Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-08-2023
Ran by Market (administrator) on LENOVO-PC (LENOVO 20247) (01-08-2023 21:06:52)
Running from C:\Users\Market\Desktop\FRST64.exe
Loaded Profiles: UpdatusUser & Market
Platform: Microsoft Windows 10 Home Version 22H2 19045.3208 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files\Apoint2K\Apoint.exe ->) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(C:\Program Files\Apoint2K\Apoint.exe ->) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.3205_none_7e1f4da67c811930\TiWorker.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe
(CyberLink -> CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(explorer.exe ->) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <25>
(explorer.exe ->) (IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\sttray64.exe
(explorer.exe ->) (Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(explorer.exe ->) (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler64.exe
(Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel® Services Manager -> Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Windows Hardware Compatibility Publisher -> Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (CONDUSIV TECHNOLOGIES -> Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
(services.exe ->) (Environmental Systems Research Institute Inc. -> Flexera Software LLC) C:\Program Files (x86)\ArcGIS\License10.3\bin\lmgrd.exe <2>
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (IDT, Inc.) [File not signed] C:\Program Files\IDT\WDM\stacsv64.exe
(services.exe ->) (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(services.exe ->) (Intel Corporation-Mobile Wireless Group -> Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(services.exe ->) (Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(svchost.exe ->) (Intel(R) Software -> Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.3205_none_7e1f4da67c811930\TiWorker.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688984 2013-08-07] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-02-01] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-12-07] (Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-12-07] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-04-24] (IDT, Inc.) [File not signed]
HKLM\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files\Wondershare\UniConverter (Desktop)\WSVCUUpdateHelper.exe [34744 2020-08-07] (Wondershare Technology Co.,Ltd -> )
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [220056 2023-06-06] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-31] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel® Services Manager -> Intel Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [571928 2015-09-03] (Microsoft Windows Hardware Compatibility Publisher -> Vimicro)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-4196152387-412035393-530938450-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [49803328 2018-09-10] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-4196152387-412035393-530938450-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41572768 2023-07-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-4196152387-412035393-530938450-1002\...\Run: [MicrosoftEdgeAutoLaunch_C670BBBC8ADEEBF14C168431E4DD53B1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4088256 2023-07-27] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\115.0.5790.110\Installer\chrmstp.exe [2023-07-29] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {10598046-EDE9-4605-8F7B-8568543A10DC} - \WPD\SqmUpload_S-1-5-21-4196152387-412035393-530938450-1002 -> No File <==== ATTENTION
Task: {2AE44A2B-4FE8-4551-B559-CEE95E3993D4} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {43D35B15-EFD6-4BF6-97F7-B019652C9F9B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {6B1A97DA-D569-4EF4-81E7-472F14432B7C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {A36190AA-0728-4F03-9A4E-2F8785A99B9A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A7BF1BA1-2C31-4D4D-BF45-06BB155FC961} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {ABB8E5D2-1A31-4783-A952-20A0B2C36A21} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {B02730CF-B7CE-4FF0-94E9-EA99F9580D47} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {C21E0E55-22D6-4693-A4E3-EF7052E6D01E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CF9C0550-5885-4D9C-8E25-46DAFCEAF697} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {EA3F60EC-B451-4483-9DC3-3820B890C448} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F701B405-38CD-4741-B1D5-146991F60226} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {E508943A-4C82-4FB9-A4D1-958A154088AC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [563000 2015-08-27] (Apple Inc. -> Apple Inc.)
Task: {2A1EA6FE-74D1-4E8E-A1D8-23500DB1142E} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4885400 2023-06-06] (Avast Software s.r.o. -> AVAST Software)
Task: {266EC6BF-874E-4393-85AB-208946049604} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2144664 2023-08-01] (Avast Software s.r.o. -> Avast Software)
Task: {FF3DE7B5-A3C3-4CB3-9B89-2CCDC46E746E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-07-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {3F1F0A3D-1560-460B-AB86-6D6751743C82} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-07-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "45e6d22e-acd9-495c-a61b-dff4461df40a" --version "6.14.10584" --silent
Task: {B1C121A9-5E75-4F9B-ADFC-9DA2361267C3} - System32\Tasks\CCleanerSkipUAC - Market => C:\Program Files\CCleaner\CCleaner.exe [34677664 2023-07-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {411FD3DF-5E21-45B8-8B6C-BBB756639912} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe /launch (No File)
Task: {F3BBF27D-E95D-4CDC-B71D-2ADC100089CB} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe -autostart (No File)
Task: {0643128E-E6D9-41F6-BD3B-0198C56E3873} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-03] (Google Inc -> Google Inc.)
Task: {F341F26F-30B6-43F1-95A3-0AAF11B19FB9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-03] (Google Inc -> Google Inc.)
Task: {4B3A12C1-C340-4F4F-9D56-0499AFD11EDB} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [57808 2023-07-21] (HP Inc. -> HP Inc.)
Task: {A1C02E63-4900-4E61-AA2A-4474B8461D19} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [57808 2023-07-21] (HP Inc. -> HP Inc.)
Task: {09F199E3-73C9-4335-BD10-A7EE62FF15BC} - System32\Tasks\Intel® Rapid Start Technology Manager => C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe [708648 2012-07-20] (Intel(R) Software -> Intel)
Task: {FC4A45E2-DDA6-4600-8E1C-69D209D5E79A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {79EA7E30-16C3-4A41-B666-B1C5579921EE} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF} - System32\Tasks\Lenovo\Lenovo-11958 => C:\ProgramData\Lenovo-11958.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {262D43AB-CB09-42BA-A4B8-367488B4ACCB} - System32\Tasks\Lenovo\Lenovo-12004 => C:\ProgramData\Lenovo-12004.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {0333C2EC-4AE1-4F98-A397-E6185114393B} - System32\Tasks\Lenovo\sysrun-10592 => C:\Users\Market\AppData\Local\Temp\sysrun-10592.cmd -> <==== ATTENTION
Task: {D01E10F1-B1E5-419A-8DDE-69F98600EAF7} - System32\Tasks\Lenovo\sysrun-19115 => C:\Users\Market\AppData\Local\Temp\sysrun-19115.cmd -> <==== ATTENTION
Task: {44965B4E-2592-40EC-8AFF-7AAA3F7E97DB} - System32\Tasks\Lenovo\sysrun-19700 => C:\Users\Market\AppData\Local\Temp\sysrun-19700.cmd -> <==== ATTENTION
Task: {F109E710-0CC7-42DF-9BB3-0237437DC513} - System32\Tasks\Lenovo\sysrun-22408 => C:\Users\Market\AppData\Local\Temp\sysrun-22408.cmd -> <==== ATTENTION
Task: {6DD87358-5B80-4901-B652-B904B9852007} - System32\Tasks\Lenovo\sysrun-31893 => C:\Users\Market\AppData\Local\Temp\sysrun-31893.cmd -> <==== ATTENTION
Task: {A4CAEC57-EBE8-4C49-8627-EEE2A29056CA} - System32\Tasks\Lenovo\sysrun-5806 => C:\Users\Market\AppData\Local\Temp\sysrun-5806.cmd -> <==== ATTENTION
Task: {014D8794-3361-4B3D-A0D9-EBC723A35FF0} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {3FA41F24-FB0B-43D2-A56F-8FE5AA534254} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {9EF16925-4C4B-413A-9E1B-D915064A7FAF} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [1142216 2023-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {6A3B98BA-3947-49EF-B7FD-1702B2459B8E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [286088 2020-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {F56AB0DE-8CB7-41BD-B0A9-68AE7254C541} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [286088 2020-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {7C5F890A-FA6E-4A2F-A839-DA7B13AB5739} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (No File)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\Dolby Selector.job => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.88.1 81.25.16.250
Tcpip\..\Interfaces\{8d0d9652-22fb-4d14-b2e8-76558ca98bfa}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{fb0ccaef-f3de-4cad-b6ea-308b850fda09}: [DhcpNameServer] 192.168.88.1 81.25.16.250
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Market\AppData\Local\Microsoft\Edge\User Data\Default [2023-08-01]
Edge Extension: (Edge relevant text changes) - C:\Users\Market\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-07-31]
FireFox:
========
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-03-18] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Profile 3
CHR Profile: C:\Users\Market\AppData\Local\Google\Chrome\User Data\Default [2023-08-01]
CHR Notifications: Default -> hxxps://131.gofenews.com; hxxps://calendar.google.com; hxxps://drive.google.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://morezprav.cz; hxxps://the-best-push-news.com; hxxps://www1.news-back.net
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11908&prt=cr&chn=prev
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?q={searchTerms}&li=ff
CHR Extension: (Pomocník GIVT.cz) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggfjoibkmcdpipebclkmekplmdjhmkop [2023-07-23]
CHR Extension: (Dokumenty Google offline) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-07-23]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-07-23]
CHR Extension: (Wolfram|Alpha (Official)) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Default\Extensions\icncamkooinmbehmkeilcccmoljfkdhp [2020-08-07]
CHR Extension: (Norton Safe) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmgcfemagnogdodbambjhdcmfcpicngl [2020-08-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\Market\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-07-23]
CHR Profile: C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3 [2023-08-01]
CHR HomePage: Profile 3 -> msn.com
CHR DefaultSearchURL: Profile 3 -> hxxps://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSuggestURL: Profile 3 -> hxxps://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Extension: (Překladač Google) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2023-05-29]
CHR Extension: (Duolingo on the Web) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2023-05-29]
CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2023-05-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-01]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-08-01]
CHR Extension: (Smart LG TV Remote Controller) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\icokofncdmhjjncknidajbngmbfphpia [2023-05-29]
CHR Extension: (Grammarly: Grammar Checker and AI Writing App) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2023-08-01]
CHR Extension: (Skype) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2023-05-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Market\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-29]
CHR Profile: C:\Users\Market\AppData\Local\Google\Chrome\User Data\System Profile [2023-07-23]
CHR HKU\S-1-5-21-4196152387-412035393-530938450-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ArcGIS License Manager; C:\Program Files (x86)\ArcGIS\License10.3\bin\lmgrd.exe [1499512 2014-10-27] (Environmental Systems Research Institute Inc. -> Flexera Software LLC)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8826776 2023-06-06] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [582552 2023-06-06] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2088856 2023-06-06] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [583576 2023-06-06] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2022-11-06] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3054520 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107944 2013-01-08] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230352 2023-07-21] (HP Inc. -> HP Inc.)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156104 2013-06-04] (Intel Corporation-Mobile Wireless Group -> Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [332800 2013-04-24] (IDT, Inc.) [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.4-0\NisSrv.exe [3191224 2022-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2210.4-0\MsMpEng.exe [133536 2022-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WsDrvInst; C:\Program Files\Wondershare\UniConverter (Desktop)\Transfer\DriverInstall.exe [112560 2020-08-07] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [136760 2019-05-07] (Alcorlink Corp. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [31376 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [236448 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [392320 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297832 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [95912 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [25576 2022-11-06] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39600 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [271504 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [556064 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105248 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80376 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [943456 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [703800 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [212680 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319560 2023-06-06] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 DxVGrb; C:\WINDOWS\system32\drivers\DxVGrb.sys [222464 2012-01-10] (Microsoft Windows Hardware Compatibility Publisher -> Dexetek)
R1 excfs; C:\WINDOWS\System32\DRIVERS\excfs.sys [26024 2013-01-08] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R0 excsd; C:\WINDOWS\System32\DRIVERS\excsd.sys [112552 2013-01-08] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [135088 2020-11-22] (Shenzhen Yibo Digital Systems Development Co., Ltd. -> EZB Systems, Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [546304 2013-04-24] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R3 usb3Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [48024 2013-01-29] (Intel Wireless Display -> Windows (R) Win 7 DDK provider)
R3 vm331avs; C:\WINDOWS\System32\Drivers\vm331avs.sys [648872 2015-09-03] (Microsoft Windows Hardware Compatibility Publisher -> Vimicro Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49616 2022-10-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [469280 2022-10-31] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [95520 2022-10-31] (Microsoft Windows -> Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] (CyberLink -> "CyberLink)
R3 XHCIPort; C:\WINDOWS\System32\drivers\XHCIPort.sys [194456 2013-01-29] (Intel Wireless Display -> Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-08-01 21:06 - 2023-08-01 21:11 - 000033990 _____ C:\Users\Market\Desktop\FRST.txt
2023-08-01 21:05 - 2023-08-01 21:09 - 000000000 ____D C:\FRST
2023-08-01 21:03 - 2023-08-01 21:04 - 002700800 _____ (Farbar) C:\Users\Market\Desktop\FRST64.exe
2023-08-01 20:52 - 2023-08-01 20:53 - 000000000 ____D C:\rsit
2023-08-01 20:52 - 2023-08-01 20:52 - 000000000 ____D C:\Program Files\trend micro
2023-08-01 20:51 - 2023-08-01 20:51 - 001222144 _____ C:\Users\Market\Downloads\RSITx64.exe
2023-07-27 13:00 - 2023-08-01 20:32 - 000003338 _____ C:\WINDOWS\system32\Tasks\Intel® Rapid Start Technology Manager
2023-07-26 09:11 - 2023-07-26 09:34 - 000000000 ____D C:\Users\Market\Documents\ATAC Výživové poradenství
2023-07-23 12:56 - 2023-07-23 12:56 - 000000000 ___HD C:\$WinREAgent
2023-07-23 12:24 - 2023-07-23 12:24 - 000000000 ____D C:\Users\Market\Desktop\Ložnice
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-08-01 21:12 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-08-01 21:11 - 2021-12-18 21:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-08-01 21:11 - 2014-03-14 09:36 - 000000000 ____D C:\Program Files (x86)\Google
2023-08-01 21:08 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-01 20:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-08-01 20:33 - 2022-11-06 13:12 - 000000000 ____D C:\Program Files\CCleaner
2023-08-01 20:33 - 2014-03-28 15:47 - 000000000 ___RD C:\Users\Market\SkyDrive
2023-08-01 20:31 - 2016-01-09 02:09 - 000000000 __SHD C:\Users\Market\IntelGraphicsProfiles
2023-08-01 20:30 - 2022-11-06 13:34 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2023-08-01 20:30 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-08-01 20:30 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-07-31 18:19 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-07-31 18:13 - 2020-08-15 18:01 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-07-31 16:58 - 2016-09-17 17:27 - 000000000 ____D C:\Users\Market\Documents\BP_TMA
2023-07-31 16:58 - 2015-03-10 00:55 - 000000000 ____D C:\Users\Market\Documents\Knihy
2023-07-31 16:15 - 2020-08-15 18:36 - 000004198 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{0409B032-A990-41A7-B5D9-3D4F35075BC3}
2023-07-31 16:10 - 2020-08-15 18:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-07-31 16:10 - 2020-08-15 18:00 - 000008192 ___SH C:\DumpStack.log.tmp
2023-07-31 16:10 - 2016-09-27 18:28 - 000000000 ____D C:\ProgramData\NVIDIA
2023-07-31 16:10 - 2014-03-14 09:33 - 000000000 ____D C:\ProgramData\AVAST Software
2023-07-29 22:58 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-07-29 20:32 - 2014-03-14 09:37 - 000002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-07-29 20:18 - 2020-06-08 21:11 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-07-29 20:18 - 2020-06-08 21:11 - 000002285 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-07-27 13:03 - 2021-12-13 20:08 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-4196152387-412035393-530938450-1002
2023-07-27 13:03 - 2021-11-19 19:51 - 000002431 _____ C:\Users\Market\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-07-27 13:03 - 2020-08-15 18:36 - 000003366 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4196152387-412035393-530938450-1002
2023-07-27 13:00 - 2020-08-15 18:36 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2023-07-26 09:09 - 2020-08-15 18:22 - 001693350 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-07-26 09:09 - 2019-12-07 16:41 - 000718024 _____ C:\WINDOWS\system32\perfh005.dat
2023-07-26 09:09 - 2019-12-07 16:41 - 000145166 _____ C:\WINDOWS\system32\perfc005.dat
2023-07-26 09:09 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-07-26 08:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2023-07-26 08:58 - 2022-11-06 13:13 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-07-25 16:35 - 2014-03-16 18:13 - 000000000 ____D C:\Users\Market\AppData\Roaming\Microsoft\Word
2023-07-23 14:27 - 2020-08-15 18:01 - 000573256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-07-23 14:26 - 2022-11-06 13:13 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-07-23 14:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-07-23 14:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-07-23 14:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-07-23 14:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-07-23 14:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-07-23 14:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-07-23 13:59 - 2020-08-15 18:06 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-07-23 12:49 - 2014-03-27 16:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-07-23 12:40 - 2014-03-27 16:15 - 173351160 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-07-23 12:35 - 2014-07-29 12:40 - 000000000 ____D C:\Program Files\Common Files\Apple
2023-07-23 12:30 - 2017-12-08 02:35 - 000000000 ____D C:\Users\Market\AppData\Local\Packages
2023-07-21 10:57 - 2022-10-15 11:31 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2023-07-21 10:57 - 2022-10-15 11:31 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2023-07-21 10:03 - 2022-11-13 23:13 - 000003472 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-07-21 09:53 - 2014-03-16 18:08 - 000000000 ____D C:\Program Files\Microsoft Office 15
2023-07-21 09:52 - 2020-08-15 18:36 - 000003640 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-07-21 09:51 - 2020-08-15 18:36 - 000003516 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Files in the root of some directories ========
2015-11-19 14:07 - 2015-11-19 14:12 - 000000082 _____ () C:\Program Files\smaple.txt
2014-03-12 11:10 - 2014-03-27 15:52 - 000007697 _____ () C:\Users\Market\AppData\Roaming\AbsoluteReminder.xml
2017-09-16 19:13 - 2017-09-16 19:13 - 000099678 _____ () C:\Users\Market\AppData\Roaming\logo_bigfarm_desktop.ico
2017-09-16 19:13 - 2017-09-16 19:13 - 000370070 _____ () C:\Users\Market\AppData\Roaming\logo_empire_desktop.ico
2014-03-18 20:35 - 2014-03-18 20:35 - 000076976 _____ () C:\Users\Market\AppData\Roaming\LoJackSetup.exe
2015-11-19 12:36 - 2015-11-19 12:36 - 000003072 _____ () C:\Users\Market\AppData\Local\file__0.localstorage
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2023
Ran by Market (01-08-2023 21:13:54)
Running from C:\Users\Market\Desktop
Microsoft Windows 10 Home Version 22H2 19045.3208 (X64) (2020-08-15 16:37:07)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-4196152387-412035393-530938450-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4196152387-412035393-530938450-503 - Limited - Disabled)
defaultuser100001 (S-1-5-21-4196152387-412035393-530938450-1008 - Limited - Enabled)
Guest (S-1-5-21-4196152387-412035393-530938450-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4196152387-412035393-530938450-1006 - Limited - Enabled)
Market (S-1-5-21-4196152387-412035393-530938450-1002 - Administrator - Enabled) => C:\Users\Market
UpdatusUser (S-1-5-21-4196152387-412035393-530938450-1001 - Limited - Enabled) => C:\Users\UpdatusUser
WDAGUtilityAccount (S-1-5-21-4196152387-412035393-530938450-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.3.0.0 - Absolute Software)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.1.1245.72250 - Alcor Micro Corp.)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.1623.202 - Alps Electric)
Aplikace Intel® PROSet/Wireless (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ArcGIS 10.3 Data Interoperability for Desktop (HKLM-x32\...\{6B54D035-3263-4C38-A127-D958A8038004}) (Version: 10.3.4322 - Environmental Systems Research Institute, Inc.) Hidden
ArcGIS 10.3 Data Interoperability for Desktop (HKLM-x32\...\ArcGIS 10.3 Data Interoperability for Desktop) (Version: 10.3.4322 - Environmental Systems Research Institute, Inc.)
ArcGIS 10.3 for Desktop (HKLM-x32\...\ArcGIS 10.3 for Desktop) (Version: 10.3.4322 - Environmental Systems Research Institute, Inc.)
ArcGIS 10.3 for Desktop Background Geoprocessing (64-bit) (HKLM\...\{9F966681-A424-4FD8-939B-5B50B120DBF4}) (Version: 10.3.4322 - Esri, Inc.) Hidden
ArcGIS 10.3 for Desktop Background Geoprocessing (64-bit) (HKLM\...\ArcGIS 10.3 for Desktop Background Geoprocessing (64-bit)) (Version: 10.3.4322 - Environmental Systems Research Institute, Inc.)
ArcGIS 10.3 for Desktop PDF Export for Non-US Decimal Separators Patch (HKLM-x32\...\ArcGIS 10.3 for Desktop CR306879) (Version: - Environmental Systems Research Institute, Inc.)
ArcGIS 10.3 License Manager (HKLM-x32\...\{710C34F3-9270-4DF9-AB44-BC8D71DB24F0}) (Version: 10.3.4322 - Environmental Systems Research Institute, Inc.) Hidden
ArcGIS 10.3 License Manager (HKLM-x32\...\ArcGIS 10.3 License Manager) (Version: 10.3.4322 - Environmental Systems Research Institute, Inc.)
ArcGIS Case Tools for Desktop (HKLM-x32\...\{76355E2E-59F4-4D2E-B145-DC5707015550}) (Version: 10.3.4322 - Esri, Inc.) Hidden
ArcGIS Case Tools for Desktop (HKLM-x32\...\ArcGIS Case Tools for Desktop) (Version: 10.3.4322 - Environmental Systems Research Institute, Inc.)
ArcSoft ShowBiz (HKLM-x32\...\{9D41D2EF-2D33-4CFD-8A3E-C7E6FCC3303B}) (Version: - ArcSoft)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 23.5.6066 - Avast Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.14 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1208.2 - Piriform Software) Hidden
Conexant Polaris Unused CIR Function (HKLM\...\Uninstaller6112431a20e) (Version: 1.0.0.0 - Conexant Systems)
Conexant Polaris Unused CIR Function (HKLM\...\Uninstaller611248e3f) (Version: 1.0.0.0 - Conexant Systems)
Contenta Converter PREMIUM (HKLM-x32\...\ContentaConverter-PREMIUM) (Version: - Contenta Software)
DjVu Viewer version 1.0 (HKLM-x32\...\{3A959BCB-643A-462F-A692-5B7FE4CE35AC}_is1) (Version: 1.0 - djvuviewer.com)
Energy Management (HKLM-x32\...\{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo) Hidden
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ExpressCache (HKLM\...\{C123584F-9C84-45E8-AE5F-522328BB79A0}) (Version: 1.0.100.0 - Condusiv Technologies)
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.334.0 - International GeoGebra Institute)
Google Earth Pro (HKLM\...\{F27DBA46-80E1-4858-9285-19198FFFBF3D}) (Version: 7.3.6.9345 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 115.0.5790.110 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6431.0 - IDT)
Instalace síťových připojení na TUL (remove only) (HKLM-x32\...\Instalace síťových připojení na TUL) (Version: - )
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 2.1.0.1002 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{7629623D-F0D0-4AC6-A763-FBE06ED8288C}) (Version: 12.0.0.1083 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{62E7C369-64FF-452C-8F46-6BE9B77FF097}) (Version: 4.0.18.0 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{977D1ABF-4089-4CA7-BA33-CC75808B7ACE}) (Version: 1.24.738.1 - Intel Corporation) Hidden
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.15.0414.1 - Vimicro)
Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo YouCam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 115.0.1901.188 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 115.0.1901.188 - Microsoft Corporation)
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 15.0.5571.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - cs-cz (HKLM\...\ProPlusRetail - cs-cz) (Version: 15.0.5571.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4196152387-412035393-530938450-1002\...\OneDriveSetup.exe) (Version: 23.142.0709.0001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{BB052C53-34CB-42DE-AF41-66FDFCEEC868}) (Version: 3.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215 (HKLM-x32\...\{69BCE4AC-9572-3271-A2FB-9423BDA36A43}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215 (HKLM-x32\...\{BBF2AC74-720C-3CB3-8291-5E34039232FA}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation) Hidden
NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5571.1000 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5571.1000 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0405-0000-0000000FF1CE}) (Version: 15.0.5571.1000 - Microsoft Corporation) Hidden
Podpora aplikací Apple (32bitová) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Podpora aplikací Apple (64bitová) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.11.201.2013 - Realtek)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype verze 8.30 (HKLM-x32\...\Skype_is1) (Version: 8.30 - Skype Technologies S.A.)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
UltraISO Premium V9.76 (HKLM-x32\...\UltraISO_is1) (Version: 9.76 - EZB Systems, Inc.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
UserGuide (HKLM-x32\...\{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo) Hidden
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo)
Video Grabber (HKLM\...\Uninstaller6112431c311) (Version: 1.0.0.0 - Conexant Systems)
Video Grabber (HKLM\...\Uninstaller611248e42f8) (Version: 1.0.0.0 - Conexant Systems)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Wondershare UniConverter(Build 12.0.3.5) (HKLM\...\UniConverter_is1) (Version: 12.0.3.5 - Wondershare Software)
Zoom (HKU\S-1-5-21-4196152387-412035393-530938450-1002\...\ZoomUMX) (Version: 5.6.1 (617) - Zoom Video Communications, Inc.)
Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-07] (Autodesk Inc.)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-01-02] (Microsoft Corporation)
Evernote -> C:\Program Files\WindowsApps\Evernote.Evernote_10.59.5.0_x64__q4d96b2w5wcc2 [2023-07-31] (Evernote) [Startup Task]
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_147.1.1079.0_x64__v10z8vjag6ke6 [2023-07-21] (HP Inc.)
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2306.25.0_x64__k1h2ywk1493x8 [2023-07-31] (LENOVO INC.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-18] (Microsoft Corporation) [MS Ad]
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-18] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-18] (Microsoft Corporation) [MS Ad]
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.50901.0_x64__8wekyb3d8bbwe [2022-05-09] (Microsoft Corporation)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-03-19] (Microsoft Studios) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0 [2023-07-21] (Spotify AB) [Startup Task]
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-14] (Twitter Inc.)
Zinio -> C:\Program Files\WindowsApps\ZinioLLC.Zinio_2.1.0.317_x64__0q6dqzpp40p2e [2014-04-18] (Zinio LLC)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4196152387-412035393-530938450-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-06-06] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc. -> SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc. -> SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc. -> SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc. -> SugarSync, Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-06-06] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-06-06] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc. -> SugarSync, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2020-07-13] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-06-06] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2020-07-13] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2023-06-06] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc. -> SugarSync, Inc.)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2020-07-13] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2020-09-20 21:01 - 2016-07-21 10:54 - 000137728 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2020-09-20 21:01 - 2017-03-23 09:49 - 001506304 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000446976 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000019456 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000016896 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000195584 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000322048 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000062976 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 002281984 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000891392 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000339456 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000062976 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000400384 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000062464 _____ () [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2013-12-07 03:32 - 2012-07-20 11:09 - 000130048 _____ (CodePlex Community) [File not signed] [File is in use] C:\Program Files (x86)\Intel\irstrt\Microsoft.Win32.TaskScheduler.dll
2013-01-08 17:59 - 2013-01-08 17:59 - 000236032 _____ (Condusiv Technologies) [File not signed] C:\Program Files\Condusiv Technologies\ExpressCache\NsNtfsAutoAnalyze.dll
2013-01-08 17:59 - 2013-01-08 17:59 - 000087552 _____ (Condusiv Technologies) [File not signed] C:\Program Files\Condusiv Technologies\ExpressCache\PrFacade.dll
2013-02-01 01:20 - 2013-02-01 01:20 - 000285696 _____ (Intel Corporation) [File not signed] [File is in use] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000284160 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\agentInfo.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000061952 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\configurationManager.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000206336 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\corePersistenceAPI.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000106496 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\dispatcher.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000080384 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\channelAdapter.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000142848 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\liveUpdateUtility.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000018944 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\localMessage.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000030208 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\logger.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000194560 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\network.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000097280 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\orchestrator.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000181760 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\payload.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000018432 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\sealing.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000539136 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\serializer.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000156160 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceOfferingManager.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000012288 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\sm_uuid.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000078336 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\systemInfo.dll
2013-02-01 01:20 - 2013-02-01 01:20 - 000503296 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2020-08-15 17:18 - 2020-08-15 17:18 - 001093120 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL
2013-12-07 03:53 - 2012-07-12 14:59 - 001019392 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\LIBEAY32.dll
2013-12-07 03:53 - 2012-07-12 14:59 - 000209408 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Intel\IntelAppStore\bin\SSLEAY32.dll
2020-09-20 21:01 - 2017-03-23 09:52 - 000708608 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKU\S-1-5-21-4196152387-412035393-530938450-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-4196152387-412035393-530938450-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2023-06-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2023-06-14] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKU\S-1-5-21-4196152387-412035393-530938450-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2018-02-01 02:15 - 2022-08-23 15:33 - 000000668 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
2.168.137.139 Market-iPhone.mshome.net # 2019 9 1 16 20 16 42 278
0 55 778
192.168.137.129 Market-iPhone.mshome.net # 2018 6 0 17 11 44 42 473
473
227
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\Condusiv Technologies\ExpressCache\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-4196152387-412035393-530938450-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-4196152387-412035393-530938450-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Market\Pictures\Výstřižek.PNG
DNS Servers: 192.168.88.1 - 81.25.16.250
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{E553145F-7B85-423B-B96D-AB7A950E620B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{42BDD61E-ABC1-49BD-8842-B573208FF0EA}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4D7CD179-C136-4A2C-80A0-9AC097ED34F5}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{01B831FF-395F-4635-96C3-B73267550487}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1D5F4BF0-6814-4898-A273-24DF0D7DEC57}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{3A326CBF-1BF3-4B0F-A488-D47AADC0D258}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe (Intel® Services Manager -> Intel Corporation)
FirewallRules: [TCP Query User{F2123F5E-24DF-45AF-A4B1-D8FD972560FA}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe (Intel® Services Manager -> Intel Corporation)
FirewallRules: [UDP Query User{8A69EE1D-FEED-4456-98C9-E1BB91756015}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Allow) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe (Intel® Services Manager -> Intel Corporation)
FirewallRules: [TCP Query User{B9B78688-518F-4911-B6BD-7B4147DBBA9B}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Allow) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe (Intel® Services Manager -> Intel Corporation)
FirewallRules: [{2249C14B-2A8C-4B57-B925-35E31DD5BC6B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C969E7AF-4B7E-40E8-ACBF-00BF742BF908}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{66D78ACE-4A56-4581-872A-FDA4558909BE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5658A05C-392D-4450-A2B3-037C1B660530}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A25FB5B8-5322-4AC5-86C7-EF4B80D117B1}] => (Allow) C:\Users\Market\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{AB02C456-15D9-4BBC-9363-B8099DF617BC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0B104EDE-8C78-48B4-A628-28557832FD86}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B03311FB-874A-4FEC-A239-6C23730C43DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{653FC5B6-F0C8-4FA9-93EF-338EF19FD42A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7F1B1F55-F191-435F-8657-1F377AC2DBF7}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{3CACC4E7-EFB9-48F3-B79E-E6BE475C4088}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{C017C439-762E-415D-AFAE-93D2E4F88DA7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{2BCF0D7A-6E35-4E5D-B514-35DA2DEA856A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CE31662E-1FA9-473E-86C2-8D45B674BC05}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{15C1A1A1-7049-42DC-9700-79A589758687}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9AEF4898-7F8A-4B56-BDAD-685C207564E2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{66403BDB-5047-4151-927F-560878FE5226}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1F63192B-263A-468B-855E-CFD26FC5623B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{FAF2BBE8-8BA0-4771-8258-1CB1C0F6FC5B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{E6C6286E-068B-4D28-B0BE-38E803125A44}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7F663EEF-E542-4B9B-A0CE-621DD1393985}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.216.947.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B7E8EADB-340A-449A-A5DA-69907FB1EAE3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{873C419D-BE85-4B45-A7AE-DBE9A1348C69}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\115.0.1901.188\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
01-08-2023 21:03:01 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (07/31/2023 06:30:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15688
Error: (07/31/2023 06:30:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15688
Error: (07/31/2023 06:30:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (07/31/2023 04:16:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program Cortana.exe verze 4.2204.13303.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 2f90
Čas spuštění: 01d9c3b9667d4f84
Čas ukončení: 4294967295
Cesta k aplikaci: C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
ID hlášení: 6390e061-9179-404c-99f7-7e7206f84552
Úplný název balíčku s chybou: Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe
ID aplikace relativní podle balíčku s chybou: App
Typ zablokování: Quiesce
Error: (07/31/2023 04:10:20 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=43, ID autora=9, ID dodavatele=0, typ dodavatele=0
Error: (07/31/2023 04:10:20 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=25, ID autora=9, ID dodavatele=0, typ dodavatele=0
Error: (07/31/2023 04:10:20 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=17, ID autora=9, ID dodavatele=0, typ dodavatele=0
Error: (07/31/2023 04:10:20 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Přeskočení: Ověření Eap method DLL path se nezdařilo. Chyba: ID typu=43, ID autora=9, ID dodavatele=0, typ dodavatele=0
System errors:
=============
Error: (08/01/2023 09:02:36 PM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
Error: (08/01/2023 09:00:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x8024200b): Alps driver update for Lenovo pointing device.
Error: (08/01/2023 08:58:39 PM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
Error: (08/01/2023 08:58:06 PM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
Error: (08/01/2023 08:57:13 PM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
Error: (08/01/2023 08:56:45 PM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
Error: (08/01/2023 08:50:33 PM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
Error: (08/01/2023 08:50:21 PM) (Source: disk) (EventID: 7) (User: )
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
Windows Defender:
================
Date: 2022-11-04 22:24:45
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {D1E211DF-6CB7-463C-B934-5F1FE70A0DE8}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-10-31 22:18:45
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {98D5F879-8183-4D91-ACDA-CA744DFE0952}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-10-31 21:04:21
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {45B48901-3267-42E7-82E5-68D0E8F17F94}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-10-24 16:44:53
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {717FE86A-D8FC-46C9-982E-7BD7B0CCC2E0}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2022-10-17 16:22:41
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {C0E844D4-A615-4733-9436-F7987E1117C4}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Event[0]:
Date: 2022-10-15 11:35:03
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.377.267.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.19700.3
Kód chyby: 0x8050a003
Popis chyby: Balíček neobsahuje aktuální soubor definic pro tento program. Další informace naleznete v nápovědě a podpoře.
Date: 2022-10-15 11:35:03
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.377.267.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.19700.3
Kód chyby: 0x8050a003
Popis chyby: Balíček neobsahuje aktuální soubor definic pro tento program. Další informace naleznete v nápovědě a podpoře.
Date: 2022-10-15 11:35:03
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.377.267.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.19700.3
Kód chyby: 0x8050a003
Popis chyby: Balíček neobsahuje aktuální soubor definic pro tento program. Další informace naleznete v nápovědě a podpoře.
Date: 2022-09-23 14:03:51
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.375.623.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.19600.3
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.
Date: 2022-09-23 14:03:51
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.375.623.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.19600.3
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.
CodeIntegrity:
===============
Date: 2023-08-01 20:58:41
Description:
Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume7\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Date: 2023-08-01 20:49:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume7\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO 7ECN23WW 11/08/2013
Motherboard: LENOVO S500
Processor: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
Percentage of memory in use: 71%
Total physical RAM: 8071.27 MB
Available physical RAM: 2295.46 MB
Total Virtual: 9607.27 MB
Available Virtual: 3008.66 MB
==================== Drives ================================
Drive c: (Windows8_OS) (Fixed) (Total:423.14 GB) (Free:76.28 GB) (Model: HGST HTS545050A7E380) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.25 GB) (Model: HGST HTS545050A7E380) NTFS
\\?\Volume{f9e9b688-081c-4ed3-b073-28088ec2807b}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.68 GB) NTFS
\\?\Volume{b75e54bd-0890-444d-a673-8e4035b7cba4}\ () (Fixed) (Total:0.53 GB) (Free:0.07 GB) NTFS
\\?\Volume{e2ab9b6f-c59e-47fc-833b-27b66c406391}\ (PBR_DRV) (Fixed) (Total:14.75 GB) (Free:4.62 GB) NTFS
\\?\Volume{09fbb8ff-4eaa-4ca1-b045-7073d63dc920}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 22.4 GB) (Disk ID: 3B5A60C9)
Partition: GPT.
==========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 3B5A60CA)
Partition: GPT.
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu logu - pomalý PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Prosím o kontrolu logu - pomalý PC
ahoj,
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
skontroluj disk prikazom chkdsk
najdene chyby daj opravit s prepinacom /f alebo /r
pokial by bolo chyb privela, bude nutne vymenit disk
Description: Zařízení \Device\Harddisk1\DR1 má chybný blok.
skontroluj disk prikazom chkdsk
najdene chyby daj opravit s prepinacom /f alebo /r
pokial by bolo chyb privela, bude nutne vymenit disk
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu - pomalý PC
Ahoj, děkuji za radu.
Chkdsk píše, že žádné další akce nejsou požadovány.
PC je pořád stejně pomalý.
Mám přesto dát příkaz /f a /r?
Díky
Microsoft Windows [Version 10.0.19045.3208]
(c) Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>chkdsk
The type of the file system is NTFS.
Volume label is Windows8_OS.
WARNING! /F parameter not specified.
Running CHKDSK in read-only mode.
Stage 1: Examining basic file system structure ...
994816 file records processed.
File verification completed.
Phase duration (File record verification): 4.71 minutes.
32867 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.36 milliseconds.
Stage 2: Examining file name linkage ...
82941 reparse records processed.
1392538 index entries processed.
Index verification completed.
Phase duration (Index verification): 10.54 minutes.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 13.48 seconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 2.17 milliseconds.
82941 reparse records processed.
Phase duration (Reparse point and Object ID verification): 4.08 seconds.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 141.12 milliseconds.
198862 data files processed.
Phase duration (Data attribute verification): 2.14 milliseconds.
CHKDSK is verifying Usn Journal...
36359272 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 627.95 milliseconds.
The master file table's (MFT) BITMAP attribute is incorrect.
The Volume Bitmap is incorrect.
Windows has checked the file system and found problems.
Please run chkdsk /scan to find the problems and queue them for repair.
443696654 KB total disk space.
369415320 KB in 487729 files.
388100 KB in 198863 indexes.
8 KB in bad sectors.
1124350 KB in use by the system.
65536 KB occupied by the log file.
72768876 KB available on disk.
4096 bytes in each allocation unit.
110924163 total allocation units on disk.
18192219 allocation units available on disk.
Total duration: 15.56 minutes (933668 ms).
C:\WINDOWS\system32>chkdsk /scan
The type of the file system is NTFS.
Volume label is Windows8_OS.
Stage 1: Examining basic file system structure ...
994816 file records processed.
File verification completed.
Phase duration (File record verification): 2.28 minutes.
32867 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 1.25 milliseconds.
Stage 2: Examining file name linkage ...
82941 reparse records processed.
1392534 index entries processed.
Index verification completed.
Phase duration (Index verification): 5.55 minutes.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 10.62 seconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 0.71 milliseconds.
82941 reparse records processed.
Phase duration (Reparse point and Object ID verification): 4.06 seconds.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 238.11 milliseconds.
198860 data files processed.
Phase duration (Data attribute verification): 1.27 milliseconds.
CHKDSK is verifying Usn Journal...
37122552 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 1.69 seconds.
Windows has scanned the file system and found no problems.
No further action is required.
443696654 KB total disk space.
370462808 KB in 487973 files.
388156 KB in 198861 indexes.
8 KB in bad sectors.
1124990 KB in use by the system.
65536 KB occupied by the log file.
71720692 KB available on disk.
4096 bytes in each allocation unit.
110924163 total allocation units on disk.
17930173 allocation units available on disk.
Total duration: 8.12 minutes (487306 ms).
C:\WINDOWS\system32>
Chkdsk píše, že žádné další akce nejsou požadovány.
PC je pořád stejně pomalý.
Mám přesto dát příkaz /f a /r?
Díky
Microsoft Windows [Version 10.0.19045.3208]
(c) Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>chkdsk
The type of the file system is NTFS.
Volume label is Windows8_OS.
WARNING! /F parameter not specified.
Running CHKDSK in read-only mode.
Stage 1: Examining basic file system structure ...
994816 file records processed.
File verification completed.
Phase duration (File record verification): 4.71 minutes.
32867 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.36 milliseconds.
Stage 2: Examining file name linkage ...
82941 reparse records processed.
1392538 index entries processed.
Index verification completed.
Phase duration (Index verification): 10.54 minutes.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 13.48 seconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 2.17 milliseconds.
82941 reparse records processed.
Phase duration (Reparse point and Object ID verification): 4.08 seconds.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 141.12 milliseconds.
198862 data files processed.
Phase duration (Data attribute verification): 2.14 milliseconds.
CHKDSK is verifying Usn Journal...
36359272 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 627.95 milliseconds.
The master file table's (MFT) BITMAP attribute is incorrect.
The Volume Bitmap is incorrect.
Windows has checked the file system and found problems.
Please run chkdsk /scan to find the problems and queue them for repair.
443696654 KB total disk space.
369415320 KB in 487729 files.
388100 KB in 198863 indexes.
8 KB in bad sectors.
1124350 KB in use by the system.
65536 KB occupied by the log file.
72768876 KB available on disk.
4096 bytes in each allocation unit.
110924163 total allocation units on disk.
18192219 allocation units available on disk.
Total duration: 15.56 minutes (933668 ms).
C:\WINDOWS\system32>chkdsk /scan
The type of the file system is NTFS.
Volume label is Windows8_OS.
Stage 1: Examining basic file system structure ...
994816 file records processed.
File verification completed.
Phase duration (File record verification): 2.28 minutes.
32867 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 1.25 milliseconds.
Stage 2: Examining file name linkage ...
82941 reparse records processed.
1392534 index entries processed.
Index verification completed.
Phase duration (Index verification): 5.55 minutes.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 10.62 seconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 0.71 milliseconds.
82941 reparse records processed.
Phase duration (Reparse point and Object ID verification): 4.06 seconds.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 238.11 milliseconds.
198860 data files processed.
Phase duration (Data attribute verification): 1.27 milliseconds.
CHKDSK is verifying Usn Journal...
37122552 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 1.69 seconds.
Windows has scanned the file system and found no problems.
No further action is required.
443696654 KB total disk space.
370462808 KB in 487973 files.
388156 KB in 198861 indexes.
8 KB in bad sectors.
1124990 KB in use by the system.
65536 KB occupied by the log file.
71720692 KB available on disk.
4096 bytes in each allocation unit.
110924163 total allocation units on disk.
17930173 allocation units available on disk.
Total duration: 8.12 minutes (487306 ms).
C:\WINDOWS\system32>
Re: Prosím o kontrolu logu - pomalý PC
8 KB in bad sectors.
Takze aj napriek tomu, ze pise, ze netreba dalsie akcie spust
chkdsk /f
Ked prebehne spust este s prikazoveho riadku ako spravca
sfc / scannow
Restart a napis ako sa sprava PC ?
Takze aj napriek tomu, ze pise, ze netreba dalsie akcie spust
chkdsk /f
Ked prebehne spust este s prikazoveho riadku ako spravca
sfc / scannow
Restart a napis ako sa sprava PC ?
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu - pomalý PC
Ahoj,
po prikaze:
Microsoft Windows [Version 10.0.19045.3208]
(c) Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>chkdsk /f
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
a restartu PC nastartovala prislusna akce, po které naběhl Windows. Takže nevím, co bylo výsledkem, ale snad vše proběhlo jak má.
Poté jsem dal příkaz:
Microsoft Windows [Version 10.0.19045.3208]
(c) Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.
C:\WINDOWS\system32>
A teď se zdá, že PC běží rychleji...
a disk se nevytěžuje na 100 % tak jako předtím.
po prikaze:
Microsoft Windows [Version 10.0.19045.3208]
(c) Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>chkdsk /f
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
a restartu PC nastartovala prislusna akce, po které naběhl Windows. Takže nevím, co bylo výsledkem, ale snad vše proběhlo jak má.
Poté jsem dal příkaz:
Microsoft Windows [Version 10.0.19045.3208]
(c) Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.
C:\WINDOWS\system32>
A teď se zdá, že PC běží rychleji...
a disk se nevytěžuje na 100 % tak jako předtím.
- Přílohy
-
- Výstřižek.PNG (39.72 KiB) Zobrazeno 1080 x
Re: Prosím o kontrolu logu - pomalý PC
pouzi fixlist.txt pre FRST
Kód: Vybrat vše
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
Task: {10598046-EDE9-4605-8F7B-8568543A10DC} - \WPD\SqmUpload_S-1-5-21-4196152387-412035393-530938450-1002 -> No File <==== ATTENTION
Task: {2AE44A2B-4FE8-4551-B559-CEE95E3993D4} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {43D35B15-EFD6-4BF6-97F7-B019652C9F9B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {6B1A97DA-D569-4EF4-81E7-472F14432B7C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {A36190AA-0728-4F03-9A4E-2F8785A99B9A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A7BF1BA1-2C31-4D4D-BF45-06BB155FC961} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {ABB8E5D2-1A31-4783-A952-20A0B2C36A21} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {B02730CF-B7CE-4FF0-94E9-EA99F9580D47} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {C21E0E55-22D6-4693-A4E3-EF7052E6D01E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CF9C0550-5885-4D9C-8E25-46DAFCEAF697} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {EA3F60EC-B451-4483-9DC3-3820B890C448} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F701B405-38CD-4741-B1D5-146991F60226} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF} - System32\Tasks\Lenovo\Lenovo-11958 => C:\ProgramData\Lenovo-11958.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {262D43AB-CB09-42BA-A4B8-367488B4ACCB} - System32\Tasks\Lenovo\Lenovo-12004 => C:\ProgramData\Lenovo-12004.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {0333C2EC-4AE1-4F98-A397-E6185114393B} - System32\Tasks\Lenovo\sysrun-10592 => C:\Users\Market\AppData\Local\Temp\sysrun-10592.cmd -> <==== ATTENTION
Task: {D01E10F1-B1E5-419A-8DDE-69F98600EAF7} - System32\Tasks\Lenovo\sysrun-19115 => C:\Users\Market\AppData\Local\Temp\sysrun-19115.cmd -> <==== ATTENTION
Task: {44965B4E-2592-40EC-8AFF-7AAA3F7E97DB} - System32\Tasks\Lenovo\sysrun-19700 => C:\Users\Market\AppData\Local\Temp\sysrun-19700.cmd -> <==== ATTENTION
Task: {F109E710-0CC7-42DF-9BB3-0237437DC513} - System32\Tasks\Lenovo\sysrun-22408 => C:\Users\Market\AppData\Local\Temp\sysrun-22408.cmd -> <==== ATTENTION
Task: {6DD87358-5B80-4901-B652-B904B9852007} - System32\Tasks\Lenovo\sysrun-31893 => C:\Users\Market\AppData\Local\Temp\sysrun-31893.cmd -> <==== ATTENTION
Task: {A4CAEC57-EBE8-4C49-8627-EEE2A29056CA} - System32\Tasks\Lenovo\sysrun-5806 => C:\Users\Market\AppData\Local\Temp\sysrun-5806.cmd -> <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (No File)
Toolbar: HKU\S-1-5-21-4196152387-412035393-530938450-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EmptyTemp:
Reboot:
End
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prosím o kontrolu logu - pomalý PC
Ahoj,
Fix result of Farbar Recovery Scan Tool (x64) Version: 06-08-2023
Ran by Market (12-08-2023 12:13:42) Run:1
Running from C:\Users\Market\Desktop
Loaded Profiles: UpdatusUser & Market
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
Task: {10598046-EDE9-4605-8F7B-8568543A10DC} - \WPD\SqmUpload_S-1-5-21-4196152387-412035393-530938450-1002 -> No File <==== ATTENTION
Task: {2AE44A2B-4FE8-4551-B559-CEE95E3993D4} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {43D35B15-EFD6-4BF6-97F7-B019652C9F9B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {6B1A97DA-D569-4EF4-81E7-472F14432B7C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {A36190AA-0728-4F03-9A4E-2F8785A99B9A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A7BF1BA1-2C31-4D4D-BF45-06BB155FC961} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {ABB8E5D2-1A31-4783-A952-20A0B2C36A21} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {B02730CF-B7CE-4FF0-94E9-EA99F9580D47} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {C21E0E55-22D6-4693-A4E3-EF7052E6D01E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CF9C0550-5885-4D9C-8E25-46DAFCEAF697} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {EA3F60EC-B451-4483-9DC3-3820B890C448} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F701B405-38CD-4741-B1D5-146991F60226} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF} - System32\Tasks\Lenovo\Lenovo-11958 => C:\ProgramData\Lenovo-11958.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {262D43AB-CB09-42BA-A4B8-367488B4ACCB} - System32\Tasks\Lenovo\Lenovo-12004 => C:\ProgramData\Lenovo-12004.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {0333C2EC-4AE1-4F98-A397-E6185114393B} - System32\Tasks\Lenovo\sysrun-10592 => C:\Users\Market\AppData\Local\Temp\sysrun-10592.cmd -> <==== ATTENTION
Task: {D01E10F1-B1E5-419A-8DDE-69F98600EAF7} - System32\Tasks\Lenovo\sysrun-19115 => C:\Users\Market\AppData\Local\Temp\sysrun-19115.cmd -> <==== ATTENTION
Task: {44965B4E-2592-40EC-8AFF-7AAA3F7E97DB} - System32\Tasks\Lenovo\sysrun-19700 => C:\Users\Market\AppData\Local\Temp\sysrun-19700.cmd -> <==== ATTENTION
Task: {F109E710-0CC7-42DF-9BB3-0237437DC513} - System32\Tasks\Lenovo\sysrun-22408 => C:\Users\Market\AppData\Local\Temp\sysrun-22408.cmd -> <==== ATTENTION
Task: {6DD87358-5B80-4901-B652-B904B9852007} - System32\Tasks\Lenovo\sysrun-31893 => C:\Users\Market\AppData\Local\Temp\sysrun-31893.cmd -> <==== ATTENTION
Task: {A4CAEC57-EBE8-4C49-8627-EEE2A29056CA} - System32\Tasks\Lenovo\sysrun-5806 => C:\Users\Market\AppData\Local\Temp\sysrun-5806.cmd -> <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (No File)
Toolbar: HKU\S-1-5-21-4196152387-412035393-530938450-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10598046-EDE9-4605-8F7B-8568543A10DC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10598046-EDE9-4605-8F7B-8568543A10DC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-4196152387-412035393-530938450-1002" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AE44A2B-4FE8-4551-B559-CEE95E3993D4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AE44A2B-4FE8-4551-B559-CEE95E3993D4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{43D35B15-EFD6-4BF6-97F7-B019652C9F9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{43D35B15-EFD6-4BF6-97F7-B019652C9F9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6B1A97DA-D569-4EF4-81E7-472F14432B7C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6B1A97DA-D569-4EF4-81E7-472F14432B7C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A36190AA-0728-4F03-9A4E-2F8785A99B9A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A36190AA-0728-4F03-9A4E-2F8785A99B9A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7BF1BA1-2C31-4D4D-BF45-06BB155FC961}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7BF1BA1-2C31-4D4D-BF45-06BB155FC961}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ABB8E5D2-1A31-4783-A952-20A0B2C36A21}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABB8E5D2-1A31-4783-A952-20A0B2C36A21}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B02730CF-B7CE-4FF0-94E9-EA99F9580D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B02730CF-B7CE-4FF0-94E9-EA99F9580D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C21E0E55-22D6-4693-A4E3-EF7052E6D01E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C21E0E55-22D6-4693-A4E3-EF7052E6D01E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CF9C0550-5885-4D9C-8E25-46DAFCEAF697}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF9C0550-5885-4D9C-8E25-46DAFCEAF697}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EA3F60EC-B451-4483-9DC3-3820B890C448}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA3F60EC-B451-4483-9DC3-3820B890C448}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F701B405-38CD-4741-B1D5-146991F60226}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F701B405-38CD-4741-B1D5-146991F60226}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\Lenovo-11958 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\Lenovo-11958" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{262D43AB-CB09-42BA-A4B8-367488B4ACCB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{262D43AB-CB09-42BA-A4B8-367488B4ACCB}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\Lenovo-12004 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\Lenovo-12004" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0333C2EC-4AE1-4F98-A397-E6185114393B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0333C2EC-4AE1-4F98-A397-E6185114393B}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-10592 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-10592" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D01E10F1-B1E5-419A-8DDE-69F98600EAF7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D01E10F1-B1E5-419A-8DDE-69F98600EAF7}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-19115 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-19115" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44965B4E-2592-40EC-8AFF-7AAA3F7E97DB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44965B4E-2592-40EC-8AFF-7AAA3F7E97DB}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-19700 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-19700" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F109E710-0CC7-42DF-9BB3-0237437DC513}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F109E710-0CC7-42DF-9BB3-0237437DC513}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-22408 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-22408" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6DD87358-5B80-4901-B652-B904B9852007}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DD87358-5B80-4901-B652-B904B9852007}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-31893 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-31893" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4CAEC57-EBE8-4C49-8627-EEE2A29056CA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4CAEC57-EBE8-4C49-8627-EEE2A29056CA}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-5806 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-5806" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{352E6CA0-7314-4DF4-89C4-682368D80D57}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{352E6CA0-7314-4DF4-89C4-682368D80D57}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join" => removed successfully
"HKU\S-1-5-21-4196152387-412035393-530938450-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 144410233 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 13476 B
Windows/system/drivers => 14680237 B
Edge => 63108 B
Chrome => 1344930429 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 65636 B
NetworkService => 310032632 B
UpdatusUser => 310032632 B
Market => 409716548 B
RecycleBin => 121920 B
EmptyTemp: => 2.4 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 12:18:51 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 06-08-2023
Ran by Market (12-08-2023 12:13:42) Run:1
Running from C:\Users\Market\Desktop
Loaded Profiles: UpdatusUser & Market
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
Task: {10598046-EDE9-4605-8F7B-8568543A10DC} - \WPD\SqmUpload_S-1-5-21-4196152387-412035393-530938450-1002 -> No File <==== ATTENTION
Task: {2AE44A2B-4FE8-4551-B559-CEE95E3993D4} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {43D35B15-EFD6-4BF6-97F7-B019652C9F9B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {6B1A97DA-D569-4EF4-81E7-472F14432B7C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {A36190AA-0728-4F03-9A4E-2F8785A99B9A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {A7BF1BA1-2C31-4D4D-BF45-06BB155FC961} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {ABB8E5D2-1A31-4783-A952-20A0B2C36A21} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {B02730CF-B7CE-4FF0-94E9-EA99F9580D47} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {C21E0E55-22D6-4693-A4E3-EF7052E6D01E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {CF9C0550-5885-4D9C-8E25-46DAFCEAF697} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {EA3F60EC-B451-4483-9DC3-3820B890C448} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F701B405-38CD-4741-B1D5-146991F60226} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF} - System32\Tasks\Lenovo\Lenovo-11958 => C:\ProgramData\Lenovo-11958.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {262D43AB-CB09-42BA-A4B8-367488B4ACCB} - System32\Tasks\Lenovo\Lenovo-12004 => C:\ProgramData\Lenovo-12004.vbs [198 2013-12-07] () [File not signed] <==== ATTENTION
Task: {0333C2EC-4AE1-4F98-A397-E6185114393B} - System32\Tasks\Lenovo\sysrun-10592 => C:\Users\Market\AppData\Local\Temp\sysrun-10592.cmd -> <==== ATTENTION
Task: {D01E10F1-B1E5-419A-8DDE-69F98600EAF7} - System32\Tasks\Lenovo\sysrun-19115 => C:\Users\Market\AppData\Local\Temp\sysrun-19115.cmd -> <==== ATTENTION
Task: {44965B4E-2592-40EC-8AFF-7AAA3F7E97DB} - System32\Tasks\Lenovo\sysrun-19700 => C:\Users\Market\AppData\Local\Temp\sysrun-19700.cmd -> <==== ATTENTION
Task: {F109E710-0CC7-42DF-9BB3-0237437DC513} - System32\Tasks\Lenovo\sysrun-22408 => C:\Users\Market\AppData\Local\Temp\sysrun-22408.cmd -> <==== ATTENTION
Task: {6DD87358-5B80-4901-B652-B904B9852007} - System32\Tasks\Lenovo\sysrun-31893 => C:\Users\Market\AppData\Local\Temp\sysrun-31893.cmd -> <==== ATTENTION
Task: {A4CAEC57-EBE8-4C49-8627-EEE2A29056CA} - System32\Tasks\Lenovo\sysrun-5806 => C:\Users\Market\AppData\Local\Temp\sysrun-5806.cmd -> <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (No File)
Toolbar: HKU\S-1-5-21-4196152387-412035393-530938450-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10598046-EDE9-4605-8F7B-8568543A10DC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10598046-EDE9-4605-8F7B-8568543A10DC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-4196152387-412035393-530938450-1002" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AE44A2B-4FE8-4551-B559-CEE95E3993D4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AE44A2B-4FE8-4551-B559-CEE95E3993D4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{43D35B15-EFD6-4BF6-97F7-B019652C9F9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{43D35B15-EFD6-4BF6-97F7-B019652C9F9B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6B1A97DA-D569-4EF4-81E7-472F14432B7C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6B1A97DA-D569-4EF4-81E7-472F14432B7C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A36190AA-0728-4F03-9A4E-2F8785A99B9A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A36190AA-0728-4F03-9A4E-2F8785A99B9A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7BF1BA1-2C31-4D4D-BF45-06BB155FC961}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7BF1BA1-2C31-4D4D-BF45-06BB155FC961}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ABB8E5D2-1A31-4783-A952-20A0B2C36A21}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABB8E5D2-1A31-4783-A952-20A0B2C36A21}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF6CAF7C-D8DB-4840-AEF7-F7FBEE65640B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B02730CF-B7CE-4FF0-94E9-EA99F9580D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B02730CF-B7CE-4FF0-94E9-EA99F9580D47}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C21E0E55-22D6-4693-A4E3-EF7052E6D01E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C21E0E55-22D6-4693-A4E3-EF7052E6D01E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CC739EF4-C79F-4AAE-8CAB-BDE4ACFC93C0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CF9C0550-5885-4D9C-8E25-46DAFCEAF697}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF9C0550-5885-4D9C-8E25-46DAFCEAF697}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EA3F60EC-B451-4483-9DC3-3820B890C448}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA3F60EC-B451-4483-9DC3-3820B890C448}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F701B405-38CD-4741-B1D5-146991F60226}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F701B405-38CD-4741-B1D5-146991F60226}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30E0C2E0-DAF8-4A11-B068-97CE49ABD6AF}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\Lenovo-11958 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\Lenovo-11958" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{262D43AB-CB09-42BA-A4B8-367488B4ACCB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{262D43AB-CB09-42BA-A4B8-367488B4ACCB}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\Lenovo-12004 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\Lenovo-12004" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0333C2EC-4AE1-4F98-A397-E6185114393B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0333C2EC-4AE1-4F98-A397-E6185114393B}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-10592 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-10592" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D01E10F1-B1E5-419A-8DDE-69F98600EAF7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D01E10F1-B1E5-419A-8DDE-69F98600EAF7}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-19115 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-19115" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44965B4E-2592-40EC-8AFF-7AAA3F7E97DB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44965B4E-2592-40EC-8AFF-7AAA3F7E97DB}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-19700 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-19700" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F109E710-0CC7-42DF-9BB3-0237437DC513}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F109E710-0CC7-42DF-9BB3-0237437DC513}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-22408 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-22408" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6DD87358-5B80-4901-B652-B904B9852007}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DD87358-5B80-4901-B652-B904B9852007}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-31893 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-31893" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4CAEC57-EBE8-4C49-8627-EEE2A29056CA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4CAEC57-EBE8-4C49-8627-EEE2A29056CA}" => removed successfully
C:\WINDOWS\System32\Tasks\Lenovo\sysrun-5806 => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\sysrun-5806" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{352E6CA0-7314-4DF4-89C4-682368D80D57}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{352E6CA0-7314-4DF4-89C4-682368D80D57}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join" => removed successfully
"HKU\S-1-5-21-4196152387-412035393-530938450-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 144410233 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 13476 B
Windows/system/drivers => 14680237 B
Edge => 63108 B
Chrome => 1344930429 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 65636 B
NetworkService => 310032632 B
UpdatusUser => 310032632 B
Market => 409716548 B
RecycleBin => 121920 B
EmptyTemp: => 2.4 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 12:18:51 ====
Re: Prosím o kontrolu logu - pomalý PC
Je to vycistene 
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Přispějete na provoz fóra?