VIRY.CZ

dditional scan result of Farbar Recovery Scan Tool (x64) Version: 07-05-2023 01
Ran by Lukáš (08-05-2023 09:39:09)
Running from C:\Users\Lukáš\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.2846 (X64) (2023-01-05 14:44:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1425878809-3904051324-2884316882-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1425878809-3904051324-2884316882-503 - Limited - Disabled)
Guest (S-1-5-21-1425878809-3904051324-2884316882-501 - Limited - Disabled)
Lukáš (S-1-5-21-1425878809-3904051324-2884316882-1001 - Administrator - Enabled) => C:\Users\Lukáš
WDAGUtilityAccount (S-1-5-21-1425878809-3904051324-2884316882-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 22.01 (x64) (HKLM\...\7-Zip) (Version: 22.01 - Igor Pavlov)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.22 - Adobe Systems)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.1.0.3 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601032}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
AnyMP4 Video Converter Ultimate 8.5.20 (HKLM-x32\...\{B77ACAAE-53EE-43c3-86F1-4AEA52F6CDD5}_is1) (Version: 8.5.20 - AnyMP4 Studio)
Avast AntiTrack Premium (HKLM-x32\...\AvastAntiTrackPremium) (Version: 3.3.983.1074 - Avast Software)
Avast BreachGuard (HKLM\...\AvastBreachGuard) (Version: 23.2.1853.6718 - Avast Software)
Avast Cleanup Premium (HKLM\...\Avast Cleanup) (Version: 23.1.13415.12138 - Avast Software)
Avast Premium Security (HKLM\...\Avast Antivirus) (Version: 23.3.6058 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 112.0.21002.138 - Autoři prohlížeče Avast Secure Browser)
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 5.25.7922.7760 - Avast Software)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1579.3 - AVAST Software) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 6.11 - Piriform)
EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
Forza Horizon 5 (HKLM-x32\...\Forza Horizon 5_is1) (Version: 0.0.0 - DODI-Repacks)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 112.0.5615.138 - Google LLC)
IObit Driver Booster 7.3.0.665 (HKLM-x32\...\IObit Driver Booster_is1) (Version: 7.3.0.665 - lrepacks.ru)
Kontrola stavu osobního počítače s Windows (HKLM\...\{95548B78-8547-4E91-B0DA-1CBB82150917}) (Version: 3.7.2204.15001 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 113.0.1774.35 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 112.0.1722.68 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0405-1000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}) (Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\...\OneDriveSetup.exe) (Version: 23.081.0416.0001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{BB052C53-34CB-42DE-AF41-66FDFCEEC868}) (Version: 3.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.31.31103 (HKLM-x32\...\{2aaf1df0-eb13-4099-9992-962bb4e596d1}) (Version: 14.31.31103.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.31.31103 (HKLM\...\{A977984B-9244-49E3-BD24-43F0A8009667}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.31.31103 (HKLM\...\{A181A302-3F6D-4BAD-97A8-A426A6499D78}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.31.31103 (HKLM-x32\...\{5720EC03-F26F-40B7-980C-50B5D420B5DE}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.31.31103 (HKLM-x32\...\{799E3FFF-705C-461F-B400-6DE27398B3E5}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox (x86 cs) (HKLM-x32\...\Mozilla Firefox 112.0.2 (x86 cs)) (Version: 112.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 108.0.2 - Mozilla)
NVIDIA Ovladače grafiky 512.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 512.15 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9225.1 - Realtek Semiconductor Corp.)
Reg Organizer verze 9.10 (HKLM\...\Reg Organizer_is1) (Version: 9.10 - ChemTable Software)
Sons Of The Forest (HKLM-x32\...\Sons Of The Forest_is1) (Version: 0.0.0 - DODI-Repacks)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 10.52 - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{8F2D6CEB-BC98-4B69-A5C1-78BED238FE77}) (Version: 2.71.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{0746492E-47B6-4251-940C-44462DFD74BB}) (Version: 2.55.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN)
WinRAR 6.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.21.0 - win.rar GmbH)

Packages:
=========
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2023-01-05] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2023-01-05] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.964.0_x64__56jybvy8sckqj [2023-03-09] (NVIDIA Corp.)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-04-07] (Microsoft Studios) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1425878809-3904051324-2884316882-1001_Classes\CLSID\{D5C4136A-93E5-4678-A6F8-0B2D9BB10999}\localserver32 -> C:\WINDOWS\System32\RunDll32.exe "C:\Program Files\Reg Organizer\Notifications.dll",Activate -ToastActivated => No File
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-04-11] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-04-11] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-04-11] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-02-16] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-02-16] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-04-11] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdig.inf_amd64_1bf648cb746f97ee\nvshext.dll [2023-05-05] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-04-11] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-02-16] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-02-16] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2012-09-23 21:44 - 2012-09-23 21:44 - 000010240 _____ (Adobe Systems Inc.) [File not signed] C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\cs_cz\Acrobat Elements\ContextMenuShim64.cze
2023-01-11 19:29 - 2022-07-15 16:00 - 000094720 _____ (Igor Pavlov) [File not signed] D:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 23:03 - 2023-05-08 09:18 - 000000991 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 license.piriform.com
127.0.0.1 www.license.piriform.com
127.0.0.1 ccleaner.piriform.com
127.0.0.1 www.ccleaner.piriform.com
127.0.0.1 license-api.ccleaner.com

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 100.126.0.1 - 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{C76BCD50-DE55-4ED1-87BB-5F67CA68A7C1}C:\users\lukáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lukáš\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [UDP Query User{13C322B3-C00B-48E3-B5EF-312A7F9711DD}C:\users\lukáš\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lukáš\appdata\roaming\utorrent\utorrent.exe (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
FirewallRules: [{28C8275D-E1BA-4F7F-8BB2-1FFF37D7ED77}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{3CCB8135-4898-42A1-9981-C3A77C8F1E4D}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{4CF666F7-6338-400B-8203-3446B064DD5E}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe (Avast Software s.r.o. -> The CefSharp Authors)
FirewallRules: [{185B47D7-3ACC-4D09-B587-A795C136465A}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe (Avast Software s.r.o. -> The CefSharp Authors)
FirewallRules: [{A2F98793-92F9-4DC3-8F1E-96443EE709B3}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{1B97F967-6419-47FB-B002-4165422BB96B}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{77D9199A-52C6-4184-BED2-C95F416886FB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D9B50D3A-4969-4275-BA48-C3DFE6D24E1E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C0D139BB-5B25-4638-8D24-A635BD35AC43}] => (Allow) C:\Program Files\Avast Software\BreachGuard\bgui.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EDDE7316-3BF0-460B-884A-993928051E67}] => (Allow) C:\Program Files\Avast Software\BreachGuard\bgui.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EBF6AE35-70F6-4CFD-8925-E44A918EBB14}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{6C0785C0-53CD-43AD-A201-83080BFCCC6F}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{9FA2D93C-E36F-46B2-BD8A-1F3BA51CCDDB}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BCEB3DA2-1C39-4292-A266-76036B80C724}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D925BA30-5CA6-4EEB-9952-CAA5543873E2}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6F264E5D-286A-472E-B7E2-6ED7D9A9AD8C}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{01CB345A-A4BA-414E-8E63-2FDAF98A7087}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{4532C924-6A58-4E86-9B3E-3EB5BC69B0C6}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [File not signed]
FirewallRules: [{6701FBAB-CA2F-4F42-B1CA-816F171A512C}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )
FirewallRules: [{2D12B504-A378-40B1-9CDC-1BAB2B5414D5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )
FirewallRules: [{CDF42127-1809-466D-8EAF-F0C309B3B2E3}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{386A25BC-6E76-40B4-9D69-26939803CD51}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{895D6DC2-B8BC-4638-9CC6-8A2C9E940326}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{B0A6853A-D02F-4EA3-B65D-03C876E9CBE8}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{94E42CEC-9640-489D-B671-CAAA78AB7C15}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{077DF9B0-1377-486A-9A27-986869F64251}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{F21520BF-4AC1-482F-B711-2802D15B44F2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{E306BBA7-5131-4535-9182-23D3384752D5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{A8620E2E-E6E2-4645-8144-D8D520CE9695}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{79209814-3C1F-442A-ABDF-13DAB4878DF7}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{95F87FF2-69EA-4891-B000-82F900C22C5A}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\112.0.1722.68\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

28-04-2023 14:34:18 Naplánovaný kontrolní bod
05-05-2023 12:04:56 Driver Booster : NVIDIA GeForce GTX 1060 3GB
05-05-2023 18:41:18 Piriform Driver Updater - Update 10.0.19041.746

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (05/08/2023 09:37:13 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3964,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (05/08/2023 08:46:35 AM) (Source: ESENT) (EventID: 455) (User: )
Description: qmgr.dll (8724,R,98) QmgrDatabaseInstance: Při otevírání souboru protokolu C:\ProgramData\Microsoft\Network\Downloader\edb00002.log došlo k chybě -1811 (0xfffff8ed).

Error: (05/08/2023 08:45:36 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6696,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (05/08/2023 08:34:51 AM) (Source: ESENT) (EventID: 454) (User: )
Description: taskhostw (2944,R,98) WebCacheLocal: Při pokusu o obnovení nebo zotavení databáze došlo k neočekávané chybě -543.

Error: (05/08/2023 08:34:50 AM) (Source: ESENT) (EventID: 453) (User: )
Description: taskhostw (2944,R,98) WebCacheLocal: Databáze C:\Users\Lukáš\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro úspěšné obnovení požaduje soubory protokolů 7 až 9 (C:\Users\Lukáš\AppData\Local\Microsoft\Windows\WebCache\V0100007.log až C:\Users\Lukáš\AppData\Local\Microsoft\Windows\WebCache\V01.log). Proces obnovení našel jenom soubory protokolu až po soubor 8 (C:\Users\Lukáš\AppData\Local\Microsoft\Windows\WebCache\V0100008.log).

Error: (05/08/2023 08:32:59 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (524,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (05/08/2023 08:31:43 AM) (Source: ESENT) (EventID: 455) (User: )
Description: wuaueng.dll (5348,R,98) SUS20ClientDataStore: Při otevírání souboru protokolu C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb00024.log došlo k chybě -1811 (0xfffff8ed).

Error: (05/08/2023 08:28:13 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: Služba Šifrování neinicializovala databázi katalogu. Chyba součásti ESENT: -550.


System errors:
=============
Error: (05/08/2023 09:12:46 AM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{FF03A4B9-45FF-4BE3-BC33-57F7FCEF37E5}, protože jiný počítač v síti má stejný název. Server nelze spustit.

Error: (05/08/2023 09:12:46 AM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{FF03A4B9-45FF-4BE3-BC33-57F7FCEF37E5}, protože jiný počítač v síti má stejný název. Server nelze spustit.

Error: (05/08/2023 09:12:46 AM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{FF03A4B9-45FF-4BE3-BC33-57F7FCEF37E5}, protože jiný počítač v síti má stejný název. Server nelze spustit.

Error: (05/08/2023 09:12:46 AM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{FF03A4B9-45FF-4BE3-BC33-57F7FCEF37E5}, protože jiný počítač v síti má stejný název. Server nelze spustit.

Error: (05/08/2023 09:12:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avast AntiTrack Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (05/08/2023 09:12:34 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Management Engine WMI Provider Registration byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/08/2023 09:12:34 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Dynamic Application Loader Host Interface Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/08/2023 09:12:34 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avast BreachGuard byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.


CodeIntegrity:
===============
Date: 2023-05-08 09:08:20
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2023-05-08 09:07:18
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: American Megatrends Inc. C.70 05/23/2016
Motherboard: MSI B150 PC MATE (MS-7971)
Processor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Percentage of memory in use: 14%
Total physical RAM: 32731.07 MB
Available physical RAM: 27829.93 MB
Total Virtual: 37595.07 MB
Available Virtual: 31264.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.41 GB) (Free:99.06 GB) (Model: Verbatim Vi550 S3) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:286.93 GB) (Model: WDC WD10EZEX-21WN4A0) NTFS

\\?\Volume{2392a49f-b109-4bd7-a2d3-52756bdc2ece}\ (Obnovení) (Fixed) (Total:0.44 GB) (Free:0.43 GB) NTFS
\\?\Volume{8723206d-85a5-4557-89d6-e8af482c7f1d}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{44670832-eab2-4c81-8082-4b18868d3447}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 238.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 475DDCC4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 07-05-2023 01
Ran by Lukáš (administrator) on LUKÁŠ (MSI MS-7971) (08-05-2023 09:34:00)
Running from C:\Users\Lukáš\Desktop\FRST64.exe
Loaded Profiles: Lukáš
Platform: Microsoft Windows 10 Pro Version 22H2 19045.2846 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files (x86)\Avast Software\Browser\Application\AvastBrowser.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe ->) (Avast Software s.r.o. -> Avast Software) C:\Program Files\Avast Software\SecureLine VPN\WireGuard\wireguardtun.exe
(cmd.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastNM.exe
(cmd.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\VpnNM.exe
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\Avast Software\Browser\Application\AvastBrowser.exe <20>
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\BreachGuard\bgui.exe <4>
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe <5>
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe <4>
(PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\AntiTrackSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\BreachGuard\bgsvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdig.inf_amd64_1bf648cb746f97ee\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(svchost.exe ->) (Avast Software s.r.o. -> Avast Software) C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe
(svchost.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21422.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23032.186.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11102800 2021-08-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [220056 2023-04-11] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [Avast BreachGuard] => C:\Program Files\Avast Software\BreachGuard\bgui.exe [7206296 2023-02-23] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [TuneupUI.exe] => C:\Program Files\Avast Software\Cleanup\TuneupUI.exe [4499864 2023-05-04] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3476960 2022-09-27] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => D:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3500056 2017-07-27] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [40412984 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\...\Run: [EPSON Stylus DX4400] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATICAE.EXE [211456 2007-03-01] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1425878809-3904051324-2884316882-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [4362600 2023-04-28] (Valve Corp. -> Valve Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [55432 2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\EPSON Stylus DX4400 Series 64MonitorBE: C:\WINDOWS\system32\E_ILMCAE.DLL [108032 2007-12-07] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\112.0.5615.138\Installer\chrmstp.exe [2023-04-21] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\112.0.21002.138\Installer\chrmstp.exe [2023-05-04] (Avast Software s.r.o. -> AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2023-05-05]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1B2B546E-A55D-4B1B-BA20-F45B86C65024} - System32\Tasks\Avast Software\AvastAntiTrackPremiumStart => C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\AvastAntiTrackPremium.exe [813008 2023-01-05] (Avast Software s.r.o. -> AVAST Software)
Task: {217710EB-B043-4F72-A3CA-79F64F1487A5} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [7092120 2023-04-26] (Avast Software s.r.o. -> Avast Software)
Task: {2CC5F8AE-24CC-4C03-B70C-79427953163E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {47AB2147-215E-4C42-A407-7E8A32B6D077} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [5029784 2023-05-04] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\Cleanup\log" --guid 43fd24af-1866-4e0d-afc5-b9e827d5d1c2
Task: {500C566D-2F9D-411B-85DC-979667305B33} - System32\Tasks\Avast Software\Avast BreachGuard Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-bg\icarus.exe [7049624 2023-02-22] (Avast Software s.r.o. -> Avast Software)
Task: {515A2B53-DF5B-4070-B908-25DCDBDD80CB} - System32\Tasks\CCleanerSkipUAC - Lukáš => C:\Program Files\CCleaner\CCleaner.exe [34159416 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {561ED484-5FC5-4451-8C63-B9E10BA67E8C} - System32\Tasks\Avast Software\Avast BreachGuard Crash Reporter => C:\Program Files\Avast Software\BreachGuard\AvBugReport.exe [4912024 2023-02-23] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 135 --path "C:\ProgramData\Avast Software\BreachGuard\log" --logpath "C:\ProgramData\Avast Software\BreachGuard\log" --configpath "C:\Program Files\Avast Software\BreachGuard\Setup" --programpath "C:\Program Files\Avast Software\BreachGuard" --guid 02b20a95-228f-41e3-b7d4-62663a0ddba4
Task: {580C0F17-5A0A-43DA-B17B-53AAE0782F70} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703544 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "4ad456f2-941c-437a-bde8-7df3c8c90955" --version "6.11.10455" --silent
Task: {5F4B65A8-1904-4621-B2D3-77CB29BF0CE7} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [5030808 2023-05-05] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\SecureLine VPN\log" --guid 0f5ed310-8b57-43f7-8fc2-40168aa12fe3
Task: {6979F60E-62CE-4A37-83CB-8DF0EF578E5D} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [603552 2023-04-26] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {70E67522-1366-4026-9799-25AABD027BDE} - System32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
Task: {79782605-66B2-45E4-A354-94F08889DE38} - System32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
Task: {81F6E20A-B1FA-4413-90DD-E34E3F4EDAB4} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2023-01-06] (Avast Software s.r.o. -> AVAST Software)
Task: {841AE254-93E4-47FE-BEEE-B757924AF70D} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2023-01-06] (Avast Software s.r.o. -> AVAST Software)
Task: {8AF66EA6-E914-4F57-BB3C-6BBA946CB615} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [7092120 2023-05-03] (Avast Software s.r.o. -> Avast Software)
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\Adobe Acrobat Update Task" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\CCleaner Update" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\CCleanerCrashReporting" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\CCleanerSkipUAC - Lukáš" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\Intel PTT EK Recertification" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore{14D1D0EB-2AAB-447B-B940-2E7506141A6A}" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineUA{4ED34372-586B-4F32-B1D8-C0F163F59826}" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN "\OneDrive Reporting Task-S-1-5-21-1425878809-3904051324-2884316882-1001" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-1425878809-3904051324-2884316882-1001" /ENABLE
Task: {8B99000F-4B08-4247-8E72-80E4D9BBD1DB} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(12): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {9EBC7989-5C8D-495B-9619-FCD73B793827} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4885912 2023-04-11] (Avast Software s.r.o. -> AVAST Software)
Task: {B744C9A7-8EC6-48E9-8008-C6E8A8373023} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2135448 2023-04-14] (Avast Software s.r.o. -> Avast Software)
Task: {BB1C64CE-6291-4165-92FD-7321C1A25E40} - System32\Tasks\Driver Booster SkipUAC (Lukáš) => D:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [7892240 2020-02-24] (IObit Information Technology -> IObit) [File not signed]
Task: {BC8C74C7-A657-4482-B5E1-B661E6DBE724} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3476960 2022-09-27] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {BE107D24-6FF6-4A83-AFFB-163A47B945C2} - System32\Tasks\DelayedItemsByChemtableSoftware\CCleaner Smart Cleaning => C:\Program Files\CCleaner\CCleaner64.exe [40412984 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {C48CE9A1-4C9A-429A-AF48-749D911A9BBA} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [3350856 2023-04-26] (Avast Software s.r.o. -> AVAST Software)
Task: {CEA74434-58FB-499A-A755-482743885D50} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {DF357D28-D6E1-4D04-A28D-36B87419D597} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-27] (Adobe Inc. -> Adobe Inc.)
Task: {E4AA83C0-9C62-4F60-9FCF-01F87EFBB125} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1243544 2023-05-05] (Avast Software s.r.o. -> AVAST Software)
Task: {ED8B7D5C-B53A-4956-B265-604920E08206} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [3350856 2023-04-26] (Avast Software s.r.o. -> AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{2bede604-00e3-4178-8657-ace3cc770b0c}: [NameServer] 100.120.209.1
Tcpip\..\Interfaces\{3187bc18-8086-48b1-aada-7b0cf565ce6b}: [DhcpNameServer] 192.168.217.149
Tcpip\..\Interfaces\{41766173-7453-6f66-7477-617265415357}: [NameServer] 100.126.0.1
Tcpip\..\Interfaces\{8396c08c-44a6-40f7-9500-b1b2eb852f0a}: [DhcpNameServer] 192.168.221.93
Tcpip\..\Interfaces\{ff03a4b9-45ff-4be3-bc33-57f7fcef37e5}: [DhcpNameServer] 192.168.0.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Lukáš\AppData\Local\Microsoft\Edge\User Data\Default [2023-04-08]
Edge Extension: (Avast Online Security & Privacy) - C:\Users\Lukáš\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdgpikaaheckgdijjmepmdjjkbceakif [2023-01-05]

FireFox:
========
FF DefaultProfile: m6u31hwo.default
FF ProfilePath: C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\m6u31hwo.default [2023-01-05]
FF ProfilePath: C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\3ncbf8jp.default-release [2023-05-08]
FF Homepage: Mozilla\Firefox\Profiles\3ncbf8jp.default-release -> www.centrum.cz
FF Extension: (Avast SecureLine VPN) - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\3ncbf8jp.default-release\Extensions\secureline-vpn@avast.com.xpi [2023-03-19]
FF Extension: (Avast Online Security & Privacy) - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\3ncbf8jp.default-release\Extensions\wrc@avast.com.xpi [2023-03-18]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2023-02-01] [Legacy]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1579.3\npAvastBrowserUpdate3.dll [2023-01-06] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1579.3\npAvastBrowserUpdate3.dll [2023-01-06] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-08-18] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems Incorporated -> Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default [2023-05-03]
CHR Extension: (Adobe Acrobat: nástroje pro úpravu, převod a podpis souborů PDF) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-04-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-29]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2023-01-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-01-05]
CHR Extension: (Avast SecureLine VPN) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\phmegojolgpbbcnhccbfneddlooepbpd [2023-03-19]
CHR Extension: (Avast AntiTrack Premium) - C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppdidpcihajhihmghhhkfnpklgdehold [2023-01-05]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-07-27]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-27] (Adobe Inc. -> Adobe Inc.)
S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3866592 2022-09-27] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3702240 2022-09-27] (Adobe Inc. -> Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8808344 2023-04-11] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2023-01-06] (Avast Software s.r.o. -> AVAST Software)
R2 Avast BreachGuard Service; C:\Program Files\Avast Software\BreachGuard\bgsvc.exe [7399320 2023-02-23] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [583064 2023-04-11] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2079128 2023-04-11] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [584088 2023-04-11] (Avast Software s.r.o. -> AVAST Software)
R2 AvastAntiTrackSvc; C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\AntiTrackSvc.exe [5779160 2023-01-05] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2023-01-06] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\112.0.21002.138\elevation_service.exe [1805376 2023-04-26] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2023-01-05] (Avast Software s.r.o. -> AVAST Software)
R2 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1063736 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S4 Chemtable Startup Checking; C:\Program Files\Reg Organizer\StartupCheckingService.exe [ ]
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [17477528 2023-05-04] (Avast Software s.r.o. -> AVAST Software)
S4 Microsoft Office Groove Audit Service; D:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [64856 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [10043288 2023-05-05] (Avast Software s.r.o. -> AVAST Software)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [285088 2023-04-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2211.5-0\NisSrv.exe [3191264 2023-01-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2211.5-0\MsMpEng.exe [133592 2023-01-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdig.inf_amd64_1bf648cb746f97ee\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdig.inf_amd64_1bf648cb746f97ee\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [235424 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [391808 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297840 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [95960 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [25576 2023-01-05] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39608 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [269464 2023-04-25] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [557096 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105208 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80376 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [942952 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [702784 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [212640 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319568 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [76664 2023-03-31] (Avast Software s.r.o. -> Avast Software)
R3 aswWintun; C:\WINDOWS\System32\drivers\aswWintun.sys [51112 2023-01-05] (Avast Software s.r.o. -> AVAST Software)
R3 aswWireGuard; C:\WINDOWS\System32\drivers\aswWireguard.sys [498992 2023-01-05] (Avast Software s.r.o. -> WireGuard LLC)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2023-01-05] (Martin Malik - REALiX -> REALiX(tm))
R0 MsSecCore; C:\WINDOWS\System32\drivers\msseccore.sys [26480 2023-04-12] (Microsoft Windows -> Microsoft Corporation)
S3 MsSecWfp; C:\WINDOWS\System32\drivers\mssecwfp.sys [29568 2023-04-12] (Microsoft Windows -> Microsoft Corporation)
R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [124952 2023-01-05] (Avast Software s.r.o. -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49568 2023-01-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [473376 2023-01-05] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99616 2023-01-05] (Microsoft Windows -> Microsoft Corporation)
S3 WinRing0_1_2_0; \??\C:\Users\Lukáš\AppData\Local\Temp\tmp2859.tmp [X] <==== ATTENTION

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2023-05-08 09:34 - 2023-05-08 09:37 - 000031051 _____ C:\Users\Lukáš\Desktop\FRST.txt
2023-05-08 09:28 - 2023-05-08 09:28 - 000023153 _____ C:\Users\Lukáš\Downloads\FRST.txt
2023-05-08 09:25 - 2023-05-08 09:37 - 000000000 ____D C:\FRST
2023-05-08 09:24 - 2023-05-08 09:24 - 002382848 _____ (Farbar) C:\Users\Lukáš\Desktop\FRST64.exe
2023-05-08 09:05 - 2023-05-08 09:05 - 000445248 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-05-07 21:56 - 2023-05-07 21:56 - 000000000 ____D C:\Users\Public\Documents\OnlineFix
2023-05-07 21:56 - 2023-05-07 21:56 - 000000000 ____D C:\Users\Lukáš\AppData\Local\ReadyOrNot
2023-05-06 10:53 - 2023-05-06 10:53 - 369032839 _____ C:\Users\Lukáš\Downloads\freevideo.cz-syn-protahne-mame-komin-540p.mp4
2023-05-06 10:53 - 2023-05-06 10:53 - 124131600 _____ C:\Users\Lukáš\Downloads\freevideo.cz-vyber-z-castingu-3-336p.mp4
2023-05-05 18:09 - 2023-05-05 18:09 - 000245311 _____ C:\Users\Lukáš\Downloads\zpo_8866017037_6522VB005276_153512 (1).pdf
2023-05-05 17:23 - 2023-05-05 17:23 - 000315656 _____ C:\Users\Lukáš\Downloads\[SkT]Ready_or_Not_v21474_(Early_Access)_(2022).torrent
2023-05-05 12:10 - 2023-05-05 12:10 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2023-05-05 12:08 - 2023-05-05 12:08 - 013769240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 011650032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 006798840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 006084120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 005911576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 005835288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 003429896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 002172496 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-05-05 12:08 - 2023-05-05 12:08 - 002172496 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-05-05 12:08 - 2023-05-05 12:08 - 002166808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001621000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001607760 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-05-05 12:08 - 2023-05-05 12:08 - 001607760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-05-05 12:08 - 2023-05-05 12:08 - 001535960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001487896 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001479248 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001479248 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001227288 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001211472 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001211472 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 001194992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 000979480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 000853488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2023-05-05 12:08 - 2023-05-05 12:08 - 000851464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 000758792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 000741384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2023-05-05 12:08 - 2023-05-05 12:08 - 000671240 _____ C:\WINDOWS\system32\nvofapi64.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 000506904 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2023-05-05 12:08 - 2023-05-05 12:08 - 000457696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2023-05-05 12:08 - 2023-05-05 12:08 - 000104369 _____ C:\WINDOWS\system32\nvinfo.pb
2023-05-03 20:33 - 2023-05-03 20:33 - 000235887 _____ C:\Users\Lukáš\Downloads\zpo_8820619018_6523VB004757_153512.pdf
2023-05-01 13:00 - 2023-05-01 13:00 - 000065430 _____ C:\Users\Lukáš\Downloads\Rozpočet_MPSS_klient.xlsx
2023-04-30 09:36 - 2023-04-30 09:36 - 260140947 _____ C:\Users\Lukáš\Downloads\freevideo.cz-oplodnena-ceska-milfka-540p.mp4
2023-04-30 09:36 - 2023-04-30 09:36 - 108911838 _____ C:\Users\Lukáš\Downloads\freevideo.cz-zvyseni-platu-si-musis-zaslouzit-panacku-540p.mp4
2023-04-30 09:35 - 2023-04-30 09:35 - 238854305 _____ C:\Users\Lukáš\Downloads\freevideo.cz-sexualni-haraseni-v-ceske-firme-540p.mp4
2023-04-30 09:34 - 2023-04-30 09:35 - 106994428 _____ C:\Users\Lukáš\Downloads\freevideo.cz-renata-z-otrokovic-ma-novou-praci-336p.mp4
2023-04-30 09:34 - 2023-04-30 09:34 - 307776008 _____ C:\Users\Lukáš\Downloads\freevideo.cz-spravna-osobni-asistentka-ma-kozy-c-6-540p.mp4
2023-04-28 19:04 - 2023-04-28 19:04 - 000451555 _____ C:\Users\Lukáš\Downloads\nz podklad stejnopis sgn (8).pdf
2023-04-28 19:04 - 2023-04-28 19:04 - 000297583 _____ C:\Users\Lukáš\Downloads\opis prilohy ucetni zaverky(3).pdf
2023-04-28 19:04 - 2023-04-28 19:04 - 000094863 _____ C:\Users\Lukáš\Downloads\uz-451100057476-20230214-092045.pdf
2023-04-28 19:04 - 2023-04-28 19:04 - 000000899 _____ C:\Users\Lukáš\Downloads\uz-451100057476-20230214-092045.xml
2023-04-28 19:03 - 2023-04-28 19:03 - 000720639 _____ C:\Users\Lukáš\Downloads\pr_i_loha v u_c_etni_ uza_ve_rce, 31.12.2020 mikro - brickcon, s.r.pdf
2023-04-28 15:14 - 2023-04-28 15:14 - 000744240 _____ C:\Users\Lukáš\Downloads\priloha_1182212038_0_Sobarna.pdf
2023-04-28 15:14 - 2023-04-28 15:14 - 000007411 _____ C:\Users\Lukáš\Downloads\priloha_1174922326_0_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_OSVC_PRE-46CDEF29CC3A4604B486AB1D20A6AF00-1174521012.xml
2023-04-28 15:14 - 2023-04-28 15:14 - 000006969 _____ C:\Users\Lukáš\Downloads\priloha_1174922326_1_CSSZ_Protokol_o_zpracovani_e-Podani_CSSZ_OSVC_PRE-46CDEF29CC3A4604B486AB1D20A6AF00-1174521012.html
2023-04-28 15:13 - 2023-04-28 15:13 - 000064580 _____ C:\Users\Lukáš\Downloads\PK_externí_02-05_2023.xlsx
2023-04-27 17:56 - 2023-04-27 17:56 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\Goldberg SteamEmu Saves
2023-04-27 17:56 - 2023-04-27 17:56 - 000000000 ____D C:\Users\Lukáš\AppData\LocalLow\Endnight
2023-04-27 17:51 - 2023-04-27 17:51 - 000000705 _____ C:\Users\Public\Desktop\Play Sons Of The Forest.lnk
2023-04-27 17:51 - 2023-04-27 17:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sons Of The Forest
2023-04-27 12:10 - 2023-04-27 12:10 - 000015595 _____ C:\Users\Lukáš\Downloads\[SkT]Rychly_prachy_-_Devka_za_vsechny_prachy.torrent
2023-04-27 12:07 - 2023-04-27 12:08 - 609253804 _____ C:\Users\Lukáš\Downloads\freevideo.cz-macecha-nymfomanka-540p.mp4
2023-04-27 12:07 - 2023-04-27 12:07 - 651243318 _____ C:\Users\Lukáš\Downloads\freevideo.cz-synku-nejsi-na-to-xfree-jeste-moc-mladej-540p.mp4
2023-04-27 12:06 - 2023-04-27 12:07 - 874841230 _____ C:\Users\Lukáš\Downloads\freevideo.cz-jak-divka-z-ikarusu-analni-stesti-u-strejdy-pyjera-nasla-540p.mp4
2023-04-27 12:06 - 2023-04-27 12:06 - 228333316 _____ C:\Users\Lukáš\Downloads\freevideo.cz-synku-ta-tvoje-nova-pritelkyne-je-pekna-nestyda-540p.mp4
2023-04-26 17:04 - 2023-04-26 17:04 - 000236624 _____ C:\Users\Lukáš\Downloads\zpo_8866017067_6523VB003326_153512 (1).pdf
2023-04-26 17:01 - 2023-04-26 17:01 - 000245311 _____ C:\Users\Lukáš\Downloads\zpo_8866017037_6522VB005276_153512.pdf
2023-04-26 16:56 - 2023-04-26 16:56 - 000229899 _____ C:\Users\Lukáš\Downloads\zpo_8800401014_6523VB003976_153512.pdf
2023-04-26 14:58 - 2023-04-26 14:58 - 000245445 _____ C:\Users\Lukáš\Downloads\zpo_8800304001_6523VB003384_153512 (1).pdf
2023-04-18 20:15 - 2023-04-18 20:15 - 000064007 _____ C:\Users\Lukáš\Desktop\PK_externí_03-04_2023.xlsx
2023-04-18 20:09 - 2023-04-18 20:09 - 000237653 _____ C:\Users\Lukáš\Downloads\zpo_8810531009_6523VB001169_153512.pdf
2023-04-16 17:43 - 2023-04-16 17:43 - 000234547 _____ C:\Users\Lukáš\Downloads\zpo_8601117N0004_6522VB016528_153512 (1).pdf
2023-04-16 17:36 - 2023-04-16 17:36 - 000236624 _____ C:\Users\Lukáš\Downloads\zpo_8866017067_6523VB003326_153512.pdf
2023-04-16 17:34 - 2023-04-16 17:34 - 000231966 _____ C:\Users\Lukáš\Downloads\zpo_8800412002_6523VB000070_153512 (1).pdf
2023-04-16 17:31 - 2023-04-16 17:31 - 000232012 _____ C:\Users\Lukáš\Downloads\zpo_8830740014_6522VB014394_153512.pdf
2023-04-16 17:30 - 2023-04-16 17:30 - 000230240 _____ C:\Users\Lukáš\Downloads\zpo_8622797002_6522VB016441_153512 (1).pdf
2023-04-16 17:17 - 2023-04-16 17:17 - 000461804 _____ C:\Users\Lukáš\Downloads\FAOV3232002605.PDF
2023-04-16 17:16 - 2023-04-16 17:16 - 000463079 _____ C:\Users\Lukáš\Downloads\FAOV3232001701.PDF
2023-04-16 17:11 - 2023-04-16 17:11 - 000351218 _____ C:\Users\Lukáš\Downloads\zpo_8850850016_6522VB017511_153512 (3).pdf
2023-04-16 17:09 - 2023-04-16 17:09 - 000038749 _____ C:\Users\Lukáš\Downloads\ZPO_final_zr1_8840702010_6522VB016920.pdf
2023-04-16 16:11 - 2023-04-16 16:11 - 180602702 _____ C:\Users\Lukáš\Downloads\freevideo.cz-syn-utesuje-mamu-540p.mp4
2023-04-16 16:10 - 2023-04-16 16:11 - 396577726 _____ C:\Users\Lukáš\Downloads\freevideo.cz-mama-potrebuje-vylizat-opichat-a-postrikat-540p.mp4
2023-04-16 16:10 - 2023-04-16 16:11 - 282191286 _____ C:\Users\Lukáš\Downloads\freevideo.cz-doufam-synku-zes-setril-mrdku-pro-maminku-540p.mp4
2023-04-16 16:09 - 2023-04-16 16:11 - 381621254 _____ C:\Users\Lukáš\Downloads\freevideo.cz-k-tehle-sousedce-kazdej-rad-chodi-koledovat-540p.mp4
2023-04-12 21:04 - 2023-04-12 21:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\mde
2023-04-12 19:19 - 2023-04-12 19:19 - 000000000 ___HD C:\$WinREAgent
2023-04-11 15:14 - 2023-04-17 17:45 - 000000000 ____D C:\WINDOWS\Minidump
2023-04-11 15:08 - 2023-04-11 15:08 - 000313240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2023-05-08 09:33 - 2023-01-05 21:18 - 000000000 ____D C:\Program Files (x86)\Google
2023-05-08 09:31 - 2023-01-05 16:46 - 000000000 ____D C:\Users\Lukáš\AppData\Local\D3DSCache
2023-05-08 09:25 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-05-08 09:18 - 2023-01-05 21:01 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-05-08 09:16 - 2023-01-05 20:56 - 000000000 ____D C:\Program Files\CCleaner
2023-05-08 09:14 - 2023-01-05 20:49 - 000002920 _____ C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Lukáš)
2023-05-08 09:12 - 2023-01-05 20:32 - 000004028 _____ C:\WINDOWS\system32\Tasks\Avast SecureLine VPN Update
2023-05-08 09:12 - 2023-01-05 14:25 - 000000000 ____D C:\ProgramData\NVIDIA
2023-05-08 09:10 - 2023-01-05 20:32 - 000000000 ____D C:\Users\Lukáš\AppData\Local\AvastAntiTrackPremium
2023-05-08 09:09 - 2023-01-05 20:57 - 000004054 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-05-08 09:06 - 2023-01-05 20:27 - 000000000 ____D C:\ProgramData\Avast Software
2023-05-08 09:05 - 2023-01-05 16:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-05-08 09:05 - 2023-01-05 16:38 - 000000000 ____D C:\Users\Lukáš
2023-05-08 09:05 - 2023-01-05 16:36 - 000008192 ___SH C:\DumpStack.log.tmp
2023-05-08 09:05 - 2023-01-05 16:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-05-08 09:05 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-05-08 09:04 - 2023-01-05 21:53 - 000000000 ____D C:\Users\Lukáš\AppData\Local\CrashDumps
2023-05-08 09:04 - 2023-01-05 17:37 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\uTorrent
2023-05-08 09:04 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-05-08 09:02 - 2023-01-05 20:30 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2023-05-08 08:48 - 2023-01-05 16:37 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-05-08 08:48 - 2023-01-05 16:37 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-05-08 08:48 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-05-08 08:48 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-05-08 08:29 - 2023-01-05 20:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2023-05-08 08:26 - 2023-01-05 20:57 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-05-07 23:18 - 2023-01-06 18:14 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-05-07 23:18 - 2023-01-05 21:19 - 000003486 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}
2023-05-07 23:18 - 2023-01-05 21:19 - 000003262 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}
2023-05-07 23:18 - 2023-01-05 20:57 - 000003048 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-05-07 23:18 - 2023-01-05 20:57 - 000002254 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Lukáš
2023-05-07 23:18 - 2023-01-05 20:55 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{4ED34372-586B-4F32-B1D8-C0F163F59826}
2023-05-07 23:18 - 2023-01-05 20:55 - 000003420 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{14D1D0EB-2AAB-447B-B940-2E7506141A6A}
2023-05-07 23:18 - 2023-01-05 20:54 - 000003220 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2023-05-07 23:18 - 2023-01-05 16:43 - 000003066 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1425878809-3904051324-2884316882-1001
2023-05-07 23:18 - 2023-01-05 16:43 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1425878809-3904051324-2884316882-1001
2023-05-05 18:47 - 2023-01-05 16:44 - 001605602 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-05-05 18:47 - 2019-12-07 16:43 - 000682184 _____ C:\WINDOWS\system32\perfh005.dat
2023-05-05 18:47 - 2019-12-07 16:43 - 000137000 _____ C:\WINDOWS\system32\perfc005.dat
2023-05-05 18:37 - 2023-01-05 16:38 - 000002381 _____ C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-05-05 17:49 - 2023-01-05 17:38 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\vlc
2023-05-05 12:08 - 2018-04-12 23:56 - 007935608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2023-05-04 18:26 - 2023-01-06 15:25 - 000002498 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2023-05-04 18:26 - 2023-01-06 15:25 - 000002463 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2023-04-28 15:16 - 2023-01-15 11:53 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\Šablony
2023-04-28 12:29 - 2023-01-05 18:51 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-04-26 14:57 - 2023-01-05 21:01 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-04-26 14:57 - 2023-01-05 21:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2023-04-25 13:04 - 2023-01-05 20:30 - 000269464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2023-04-21 17:55 - 2023-01-05 21:19 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-04-21 17:55 - 2023-01-05 21:19 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2023-04-19 19:29 - 2023-01-05 21:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-04-18 20:15 - 2023-01-09 18:11 - 000000000 ____D C:\Users\Lukáš\Desktop\Residomo
2023-04-17 17:10 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-04-16 18:49 - 2023-01-09 18:11 - 000000000 ____D C:\Users\Lukáš\Desktop\Residomo faktury
2023-04-16 18:47 - 2023-01-09 18:12 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\Excel
2023-04-12 21:04 - 2019-12-07 16:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-04-12 21:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-04-12 19:26 - 2023-01-05 16:39 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-04-12 19:12 - 2023-01-05 14:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-04-12 19:10 - 2023-01-05 14:38 - 156112424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-04-11 15:08 - 2023-01-05 20:30 - 000942952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000702784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000557096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000391808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000319568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000297840 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000235424 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000105208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000095960 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000080376 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2023-04-11 15:08 - 2023-01-05 20:30 - 000039608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2023-04-11 15:08 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-04-11 06:27 - 2023-01-05 21:01 - 000000000 ____D C:\Users\Lukáš\AppData\LocalLow\Mozilla
2023-04-08 18:11 - 2023-02-02 14:20 - 000000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\HTML Help

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 05-08-2023
# Duration: 00:00:01
# OS: Windows 10 (Build 19045.2846)
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1420 octets] - [08/05/2023 10:01:07]
AdwCleaner[C00].txt - [1610 octets] - [08/05/2023 10:01:33]
AdwCleaner[S01].txt - [1542 octets] - [08/05/2023 12:45:43]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

Toto ke OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {70E67522-1366-4026-9799-25AABD027BDE} - System32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
Task: {79782605-66B2-45E4-A354-94F08889DE38} - System32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
S3 WinRing0_1_2_0; \??\C:\Users\Lukáš\AppData\Local\Temp\tmp2859.tmp [X] <==== ATTENTION
C:\DumpStack.log.tmp
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}

EmptyTemp:
Hosts:

End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 07-05-2023 01
Ran by Lukáš (08-05-2023 19:11:09) Run:1
Running from C:\Users\Lukáš\Desktop
Loaded Profiles: Lukáš
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {70E67522-1366-4026-9799-25AABD027BDE} - System32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
Task: {79782605-66B2-45E4-A354-94F08889DE38} - System32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
S3 WinRing0_1_2_0; \??\C:\Users\Lukáš\AppData\Local\Temp\tmp2859.tmp [X] <==== ATTENTION
C:\DumpStack.log.tmp
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}

EmptyTemp:
Hosts:

End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{70E67522-1366-4026-9799-25AABD027BDE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70E67522-1366-4026-9799-25AABD027BDE}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{79782605-66B2-45E4-A354-94F08889DE38}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79782605-66B2-45E4-A354-94F08889DE38}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}" => removed successfully
HKLM\System\CurrentControlSet\Services\WinRing0_1_2_0 => removed successfully
WinRing0_1_2_0 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}" => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 252330686 B

Fix result of Farbar Recovery Scan Tool (x64) Version: 07-05-2023 01
Ran by Lukáš (08-05-2023 19:11:09) Run:1
Running from C:\Users\Lukáš\Desktop
Loaded Profiles: Lukáš
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {70E67522-1366-4026-9799-25AABD027BDE} - System32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
Task: {79782605-66B2-45E4-A354-94F08889DE38} - System32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-01-05] (Google LLC -> Google LLC)
S3 WinRing0_1_2_0; \??\C:\Users\Lukáš\AppData\Local\Temp\tmp2859.tmp [X] <==== ATTENTION
C:\DumpStack.log.tmp
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}

EmptyTemp:
Hosts:

End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{70E67522-1366-4026-9799-25AABD027BDE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70E67522-1366-4026-9799-25AABD027BDE}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{79782605-66B2-45E4-A354-94F08889DE38}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79782605-66B2-45E4-A354-94F08889DE38}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}" => removed successfully
HKLM\System\CurrentControlSet\Services\WinRing0_1_2_0 => removed successfully
WinRing0_1_2_0 => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{F4B080FC-6EA0-4852-8FE0-ABD042769E8B}" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{AA80DFCB-0A7B-461B-B322-7743C99938DA}" => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 252330686 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 394238285 B
Windows/system/drivers => 4124825 B
Edge => 1071794 B
Chrome => 1466659 B
Firefox => 509502383 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 33178 B
NetworkService => 33178 B
Lukáš => 65065296666 B

RecycleBin => 0 B
EmptyTemp: => 61.7 GB temporary data Removed.

Smazáno. Nastala nějaká změna?

Po zapnutí delší dobu najíždí ale po najetí je to lepší a už se sám nerestartuje.

To je dáno počtem aplikací ve startupu. Pokud vám to stále nevyhovuje zkuste defragmentovat disk.

Ok, moc děkuji za vyřešení problému a udělám defragmentaci.

Rádo se stalo!