Zdravím, poslední dobou se mi častěji, než je zdrávo, stává, že některá běžná aplikace zamrzne (Firefoxu asi dochází paměť, ale občas "neodpovídá" explorer.exe nebo Word). Předem díky za kontrolu logů:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2023
Ran by Krystof (administrator) on AYUMI (Micro-Star International Co., Ltd MS-7B86) (06-09-2023 10:08:37)
Running from C:\Users\Krystof\Desktop\FRST64.exe
Loaded Profiles: Krystof
Platform: Microsoft Windows 10 Education Version 22H2 19045.3324 (X64) Language: Angličtina (Spojené státy) -> Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <3>
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe ->) (The CefSharp Authors) [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\CefSharp.BrowserSubprocess.exe <5>
(C:\Windows\runSW.exe ->) (Realtek Semiconductor Corp. -> Realtek) C:\Windows\SwUSB.exe
(cmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(DeepL SE -> DeepL SE) C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe
(DriverStore\FileRepository\u0390451.inf_amd64_39377efdd62734d1\B390182\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0390451.inf_amd64_39377efdd62734d1\B390182\atieclxx.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <8>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(explorer.exe ->) (CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
(explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0390451.inf_amd64_39377efdd62734d1\B390182\atiesrxx.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (GuinpinSoft inc) [File not signed] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(services.exe ->) (Realtek Semiconductor Corp. -> ) C:\Windows\runSW.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(spool\drivers\x64\3\CNAP3LAK.EXE ->) (CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABISWD.EXE
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [256408 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [878368 2019-06-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CNAP3 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-14] (CANON INC. -> CANON INC.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11559648 2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [f.lux] => C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe [1525880 2023-05-18] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [44161792 2023-09-01] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [Microsoft Edge Update] => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\MicrosoftEdgeUpdateCore.exe [252864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41584544 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7660504 2023-08-19] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [MicrosoftEdgeAutoLaunch_65F3B7E6AC9A17B9E7C35427ADD03530] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4108328 2023-08-31] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Canon MFNP Port: C:\WINDOWS\system32\CNCENPM6.dll [152064 2013-01-31] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\CNAP3 Monitor: C:\WINDOWS\system32\CNAP3SMD.DLL [1470464 2014-11-28] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\116.0.5845.141\Installer\chrmstp.exe [2023-09-01] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
Startup: C:\Users\Krystof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2023-03-16]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {35F86DAD-7542-401B-8DD5-421A1A6F5930} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564152 2023-04-03] (Adobe Inc. -> Adobe Inc.)
Task: {84703626-8800-45B8-9AEA-DD297FAF8C0F} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [1072056 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {D0DFF1F5-E619-4D59-A9BE-032492F41F46} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {8665E326-4936-4BF0-AE87-E2068C1C3ACF} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {81A6D09E-7183-4B95-9B2A-447578D500E6} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183224 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {62470DB5-4D67-4834-8995-F3B5E5D806F4} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4947352 2023-09-01] (Avast Software s.r.o. -> AVAST Software)
Task: {0C85F9D4-63D0-4ADC-ABA2-BF0466B92263} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2144664 2023-08-03] (Avast Software s.r.o. -> Avast Software)
Task: {0024ACE0-8A24-406B-B959-48A2BC4BF445} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {BC6399BD-9943-448E-B43F-A76483A21321} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "c44bda99-9960-4fc2-a12b-c6ca5e143915" --version "6.15.10623" --silent
Task: {6CC92F25-C287-4243-868A-9356E138A666} - System32\Tasks\CCleanerSkipUAC - Krystof => C:\Program Files\CCleaner\CCleaner.exe [34687904 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {8DC1380A-7A06-4FD6-96B5-51A286714F7D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {5992B769-FBEF-4364-9005-DCCF75E38554} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C78AD76B-FA2E-4B00-92DF-19B16015C7D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {932BA0AA-5BDB-479E-AA58-35B664875D9F} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3422260876-3162899715-691115348-1001Core => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {74FB8026-64AE-4580-A13E-44737483BDAC} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3422260876-3162899715-691115348-1001UA => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {F844F8EC-151C-4568-B6BF-4D6F86DAF09C} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {031363C1-0C68-4595-A0C1-A3BA5ECBF40B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [675232 2023-09-01] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {F0C6E601-57B1-4DA7-9E6F-D537AA367A51} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [722336 2023-09-01] (Mozilla Corporation -> Mozilla Foundation)
Task: {8EE5CEA6-5887-4888-8AA3-4A6E8E25DAD7} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [56760 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {391D7222-5426-4E12-BFD4-6B927125D285} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [291768 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6d769b74-6e1e-4899-ac5e-d70eb3329165}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{746ce733-a2ca-45d7-9530-a11367b5a0b5}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default [2023-09-06]
Edge Extension: (Dokumenty Google offline) - C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-04]
Edge Extension: (Edge relevant text changes) - C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-04]
FireFox:
========
FF DefaultProfile: u0b20blw.default
FF ProfilePath: C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\u0b20blw.default [2019-09-04]
FF NewTab: Mozilla\Firefox\Profiles\u0b20blw.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__190805
FF ProfilePath: C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release [2023-09-06]
FF NewTab: Mozilla\Firefox\Profiles\ip576ig8.default-release -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__190805
FF Session Restore: Mozilla\Firefox\Profiles\ip576ig8.default-release -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\ip576ig8.default-release -> hxxps://meet.google.com; hxxps://translations.spaceos.io
FF Extension: (Facebook Container) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\@contain-facebook.xpi [2023-07-20]
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2021-06-19]
FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\firefox@ghostery.com.xpi [2023-08-03]
FF Extension: (HTTPS Everywhere) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\https-everywhere@eff.org.xpi [2021-07-14]
FF Extension: (Reddit Enhancement Suite) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2023-04-11]
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\marcoagpinto@mail.telepac.pt.xpi [2023-09-01]
FF Extension: (DownThemAll!) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2023-08-28]
FF Plugin: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-08-19] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3422260876-3162899715-691115348-1001: @asperasoft.com/AsperaConnect -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\npasperaweb_3.9.6.173386.dll [2019-07-24] (International Business Machines Corporation -> Aspera, Inc.)
Chrome:
=======
CHR Profile: C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default [2023-09-04]
CHR Notifications: Default -> hxxps://lichess.org; hxxps://translations.spaceos.io
CHR Extension: (Dokumenty Google offline) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-07-21]
CHR Extension: (IBM Aspera Connect) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpoecbkildamnnchnlgoboipnblgikpn [2022-11-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-23]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-04-03] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8901016 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [586136 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [587160 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-05-20] (Avast Software s.r.o. -> AVAST Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1074080 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2021-11-28] (GuinpinSoft inc) [File not signed]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10676992 2023-09-01] (Logitech Inc -> Logitech, Inc.)
S3 memoQauhlp90; C:\Program Files\memoQ\memoQ-9\MemoQ.AutoUpdate.exe [417792 2019-07-05] (Kilgray) [File not signed]
R2 RunSwUSB; C:\Windows\runSW.exe [59232 2019-08-19] (Realtek Semiconductor Corp. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [402200 2023-08-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [35344 2022-09-09] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV19; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [43336 2022-11-30] (Advanced Micro Devices INC. -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_1a1a381a2c0e293c\amdsafd.sys [113056 2022-08-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0390451.inf_amd64_39377efdd62734d1\B390182\amdkmdag.sys [94467928 2023-04-06] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [59920 2022-05-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [31528 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [238496 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [392880 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297880 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [95960 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [25576 2022-10-13] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39648 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [272576 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [559184 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105248 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80416 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [946160 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [705480 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [212632 2023-08-03] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319568 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
S3 athur; C:\WINDOWS\System32\drivers\athuwbx.sys [2702336 2013-11-20] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys [33784 2021-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2022-09-24] (Logitech Inc -> Logitech)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [8231912 2019-12-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2020-01-10] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-09-06 10:08 - 2023-09-06 10:09 - 000029476 _____ C:\Users\Krystof\Desktop\FRST.txt
2023-09-06 10:08 - 2023-09-06 10:09 - 000000000 ____D C:\FRST
2023-09-06 10:07 - 2023-09-06 10:07 - 002382336 _____ (Farbar) C:\Users\Krystof\Desktop\FRST64.exe
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\G HUB
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\Program Files\LGHUB
2023-09-01 09:55 - 2023-09-01 09:55 - 000313240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2023-09-01 08:51 - 2023-09-01 08:51 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-29 15:52 - 2023-08-29 15:52 - 000567988 _____ C:\Users\Krystof\Desktop\komunikační situace.pdf
2023-08-28 09:09 - 2023-08-28 09:09 - 000000000 ____D C:\Users\Krystof\AppData\Local\DeepL_SE
2023-08-27 21:09 - 2023-08-27 21:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-08-22 00:51 - 2023-08-22 00:51 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-08-17 14:22 - 2023-08-17 14:22 - 003611019 _____ C:\Users\Krystof\Downloads\Validace_a_varianty_moznych_uprav_systemu_financovani_preneseneho_vykonu_statni_spravy.pdf
2023-08-12 12:21 - 2023-08-12 12:21 - 000000000 ___HD C:\$WinREAgent
2023-08-09 12:29 - 2023-08-09 12:29 - 000166982 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24-3.pdf
2023-08-09 12:29 - 2023-08-09 12:29 - 000166982 _____ C:\Users\Krystof\Desktop\Propedeutika ZS 2023_24-3.pdf
2023-08-09 12:21 - 2023-08-09 12:21 - 000166886 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24-1.pdf
2023-08-09 12:20 - 2023-08-09 12:20 - 000167044 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-09-06 10:08 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-09-06 09:51 - 2022-01-28 04:29 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-09-06 09:51 - 2019-08-03 23:10 - 000000000 ____D C:\Program Files (x86)\Google
2023-09-06 09:41 - 2022-02-06 02:24 - 000000000 ____D C:\Users\Krystof\AppData\Local\LGHUB
2023-09-06 09:41 - 2019-08-03 23:13 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Dropbox
2023-09-06 09:41 - 2019-08-03 23:13 - 000000000 ____D C:\Users\Krystof\AppData\Local\Dropbox
2023-09-06 09:40 - 2023-07-05 16:47 - 000003082 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2023-09-06 09:40 - 2023-01-03 17:02 - 000003102 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2023-09-05 21:34 - 2023-02-28 10:06 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\DeepL_SE
2023-09-05 19:46 - 2022-01-27 19:35 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-09-05 19:41 - 2019-08-03 23:12 - 000000000 ____D C:\Users\Krystof\AppData\Local\Spotify
2023-09-05 19:40 - 2019-08-03 23:12 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Spotify
2023-09-05 18:41 - 2019-08-04 00:56 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Word
2023-09-05 14:52 - 2020-02-06 13:15 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Signal
2023-09-05 11:16 - 2021-06-05 12:00 - 000000000 ____D C:\Users\Krystof\AppData\Local\Avast Software
2023-09-05 10:50 - 2019-08-05 18:42 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Excel
2023-09-04 15:44 - 2019-08-04 14:06 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\vlc
2023-09-04 15:22 - 2019-08-03 23:07 - 000000000 ____D C:\Users\Krystof\AppData\Local\D3DSCache
2023-09-04 13:04 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-09-04 13:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-09-04 12:48 - 2019-08-03 23:55 - 000000000 ____D C:\Users\Krystof\AppData\Local\CrashDumps
2023-09-03 01:36 - 2023-01-03 17:00 - 000002672 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2023-09-03 01:36 - 2023-01-03 16:59 - 000002402 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask
2023-09-03 01:36 - 2023-01-03 16:59 - 000002194 _____ C:\WINDOWS\system32\Tasks\StartCN
2023-09-03 01:36 - 2023-01-03 16:59 - 000002114 _____ C:\WINDOWS\system32\Tasks\StartDVR
2023-09-03 01:36 - 2022-09-29 10:04 - 000003046 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-09-03 01:36 - 2022-09-29 10:04 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-09-03 01:36 - 2022-08-04 13:06 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-09-03 01:36 - 2022-08-04 13:06 - 000002256 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Krystof
2023-09-03 01:36 - 2022-01-27 19:43 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-09-03 01:36 - 2022-01-27 19:43 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-09-03 01:36 - 2022-01-27 19:43 - 000003456 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2023-09-03 01:36 - 2022-01-27 19:43 - 000003410 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-09-03 01:36 - 2022-01-27 19:43 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-09-03 01:36 - 2022-01-27 19:43 - 000003232 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2023-09-03 01:36 - 2022-01-27 19:43 - 000003186 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-09-03 01:36 - 2022-01-27 19:43 - 000002622 _____ C:\WINDOWS\system32\Tasks\AMD ThankingURL
2023-09-03 01:36 - 2022-01-27 19:43 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2023-09-03 01:36 - 2019-08-03 23:13 - 000000942 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2023-09-03 01:36 - 2019-08-03 23:13 - 000000938 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2023-09-02 17:17 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-09-02 12:46 - 2022-02-06 02:24 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\LGHUB
2023-09-02 12:46 - 2020-08-24 09:26 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-09-02 12:44 - 2020-10-02 16:56 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-09-01 15:21 - 2019-08-03 23:09 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-09-01 09:55 - 2022-01-27 19:43 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2023-09-01 09:55 - 2020-10-14 11:33 - 000272576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2023-09-01 09:55 - 2020-04-14 20:36 - 000559184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2023-09-01 09:55 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-09-01 09:55 - 2019-08-03 23:18 - 000946160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000705480 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000392880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000319568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000297880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000238496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000105248 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000095960 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000080416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000039648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000031528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2023-09-01 08:50 - 2019-08-03 23:10 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-08-30 20:34 - 2020-03-17 01:11 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\discord
2023-08-30 20:32 - 2020-03-17 01:11 - 000000000 ____D C:\Users\Krystof\AppData\Local\Discord
2023-08-29 12:40 - 2021-03-14 19:02 - 000000000 ____D C:\Users\Krystof\Calibre Library
2023-08-29 09:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ModemLogs
2023-08-27 21:09 - 2022-10-13 13:13 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-08-27 21:09 - 2019-08-03 23:13 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-08-27 21:07 - 2023-01-03 17:09 - 000000000 ____D C:\Users\Krystof\AppData\Local\AMD_Common
2023-08-27 21:05 - 2022-08-04 13:06 - 000000000 ____D C:\Program Files\CCleaner
2023-08-27 21:04 - 2019-08-03 22:41 - 000000000 ____D C:\ProgramData\Packages
2023-08-27 21:04 - 2019-08-03 22:25 - 000000000 ____D C:\Users\Krystof\AppData\Local\Packages
2023-08-17 21:27 - 2019-08-03 23:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-08-17 11:14 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-16 10:07 - 2022-01-28 04:15 - 000716710 _____ C:\WINDOWS\system32\perfh005.dat
2023-08-16 10:07 - 2022-01-28 04:15 - 000144908 _____ C:\WINDOWS\system32\perfc005.dat
2023-08-16 10:07 - 2022-01-27 19:45 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-08-16 10:02 - 2022-01-27 19:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-08-14 14:32 - 2019-09-26 13:02 - 000000128 _____ C:\Users\Krystof\AppData\Roaming\winscp.rnd
2023-08-14 12:29 - 2019-08-04 00:56 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Office
2023-08-13 10:10 - 2022-01-27 19:35 - 000374592 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-08-13 10:10 - 2019-08-03 23:17 - 000000000 ____D C:\ProgramData\AVAST Software
2023-08-12 18:08 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2023-08-12 18:08 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-08-12 18:08 - 2019-08-03 22:37 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2023-08-12 12:33 - 2022-01-27 19:38 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-08-12 12:20 - 2019-08-03 22:49 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-08-12 12:17 - 2019-08-03 22:49 - 175983240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-08-12 12:17 - 2019-08-03 22:38 - 000000000 ____D C:\ProgramData\Package Cache
==================== Files in the root of some directories ========
2021-11-28 15:30 - 2021-11-28 17:35 - 000000559 _____ () C:\Users\Krystof\AppData\Roaming\AutoGK.ini
2019-09-26 13:02 - 2023-08-14 14:32 - 000000128 _____ () C:\Users\Krystof\AppData\Roaming\winscp.rnd
2020-10-20 11:31 - 2020-10-20 11:31 - 000003584 _____ () C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-10-05 12:20 - 2021-02-14 19:40 - 000002558 _____ () C:\Users\Krystof\AppData\Local\krita-sysinfo.log
2020-10-05 12:20 - 2021-02-14 19:40 - 000694936 _____ () C:\Users\Krystof\AppData\Local\krita.log
2021-02-14 19:40 - 2021-02-14 19:40 - 000000039 _____ () C:\Users\Krystof\AppData\Local\kritadisplayrc
2020-10-05 12:20 - 2021-02-14 19:40 - 000020089 _____ () C:\Users\Krystof\AppData\Local\kritarc
2023-08-06 19:11 - 2023-08-06 19:11 - 000000128 _____ () C:\Users\Krystof\AppData\Local\PUTTY.RND
2022-01-15 21:12 - 2022-01-15 21:12 - 000006429 _____ () C:\Users\Krystof\AppData\Local\recently-used.xbel
2022-12-08 12:24 - 2022-12-08 12:24 - 000007606 _____ () C:\Users\Krystof\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2023
Ran by Krystof (06-09-2023 10:11:05)
Running from C:\Users\Krystof\Desktop
Microsoft Windows 10 Education Version 22H2 19045.3324 (X64) (2022-01-27 17:43:16)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3422260876-3162899715-691115348-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3422260876-3162899715-691115348-503 - Limited - Disabled)
Guest (S-1-5-21-3422260876-3162899715-691115348-501 - Limited - Disabled)
Krystof (S-1-5-21-3422260876-3162899715-691115348-1001 - Administrator - Enabled) => C:\Users\Krystof
WDAGUtilityAccount (S-1-5-21-3422260876-3162899715-691115348-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
7-Zip 22.00 (x64 edition) (HKLM\...\{23170F69-40C1-2702-2200-000001000000}) (Version: 22.00.00.0 - Igor Pavlov)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 23.003.20284 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601047}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 22.11.2 - Advanced Micro Devices, Inc.)
ApSIC Xbench 2.9 (HKLM-x32\...\ApSIC Xbench) (Version: 2.9 - ApSIC, S.L.)
Atom (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\atom) (Version: 1.63.1 - GitHub Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 23.8.6078 - Avast Software)
balenaEtcher 1.7.7 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b) (Version: 1.7.7 - Balena Inc.)
Branding64 (HKLM\...\{0DB6E0DC-607A-42C1-A3CE-7567A9F85AF4}) (Version: 1.00.0008 - Advanced Micro Devices, Inc.) Hidden
calibre (HKLM-x32\...\{1E82C046-151D-4210-AF70-B3B8FA2F6B56}) (Version: 5.13.0 - Kovid Goyal)
Canon LBP6230 6240 Uninstaller (HKLM\...\Canon LBP6230 6240) (Version: 6, 3, 1, 0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.15 - Piriform)
CrystalDiskInfo 8.8.9 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.8.9 - Crystal Dew World)
darktable (HKLM\...\darktable) (Version: 3.4.0 - the darktable project)
DeepL (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\https%3a##appdownload.deepl.com#windows#0install#deepl.xml) (Version: - DeepL SE)
Discord (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
DroidCam Client (HKLM-x32\...\DroidCam) (Version: 6.5.2 - DEV47APPS)
Dropbox (HKLM-x32\...\Dropbox) (Version: 181.4.5678 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.761.1 - Dropbox, Inc.) Hidden
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
Epic Games Launcher (HKLM-x32\...\{1D4EB18B-0FEE-444E-B4D1-6F2CFBC363E6}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
f.lux (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Flux) (Version: 4.124 - f.lux Software LLC)
Git version 2.28.0 (HKLM\...\Git_is1) (Version: 2.28.0 - The Git Development Community)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.60.5324 - GOM & Company)
Google Chrome (HKLM\...\{86B1D736-F1F4-3367-9B39-C2E176B68239}) (Version: 116.0.5845.141 - Google LLC)
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.50) (Version: 9.50 - Artifex Software Inc.)
IBM Aspera Connect 3.9.6.173386 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Aspera Connect 3.9.6.173386) (Version: 3.9.6.173386 - IBM Corp.)
IrfanView 4.53 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.53 - Irfan Skiljan)
Java 8 Update 371 (64-bit) (HKLM\...\{71124AE4-039E-4CA4-87B4-2F64180371F0}) (Version: 8.0.3710.11 - Oracle Corporation)
Koala -- A cool tool for web developers (HKLM-x32\...\Koala) (Version: 2.3.0 - koala-app.com)
Krita (x64) 4.3.0 (HKLM\...\Krita_x64) (Version: 4.3.0.0 - Krita Foundation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2023.7.448769 - Logitech)
memoQ 9 (HKLM-x32\...\{AF14E63A-379C-45A0-8ED0-B00DFFADFEA2}_is1) (Version: - Kilgray)
Microsoft .NET Host - 5.0.17 (x86) (HKLM-x32\...\{54DE7EA9-E391-4BD2-A373-3A72A18EBDB5}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.12 (x86) (HKLM-x32\...\{BAA79920-74A8-4B01-BB8A-46949BD4F729}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.17 (x86) (HKLM-x32\...\{AF01038B-6523-4EA7-9D9E-4F1E2927D88B}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x86) (HKLM-x32\...\{2C54E947-8A24-48B6-A06B-D41F9E525697}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x86) (HKLM-x32\...\{ddc06d66-ad77-49ce-8acb-58d13265fc1d}) (Version: 5.0.12.30622 - Microsoft Corporation)
Microsoft .NET Runtime - 5.0.17 (x86) (HKLM-x32\...\{59650A2A-3839-46EC-9D9C-6B3B1C743C55}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.21 - Shared Framework (x86) (HKLM-x32\...\{1a1806cd-e853-476a-a6bc-9b6346136c47}) (Version: 6.0.21.23364 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.21 Shared Framework (x86) (HKLM-x32\...\{92776B8E-7A17-39A7-8870-A1D4C35151EB}) (Version: 6.0.21.23364 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 116.0.1938.69 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 116.0.1938.69 - Microsoft Corporation)
Microsoft Office 2010 pro studenty a domácnosti (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Access MUI (Czech) 2010 (HKLM\...\{90140000-0015-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Czech) 2010 (HKLM\...\{90140000-0016-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2010 (HKLM\...\{90140000-00A1-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2010 (HKLM\...\{90140000-001A-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2010 (HKLM\...\{90140000-0018-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2010 (HKLM\...\{90140000-001F-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2010 (HKLM\...\{90140000-001F-041B-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2010 (HKLM\...\{90140000-002C-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2010 (HKLM\...\{90140000-0019-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (Czech) 2010 (HKLM\...\{90140000-0043-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2010 (HKLM\...\{90140000-006E-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2010 (HKLM\...\{90140000-001B-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\OneDriveSetup.exe) (Version: 22.227.1030.0001 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Teams) (Version: 1.5.00.2164 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2953E19B-9F91-4A49-A23B-7E25970A1951}) (Version: 3.73.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30133 (HKLM\...\{E699E009-1C3C-4E50-9B57-2B39F0954C7F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30133 (HKLM\...\{6CD9E9ED-906D-4196-8DC3-F987D2F6615F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29334 (HKLM-x32\...\{14C49FC8-3E9B-4F29-8526-26629B5CF30B}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29334 (HKLM-x32\...\{0D01A812-82A1-481F-8546-8E28E976F8DF}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.50.1 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{098c6ff7-1af1-4c4a-b86f-c60608c98e31}) (Version: 5.0.17.31219 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{0D02D706-44F2-4957-A448-E7259A0B56B9}) (Version: 40.68.31219 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MiKTeX 2.9 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
MKVToolNix 63.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 63.0.0 - Moritz Bunkus)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 117.0 (x64 en-US)) (Version: 117.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.0.1 - Mozilla)
MTG Arena (HKLM\...\{BB4B95C3-A8C1-4978-B66D-8A9E5C71DF85}) (Version: 0.1.3781 - Wizards of the Coast)
Paradox Launcher v2 (HKLM\...\{8C5CF4CE-D589-40B4-A77F-01FD64602C50}) (Version: 2.4.0 - Paradox Interactive)
Python 3.9.0 (64-bit) (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{a2a37ca0-8ebd-4d7e-b4b8-e6b1740c2ce0}) (Version: 3.9.150.0 - Python Software Foundation)
Python 3.9.0 Add to Path (64-bit) (HKLM\...\{4F5E962C-96E9-45B9-8F14-9A91748981C6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Core Interpreter (64-bit) (HKLM\...\{92F322B1-D69A-43D1-82B4-24ADEBE5C650}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Development Libraries (64-bit) (HKLM\...\{E73FE192-7766-49FA-B28A-32F700D98A15}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Documentation (64-bit) (HKLM\...\{35E94198-B9F1-4D1E-A869-636AD5E6BCA8}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Executables (64-bit) (HKLM\...\{A9F718BA-8B5F-4AE7-ADDA-EFFF431948DB}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 pip Bootstrap (64-bit) (HKLM\...\{27FF09D8-6DE6-4F63-A3DD-8758D615D543}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Standard Library (64-bit) (HKLM\...\{42480EE5-670F-4AF3-A619-2E761A398340}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Tcl/Tk Support (64-bit) (HKLM\...\{4460A893-EFF6-4B33-BF21-BAA2159F57E6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Test Suite (64-bit) (HKLM\...\{9141E990-BD45-4F42-BB32-B3012969355D}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Utility Scripts (64-bit) (HKLM\...\{35DC2DFB-0AEA-4DC2-AFA5-4EA2D2612B51}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{E45E56A4-FCDD-4C4A-966A-4FB81C932219}) (Version: 3.9.7217.0 - Python Software Foundation)
QCAD Trial 3.27.9 (HKLM\...\{1C2CDCF8-167B-41F3-901D-A20DD4ED0432}) (Version: 3.27.9 - RibbonSoft GmbH)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8720.1 - Realtek Semiconductor Corp.)
RyzenMasterSDK (HKLM\...\{85A2A688-4A95-4298-9FEC-F18F42B8EB7E}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Scribus 1.4.8 (HKLM-x32\...\Scribus 1.4.8) (Version: 1.4.8 - The Scribus Team)
Scribus 1.5.8 (64bit) (HKLM\...\Scribus 1.5.8) (Version: 1.5.8 - The Scribus Team)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0015-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0016-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0018-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0019-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001A-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001B-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0405-1000-0000000FF1CE}_Office14.SingleImage_{235F521F-C627-4957-A641-C4C161F78531}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.SingleImage_{EE3A99C9-FD8F-4923-9F82-27365DA4B873}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.SingleImage_{C814F7D9-CE9D-45AA-BA7C-88BDD0E1EB7C}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-041B-1000-0000000FF1CE}_Office14.SingleImage_{2E7C03CB-FE0A-4B95-BA37-742CD596760C}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-002C-0405-1000-0000000FF1CE}_Office14.SingleImage_{FF4FCFC2-4935-49E4-B35E-5FCF7343412B}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{F3FAAB68-7697-4B1F-A23A-72312565AEAB}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0405-1000-0000000FF1CE}_Office14.SingleImage_{62E2481E-63BB-4481-A0CE-071D6D663B1B}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-006E-0405-1000-0000000FF1CE}_Office14.SingleImage_{BFFA0FE1-0823-4382-9DD3-49DA02375BBA}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-00A1-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Signal 1.31.0 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{7d96caee-06e6-597c-9f2f-c7bb2e0948b4}) (Version: 1.31.0 - Open Whisper Systems)
Signal 6.29.1 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 6.29.1 - Signal Messenger, LLC)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Spotify) (Version: 1.2.19.941.gbf202593 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellarium 0.19.3.1 (HKLM\...\Stellarium_is1) (Version: 0.19.3.1 - Stellarium team)
Subtitle Edit 3.6.7 (HKLM\...\SubtitleEdit_is1) (Version: 3.6.7.0 - Nikse)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.0 - TeamSpeak Systems GmbH)
Telegram Desktop version 2.6.1 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.6.1 - Telegram FZ-LLC)
TeXstudio - TeXstudio is a fully featured LaTeX editor. (HKLM\...\TeXstudio) (Version: 4.2.3 - Benito van der Zander)
TeXstudio - TeXstudio is a fully featured LaTeX editor. (HKLM-x32\...\TeXstudio) (Version: 2.12.14 - Benito van der Zander)
TP-Link Archer T3U Plus Driver (HKLM-x32\...\{C93FD3E7-E450-46ED-B2B2-6F86B479BDBE}) (Version: 2.1.0 - TP-Link)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 87.0 - Ubisoft)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
VobSub v2.23 (Remove Only) (HKLM-x32\...\VobSub) (Version: - )
WinSCP 5.17.1 (HKLM-x32\...\winscp3_is1) (Version: 5.17.1 - Martin Prikryl)
XMedia Recode 64bit verze 3.5.4.5 (HKLM\...\{D31E6E69-4C6A-42CC-926F-CC7B186864EB}_is1) (Version: 3.5.4.5 - XMedia Recode 64bit)
XviD MPEG4 Video Codec (remove only) (HKLM-x32\...\XviD MPEG4 Video Codec) (Version: - )
Zoom (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\ZoomUMX) (Version: 5.3.2 (53291.1011) - Zoom Video Communications, Inc.)
Packages:
=========
Canon Office Printer Utility -> C:\Program Files\WindowsApps\34791E63.CanonOfficePrinterUtility_12.7.0.0_x64__6e5tt8cgb93ep [2019-08-04] (Canon Inc.)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2308.1005.0_x64__8wekyb3d8bbwe [2023-08-11] (Microsoft Corporation)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-01-07] (Microsoft Corporation)
Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2023-08-27] (Dropbox Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-01-27] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-01-27] (Microsoft Corporation) [MS Ad]
Polarr Pro Photo Editor -> C:\Program Files\WindowsApps\613EBCEA.PolarrPhotoEditorAcademicEdition_5.11.5.0_x64__jb41c8remg0x2 [2023-06-26] (Polarr)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.181.0_x64__dt26b99r8h8gj [2019-08-03] (Realtek Semiconductor Corp)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.17.8180.0_x64__8wekyb3d8bbwe [2023-08-27] (Microsoft Studios) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{04A9E854-6F47-4F37-8A10-F896717F0329}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\x64\connectloader.dll (International Business Machines Corporation -> )
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21348.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B}\InprocServer32 -> C:\WINDOWS\System32\mscomct2.ocx => No File
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{AD17B774-7F87-4141-BB9C-2AEE3841DC4E}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\x64\connectloader.dll (International Business Machines Corporation -> )
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe (DeepL SE -> DeepL SE)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Krystof\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{D1CE12B0-2529-4B24-BE8E-189735EA0DC1}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Krystof\Documents\Dropbox [2019-08-20 13:30]
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AMemoQContextMenu] -> {E81E9F62-F62B-49BE-8F07-FA55E1C231EE} => C:\Program Files\memoQ\memoQ-9\MemoQContextMenu.dll [2019-03-05] (Kilgray) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => D:\software\JR2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers1: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => D:\software\JR2010\JRcm64.dll [2010-09-06] () [File not signed]
ContextMenuHandlers1: [XbShellEx] -> {127EA5BF-BA08-454E-BA6E-5484096F4B11} => C:\Program Files (x86)\ApSIC\Xbench\XbShellEx-1884678734.dll [2020-09-27] (APSIC SL -> )
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [XbShellEx] -> {127EA5BF-BA08-454E-BA6E-5484096F4B11} => C:\Program Files (x86)\ApSIC\Xbench\XbShellEx-1884678734.dll [2020-09-27] (APSIC SL -> )
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => D:\software\JR2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers6: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => D:\software\JR2010\JRcm64.dll [2010-09-06] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [179200 2009-01-25] () [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2020-09-12 22:02 - 2020-09-12 22:02 - 000160768 _____ () [File not signed] C:\Program Files (x86)\DroidCam\lib\DroidCamFilter64.ax
2023-03-15 10:09 - 2022-08-21 03:44 - 001160192 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\CefSharp.BrowserSubprocess.Core.dll
2023-03-15 10:10 - 2022-08-19 09:38 - 175591424 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libcef.dll
2023-03-15 10:10 - 2022-08-19 08:11 - 000442880 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libEGL.dll
2023-03-15 10:10 - 2022-08-19 08:10 - 006480384 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libGLESv2.dll
2023-03-15 10:10 - 2022-08-19 08:07 - 004077568 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\vk_swiftshader.dll
2023-03-15 10:10 - 2022-08-19 08:10 - 000828928 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\vulkan-1.dll
2019-10-10 12:34 - 2010-09-06 19:21 - 000538435 _____ () [File not signed] D:\software\JR2010\JRcm64.dll
2019-08-05 23:31 - 2013-01-31 18:21 - 000152064 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNCENPM6.dll
2022-06-15 18:00 - 2022-06-15 18:00 - 000094720 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2019-08-04 00:16 - 2019-03-05 11:48 - 000441856 _____ (Kilgray) [File not signed] C:\Program Files\memoQ\memoQ-9\MemoQContextMenu.dll
2023-03-15 10:10 - 2022-08-19 08:16 - 001231872 _____ (The Chromium Authors) [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\chrome_elf.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__190805
SearchScopes: HKU\S-1-5-21-3422260876-3162899715-691115348-1001 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;C:\Program Files\Git\cmd;C:\Program Files (x86)\Calibre2\;D:\software\lineageOS\platform-tools;C:\Program Files (x86)\dotnet\
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\Control Panel\Desktop\\Wallpaper -> c:\users\krystof\appdata\roaming\mozilla\firefox\desktop background.bmp
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "Microsoft Edge Update"
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{4B568FC7-B558-4270-97E3-8DD7BFB8F0C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Babble Royale\BabbleRoyale.exe () [File not signed]
FirewallRules: [{FD62F405-72CC-43E1-9737-6874612A61CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Babble Royale\BabbleRoyale.exe () [File not signed]
FirewallRules: [{B86ACD13-A16A-4FF0-BC48-665EB4CF5B7A}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{0893D8CD-C2D6-4F9B-A767-D740C70EA0D1}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [UDP Query User{6465A96A-C8D8-47AD-992C-2ECA50808F1A}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{933A691F-DDA6-4EBE-B319-393CF929BBDE}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{0DD90331-A92A-4B6E-BF9F-049B1A8E1BFF}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )
FirewallRules: [TCP Query User{F73B48AB-5CCB-4C0A-9E81-BA741F9A68A5}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )
FirewallRules: [{91D2A3A1-0EE0-4815-B03B-3F28BDF2FA84}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{01FBCD9F-8C93-447A-980B-928B4391D82B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{031110D1-5E5A-4474-B9F8-B46A5FCC2D26}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{6B330F18-35CF-4BEB-8060-25836866B930}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{57C9FC6F-7F5C-4BE8-A0E2-319B3734A78A}] => (Allow) C:\Users\Krystof\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [UDP Query User{54B8DEE9-E455-42DB-9953-00353F60F8E2}C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{DB4D3992-9412-4672-8D08-A144C1E63D08}C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{4D7C118C-D9CE-4DEF-94FF-52672DD9F5D4}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [TCP Query User{FFFAD18B-D25F-412F-9006-8D1BDB47BC97}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [UDP Query User{6B9A91EB-E77A-4D67-8C5E-C587675C3738}C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [TCP Query User{A6A4BE3F-055A-4E74-9F79-25CA5C057F2A}C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [{F8479CB1-9240-4597-9F6C-3AA6502A5DF2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wesnoth\wesnoth.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [{EAACF3A6-9406-4783-B6DB-D47AAB3D2F5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wesnoth\wesnoth.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [UDP Query User{E05CDB58-6066-49AD-B2A5-DB398100D677}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{5A1808EA-EFA8-418C-BDD4-85E0C6CC0C83}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5BCC8CD8-A1F3-4895-B7DD-C6B47D5FFDA8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]
FirewallRules: [{1D6E17B1-46D3-4F6D-93A5-FD1D52799B8E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]
FirewallRules: [UDP Query User{D69E49A9-4CF7-45A4-9034-1EEA9635B10F}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [TCP Query User{7B34B8B8-274A-4BFD-965A-2402D12C7B5C}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [{047930F6-B9F9-4245-A04F-632F39237DEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\LaunchPad\LaunchPad.exe () [File not signed]
FirewallRules: [{DD6D4C52-21EA-4999-8CD8-4452AF234D95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\LaunchPad\LaunchPad.exe () [File not signed]
FirewallRules: [UDP Query User{530263E2-3017-43E5-9DA0-46563A985EE0}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{67EA6A3C-61A7-43E3-A032-EDBC5522A737}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{D53E64E2-B7AB-48B4-A9B2-17BBCA9E4534}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6B0E00E0-B1E4-467C-92CC-0E16FC6C130C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6432FEB7-E7C2-4C22-9289-2F55325E9DF4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe () [File not signed]
FirewallRules: [{50A89063-37F3-4C20-836D-1D690289419C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe () [File not signed]
FirewallRules: [{A9F278DD-83D6-4C2A-98BC-D26E25EE41D4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe () [File not signed]
FirewallRules: [{FB0C1A4C-40C7-41CD-B0F7-A255BB614BAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe () [File not signed]
FirewallRules: [{C1AA6FCF-E438-4D6D-82A2-93CB1CDF3626}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F9F0010E-934E-4724-B001-C2E43034B0D7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{DAA94267-6E49-4E24-9888-2026E38AD7B7}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{F15AA6DD-5071-47B4-A4AA-C407E9AA419E}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{B0E09CED-136F-456E-A68B-BB555445DD14}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{112BC802-E014-4A9C-9F36-F91AAE49EB28}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A975B931-BA8F-4F49-AA91-CC1415A95270}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7E4986D1-0D4B-4DAA-A816-D917DA4A5312}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{A2E0ED1A-2AA9-4763-9B67-FB981B5ED722}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{C2D52735-0A15-4686-A6D9-476F87E485F2}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{05DD00F1-9D66-4674-8878-BC2E5A5AD516}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stray\Stray.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{37C85C1E-E23F-4681-918C-657B6E838D5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stray\Stray.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{5BEC6CBD-8B5D-48DC-95E6-87BCB542F179}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victoria 3\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{2DDDE997-7794-4A48-B269-38E3D37DC863}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victoria 3\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [TCP Query User{E7DC222A-D61B-4624-9A7D-40DB739F0EFD}C:\program files\java\jre-1.8\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre-1.8\bin\jp2launcher.exe (Oracle America, Inc. -> Oracle Corporation)
FirewallRules: [UDP Query User{5C17CEB2-2520-4713-8EB7-3D237CFA921E}C:\program files\java\jre-1.8\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre-1.8\bin\jp2launcher.exe (Oracle America, Inc. -> Oracle Corporation)
FirewallRules: [{0FC7E747-7D0A-4706-9348-8DC44E656412}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{E5C671F6-F8F5-46BC-984C-613AEF51851D}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{356A1653-7050-4368-B167-E0B09A3400F2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6EDCB5BD-AB36-4F55-BAAF-26C4415DAE89}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8B37BAC2-6734-4204-8040-55782405D80B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2CBFCC14-F2CD-4EB4-9E1A-730EA129007C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5D626A30-367F-45E9-B45A-87BE8D7DBD4F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{A2B20DF7-E428-4F9A-B5C7-BD6266D7D875}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\116.0.1938.69\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
05-09-2023 10:56:02 Scheduled Checkpoint
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (09/05/2023 07:59:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 117.0.0.8636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 1144
Čas spuštění: 01d9dfed5b6f3747
Čas ukončení: 10
Cesta k aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
ID hlášení: ec06e4a5-e90f-4039-82c6-a2feb23b251d
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
Error: (09/05/2023 12:45:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 117.0.0.8636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 45d4
Čas spuštění: 01d9dfd552cdffd1
Čas ukončení: 52
Cesta k aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
ID hlášení: 6e5498cc-ebdd-467c-919c-094a78cdeb60
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
Error: (09/05/2023 10:46:55 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
Error: (09/04/2023 12:48:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Explorer.EXE, verze: 10.0.19041.3271, časové razítko: 0xfb42fb94
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000005749c40
ID chybujícího procesu: 0x2610
Čas spuštění chybující aplikace: 0x01d9df152ef5b0d0
Cesta k chybující aplikaci: C:\WINDOWS\Explorer.EXE
Cesta k chybujícímu modulu: unknown
ID zprávy: 4370f289-5942-4302-a5bb-597b642e922f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (09/04/2023 11:51:39 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
Error: (09/03/2023 12:50:18 PM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
Error: (09/03/2023 03:54:13 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit retrim na Aomame (D:), protože: The operation requested is not supported by the hardware backing the volume. (0x8900002A)
Error: (09/02/2023 12:47:39 PM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
System errors:
=============
Error: (09/03/2023 03:03:28 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného uživatelem se nepodařilo zvětšit úložiště stínové kopie.
Error: (08/27/2023 09:34:48 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9WZDNCRFJ364-MICROSOFT.SKYPEAPP.
Error: (08/17/2023 09:27:34 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Stínové kopie svazku C: byly přerušeny, protože z důvodu limitu stanoveného uživatelem se nepodařilo zvětšit úložiště stínové kopie.
Error: (08/16/2023 10:02:50 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (4:42:27 PM, 8/15/2023) bylo neočekávané.
Error: (08/16/2023 10:02:33 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.
Error: (08/15/2023 11:20:46 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (4:13:12 PM, 8/14/2023) bylo neočekávané.
Error: (08/15/2023 11:20:26 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.
Error: (08/11/2023 05:32:18 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9WZDNCRFJ364-MICROSOFT.SKYPEAPP.
CodeIntegrity:
===============
Date: 2023-09-04 11:48:45
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\aswVmm.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2023-09-01 09:54:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. A.40 12/21/2018
Motherboard: Micro-Star International Co., Ltd B450-A PRO (MS-7B86)
Processor: AMD Ryzen 5 1600 Six-Core Processor
Percentage of memory in use: 71%
Total physical RAM: 8146.03 MB
Available physical RAM: 2282.91 MB
Total Virtual: 32199.8 MB
Available Virtual: 2578.37 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.55 GB) (Free:50.88 GB) (Model: KINGSTON SA400S37240G) NTFS
Drive d: (Aomame) (Fixed) (Total:931.51 GB) (Free:209.96 GB) (Model: WDC WD10EZEX-00KUWA0) NTFS ==>[system with boot components (obtained from drive)]
\\?\Volume{995ac56f-d31b-4147-aa47-06f78b63de48}\ (Recovery) (Fixed) (Total:0.29 GB) (Free:0.28 GB) NTFS
\\?\Volume{c0c331f3-d9e6-42e3-be93-d2a300006443}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{e026aab8-6a75-4995-a205-024e15807912}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: F41191F4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zpomalení
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomalení
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomalení
Díky! Níže log:
# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 09-06-2023
# Duration: 00:00:16
# OS: Windows 10 (Build 19045.3324)
# Cleaned: 7
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
Deleted C:\END
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{993F5746-4C15-42BC-99C1-064A1764271B}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [2019 octets] - [06/09/2023 12:17:24]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 09-06-2023
# Duration: 00:00:16
# OS: Windows 10 (Build 19045.3324)
# Cleaned: 7
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
Deleted C:\END
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{993F5746-4C15-42BC-99C1-064A1764271B}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [2019 octets] - [06/09/2023 12:17:24]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomalení
Nalezené položky smažte (dejte do karantény), restartujte PC a pak dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomalení
Díky! Tady jsou nové logy:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2023
Ran by Krystof (administrator) on AYUMI (Micro-Star International Co., Ltd MS-7B86) (07-09-2023 11:20:18)
Running from C:\Users\Krystof\Desktop\FRST64.exe
Loaded Profiles: Krystof
Platform: Microsoft Windows 10 Education Version 22H2 19045.3324 (X64) Language: Angličtina (Spojené státy) -> Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\Install\{1F3C00C0-0E1B-472B-A51B-134F10A844E2}\DropboxClient_182.4.6427.x64.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\116.0.1938.69\identity_helper.exe
(C:\Program Files\AMD\CNext\CNext\cncmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\AVAST Software\Avast\AvLaunch.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe ->) (The CefSharp Authors) [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\CefSharp.BrowserSubprocess.exe
(DeepL SE -> DeepL SE) C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvLaunch.exe
(explorer.exe ->) (CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
(explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <7>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(spool\drivers\x64\3\CNAP3LAK.EXE ->) (CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABISWD.EXE
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotification.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.3266_none_7e25389a7c7bcadb\TiWorker.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [256408 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [878368 2019-06-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CNAP3 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-14] (CANON INC. -> CANON INC.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11559648 2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [f.lux] => C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe [1525880 2023-05-18] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [44161792 2023-09-01] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [Microsoft Edge Update] => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\MicrosoftEdgeUpdateCore.exe [252864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41584544 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7660504 2023-08-19] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [MicrosoftEdgeAutoLaunch_65F3B7E6AC9A17B9E7C35427ADD03530] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4108328 2023-08-31] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Canon MFNP Port: C:\WINDOWS\system32\CNCENPM6.dll [152064 2013-01-31] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\CNAP3 Monitor: C:\WINDOWS\system32\CNAP3SMD.DLL [1470464 2014-11-28] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\116.0.5845.142\Installer\chrmstp.exe [2023-09-07] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
Startup: C:\Users\Krystof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2023-03-16]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {35F86DAD-7542-401B-8DD5-421A1A6F5930} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564152 2023-04-03] (Adobe Inc. -> Adobe Inc.)
Task: {84703626-8800-45B8-9AEA-DD297FAF8C0F} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [1072056 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {68FFFE57-1AFC-4FB4-9894-0D3ED3A2C4BE} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {2030CA79-843C-4707-BD1D-869D74DDC391} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {81A6D09E-7183-4B95-9B2A-447578D500E6} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183224 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {62470DB5-4D67-4834-8995-F3B5E5D806F4} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4947352 2023-09-01] (Avast Software s.r.o. -> AVAST Software)
Task: {0C85F9D4-63D0-4ADC-ABA2-BF0466B92263} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2144664 2023-08-03] (Avast Software s.r.o. -> Avast Software)
Task: {0024ACE0-8A24-406B-B959-48A2BC4BF445} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {BC6399BD-9943-448E-B43F-A76483A21321} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "c44bda99-9960-4fc2-a12b-c6ca5e143915" --version "6.15.10623" --silent
Task: {6CC92F25-C287-4243-868A-9356E138A666} - System32\Tasks\CCleanerSkipUAC - Krystof => C:\Program Files\CCleaner\CCleaner.exe [34687904 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {8DC1380A-7A06-4FD6-96B5-51A286714F7D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {5992B769-FBEF-4364-9005-DCCF75E38554} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C78AD76B-FA2E-4B00-92DF-19B16015C7D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {932BA0AA-5BDB-479E-AA58-35B664875D9F} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3422260876-3162899715-691115348-1001Core => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {74FB8026-64AE-4580-A13E-44737483BDAC} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3422260876-3162899715-691115348-1001UA => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {F844F8EC-151C-4568-B6BF-4D6F86DAF09C} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {031363C1-0C68-4595-A0C1-A3BA5ECBF40B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [675232 2023-09-01] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {F0C6E601-57B1-4DA7-9E6F-D537AA367A51} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [722336 2023-09-01] (Mozilla Corporation -> Mozilla Foundation)
Task: {8EE5CEA6-5887-4888-8AA3-4A6E8E25DAD7} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [56760 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {391D7222-5426-4E12-BFD4-6B927125D285} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [291768 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6d769b74-6e1e-4899-ac5e-d70eb3329165}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{746ce733-a2ca-45d7-9530-a11367b5a0b5}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default [2023-09-07]
Edge Extension: (Dokumenty Google offline) - C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-04]
Edge Extension: (Edge relevant text changes) - C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-04]
FireFox:
========
FF DefaultProfile: u0b20blw.default
FF ProfilePath: C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\u0b20blw.default [2019-09-04]
FF NewTab: Mozilla\Firefox\Profiles\u0b20blw.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__190805
FF ProfilePath: C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release [2023-09-06]
FF NewTab: Mozilla\Firefox\Profiles\ip576ig8.default-release -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__190805
FF Session Restore: Mozilla\Firefox\Profiles\ip576ig8.default-release -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\ip576ig8.default-release -> hxxps://meet.google.com; hxxps://translations.spaceos.io
FF Extension: (Facebook Container) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\@contain-facebook.xpi [2023-07-20]
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2021-06-19]
FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\firefox@ghostery.com.xpi [2023-08-03]
FF Extension: (HTTPS Everywhere) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\https-everywhere@eff.org.xpi [2021-07-14]
FF Extension: (Reddit Enhancement Suite) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2023-04-11]
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\marcoagpinto@mail.telepac.pt.xpi [2023-09-01]
FF Extension: (DownThemAll!) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2023-08-28]
FF Plugin: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-08-19] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3422260876-3162899715-691115348-1001: @asperasoft.com/AsperaConnect -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\npasperaweb_3.9.6.173386.dll [2019-07-24] (International Business Machines Corporation -> Aspera, Inc.)
Chrome:
=======
CHR Profile: C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default [2023-09-04]
CHR Notifications: Default -> hxxps://lichess.org; hxxps://translations.spaceos.io
CHR Extension: (Dokumenty Google offline) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-07-21]
CHR Extension: (IBM Aspera Connect) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpoecbkildamnnchnlgoboipnblgikpn [2022-11-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-23]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-04-03] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8901016 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [586136 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [587160 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-05-20] (Avast Software s.r.o. -> AVAST Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1074080 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2021-11-28] (GuinpinSoft inc) [File not signed]
R2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-09-06] (Dropbox, Inc -> Dropbox, Inc.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10676992 2023-09-01] (Logitech Inc -> Logitech, Inc.)
S3 memoQauhlp90; C:\Program Files\memoQ\memoQ-9\MemoQ.AutoUpdate.exe [417792 2019-07-05] (Kilgray) [File not signed]
S2 RunSwUSB; C:\Windows\runSW.exe [59232 2019-08-19] (Realtek Semiconductor Corp. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [402200 2023-08-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [35344 2022-09-09] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV19; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [43336 2022-11-30] (Advanced Micro Devices INC. -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_1a1a381a2c0e293c\amdsafd.sys [113056 2022-08-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0390451.inf_amd64_39377efdd62734d1\B390182\amdkmdag.sys [94467928 2023-04-06] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [59920 2022-05-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [31528 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [238496 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [392880 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297880 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [95960 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [25576 2022-10-13] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39648 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [272576 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [559184 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105248 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80416 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [946160 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [705480 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [212632 2023-08-03] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319568 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
S3 athur; C:\WINDOWS\System32\drivers\athuwbx.sys [2702336 2013-11-20] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys [33784 2021-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2022-09-24] (Logitech Inc -> Logitech)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [8231912 2019-12-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2020-01-10] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-09-07 11:22 - 2023-09-07 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-09-06 12:17 - 2023-09-06 12:17 - 000000000 ____D C:\AdwCleaner
2023-09-06 12:16 - 2023-09-06 12:16 - 008791352 _____ (Malwarebytes) C:\Users\Krystof\Desktop\adwcleaner.exe
2023-09-06 10:11 - 2023-09-06 10:25 - 000060421 _____ C:\Users\Krystof\Desktop\Addition.txt
2023-09-06 10:08 - 2023-09-07 11:21 - 000028616 _____ C:\Users\Krystof\Desktop\FRST.txt
2023-09-06 10:08 - 2023-09-07 11:21 - 000000000 ____D C:\FRST
2023-09-06 10:07 - 2023-09-06 10:07 - 002382336 _____ (Farbar) C:\Users\Krystof\Desktop\FRST64.exe
2023-09-06 00:17 - 2023-09-06 00:17 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\G HUB
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\Program Files\LGHUB
2023-09-01 09:55 - 2023-09-01 09:55 - 000313240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2023-09-01 08:51 - 2023-09-01 08:51 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-29 15:52 - 2023-08-29 15:52 - 000567988 _____ C:\Users\Krystof\Desktop\komunikační situace.pdf
2023-08-28 09:09 - 2023-08-28 09:09 - 000000000 ____D C:\Users\Krystof\AppData\Local\DeepL_SE
2023-08-17 14:22 - 2023-08-17 14:22 - 003611019 _____ C:\Users\Krystof\Downloads\Validace_a_varianty_moznych_uprav_systemu_financovani_preneseneho_vykonu_statni_spravy.pdf
2023-08-12 12:21 - 2023-08-12 12:21 - 000000000 ___HD C:\$WinREAgent
2023-08-09 12:29 - 2023-08-09 12:29 - 000166982 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24-3.pdf
2023-08-09 12:29 - 2023-08-09 12:29 - 000166982 _____ C:\Users\Krystof\Desktop\Propedeutika ZS 2023_24-3.pdf
2023-08-09 12:21 - 2023-08-09 12:21 - 000166886 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24-1.pdf
2023-08-09 12:20 - 2023-08-09 12:20 - 000167044 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-09-07 11:22 - 2019-08-03 23:13 - 000000000 ____D C:\Users\Krystof\AppData\Local\Dropbox
2023-09-07 11:21 - 2022-01-28 04:29 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-09-07 11:21 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-09-07 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-09-07 11:21 - 2019-08-03 23:13 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Dropbox
2023-09-07 11:21 - 2019-08-03 23:13 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-09-07 11:21 - 2019-08-03 23:10 - 000000000 ____D C:\Program Files (x86)\Google
2023-09-07 11:19 - 2023-07-05 16:47 - 000003082 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2023-09-07 11:19 - 2023-01-03 17:02 - 000003102 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2023-09-07 11:19 - 2022-02-06 02:24 - 000000000 ____D C:\Users\Krystof\AppData\Local\LGHUB
2023-09-07 11:18 - 2019-08-03 23:10 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-09-06 13:59 - 2020-02-06 13:15 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Signal
2023-09-06 13:58 - 2022-01-27 19:35 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-09-06 13:57 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-09-06 12:08 - 2019-08-03 23:12 - 000000000 ____D C:\Users\Krystof\AppData\Local\Spotify
2023-09-06 12:07 - 2019-08-03 23:12 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Spotify
2023-09-06 11:44 - 2023-01-03 17:00 - 000002672 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2023-09-06 11:44 - 2023-01-03 16:59 - 000002402 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask
2023-09-06 11:44 - 2023-01-03 16:59 - 000002194 _____ C:\WINDOWS\system32\Tasks\StartCN
2023-09-06 11:44 - 2023-01-03 16:59 - 000002114 _____ C:\WINDOWS\system32\Tasks\StartDVR
2023-09-06 11:44 - 2022-09-29 10:04 - 000003046 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-09-06 11:44 - 2022-09-29 10:04 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-09-06 11:44 - 2022-08-04 13:06 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-09-06 11:44 - 2022-08-04 13:06 - 000002256 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Krystof
2023-09-06 11:44 - 2022-01-27 19:43 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-09-06 11:44 - 2022-01-27 19:43 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-09-06 11:44 - 2022-01-27 19:43 - 000003456 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2023-09-06 11:44 - 2022-01-27 19:43 - 000003410 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-09-06 11:44 - 2022-01-27 19:43 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-09-06 11:44 - 2022-01-27 19:43 - 000003232 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2023-09-06 11:44 - 2022-01-27 19:43 - 000003186 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-09-06 11:44 - 2022-01-27 19:43 - 000002622 _____ C:\WINDOWS\system32\Tasks\AMD ThankingURL
2023-09-06 11:44 - 2022-01-27 19:43 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2023-09-06 11:44 - 2019-08-03 23:13 - 000000942 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2023-09-06 11:44 - 2019-08-03 23:13 - 000000938 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2023-09-06 10:41 - 2023-02-28 10:06 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\DeepL_SE
2023-09-06 10:12 - 2021-06-05 12:00 - 000000000 ____D C:\Users\Krystof\AppData\Local\Avast Software
2023-09-05 18:41 - 2019-08-04 00:56 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Word
2023-09-05 10:50 - 2019-08-05 18:42 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Excel
2023-09-04 15:44 - 2019-08-04 14:06 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\vlc
2023-09-04 15:22 - 2019-08-03 23:07 - 000000000 ____D C:\Users\Krystof\AppData\Local\D3DSCache
2023-09-04 12:48 - 2019-08-03 23:55 - 000000000 ____D C:\Users\Krystof\AppData\Local\CrashDumps
2023-09-02 17:17 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-09-02 12:46 - 2022-02-06 02:24 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\LGHUB
2023-09-02 12:46 - 2020-08-24 09:26 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-09-02 12:44 - 2020-10-02 16:56 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-09-01 15:21 - 2019-08-03 23:09 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-09-01 09:55 - 2022-01-27 19:43 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2023-09-01 09:55 - 2020-10-14 11:33 - 000272576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2023-09-01 09:55 - 2020-04-14 20:36 - 000559184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2023-09-01 09:55 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-09-01 09:55 - 2019-08-03 23:18 - 000946160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000705480 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000392880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000319568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000297880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000238496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000105248 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000095960 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000080416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000039648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000031528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2023-08-30 20:34 - 2020-03-17 01:11 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\discord
2023-08-30 20:32 - 2020-03-17 01:11 - 000000000 ____D C:\Users\Krystof\AppData\Local\Discord
2023-08-29 12:40 - 2021-03-14 19:02 - 000000000 ____D C:\Users\Krystof\Calibre Library
2023-08-29 09:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ModemLogs
2023-08-27 21:09 - 2022-10-13 13:13 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-08-27 21:07 - 2023-01-03 17:09 - 000000000 ____D C:\Users\Krystof\AppData\Local\AMD_Common
2023-08-27 21:05 - 2022-08-04 13:06 - 000000000 ____D C:\Program Files\CCleaner
2023-08-27 21:04 - 2019-08-03 22:41 - 000000000 ____D C:\ProgramData\Packages
2023-08-27 21:04 - 2019-08-03 22:25 - 000000000 ____D C:\Users\Krystof\AppData\Local\Packages
2023-08-17 21:27 - 2019-08-03 23:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-08-17 11:14 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-16 10:07 - 2022-01-28 04:15 - 000716710 _____ C:\WINDOWS\system32\perfh005.dat
2023-08-16 10:07 - 2022-01-28 04:15 - 000144908 _____ C:\WINDOWS\system32\perfc005.dat
2023-08-16 10:07 - 2022-01-27 19:45 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-08-16 10:02 - 2022-01-27 19:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-08-14 14:32 - 2019-09-26 13:02 - 000000128 _____ C:\Users\Krystof\AppData\Roaming\winscp.rnd
2023-08-14 12:29 - 2019-08-04 00:56 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Office
2023-08-13 10:10 - 2022-01-27 19:35 - 000374592 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-08-13 10:10 - 2019-08-03 23:17 - 000000000 ____D C:\ProgramData\AVAST Software
2023-08-12 18:08 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2023-08-12 18:08 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-08-12 18:08 - 2019-08-03 22:37 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2023-08-12 12:33 - 2022-01-27 19:38 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-08-12 12:20 - 2019-08-03 22:49 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-08-12 12:17 - 2019-08-03 22:49 - 175983240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-08-12 12:17 - 2019-08-03 22:38 - 000000000 ____D C:\ProgramData\Package Cache
==================== Files in the root of some directories ========
2021-11-28 15:30 - 2021-11-28 17:35 - 000000559 _____ () C:\Users\Krystof\AppData\Roaming\AutoGK.ini
2019-09-26 13:02 - 2023-08-14 14:32 - 000000128 _____ () C:\Users\Krystof\AppData\Roaming\winscp.rnd
2020-10-20 11:31 - 2020-10-20 11:31 - 000003584 _____ () C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-10-05 12:20 - 2021-02-14 19:40 - 000002558 _____ () C:\Users\Krystof\AppData\Local\krita-sysinfo.log
2020-10-05 12:20 - 2021-02-14 19:40 - 000694936 _____ () C:\Users\Krystof\AppData\Local\krita.log
2021-02-14 19:40 - 2021-02-14 19:40 - 000000039 _____ () C:\Users\Krystof\AppData\Local\kritadisplayrc
2020-10-05 12:20 - 2021-02-14 19:40 - 000020089 _____ () C:\Users\Krystof\AppData\Local\kritarc
2023-08-06 19:11 - 2023-08-06 19:11 - 000000128 _____ () C:\Users\Krystof\AppData\Local\PUTTY.RND
2022-01-15 21:12 - 2022-01-15 21:12 - 000006429 _____ () C:\Users\Krystof\AppData\Local\recently-used.xbel
2022-12-08 12:24 - 2022-12-08 12:24 - 000007606 _____ () C:\Users\Krystof\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2023
Ran by Krystof (07-09-2023 11:22:25)
Running from C:\Users\Krystof\Desktop
Microsoft Windows 10 Education Version 22H2 19045.3324 (X64) (2022-01-27 17:43:16)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3422260876-3162899715-691115348-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3422260876-3162899715-691115348-503 - Limited - Disabled)
Guest (S-1-5-21-3422260876-3162899715-691115348-501 - Limited - Disabled)
Krystof (S-1-5-21-3422260876-3162899715-691115348-1001 - Administrator - Enabled) => C:\Users\Krystof
WDAGUtilityAccount (S-1-5-21-3422260876-3162899715-691115348-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
7-Zip 22.00 (x64 edition) (HKLM\...\{23170F69-40C1-2702-2200-000001000000}) (Version: 22.00.00.0 - Igor Pavlov)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 23.003.20284 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601047}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 22.11.2 - Advanced Micro Devices, Inc.)
ApSIC Xbench 2.9 (HKLM-x32\...\ApSIC Xbench) (Version: 2.9 - ApSIC, S.L.)
Atom (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\atom) (Version: 1.63.1 - GitHub Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 23.8.6078 - Avast Software)
balenaEtcher 1.7.7 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b) (Version: 1.7.7 - Balena Inc.)
Branding64 (HKLM\...\{0DB6E0DC-607A-42C1-A3CE-7567A9F85AF4}) (Version: 1.00.0008 - Advanced Micro Devices, Inc.) Hidden
calibre (HKLM-x32\...\{1E82C046-151D-4210-AF70-B3B8FA2F6B56}) (Version: 5.13.0 - Kovid Goyal)
Canon LBP6230 6240 Uninstaller (HKLM\...\Canon LBP6230 6240) (Version: 6, 3, 1, 0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.15 - Piriform)
CrystalDiskInfo 8.8.9 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.8.9 - Crystal Dew World)
darktable (HKLM\...\darktable) (Version: 3.4.0 - the darktable project)
DeepL (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\https%3a##appdownload.deepl.com#windows#0install#deepl.xml) (Version: - DeepL SE)
Discord (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
DroidCam Client (HKLM-x32\...\DroidCam) (Version: 6.5.2 - DEV47APPS)
Dropbox (HKLM-x32\...\Dropbox) (Version: 182.4.6427 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.761.1 - Dropbox, Inc.) Hidden
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
Epic Games Launcher (HKLM-x32\...\{1D4EB18B-0FEE-444E-B4D1-6F2CFBC363E6}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
f.lux (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Flux) (Version: 4.124 - f.lux Software LLC)
Git version 2.28.0 (HKLM\...\Git_is1) (Version: 2.28.0 - The Git Development Community)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.60.5324 - GOM & Company)
Google Chrome (HKLM\...\{86B1D736-F1F4-3367-9B39-C2E176B68239}) (Version: 116.0.5845.142 - Google LLC)
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.50) (Version: 9.50 - Artifex Software Inc.)
IBM Aspera Connect 3.9.6.173386 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Aspera Connect 3.9.6.173386) (Version: 3.9.6.173386 - IBM Corp.)
IrfanView 4.53 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.53 - Irfan Skiljan)
Java 8 Update 371 (64-bit) (HKLM\...\{71124AE4-039E-4CA4-87B4-2F64180371F0}) (Version: 8.0.3710.11 - Oracle Corporation)
Koala -- A cool tool for web developers (HKLM-x32\...\Koala) (Version: 2.3.0 - koala-app.com)
Krita (x64) 4.3.0 (HKLM\...\Krita_x64) (Version: 4.3.0.0 - Krita Foundation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2023.7.448769 - Logitech)
memoQ 9 (HKLM-x32\...\{AF14E63A-379C-45A0-8ED0-B00DFFADFEA2}_is1) (Version: - Kilgray)
Microsoft .NET Host - 5.0.17 (x86) (HKLM-x32\...\{54DE7EA9-E391-4BD2-A373-3A72A18EBDB5}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.12 (x86) (HKLM-x32\...\{BAA79920-74A8-4B01-BB8A-46949BD4F729}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.17 (x86) (HKLM-x32\...\{AF01038B-6523-4EA7-9D9E-4F1E2927D88B}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x86) (HKLM-x32\...\{2C54E947-8A24-48B6-A06B-D41F9E525697}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x86) (HKLM-x32\...\{ddc06d66-ad77-49ce-8acb-58d13265fc1d}) (Version: 5.0.12.30622 - Microsoft Corporation)
Microsoft .NET Runtime - 5.0.17 (x86) (HKLM-x32\...\{59650A2A-3839-46EC-9D9C-6B3B1C743C55}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.21 - Shared Framework (x86) (HKLM-x32\...\{1a1806cd-e853-476a-a6bc-9b6346136c47}) (Version: 6.0.21.23364 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.21 Shared Framework (x86) (HKLM-x32\...\{92776B8E-7A17-39A7-8870-A1D4C35151EB}) (Version: 6.0.21.23364 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 116.0.1938.69 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 116.0.1938.69 - Microsoft Corporation)
Microsoft Office 2010 pro studenty a domácnosti (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Access MUI (Czech) 2010 (HKLM\...\{90140000-0015-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Czech) 2010 (HKLM\...\{90140000-0016-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2010 (HKLM\...\{90140000-00A1-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2010 (HKLM\...\{90140000-001A-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2010 (HKLM\...\{90140000-0018-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2010 (HKLM\...\{90140000-001F-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2010 (HKLM\...\{90140000-001F-041B-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2010 (HKLM\...\{90140000-002C-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2010 (HKLM\...\{90140000-0019-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (Czech) 2010 (HKLM\...\{90140000-0043-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2010 (HKLM\...\{90140000-006E-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2010 (HKLM\...\{90140000-001B-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\OneDriveSetup.exe) (Version: 22.227.1030.0001 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Teams) (Version: 1.5.00.2164 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2953E19B-9F91-4A49-A23B-7E25970A1951}) (Version: 3.73.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30133 (HKLM\...\{E699E009-1C3C-4E50-9B57-2B39F0954C7F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30133 (HKLM\...\{6CD9E9ED-906D-4196-8DC3-F987D2F6615F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29334 (HKLM-x32\...\{14C49FC8-3E9B-4F29-8526-26629B5CF30B}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29334 (HKLM-x32\...\{0D01A812-82A1-481F-8546-8E28E976F8DF}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.50.1 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{098c6ff7-1af1-4c4a-b86f-c60608c98e31}) (Version: 5.0.17.31219 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{0D02D706-44F2-4957-A448-E7259A0B56B9}) (Version: 40.68.31219 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MiKTeX 2.9 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
MKVToolNix 63.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 63.0.0 - Moritz Bunkus)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 117.0 (x64 en-US)) (Version: 117.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.0.1 - Mozilla)
MTG Arena (HKLM\...\{BB4B95C3-A8C1-4978-B66D-8A9E5C71DF85}) (Version: 0.1.3781 - Wizards of the Coast)
Paradox Launcher v2 (HKLM\...\{8C5CF4CE-D589-40B4-A77F-01FD64602C50}) (Version: 2.4.0 - Paradox Interactive)
Python 3.9.0 (64-bit) (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{a2a37ca0-8ebd-4d7e-b4b8-e6b1740c2ce0}) (Version: 3.9.150.0 - Python Software Foundation)
Python 3.9.0 Add to Path (64-bit) (HKLM\...\{4F5E962C-96E9-45B9-8F14-9A91748981C6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Core Interpreter (64-bit) (HKLM\...\{92F322B1-D69A-43D1-82B4-24ADEBE5C650}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Development Libraries (64-bit) (HKLM\...\{E73FE192-7766-49FA-B28A-32F700D98A15}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Documentation (64-bit) (HKLM\...\{35E94198-B9F1-4D1E-A869-636AD5E6BCA8}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Executables (64-bit) (HKLM\...\{A9F718BA-8B5F-4AE7-ADDA-EFFF431948DB}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 pip Bootstrap (64-bit) (HKLM\...\{27FF09D8-6DE6-4F63-A3DD-8758D615D543}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Standard Library (64-bit) (HKLM\...\{42480EE5-670F-4AF3-A619-2E761A398340}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Tcl/Tk Support (64-bit) (HKLM\...\{4460A893-EFF6-4B33-BF21-BAA2159F57E6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Test Suite (64-bit) (HKLM\...\{9141E990-BD45-4F42-BB32-B3012969355D}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Utility Scripts (64-bit) (HKLM\...\{35DC2DFB-0AEA-4DC2-AFA5-4EA2D2612B51}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{E45E56A4-FCDD-4C4A-966A-4FB81C932219}) (Version: 3.9.7217.0 - Python Software Foundation)
QCAD Trial 3.27.9 (HKLM\...\{1C2CDCF8-167B-41F3-901D-A20DD4ED0432}) (Version: 3.27.9 - RibbonSoft GmbH)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8720.1 - Realtek Semiconductor Corp.)
RyzenMasterSDK (HKLM\...\{85A2A688-4A95-4298-9FEC-F18F42B8EB7E}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Scribus 1.4.8 (HKLM-x32\...\Scribus 1.4.8) (Version: 1.4.8 - The Scribus Team)
Scribus 1.5.8 (64bit) (HKLM\...\Scribus 1.5.8) (Version: 1.5.8 - The Scribus Team)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0015-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0016-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0018-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0019-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001A-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001B-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0405-1000-0000000FF1CE}_Office14.SingleImage_{235F521F-C627-4957-A641-C4C161F78531}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.SingleImage_{EE3A99C9-FD8F-4923-9F82-27365DA4B873}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.SingleImage_{C814F7D9-CE9D-45AA-BA7C-88BDD0E1EB7C}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-041B-1000-0000000FF1CE}_Office14.SingleImage_{2E7C03CB-FE0A-4B95-BA37-742CD596760C}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-002C-0405-1000-0000000FF1CE}_Office14.SingleImage_{FF4FCFC2-4935-49E4-B35E-5FCF7343412B}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{F3FAAB68-7697-4B1F-A23A-72312565AEAB}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0405-1000-0000000FF1CE}_Office14.SingleImage_{62E2481E-63BB-4481-A0CE-071D6D663B1B}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-006E-0405-1000-0000000FF1CE}_Office14.SingleImage_{BFFA0FE1-0823-4382-9DD3-49DA02375BBA}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-00A1-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Signal 1.31.0 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{7d96caee-06e6-597c-9f2f-c7bb2e0948b4}) (Version: 1.31.0 - Open Whisper Systems)
Signal 6.29.1 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 6.29.1 - Signal Messenger, LLC)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Spotify) (Version: 1.2.19.941.gbf202593 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellarium 0.19.3.1 (HKLM\...\Stellarium_is1) (Version: 0.19.3.1 - Stellarium team)
Subtitle Edit 3.6.7 (HKLM\...\SubtitleEdit_is1) (Version: 3.6.7.0 - Nikse)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.0 - TeamSpeak Systems GmbH)
Telegram Desktop version 2.6.1 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.6.1 - Telegram FZ-LLC)
TeXstudio - TeXstudio is a fully featured LaTeX editor. (HKLM\...\TeXstudio) (Version: 4.2.3 - Benito van der Zander)
TeXstudio - TeXstudio is a fully featured LaTeX editor. (HKLM-x32\...\TeXstudio) (Version: 2.12.14 - Benito van der Zander)
TP-Link Archer T3U Plus Driver (HKLM-x32\...\{C93FD3E7-E450-46ED-B2B2-6F86B479BDBE}) (Version: 2.1.0 - TP-Link)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 87.0 - Ubisoft)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
VobSub v2.23 (Remove Only) (HKLM-x32\...\VobSub) (Version: - )
WinSCP 5.17.1 (HKLM-x32\...\winscp3_is1) (Version: 5.17.1 - Martin Prikryl)
XMedia Recode 64bit verze 3.5.4.5 (HKLM\...\{D31E6E69-4C6A-42CC-926F-CC7B186864EB}_is1) (Version: 3.5.4.5 - XMedia Recode 64bit)
XviD MPEG4 Video Codec (remove only) (HKLM-x32\...\XviD MPEG4 Video Codec) (Version: - )
Zoom (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\ZoomUMX) (Version: 5.3.2 (53291.1011) - Zoom Video Communications, Inc.)
Packages:
=========
Canon Office Printer Utility -> C:\Program Files\WindowsApps\34791E63.CanonOfficePrinterUtility_12.7.0.0_x64__6e5tt8cgb93ep [2019-08-04] (Canon Inc.)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2308.1005.0_x64__8wekyb3d8bbwe [2023-08-11] (Microsoft Corporation)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-01-07] (Microsoft Corporation)
Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2023-09-07] (Dropbox Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-01-27] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-01-27] (Microsoft Corporation) [MS Ad]
Polarr Pro Photo Editor -> C:\Program Files\WindowsApps\613EBCEA.PolarrPhotoEditorAcademicEdition_5.11.5.0_x64__jb41c8remg0x2 [2023-06-26] (Polarr)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.181.0_x64__dt26b99r8h8gj [2019-08-03] (Realtek Semiconductor Corp)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.17.8180.0_x64__8wekyb3d8bbwe [2023-08-27] (Microsoft Studios) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{04A9E854-6F47-4F37-8A10-F896717F0329}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\x64\connectloader.dll (International Business Machines Corporation -> )
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21348.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B}\InprocServer32 -> C:\WINDOWS\System32\mscomct2.ocx => No File
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{AD17B774-7F87-4141-BB9C-2AEE3841DC4E}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\x64\connectloader.dll (International Business Machines Corporation -> )
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe (DeepL SE -> DeepL SE)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Krystof\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{D1CE12B0-2529-4B24-BE8E-189735EA0DC1}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Krystof\Documents\Dropbox [2019-08-20 13:30]
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AMemoQContextMenu] -> {E81E9F62-F62B-49BE-8F07-FA55E1C231EE} => C:\Program Files\memoQ\memoQ-9\MemoQContextMenu.dll [2019-03-05] (Kilgray) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => D:\software\JR2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers1: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => D:\software\JR2010\JRcm64.dll [2010-09-06] () [File not signed]
ContextMenuHandlers1: [XbShellEx] -> {127EA5BF-BA08-454E-BA6E-5484096F4B11} => C:\Program Files (x86)\ApSIC\Xbench\XbShellEx-1884678734.dll [2020-09-27] (APSIC SL -> )
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [XbShellEx] -> {127EA5BF-BA08-454E-BA6E-5484096F4B11} => C:\Program Files (x86)\ApSIC\Xbench\XbShellEx-1884678734.dll [2020-09-27] (APSIC SL -> )
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => D:\software\JR2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers6: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => D:\software\JR2010\JRcm64.dll [2010-09-06] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [179200 2009-01-25] () [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2023-03-15 10:09 - 2022-08-21 03:44 - 001160192 _____ () [File not signed] [File is in use] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\CefSharp.BrowserSubprocess.Core.dll
2020-09-12 22:02 - 2020-09-12 22:02 - 000160768 _____ () [File not signed] C:\Program Files (x86)\DroidCam\lib\DroidCamFilter64.ax
2023-03-15 10:10 - 2022-08-19 09:38 - 175591424 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libcef.dll
2023-03-15 10:10 - 2022-08-19 08:11 - 000442880 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libEGL.dll
2023-03-15 10:10 - 2022-08-19 08:10 - 006480384 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libGLESv2.dll
2023-03-15 10:10 - 2022-08-19 08:07 - 004077568 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\vk_swiftshader.dll
2023-03-15 10:10 - 2022-08-19 08:10 - 000828928 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\vulkan-1.dll
2019-10-10 12:34 - 2010-09-06 19:21 - 000538435 _____ () [File not signed] D:\software\JR2010\JRcm64.dll
2019-08-05 23:31 - 2013-01-31 18:21 - 000152064 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNCENPM6.dll
2022-06-15 18:00 - 2022-06-15 18:00 - 000094720 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2019-08-04 00:16 - 2019-03-05 11:48 - 000441856 _____ (Kilgray) [File not signed] C:\Program Files\memoQ\memoQ-9\MemoQContextMenu.dll
2023-03-15 10:10 - 2022-08-19 08:16 - 001231872 _____ (The Chromium Authors) [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\chrome_elf.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;C:\Program Files\Git\cmd;C:\Program Files (x86)\Calibre2\;D:\software\lineageOS\platform-tools;C:\Program Files (x86)\dotnet\
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\Control Panel\Desktop\\Wallpaper -> c:\users\krystof\appdata\roaming\mozilla\firefox\desktop background.bmp
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "Microsoft Edge Update"
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{4B568FC7-B558-4270-97E3-8DD7BFB8F0C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Babble Royale\BabbleRoyale.exe () [File not signed]
FirewallRules: [{FD62F405-72CC-43E1-9737-6874612A61CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Babble Royale\BabbleRoyale.exe () [File not signed]
FirewallRules: [{B86ACD13-A16A-4FF0-BC48-665EB4CF5B7A}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{0893D8CD-C2D6-4F9B-A767-D740C70EA0D1}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [UDP Query User{6465A96A-C8D8-47AD-992C-2ECA50808F1A}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{933A691F-DDA6-4EBE-B319-393CF929BBDE}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{0DD90331-A92A-4B6E-BF9F-049B1A8E1BFF}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )
FirewallRules: [TCP Query User{F73B48AB-5CCB-4C0A-9E81-BA741F9A68A5}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )
FirewallRules: [{91D2A3A1-0EE0-4815-B03B-3F28BDF2FA84}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{01FBCD9F-8C93-447A-980B-928B4391D82B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{031110D1-5E5A-4474-B9F8-B46A5FCC2D26}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{6B330F18-35CF-4BEB-8060-25836866B930}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{57C9FC6F-7F5C-4BE8-A0E2-319B3734A78A}] => (Allow) C:\Users\Krystof\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [UDP Query User{54B8DEE9-E455-42DB-9953-00353F60F8E2}C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{DB4D3992-9412-4672-8D08-A144C1E63D08}C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{4D7C118C-D9CE-4DEF-94FF-52672DD9F5D4}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [TCP Query User{FFFAD18B-D25F-412F-9006-8D1BDB47BC97}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [UDP Query User{6B9A91EB-E77A-4D67-8C5E-C587675C3738}C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [TCP Query User{A6A4BE3F-055A-4E74-9F79-25CA5C057F2A}C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [{F8479CB1-9240-4597-9F6C-3AA6502A5DF2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wesnoth\wesnoth.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [{EAACF3A6-9406-4783-B6DB-D47AAB3D2F5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wesnoth\wesnoth.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [UDP Query User{E05CDB58-6066-49AD-B2A5-DB398100D677}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{5A1808EA-EFA8-418C-BDD4-85E0C6CC0C83}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5BCC8CD8-A1F3-4895-B7DD-C6B47D5FFDA8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]
FirewallRules: [{1D6E17B1-46D3-4F6D-93A5-FD1D52799B8E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]
FirewallRules: [UDP Query User{D69E49A9-4CF7-45A4-9034-1EEA9635B10F}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [TCP Query User{7B34B8B8-274A-4BFD-965A-2402D12C7B5C}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [{047930F6-B9F9-4245-A04F-632F39237DEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\LaunchPad\LaunchPad.exe () [File not signed]
FirewallRules: [{DD6D4C52-21EA-4999-8CD8-4452AF234D95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\LaunchPad\LaunchPad.exe () [File not signed]
FirewallRules: [UDP Query User{530263E2-3017-43E5-9DA0-46563A985EE0}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{67EA6A3C-61A7-43E3-A032-EDBC5522A737}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{D53E64E2-B7AB-48B4-A9B2-17BBCA9E4534}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6B0E00E0-B1E4-467C-92CC-0E16FC6C130C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6432FEB7-E7C2-4C22-9289-2F55325E9DF4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe () [File not signed]
FirewallRules: [{50A89063-37F3-4C20-836D-1D690289419C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe () [File not signed]
FirewallRules: [{A9F278DD-83D6-4C2A-98BC-D26E25EE41D4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe () [File not signed]
FirewallRules: [{FB0C1A4C-40C7-41CD-B0F7-A255BB614BAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe () [File not signed]
FirewallRules: [{C1AA6FCF-E438-4D6D-82A2-93CB1CDF3626}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F9F0010E-934E-4724-B001-C2E43034B0D7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{DAA94267-6E49-4E24-9888-2026E38AD7B7}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{F15AA6DD-5071-47B4-A4AA-C407E9AA419E}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{B0E09CED-136F-456E-A68B-BB555445DD14}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{112BC802-E014-4A9C-9F36-F91AAE49EB28}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A975B931-BA8F-4F49-AA91-CC1415A95270}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7E4986D1-0D4B-4DAA-A816-D917DA4A5312}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{A2E0ED1A-2AA9-4763-9B67-FB981B5ED722}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{C2D52735-0A15-4686-A6D9-476F87E485F2}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{05DD00F1-9D66-4674-8878-BC2E5A5AD516}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stray\Stray.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{37C85C1E-E23F-4681-918C-657B6E838D5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stray\Stray.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{5BEC6CBD-8B5D-48DC-95E6-87BCB542F179}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victoria 3\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{2DDDE997-7794-4A48-B269-38E3D37DC863}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victoria 3\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [TCP Query User{E7DC222A-D61B-4624-9A7D-40DB739F0EFD}C:\program files\java\jre-1.8\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre-1.8\bin\jp2launcher.exe (Oracle America, Inc. -> Oracle Corporation)
FirewallRules: [UDP Query User{5C17CEB2-2520-4713-8EB7-3D237CFA921E}C:\program files\java\jre-1.8\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre-1.8\bin\jp2launcher.exe (Oracle America, Inc. -> Oracle Corporation)
FirewallRules: [{356A1653-7050-4368-B167-E0B09A3400F2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6EDCB5BD-AB36-4F55-BAAF-26C4415DAE89}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8B37BAC2-6734-4204-8040-55782405D80B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2CBFCC14-F2CD-4EB4-9E1A-730EA129007C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A2B20DF7-E428-4F9A-B5C7-BD6266D7D875}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\116.0.1938.69\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{42FA4815-150D-48AD-BD2D-9FDCA03F4090}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{E9CC5512-713B-45FC-9DED-B54B8EB40994}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{263656B3-B840-4C7F-9522-1091411875E0}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
==================== Restore Points =========================
05-09-2023 10:56:02 Scheduled Checkpoint
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (09/07/2023 11:22:14 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/07/2023 11:22:14 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/07/2023 11:21:10 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
Error: (09/07/2023 11:21:05 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/07/2023 11:21:05 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/06/2023 10:40:44 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
Error: (09/05/2023 07:59:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 117.0.0.8636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 1144
Čas spuštění: 01d9dfed5b6f3747
Čas ukončení: 10
Cesta k aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
ID hlášení: ec06e4a5-e90f-4039-82c6-a2feb23b251d
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
Error: (09/05/2023 12:45:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 117.0.0.8636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 45d4
Čas spuštění: 01d9dfd552cdffd1
Čas ukončení: 52
Cesta k aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
ID hlášení: 6e5498cc-ebdd-467c-919c-094a78cdeb60
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
System errors:
=============
Error: (09/06/2023 12:18:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba RunSwUSB byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba DbxSvc byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restart the service.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba AMD External Events Utility byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CdRom Device Arbiter service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Realtek Audio Universal Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restart the service.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba LGHUB Updater Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restart the service.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Microsoft Update Health Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:17:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Adobe Acrobat Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
CodeIntegrity:
===============
Date: 2023-09-04 11:48:45
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\aswVmm.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2023-09-01 09:54:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. A.40 12/21/2018
Motherboard: Micro-Star International Co., Ltd B450-A PRO (MS-7B86)
Processor: AMD Ryzen 5 1600 Six-Core Processor
Percentage of memory in use: 74%
Total physical RAM: 8146.03 MB
Available physical RAM: 2087.63 MB
Total Virtual: 25554.03 MB
Available Virtual: 15825.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.55 GB) (Free:49.22 GB) (Model: KINGSTON SA400S37240G) NTFS
Drive d: (Aomame) (Fixed) (Total:931.51 GB) (Free:216.45 GB) (Model: WDC WD10EZEX-00KUWA0) NTFS ==>[system with boot components (obtained from drive)]
\\?\Volume{995ac56f-d31b-4147-aa47-06f78b63de48}\ (Recovery) (Fixed) (Total:0.29 GB) (Free:0.28 GB) NTFS
\\?\Volume{c0c331f3-d9e6-42e3-be93-d2a300006443}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{e026aab8-6a75-4995-a205-024e15807912}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: F41191F4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2023
Ran by Krystof (administrator) on AYUMI (Micro-Star International Co., Ltd MS-7B86) (07-09-2023 11:20:18)
Running from C:\Users\Krystof\Desktop\FRST64.exe
Loaded Profiles: Krystof
Platform: Microsoft Windows 10 Education Version 22H2 19045.3324 (X64) Language: Angličtina (Spojené státy) -> Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\Install\{1F3C00C0-0E1B-472B-A51B-134F10A844E2}\DropboxClient_182.4.6427.x64.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\116.0.1938.69\identity_helper.exe
(C:\Program Files\AMD\CNext\CNext\cncmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Program Files\AVAST Software\Avast\AvLaunch.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe ->) (The CefSharp Authors) [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\CefSharp.BrowserSubprocess.exe
(DeepL SE -> DeepL SE) C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvLaunch.exe
(explorer.exe ->) (CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
(explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <9>
(explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <7>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(spool\drivers\x64\3\CNAP3LAK.EXE ->) (CANON INC. -> CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABISWD.EXE
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotification.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.3266_none_7e25389a7c7bcadb\TiWorker.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [256408 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [878368 2019-06-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CNAP3 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-14] (CANON INC. -> CANON INC.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11559648 2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [f.lux] => C:\Users\Krystof\AppData\Local\FluxSoftware\Flux\flux.exe [1525880 2023-05-18] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [44161792 2023-09-01] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [Microsoft Edge Update] => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\MicrosoftEdgeUpdateCore.exe [252864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41584544 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7660504 2023-08-19] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Run: [MicrosoftEdgeAutoLaunch_65F3B7E6AC9A17B9E7C35427ADD03530] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4108328 2023-08-31] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\Canon MFNP Port: C:\WINDOWS\system32\CNCENPM6.dll [152064 2013-01-31] (CANON INC.) [File not signed]
HKLM\...\Print\Monitors\CNAP3 Monitor: C:\WINDOWS\system32\CNAP3SMD.DLL [1470464 2014-11-28] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\116.0.5845.142\Installer\chrmstp.exe [2023-09-07] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
Startup: C:\Users\Krystof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2023-03-16]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {35F86DAD-7542-401B-8DD5-421A1A6F5930} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564152 2023-04-03] (Adobe Inc. -> Adobe Inc.)
Task: {84703626-8800-45B8-9AEA-DD297FAF8C0F} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [1072056 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {68FFFE57-1AFC-4FB4-9894-0D3ED3A2C4BE} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {2030CA79-843C-4707-BD1D-869D74DDC391} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {81A6D09E-7183-4B95-9B2A-447578D500E6} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183224 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {62470DB5-4D67-4834-8995-F3B5E5D806F4} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4947352 2023-09-01] (Avast Software s.r.o. -> AVAST Software)
Task: {0C85F9D4-63D0-4ADC-ABA2-BF0466B92263} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2144664 2023-08-03] (Avast Software s.r.o. -> Avast Software)
Task: {0024ACE0-8A24-406B-B959-48A2BC4BF445} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {BC6399BD-9943-448E-B43F-A76483A21321} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "c44bda99-9960-4fc2-a12b-c6ca5e143915" --version "6.15.10623" --silent
Task: {6CC92F25-C287-4243-868A-9356E138A666} - System32\Tasks\CCleanerSkipUAC - Krystof => C:\Program Files\CCleaner\CCleaner.exe [34687904 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {8DC1380A-7A06-4FD6-96B5-51A286714F7D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {5992B769-FBEF-4364-9005-DCCF75E38554} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C78AD76B-FA2E-4B00-92DF-19B16015C7D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {932BA0AA-5BDB-479E-AA58-35B664875D9F} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3422260876-3162899715-691115348-1001Core => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {74FB8026-64AE-4580-A13E-44737483BDAC} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3422260876-3162899715-691115348-1001UA => C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {F844F8EC-151C-4568-B6BF-4D6F86DAF09C} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [954808 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {031363C1-0C68-4595-A0C1-A3BA5ECBF40B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [675232 2023-09-01] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {F0C6E601-57B1-4DA7-9E6F-D537AA367A51} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [722336 2023-09-01] (Mozilla Corporation -> Mozilla Foundation)
Task: {8EE5CEA6-5887-4888-8AA3-4A6E8E25DAD7} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [56760 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {391D7222-5426-4E12-BFD4-6B927125D285} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [291768 2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6d769b74-6e1e-4899-ac5e-d70eb3329165}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{746ce733-a2ca-45d7-9530-a11367b5a0b5}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default [2023-09-07]
Edge Extension: (Dokumenty Google offline) - C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-04]
Edge Extension: (Edge relevant text changes) - C:\Users\Krystof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-04]
FireFox:
========
FF DefaultProfile: u0b20blw.default
FF ProfilePath: C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\u0b20blw.default [2019-09-04]
FF NewTab: Mozilla\Firefox\Profiles\u0b20blw.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__190805
FF ProfilePath: C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release [2023-09-06]
FF NewTab: Mozilla\Firefox\Profiles\ip576ig8.default-release -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10420__190805
FF Session Restore: Mozilla\Firefox\Profiles\ip576ig8.default-release -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\ip576ig8.default-release -> hxxps://meet.google.com; hxxps://translations.spaceos.io
FF Extension: (Facebook Container) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\@contain-facebook.xpi [2023-07-20]
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2021-06-19]
FF Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\firefox@ghostery.com.xpi [2023-08-03]
FF Extension: (HTTPS Everywhere) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\https-everywhere@eff.org.xpi [2021-07-14]
FF Extension: (Reddit Enhancement Suite) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2023-04-11]
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\marcoagpinto@mail.telepac.pt.xpi [2023-09-01]
FF Extension: (DownThemAll!) - C:\Users\Krystof\AppData\Roaming\Mozilla\Firefox\Profiles\ip576ig8.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2023-08-28]
FF Plugin: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-08-19] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3422260876-3162899715-691115348-1001: @asperasoft.com/AsperaConnect -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\npasperaweb_3.9.6.173386.dll [2019-07-24] (International Business Machines Corporation -> Aspera, Inc.)
Chrome:
=======
CHR Profile: C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default [2023-09-04]
CHR Notifications: Default -> hxxps://lichess.org; hxxps://translations.spaceos.io
CHR Extension: (Dokumenty Google offline) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-07-21]
CHR Extension: (IBM Aspera Connect) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpoecbkildamnnchnlgoboipnblgikpn [2022-11-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Krystof\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-23]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-04-03] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8901016 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [586136 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [587160 2023-08-03] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-05-20] (Avast Software s.r.o. -> AVAST Software)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1074080 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2021-11-28] (GuinpinSoft inc) [File not signed]
R2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-09-06] (Dropbox, Inc -> Dropbox, Inc.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10676992 2023-09-01] (Logitech Inc -> Logitech, Inc.)
S3 memoQauhlp90; C:\Program Files\memoQ\memoQ-9\MemoQ.AutoUpdate.exe [417792 2019-07-05] (Kilgray) [File not signed]
S2 RunSwUSB; C:\Windows\runSW.exe [59232 2019-08-19] (Realtek Semiconductor Corp. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [402200 2023-08-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [35344 2022-09-09] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV19; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [43336 2022-11-30] (Advanced Micro Devices INC. -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_1a1a381a2c0e293c\amdsafd.sys [113056 2022-08-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0390451.inf_amd64_39377efdd62734d1\B390182\amdkmdag.sys [94467928 2023-04-06] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [59920 2022-05-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [31528 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [238496 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [392880 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297880 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [95960 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [25576 2022-10-13] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39648 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [272576 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [559184 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105248 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80416 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [946160 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [705480 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [212632 2023-08-03] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319568 2023-09-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
S3 athur; C:\WINDOWS\System32\drivers\athuwbx.sys [2702336 2013-11-20] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys [33784 2021-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2022-09-24] (Logitech Inc -> Logitech)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [8231912 2019-12-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2020-01-10] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-09-07 11:22 - 2023-09-07 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-09-06 12:17 - 2023-09-06 12:17 - 000000000 ____D C:\AdwCleaner
2023-09-06 12:16 - 2023-09-06 12:16 - 008791352 _____ (Malwarebytes) C:\Users\Krystof\Desktop\adwcleaner.exe
2023-09-06 10:11 - 2023-09-06 10:25 - 000060421 _____ C:\Users\Krystof\Desktop\Addition.txt
2023-09-06 10:08 - 2023-09-07 11:21 - 000028616 _____ C:\Users\Krystof\Desktop\FRST.txt
2023-09-06 10:08 - 2023-09-07 11:21 - 000000000 ____D C:\FRST
2023-09-06 10:07 - 2023-09-06 10:07 - 002382336 _____ (Farbar) C:\Users\Krystof\Desktop\FRST64.exe
2023-09-06 00:17 - 2023-09-06 00:17 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\G HUB
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2023-09-02 12:46 - 2023-09-02 12:46 - 000000000 ____D C:\Program Files\LGHUB
2023-09-01 09:55 - 2023-09-01 09:55 - 000313240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2023-09-01 08:51 - 2023-09-01 08:51 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-29 15:52 - 2023-08-29 15:52 - 000567988 _____ C:\Users\Krystof\Desktop\komunikační situace.pdf
2023-08-28 09:09 - 2023-08-28 09:09 - 000000000 ____D C:\Users\Krystof\AppData\Local\DeepL_SE
2023-08-17 14:22 - 2023-08-17 14:22 - 003611019 _____ C:\Users\Krystof\Downloads\Validace_a_varianty_moznych_uprav_systemu_financovani_preneseneho_vykonu_statni_spravy.pdf
2023-08-12 12:21 - 2023-08-12 12:21 - 000000000 ___HD C:\$WinREAgent
2023-08-09 12:29 - 2023-08-09 12:29 - 000166982 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24-3.pdf
2023-08-09 12:29 - 2023-08-09 12:29 - 000166982 _____ C:\Users\Krystof\Desktop\Propedeutika ZS 2023_24-3.pdf
2023-08-09 12:21 - 2023-08-09 12:21 - 000166886 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24-1.pdf
2023-08-09 12:20 - 2023-08-09 12:20 - 000167044 _____ C:\Users\Krystof\Downloads\Propedeutika ZS 2023_24.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-09-07 11:22 - 2019-08-03 23:13 - 000000000 ____D C:\Users\Krystof\AppData\Local\Dropbox
2023-09-07 11:21 - 2022-01-28 04:29 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-09-07 11:21 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-09-07 11:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-09-07 11:21 - 2019-08-03 23:13 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Dropbox
2023-09-07 11:21 - 2019-08-03 23:13 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-09-07 11:21 - 2019-08-03 23:10 - 000000000 ____D C:\Program Files (x86)\Google
2023-09-07 11:19 - 2023-07-05 16:47 - 000003082 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2023-09-07 11:19 - 2023-01-03 17:02 - 000003102 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher
2023-09-07 11:19 - 2022-02-06 02:24 - 000000000 ____D C:\Users\Krystof\AppData\Local\LGHUB
2023-09-07 11:18 - 2019-08-03 23:10 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-09-06 13:59 - 2020-02-06 13:15 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Signal
2023-09-06 13:58 - 2022-01-27 19:35 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-09-06 13:57 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-09-06 12:08 - 2019-08-03 23:12 - 000000000 ____D C:\Users\Krystof\AppData\Local\Spotify
2023-09-06 12:07 - 2019-08-03 23:12 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Spotify
2023-09-06 11:44 - 2023-01-03 17:00 - 000002672 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2023-09-06 11:44 - 2023-01-03 16:59 - 000002402 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask
2023-09-06 11:44 - 2023-01-03 16:59 - 000002194 _____ C:\WINDOWS\system32\Tasks\StartCN
2023-09-06 11:44 - 2023-01-03 16:59 - 000002114 _____ C:\WINDOWS\system32\Tasks\StartDVR
2023-09-06 11:44 - 2022-09-29 10:04 - 000003046 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2023-09-06 11:44 - 2022-09-29 10:04 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-09-06 11:44 - 2022-08-04 13:06 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-09-06 11:44 - 2022-08-04 13:06 - 000002256 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Krystof
2023-09-06 11:44 - 2022-01-27 19:43 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-09-06 11:44 - 2022-01-27 19:43 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-09-06 11:44 - 2022-01-27 19:43 - 000003456 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2023-09-06 11:44 - 2022-01-27 19:43 - 000003410 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-09-06 11:44 - 2022-01-27 19:43 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-09-06 11:44 - 2022-01-27 19:43 - 000003232 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2023-09-06 11:44 - 2022-01-27 19:43 - 000003186 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-09-06 11:44 - 2022-01-27 19:43 - 000002622 _____ C:\WINDOWS\system32\Tasks\AMD ThankingURL
2023-09-06 11:44 - 2022-01-27 19:43 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2023-09-06 11:44 - 2019-08-03 23:13 - 000000942 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2023-09-06 11:44 - 2019-08-03 23:13 - 000000938 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2023-09-06 10:41 - 2023-02-28 10:06 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\DeepL_SE
2023-09-06 10:12 - 2021-06-05 12:00 - 000000000 ____D C:\Users\Krystof\AppData\Local\Avast Software
2023-09-05 18:41 - 2019-08-04 00:56 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Word
2023-09-05 10:50 - 2019-08-05 18:42 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Excel
2023-09-04 15:44 - 2019-08-04 14:06 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\vlc
2023-09-04 15:22 - 2019-08-03 23:07 - 000000000 ____D C:\Users\Krystof\AppData\Local\D3DSCache
2023-09-04 12:48 - 2019-08-03 23:55 - 000000000 ____D C:\Users\Krystof\AppData\Local\CrashDumps
2023-09-02 17:17 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-09-02 12:46 - 2022-02-06 02:24 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\LGHUB
2023-09-02 12:46 - 2020-08-24 09:26 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-09-02 12:44 - 2020-10-02 16:56 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-09-01 15:21 - 2019-08-03 23:09 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-09-01 09:55 - 2022-01-27 19:43 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2023-09-01 09:55 - 2020-10-14 11:33 - 000272576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2023-09-01 09:55 - 2020-04-14 20:36 - 000559184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2023-09-01 09:55 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-09-01 09:55 - 2019-08-03 23:18 - 000946160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000705480 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000392880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000319568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000297880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000238496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000105248 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000095960 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000080416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000039648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2023-09-01 09:55 - 2019-08-03 23:18 - 000031528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2023-08-30 20:34 - 2020-03-17 01:11 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\discord
2023-08-30 20:32 - 2020-03-17 01:11 - 000000000 ____D C:\Users\Krystof\AppData\Local\Discord
2023-08-29 12:40 - 2021-03-14 19:02 - 000000000 ____D C:\Users\Krystof\Calibre Library
2023-08-29 09:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ModemLogs
2023-08-27 21:09 - 2022-10-13 13:13 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-08-27 21:07 - 2023-01-03 17:09 - 000000000 ____D C:\Users\Krystof\AppData\Local\AMD_Common
2023-08-27 21:05 - 2022-08-04 13:06 - 000000000 ____D C:\Program Files\CCleaner
2023-08-27 21:04 - 2019-08-03 22:41 - 000000000 ____D C:\ProgramData\Packages
2023-08-27 21:04 - 2019-08-03 22:25 - 000000000 ____D C:\Users\Krystof\AppData\Local\Packages
2023-08-17 21:27 - 2019-08-03 23:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-08-17 11:14 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-08-16 10:07 - 2022-01-28 04:15 - 000716710 _____ C:\WINDOWS\system32\perfh005.dat
2023-08-16 10:07 - 2022-01-28 04:15 - 000144908 _____ C:\WINDOWS\system32\perfc005.dat
2023-08-16 10:07 - 2022-01-27 19:45 - 001693136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-08-16 10:02 - 2022-01-27 19:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-08-14 14:32 - 2019-09-26 13:02 - 000000128 _____ C:\Users\Krystof\AppData\Roaming\winscp.rnd
2023-08-14 12:29 - 2019-08-04 00:56 - 000000000 ____D C:\Users\Krystof\AppData\Roaming\Microsoft\Office
2023-08-13 10:10 - 2022-01-27 19:35 - 000374592 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-08-13 10:10 - 2019-08-03 23:17 - 000000000 ____D C:\ProgramData\AVAST Software
2023-08-12 18:08 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-08-12 18:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2023-08-12 18:08 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-08-12 18:08 - 2019-08-03 22:37 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2023-08-12 12:33 - 2022-01-27 19:38 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-08-12 12:20 - 2019-08-03 22:49 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-08-12 12:17 - 2019-08-03 22:49 - 175983240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-08-12 12:17 - 2019-08-03 22:38 - 000000000 ____D C:\ProgramData\Package Cache
==================== Files in the root of some directories ========
2021-11-28 15:30 - 2021-11-28 17:35 - 000000559 _____ () C:\Users\Krystof\AppData\Roaming\AutoGK.ini
2019-09-26 13:02 - 2023-08-14 14:32 - 000000128 _____ () C:\Users\Krystof\AppData\Roaming\winscp.rnd
2020-10-20 11:31 - 2020-10-20 11:31 - 000003584 _____ () C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-10-05 12:20 - 2021-02-14 19:40 - 000002558 _____ () C:\Users\Krystof\AppData\Local\krita-sysinfo.log
2020-10-05 12:20 - 2021-02-14 19:40 - 000694936 _____ () C:\Users\Krystof\AppData\Local\krita.log
2021-02-14 19:40 - 2021-02-14 19:40 - 000000039 _____ () C:\Users\Krystof\AppData\Local\kritadisplayrc
2020-10-05 12:20 - 2021-02-14 19:40 - 000020089 _____ () C:\Users\Krystof\AppData\Local\kritarc
2023-08-06 19:11 - 2023-08-06 19:11 - 000000128 _____ () C:\Users\Krystof\AppData\Local\PUTTY.RND
2022-01-15 21:12 - 2022-01-15 21:12 - 000006429 _____ () C:\Users\Krystof\AppData\Local\recently-used.xbel
2022-12-08 12:24 - 2022-12-08 12:24 - 000007606 _____ () C:\Users\Krystof\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2023
Ran by Krystof (07-09-2023 11:22:25)
Running from C:\Users\Krystof\Desktop
Microsoft Windows 10 Education Version 22H2 19045.3324 (X64) (2022-01-27 17:43:16)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3422260876-3162899715-691115348-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3422260876-3162899715-691115348-503 - Limited - Disabled)
Guest (S-1-5-21-3422260876-3162899715-691115348-501 - Limited - Disabled)
Krystof (S-1-5-21-3422260876-3162899715-691115348-1001 - Administrator - Enabled) => C:\Users\Krystof
WDAGUtilityAccount (S-1-5-21-3422260876-3162899715-691115348-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
7-Zip 22.00 (x64 edition) (HKLM\...\{23170F69-40C1-2702-2200-000001000000}) (Version: 22.00.00.0 - Igor Pavlov)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 23.003.20284 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601047}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 22.11.2 - Advanced Micro Devices, Inc.)
ApSIC Xbench 2.9 (HKLM-x32\...\ApSIC Xbench) (Version: 2.9 - ApSIC, S.L.)
Atom (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\atom) (Version: 1.63.1 - GitHub Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 23.8.6078 - Avast Software)
balenaEtcher 1.7.7 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b) (Version: 1.7.7 - Balena Inc.)
Branding64 (HKLM\...\{0DB6E0DC-607A-42C1-A3CE-7567A9F85AF4}) (Version: 1.00.0008 - Advanced Micro Devices, Inc.) Hidden
calibre (HKLM-x32\...\{1E82C046-151D-4210-AF70-B3B8FA2F6B56}) (Version: 5.13.0 - Kovid Goyal)
Canon LBP6230 6240 Uninstaller (HKLM\...\Canon LBP6230 6240) (Version: 6, 3, 1, 0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.15 - Piriform)
CrystalDiskInfo 8.8.9 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.8.9 - Crystal Dew World)
darktable (HKLM\...\darktable) (Version: 3.4.0 - the darktable project)
DeepL (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\https%3a##appdownload.deepl.com#windows#0install#deepl.xml) (Version: - DeepL SE)
Discord (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
DroidCam Client (HKLM-x32\...\DroidCam) (Version: 6.5.2 - DEV47APPS)
Dropbox (HKLM-x32\...\Dropbox) (Version: 182.4.6427 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.761.1 - Dropbox, Inc.) Hidden
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
Epic Games Launcher (HKLM-x32\...\{1D4EB18B-0FEE-444E-B4D1-6F2CFBC363E6}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
f.lux (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Flux) (Version: 4.124 - f.lux Software LLC)
Git version 2.28.0 (HKLM\...\Git_is1) (Version: 2.28.0 - The Git Development Community)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.60.5324 - GOM & Company)
Google Chrome (HKLM\...\{86B1D736-F1F4-3367-9B39-C2E176B68239}) (Version: 116.0.5845.142 - Google LLC)
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.50) (Version: 9.50 - Artifex Software Inc.)
IBM Aspera Connect 3.9.6.173386 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Aspera Connect 3.9.6.173386) (Version: 3.9.6.173386 - IBM Corp.)
IrfanView 4.53 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.53 - Irfan Skiljan)
Java 8 Update 371 (64-bit) (HKLM\...\{71124AE4-039E-4CA4-87B4-2F64180371F0}) (Version: 8.0.3710.11 - Oracle Corporation)
Koala -- A cool tool for web developers (HKLM-x32\...\Koala) (Version: 2.3.0 - koala-app.com)
Krita (x64) 4.3.0 (HKLM\...\Krita_x64) (Version: 4.3.0.0 - Krita Foundation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2023.7.448769 - Logitech)
memoQ 9 (HKLM-x32\...\{AF14E63A-379C-45A0-8ED0-B00DFFADFEA2}_is1) (Version: - Kilgray)
Microsoft .NET Host - 5.0.17 (x86) (HKLM-x32\...\{54DE7EA9-E391-4BD2-A373-3A72A18EBDB5}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.12 (x86) (HKLM-x32\...\{BAA79920-74A8-4B01-BB8A-46949BD4F729}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.17 (x86) (HKLM-x32\...\{AF01038B-6523-4EA7-9D9E-4F1E2927D88B}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x86) (HKLM-x32\...\{2C54E947-8A24-48B6-A06B-D41F9E525697}) (Version: 40.48.30622 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.12 (x86) (HKLM-x32\...\{ddc06d66-ad77-49ce-8acb-58d13265fc1d}) (Version: 5.0.12.30622 - Microsoft Corporation)
Microsoft .NET Runtime - 5.0.17 (x86) (HKLM-x32\...\{59650A2A-3839-46EC-9D9C-6B3B1C743C55}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.21 - Shared Framework (x86) (HKLM-x32\...\{1a1806cd-e853-476a-a6bc-9b6346136c47}) (Version: 6.0.21.23364 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.21 Shared Framework (x86) (HKLM-x32\...\{92776B8E-7A17-39A7-8870-A1D4C35151EB}) (Version: 6.0.21.23364 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 116.0.1938.69 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 116.0.1938.69 - Microsoft Corporation)
Microsoft Office 2010 pro studenty a domácnosti (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Access MUI (Czech) 2010 (HKLM\...\{90140000-0015-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Czech) 2010 (HKLM\...\{90140000-0016-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2010 (HKLM\...\{90140000-00A1-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2010 (HKLM\...\{90140000-001A-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2010 (HKLM\...\{90140000-0018-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2010 (HKLM\...\{90140000-001F-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2010 (HKLM\...\{90140000-001F-041B-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2010 (HKLM\...\{90140000-002C-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2010 (HKLM\...\{90140000-0019-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (Czech) 2010 (HKLM\...\{90140000-0043-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2010 (HKLM\...\{90140000-006E-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2010 (HKLM\...\{90140000-001B-0405-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\OneDriveSetup.exe) (Version: 22.227.1030.0001 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Teams) (Version: 1.5.00.2164 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2953E19B-9F91-4A49-A23B-7E25970A1951}) (Version: 3.73.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30133 (HKLM\...\{E699E009-1C3C-4E50-9B57-2B39F0954C7F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30133 (HKLM\...\{6CD9E9ED-906D-4196-8DC3-F987D2F6615F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29334 (HKLM-x32\...\{14C49FC8-3E9B-4F29-8526-26629B5CF30B}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29334 (HKLM-x32\...\{0D01A812-82A1-481F-8546-8E28E976F8DF}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.50.1 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{098c6ff7-1af1-4c4a-b86f-c60608c98e31}) (Version: 5.0.17.31219 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{0D02D706-44F2-4957-A448-E7259A0B56B9}) (Version: 40.68.31219 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MiKTeX 2.9 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
MKVToolNix 63.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 63.0.0 - Moritz Bunkus)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 117.0 (x64 en-US)) (Version: 117.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.0.1 - Mozilla)
MTG Arena (HKLM\...\{BB4B95C3-A8C1-4978-B66D-8A9E5C71DF85}) (Version: 0.1.3781 - Wizards of the Coast)
Paradox Launcher v2 (HKLM\...\{8C5CF4CE-D589-40B4-A77F-01FD64602C50}) (Version: 2.4.0 - Paradox Interactive)
Python 3.9.0 (64-bit) (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{a2a37ca0-8ebd-4d7e-b4b8-e6b1740c2ce0}) (Version: 3.9.150.0 - Python Software Foundation)
Python 3.9.0 Add to Path (64-bit) (HKLM\...\{4F5E962C-96E9-45B9-8F14-9A91748981C6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Core Interpreter (64-bit) (HKLM\...\{92F322B1-D69A-43D1-82B4-24ADEBE5C650}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Development Libraries (64-bit) (HKLM\...\{E73FE192-7766-49FA-B28A-32F700D98A15}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Documentation (64-bit) (HKLM\...\{35E94198-B9F1-4D1E-A869-636AD5E6BCA8}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Executables (64-bit) (HKLM\...\{A9F718BA-8B5F-4AE7-ADDA-EFFF431948DB}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 pip Bootstrap (64-bit) (HKLM\...\{27FF09D8-6DE6-4F63-A3DD-8758D615D543}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Standard Library (64-bit) (HKLM\...\{42480EE5-670F-4AF3-A619-2E761A398340}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Tcl/Tk Support (64-bit) (HKLM\...\{4460A893-EFF6-4B33-BF21-BAA2159F57E6}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Test Suite (64-bit) (HKLM\...\{9141E990-BD45-4F42-BB32-B3012969355D}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python 3.9.0 Utility Scripts (64-bit) (HKLM\...\{35DC2DFB-0AEA-4DC2-AFA5-4EA2D2612B51}) (Version: 3.9.150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{E45E56A4-FCDD-4C4A-966A-4FB81C932219}) (Version: 3.9.7217.0 - Python Software Foundation)
QCAD Trial 3.27.9 (HKLM\...\{1C2CDCF8-167B-41F3-901D-A20DD4ED0432}) (Version: 3.27.9 - RibbonSoft GmbH)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8720.1 - Realtek Semiconductor Corp.)
RyzenMasterSDK (HKLM\...\{85A2A688-4A95-4298-9FEC-F18F42B8EB7E}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Scribus 1.4.8 (HKLM-x32\...\Scribus 1.4.8) (Version: 1.4.8 - The Scribus Team)
Scribus 1.5.8 (64bit) (HKLM\...\Scribus 1.5.8) (Version: 1.5.8 - The Scribus Team)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0015-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0016-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0018-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0019-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001A-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001B-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0405-1000-0000000FF1CE}_Office14.SingleImage_{235F521F-C627-4957-A641-C4C161F78531}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.SingleImage_{EE3A99C9-FD8F-4923-9F82-27365DA4B873}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.SingleImage_{C814F7D9-CE9D-45AA-BA7C-88BDD0E1EB7C}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-041B-1000-0000000FF1CE}_Office14.SingleImage_{2E7C03CB-FE0A-4B95-BA37-742CD596760C}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-002C-0405-1000-0000000FF1CE}_Office14.SingleImage_{FF4FCFC2-4935-49E4-B35E-5FCF7343412B}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{F3FAAB68-7697-4B1F-A23A-72312565AEAB}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0405-1000-0000000FF1CE}_Office14.SingleImage_{62E2481E-63BB-4481-A0CE-071D6D663B1B}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-006E-0405-1000-0000000FF1CE}_Office14.SingleImage_{BFFA0FE1-0823-4382-9DD3-49DA02375BBA}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-00A1-0405-1000-0000000FF1CE}_Office14.SingleImage_{0D84952B-2B1D-459C-9173-D3B033D58C2F}) (Version: - Microsoft) Hidden
Signal 1.31.0 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{7d96caee-06e6-597c-9f2f-c7bb2e0948b4}) (Version: 1.31.0 - Open Whisper Systems)
Signal 6.29.1 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 6.29.1 - Signal Messenger, LLC)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\Spotify) (Version: 1.2.19.941.gbf202593 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellarium 0.19.3.1 (HKLM\...\Stellarium_is1) (Version: 0.19.3.1 - Stellarium team)
Subtitle Edit 3.6.7 (HKLM\...\SubtitleEdit_is1) (Version: 3.6.7.0 - Nikse)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.0 - TeamSpeak Systems GmbH)
Telegram Desktop version 2.6.1 (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.6.1 - Telegram FZ-LLC)
TeXstudio - TeXstudio is a fully featured LaTeX editor. (HKLM\...\TeXstudio) (Version: 4.2.3 - Benito van der Zander)
TeXstudio - TeXstudio is a fully featured LaTeX editor. (HKLM-x32\...\TeXstudio) (Version: 2.12.14 - Benito van der Zander)
TP-Link Archer T3U Plus Driver (HKLM-x32\...\{C93FD3E7-E450-46ED-B2B2-6F86B479BDBE}) (Version: 2.1.0 - TP-Link)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 87.0 - Ubisoft)
Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
VobSub v2.23 (Remove Only) (HKLM-x32\...\VobSub) (Version: - )
WinSCP 5.17.1 (HKLM-x32\...\winscp3_is1) (Version: 5.17.1 - Martin Prikryl)
XMedia Recode 64bit verze 3.5.4.5 (HKLM\...\{D31E6E69-4C6A-42CC-926F-CC7B186864EB}_is1) (Version: 3.5.4.5 - XMedia Recode 64bit)
XviD MPEG4 Video Codec (remove only) (HKLM-x32\...\XviD MPEG4 Video Codec) (Version: - )
Zoom (HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\ZoomUMX) (Version: 5.3.2 (53291.1011) - Zoom Video Communications, Inc.)
Packages:
=========
Canon Office Printer Utility -> C:\Program Files\WindowsApps\34791E63.CanonOfficePrinterUtility_12.7.0.0_x64__6e5tt8cgb93ep [2019-08-04] (Canon Inc.)
Cortana -> C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2308.1005.0_x64__8wekyb3d8bbwe [2023-08-11] (Microsoft Corporation)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-01-07] (Microsoft Corporation)
Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2023-09-07] (Dropbox Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-01-27] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-01-27] (Microsoft Corporation) [MS Ad]
Polarr Pro Photo Editor -> C:\Program Files\WindowsApps\613EBCEA.PolarrPhotoEditorAcademicEdition_5.11.5.0_x64__jb41c8remg0x2 [2023-06-26] (Polarr)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.181.0_x64__dt26b99r8h8gj [2019-08-03] (Realtek Semiconductor Corp)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.17.8180.0_x64__8wekyb3d8bbwe [2023-08-27] (Microsoft Studios) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{04A9E854-6F47-4F37-8A10-F896717F0329}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\x64\connectloader.dll (International Business Machines Corporation -> )
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21348.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B}\InprocServer32 -> C:\WINDOWS\System32\mscomct2.ocx => No File
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{AD17B774-7F87-4141-BB9C-2AEE3841DC4E}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Programs\Aspera\Aspera Connect\bin\x64\connectloader.dll (International Business Machines Corporation -> )
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_IA5ZAWY5757G2CCVTIIUZMVSBYDGFXZAP22TDTFSS74QEP3GNCDA\DeepL.exe (DeepL SE -> DeepL SE)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Krystof\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{D1CE12B0-2529-4B24-BE8E-189735EA0DC1}\InprocServer32 -> C:\Users\Krystof\AppData\Local\Microsoft\EdgeUpdate\1.3.165.21\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Krystof\Documents\Dropbox [2019-08-20 13:30]
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AMemoQContextMenu] -> {E81E9F62-F62B-49BE-8F07-FA55E1C231EE} => C:\Program Files\memoQ\memoQ-9\MemoQContextMenu.dll [2019-03-05] (Kilgray) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => D:\software\JR2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers1: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => D:\software\JR2010\JRcm64.dll [2010-09-06] () [File not signed]
ContextMenuHandlers1: [XbShellEx] -> {127EA5BF-BA08-454E-BA6E-5484096F4B11} => C:\Program Files (x86)\ApSIC\Xbench\XbShellEx-1884678734.dll [2020-09-27] (APSIC SL -> )
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [XbShellEx] -> {127EA5BF-BA08-454E-BA6E-5484096F4B11} => C:\Program Files (x86)\ApSIC\Xbench\XbShellEx-1884678734.dll [2020-09-27] (APSIC SL -> )
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2022-11-30] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.64.0.dll [2023-08-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-06-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-08-03] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6-x32: [JRcm] -> {C20B9A7B-ED5B-4CEB-B2A6-F1F62E99C539} => D:\software\JR2010\JRcm.dll [2010-08-18] () [File not signed]
ContextMenuHandlers6: [JRcm64] -> {013BF2A8-A4B1-11DF-A865-F509E0D72085} => D:\software\JR2010\JRcm64.dll [2010-09-06] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [179200 2009-01-25] () [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2023-03-15 10:09 - 2022-08-21 03:44 - 001160192 _____ () [File not signed] [File is in use] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\CefSharp.BrowserSubprocess.Core.dll
2020-09-12 22:02 - 2020-09-12 22:02 - 000160768 _____ () [File not signed] C:\Program Files (x86)\DroidCam\lib\DroidCamFilter64.ax
2023-03-15 10:10 - 2022-08-19 09:38 - 175591424 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libcef.dll
2023-03-15 10:10 - 2022-08-19 08:11 - 000442880 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libEGL.dll
2023-03-15 10:10 - 2022-08-19 08:10 - 006480384 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\libGLESv2.dll
2023-03-15 10:10 - 2022-08-19 08:07 - 004077568 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\vk_swiftshader.dll
2023-03-15 10:10 - 2022-08-19 08:10 - 000828928 _____ () [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\vulkan-1.dll
2019-10-10 12:34 - 2010-09-06 19:21 - 000538435 _____ () [File not signed] D:\software\JR2010\JRcm64.dll
2019-08-05 23:31 - 2013-01-31 18:21 - 000152064 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNCENPM6.dll
2022-06-15 18:00 - 2022-06-15 18:00 - 000094720 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2019-08-04 00:16 - 2019-03-05 11:48 - 000441856 _____ (Kilgray) [File not signed] C:\Program Files\memoQ\memoQ-9\MemoQContextMenu.dll
2023-03-15 10:10 - 2022-08-19 08:16 - 001231872 _____ (The Chromium Authors) [File not signed] C:\Users\Krystof\AppData\Local\0install.net\implementations\sha256new_WNVUT4A7COIHUPNX3HWQQZD5BU3GEPFRMM3BLVJW4ICRXIJEKBJQ\chrome_elf.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;C:\Program Files\Git\cmd;C:\Program Files (x86)\Calibre2\;D:\software\lineageOS\platform-tools;C:\Program Files (x86)\dotnet\
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\Control Panel\Desktop\\Wallpaper -> c:\users\krystof\appdata\roaming\mozilla\firefox\desktop background.bmp
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "Microsoft Edge Update"
HKU\S-1-5-21-3422260876-3162899715-691115348-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{4B568FC7-B558-4270-97E3-8DD7BFB8F0C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Babble Royale\BabbleRoyale.exe () [File not signed]
FirewallRules: [{FD62F405-72CC-43E1-9737-6874612A61CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Babble Royale\BabbleRoyale.exe () [File not signed]
FirewallRules: [{B86ACD13-A16A-4FF0-BC48-665EB4CF5B7A}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{0893D8CD-C2D6-4F9B-A767-D740C70EA0D1}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [UDP Query User{6465A96A-C8D8-47AD-992C-2ECA50808F1A}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{933A691F-DDA6-4EBE-B319-393CF929BBDE}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{0DD90331-A92A-4B6E-BF9F-049B1A8E1BFF}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )
FirewallRules: [TCP Query User{F73B48AB-5CCB-4C0A-9E81-BA741F9A68A5}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )
FirewallRules: [{91D2A3A1-0EE0-4815-B03B-3F28BDF2FA84}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{01FBCD9F-8C93-447A-980B-928B4391D82B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OpenTTD\openttd.exe (OpenTTD Distribution LTD -> OpenTTD Development Team)
FirewallRules: [{031110D1-5E5A-4474-B9F8-B46A5FCC2D26}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{6B330F18-35CF-4BEB-8060-25836866B930}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)
FirewallRules: [{57C9FC6F-7F5C-4BE8-A0E2-319B3734A78A}] => (Allow) C:\Users\Krystof\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [UDP Query User{54B8DEE9-E455-42DB-9953-00353F60F8E2}C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{DB4D3992-9412-4672-8D08-A144C1E63D08}C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\krystof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{4D7C118C-D9CE-4DEF-94FF-52672DD9F5D4}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [TCP Query User{FFFAD18B-D25F-412F-9006-8D1BDB47BC97}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [UDP Query User{6B9A91EB-E77A-4D67-8C5E-C587675C3738}C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [TCP Query User{A6A4BE3F-055A-4E74-9F79-25CA5C057F2A}C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\wesnoth\wesnothd.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [{F8479CB1-9240-4597-9F6C-3AA6502A5DF2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wesnoth\wesnoth.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [{EAACF3A6-9406-4783-B6DB-D47AAB3D2F5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wesnoth\wesnoth.exe (The Battle for Wesnoth Project) [File not signed]
FirewallRules: [UDP Query User{E05CDB58-6066-49AD-B2A5-DB398100D677}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{5A1808EA-EFA8-418C-BDD4-85E0C6CC0C83}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5BCC8CD8-A1F3-4895-B7DD-C6B47D5FFDA8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]
FirewallRules: [{1D6E17B1-46D3-4F6D-93A5-FD1D52799B8E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]
FirewallRules: [UDP Query User{D69E49A9-4CF7-45A4-9034-1EEA9635B10F}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [TCP Query User{7B34B8B8-274A-4BFD-965A-2402D12C7B5C}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe (Valve Corp. -> Firaxis Games) [File not signed]
FirewallRules: [{047930F6-B9F9-4245-A04F-632F39237DEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\LaunchPad\LaunchPad.exe () [File not signed]
FirewallRules: [{DD6D4C52-21EA-4999-8CD8-4452AF234D95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\LaunchPad\LaunchPad.exe () [File not signed]
FirewallRules: [UDP Query User{530263E2-3017-43E5-9DA0-46563A985EE0}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{67EA6A3C-61A7-43E3-A032-EDBC5522A737}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{D53E64E2-B7AB-48B4-A9B2-17BBCA9E4534}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6B0E00E0-B1E4-467C-92CC-0E16FC6C130C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{6432FEB7-E7C2-4C22-9289-2F55325E9DF4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe () [File not signed]
FirewallRules: [{50A89063-37F3-4C20-836D-1D690289419C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe () [File not signed]
FirewallRules: [{A9F278DD-83D6-4C2A-98BC-D26E25EE41D4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe () [File not signed]
FirewallRules: [{FB0C1A4C-40C7-41CD-B0F7-A255BB614BAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe () [File not signed]
FirewallRules: [{C1AA6FCF-E438-4D6D-82A2-93CB1CDF3626}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F9F0010E-934E-4724-B001-C2E43034B0D7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{DAA94267-6E49-4E24-9888-2026E38AD7B7}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{F15AA6DD-5071-47B4-A4AA-C407E9AA419E}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{B0E09CED-136F-456E-A68B-BB555445DD14}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{112BC802-E014-4A9C-9F36-F91AAE49EB28}C:\users\krystof\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\krystof\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A975B931-BA8F-4F49-AA91-CC1415A95270}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7E4986D1-0D4B-4DAA-A816-D917DA4A5312}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{A2E0ED1A-2AA9-4763-9B67-FB981B5ED722}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{C2D52735-0A15-4686-A6D9-476F87E485F2}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{05DD00F1-9D66-4674-8878-BC2E5A5AD516}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stray\Stray.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{37C85C1E-E23F-4681-918C-657B6E838D5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stray\Stray.exe (Epic Games, Inc.) [File not signed]
FirewallRules: [{5BEC6CBD-8B5D-48DC-95E6-87BCB542F179}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victoria 3\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{2DDDE997-7794-4A48-B269-38E3D37DC863}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Victoria 3\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [TCP Query User{E7DC222A-D61B-4624-9A7D-40DB739F0EFD}C:\program files\java\jre-1.8\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre-1.8\bin\jp2launcher.exe (Oracle America, Inc. -> Oracle Corporation)
FirewallRules: [UDP Query User{5C17CEB2-2520-4713-8EB7-3D237CFA921E}C:\program files\java\jre-1.8\bin\jp2launcher.exe] => (Allow) C:\program files\java\jre-1.8\bin\jp2launcher.exe (Oracle America, Inc. -> Oracle Corporation)
FirewallRules: [{356A1653-7050-4368-B167-E0B09A3400F2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6EDCB5BD-AB36-4F55-BAAF-26C4415DAE89}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8B37BAC2-6734-4204-8040-55782405D80B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2CBFCC14-F2CD-4EB4-9E1A-730EA129007C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.102.3211.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A2B20DF7-E428-4F9A-B5C7-BD6266D7D875}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\116.0.1938.69\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{42FA4815-150D-48AD-BD2D-9FDCA03F4090}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{E9CC5512-713B-45FC-9DED-B54B8EB40994}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{263656B3-B840-4C7F-9522-1091411875E0}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
==================== Restore Points =========================
05-09-2023 10:56:02 Scheduled Checkpoint
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (09/07/2023 11:22:14 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/07/2023 11:22:14 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/07/2023 11:21:10 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
Error: (09/07/2023 11:21:05 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/07/2023 11:21:05 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.
Error: (09/06/2023 10:40:44 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2
Error: (09/05/2023 07:59:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 117.0.0.8636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 1144
Čas spuštění: 01d9dfed5b6f3747
Čas ukončení: 10
Cesta k aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
ID hlášení: ec06e4a5-e90f-4039-82c6-a2feb23b251d
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
Error: (09/05/2023 12:45:31 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 117.0.0.8636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 45d4
Čas spuštění: 01d9dfd552cdffd1
Čas ukončení: 52
Cesta k aplikaci: C:\Program Files\Mozilla Firefox\firefox.exe
ID hlášení: 6e5498cc-ebdd-467c-919c-094a78cdeb60
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
System errors:
=============
Error: (09/06/2023 12:18:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba RunSwUSB byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba DbxSvc byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restart the service.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba AMD External Events Utility byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba CdRom Device Arbiter service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Realtek Audio Universal Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restart the service.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba LGHUB Updater Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restart the service.
Error: (09/06/2023 12:18:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Microsoft Update Health Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (09/06/2023 12:17:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Adobe Acrobat Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
CodeIntegrity:
===============
Date: 2023-09-04 11:48:45
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\aswVmm.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2023-09-01 09:54:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. A.40 12/21/2018
Motherboard: Micro-Star International Co., Ltd B450-A PRO (MS-7B86)
Processor: AMD Ryzen 5 1600 Six-Core Processor
Percentage of memory in use: 74%
Total physical RAM: 8146.03 MB
Available physical RAM: 2087.63 MB
Total Virtual: 25554.03 MB
Available Virtual: 15825.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.55 GB) (Free:49.22 GB) (Model: KINGSTON SA400S37240G) NTFS
Drive d: (Aomame) (Fixed) (Total:931.51 GB) (Free:216.45 GB) (Model: WDC WD10EZEX-00KUWA0) NTFS ==>[system with boot components (obtained from drive)]
\\?\Volume{995ac56f-d31b-4147-aa47-06f78b63de48}\ (Recovery) (Fixed) (Total:0.29 GB) (Free:0.28 GB) NTFS
\\?\Volume{c0c331f3-d9e6-42e3-be93-d2a300006443}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{e026aab8-6a75-4995-a205-024e15807912}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: F41191F4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomalení
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {C78AD76B-FA2E-4B00-92DF-19B16015C7D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B}\InprocServer32 -> C:\WINDOWS\System32\mscomct2.ocx => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomalení
Děkuju, vkládám níže:
Fix result of Farbar Recovery Scan Tool (x64) Version: 28-08-2023
Ran by Krystof (07-09-2023 13:40:36) Run:1
Running from C:\Users\Krystof\Desktop
Loaded Profiles: Krystof
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {C78AD76B-FA2E-4B00-92DF-19B16015C7D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B}\InprocServer32 -> C:\WINDOWS\System32\mscomct2.ocx => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe => moved successfully
"C:\WINDOWS\system32\GroupPolicy\Machine" folder move:
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C78AD76B-FA2E-4B00-92DF-19B16015C7D5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C78AD76B-FA2E-4B00-92DF-19B16015C7D5}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B} => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 166787463 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 326385263 B
Windows/system/drivers => -83560247 B
Edge => 18944 B
Chrome => 280418414 B
Firefox => 1474167943 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 45158 B
NetworkService => 45158 B
Krystof => 47354962 B
RecycleBin => 50307 B
EmptyTemp: => 2.1 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 13:42:55 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 28-08-2023
Ran by Krystof (07-09-2023 13:40:36) Run:1
Running from C:\Users\Krystof\Desktop
Loaded Profiles: Krystof
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {C78AD76B-FA2E-4B00-92DF-19B16015C7D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Task: {C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-08-03] (Google Inc -> Google LLC)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
CustomCLSID: HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B}\InprocServer32 -> C:\WINDOWS\System32\mscomct2.ocx => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
C:\Users\Krystof\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe => moved successfully
"C:\WINDOWS\system32\GroupPolicy\Machine" folder move:
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C78AD76B-FA2E-4B00-92DF-19B16015C7D5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C78AD76B-FA2E-4B00-92DF-19B16015C7D5}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6C9DE61-A9A8-41B1-95F3-47CC0EEEA013}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => removed successfully
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
C:\Users\Krystof\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
HKU\S-1-5-21-3422260876-3162899715-691115348-1001_Classes\CLSID\{9914FC2A-D49E-4e44-A607-5D697693120B} => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 166787463 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 326385263 B
Windows/system/drivers => -83560247 B
Edge => 18944 B
Chrome => 280418414 B
Firefox => 1474167943 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 45158 B
NetworkService => 45158 B
Krystof => 47354962 B
RecycleBin => 50307 B
EmptyTemp: => 2.1 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 13:42:55 ====
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomalení
Smazáno. Zrychlil se chod PC?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomalení
Vypadá to dobře, nic nezamrzá. 
Díky moc!
Díky moc!-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomalení
Rádo se stalo!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?