Dobrý den, prosím o kontrolu. Čistím PC tak ho chci vyčistit pořádně!
Logy:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-06-2022
Ran by David Hynek (administrator) on DESKTOP-KR0LJ7U (Gigabyte Technology Co., Ltd. Z390 GAMING X) (21-06-2022 23:46:15)
Running from C:\Users\David Hynek\Desktop
Loaded Profiles: David Hynek
Platform: Microsoft Windows 10 Home Version 21H2 19044.1766 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o. -> AVAST Software) C:\AVAST Software\Avast\AvastUI.exe <4>
(C:\AVAST Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Discord Inc. -> Discord Inc.) C:\Users\David Hynek\AppData\Local\Discord\app-1.0.9005\Discord.exe <6>
(explorer.exe ->) (A FOUR TECH CO., LTD. -> ) C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <30>
(explorer.exe ->) (Open Source Developer, Phillip Gibbons -> Highresolution Enterprises) C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Piriform Software Ltd -> Piriform Software Ltd) D:\CCleaner\CCleaner64.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe <2>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\2.00.06\atkexComSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft) C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) INTELND1820 -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(services.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_a217ec383447d0ea\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) D:\MSI Afterburner\MSIAfterburner.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [856288 2019-10-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\AVAST Software\Avast\AvLaunch.exe [212816 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [XMouseButtonControl] => C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1684216 2020-05-13] (Open Source Developer, Phillip Gibbons -> Highresolution Enterprises)
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [288184 2022-05-09] (Intel Corporation -> Intel)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe [14632 2016-02-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\Run: [CCleaner Smart Cleaning] => D:\CCleaner\CCleaner64.exe [36976728 2022-06-14] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\Run: [Discord] => C:\Users\David Hynek\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody7\Bloody7\Bloody7.exe [19841264 2020-02-13] (A FOUR TECH CO., LTD. -> )
HKU\S-1-5-21-994775172-3552113607-2548991599-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [39936 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-13] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {073B4831-54FC-4C40-AA84-2D9EFEB77624} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {0EC832CE-699A-473C-BBCD-ED770C529B59} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3231104 2022-05-02] (Intel Corporation -> Intel Corporation)
Task: {20703355-3AF6-4310-A987-44C96362B131} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342080 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {212A709E-AE5A-44CA-8FD2-5CE38AADA136} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {2389802F-510E-4881-9C40-934DF5D32B4A} - System32\Tasks\BlueStacksHelper => E:\BlueStacks\Client\Helper\BlueStacksHelper.exe [754472 2021-04-05] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {25BFBED2-007D-4FEC-8E7B-0A77632EF3DF} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646344 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {27980721-11F4-475F-B007-8EA539B319F1} - System32\Tasks\Avast Emergency Update => C:\AVAST Software\Avast\AvEmUpdate.exe [4925264 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
Task: {30464E63-9AF5-4A53-A9D9-C494B275BE2B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {358926DA-DDCF-4510-B990-D59BFFAFA554} - System32\Tasks\CCleanerSkipUAC - David Hynek => D:\CCleaner\CCleaner.exe [31027800 2022-06-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5B55F9C3-9B63-4666-A7D6-403178F0E872} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {5BC01BAB-4F1E-462C-BF31-BFC818B1FC6F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {5F8EA576-C6D7-456C-8EAC-8CD63C4A73F5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-28] (Google Inc -> Google LLC)
Task: {67D04438-A0B1-4B6E-807A-3A83CB10AB6B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {6B412588-B02E-4A56-B1CC-E9D677A9967E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-01] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {76FEEA48-9AB9-46B9-9188-2FBD44D3822F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6470640 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {7B0F887D-B495-48A2-862E-6628027AD590} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {844968AE-7349-4F67-83B3-48A4A9A5486B} - System32\Tasks\CCleaner Update => D:\CCleaner\CCUpdate.exe [619416 2022-06-21] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {88CE4365-B1FC-420C-8621-B4ED8FBBE1A5} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {9F651957-99E9-4C5A-9FBC-D9D86DF07956} - System32\Tasks\GBTECService => C:\Program Files (x86)\GIGABYTE\GBTECService\LiquidSensord.exe [253312 2021-06-23] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {A4788FE6-B081-4017-9FEE-1791E41CD066} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {A8062072-F349-4207-B0A1-4576A4C6E1BB} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {AD8E3438-E2DD-4F9C-BC71-D0AB8744D3B6} - System32\Tasks\MSIAfterburner => D:\MSI Afterburner\MSIAfterburner.exe [782320 2019-10-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {B67CB4CD-5A46-460D-A729-F474D681872E} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3231104 2022-05-02] (Intel Corporation -> Intel Corporation)
Task: {BA0B00F5-E6FA-4DCB-A464-C17CDCFD9FB5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-28] (Google Inc -> Google LLC)
Task: {BD5E8D52-468A-45B5-BC4A-1B412A7274F9} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115624 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {BDC62734-8707-4715-83FF-80F9F27F7DEE} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {C27DD72E-8C31-4589-A4B8-6E5E65E802C4} - System32\Tasks\GraphicsCardEngine => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngineStarter.exe [234880 2021-04-13] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {D50B5258-1ED8-4560-A8FF-5B106173D65E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6470640 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {E53D7018-A62D-4B86-8F82-37B1242EFE5F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115624 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {F08C8826-D30F-41D3-8527-9EBD46E10A3C} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {F16E0F1C-4A1E-47C0-827B-7F293103BADC} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2250576 2022-05-24] (Avast Software s.r.o. -> Avast Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{013838db-2b9b-489b-adc2-b1af1a53491a}: [DhcpNameServer] 10.0.0.138
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\David Hynek\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-09]
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.11 -> D:\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> D:\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.211.2 -> D:\Java\bin\dtplugin\npDeployJava1.dll [2019-07-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.211.2 -> D:\Java\bin\plugin2\npjp2.dll [2019-07-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-05] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default [2022-06-21]
CHR DownloadDir: D:\ChromeDownloads
CHR Notifications: Default -> hxxps://badoo.com; hxxps://discord.com; hxxps://lostmerchants.com; hxxps://www.escapefromtarkov.com; hxxps://www.facebook.com; hxxps://www.pathofexile.com; hxxps://www.tipsport.cz
CHR Session Restore: Default -> is enabled.
CHR Extension: (BetterTTV) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2022-05-30]
CHR Extension: (7TV) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammjkodgmmoknidbanneddgankgfejfh [2022-05-08]
CHR Extension: (TFT Trade Extension) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bikeebdigkompjnpcljicocidefgbhgl [2022-06-15]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-05-31]
CHR Extension: (uBlock Origin) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2022-06-19]
CHR Extension: (Tampermonkey) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2022-05-12]
CHR Extension: (Better PathOfExile Trading) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhlinfpmdlijegjlpgedcmglkakaghnk [2021-11-06]
CHR Extension: (Return YouTube Dislike) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2022-05-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-06-16]
CHR Extension: (Streamlabs Export To StreamElements) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\micpdieddpifbgnnlbelgamnfpeonkpe [2022-05-08]
CHR Extension: (Path of Exile Trade - Fuzzy Search) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkbkmkampdnnbehdldipgjhbablkmfba [2022-06-04]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-05-10]
CHR Profile: C:\Users\David Hynek\AppData\Local\Google\Chrome\User Data\System Profile [2022-05-10]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\2.00.06\atkexComSvc.exe [411456 2019-04-30] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R3 aswbIDSAgent; C:\AVAST Software\Avast\aswidsagent.exe [8432776 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\AVAST Software\Avast\AvastSvc.exe [576336 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\AVAST Software\Avast\aswToolsSvc.exe [576336 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\AVAST Software\Avast\wsc_proxy.exe [56912 2021-05-20] (Avast Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8906088 2021-03-26] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988384 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [39352 2022-05-09] (Intel Corporation -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [184248 2022-05-09] (Intel Corporation -> Intel)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2022-06-07] (EasyAntiCheat Oy -> Epic Games, Inc)
R2 EasyTuneEngineService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe [147840 2022-01-25] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
S3 GalaxyClientService; D:\GOG Galaxy\GalaxyClientService.exe [1959776 2022-04-04] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6484832 2022-04-04] (GOG Sp. z o.o. -> GOG.com)
S2 GBTECService; C:\Program Files (x86)\Gigabyte\GBTECService\OLEDDisplayService.exe [16768 2021-06-23] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [19888 2016-12-02] (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft)
R2 LMS; C:\Intel(R) Management Engine Components\LMS\LMS.exe [625240 2018-11-16] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 LogiFacecamService; C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe [497568 2021-10-25] (Logitech Inc -> Logitech)
R2 MyService1; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
S2 OCButtonService; C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe [127360 2021-04-13] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2575624 2022-05-27] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3494672 2022-05-27] (Electronic Arts, Inc. -> Electronic Arts)
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2019-11-12] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_a217ec383447d0ea\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_a217ec383447d0ea\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2019-04-30] (ASUSTeK Computer Inc. -> )
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [38912 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [232648 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [382608 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [255136 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [102048 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [21936 2021-09-23] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [45072 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [271600 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [548968 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111056 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [86120 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [857488 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [662160 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [218608 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [321928 2022-06-07] (Avast Software s.r.o. -> AVAST Software)
R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-10-05] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 gdrv; C:\Windows\gdrv.sys [26792 2019-04-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 gdrv2; C:\WINDOWS\gdrv2.sys [32600 2022-06-21] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 gdrv3; C:\WINDOWS\System32\drivers\gdrv3.sys [41480 2022-06-21] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R1 GLCKIO2; C:\Windows\system32\drivers\GLCKIO2.sys [19392 2018-04-23] (ASUSTeK Computer Inc. -> )
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R3 RTCore64; D:\MSI Afterburner\RTCore64.sys [24000 2019-09-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2719256 2021-08-20] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-06-21 23:46 - 2022-06-21 23:46 - 000027805 _____ C:\Users\David Hynek\Desktop\FRST.txt
2022-06-21 23:45 - 2022-06-21 23:45 - 002369024 _____ (Farbar) C:\Users\David Hynek\Desktop\FRST64.exe
2022-06-21 23:40 - 2022-06-21 23:40 - 000003502 _____ C:\WINDOWS\system32\Tasks\GraphicsCardEngine
2022-06-21 23:40 - 2022-06-21 23:40 - 000000000 ____D C:\Users\David Hynek\Desktop\app
2022-06-21 23:37 - 2022-06-21 23:37 - 000041480 ____N (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\Drivers\gdrv3.sys
2022-06-21 23:35 - 2022-06-21 23:40 - 000003448 _____ C:\WINDOWS\system32\Tasks\GBTECService
2022-06-21 23:27 - 2019-10-30 02:20 - 005623256 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPOU64.dll
2022-06-21 23:27 - 2019-10-30 02:20 - 001126344 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll
2022-06-21 23:27 - 2019-10-30 02:20 - 000481888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2022-06-21 23:27 - 2019-10-29 23:20 - 000856288 _____ (Realtek Semiconductor) C:\WINDOWS\system32\RtkAudUService64.exe
2022-06-21 23:27 - 2019-10-29 23:20 - 000821336 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll
2022-06-21 23:27 - 2019-10-29 23:20 - 000215032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2022-06-21 23:26 - 2022-06-21 23:26 - 000010752 _____ C:\WINDOWS\SetupAfterRebootService.exe
2022-06-21 22:45 - 2022-06-21 22:45 - 000000000 ____D C:\UserBenchmark
2022-06-20 17:56 - 2022-06-07 19:13 - 000041992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2022-06-20 17:55 - 2022-06-08 23:01 - 001905920 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-06-20 17:55 - 2022-06-08 23:01 - 001905920 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-06-20 17:55 - 2022-06-08 23:01 - 001478400 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-06-20 17:55 - 2022-06-08 23:01 - 001478400 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-06-20 17:55 - 2022-06-08 23:01 - 001432320 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-06-20 17:55 - 2022-06-08 23:01 - 001432320 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-06-20 17:55 - 2022-06-08 23:01 - 001145600 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-06-20 17:55 - 2022-06-08 23:01 - 001145600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-06-20 17:55 - 2022-06-08 23:00 - 001471104 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-06-20 17:55 - 2022-06-08 23:00 - 001212544 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-06-20 17:55 - 2022-06-08 22:57 - 000865784 _____ C:\WINDOWS\system32\nvofapi64.dll
2022-06-20 17:55 - 2022-06-08 22:57 - 000770688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-06-20 17:55 - 2022-06-08 22:57 - 000687608 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2022-06-20 17:55 - 2022-06-08 22:56 - 002126456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-06-20 17:55 - 2022-06-08 22:56 - 001607144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-06-20 17:55 - 2022-06-08 22:56 - 001535480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-06-20 17:55 - 2022-06-08 22:56 - 001182200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-06-20 17:55 - 2022-06-08 22:56 - 001058416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-06-20 17:55 - 2022-06-08 22:56 - 000844400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-06-20 17:55 - 2022-06-08 22:56 - 000714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-06-20 17:55 - 2022-06-08 22:55 - 010268792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-06-20 17:55 - 2022-06-08 22:55 - 008803304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-06-20 17:55 - 2022-06-08 22:55 - 005732344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-06-20 17:55 - 2022-06-08 22:55 - 005362680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-06-20 17:55 - 2022-06-08 22:55 - 000455288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-06-20 17:55 - 2022-06-08 22:54 - 000852072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-06-20 17:55 - 2022-06-07 06:08 - 000093121 _____ C:\WINDOWS\system32\nvinfo.pb
2022-06-20 17:07 - 2022-06-20 17:07 - 000001217 _____ C:\Users\David Hynek\Desktop\obs64.exe – zástupce.lnk
2022-06-19 16:25 - 2022-06-19 16:25 - 000000000 ___HD C:\$WinREAgent
2022-06-19 15:16 - 2022-06-19 15:16 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-19 15:16 - 2022-06-19 15:16 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-19 15:16 - 2022-06-19 15:16 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-19 15:16 - 2022-06-19 15:16 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-19 15:16 - 2022-06-19 15:16 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-15 01:50 - 2022-06-15 01:50 - 000001075 _____ C:\Users\David Hynek\Desktop\PoE-HarvestVendor.exe.lnk
2022-06-13 17:21 - 2022-06-13 17:21 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-000003-000000.txt
2022-06-07 15:33 - 2022-06-07 15:33 - 000269136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2022-06-07 15:33 - 2022-06-07 15:33 - 000218608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2022-06-02 20:40 - 2022-06-02 20:42 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\CC
2022-06-02 20:39 - 2022-06-02 20:39 - 000000000 ____D C:\Users\David Hynek\AppData\Local\Netease
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-06-21 23:46 - 2021-02-08 12:08 - 001693410 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-06-21 23:46 - 2020-01-15 02:16 - 000000000 ____D C:\FRST
2022-06-21 23:46 - 2019-12-07 16:41 - 000716764 _____ C:\WINDOWS\system32\perfh005.dat
2022-06-21 23:46 - 2019-12-07 16:41 - 000144942 _____ C:\WINDOWS\system32\perfc005.dat
2022-06-21 23:46 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-06-21 23:45 - 2019-04-28 09:51 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\Discord
2022-06-21 23:44 - 2019-04-28 20:44 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-21 23:43 - 2019-04-28 13:49 - 000000000 ____D C:\Users\David Hynek\AppData\Local\CrashDumps
2022-06-21 23:42 - 2021-02-08 12:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-21 23:42 - 2021-02-08 12:03 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-21 23:42 - 2020-08-21 19:58 - 000000000 ____D C:\ProgramData\NVIDIA
2022-06-21 23:42 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-21 23:42 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-06-21 23:42 - 2019-04-28 13:45 - 000032600 ____N (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\gdrv2.sys
2022-06-21 23:42 - 2019-04-28 10:33 - 000000000 ____D C:\ProgramData\AVAST Software
2022-06-21 23:42 - 2019-04-28 09:51 - 000000000 ____D C:\Users\David Hynek\AppData\Local\Discord
2022-06-21 23:42 - 2019-04-28 09:17 - 000000000 ___RD C:\Users\David Hynek\OneDrive
2022-06-21 23:41 - 2021-02-08 12:07 - 000003114 _____ C:\WINDOWS\system32\Tasks\MSIAfterburner
2022-06-21 23:40 - 2019-04-28 13:45 - 000000000 ____D C:\Program Files (x86)\GIGABYTE
2022-06-21 23:37 - 2019-04-28 13:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2022-06-21 23:30 - 2019-04-28 13:45 - 000000000 ____D C:\Users\David Hynek\AppData\Local\Downloaded Installations
2022-06-21 23:30 - 2019-04-28 09:55 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-06-21 23:26 - 2019-04-28 09:55 - 000000000 ___HD C:\Program Files (x86)\Temp
2022-06-21 23:17 - 2022-05-20 10:45 - 000002678 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2022-06-21 23:17 - 2021-12-11 21:40 - 000003062 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-994775172-3552113607-2548991599-1001
2022-06-21 23:17 - 2021-08-19 01:10 - 000002236 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - David Hynek
2022-06-21 23:17 - 2021-08-05 10:50 - 000003402 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-06-21 23:17 - 2021-08-05 10:50 - 000003178 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-06-21 23:17 - 2021-05-10 08:24 - 000002940 _____ C:\WINDOWS\system32\Tasks\BlueStacksHelper
2022-06-21 23:17 - 2021-02-26 15:07 - 000003374 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6fe02431a7995
2022-06-21 23:17 - 2021-02-08 12:07 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-21 23:17 - 2021-02-08 12:07 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-06-21 23:17 - 2021-02-08 12:07 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000003288 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-06-21 23:17 - 2021-02-08 12:07 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000003042 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2022-06-21 23:17 - 2021-02-08 12:07 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000002970 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2022-06-21 23:17 - 2021-02-08 12:07 - 000002960 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-06-21 23:17 - 2021-02-08 12:07 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-994775172-3552113607-2548991599-1001
2022-06-21 23:17 - 2021-02-08 12:07 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-21 23:17 - 2021-02-08 12:07 - 000002604 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2022-06-21 23:16 - 2021-02-08 12:07 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2022-06-21 23:16 - 2020-11-14 12:52 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\obs-studio
2022-06-21 22:54 - 2020-06-21 18:31 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\awakened-poe-trade
2022-06-21 22:54 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-21 22:52 - 2019-04-28 17:28 - 000000000 ____D C:\Users\David Hynek\AppData\Local\Battle.net
2022-06-21 22:51 - 2020-08-21 19:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2022-06-21 22:51 - 2019-04-28 10:08 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2022-06-21 22:51 - 2019-04-28 10:06 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2022-06-21 22:42 - 2021-08-04 12:00 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\PoeLurker
2022-06-21 16:22 - 2021-09-12 13:13 - 000000000 ____D C:\Users\David Hynek\Desktop\Hideouts
2022-06-21 16:09 - 2019-05-06 18:23 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\Origin
2022-06-21 16:03 - 2019-05-06 18:23 - 000000000 ____D C:\Users\David Hynek\AppData\Local\Origin
2022-06-21 15:59 - 2019-04-28 19:15 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\Spotify
2022-06-21 15:18 - 2019-05-07 02:54 - 000000000 ____D C:\Program Files (x86)\Origin Games
2022-06-21 15:18 - 2019-05-06 18:23 - 000000000 ____D C:\ProgramData\Origin
2022-06-21 13:58 - 2021-02-08 12:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-21 11:14 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-21 11:10 - 2020-08-21 19:58 - 000000000 ____D C:\Users\David Hynek\AppData\Local\NVIDIA
2022-06-21 03:45 - 2021-02-07 23:37 - 000000000 ____D C:\Users\David Hynek
2022-06-20 22:41 - 2019-04-28 19:26 - 000000000 ____D C:\Users\David Hynek\AppData\Local\Spotify
2022-06-20 17:57 - 2020-08-21 19:58 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2022-06-20 17:51 - 2019-04-28 13:28 - 000007598 _____ C:\Users\David Hynek\AppData\Local\resmon.resmoncfg
2022-06-20 17:07 - 2022-01-03 06:43 - 000001696 _____ C:\Users\David Hynek\Desktop\StreamElements SE.Live.lnk
2022-06-20 11:17 - 2021-02-08 12:03 - 000444160 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-06-20 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-20 11:16 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-06-19 17:11 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-19 15:16 - 2019-04-28 09:58 - 000415524 __RSH C:\bootmgr
2022-06-19 15:15 - 2021-02-08 12:05 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-19 15:07 - 2019-04-28 10:37 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-06-19 15:04 - 2019-04-28 10:37 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-06-18 23:49 - 2021-05-12 06:27 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\PoE-HarvestVendor
2022-06-18 22:49 - 2019-07-16 23:27 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\uTorrent
2022-06-18 21:22 - 2019-04-28 20:24 - 000000000 ____D C:\Users\David Hynek\AppData\Local\BitTorrentHelper
2022-06-18 18:59 - 2019-05-07 16:45 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-06-17 22:49 - 2019-05-09 22:55 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\TS3Client
2022-06-17 22:44 - 2020-06-10 15:09 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-17 22:44 - 2020-06-10 15:09 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-06-15 20:43 - 2019-04-28 18:40 - 000000000 ____D C:\Users\David Hynek\AppData\Local\EpicGamesLauncher
2022-06-15 12:58 - 2021-01-11 19:30 - 000000000 ____D C:\Path of Exile
2022-06-13 22:35 - 2019-04-28 20:47 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-06-13 22:12 - 2021-02-07 23:37 - 000002395 _____ C:\Users\David Hynek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-13 00:06 - 2019-08-17 18:04 - 000000000 ____D C:\ProgramData\Riot Games
2022-06-12 13:41 - 2021-08-26 23:53 - 000000000 ____D C:\Users\David Hynek\AppData\Local\PoeLurker
2022-06-12 13:41 - 2021-08-04 12:00 - 000002447 _____ C:\Users\David Hynek\Desktop\Poe Lurker.lnk
2022-06-12 13:41 - 2021-08-04 12:00 - 000000000 ____D C:\Users\David Hynek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\C1rdec
2022-06-10 10:15 - 2021-02-08 12:07 - 000004236 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2022-06-09 12:19 - 2019-04-28 13:34 - 000000000 ____D C:\Users\David Hynek\AppData\Local\D3DSCache
2022-06-08 22:55 - 2021-12-05 21:30 - 003065984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-06-08 22:53 - 2021-01-24 17:15 - 007478288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-06-08 22:53 - 2021-01-24 17:15 - 006362304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-06-07 19:13 - 2021-01-24 17:17 - 000129032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2022-06-07 15:33 - 2020-10-13 19:22 - 000271600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2022-06-07 15:33 - 2020-04-14 17:46 - 000548968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2022-06-07 15:33 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-06-07 15:33 - 2019-04-28 10:36 - 000857488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000662160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000382608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000321928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000255136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000232648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000111056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000102048 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000086120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000045072 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2022-06-07 15:33 - 2019-04-28 10:36 - 000038912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2022-06-04 16:25 - 2019-04-28 09:32 - 000000000 ____D C:\ProgramData\Packages
2022-06-02 16:47 - 2019-04-28 17:26 - 000000000 ____D C:\Battle.net
==================== Files in the root of some directories ========
2019-04-28 13:28 - 2022-06-20 17:51 - 000007598 _____ () C:\Users\David Hynek\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-06-2022
Ran by David Hynek (21-06-2022 23:47:04)
Running from C:\Users\David Hynek\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1766 (X64) (2021-02-08 10:08:00)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-994775172-3552113607-2548991599-500 - Administrator - Disabled)
David Hynek (S-1-5-21-994775172-3552113607-2548991599-1001 - Administrator - Enabled) => C:\Users\David Hynek
DefaultAccount (S-1-5-21-994775172-3552113607-2548991599-503 - Limited - Disabled)
Guest (S-1-5-21-994775172-3552113607-2548991599-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-994775172-3552113607-2548991599-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
@BIOS (HKLM-x32\...\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 4.21.1203.1 - GIGABYTE) Hidden
@BIOS (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 4.21.1203.1 - GIGABYTE)
µTorrent (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\uTorrent) (Version: 3.5.5.46200 - BitTorrent Inc.)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 22.001.20117 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-001824458876}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AIDA64 Extreme v6.25 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 6.25 - FinalWire Ltd.)
Amazon Games (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\{4DD10B06-78A4-4E6F-AA39-25E9C38FA568}) (Version: 2.0.4983.3 - Amazon.com Services, Inc.)
Apex Legends (HKLM-x32\...\{D7FBF176-382D-484E-863A-DFD1124A2A1C}) (Version: 1.0.9.5 - Electronic Arts, Inc.)
APP Center (HKLM-x32\...\{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.22.0310.1 - Gigabyte) Hidden
APP Center (HKLM-x32\...\InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.22.0310.1 - Gigabyte)
ASUS GLCKIO2 Driver (HKLM-x32\...\{548dd834-70c5-4426-8065-fbeabdd2bb5d}) (Version: 1.0.10 - ASUSTeK Computer Inc.) Hidden
ASUS GLCKIO2 Driver (HKLM-x32\...\{5960FD0F-BB3B-49AF-B175-F77DC91E995A}) (Version: 1.0.10 - ASUSTeK Computer Inc.) Hidden
Audacity 3.1.3 (HKLM\...\Audacity_is1) (Version: 3.1.3 - Audacity Team)
AutoHotkey 1.1.33.02 (HKLM\...\AutoHotkey) (Version: 1.1.33.02 - Lexikos)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 22.5.6015 - Avast Software)
Awakened PoE Trade 3.18.10003 (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\2ea281da-028b-5d55-b26e-53163c89344a) (Version: 3.18.10003 - Alexander Drozdov)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bloody7 (HKLM-x32\...\Bloody3) (Version: 20.02.0002 - Bloody)
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.280.1.1002 - BlueStack Systems, Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.75.1089 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 6.01 - Piriform)
CPUID HWMonitor 1.45 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.45 - CPUID, Inc.)
Discord (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
EasyTuneEngineService (HKLM-x32\...\{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.22.0211 - GIGABYTE) Hidden
EasyTuneEngineService (HKLM-x32\...\InstallShield_{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.22.0211 - GIGABYTE)
Epic Games Launcher (HKLM-x32\...\{19BC09B5-F319-4A61-A878-475E7F7054EA}) (Version: 1.1.195.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Exilence Next 1.1.8 (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\58032b8c-4c17-5b0e-b3bc-74d53946ba55) (Version: 1.1.8 - )
FFmpeg v2.2.2 for Audacity - 64bit (HKLM\...\FFmpeg for Audacity_is1) (Version: - )
G.SKILL AURA DRAM Component (HKLM\...\{46EEF4E1-2117-4D64-A953-F1DE092495EB}) (Version: 1.00.10 - G.SKILL International Enterprise) Hidden
G.SKILL AURA DRAM Component (HKLM-x32\...\{4961d0dd-74e6-4696-abce-8f69a5badc6a}) (Version: 1.00.10 - G.SKILL International Enterprise) Hidden
GBTECService (HKLM-x32\...\{759D7F2F-1F0D-461E-A3CD-BF58FC60DB2F}) (Version: 1.21.1124 - Gigabyte) Hidden
GBTECService (HKLM-x32\...\InstallShield_{759D7F2F-1F0D-461E-A3CD-BF58FC60DB2F}) (Version: 1.21.1124 - Gigabyte)
Geeks3D FurMark 1.24.1.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: 1.24.1.0 - Geeks3D)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 102.0.5005.115 - Google LLC)
GService (HKLM-x32\...\{D9CB4282-7B2A-4840-AD1D-9DA72B973DD9}) (Version: 1.19.0624.1 - GIGABYTE)
ICQ (verze 10.0.38922) (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\icq.desktop) (Version: 10.0.38922 - Mail.ru LLC)
Intel Driver && Support Assistant (HKLM-x32\...\{19B7322D-268B-4D88-AA3E-938F36F9DCE9}) (Version: 22.3.20.6 - Intel) Hidden
Intel(R) Computing Improvement Program (HKLM\...\{D17293BC-1678-4281-B94E-DBCF66AE7611}) (Version: 2.4.08919 - Intel Corporation)
Intel(R) Graphics Driver Software (HKLM-x32\...\{6ad2f601-ab5f-47d5-bd6c-ef13a37b3a62}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) Graphics Driver Software (HKLM-x32\...\{d2843be8-a475-45ad-a151-dc20a9696584}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) Chipset Device Software (HKLM\...\{4A121459-D3F8-4908-A474-96D45641E357}) (Version: 10.1.18243.8188 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{f3b1c211-1159-4262-bb97-84150cda9096}) (Version: 10.1.18243.8188 - Intel(R) Corporation)
Intel(R) Management Engine Components (HKLM\...\{09DAB6B6-FBEF-4AC5-AE93-BFF01A0B796D}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1846.12.0.1177 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{B557A9A1-D64B-43D7-B598-F7BAAE897CF3}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{3479FCE3-F7D2-4980-819A-767941440932}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Network Connections 23.5.0.0 (HKLM\...\{967E7483-38D0-40E3-A44C-BAC69E0DC853}) (Version: 23.5.0.0 - Intel) Hidden
Intel(R) Network Connections 23.5.0.0 (HKLM\...\PROSetDX) (Version: 23.5.0.0 - Intel)
Intel(R) Serial IO (HKLM\...\{7EB7E1A5-7771-481E-A2AC-8734A9BC3B4F}) (Version: 30.100.1915.1 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1915.1 - Intel Corporation)
Intel(R) SUR QC Software Asset Manager (HKLM\...\{B3804557-9824-4918-AA88-0DFAC94CD3B5}) (Version: 3.5.5033 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.50.638.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.50.638.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{99ee3c29-c7cd-450f-8db9-d43cc49de1c7}) (Version: 1.50.638.1 - Intel Corporation) Hidden
Intel® Driver & Support Assistant (HKLM-x32\...\{0f33739d-b6ed-44b0-9a0d-6b87544be7c0}) (Version: 22.3.20.6 - Intel)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{7EBADAB6-B7AC-4560-85A7-FF345559F193}) (Version: 17.2.6.1027 - Intel Corporation)
Java 8 Update 211 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180211F0}) (Version: 8.0.2110.12 - Oracle Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
League of Legends PBE (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\Riot Game league_of_legends.pbe) (Version: - Riot Games, Inc)
Locklizard Safeguard - PDF Viewer (HKLM-x32\...\Locklizard Safeguard - PDF Viewer_sf) (Version: 2.6.50 - Locklizard Ltd.)
Logitech Capture (HKLM\...\Capture) (Version: 2.08.11 - Logitech)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 102.0.1245.44 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProPlusRetail - cs-cz) (Version: 16.0.15225.20288 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\OneDriveSetup.exe) (Version: 22.111.0522.0002 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\Teams) (Version: 1.5.00.11163 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{B81577B2-3AD0-4AFD-A19C-87F673C09D0C}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{62678770-F459-4903-83E3-A2968F6CC242}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3994d355-238a-4612-af93-26d13deddef1}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30135 (HKLM-x32\...\{fa7f6d52-f85e-48ef-8f56-a37268aa5772}) (Version: 14.29.30135.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.30.30704 (HKLM-x32\...\{4d8dcf8c-a72a-43e1-9833-c12724db736e}) (Version: 14.30.30704.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30135 (HKLM\...\{34DB4181-0770-4B5A-B561-68758A077B0F}) (Version: 14.29.30135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30135 (HKLM\...\{40118CD9-A805-400C-864E-041A5B5C01B0}) (Version: 14.29.30135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.30.30704 (HKLM-x32\...\{BF08E976-B92E-4336-B56F-2171179476C4}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.30.30704 (HKLM-x32\...\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
MSI Afterburner 4.6.2 (HKLM-x32\...\Afterburner) (Version: 4.6.2 - MSI Co., LTD)
NVIDIA FrameView SDK 1.2.7521.31103277 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7521.31103277 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.25.1.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.1.27 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 516.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 516.40 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NVIDIA USBC Driver 1.46.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.46.831.832 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.15225.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20288 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.113.50894 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Path of Building version 1.4.137 (HKLM-x32\...\{72FA9AB7-189F-4BDE-8856-72DEB90C157B}_is1) (Version: 1.4.137 - Openarl)
Path of Exile (HKLM-x32\...\{4f1eb2c2-0a1e-4309-83cf-594ca2b8ebee}) (Version: 3.12.5.35377 - Grinding Gear Games)
Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 3.12.5.35377 - Grinding Gear Games) Hidden
Poe Lurker (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\PoeLurker) (Version: 1.18.1 - C1rdec)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\Spotify) (Version: 1.1.87.612.gf8d110e2 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StreamElements SE.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 22.3.5.805 - StreamElements)
Sublime Text 3 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.5 - TeamSpeak Systems GmbH)
TradeSkillMaster Application version 1.0 (HKLM-x32\...\{c44da794-b956-4d50-8733-346d56ae63c7}_is1) (Version: 1.0 - TradeSkillMaster)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 86.0 - Ubisoft)
Urban Rivals version 8.2.2 (HKLM-x32\...\{515A2CF3-B276-4071-9A32-D0030E4D6E66}_is1) (Version: 8.2.2 - Acute Games)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
WinRAR 6.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
X-Mouse Button Control 2.19.2 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.19.2 - Highresolution Enterprises)
Packages:
=========
Code Writer -> C:\Program Files\WindowsApps\ActiproSoftwareLLC.562882FEEB491_4.2.42.0_x64__24pqs290vpjk0 [2021-02-26] (Actipro Software LLC)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-02-08] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-02-08] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe [2022-06-09] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-06-20] (NVIDIA Corp.)
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3408.0_x64__8j3eq9eme6ctt [2022-04-20] (INTEL CORP) [Startup Task]
Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.99.0_x64__pwbj9vvecjh7j [2022-05-27] (Amazon Development Centre (London) Ltd)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.19.234.0_x64__dt26b99r8h8gj [2021-07-16] (Realtek Semiconductor Corp)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-994775172-3552113607-2548991599-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\David Hynek\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.22062.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-994775172-3552113607-2548991599-1001_Classes\CLSID\{233525e0-5434-46ef-b464-fd7e45e2e145}\localserver32 -> C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe (Intel Corporation -> Intel)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-03-19] () [File not signed] [File is in use]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\AVAST Software\Avast\ashShell.dll [2022-06-07] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\AVAST Software\Avast\ashShell.dll [2022-06-07] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\AVAST Software\Avast\ashShell.dll [2022-06-07] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\AVAST Software\Avast\ashShell.dll [2022-06-07] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-03-19] () [File not signed] [File is in use]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_a217ec383447d0ea\nvshext.dll [2022-06-08] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\AVAST Software\Avast\ashShell.dll [2022-06-07] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2020-05-04 01:00 - 2017-04-17 10:43 - 003852800 ____N () [File not signed] C:\Program Files (x86)\Bloody7\Bloody7\Data\Mouse\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll
2022-05-02 08:22 - 2022-05-02 08:22 - 005998080 _____ () [File not signed] C:\Program Files (x86)\Intel\Driver and Support Assistant\irmfuu_module_win32.dll
2019-10-26 13:04 - 2019-10-26 13:04 - 000232960 _____ () [File not signed] D:\MSI Afterburner\RTCore.dll
2019-10-26 13:03 - 2019-10-26 13:03 - 000057344 _____ () [File not signed] D:\MSI Afterburner\RTFC.dll
2019-10-26 13:04 - 2019-10-26 13:04 - 000650240 _____ () [File not signed] D:\MSI Afterburner\RTHAL.dll
2019-10-26 13:03 - 2019-10-26 13:03 - 000074240 _____ () [File not signed] D:\MSI Afterburner\RTMUI.dll
2019-10-26 13:03 - 2019-10-26 13:03 - 000369664 _____ () [File not signed] D:\MSI Afterburner\RTUI.dll
2021-11-05 17:07 - 2021-11-05 17:07 - 000236544 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\yccV3.dll
2019-03-19 16:57 - 2019-03-19 16:57 - 000126976 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsServiceApi.dll
2018-10-29 11:25 - 2018-10-29 11:25 - 000372736 _____ (Intel(R) Corporation) [File not signed] C:\Windows\system32\NCS2Setp.dll
2018-01-20 10:34 - 2018-01-20 10:34 - 000373248 _____ (IntelleSoft) [File not signed] C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\BugTrapU-x64.dll
2021-05-21 14:04 - 2021-05-21 14:04 - 000130048 _____ (Sam Grogan) [File not signed] [File is in use] C:\Program Files (x86)\Intel\Driver and Support Assistant\NotifyIconWin32.dll
2022-05-05 17:44 - 2022-05-05 17:44 - 002122240 _____ (SQLite Development Team) [File not signed] C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\David Hynek\Data aplikací:a71eda622791298bf432424e2ed8fdad [394]
AlternateDataStreams: C:\Users\David Hynek\AppData\Roaming:a71eda622791298bf432424e2ed8fdad [394]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-04-02] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2022-03-05] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Java\bin\ssv.dll [2019-07-07] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Java\bin\jp2ssv.dll [2019-07-07] (Oracle America, Inc. -> Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-994775172-3552113607-2548991599-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 09:31 - 2018-09-15 09:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-994775172-3552113607-2548991599-1001\Control Panel\Desktop\\Wallpaper -> c:\users\david hynek\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\316696.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F9C0F8FA-EB06-445E-B9E6-932C1A1C8B93}] => (Allow) LPort=9009
FirewallRules: [{51A8EF46-A9A2-4653-9241-47CE7868373F}] => (Allow) LPort=9009
FirewallRules: [{F48C5379-96FF-4518-A295-5FB85FB103B5}] => (Allow) LPort=9009
FirewallRules: [{307DBAEA-E0D7-4DFB-A5B2-44F13C58B568}] => (Allow) LPort=9009
FirewallRules: [{27253FB8-8FB0-4170-9FA7-FCFA930A9022}] => (Allow) LPort=9009
FirewallRules: [{A4BA1D9A-BC5A-443C-8699-5E4437F790C3}] => (Allow) LPort=9009
FirewallRules: [{F4F16861-44F6-44AB-B684-8BB07F4BF784}] => (Allow) LPort=9009
FirewallRules: [{20FB25C9-6C25-4DCF-B7A2-F952D65F9D21}] => (Allow) LPort=9009
FirewallRules: [{232E418C-CBEC-4C28-9291-E277E854C9C3}] => (Allow) LPort=9009
FirewallRules: [{0BBDF53D-D1DA-4007-AE52-15355E9424D1}] => (Allow) LPort=9009
FirewallRules: [{E9C58008-27D1-48B7-993B-D77BB8E93620}] => (Allow) LPort=9009
FirewallRules: [{EA2E72D5-6CE0-47A6-A03E-68B2CCAE899B}] => (Allow) LPort=9009
FirewallRules: [{8B443EC0-DEBE-40FF-880A-8E93F740E73B}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{300CCBD6-14E1-426C-AB35-FD4C17FFE3E1}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{1FCCAE3A-8401-4F29-A2C2-A270A04EE39F}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{9A0EA718-B933-4278-B971-BD6029B27F89}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{E70D7272-00FA-4858-A4FA-8F98F5649FBD}] => (Allow) LPort=9009
FirewallRules: [{54EF31A6-8F55-4CDD-B94C-024A4D50349B}] => (Allow) LPort=9009
FirewallRules: [{9152F906-487D-4A5A-83C3-4B17BE6BD409}] => (Allow) LPort=9009
FirewallRules: [{36CEB36D-C483-4EA0-843B-05DB7D51EE03}] => (Allow) LPort=9009
FirewallRules: [{23A1A617-1C5B-40FC-B5A0-7EDB69DF14EE}] => (Allow) LPort=9009
FirewallRules: [{0A47E69F-2C6D-44C3-8D38-E0911400D19B}] => (Allow) LPort=9009
FirewallRules: [{EE3C6D14-1451-4ADA-8158-408E94A1EAD2}] => (Allow) LPort=9009
FirewallRules: [{779B5586-3E4E-497A-A3BE-3D3BC9D3DF46}] => (Allow) LPort=9009
FirewallRules: [{E2F8FFE9-E01C-4226-B1CE-08CA4C2A8BC4}] => (Allow) LPort=9009
FirewallRules: [{6811E81A-33BF-4864-BC81-F5DEB5ED3763}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{93A7E673-E9AC-4B51-BE2C-CE556577EED2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{4930F54B-2A60-41BF-A52E-50E4CE53A86E}] => (Allow) LPort=9009
FirewallRules: [{D5161CAA-1FC5-4AA6-843E-904B69BB7136}] => (Allow) LPort=9009
FirewallRules: [{A8452055-D6DD-4936-8359-A94EF9E49916}] => (Allow) LPort=9009
FirewallRules: [{AD24691F-9A80-4AA5-89B4-9EA50FB9B3AC}] => (Allow) LPort=9009
FirewallRules: [{BCBF19C7-A9AE-4BD5-9686-C77C96977814}] => (Allow) LPort=9009
FirewallRules: [{D2AC0C6F-EF3A-4C62-B0B6-2315F0712E2F}] => (Allow) LPort=9009
FirewallRules: [{79DF6C7E-F682-4811-878C-2F595B25112C}] => (Allow) LPort=9009
FirewallRules: [{8066D563-782B-49EE-A4D0-FDE0E1998AF3}] => (Allow) LPort=9009
FirewallRules: [{82532A22-E5C3-4AA9-A3CF-1EA2C30D7A03}] => (Allow) LPort=9009
FirewallRules: [{CF9417E0-2BF2-4EC5-936E-8391AC8B2A25}] => (Allow) LPort=9009
FirewallRules: [{ACDB6144-78AF-4202-9E58-16E04DECDC6A}] => (Allow) LPort=9009
FirewallRules: [{4CCD37B2-9F1B-4793-8ABF-3574AAD360AC}] => (Allow) LPort=9009
FirewallRules: [{D08EEA4F-2FE5-42BF-929F-B79174F2FA63}] => (Allow) LPort=9009
FirewallRules: [{31127EF7-2C48-4121-908D-B4983B6A893C}] => (Allow) LPort=9009
FirewallRules: [{8CA70F23-9C66-47A2-8BB2-6E36335E52B3}] => (Allow) LPort=9009
FirewallRules: [{89FDA206-454C-4CD2-A4E2-2FAADE214C34}] => (Allow) LPort=9009
FirewallRules: [{3903AD9D-DDDE-404E-81F6-92B329B33D66}] => (Allow) LPort=9009
FirewallRules: [{30C5274B-15F9-497F-B4DA-86E008AA7DD7}] => (Allow) LPort=9009
FirewallRules: [{083C7740-8EF2-4836-A4C2-EF54AD12659C}] => (Allow) LPort=9009
FirewallRules: [{7375BFB8-D9BB-496E-9FFA-44909832325F}] => (Allow) LPort=9009
FirewallRules: [{6442B670-5AE4-411A-BF01-F1627755A6DD}] => (Allow) LPort=9009
FirewallRules: [{D8BA09BD-10FE-4B32-BDBC-DDFCD764AF07}] => (Allow) LPort=9009
FirewallRules: [{64108647-FB18-44E8-8909-F3E84D7DAC25}] => (Allow) LPort=9009
FirewallRules: [{086083E1-7FFC-44E7-BCED-12DB8CC08163}] => (Allow) LPort=9009
FirewallRules: [{25BC0E5C-F679-4DAB-A042-95C6D70ACC81}] => (Allow) LPort=9009
FirewallRules: [{DC30F233-FBB2-4FD1-A238-6C913E200C0B}] => (Allow) LPort=9009
FirewallRules: [{6A1EF1D3-B3A3-42CD-A725-05FA86A8B6DF}] => (Allow) LPort=9009
FirewallRules: [{0A4E7467-8157-4918-B243-30FCC2C1EE23}] => (Allow) LPort=9009
FirewallRules: [{482CC768-B244-4064-A5FB-75ABB50646B7}] => (Allow) LPort=9009
FirewallRules: [UDP Query User{DF4E23D8-CB98-4CE5-A173-F40DBDADE41C}C:\users\david hynek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\david hynek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{7235FC76-E0BF-49AC-8C7A-E6D70797A80D}C:\users\david hynek\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\david hynek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F6828D6A-D7CC-440A-9C8E-2AFF3CCA64F2}] => (Allow) LPort=9009
FirewallRules: [{8949DDB2-AA37-43BF-A8AE-D61023DFE9CB}] => (Allow) LPort=9009
FirewallRules: [{AB0793AF-52F2-4C9B-957A-B985FCCF3320}] => (Allow) LPort=9009
FirewallRules: [{D045176C-3976-4C85-926F-47DADB08FD77}] => (Allow) LPort=9009
FirewallRules: [{AC340917-5AFC-4DCA-BAAC-B6E5C890A095}] => (Allow) LPort=9009
FirewallRules: [{4A01D655-7964-4141-B35F-D122DAD5E184}] => (Allow) LPort=9009
FirewallRules: [{D7E3D2C8-A495-4BCE-808E-B2D1B66D8949}] => (Allow) LPort=9009
FirewallRules: [{B2544B8D-14B0-4056-8ACA-41AB84233EF0}] => (Allow) LPort=9009
FirewallRules: [{A357F991-4A21-4FA1-AAE7-409F2D459024}] => (Allow) LPort=9009
FirewallRules: [{E32A452B-2902-4D9A-B647-A8C1F6AC199A}] => (Allow) LPort=9009
FirewallRules: [{14897974-4C58-4D84-861C-1D9F317BBBB4}] => (Allow) LPort=9009
FirewallRules: [{B9C65C64-5EC0-4BB7-BF83-5713B329E557}] => (Allow) LPort=9009
FirewallRules: [{52DA7319-D381-4FC2-86BA-0C0560C0190B}] => (Allow) LPort=9009
FirewallRules: [{936FDAB5-EB40-4901-BD29-99B67D7F3455}] => (Allow) LPort=9009
FirewallRules: [{E7948933-9E01-4607-AF74-37C1ED7E3775}] => (Allow) LPort=9009
FirewallRules: [{7C4F7B0B-F80B-41FF-BBCD-C7CCE29D6053}] => (Allow) LPort=9009
FirewallRules: [{86ED9F8F-D10C-4224-B336-BBA1E91CA0A1}] => (Allow) LPort=9009
FirewallRules: [{4AD9A521-370C-4F34-882B-7801F082955C}] => (Allow) LPort=9009
FirewallRules: [{B73E3972-4136-4471-A248-EAED24FE931F}] => (Allow) LPort=9009
FirewallRules: [{B8955B0D-3E6A-4830-A87F-6B4804DCB23D}] => (Allow) LPort=9009
FirewallRules: [{BE230922-8C9D-48A4-B8E6-9ED987CEE82F}] => (Allow) LPort=9009
FirewallRules: [{C4C5C2B3-4FC2-481B-995D-F74AA3B2083C}] => (Allow) LPort=9009
FirewallRules: [{5E4BF55B-DCC5-4715-B700-9966BF70ACD6}] => (Allow) LPort=9009
FirewallRules: [{08B2CF22-AEBB-4230-9861-3C564189E9E6}] => (Allow) LPort=9009
FirewallRules: [{345734AF-280D-446C-91EC-61ECC3E3F538}] => (Allow) LPort=9009
FirewallRules: [{B4B110F1-B13D-4CD8-9A72-0D66657EABC4}] => (Allow) LPort=9009
FirewallRules: [{714F6A0C-E56A-4604-899B-DEBD540F9DCA}] => (Allow) LPort=9009
FirewallRules: [{8C7519A9-7C6C-4DDE-9F87-763031A78BE8}] => (Allow) LPort=9009
FirewallRules: [{ADF1BBEA-36C1-44FD-B47B-2382F03915AB}] => (Allow) LPort=9009
FirewallRules: [{B9ADCA61-7FE6-4F98-ADDC-79CAC19E3A10}] => (Allow) LPort=9009
FirewallRules: [{9FA5BCF5-4E10-41B1-8E2B-C60EE54F002B}] => (Allow) LPort=9009
FirewallRules: [{0EA45853-5E5C-4FAD-AB2C-C725D494B57D}] => (Allow) LPort=9009
FirewallRules: [{B32E1A55-79AD-4FEE-AE14-E84DAF4C4914}] => (Allow) LPort=9009
FirewallRules: [{0A3849D0-A907-4758-BD9E-A88CEAB83427}] => (Allow) LPort=9009
FirewallRules: [{C50E0F5D-0A26-40AA-B0AB-411C355D13AD}] => (Allow) LPort=9009
FirewallRules: [{16A70DFB-6F41-4BAB-B005-66D017EA1D0D}] => (Allow) LPort=9009
FirewallRules: [{119E9EE6-30E7-40DB-A2EA-D9C508601178}] => (Allow) LPort=9009
FirewallRules: [{9C364577-34D4-4650-8D5E-4C91FC22AD99}] => (Allow) LPort=9009
FirewallRules: [{3D915885-8F6E-40E8-A346-E1D72BADB37F}] => (Allow) LPort=9009
FirewallRules: [{FF55362C-AD74-4134-A79C-68A383A82A12}] => (Allow) LPort=9009
FirewallRules: [{18588B67-2088-4BF6-B626-C67B4973A7FD}] => (Allow) LPort=9009
FirewallRules: [{4DEABBEC-7F5D-40F0-8E72-69FF82F049E1}] => (Allow) LPort=9009
FirewallRules: [{FBDEBA81-6FFC-4BE6-8309-D7D7C31FADB8}] => (Allow) LPort=9009
FirewallRules: [{DCD7183D-CE21-44A5-8A29-8C471D4525CA}] => (Allow) LPort=9009
FirewallRules: [{FAD8A572-F640-4C00-9A3C-4C2D052216FA}] => (Allow) LPort=9009
FirewallRules: [{823186F0-9043-4295-828D-5CB475722F68}] => (Allow) LPort=9009
FirewallRules: [{FD702372-4705-46FB-A2E9-B5382C6FEBB9}] => (Allow) LPort=9009
FirewallRules: [{7093C2C9-7012-4B83-BC04-A99BB1456626}] => (Allow) LPort=9009
FirewallRules: [{662DB37A-015C-42CA-938A-A7C310F57AF6}] => (Allow) LPort=9009
FirewallRules: [{7426A7D3-E611-45C4-884A-619AD1066B38}] => (Allow) LPort=9009
FirewallRules: [{009382F8-4277-4EC1-8D43-4CDD672552CB}] => (Allow) LPort=9009
FirewallRules: [{E940E38A-AE32-4F9F-89F2-395728D36EC5}] => (Allow) LPort=9009
FirewallRules: [{B84CF8AA-A3D2-4EC2-8C91-D048EA6A818D}] => (Allow) LPort=9009
FirewallRules: [{E84026FB-02D3-4052-8218-32B9E2EC97E1}] => (Allow) LPort=9009
FirewallRules: [{987401E5-4925-455B-87AF-9472F3B21D20}] => (Allow) LPort=9009
FirewallRules: [{A2DAE93D-8367-4FB5-9114-931DD5211CC2}] => (Allow) LPort=9009
FirewallRules: [{725BC548-1BA0-4D10-AD08-B8323036B6D8}] => (Allow) LPort=9009
FirewallRules: [{5EED229C-9ADE-42DD-9E48-1B647B8D8FB1}] => (Allow) LPort=9009
FirewallRules: [{11F97227-421D-4B1D-8914-DDC3F53C14E2}] => (Allow) LPort=9009
FirewallRules: [{EC0082C3-61F3-4962-831C-2F0E45C19CE2}] => (Allow) LPort=9009
FirewallRules: [{DF4C9EFA-AF49-4AE0-B915-78BED9FDCBA1}] => (Allow) LPort=9009
FirewallRules: [{90680ACD-DF12-4D37-98A7-9390217E1DBF}] => (Allow) LPort=9009
FirewallRules: [{701B399A-020F-4B96-B16F-094FCAC3B332}] => (Allow) LPort=9009
FirewallRules: [{01568145-C81C-44FA-9EA9-7652443C4816}] => (Allow) LPort=9009
FirewallRules: [{CAF4789A-1AD2-4D63-A35D-E0564A683017}] => (Allow) LPort=9009
FirewallRules: [{0C900158-D6CE-4EE2-BC9D-994C3F081D84}] => (Allow) LPort=9009
FirewallRules: [{E336B3C4-D8A0-41D2-B927-FB287F44831D}] => (Allow) LPort=9009
FirewallRules: [{31C89D48-DB56-4919-A584-3C8C6A631405}] => (Allow) LPort=9009
FirewallRules: [{29DE56BC-E807-4AFD-A5D9-87C3E3CA26D2}] => (Allow) LPort=9009
FirewallRules: [{F8F0DB90-5B19-4CD1-A092-C2C7A3471147}] => (Allow) LPort=9009
FirewallRules: [{DD33F035-4552-48A8-98B6-A77918441E29}] => (Allow) LPort=9009
FirewallRules: [{AFC3CF23-BF21-4A18-8763-E02FF61F6A18}] => (Allow) LPort=9009
FirewallRules: [{2C758816-E684-497F-AE90-1EC4F6BD9B7C}] => (Allow) LPort=9009
FirewallRules: [{EFC7FB60-48BF-4658-89D5-3233DD4E3B0F}] => (Allow) LPort=9009
FirewallRules: [{92429CCD-9CB8-4A0E-A743-B6AADB976676}] => (Allow) LPort=9009
FirewallRules: [{DCE172E1-0EB1-4866-BEB8-4A867F4A8091}] => (Allow) LPort=9009
FirewallRules: [{8B2282EF-8482-4E0E-AC71-A93C66B55C57}] => (Allow) LPort=9009
FirewallRules: [{1C98354A-3192-4FB5-9555-533E8F0F55F6}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{0738DE21-1378-4CE5-B818-24F3388CBFDF}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{E03A5199-CFAD-4D9B-9724-E4976F926686}] => (Allow) LPort=9009
FirewallRules: [{2DCDFEC9-D5D9-47E9-A526-DCD66CE6BE0B}] => (Allow) LPort=9009
FirewallRules: [{15811EC0-129F-45F5-9EB2-43DD9AB758C8}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{B3FB4712-033F-45DF-AB43-58CA54097EFB}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
FirewallRules: [UDP Query User{83C7257D-9D49-4530-824C-AE7630FAAA0C}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
FirewallRules: [{0FC6BCEE-17E8-463F-8CA5-3FDBC4D1706A}] => (Allow) LPort=9009
FirewallRules: [{27B19139-D5F0-4453-8270-AB024AD25FE3}] => (Allow) LPort=9009
FirewallRules: [{A6AA4F33-1253-47CF-8994-74D855FAC4E3}] => (Allow) LPort=9009
FirewallRules: [{6A04AEAB-1C3C-4432-8268-AB7853776839}] => (Allow) LPort=9009
FirewallRules: [{0909E4A3-4720-4A3C-846E-D575A6ADA172}] => (Allow) LPort=9009
FirewallRules: [{37713443-23E7-40BB-AEBD-66270F21169E}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{4A163C9A-3CC5-4A19-B211-2DC0C4AF5711}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{187CDEBE-3D83-4FF6-96AC-1483E64BCC5A}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{68C838FC-7087-4FD6-8B79-14F6CAE8D6F9}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{DA5FA6ED-8E54-4D80-AA26-2DF29C1B88CE}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{49DA017E-727C-4805-9789-9F7F07D1FC52}] => (Allow) D:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E76C79DF-2B96-40CF-8CA6-C19AD5C238D8}] => (Allow) D:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{0855B462-3291-434D-952E-4EAA3D202EB4}C:\users\david hynek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\david hynek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{DF4ED434-670F-4ED1-91CB-98ADE1508B03}C:\users\david hynek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\david hynek\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4B961E8C-3877-46AE-8CE7-DF285188DE46}] => (Allow) C:\Users\David Hynek\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{BD32CB5D-629D-4A3F-AD88-E49B97B2998D}] => (Allow) C:\Users\David Hynek\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{D11EDE88-64B1-4462-9158-F2C97E083D88}] => (Allow) LPort=9009
FirewallRules: [{DF553598-E53A-4D0D-AA2B-0921C8B30FB8}] => (Allow) LPort=9009
FirewallRules: [{172DA29F-85E1-4AF0-AC3E-858E2367A56C}] => (Allow) LPort=9009
FirewallRules: [{EF7ACCAC-B90B-4355-A77A-D81F4C484F72}] => (Allow) LPort=9009
FirewallRules: [{BA65679B-05AE-40E2-893E-278C26C503FB}] => (Allow) LPort=9009
FirewallRules: [{DD9005A2-C444-4380-A43C-32DA897D123B}] => (Allow) LPort=9009
FirewallRules: [{45E6A2F0-52BC-416F-99C2-933B669D7B3F}] => (Allow) LPort=9009
FirewallRules: [{0A646DBE-0201-4170-8F1B-E5E8357B6F2A}] => (Allow) LPort=9009
FirewallRules: [{76F8FCF1-0163-46CA-BAA3-F5DD7FF1E467}] => (Allow) LPort=9009
FirewallRules: [{E9A47F5F-6E88-4B60-BC8D-24F47807D8D1}] => (Allow) LPort=9009
FirewallRules: [{143EFF28-A06A-4757-9A0D-ABC33F960729}] => (Allow) LPort=9009
FirewallRules: [{3CF4218A-3397-4152-B295-9416277F1FED}] => (Allow) LPort=9009
FirewallRules: [{C47EC4FC-29F0-4AC3-A227-3BC6AE40DACB}] => (Allow) LPort=9009
FirewallRules: [{1BEEEC29-FF83-4075-A7E2-E444557FF320}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8D3F99BD-34D2-44A8-9437-2002426444D8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A9618CA9-DC43-4E36-A49D-69261F636897}] => (Allow) LPort=9009
FirewallRules: [{83F9BE79-ECFB-405A-92BB-8911EBBEF598}] => (Allow) LPort=9009
FirewallRules: [{CEA272C0-9B56-47F6-B3AA-05E679DC4C58}] => (Allow) LPort=9009
FirewallRules: [{D35D5F3E-4F0C-41B4-BE3B-445E9C51F992}] => (Allow) LPort=9009
FirewallRules: [{B83A7325-3BFB-4898-A8CD-C97D29393F65}] => (Allow) LPort=9009
FirewallRules: [{56AF4973-A23B-4591-90E5-8030FB6006E4}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3AB4FFEA-274E-4618-9FD2-9F71F84B0DE0}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5931BB60-1E39-42FA-9630-DFA54952C993}] => (Allow) LPort=9009
FirewallRules: [{91CFCF52-FEAC-4A38-B4B3-F72443DC3007}] => (Allow) LPort=9009
FirewallRules: [{2FB8FB5E-4C61-462F-A7CD-D02F3F5141B9}] => (Allow) LPort=9009
FirewallRules: [{24630393-E746-4C58-B432-905C363C5387}] => (Allow) LPort=9009
FirewallRules: [{2E01E808-67B8-48B3-B414-C3379336F017}] => (Allow) LPort=9009
FirewallRules: [{959415FB-8F9E-4B09-88D5-017F332F8421}] => (Allow) LPort=9009
FirewallRules: [{85BD08D8-82AD-4BC4-ABB4-B0C0A4B2A1E5}] => (Allow) LPort=9009
FirewallRules: [{F8C617B0-E81B-4D03-A21E-EC87FCB44833}] => (Allow) LPort=9009
FirewallRules: [{0E2D956F-D52D-42A9-A82F-AD393882CC9A}] => (Allow) LPort=9009
FirewallRules: [{75E77101-129E-4770-B91C-5F3F7485A4D2}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{1CFECDE2-BD8A-45A1-9FE3-A62DAAFBF7BA}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{13562350-2404-4723-A296-16433D5296E6}] => (Allow) LPort=9009
FirewallRules: [{F2B1713C-25A6-4BDB-B5AA-1F2890207E33}] => (Allow) LPort=9009
FirewallRules: [{DD92D7FA-06ED-43B2-9E42-55D73B30E66D}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{E62862F4-88AE-436B-9E3C-DF3D83D22996}D:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{65D8107F-419F-4ADE-B7D3-C563C2281011}D:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base75589\heroesofthestorm_x64.exe => No File
FirewallRules: [{7654ECA3-E827-48A8-91CF-29594F035E88}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{A0F78DFA-952A-40DA-ACAA-FDC389B0D7CA}D:\hearthstone\hearthstone.exe] => (Allow) D:\hearthstone\hearthstone.exe => No File
FirewallRules: [UDP Query User{6A284015-A5FE-451A-ACFD-C2A58300B3AF}D:\hearthstone\hearthstone.exe] => (Allow) D:\hearthstone\hearthstone.exe => No File
FirewallRules: [{11FEACA3-7B17-4C72-B9E7-F2DDB3EA1B15}] => (Allow) LPort=9009
FirewallRules: [{2626EE50-671D-4E2B-B251-D603C64A6113}] => (Allow) D:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{2E2D00BD-89AF-4DF7-AA30-C91AA5B94470}] => (Allow) D:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{C372174F-C6FC-4616-990F-DEE59BEFACD6}D:\riot games\league of legends\game\league of legends.exe] => (Allow) D:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{3685A82B-C8E1-42C5-9F27-1F0D91C8DBD6}D:\riot games\league of legends\game\league of legends.exe] => (Allow) D:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{79BCD827-B558-4709-AE3E-86B687C7A250}] => (Allow) LPort=9009
FirewallRules: [{31010383-C929-4102-B4CB-1EF71467932F}] => (Allow) LPort=9009
FirewallRules: [{D57AAB80-23B6-48FE-A0AD-D89BFB746C85}] => (Allow) LPort=9009
FirewallRules: [{D1EAAE3A-C629-4626-8998-67B4656E642B}] => (Allow) LPort=9009
FirewallRules: [{50A3B8CD-AAA4-4556-B3E0-1D7141CEBD69}] => (Allow) LPort=9009
FirewallRules: [{430B3BA8-C973-406D-B28F-124043774B66}] => (Allow) LPort=9009
FirewallRules: [{FDE263EF-D67A-4821-9511-D4BAEE17888E}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{9CE9D299-69EF-4715-BBF3-94074B4FA077}D:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) D:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe => No File
FirewallRules: [UDP Query User{053A5613-DE54-411D-82A5-F4897ABCD923}D:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) D:\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe => No File
FirewallRules: [{4ECED490-BD68-4235-A5EB-C684BA7EB83F}] => (Allow) LPort=9009
FirewallRules: [{810F18A7-631F-422E-B140-FF8D88873526}] => (Allow) LPort=9009
FirewallRules: [{EA385262-161A-4BB0-AEF8-BDF4C630C996}] => (Allow) LPort=9009
FirewallRules: [{8202B220-A98E-4149-B2AC-FBA3028D8468}] => (Allow) LPort=9009
FirewallRules: [{47C0D660-7D88-4361-91D0-6BF14916CD5E}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{B96AD29C-FC47-46E3-890A-55C944871F4E}D:\overwatch\_retail_\overwatch.exe] => (Allow) D:\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{86A8832F-C937-4BE9-8FAE-D4CBDD64BB42}D:\overwatch\_retail_\overwatch.exe] => (Allow) D:\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{C82E0285-6E64-44B0-A2B2-C3CE3F737FD1}] => (Allow) LPort=9009
FirewallRules: [{A14876D4-9644-482C-BC59-3E41746AB2B9}] => (Allow) LPort=9009
FirewallRules: [{4A69E99A-9330-4BC4-A9CC-C1CECA9771A1}] => (Allow) LPort=9009
FirewallRules: [{D07953FD-4EFF-4B3A-B300-2CA3138769B8}] => (Allow) LPort=9009
FirewallRules: [{555DC1FF-E90D-4EE4-AB68-DB7F35AAAEB8}] => (Allow) LPort=9009
FirewallRules: [{FDF24605-7062-482A-9D82-3EDAA33B50CC}] => (Allow) LPort=9009
FirewallRules: [{8C4ACEB5-024C-4631-B52B-0BC5A78E6465}] => (Allow) LPort=9009
FirewallRules: [{23EECF9F-AD40-4DE9-A5D1-EEC29FE16537}] => (Allow) LPort=9009
FirewallRules: [{6E38216A-3FD3-43B4-9B2D-F0C45C893892}] => (Allow) LPort=9009
FirewallRules: [{D25BCC7D-142F-42B2-8BC6-1A3E31B35B72}] => (Allow) LPort=9009
FirewallRules: [{E4D57339-FF78-489D-9958-C414B0283074}] => (Allow) LPort=9009
FirewallRules: [{6EB9ABA9-D303-4C7E-94B3-3CB516D18229}] => (Allow) LPort=9009
FirewallRules: [{08DA8708-41B9-4980-B3B6-DAA609E929C5}] => (Allow) LPort=9009
FirewallRules: [{D4FB6D6D-1E9D-4769-9891-EA667F3C26D6}] => (Allow) LPort=9009
FirewallRules: [{80263C50-7A8B-4C66-A7A8-2EF2D5B705C8}] => (Allow) LPort=9009
FirewallRules: [{B904A514-B414-4856-8DF0-E70210168985}] => (Allow) LPort=9009
FirewallRules: [{697B1FD8-A825-40BA-921F-4657ED1379F4}] => (Allow) LPort=9009
FirewallRules: [{0EEB56F4-8240-4AA8-925A-5D66B09CC1AD}] => (Allow) LPort=9009
FirewallRules: [{A1F7600E-78C6-4660-8429-E7A2765C4A8C}] => (Allow) LPort=9009
FirewallRules: [{5CD7E608-B17E-46B2-81E5-9DDDF5CBB6B9}] => (Allow) LPort=9009
FirewallRules: [{6387AC2D-F16D-4EC3-BC46-20E2EC689133}] => (Allow) LPort=9009
FirewallRules: [{9C712ABE-060E-4E9E-BA2B-B646399B5E24}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{7162F4C4-092B-4E43-9917-C9AC9C1551AB}C:\users\david hynek\appdata\local\blitz\app-1.6.22\blitz.exe] => (Allow) C:\users\david hynek\appdata\local\blitz\app-1.6.22\blitz.exe => No File
FirewallRules: [UDP Query User{E341F405-56D5-4CE2-A2C6-63587515DBC4}C:\users\david hynek\appdata\local\blitz\app-1.6.22\blitz.exe] => (Allow) C:\users\david hynek\appdata\local\blitz\app-1.6.22\blitz.exe => No File
FirewallRules: [{DB6249B8-CCCB-4E4E-AB9A-23BF5A43A202}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{CED9EB8B-CC0D-4C92-BBE1-7978B9FC9FE6}C:\users\david hynek\appdata\local\blitz\app-1.6.26\blitz.exe] => (Allow) C:\users\david hynek\appdata\local\blitz\app-1.6.26\blitz.exe => No File
FirewallRules: [UDP Query User{FF07611C-2529-41D0-9A93-91EC069DAA14}C:\users\david hynek\appdata\local\blitz\app-1.6.26\blitz.exe] => (Allow) C:\users\david hynek\appdata\local\blitz\app-1.6.26\blitz.exe => No File
FirewallRules: [TCP Query User{B51E3B51-6A18-49B1-BE13-B84AD0E68F15}C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_45608.exe] => (Allow) C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_45608.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{1DC7E556-2147-46D9-B68E-5BB0FF4D5FB8}C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_45608.exe] => (Allow) C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_45608.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{593ABCD8-A407-4F03-A58E-88205FEA29FB}] => (Allow) LPort=9009
FirewallRules: [{A1E762F9-8AFA-45C0-8413-CFDE11DFCFA0}] => (Allow) LPort=9009
FirewallRules: [{9A04358B-BB68-44F2-88AA-E7E8FE098C69}] => (Allow) LPort=9009
FirewallRules: [{2B8B8C76-6B89-498C-8568-8AB133B985F8}] => (Allow) LPort=9009
FirewallRules: [{FAFE79B7-B559-45FC-AF67-E7A07AE97B9F}] => (Allow) LPort=9009
FirewallRules: [{F6D93EC1-BA69-47AD-AE30-AC6C33A67D06}] => (Allow) LPort=9009
FirewallRules: [{7CA71D9B-9081-4C2A-BC64-39D265A9DF68}] => (Allow) LPort=9009
FirewallRules: [{5CE9E866-8E45-416D-B850-945CBEA393E3}] => (Allow) LPort=9009
FirewallRules: [{1EABD611-FA1B-4564-AB4B-265233306FA4}] => (Allow) LPort=9009
FirewallRules: [{8E70DFF3-DEDA-4725-B841-F3068CCA7549}] => (Allow) LPort=9009
FirewallRules: [{9D9F7471-2461-43DA-8C23-1D638613C18B}] => (Allow) LPort=9009
FirewallRules: [{3F360D67-19E0-491A-9F2D-77F7065C1675}] => (Allow) LPort=9009
FirewallRules: [{26D15A49-64B4-4FF7-B55D-A8197CDEE4F8}] => (Allow) LPort=9009
FirewallRules: [{0BE9C742-4C83-438E-984E-2D5A4441FACC}] => (Allow) LPort=9009
FirewallRules: [{5C83ED01-4CD2-4182-8EA4-B97AAC5D351B}] => (Allow) LPort=9009
FirewallRules: [{1C141BBC-4A0D-454E-A056-2992273CE03B}] => (Allow) LPort=9009
FirewallRules: [{7F731FFE-665A-4401-8EC1-A547C0F3BC03}] => (Allow) LPort=9009
FirewallRules: [{FBCC8275-E58D-452F-9EB1-0FB422937C83}] => (Allow) LPort=9009
FirewallRules: [{51FD7412-93CB-4F00-8E26-8A74A77E2B1A}] => (Allow) LPort=9009
FirewallRules: [{16F2A893-31C6-47C8-A3F7-E025506B664F}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [TCP Query User{9FD39CB3-89E4-4041-ADB3-C62598917927}D:\heroes of the storm public test\versions\base84962\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base84962\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{CD067ABD-FFC1-4ABA-9630-47B27FE5C309}D:\heroes of the storm public test\versions\base84962\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm public test\versions\base84962\heroesofthestorm_x64.exe => No File
FirewallRules: [{C2001AD6-FABD-48D0-88C2-E2A96DAC1FF3}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{915E04AB-68FA-4E4E-B968-5185F97555BA}D:\videolan\vlc\vlc.exe] => (Allow) D:\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{291FA121-2DAE-402A-B8E2-7D010952614E}D:\videolan\vlc\vlc.exe] => (Allow) D:\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{BE609FFC-8047-47C9-B502-5F56965176C5}] => (Allow) LPort=9009
FirewallRules: [{63D7E887-A118-4D8A-B18D-AF35202D0580}] => (Allow) LPort=9009
FirewallRules: [{C9DC837E-84A9-4C39-98A2-5B28C8E12017}] => (Allow) LPort=9009
FirewallRules: [{9A81F0DD-23AD-40C1-B1D4-CEC500ED12E4}] => (Allow) LPort=9009
FirewallRules: [{4755CB85-B7F6-4E96-B732-7AA0D19CC731}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{65D91328-B0E3-4435-86C4-F53AA75F60EA}E:\steamlibrary\steamapps\common\naraka bladepoint\narakabladepoint.exe] => (Allow) E:\steamlibrary\steamapps\common\naraka bladepoint\narakabladepoint.exe => No File
FirewallRules: [UDP Query User{F73B8C4F-1D18-42B3-9648-7C349724561F}E:\steamlibrary\steamapps\common\naraka bladepoint\narakabladepoint.exe] => (Allow) E:\steamlibrary\steamapps\common\naraka bladepoint\narakabladepoint.exe => No File
FirewallRules: [{4FBCEC80-0DE8-42E7-B32B-34A81159EB02}] => (Allow) LPort=9009
FirewallRules: [{B48C3990-AF0D-465E-BB61-D908920D0AAE}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{8BF3477C-0A35-42EB-AFF9-819F79A9B894}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
FirewallRules: [UDP Query User{7160EF91-FBDB-4878-B6B9-D8EB3B0DF14F}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
FirewallRules: [{63C1F56E-7421-4754-B3BF-30CBCAF529FB}] => (Allow) LPort=9009
FirewallRules: [{EB778F43-91A9-4EB9-BA53-061102499D4E}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{4B72C4ED-A830-4F45-9A36-DD8494CD6446}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [TCP Query User{4709890D-38B6-44A0-9028-61B991CC2A1E}E:\steamlibrary\steamapps\common\new world playtest\bin64\newworld.exe] => (Allow) E:\steamlibrary\steamapps\common\new world playtest\bin64\newworld.exe => No File
FirewallRules: [UDP Query User{BF9D2808-03F5-4978-9C47-88C1E3EB539B}E:\steamlibrary\steamapps\common\new world playtest\bin64\newworld.exe] => (Allow) E:\steamlibrary\steamapps\common\new world playtest\bin64\newworld.exe => No File
FirewallRules: [{894B853D-9345-4DA0-9859-A624D76A376F}] => (Allow) LPort=9009
FirewallRules: [{A9AC19AF-F9D9-46EA-AD67-0708B5616553}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{C7B331DD-F8CF-42A6-9E1E-4EE2F563A85A}E:\ascension launcher\ascension launcher.exe] => (Allow) E:\ascension launcher\ascension launcher.exe => No File
FirewallRules: [UDP Query User{67D20EAC-C10C-4849-8DA9-80D7EF3DE0DB}E:\ascension launcher\ascension launcher.exe] => (Allow) E:\ascension launcher\ascension launcher.exe => No File
FirewallRules: [{C8C83255-ABBB-4173-A053-9ABB603A88C8}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{0130B8E7-1AB7-4CDD-911A-9CA5755B2290}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{850E4DE1-84E8-425D-8187-3C9F3926DA18}] => (Allow) LPort=9009
FirewallRules: [{2C2F3FB7-AEAD-48EA-98BF-F04E9B20DFD4}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{018149AA-75CF-4E7B-8C50-013CF9139A5D}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{15BA216D-C07B-4107-8F7C-411DB548811D}] => (Allow) LPort=9009
FirewallRules: [{9F65D228-0ED2-4696-B247-244428E24B69}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{72E3677C-5F27-4DD5-BD57-C45FF3E0D39D}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{76571D12-E98E-48CA-B58D-C833E458784E}] => (Allow) LPort=9009
FirewallRules: [{DE1017E3-BE52-406D-AAC2-624660E110AE}] => (Allow) LPort=9009
FirewallRules: [{D5D80BC2-805B-4D48-8DEB-42290AC779EC}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{4AB4FF20-6634-4185-B974-28B8C3FABF58}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{6560288E-8465-428D-B8C0-5F366A67A0D7}] => (Allow) LPort=9009
FirewallRules: [{AF99BFFC-8CE7-4F58-A023-7F110DDD75AA}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{0D9BC6F5-CF17-4464-A3C0-7EE34032A120}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{0236F9A1-85CB-4135-947D-30729D89F00F}] => (Allow) LPort=9009
FirewallRules: [{A90D050D-5D7A-4A23-A1F4-24AF18F02CDE}] => (Allow) LPort=9009
FirewallRules: [{FB64D2B5-15C1-4AFF-A0D1-75956D1740D5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E483925-5739-47A4-80A2-587A70F57A6E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{51FD3E28-4FD5-4969-B8B1-6A7FA6225DB6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{7524CC68-7BC2-4C3A-AFB0-8FA200020CB1}C:\obs-studio\bin\64bit\obs64.exe] => (Allow) C:\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)
FirewallRules: [UDP Query User{8D1D1EAA-6EB8-4932-BE27-2B6BAD3AC8AE}C:\obs-studio\bin\64bit\obs64.exe] => (Allow) C:\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)
FirewallRules: [TCP Query User{E891EDA0-DDBF-4472-9A38-51608A64A73C}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{42CC8B87-AC7D-40BA-95AC-6506D6100F78}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{2C59DEC6-0493-415F-848B-D9D0894EDDBE}] => (Allow) LPort=9009
FirewallRules: [{A9CEAD1A-09F7-45F6-9B83-1458C363A735}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{84F4076A-C608-46EB-8A49-C14AB9D0609B}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{80EED158-3F3D-43FB-ABF0-DBE11DBF31B9}] => (Allow) LPort=9009
FirewallRules: [{FADCED32-CB55-4504-B01E-BA86F864BBC4}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Ark\Binaries\Win64\Launch_Game.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{6D353220-9F7B-4E0F-B223-A78A8AD05A2D}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Ark\Binaries\Win64\Launch_Game.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [TCP Query User{005A7CAE-0282-4DE1-B0B9-6739F20DAA56}C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_46200.exe] => (Allow) C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_46200.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{7EEF641E-C119-482D-B9A6-EDF254D659C6}C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_46200.exe] => (Allow) C:\users\david hynek\appdata\roaming\utorrent\updates\3.5.5_46200.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{6EA80E78-D12B-489B-87C9-F9939CCC5F47}] => (Allow) LPort=9009
FirewallRules: [{D505CEB7-1753-4B67-8588-6185FA33499A}] => (Allow) LPort=9009
FirewallRules: [{EFA86B08-11BC-48A3-B664-6D5D98076F46}] => (Allow) LPort=9009
FirewallRules: [{79320408-02DD-4BFF-B796-1A780B9CE084}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{E652C053-5132-4EFC-8A66-D5AF6E11D44D}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{A9ED79F9-9701-4A9D-BCBA-B3901F468CA4}] => (Allow) LPort=9009
FirewallRules: [{BAC7B92B-9C07-476C-BB5C-5ED3CE35616B}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{29532309-974D-42B5-BF9A-39D83C105003}D:\heroes of the storm\versions\base87774\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base87774\heroesofthestorm_x64.exe => No File
FirewallRules: [UDP Query User{2C698CDD-1582-4997-81F0-9F6FB704C780}D:\heroes of the storm\versions\base87774\heroesofthestorm_x64.exe] => (Allow) D:\heroes of the storm\versions\base87774\heroesofthestorm_x64.exe => No File
FirewallRules: [{50EB93CD-0479-4C87-BD54-3A3C4F2A1FE6}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{6A6E780D-E0F1-40AC-841D-DB0223CA99E5}D:\overwatch\_beta_\overwatch.exe] => (Allow) D:\overwatch\_beta_\overwatch.exe => No File
FirewallRules: [UDP Query User{BDFDFEE3-8CA8-441F-8412-F7BFE12B5DE5}D:\overwatch\_beta_\overwatch.exe] => (Allow) D:\overwatch\_beta_\overwatch.exe => No File
FirewallRules: [{B99F305B-2489-491F-816D-43A1E02CD27C}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{94A2751F-8F53-4DE7-B83E-3CE17004D474}C:\users\david hynek\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\david hynek\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{55FC42C4-F2E2-4244-8675-B601713933CF}C:\users\david hynek\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\david hynek\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EED163A5-9742-4916-A611-0B9CC57AF023}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{6F30BCDC-AB49-4D00-85BD-D06D4A2CF2DA}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{F4C0E0A3-991E-4594-B271-411CDE6B19C3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{D0E5EDA8-E60B-4276-B7B4-120A685E4756}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{C4D18F9C-14F3-4699-9F6E-ED68237A49A4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{119B0171-65FB-4AB5-8D85-F77A358B3F0E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{2FE91982-AEBC-4F09-B40A-6AC83BEC59C4}] => (Allow) LPort=9009
FirewallRules: [{1AC53713-545F-4AFF-966B-D57331978622}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{9018895D-5AAA-43F0-971E-1847486B7416}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{57EE3916-8E6C-4253-BAF9-7C3BE641201A}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{19BE814E-E918-4FAF-AA16-58913C84FCA7}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel Corporation -> )
FirewallRules: [{37A9A919-477A-4A3D-B99A-ED5E8031B723}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{2A571954-D38C-447A-BEF1-9EAA8DF3C705}] => (Block) C:\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{155D9266-256D-467C-8348-52252878CE89}] => (Allow) E:\Origin Games\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{BD00F26B-89CF-4FE1-9A7B-75DD40D530B1}] => (Allow) E:\Origin Games\Apex\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{2915D43C-AABF-4065-B758-B09A15A5D0BC}] => (Allow) LPort=9009
FirewallRules: [{70A6F279-6A30-4B0D-8CA7-8CD9A588BCF8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{9A33389A-0743-43B9-BD2F-9B324C04700D}] => (Allow) LPort=9009
FirewallRules: [{30D52ED7-1B97-4228-B283-4985DB70A14A}] => (Allow) LPort=9009
FirewallRules: [{7612D321-CD1D-40AA-BD83-CEFDDA9AC839}] => (Allow) LPort=9009
FirewallRules: [{75180D73-6B77-411D-891E-32C65EC17954}] => (Allow) LPort=9009
FirewallRules: [{5AD60CB1-0C17-486D-8DD4-18FD8CAEDD47}] => (Allow) LPort=9009
FirewallRules: [{C7854DEC-5B4F-46B7-BC2D-3E44EA71D93A}] => (Allow) LPort=9009
FirewallRules: [{757CBC67-864F-49F1-8851-0368D97DF13B}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{B8A95987-06B5-4BE1-ADD5-C51D97539308}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{B58D6154-8ED5-403A-9309-80C20F0DD32D}] => (Allow) LPort=9009
FirewallRules: [{C28ED127-BD7A-412B-9914-EE2D774E100E}] => (Allow) LPort=9009
FirewallRules: [{F5FFF278-C9BD-452C-8C15-828D4618D4CF}] => (Allow) LPort=9009
==================== Restore Points =========================
04-06-2022 00:56:48 Naplánovaný kontrolní bod
07-06-2022 21:04:40 Nainstalováno rozhraní DirectX
15-06-2022 18:27:04 Naplánovaný kontrolní bod
19-06-2022 15:08:56 Instalační služba modulů systému Windows
19-06-2022 15:09:23 Instalační služba modulů systému Windows
19-06-2022 15:09:49 Instalační služba modulů systému Windows
21-06-2022 22:53:56 Instalační služba modulů systému Windows
21-06-2022 23:30:24 Installed GService.
21-06-2022 23:31:27 Removed GService.
21-06-2022 23:31:36 Installed GService.
21-06-2022 23:33:46 Removed GService.
21-06-2022 23:33:55 Installed GService.
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (06/21/2022 11:46:25 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KR0LJ7U)
Description: Nelze otevřít objekt výkonu služby serveru. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.
Error: (06/21/2022 11:43:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ApCent.exe, verze: 22.2.24.2, časové razítko: 0x62173bbd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1766, časové razítko: 0x270baf18
Kód výjimky: 0xc000041d
Posun chyby: 0x0012c3a2
ID chybujícího procesu: 0x2f08
Čas spuštění chybující aplikace: 0x01d885b7dfd2d2ca
Cesta k chybující aplikaci: C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 855cfe4b-4c0a-4813-9003-03177bd105c1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/21/2022 11:43:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ApCent.exe, verze: 22.2.24.2, časové razítko: 0x62173bbd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1766, časové razítko: 0x270baf18
Kód výjimky: 0xe0434352
Posun chyby: 0x0012c3a2
ID chybujícího procesu: 0x2f08
Čas spuštění chybující aplikace: 0x01d885b7dfd2d2ca
Cesta k chybující aplikaci: C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 5163e600-38ac-41d1-bc25-f1724ed4e3ef
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/21/2022 11:43:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: ApCent.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.MissingMethodException
na ApCent.MainWindow.HideAltTab()
na ApCent.MainWindow.Window_Loaded(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs)
na System.Windows.BroadcastEventHelper.BroadcastEvent(System.Windows.DependencyObject, System.Windows.RoutedEvent)
na System.Windows.BroadcastEventHelper.BroadcastLoadedEvent(System.Object)
na MS.Internal.LoadedOrUnloadedOperation.DoWork()
na System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()
na System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()
na System.Windows.Media.MediaContext.RenderMessageHandlerCore(System.Object)
na System.Windows.Media.MediaContext.RenderMessageHandler(System.Object)
na System.Windows.Media.MediaContext.Resize(System.Windows.Media.ICompositionTarget)
na System.Windows.Interop.HwndTarget.OnResize()
na System.Windows.Interop.HwndTarget.HandleMessage(MS.Internal.Interop.WindowMessage, IntPtr, IntPtr)
na System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
Error: (06/21/2022 11:42:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ApCent.exe, verze: 22.2.24.2, časové razítko: 0x62173bbd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1766, časové razítko: 0x270baf18
Kód výjimky: 0xc000041d
Posun chyby: 0x0012c3a2
ID chybujícího procesu: 0x2570
Čas spuštění chybující aplikace: 0x01d885b7cc8193c3
Cesta k chybující aplikaci: C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: e4733bd9-c109-40ae-9bc0-4484483b7d06
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/21/2022 11:42:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: ApCent.exe, verze: 22.2.24.2, časové razítko: 0x62173bbd
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.19041.1766, časové razítko: 0x270baf18
Kód výjimky: 0xe0434352
Posun chyby: 0x0012c3a2
ID chybujícího procesu: 0x2570
Čas spuštění chybující aplikace: 0x01d885b7cc8193c3
Cesta k chybující aplikaci: C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: b804cc60-6063-44c2-94a4-44303185edb9
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (06/21/2022 11:42:30 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplikace: ApCent.exe
Verze Framework: v4.0.30319
Popis: Proces byl ukončen z důvodu neošetřené výjimky.
Informace o výjimce: System.MissingMethodException
na ApCent.MainWindow.HideAltTab()
na ApCent.MainWindow.Window_Loaded(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
na System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
na System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
na System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs)
na System.Windows.BroadcastEventHelper.BroadcastEvent(System.Windows.DependencyObject, System.Windows.RoutedEvent)
na System.Windows.BroadcastEventHelper.BroadcastLoadedEvent(System.Object)
na MS.Internal.LoadedOrUnloadedOperation.DoWork()
na System.Windows.Media.MediaContext.FireLoadedPendingCallbacks()
na System.Windows.Media.MediaContext.FireInvokeOnRenderCallbacks()
na System.Windows.Media.MediaContext.RenderMessageHandlerCore(System.Object)
na System.Windows.Media.MediaContext.RenderMessageHandler(System.Object)
na System.Windows.Media.MediaContext.Resize(System.Windows.Media.ICompositionTarget)
na System.Windows.Interop.HwndTarget.OnResize()
na System.Windows.Interop.HwndTarget.HandleMessage(MS.Internal.Interop.WindowMessage, IntPtr, IntPtr)
na System.Windows.Interop.HwndSource.HwndTargetFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
na MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
na System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
na System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
na System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
na MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
Error: (06/21/2022 11:41:52 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.
System errors:
=============
Error: (06/21/2022 11:42:39 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Publikování prostředků rozpoznávání funkcí byla ukončena s následující chybou:
%%2147952449 = Požadovaná adresa není v tomto kontextu platná.
Error: (06/21/2022 11:40:47 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba Gservice je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (06/21/2022 11:36:32 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba Gservice je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (06/21/2022 11:35:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Gservice byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (06/21/2022 11:34:00 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba Gservice je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (06/21/2022 11:31:41 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba Gservice je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (06/21/2022 11:30:31 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Služba Gservice je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.
Error: (06/21/2022 11:30:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba EasyTune Engine byla neočekávaně ukončena. Tento stav nastal již 1krát.
CodeIntegrity:
===============
Date: 2022-06-21 23:44:23
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Date: 2022-06-21 23:43:23
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. F10c 12/18/2019
Motherboard: Gigabyte Technology Co., Ltd. Z390 GAMING X-CF
Processor: Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
Percentage of memory in use: 40%
Total physical RAM: 16315.39 MB
Available physical RAM: 9740.75 MB
Total Virtual: 33723.39 MB
Available Virtual: 24895.46 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:231.84 GB) (Free:68.95 GB) (Model: Samsung SSD 970 EVO 250GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:1863.01 GB) (Free:1513.73 GB) (Model: ST2000DM008-2FR102) NTFS
Drive e: (SSD) (Fixed) (Total:465.76 GB) (Free:253.6 GB) (Model: WDC WDS500G2B0A-00SM50) NTFS
\\?\Volume{3b3ffe23-0000-0000-0000-30183a000000}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
==================== MBR & Partition Table ====================
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosím o kontrolu
AHOJ,
citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>
•Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt
citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>
Kód: Vybrat vše
Start
CreateRestorePoint:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
AlternateDataStreams: C:\Users\David Hynek\Data aplikací:a71eda622791298bf432424e2ed8fdad [394]
AlternateDataStreams: C:\Users\David Hynek\AppData\Roaming:a71eda622791298bf432424e2ed8fdad [394]
FirewallRules: [{8B443EC0-DEBE-40FF-880A-8E93F740E73B}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{300CCBD6-14E1-426C-AB35-FD4C17FFE3E1}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{1FCCAE3A-8401-4F29-A2C2-A270A04EE39F}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{9A0EA718-B933-4278-B971-BD6029B27F89}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [TCP Query User{8BF3477C-0A35-42EB-AFF9-819F79A9B894}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
FirewallRules: [UDP Query User{7160EF91-FBDB-4878-B6B9-D8EB3B0DF14F}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
EmptyTemp:
Reboot:
End
•Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txtFRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu
Fix result of Farbar Recovery Scan Tool (x64) Version: 20-06-2022
Ran by David Hynek (22-06-2022 13:18:24) Run:4
Running from C:\Users\David Hynek\Desktop
Loaded Profiles: David Hynek
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
AlternateDataStreams: C:\Users\David Hynek\Data aplikací:a71eda622791298bf432424e2ed8fdad [394]
AlternateDataStreams: C:\Users\David Hynek\AppData\Roaming:a71eda622791298bf432424e2ed8fdad [394]
FirewallRules: [{8B443EC0-DEBE-40FF-880A-8E93F740E73B}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{300CCBD6-14E1-426C-AB35-FD4C17FFE3E1}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{1FCCAE3A-8401-4F29-A2C2-A270A04EE39F}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{9A0EA718-B933-4278-B971-BD6029B27F89}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [TCP Query User{8BF3477C-0A35-42EB-AFF9-819F79A9B894}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
FirewallRules: [UDP Query User{7160EF91-FBDB-4878-B6B9-D8EB3B0DF14F}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
EmptyTemp:
Reboot:
End
*****************
Restore point was successfully created.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
gadjservice => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\gadjservice => removed successfully
gadjservice => service removed successfully
C:\Users\David Hynek\Data aplikací => ":a71eda622791298bf432424e2ed8fdad" ADS removed successfully
"C:\Users\David Hynek\AppData\Roaming" => ":a71eda622791298bf432424e2ed8fdad" ADS not found.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8B443EC0-DEBE-40FF-880A-8E93F740E73B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{300CCBD6-14E1-426C-AB35-FD4C17FFE3E1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1FCCAE3A-8401-4F29-A2C2-A270A04EE39F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A0EA718-B933-4278-B971-BD6029B27F89}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8BF3477C-0A35-42EB-AFF9-819F79A9B894}E:\saintsrowthethird\srttr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7160EF91-FBDB-4878-B6B9-D8EB3B0DF14F}E:\saintsrowthethird\srttr.exe" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 188985958 B
Java, Discord, Steam htmlcache => 1346363163 B
Windows/system/drivers => 13701432 B
Edge => 0 B
Chrome => 1003879584 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 34220 B
NetworkService => 34220 B
David Hynek => 760799635 B
RecycleBin => 309566165 B
EmptyTemp: => 3.4 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 13:19:00 ====
Ran by David Hynek (22-06-2022 13:18:24) Run:4
Running from C:\Users\David Hynek\Desktop
Loaded Profiles: David Hynek
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
AlternateDataStreams: C:\Users\David Hynek\Data aplikací:a71eda622791298bf432424e2ed8fdad [394]
AlternateDataStreams: C:\Users\David Hynek\AppData\Roaming:a71eda622791298bf432424e2ed8fdad [394]
FirewallRules: [{8B443EC0-DEBE-40FF-880A-8E93F740E73B}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{300CCBD6-14E1-426C-AB35-FD4C17FFE3E1}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{1FCCAE3A-8401-4F29-A2C2-A270A04EE39F}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [{9A0EA718-B933-4278-B971-BD6029B27F89}] => (Allow) D:\Streamlabs Chatbot\Streamlabs Chatbot.exe => No File
FirewallRules: [TCP Query User{8BF3477C-0A35-42EB-AFF9-819F79A9B894}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
FirewallRules: [UDP Query User{7160EF91-FBDB-4878-B6B9-D8EB3B0DF14F}E:\saintsrowthethird\srttr.exe] => (Allow) E:\saintsrowthethird\srttr.exe => No File
EmptyTemp:
Reboot:
End
*****************
Restore point was successfully created.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
gadjservice => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\gadjservice => removed successfully
gadjservice => service removed successfully
C:\Users\David Hynek\Data aplikací => ":a71eda622791298bf432424e2ed8fdad" ADS removed successfully
"C:\Users\David Hynek\AppData\Roaming" => ":a71eda622791298bf432424e2ed8fdad" ADS not found.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8B443EC0-DEBE-40FF-880A-8E93F740E73B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{300CCBD6-14E1-426C-AB35-FD4C17FFE3E1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1FCCAE3A-8401-4F29-A2C2-A270A04EE39F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A0EA718-B933-4278-B971-BD6029B27F89}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8BF3477C-0A35-42EB-AFF9-819F79A9B894}E:\saintsrowthethird\srttr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7160EF91-FBDB-4878-B6B9-D8EB3B0DF14F}E:\saintsrowthethird\srttr.exe" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 188985958 B
Java, Discord, Steam htmlcache => 1346363163 B
Windows/system/drivers => 13701432 B
Edge => 0 B
Chrome => 1003879584 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 34220 B
NetworkService => 34220 B
David Hynek => 760799635 B
RecycleBin => 309566165 B
EmptyTemp: => 3.4 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 13:19:00 ====
Re: Prosím o kontrolu
pokial nie su nejake problemy tak hotovo 
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu
Pokud je to tedy vše, děkuji.
Problém s PC jsem neměl, jen jsem důkladně uklízel
Děkuji a můžete lock.
S pozdravem
David
Problém s PC jsem neměl, jen jsem důkladně uklízel
Děkuji a můžete lock.
S pozdravem
David
Re: Prosím o kontrolu
Rado sa stalo
Jan
Jan
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Přispějete na provoz fóra?