} - \Lenovo\ImController\TimeBasedEvents\494fdb9c-6546-4011-bc72-6cf1a922dc8b -> No File <==== ATTENTION
Task: {944B60B5-35F3-4D4D-8584-AA80E9348616} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {9A9D3A58-0D01-409A-B933-CCC5A9B8FF1E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A4EA29B3-3C61-43BB-9E6B-229F18D18D3C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {A9871E77-6095-4DD0-9B90-7F37B26C70F0} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {AC353F25-FE83-4E22-BF02-DF3B1C904A51} - \Lenovo\ImController\TimeBasedEvents\ad079e3e-1fb5-4194-8fa6-93431dc99007 -> No File <==== ATTENTION
Task: {AE8A06CB-51EA-48FB-BE25-AB3813444532} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
Task: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {B65443A6-41F2-4E5A-BEFC-3E476A5C84EC} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe PendingTask (No File)
Task: {BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe /CM -search R -action INSTALL -includerebootpackages 1,3,4,5 -noicon -noreboot -nolicense -defaultupdate -schtask (No File)
Task: {BEC4020B-33DB-405C-9683-417562BD7D9D} - \Lenovo\ImController\TimeBasedEvents\91b99a1f-7ed4-4b2f-b443-8c743f221554 -> No File <==== ATTENTION
Task: {C461C4FE-31F0-4A24-AEF1-C50E6F4B9550} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {C54456D4-8885-48B7-B351-18005A2A505E} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [89840 2021-12-19] (Lenovo -> Lenovo Group Ltd.)
Task: {CA958B36-436C-40AC-B24C-0A6C65666A8A} - \Lenovo\ImController\TimeBasedEvents\40e97e50-5ea7-42a2-b3b1-ee63bf289a9b -> No File <==== ATTENTION
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {DE66F7B0-C59E-41D0-AC33-53373A1D698D} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\ScheduleEventAction.exe [25344 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
Task: {E936C949-8D0D-4770-9D9C-F41BF32F19F3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ECEFF2BE-3BEE-40C1-A39D-F1DBC8D7ED47} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {F2D15FEB-BE4E-4CF2-A183-D6311684F4CC} - \Lenovo\ImController\TimeBasedEvents\8792a728-146c-41f0-85cc-9fbfb054fe97 -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{629a3f1e-ed44-44f3-abad-11f770678120}: [DhcpNameServer] 150.209.1.2
Tcpip\..\Interfaces\{7ded90ca-d510-4ddb-ac0c-00741b03bb2a}: [DhcpNameServer] 62.129.50.20 85.135.32.100

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Uživatel\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-04]

FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default [2022-03-12]
CHR DownloadDir: C:\Users\Uživatel\Desktop
CHR Notifications: Default -> hxxps://cs.joecomp.com
CHR Extension: (Prezentace) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-12-05]
CHR Extension: (Dokumenty) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-12-05]
CHR Extension: (Disk Google) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-12-05]
CHR Extension: (YouTube) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-12-05]
CHR Extension: (Tabulky) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-12-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-02-15]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-12-05]
CHR Extension: (Gmail) - C:\Users\Uživatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-12-05]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
S2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e9ebbe69987eef47\DAX3API.exe [2173912 2020-10-15] (Dolby Laboratories, Inc. -> Dolby Laboratories)
S2 ElevocService; C:\WINDOWS\System32\ElevocControlService.exe [164568 2020-11-30] (Microsoft Windows Hardware Compatibility Publisher -> )
S2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5ce88e30ad5362fb\LenovoUtilityService.exe [394536 2022-01-16] (Lenovo -> Lenovo(beijing) Limited)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.11.20.0\LenovoVantageService.exe [28928 2022-01-20] (Lenovo -> Lenovo Group Ltd.)
S2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1820080 2021-02-06] (Lenovo -> Lenovo(beijing) Limited)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [69368 2021-12-19] (Lenovo -> Lenovo Group Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe [2909208 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe [128376 2022-02-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [X]
S3 SUService; "C:\Program Files (x86)\Lenovo\System Update\SUService.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0372415.inf_amd64_87f92c83980548cd\B372050\amdkmdag.sys [80471928 2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [134272 2020-05-19] (GENESYS LOGIC, INC. -> Genesys Logic)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2022-01-15] (Malwarebytes Corporation -> Malwarebytes Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2022-02-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [438520 2022-02-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-02-14] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-03-13 01:37 - 2022-03-13 01:37 - 077856768 _____ C:\WINDOWS\system32\config\SOFTWARE
2022-03-13 01:34 - 2022-03-13 01:37 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2022-03-12 16:44 - 2022-03-12 16:44 - 000002602 _____ C:\Users\Uživatel\Desktop\AdwCleaner[C02].txt
2022-03-12 16:40 - 2022-03-12 16:40 - 008540344 _____ (Malwarebytes) C:\Users\Uživatel\Desktop\adwcleaner.exe
2022-03-12 14:03 - 2022-03-12 14:03 - 000023192 _____ C:\Users\Uživatel\Desktop\Addition.txt
2022-03-12 14:00 - 2022-03-12 17:05 - 000016061 _____ C:\Users\Uživatel\Desktop\FRST.txt
2022-03-12 13:57 - 2022-03-12 13:57 - 002364928 _____ (Farbar) C:\Users\Uživatel\Desktop\FRST64.exe
2022-03-12 10:05 - 2022-03-12 10:05 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-03-12 10:05 - 2022-03-12 10:05 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-03-12 10:05 - 2022-03-12 10:05 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-03-12 10:05 - 2022-03-12 10:05 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-03-12 10:05 - 2022-03-12 10:05 - 000011911 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-03-12 10:01 - 2022-03-12 10:01 - 000000000 ___HD C:\$WinREAgent
2022-03-12 09:42 - 2022-03-12 14:00 - 000002388 _____ C:\WINDOWS\storelibdebug.txt
2022-03-12 09:40 - 2021-09-02 01:21 - 000018816 _____ C:\WINDOWS\system32\RtEventLog.dll
2022-03-12 09:40 - 2021-09-02 01:11 - 048467652 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2022-02-20 21:13 - 2021-07-30 06:40 - 007986128 _____ (Sunplus Innovation Technology Inc.) C:\WINDOWS\system32\SPITDevMft64.dll
2022-02-14 21:35 - 2022-02-14 21:35 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-14 21:35 - 2022-02-14 21:35 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-03-12 17:05 - 2022-01-28 22:17 - 000000000 ____D C:\FRST
2022-03-12 16:57 - 2021-12-06 02:53 - 000000000 ____D C:\Users\Uživatel\AppData\Local\Lenovo
2022-03-12 16:52 - 2021-12-06 02:32 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-03-12 16:42 - 2022-01-29 12:49 - 000000000 ____D C:\AdwCleaner
2022-03-12 16:42 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2022-03-12 16:42 - 2021-12-06 02:40 - 000000000 ____D C:\ProgramData\Lenovo
2022-03-12 16:42 - 2021-12-06 02:36 - 000000000 ____D C:\WINDOWS\Lenovo
2022-03-12 16:42 - 2021-05-26 21:02 - 000000000 ____D C:\Program Files (x86)\Lenovo
2022-03-12 16:41 - 2021-12-06 02:56 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-03-12 16:41 - 2021-12-06 02:34 - 000717850 _____ C:\WINDOWS\system32\perfh005.dat
2022-03-12 16:41 - 2021-12-06 02:34 - 000144992 _____ C:\WINDOWS\system32\perfc005.dat
2022-03-12 16:41 - 2021-12-06 02:31 - 000000000 ____D C:\WINDOWS\INF
2022-03-12 16:39 - 2022-01-15 15:01 - 000000000 ____D C:\Program Files\CCleaner
2022-03-12 16:39 - 2021-12-05 21:30 - 000000000 ____D C:\Program Files (x86)\Google
2022-03-12 16:37 - 2021-12-06 02:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-03-12 16:37 - 2021-12-06 02:39 - 000008192 ___SH C:\DumpStack.log.tmp
2022-03-12 16:37 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\ServiceState
2022-03-12 16:34 - 2021-12-06 02:29 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-03-12 16:33 - 2021-12-06 02:50 - 000000000 ____D C:\Users\Uživatel\AppData\Local\D3DSCache
2022-03-12 13:46 - 2021-12-06 02:32 - 000000000 ___HD C:\Program Files\WindowsApps
2022-03-12 13:46 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-03-12 10:23 - 2021-12-06 02:39 - 000634256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SystemResources
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-03-12 10:22 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-03-12 10:22 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\servicing
2022-03-12 10:07 - 2021-12-06 03:06 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-03-12 10:07 - 2021-12-06 02:29 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-03-12 10:05 - 2021-12-06 02:42 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-03-12 10:01 - 2021-12-06 03:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-03-12 10:00 - 2021-12-06 03:05 - 145666720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-03-12 09:51 - 2021-12-05 21:28 - 000000000 ____D C:\WINDOWS\TempInst
2022-03-12 09:40 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\ElevocConfig
2022-03-08 21:34 - 2022-01-05 20:59 - 000000000 ____D C:\Users\Uživatel\Desktop\Ulož exterňák
2022-03-08 21:00 - 2021-12-05 21:31 - 000002258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-03-08 21:00 - 2021-12-05 21:31 - 000002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-03-07 17:46 - 2021-12-29 17:57 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4032367770-2957954575-1367609206-1001
2022-03-07 17:46 - 2021-12-06 02:52 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4032367770-2957954575-1367609206-1001
2022-03-07 17:46 - 2021-12-06 02:49 - 000002401 _____ C:\Users\Uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-03-05 14:51 - 2021-12-06 02:40 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-02-20 21:30 - 2022-01-15 15:01 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-02-20 21:04 - 2022-01-12 22:11 - 000003321 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-14 22:02 - 2021-12-06 02:32 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-14 21:38 - 2021-12-06 02:40 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-02-14 21:06 - 2021-12-06 03:06 - 000600944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2022-02-14 21:06 - 2021-12-06 03:06 - 000482120 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-03-2022
Ran by Uživatel (12-03-2022 17:06:04)
Running from C:\Users\Uživatel\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1586 (X64) (2021-12-06 01:47:32)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-4032367770-2957954575-1367609206-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4032367770-2957954575-1367609206-503 - Limited - Disabled)
Guest (S-1-5-21-4032367770-2957954575-1367609206-501 - Limited - Disabled)
Uživatel (S-1-5-21-4032367770-2957954575-1367609206-1001 - Administrator - Enabled) => C:\Users\Uživatel
WDAGUtilityAccount (S-1-5-21-4032367770-2957954575-1367609206-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.011.20039 - Adobe Systems Incorporated)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)
CCleaner (HKLM\...\CCleaner) (Version: 5.90 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 99.0.4844.51 - Google LLC)
IrfanView 4.59 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.59 - Irfan Skiljan)
Jpeg Resampler Vs 6+ (HKLM-x32\...\JpegResampler2010_is1) (Version: - Jpeg Resampler)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.11.20.0 - Lenovo Group Ltd.)
LibreOffice 7.2.3.2 (HKLM\...\{81490660-3C36-47B4-AE9F-73B6C5BD4F98}) (Version: 7.2.3.2 - The Document Foundation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 99.0.1150.30 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\...\OneDriveSetup.exe) (Version: 22.033.0213.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{5016990D-7F61-4A20-9451-A915D6616DD9}) (Version: 3.66.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720 (HKLM-x32\...\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}) (Version: 14.26.28720.3 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 94.0.2 (x64 cs)) (Version: 94.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 94.0.2 - Mozilla)
Skype verze 8.79 (HKLM-x32\...\Skype_is1) (Version: 8.79 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\advancedmicrodevicesinc-2.amdradeonsoftware_10.20.40028.0_x64__0a9344xs7nr4m [2021-12-06] (Advanced Micro Devices Inc.) [Startup Task]
AV1 Video Extension -> C:\Program Files\WindowsApps\microsoft.av1videoextension_1.1.41601.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Dolby Audio -> C:\Program Files\WindowsApps\dolbylaboratories.dolbyaudio_3.20800.804.0_x64__rz1tebttyb220 [2021-12-06] (Dolby Laboratories)
Elevoc Vocplus System -> C:\Program Files\WindowsApps\elevoctechnologyco.ltd.elevocvocplussystem_1.0.29.0_x64__ttaqwwhyt5s6t [2021-12-06] (Elevoc Technology Co., Ltd.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.2.33.0_x64__5grkq8ppsgwt4 [2022-02-27] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2202.9.0_x64__k1h2ywk1493x8 [2022-03-07] (LENOVO INC.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.2180.0_x64__8wekyb3d8bbwe [2022-03-07] (Microsoft Studios) [MS Ad]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.28.255.0_x64__dt26b99r8h8gj [2022-03-12] (Realtek Semiconductor Corp)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\microsoft.mpeg2videoextension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-12-06] (Microsoft Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0 [2022-03-07] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers1: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-10-07] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => C:\Program Files (x86)\JpegResampler2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers6: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => C:\Program Files (x86)\JpegResampler2010\JRcm64.dll [2010-09-06] () [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-19] (Fox Magic Software) [File not signed]

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2022-01-15 15:36 - 2010-09-06 18:21 - 000538435 _____ () [File not signed] C:\Program Files (x86)\JpegResampler2010\JRcm64.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\Lenovo\LenovoWallPaper.jpg
DNS Servers: 62.129.50.20 - 85.135.32.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{67638477-FE00-415C-8C0B-34DA633255C9}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => No File
FirewallRules: [{55047435-0DE3-480E-8A13-DA9AA543287B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => No File
FirewallRules: [{5BCF31A0-C0CC-4860-A54E-B8AC1C1E85C8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CC30323A-543E-4971-8B5E-37EA1FAB18C3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BAF93F76-171B-45E0-944B-8188218D9E42}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1641552C-D1E0-488B-A1AB-8D995B92C46C}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{60D09550-D1F0-4970-92F8-D320236AF8DA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{31EFE34F-EAFD-4711-80EA-6B99498F03B2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{551A93DC-A604-422A-A603-80B0D1CD52EC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BAEF6C7B-D505-4729-9C83-DE111147F842}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2C81354D-5F45-4E48-9F4F-C9D38FC1864A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{003B2AAF-2D30-4F90-872E-1E5F0AF579FA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5DD1694F-E4DF-49BF-BCD8-F64A49F8EBD1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{ED19080A-6133-48CC-966E-2716E9C777DF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{FA068195-1BA4-4FE1-9BAF-AAF20C164408}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{621B08C3-B7C3-4AD3-A1AA-3B687AAE8366}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E0AC92AD-07C6-4DDD-B58E-B888844C646A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0432BA35-3D3A-4554-8056-EA8DA51A0564}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BB1291E4-FE28-4236-AE13-F78A157DB104}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

12-01-2022 22:15:11 Instalační služba modulů systému Windows
23-01-2022 18:45:00 Instalační služba modulů systému Windows
27-01-2022 21:30:05 Instalační služba modulů systému Windows
12-02-2022 17:14:31 Instalační služba modulů systému Windows
20-02-2022 21:12:44 Instalační služba modulů systému Windows
12-03-2022 10:01:09 Instalační služba modulů systému Windows
12-03-2022 16:41:53 AdwCleaner_BeforeCleaning_12/03/2022_16:41:52

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (03/12/2022 10:23:11 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (03/12/2022 10:23:11 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (03/01/2022 09:12:34 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (03/01/2022 09:12:34 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (03/01/2022 09:12:34 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (02/27/2022 09:22:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: backgroundTaskHost.exe, verze: 10.0.19041.546, časové razítko: 0x1d3a15e7
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1503, časové razítko: 0xb2acaea9
Kód výjimky: 0xc000027b
Posun chyby: 0x000000000010b382
ID chybujícího procesu: 0x176c
Čas spuštění chybující aplikace: 0x01d82c17bb11934d
Cesta k chybující aplikaci: C:\WINDOWS\system32\backgroundTaskHost.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 2fadf335-a1e0-44a1-bc94-8be4cc2cc000
Úplný název chybujícího balíčku: Microsoft.Windows.Search_1.14.3.19041_neutral_neutral_cw5n1h2txyewy
ID aplikace související s chybujícím balíčkem: ShellFeedsUI

Error: (02/07/2022 08:54:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program explorer.exe verze 10.0.19041.1469 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2f2c

Čas spuštění: 01d81c5a638f49db

Čas ukončení: 0

Cesta k aplikaci: C:\Windows\explorer.exe

ID hlášení: 6f010862-4bb5-4194-b198-38a3f2ef6671

Úplný název balíčku s chybou:

ID aplikace relativní podle balíčku s chybou:

Typ zablokování: Unknown

Error: (02/05/2022 02:42:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CCleaner64.exe, verze: 5.89.0.9401, časové razítko: 0x61eff15b
Název chybujícího modulu: CCleaner64.exe, verze: 5.89.0.9401, časové razítko: 0x61eff15b
Kód výjimky: 0xc000041d
Posun chyby: 0x0000000000c12a1f
ID chybujícího procesu: 0x824
Čas spuštění chybující aplikace: 0x01d81a9637be1160
Cesta k chybující aplikaci: C:\Program Files\CCleaner\CCleaner64.exe
Cesta k chybujícímu modulu: C:\Program Files\CCleaner\CCleaner64.exe
ID zprávy: 4b062763-6314-497a-83ac-5ceb886764f4
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (03/12/2022 04:52:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba System Interface Foundation Service neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.

Error: (03/12/2022 04:42:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba System Interface Foundation Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/12/2022 04:42:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba LenovoVantageService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/12/2022 04:42:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Universal Device Client Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (03/12/2022 04:42:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Realtek Audio Universal Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (03/12/2022 04:42:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Realtek Bluetooth Device Manager Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/12/2022 04:42:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Lenovo Notebook ITS Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/12/2022 04:42:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Lenovo Fn and function keys service byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
================
Date: 2022-03-12 17:03:32
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/CandyOpen
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{96A98C13-FCF2-4658-A821-61D9456D99B0}; clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{A3C8235E-5802-40FB-B519-F72C5B99B2D7}; file:_C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\eWorker.exe; interface:_HKLM\SOFTWARE\CLASSES\INTERFACE\{21A9C99D-CCD8-42BD-AFC9-B074ABCA319F}; interface:_HKLM\SOFTWARE\CLASSES\INTERFACE\{40BD26C6-3139-47F3-84E6-E33B002ED5DE}; interface:_HKLM\SOFTWARE\CLASSES\INTERFACE\{70AF754A-8580-4C00-B2BA-857037BE831F}; interface:_HKLM\SOFTWARE\CLASSES\INTERFACE\{963D710B-65FA-4C8F-A0F8-D1D6D7E39037}; interface:_HKLM\SOFTWARE\Wow6432Node\CLASSES\INTERFACE\{21A9C99D-CCD8-42BD-AFC9-B074ABCA319F}; interface:_HKLM\SOFTWARE\Wow6432Node\CLASSES\INTERFACE\{40BD26C6-3139-47F3-84E6-E33B002ED5DE}; interface:_HKLM\SOFTWARE\Wow6432Node\CLASSES\INTERFACE\{70AF754A-8580-4C00-B2BA-857037BE831F}; interface:_HKLM\SOFTWARE\Wow6432Node\CLASSES\INTERFACE\{963D710B-65FA-4C8F-A0F8-D1D6D7E39037}; regkey:_HKLM\SOFTWARE\CLASSES\INTERFACE\{21A9C99D-CCD8-42BD-AFC9-B
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Uživatel
Uživatel: VEV\Uživatel
Název procesu: Unknown
Verze bezpečnostních informací: AV: 1.359.1844.0, AS: 1.359.1844.0, NIS: 1.359.1844.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-03-12 17:01:57
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/CandyOpen
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\eWorker.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Uživatel
Uživatel: VEV\Uživatel
Název procesu: Unknown
Verze bezpečnostních informací: AV: 1.359.1810.0, AS: 1.359.1810.0, NIS: 1.359.1810.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-03-08 21:32:08
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/InstallCore
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_E:\NOVÝ NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel:
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.1570.0, AS: 1.359.1570.0, NIS: 1.359.1570.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-02-27 21:33:08
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUADlManager:Win32/InstallCore
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_E:\NOVÝ NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.1039.0, AS: 1.359.1039.0, NIS: 1.359.1039.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

Date: 2022-02-20 21:20:46
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: PUABundler:Win32/CandyOpen
Závažnost: Nízké
Kategorie: Potenciálně nežádoucí software
Cesta: file:_C:\MOJE\Setup - instalačky\atubecatcher-setup.exe
Původ detekce: Místní počítač
Typ detekce: FastPath
Zdroj detekce: Ochrana v reálném čase
Uživatel: VEV\Uživatel
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.359.570.0, AS: 1.359.570.0, NIS: 1.359.570.0
Verze modulu: AM: 1.1.18900.3, NIS: 1.1.18900.3

CodeIntegrity:
===============
Date: 2021-12-06 02:49:11
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\McAfee\Platform\Core\vtploader.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

BIOS: LENOVO GLCN40WW 07/23/2021
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 3 5300U with Radeon Graphics
Percentage of memory in use: 61%
Total physical RAM: 6005.99 MB
Available physical RAM: 2303.52 MB
Total Virtual: 6965.99 MB
Available Virtual: 2700.56 MB

==================== Drives ================================

Drive c: (Windows-SSD) (Fixed) (Total:237.23 GB) (Free:154.15 GB) NTFS

\\?\Volume{c7a9fb56-068b-4170-8dea-d818eca51e93}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.48 GB) NTFS
\\?\Volume{f097b473-34ff-4680-a182-4ff678b8b272}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 4263E35A)

Partition: GPT.

==================== End of Addition.txt =======================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
FirewallRules: [{67638477-FE00-415C-8C0B-34DA633255C9}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => No File
FirewallRules: [{55047435-0DE3-480E-8A13-DA9AA543287B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => No File
HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{96A98C13-FCF2-4658-A821-61D9456D99B0}; clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{A3C8235E-5802-40FB-B519-F72C5B99B2D7}
C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\eWorker.exe
E:\NOVÝ NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Task: {0102AB2D-0DD7-49D5-A735-9BAD0F9095A5} - System32\Tasks\McAfeeTsk\OOBEUpgrader => C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe /Run (No File)
Task: {3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {5605575F-1F2B-4660-B130-5361DE3FEC6E} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {67056FF8-BA67-4800-92CB-A9704C62C6DA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-02-14] (Piriform Software Ltd -> Piriform)
Task: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {80812E19-FBED-44AE-A66B-BB5E4C56742D} - \Lenovo\ImController\TimeBasedEvents\494fdb9c-6546-4011-bc72-6cf1a922dc8b -> No File <==== ATTENTION
Task: {AC353F25-FE83-4E22-BF02-DF3B1C904A51} - \Lenovo\ImController\TimeBasedEvents\ad079e3e-1fb5-4194-8fa6-93431dc99007 -> No File <==== ATTENTION
Task: {AE8A06CB-51EA-48FB-BE25-AB3813444532} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
Task: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {BEC4020B-33DB-405C-9683-417562BD7D9D} - \Lenovo\ImController\TimeBasedEvents\91b99a1f-7ed4-4b2f-b443-8c743f221554 -> No File <==== ATTENTION
Task: {CA958B36-436C-40AC-B24C-0A6C65666A8A} - \Lenovo\ImController\TimeBasedEvents\40e97e50-5ea7-42a2-b3b1-ee63bf289a9b -> No File <==== ATTENTION
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe /CM -search R -action INSTALL -includerebootpackages 1,3,4,5 -noicon -noreboot -nolicense -defaultupdate -schtask (No File)
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {F2D15FEB-BE4E-4CF2-A183-D6311684F4CC} - \Lenovo\ImController\TimeBasedEvents\8792a728-146c-41f0-85cc-9fbfb054fe97 -> No File <==== ATTENTION
C:\DumpStack.log.tmp

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Posílám

Fix result of Farbar Recovery Scan Tool (x64) Version: 08-03-2022
Ran by Uživatel (12-03-2022 18:02:40) Run:2
Running from C:\Users\Uživatel\Desktop
Loaded Profiles: Uživatel
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
FirewallRules: [{67638477-FE00-415C-8C0B-34DA633255C9}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => No File
FirewallRules: [{55047435-0DE3-480E-8A13-DA9AA543287B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => No File
HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{96A98C13-FCF2-4658-A821-61D9456D99B0}; clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{A3C8235E-5802-40FB-B519-F72C5B99B2D7}
C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\eWorker.exe
E:\NOVÝ NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe
Task: {0102AB2D-0DD7-49D5-A735-9BAD0F9095A5} - System32\Tasks\McAfeeTsk\OOBEUpgrader => C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe /Run (No File)
Task: {3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {5605575F-1F2B-4660-B130-5361DE3FEC6E} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {67056FF8-BA67-4800-92CB-A9704C62C6DA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-02-14] (Piriform Software Ltd -> Piriform)
Task: {6CBEF361-EE00-46F9-B3B8-D803788F07C8} - \Microsoft\Windows\Management\Provisioning\PostResetBoot -> No File <==== ATTENTION
Task: {80812E19-FBED-44AE-A66B-BB5E4C56742D} - \Lenovo\ImController\TimeBasedEvents\494fdb9c-6546-4011-bc72-6cf1a922dc8b -> No File <==== ATTENTION
Task: {AC353F25-FE83-4E22-BF02-DF3B1C904A51} - \Lenovo\ImController\TimeBasedEvents\ad079e3e-1fb5-4194-8fa6-93431dc99007 -> No File <==== ATTENTION
Task: {AE8A06CB-51EA-48FB-BE25-AB3813444532} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
Task: {B063963F-A154-4A26-97E2-2930E1BA8FCD} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {BEC4020B-33DB-405C-9683-417562BD7D9D} - \Lenovo\ImController\TimeBasedEvents\91b99a1f-7ed4-4b2f-b443-8c743f221554 -> No File <==== ATTENTION
Task: {CA958B36-436C-40AC-B24C-0A6C65666A8A} - \Lenovo\ImController\TimeBasedEvents\40e97e50-5ea7-42a2-b3b1-ee63bf289a9b -> No File <==== ATTENTION
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe /CM -search R -action INSTALL -includerebootpackages 1,3,4,5 -noicon -noreboot -nolicense -defaultupdate -schtask (No File)
Task: {CE3B3DDC-B916-43D0-8006-9C2A02429F1C} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (No File)
Task: {F2D15FEB-BE4E-4CF2-A183-D6311684F4CC} - \Lenovo\ImController\TimeBasedEvents\8792a728-146c-41f0-85cc-9fbfb054fe97 -> No File <==== ATTENTION
C:\DumpStack.log.tmp

EmptyTemp:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-4032367770-2957954575-1367609206-1001\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{67638477-FE00-415C-8C0B-34DA633255C9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{55047435-0DE3-480E-8A13-DA9AA543287B}" => removed successfully
HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{96A98C13-FCF2-4658-A821-61D9456D99B0}; clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{A3C8235E-5802-40FB-B519-F72C5B99B2D7} => Error: No automatic fix found for this entry.
"C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\eWorker.exe" => not found
"E:\NOVÝ NTB\Setup - instalačky\aTube_Catcher_4026407351 nová.exe" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0102AB2D-0DD7-49D5-A735-9BAD0F9095A5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0102AB2D-0DD7-49D5-A735-9BAD0F9095A5}" => removed successfully
C:\WINDOWS\System32\Tasks\McAfeeTsk\OOBEUpgrader => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McAfeeTsk\OOBEUpgrader" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3C633BF8-A6AE-4CD8-9243-1C00B7A1D8C3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Monitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5605575F-1F2B-4660-B130-5361DE3FEC6E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5605575F-1F2B-4660-B130-5361DE3FEC6E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{67056FF8-BA67-4800-92CB-A9704C62C6DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{67056FF8-BA67-4800-92CB-A9704C62C6DA}" => removed successfully
C:\WINDOWS\System32\Tasks\CCleaner Update => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleaner Update" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{6CBEF361-EE00-46F9-B3B8-D803788F07C8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CBEF361-EE00-46F9-B3B8-D803788F07C8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Management\Provisioning\PostResetBoot" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{80812E19-FBED-44AE-A66B-BB5E4C56742D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{80812E19-FBED-44AE-A66B-BB5E4C56742D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\494fdb9c-6546-4011-bc72-6cf1a922dc8b" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AC353F25-FE83-4E22-BF02-DF3B1C904A51}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC353F25-FE83-4E22-BF02-DF3B1C904A51}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\ad079e3e-1fb5-4194-8fa6-93431dc99007" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AE8A06CB-51EA-48FB-BE25-AB3813444532}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AE8A06CB-51EA-48FB-BE25-AB3813444532}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B063963F-A154-4A26-97E2-2930E1BA8FCD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B063963F-A154-4A26-97E2-2930E1BA8FCD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BEC4020B-33DB-405C-9683-417562BD7D9D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEC4020B-33DB-405C-9683-417562BD7D9D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\91b99a1f-7ed4-4b2f-b443-8c743f221554" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CA958B36-436C-40AC-B24C-0A6C65666A8A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA958B36-436C-40AC-B24C-0A6C65666A8A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\40e97e50-5ea7-42a2-b3b1-ee63bf289a9b" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CE3B3DDC-B916-43D0-8006-9C2A02429F1C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE3B3DDC-B916-43D0-8006-9C2A02429F1C}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\BatteryGauge\BatteryGaugeMaintenance" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BB57EC14-3E5E-42EC-BF3C-087BA9EB70DF}" => removed successfully
C:\WINDOWS\System32\Tasks\TVT\TVSUUpdateTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TVT\TVSUUpdateTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE3B3DDC-B916-43D0-8006-9C2A02429F1C}" => not found
"C:\WINDOWS\System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\BatteryGauge\BatteryGaugeMaintenance" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F2D15FEB-BE4E-4CF2-A183-D6311684F4CC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2D15FEB-BE4E-4CF2-A183-D6311684F4CC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\8792a728-146c-41f0-85cc-9fbfb054fe97" => removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 29858682 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 336641 B
Edge => 0 B
Chrome => 361246598 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 13544 B
Uživatel => 59326687 B

RecycleBin => 630468 B
EmptyTemp: => 430.5 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 12-03-2022 18:03:19)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 18:03:19 ====

Smazáno. Nastala nějaká změna?

Hláška se zatím neobjevuje, ale neobjevovala se ani předtím. Vlastně jen jednou a po zavření se zatím neobjevila. Tak snad je to OK. Moc děkuji

Rádo se stalo!