PC je zpomalenej, zase disk 100% a procesor taky
Napsal: 13 kvě 2024 14:45
Minule jak jsme řešili zpomalenej počítáč, jsem win 8 smazal a nainstaloval 10. chvíli to je jelo s menšíními problémi, ale dnes je to úplně strašný, a to tam mám jen pár programů. dnes se Vám chtěl napsat, otevřu Vaši stránku abych stáhnul FRST, stránka se načítá a načítá pak neodpovídá, tak jswem restartoval, restart trval asi 20 min. pořád to psalo příprava windows a nakonec aktualizace. no nic, takže znova stahnul jsem FRst, pustil scanování a ejhle ,, program neodpovídá apk chvíli jel, pak zas neodpovídal, trvalo děsně dlouho asi 12 min a přitom nic nebylo spuštěno. Nerozumím tomu ty win 10 mám jen týden
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
Ran by Radov (administrator) on RADOVAN (Hewlett-Packard HP Pro 3400 Series MT) (13-05-2024 12:39:33)
Running from C:\Users\Radov\Desktop\Viry.cz\FRST64.exe
Loaded Profiles: Radov
Platform: Microsoft Windows 10 Home Version 22H2 19045.4355 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe
(C:\Program Files (x86)\Alcohol Soft\Alcohol 120\lumsdk\net_updater32.exe ->) (Bright Data Ltd -> BrightData Ltd. (certified)) C:\ProgramData\BrightData\33cf4fc2369ae4564618c4aef30ca08d6e194ccb\brightdata.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(services.exe ->) (Alcohol Soft -> Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Bright Data Ltd -> BrightData Ltd. (certified)) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\lumsdk\net_updater32.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(svchost.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\AvBugReport.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21888.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Radov\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TuneupUI.exe] => C:\Program Files\Avast Software\Cleanup\TuneupUI.exe [9831832 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [424344 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\Run: [MicrosoftEdgeAutoLaunch_1E8A3F8A520F78AE9D69B9F5C6F80EDE] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4081208 2024-05-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\MountPoints2: {2fe06317-0bf2-11ef-9093-e8393559b4f9} - "G:\autorun.exe"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\MountPoints2: {2fe0635d-0bf2-11ef-9093-e8393559b4f9} - "H:\autorun.exe"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\MountPoints2: {2fe0635e-0bf2-11ef-9093-e8393559b4f9} - "I:\autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\124.0.6367.201\Installer\chrmstp.exe [2024-05-11] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {027079FC-7148-484D-B92B-97E8C8927892} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [4979096 2024-05-08] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\A (the data entry has 70 more characters).
Task: {2F65C39D-14FE-4A3C-BC59-169AF3AC7BE1} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [7786904 2024-03-14] (Avast Software s.r.o. -> Avast Software)
Task: {C21C6784-C84B-4030-A60E-36574842C6F2} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5201304 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {B9F61914-E0E8-401C-A0DE-5CBDBB317E8F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2348952 2024-05-08] (Avast Software s.r.o. -> Avast Software)
Task: {4474945A-6122-4C4C-9E0F-306915A4DD68} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2021-12-22] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)
Task: {D6DE18E3-E870-4954-ABE2-D13216611794} - System32\Tasks\Driver Booster SkipUAC (Radov) => C:\Program Files (x86)\IObit\Driver Booster\11.1.0\DriverBooster.exe [9044456 2023-10-26] (IObit CO., LTD -> IObit)
Task: {646E07CA-669F-4FD9-8399-7529C6DDE8FE} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\11.1.0\AutoUpdate.exe [2524648 2023-09-28] (IObit CO., LTD -> IObit)
Task: {A32BBC0C-5F79-409F-8954-0500E7C04174} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6462.0{520F679D-FC4D-4DF3-818C-A39FBFAED864} => C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{65991c4d-64a9-48c0-8578-f4335c626e06}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default [2024-05-13]
Edge DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}&sourceid=62744&thru=quicksearch
Edge DefaultSearchKeyword: Default -> seznam
Edge DefaultSuggestURL: Default -> hxxps://suggest.seznam.cz/fulltext_ff?phrase={searchTerms}
Edge Extension: (Seznam Doplněk – Email) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2024-05-12]
Edge Extension: (Dokumenty Google offline) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-05-06]
Edge Extension: (Edge relevant text changes) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-05-06]
Edge Extension: (Netpanel) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno [2024-05-12]
Edge Extension: (Seznam.cz) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2024-05-12]
FireFox:
========
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default [2024-05-13]
CHR Notifications: Default -> hxxps://app.betterme.world; hxxps://sdilej.cz; hxxps://www.facebook.com; hxxps://www.youtube.com
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com","hxxps://www.seznam.cz/?clid=22668"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (Seznam Doplněk – Email) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2024-05-13]
CHR Extension: (Netpanel) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno [2024-05-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-05-06]
CHR Extension: (Seznam.cz) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2024-05-13]
CHR Extension: (Eiffel Tower) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbaibkigenhdcommebegmmmpoolmpip [2024-05-06]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [9152408 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [766872 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2302360 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1203608 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 AxVirtualAHCISrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe [105888 2019-06-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [18727320 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
S2 GoogleUpdaterInternalService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
S2 GoogleUpdaterService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
R2 luminati_net_updater_win_alcohol_soft; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\lumsdk\net_updater32.exe [8400376 2024-05-08] (Bright Data Ltd -> BrightData Ltd. (certified))
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [155904 2024-05-07] (Alcorlink Corp. -> )
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [229944 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [379960 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [292920 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [84536 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [27760 2024-05-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [28728 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [268856 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [548920 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [97848 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [69176 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [935992 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [695864 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [203720 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [306120 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [320728 2021-12-22] (Bluestack Systems, Inc -> Bluestack System Inc.)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2024-05-06] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [20936 2024-05-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [601376 2024-05-06] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105760 2024-05-06] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
Error Reading file: "C:\Users\Radov\Downloads\Nepotvrzeno 889073.crdownload"
Error Reading file: "C:\Users\Radov\Downloads\Alcohol120_trial_2.1.1.2201 (1).exe"
2024-05-13 12:19 - 2024-05-13 12:21 - 000444672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-05-13 09:30 - 2024-05-13 12:39 - 000000000 ____D C:\Users\Radov\Desktop\Viry.cz
2024-05-13 09:06 - 2024-05-13 09:06 - 000000000 ___HD C:\$WinREAgent
2024-05-13 04:34 - 2024-05-13 04:34 - 000000000 ____D C:\Users\Radov\AppData\Local\Backup
2024-05-12 22:17 - 2024-05-12 22:17 - 000088050 _____ C:\Users\Radov\Desktop\návod k pračce.pdf
2024-05-10 15:36 - 2024-05-13 09:38 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\MMC
2024-05-09 23:09 - 2024-05-09 23:09 - 000000034 _____ C:\WINDOWS\WTRDCTM.INI
2024-05-09 23:07 - 2024-05-09 23:08 - 000000000 ____D C:\ProgramData\LangSoft
2024-05-09 23:07 - 2024-05-09 23:07 - 000000636 _____ C:\Users\Radov\Desktop\Slovník.lnk
2024-05-09 23:07 - 2024-05-09 23:07 - 000000636 _____ C:\Users\Radov\Desktop\PC Translator 2010.lnk
2024-05-09 23:07 - 2024-05-09 23:07 - 000000636 _____ C:\Users\Radov\Desktop\DicMan.lnk
2024-05-09 23:07 - 2024-05-09 23:07 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Translator
2024-05-09 23:07 - 2024-05-09 23:07 - 000000000 ____D C:\Users\Public\Documents\Radov
2024-05-09 23:06 - 2024-05-09 23:08 - 000000000 ____D C:\Users\Radov\AppData\Roaming\LangSoft
2024-05-08 22:03 - 2024-05-08 22:03 - 000000000 ____D C:\Users\Radov\AppData\Local\Avast Software
2024-05-08 21:39 - 2024-05-08 21:39 - 000000000 ___HD C:\OneDriveTemp
2024-05-08 21:33 - 2024-05-08 21:33 - 000000000 ____D C:\Users\Radov\AppData\Local\OneDrive
2024-05-08 21:31 - 2024-05-08 21:31 - 000000000 ____D C:\ProgramData\PLUG
2024-05-08 20:50 - 2024-05-08 20:50 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2024-05-08 20:50 - 2024-05-08 20:50 - 000002076 _____ C:\Users\Public\Desktop\Avast Premium Security.lnk
2024-05-08 14:04 - 2024-05-08 14:05 - 000000000 ____D C:\Users\Radov\Documents\PC Translator 2010 CZ
2024-05-08 14:03 - 2024-05-08 14:03 - 000000000 ____D C:\Users\Radov\Documents\Milionář
2024-05-08 14:00 - 2024-05-08 14:00 - 000000000 ____D C:\Users\Radov\Documents\Viry.cz
2024-05-08 13:32 - 2024-05-08 13:37 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-05-08 13:31 - 2024-05-08 13:31 - 000000000 ____D C:\Program Files\RUXIM
2024-05-08 05:04 - 2024-05-13 09:12 - 000007633 _____ C:\Users\Radov\AppData\Local\Resmon.ResmonCfg
2024-05-08 00:12 - 2024-05-08 00:12 - 000000000 ____D C:\WINDOWS\system32\o2
2024-05-08 00:11 - 2024-05-08 00:10 - 000314776 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2024-05-08 00:09 - 2024-05-08 00:09 - 000888600 _____ (Google LLC) C:\Users\Public\Documents\gcapi.dll
2024-05-08 00:08 - 2024-05-08 00:08 - 000264032 _____ (AVAST Software) C:\Users\Radov\Downloads\avast_premium_security_setup_online.exe
2024-05-08 00:07 - 2024-05-13 12:20 - 000000000 ____D C:\ProgramData\Avast Software
2024-05-08 00:07 - 2024-05-09 13:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2024-05-08 00:07 - 2024-05-08 21:33 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Avast Software
2024-05-08 00:07 - 2024-05-08 00:11 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2024-05-08 00:07 - 2024-05-08 00:09 - 000000000 ____D C:\Program Files\Avast Software
2024-05-08 00:07 - 2024-05-08 00:07 - 000050976 _____ (Avast Software) C:\WINDOWS\system32\icarus_rvrt.exe
2024-05-08 00:07 - 2024-05-08 00:07 - 000002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Cleanup Premium.lnk
2024-05-08 00:07 - 2024-05-08 00:07 - 000002185 _____ C:\Users\Public\Desktop\Avast Cleanup Premium.lnk
2024-05-08 00:07 - 2024-05-08 00:07 - 000000000 ____D C:\Users\Radov\AppData\Local\CEF
2024-05-08 00:05 - 2024-05-08 00:05 - 001544016 _____ (Avast Software) C:\Users\Radov\Downloads\avast_cleanup_online_setup.exe
2024-05-07 23:09 - 2024-05-07 23:43 - 726181888 _____ C:\Users\Radov\Downloads\Kour.avi
2024-05-07 13:46 - 2024-05-07 13:46 - 001315800 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2024-05-07 13:44 - 2024-05-07 13:44 - 001096040 _____ C:\WINDOWS\system32\AmRdrIco.icl
2024-05-07 13:44 - 2024-05-07 13:44 - 000155904 _____ () C:\WINDOWS\system32\Drivers\AmUStorU.sys
2024-05-07 13:42 - 2024-05-07 13:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2024-05-07 13:42 - 2024-05-07 13:42 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2024-05-07 13:42 - 2018-03-24 01:05 - 000138120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2024-05-07 13:42 - 2017-12-09 00:25 - 000798520 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-05-07 13:42 - 2017-12-09 00:25 - 000490808 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-05-07 13:42 - 2017-12-09 00:24 - 000928568 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-05-07 13:42 - 2017-12-09 00:24 - 000591672 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-05-07 13:39 - 2024-05-07 13:39 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2024-05-07 13:38 - 2024-05-07 13:38 - 019855144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2024-05-07 13:38 - 2024-05-07 13:38 - 016496768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2024-05-07 13:38 - 2024-05-07 13:38 - 013571520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2024-05-07 13:38 - 2024-05-07 13:38 - 011132384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 040278616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 035188992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 012967056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 011001504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 004318112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 003939624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 003719096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001985112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439135.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001683712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439135.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001153752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001138720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001065888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000998432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000950016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000902096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000054272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2024-05-07 13:06 - 2024-05-07 13:06 - 000002035 _____ C:\Users\Radov\Desktop\SimCity.lnk
2024-05-07 12:52 - 2024-05-09 13:08 - 000002956 _____ C:\WINDOWS\system32\Tasks\BlueStacksHelper_nxt
2024-05-07 12:52 - 2024-05-07 12:52 - 000006875 _____ C:\Users\Radov\-1.14-windows.xml
2024-05-07 12:52 - 2024-05-07 12:52 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5.lnk
2024-05-07 12:52 - 2024-05-07 12:52 - 000002091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5 Multi-Instance Manager.lnk
2024-05-07 12:52 - 2024-05-07 12:52 - 000002079 _____ C:\Users\Public\Desktop\BlueStacks 5 Multi-Instance Manager.lnk
2024-05-07 12:52 - 2024-05-07 12:52 - 000001975 _____ C:\Users\Public\Desktop\BlueStacks 5.lnk
2024-05-07 12:51 - 2024-05-12 17:37 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2024-05-07 12:51 - 2024-05-07 12:51 - 000002000 _____ C:\Users\Public\Desktop\BlueStacks X.lnk
2024-05-07 12:51 - 2024-05-07 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks X
2024-05-07 12:51 - 2024-05-07 12:51 - 000000000 ____D C:\Program Files\BlueStacks_nxt
2024-05-07 12:50 - 2024-05-07 12:51 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2024-05-07 12:49 - 2024-05-07 12:54 - 000000000 ____D C:\Users\Radov\AppData\Local\BlueStacksSetup
2024-05-07 12:49 - 2024-05-07 12:51 - 000000000 ____D C:\Users\Radov\AppData\Local\BlueStacks
2024-05-07 12:49 - 2024-05-07 12:49 - 000000000 ____D C:\Users\Public\BlueStacks
2024-05-07 12:34 - 2024-05-07 12:34 - 000000000 ____D C:\Users\Radov\AppData\Local\NVIDIA
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files\MSBuild
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-05-07 11:33 - 2024-05-07 11:33 - 000001590 _____ C:\Users\Radov\Desktop\Yuri's Revenge.lnk
2024-05-07 10:57 - 2024-05-07 10:57 - 000001568 _____ C:\Users\Public\Desktop\Red Alert 2.lnk
2024-05-07 10:52 - 2024-05-07 10:52 - 000000000 ____D C:\Westwood
2024-05-07 04:49 - 2024-05-11 00:56 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-05-07 04:49 - 2024-05-07 04:49 - 000000000 ____D C:\WINDOWS\InboxApps
2024-05-07 04:19 - 2024-05-07 04:19 - 000020861 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-05-07 04:11 - 2024-05-07 04:11 - 000020861 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-05-07 03:19 - 2024-05-08 13:39 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2024-05-07 00:26 - 2024-05-08 13:48 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Westwood
2024-05-07 00:06 - 2024-05-08 13:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Westwood
2024-05-06 23:52 - 2024-05-06 23:52 - 000001253 _____ C:\Users\Public\Desktop\Alcohol 120%.lnk
2024-05-06 23:52 - 2024-05-06 23:52 - 000000000 ____D C:\Users\Radov\AppData\Local\BrightData
2024-05-06 23:52 - 2024-05-06 23:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
2024-05-06 23:50 - 2024-05-06 23:50 - 000000000 ____D C:\ProgramData\BrightData
2024-05-06 23:23 - 2024-05-06 23:28 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Šablony
2024-05-06 23:23 - 2024-05-06 23:24 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Office
2024-05-06 23:23 - 2024-05-06 23:23 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Word
2024-05-06 23:23 - 2024-05-06 23:23 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Doplňky
2024-05-06 23:23 - 2024-05-06 23:23 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Document Building Blocks
2024-05-06 22:59 - 2024-05-06 22:59 - 000000000 ____D C:\Program Files (x86)\Alcohol Soft
2024-05-06 22:28 - 2024-05-08 05:05 - 000002618 _____ C:\WINDOWS\system32\Tasks\Driver Booster Update
2024-05-06 22:28 - 2024-05-08 05:01 - 000002810 _____ C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Radov)
2024-05-06 22:28 - 2024-05-06 22:35 - 000000000 ____D C:\ProgramData\{150F4013-6884-4350-8DDC-6BFCB4C5DC15}
2024-05-06 22:28 - 2024-05-06 22:29 - 000002356 _____ C:\Users\Public\Desktop\Driver Booster 11.lnk
2024-05-06 22:28 - 2024-05-06 22:29 - 000000000 ____D C:\ProgramData\iTop VPN
2024-05-06 22:28 - 2024-05-06 22:29 - 000000000 ____D C:\ProgramData\iTop
2024-05-06 22:28 - 2024-05-06 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 11
2024-05-06 22:27 - 2024-05-06 22:29 - 000000000 ____D C:\ProgramData\ProductData
2024-05-06 22:26 - 2024-05-06 22:27 - 000000000 ____D C:\Users\Radov\AppData\LocalLow\IObit
2024-05-06 22:26 - 2024-05-06 22:26 - 000000000 ____D C:\Program Files (x86)\IObit
2024-05-06 22:25 - 2024-05-13 09:33 - 000000000 ____D C:\Users\Radov\AppData\Roaming\IObit
2024-05-06 22:25 - 2024-05-06 22:30 - 000000000 ____D C:\ProgramData\IObit
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Users\Radov\Desktop\Red alert 2
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Users\Radov\AppData\Roaming\WinRAR
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Program Files\WinRAR
2024-05-06 21:39 - 2024-05-07 11:35 - 000000777 _____ C:\Users\Public\Desktop\Yuri's Revenge CnCNet.lnk
2024-05-06 21:37 - 2024-05-07 23:09 - 000000000 ____D C:\Users\Radov\Desktop\CNcNet a Red Alert 2
2024-05-06 21:37 - 2024-05-07 07:54 - 000000575 _____ C:\Users\Radov\Documents\ax_files.xml
2024-05-06 21:35 - 2024-05-07 04:56 - 000000000 ____D C:\ProgramData\Alcohol Soft
2024-05-06 21:26 - 2024-05-06 23:45 - 000207344 _____ (Duplex Secure Ltd) C:\WINDOWS\system32\Drivers\sptd2.sys
2024-05-06 21:21 - 2024-05-06 21:21 - 000000762 _____ C:\Users\Radov\Desktop\Dokumenty – zástupce.lnk
2024-05-06 21:11 - 2024-05-06 21:11 - 000000000 ____D C:\Users\Radov\Documents\Rozhodčí
2024-05-06 21:05 - 2024-05-06 21:06 - 000000000 ____D C:\Users\Radov\AppData\Local\Comms
2024-05-06 20:57 - 2024-05-06 20:57 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2024-05-06 20:51 - 2024-05-11 00:56 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-05-06 20:51 - 2024-05-11 00:56 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-05-06 20:50 - 2024-05-06 20:50 - 000000000 ____D C:\Program Files\Google
2024-05-06 20:50 - 2024-05-06 20:50 - 000000000 ____D C:\Program Files\Crashpad
2024-05-06 20:48 - 2024-05-06 20:57 - 000000000 ____D C:\Program Files (x86)\Google
2024-05-06 20:48 - 2024-05-06 20:52 - 000000000 ____D C:\Users\Radov\AppData\Local\Google
2024-05-06 20:45 - 2024-05-07 13:31 - 000000000 ____D C:\Users\Radov\Desktop\Radovan Noga
2024-05-06 20:41 - 2024-05-06 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2024-05-06 20:40 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-05-06 20:40 - 2024-05-06 20:40 - 000000000 ____D C:\WINDOWS\PCHEALTH
2024-05-06 20:40 - 2024-05-06 20:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Works
2024-05-06 20:40 - 2024-05-06 20:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2024-05-06 20:39 - 2024-05-06 20:07 - 000000000 ____D C:\Windows.old
2024-05-06 20:38 - 2024-05-06 20:40 - 000000000 ____D C:\WINDOWS\SHELLNEW
2024-05-06 20:38 - 2024-05-06 20:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2024-05-06 20:38 - 2024-05-06 20:38 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2024-05-06 20:38 - 2024-05-06 20:38 - 000000000 ____D C:\Users\Radov\AppData\Local\Microsoft Help
2024-05-06 20:38 - 2024-05-06 20:38 - 000000000 ____D C:\Program Files\Microsoft Office
2024-05-06 20:35 - 2024-05-12 11:33 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1176658507-1449335258-861927326-1001
2024-05-06 20:35 - 2024-05-06 20:35 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Spelling
2024-05-06 20:34 - 2024-05-13 09:47 - 000000000 ____D C:\Users\Radov\AppData\Local\D3DSCache
2024-05-06 20:33 - 2024-05-13 08:46 - 000000000 ___RD C:\Users\Radov\OneDrive
2024-05-06 20:33 - 2024-05-12 11:33 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1176658507-1449335258-861927326-1001
2024-05-06 20:32 - 2024-05-06 20:34 - 000000000 ____D C:\Users\Radov\Documents\Office_2007_cz_Enterprise
2024-05-06 20:31 - 2024-05-06 20:36 - 000000000 ____D C:\Users\Radov\Documents\Dokumenty
2024-05-06 20:30 - 2024-05-06 20:30 - 000000436 _____ C:\Users\Radov\Desktop\Tento počítač – zástupce.lnk
2024-05-06 20:30 - 2024-05-06 20:30 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\InputMethod
2024-05-06 20:29 - 2024-05-07 05:08 - 000000000 ____D C:\Users\Radov\AppData\Local\PlaceholderTileLogoFolder
2024-05-06 20:28 - 2024-05-06 20:28 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2024-05-06 20:27 - 2024-05-06 20:53 - 000000000 ____D C:\Users\Radov\AppData\Local\PackageStaging
2024-05-06 20:26 - 2024-05-08 13:34 - 000000000 ____D C:\ProgramData\Packages
2024-05-06 20:26 - 2024-05-07 22:20 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-05-06 20:26 - 2024-05-06 21:50 - 000000000 ____D C:\Users\Radov\AppData\Local\VirtualStore
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ___RD C:\Users\Radov\3D Objects
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Network
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Adobe
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Local\Publishers
2024-05-06 20:25 - 2024-05-11 17:28 - 000000000 ____D C:\Users\Radov\AppData\Local\Packages
2024-05-06 20:25 - 2024-05-06 21:32 - 000000000 ____D C:\Users\Radov\AppData\Local\ConnectedDevicesPlatform
2024-05-06 20:25 - 2024-05-06 20:25 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\Crypto
2024-05-06 20:25 - 2024-05-06 20:25 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Vault
2024-05-06 20:22 - 2018-03-24 01:02 - 005952392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 002596320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 001767824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000633224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000451040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000123840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000083072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2024-05-06 20:22 - 2018-03-21 13:22 - 008114212 _____ C:\WINDOWS\system32\nvcoproc.bin
2024-05-06 20:21 - 2024-05-13 12:26 - 000000000 ____D C:\ProgramData\NVIDIA
2024-05-06 20:21 - 2024-05-08 13:48 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-05-06 20:21 - 2024-05-07 13:39 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-05-06 20:21 - 2024-05-07 13:39 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2024-05-06 20:21 - 2018-03-24 01:50 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2024-05-06 20:21 - 2017-11-09 04:43 - 000540784 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-05-06 20:21 - 2017-11-09 04:43 - 000446392 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-05-06 20:20 - 2024-05-07 13:45 - 000131664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2024-05-06 20:20 - 2024-05-07 13:37 - 004633920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2024-05-06 20:20 - 2024-05-07 13:37 - 001690952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2024-05-06 20:20 - 2024-05-07 13:37 - 000048407 _____ C:\WINDOWS\system32\nvinfo.pb
2024-05-06 20:20 - 2017-11-09 04:38 - 001997752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438813.dll
2024-05-06 20:20 - 2017-11-09 04:38 - 001682544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438813.dll
2024-05-06 20:19 - 2024-05-06 20:19 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\SystemCertificates
2024-05-06 20:18 - 2024-05-13 09:54 - 000000000 ____D C:\Users\Radov
2024-05-06 20:18 - 2024-05-12 11:33 - 000002377 _____ C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-05-06 20:18 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows
2024-05-06 20:18 - 2024-05-06 20:18 - 000000020 ___SH C:\Users\Radov\ntuser.ini
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Šablony
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Soubory cookie
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Poslední
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Okolní tiskárny
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Okolní síť
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Nabídka Start
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Dokumenty
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Documents\Obrázky
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Documents\Hudba
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Documents\Filmy
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Data aplikací
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\AppData\Local\Data aplikací
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\Protect
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\Credentials
2024-05-06 20:14 - 2024-05-12 19:24 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-05-06 20:13 - 2024-05-06 20:13 - 000000000 ____D C:\Program Files\MsEdgeCrashpad
2024-05-06 20:12 - 2024-05-09 13:08 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-05-06 20:12 - 2024-05-09 13:08 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-05-06 20:06 - 2024-05-13 12:26 - 001693820 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Public\Documents\Obrázky
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Public\Documents\Hudba
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Public\Documents\Filmy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Šablony
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Poslední
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Okolní síť
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Dokumenty
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Documents\Obrázky
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Documents\Hudba
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Documents\Filmy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Data aplikací
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Šablony
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Plocha
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Dokumenty
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Data aplikací
2024-05-06 19:48 - 2024-05-06 19:48 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2024-05-06 19:47 - 2024-05-13 12:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-05-06 19:47 - 2024-05-06 22:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-05-06 19:42 - 2024-05-13 12:19 - 000008192 ___SH C:\DumpStack.log.tmp
2024-05-06 19:42 - 2024-05-13 12:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-05-06 19:42 - 2024-05-06 19:42 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2024-05-06 19:05 - 2024-05-08 13:48 - 000000000 ___DC C:\WINDOWS\Panther
2024-05-06 12:00 - 2024-05-06 12:00 - 001172840 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2024-05-06 12:00 - 2024-05-06 12:00 - 000123840 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2024-05-04 21:42 - 2024-05-04 21:44 - 000000000 ____D C:\AdwCleaner
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-05-13 12:42 - 2024-01-12 16:20 - 000000000 ____D C:\FRST
2024-05-13 12:27 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-05-13 12:26 - 2019-12-07 16:41 - 000716932 _____ C:\WINDOWS\system32\perfh005.dat
2024-05-13 12:26 - 2019-12-07 16:41 - 000145110 _____ C:\WINDOWS\system32\perfc005.dat
2024-05-13 12:26 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-05-13 12:24 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-05-13 12:18 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files\Windows Portable Devices
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-05-13 12:12 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2024-05-13 12:10 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-05-13 11:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-05-11 17:30 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-05-09 23:09 - 2021-08-27 10:24 - 000000000 ____D C:\TRANSLAT
2024-05-08 05:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2024-05-08 00:11 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-05-07 11:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2024-05-07 11:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2024-05-07 04:51 - 2019-12-07 16:41 - 000000000 ____D C:\WINDOWS\SysWOW64\cs
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2024-05-07 04:50 - 2019-12-07 16:42 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2024-05-07 04:50 - 2019-12-07 16:41 - 000000000 ____D C:\WINDOWS\system32\cs
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Keywords
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Com
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2024-05-07 04:49 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-05-07 04:49 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemApps
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\IME
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-05-07 04:42 - 2019-12-07 16:44 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2024-05-07 04:42 - 2019-12-07 16:44 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2024-05-07 04:42 - 2019-12-07 11:15 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2024-05-07 04:42 - 2019-12-07 11:14 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2024-05-06 22:35 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2024-05-06 20:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-05-06 20:41 - 2019-12-07 11:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2024-05-06 20:39 - 2019-12-07 11:18 - 000000000 ____D C:\WINDOWS\Setup
2024-05-06 20:39 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-05-06 20:38 - 2019-12-07 11:14 - 000000167 _____ C:\WINDOWS\win.ini
2024-05-06 20:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Help
2024-05-06 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2024-05-06 20:09 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2024-05-06 20:08 - 2019-12-07 16:42 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2024-05-06 20:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\spool
2024-05-06 20:00 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT
==================== Files in the root of some directories ========
2024-05-08 05:04 - 2024-05-13 09:12 - 000007633 _____ () C:\Users\Radov\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
Ran by Radov (13-05-2024 12:51:46)
Running from C:\Users\Radov\Desktop\Viry.cz
Microsoft Windows 10 Home Version 22H2 19045.4355 (X64) (2024-05-06 18:07:36)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1176658507-1449335258-861927326-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1176658507-1449335258-861927326-503 - Limited - Disabled)
Guest (S-1-5-21-1176658507-1449335258-861927326-501 - Limited - Disabled)
Radov (S-1-5-21-1176658507-1449335258-861927326-1001 - Administrator - Enabled) => C:\Users\Radov
WDAGUtilityAccount (S-1-5-21-1176658507-1449335258-861927326-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Alcohol 120% (HKLM-x32\...\Alcohol 120) (Version: 2.1.1.2201 - Alcohol Soft)
Avast Cleanup Premium (HKLM\...\Avast Cleanup) (Version: 23.4.15807.16040 - Avast Software)
Avast Premium Security (HKLM\...\Avast Antivirus) (Version: 24.4.6112 - Avast Software)
BlueStacks 5 (HKLM\...\BlueStacks_nxt) (Version: 5.5.0.1083 - BlueStack Systems, Inc.)
BlueStacks X (HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\BlueStacks X) (Version: 0.13.2.5 - BlueStack Systems, Inc.)
CnCNet5 Yuri's Revenge (HKLM-x32\...\{D22A250A-085F-415E-959E-8DB49F4E4CCA}_is1) (Version: 1.0 - cncnet.org)
Command & Conquer Red Alert 2 (HKLM-x32\...\Red Alert 2) (Version: - )
Command && Conquer Red Alert 2 - Yuri's Revenge (HKLM-x32\...\Yuri's Revenge) (Version: - )
Driver Booster 11 (HKLM-x32\...\Driver Booster_is1) (Version: 11.1.0 - IObit)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 124.0.6367.201 - Google LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.97 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 124.0.2478.97 - Microsoft Corporation)
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\OneDriveSetup.exe) (Version: 24.086.0428.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
NVIDIA Ovladač 3D Vision 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.35 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.35 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.13.7500 - NVIDIA Corporation) Hidden
PC Translator (HKLM-x32\...\PC Translator) (Version: - )
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{B9A7A138-BFD5-4C73-A269-F78CCA28150E}) (Version: 8.94.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Westwood Shared Internet Components (HKLM-x32\...\WOLAPI) (Version: - )
WinRAR 6.02 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.02.0 - win.rar GmbH)
Packages:
=========
Vyhledávání na webu z Microsoft Bingu -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.92.0_x64__8wekyb3d8bbwe [2024-05-07] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2210608 2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxShlex.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxShlEx64.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2024-05-07 13:42 - 2018-03-24 01:05 - 000880024 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2024-05-07 13:42 - 2018-03-24 01:05 - 000343728 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO-x32: WebTransBHO Class -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> C:\ProgramData\LangSoft\WebIE.dll [2024-05-09] () [File not signed]
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll [2024-05-09] () [File not signed]
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\Control Panel\Desktop\\Wallpaper -> c:\users\radov\appdata\local\microsoft\windows\themes\roamedthemefiles\desktopbackground\image(2).jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_1E8A3F8A520F78AE9D69B9F5C6F80EDE"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{C9F6108D-FCD8-4891-A7F8-148595B75042}C:\westwood\ra2\gamemd-spawn.exe] => (Allow) C:\westwood\ra2\gamemd-spawn.exe (Westwood Studios) [File not signed]
FirewallRules: [UDP Query User{F14282B4-7123-4B21-A0B4-99232CE92113}C:\westwood\ra2\gamemd-spawn.exe] => (Allow) C:\westwood\ra2\gamemd-spawn.exe (Westwood Studios) [File not signed]
FirewallRules: [{BB3F6CEB-040B-457C-91E9-B65E54F542D0}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Bluestack Systems, Inc -> Bluestack Systems, Inc.)
FirewallRules: [{DC9C7261-453E-4DD1-A597-4AEE7F67E1C4}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe (Bluestack Systems, Inc -> Bluestack Systems, Inc.)
FirewallRules: [{66BD0524-168F-414D-BC21-7180E9A13CE8}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Bluestack Systems, Inc -> BlueStack Systems)
FirewallRules: [{FC17B1B2-B6CC-4F99-BB2A-6A0FBC0EC8BD}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{C865817B-CDD0-4D06-ADD4-302D79508A27}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EC77F675-654C-4140-AC46-EE6042CD1C72}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{BDC2C553-B219-4693-BEF5-A1AF5E96EE1D}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{D9F4CE74-8998-4E76-B45A-C36522EFE3AC}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{8C497011-E22C-4163-B389-5E37D31B43C1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{979294B6-52CA-403A-95FB-2ED7F3905771}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{215B6513-7C79-4F27-BC0B-EC31040A0A7B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{13DB5011-047D-452E-81CD-07237902DFDB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{052C5DED-7F95-4D0C-A253-571234419157}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
09-05-2024 20:11:38 Naplánovaný kontrolní bod
13-05-2024 09:05:23 Instalační služba modulů systému Windows
13-05-2024 09:13:31 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
Name: Řadič jednoduché komunikace pro sběrnici PCI
Description: Řadič jednoduché komunikace pro sběrnici PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (05/13/2024 12:17:50 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (05/13/2024 08:44:28 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\WINDOWS\system32\sysmain.dll (kód chyby Win32 126).
Error: (05/10/2024 11:28:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x2cb4
Čas spuštění chybující aplikace: 0x01daa3148f34bca7
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 6b02b7fc-b4e5-4365-9178-1fd27777e844
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/10/2024 08:20:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x21b0
Čas spuštění chybující aplikace: 0x01daa30412004e22
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 1895cf3a-46ed-4c30-a39b-456ee5af1ad2
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/10/2024 03:32:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program svchost.exe verze 10.0.19041.3636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: ba8
Čas spuštění: 01daa201ce34e5ca
Čas ukončení: 4294967295
Cesta k aplikaci: C:\Windows\System32\svchost.exe
ID hlášení: b210d1fc-ba40-4d99-ad42-dac6dcef4d5c
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
Error: (05/10/2024 09:17:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x2bf0
Čas spuštění chybující aplikace: 0x01daa2a5204b2be0
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 441c5a46-64f0-4f3e-943f-709909496fc8
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/09/2024 09:31:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000a417f
ID chybujícího procesu: 0x2be8
Čas spuštění chybující aplikace: 0x01daa24394b1a66e
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\Program Files\BlueStacks_nxt\HD-Player.exe
ID zprávy: 8fcd95f1-b2ab-40d6-b87a-190d64f57456
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/09/2024 08:02:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x2904
Čas spuštění chybující aplikace: 0x01daa22cd25f6256
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 63450795-9259-4d4f-8b3b-d9269a92370b
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (05/13/2024 12:24:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (05/13/2024 12:24:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).
Error: (05/13/2024 12:17:26 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba aswbIDSAgent se po přijetí pokynu pro vypnutí neukončila správně.
Error: (05/13/2024 09:33:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avast Cleanup byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.
Error: (05/13/2024 09:33:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Brightdata Service (win_alcohol.soft) byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.
Error: (05/13/2024 09:33:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA Display Container LS byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1000 milisekund: Restartovat službu.
Error: (05/13/2024 09:33:07 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba StarWind AE Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (05/13/2024 09:33:07 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Alcohol Virtual AHCI Controller Management Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Windows Defender:
================
Date: 2024-05-07 23:38:46
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {83CC893C-514B-44FE-BAEB-D899275B9FDE}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-05-07 22:40:16
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {7DBF78F8-7396-4436-A2E8-E6FD959A8584}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-05-06 23:56:58
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/Keygen
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: file:_C:\Users\Radov\Desktop\Nová složka\Red Alert 2 +Yr+Patch+Keygen\Keygen.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: DESKTOP-OHUR8ME\Radov
Název procesu: C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe
Verze bezpečnostních informací: AV: 1.409.724.0, AS: 1.409.724.0, NIS: 1.409.724.0
Verze modulu: AM: 1.1.24030.4, NIS: 1.1.24030.4
Date: 2024-05-06 22:52:05
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Backdoor:MSIL/AsyncRat!pz
Závažnost: Vážné
Kategorie: Zadní vrátka
Cesta: file:_C:\Users\Radov\Downloads\Alcohol 120%.exe; webfile:_C:\Users\Radov\Downloads\Alcohol 120%.exe|https://data4.sdilej.cz/sdilej_free.php ... 3206987717
Původ detekce: Internet
Typ detekce: Konkrétní
Zdroj detekce: Soubory ke stažení a přílohy
Uživatel: DESKTOP-OHUR8ME\Radov
Název procesu: Unknown
Verze bezpečnostních informací: AV: 1.409.723.0, AS: 1.409.723.0, NIS: 1.409.723.0
Verze modulu: AM: 1.1.24030.4, NIS: 1.1.24030.4
Date: 2024-05-06 20:31:05
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/AutoKMS
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: containerfile:_F:\Microsoft Toolkit.exe; file:_F:\Microsoft Toolkit.exe->[SAResource]->[MSILRES:?.?.resources]
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: DESKTOP-OHUR8ME\Radov
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.303.25.0, AS: 1.303.25.0, NIS: 1.303.25.0
Verze modulu: AM: 1.1.16400.2, NIS: 1.1.16400.2
CodeIntegrity:
===============
Date: 2024-05-13 12:26:26
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: AMI 7.14 10/21/2011
Motherboard: Foxconn 2ABF
Processor: Intel(R) Pentium(R) CPU G630 @ 2.70GHz
Percentage of memory in use: 37%
Total physical RAM: 8172.86 MB
Available physical RAM: 5137.59 MB
Total Virtual: 9452.86 MB
Available Virtual: 6343.7 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:930.49 GB) (Free:800.65 GB) (Model: HGST HTS721010A9E630) NTFS
\\?\Volume{f2f5692b-6b93-4e2f-95c1-079c69dcf335}\ (Obnovení) (Fixed) (Total:0.29 GB) (Free:0.08 GB) NTFS
\\?\Volume{24506013-4698-4b5e-a0b5-392ddb0d55a3}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{1920aee1-58a6-4688-969e-0e7947164b12}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 37A0AD4E)
Partition: GPT.
==================== End of Addition.txt =======================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
Ran by Radov (administrator) on RADOVAN (Hewlett-Packard HP Pro 3400 Series MT) (13-05-2024 12:39:33)
Running from C:\Users\Radov\Desktop\Viry.cz\FRST64.exe
Loaded Profiles: Radov
Platform: Microsoft Windows 10 Home Version 22H2 19045.4355 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe
(C:\Program Files (x86)\Alcohol Soft\Alcohol 120\lumsdk\net_updater32.exe ->) (Bright Data Ltd -> BrightData Ltd. (certified)) C:\ProgramData\BrightData\33cf4fc2369ae4564618c4aef30ca08d6e194ccb\brightdata.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(services.exe ->) (Alcohol Soft -> Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Bright Data Ltd -> BrightData Ltd. (certified)) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\lumsdk\net_updater32.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (StarWind Software) [File not signed] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(svchost.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\AvBugReport.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21888.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Radov\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TuneupUI.exe] => C:\Program Files\Avast Software\Cleanup\TuneupUI.exe [9831832 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [424344 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\Run: [MicrosoftEdgeAutoLaunch_1E8A3F8A520F78AE9D69B9F5C6F80EDE] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4081208 2024-05-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\MountPoints2: {2fe06317-0bf2-11ef-9093-e8393559b4f9} - "G:\autorun.exe"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\MountPoints2: {2fe0635d-0bf2-11ef-9093-e8393559b4f9} - "H:\autorun.exe"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\MountPoints2: {2fe0635e-0bf2-11ef-9093-e8393559b4f9} - "I:\autorun.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\124.0.6367.201\Installer\chrmstp.exe [2024-05-11] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {027079FC-7148-484D-B92B-97E8C8927892} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [4979096 2024-05-08] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\A (the data entry has 70 more characters).
Task: {2F65C39D-14FE-4A3C-BC59-169AF3AC7BE1} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [7786904 2024-03-14] (Avast Software s.r.o. -> Avast Software)
Task: {C21C6784-C84B-4030-A60E-36574842C6F2} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5201304 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {B9F61914-E0E8-401C-A0DE-5CBDBB317E8F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2348952 2024-05-08] (Avast Software s.r.o. -> Avast Software)
Task: {4474945A-6122-4C4C-9E0F-306915A4DD68} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2021-12-22] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)
Task: {D6DE18E3-E870-4954-ABE2-D13216611794} - System32\Tasks\Driver Booster SkipUAC (Radov) => C:\Program Files (x86)\IObit\Driver Booster\11.1.0\DriverBooster.exe [9044456 2023-10-26] (IObit CO., LTD -> IObit)
Task: {646E07CA-669F-4FD9-8399-7529C6DDE8FE} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\11.1.0\AutoUpdate.exe [2524648 2023-09-28] (IObit CO., LTD -> IObit)
Task: {A32BBC0C-5F79-409F-8954-0500E7C04174} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6462.0{520F679D-FC4D-4DF3-818C-A39FBFAED864} => C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{65991c4d-64a9-48c0-8578-f4335c626e06}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default [2024-05-13]
Edge DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}&sourceid=62744&thru=quicksearch
Edge DefaultSearchKeyword: Default -> seznam
Edge DefaultSuggestURL: Default -> hxxps://suggest.seznam.cz/fulltext_ff?phrase={searchTerms}
Edge Extension: (Seznam Doplněk – Email) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2024-05-12]
Edge Extension: (Dokumenty Google offline) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-05-06]
Edge Extension: (Edge relevant text changes) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-05-06]
Edge Extension: (Netpanel) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno [2024-05-12]
Edge Extension: (Seznam.cz) - C:\Users\Radov\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2024-05-12]
FireFox:
========
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default [2024-05-13]
CHR Notifications: Default -> hxxps://app.betterme.world; hxxps://sdilej.cz; hxxps://www.facebook.com; hxxps://www.youtube.com
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com","hxxps://www.seznam.cz/?clid=22668"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (Seznam Doplněk – Email) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2024-05-13]
CHR Extension: (Netpanel) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbidbgoheiddfilfipcobicemncfogno [2024-05-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-05-06]
CHR Extension: (Seznam.cz) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2024-05-13]
CHR Extension: (Eiffel Tower) - C:\Users\Radov\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppbaibkigenhdcommebegmmmpoolmpip [2024-05-06]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [9152408 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [766872 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2302360 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1203608 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 AxVirtualAHCISrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe [105888 2019-06-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [18727320 2024-05-08] (Avast Software s.r.o. -> AVAST Software)
S2 GoogleUpdaterInternalService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
S2 GoogleUpdaterService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-06] (Google LLC -> Google LLC)
R2 luminati_net_updater_win_alcohol_soft; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\lumsdk\net_updater32.exe [8400376 2024-05-08] (Bright Data Ltd -> BrightData Ltd. (certified))
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-05-06] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [155904 2024-05-07] (Alcorlink Corp. -> )
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [229944 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [379960 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [292920 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [84536 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [27760 2024-05-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [28728 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [268856 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [548920 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [97848 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [69176 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [935992 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [695864 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [203720 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [306120 2024-05-08] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [320728 2021-12-22] (Bluestack Systems, Inc -> Bluestack System Inc.)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2024-05-06] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [20936 2024-05-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [601376 2024-05-06] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105760 2024-05-06] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
Error Reading file: "C:\Users\Radov\Downloads\Nepotvrzeno 889073.crdownload"
Error Reading file: "C:\Users\Radov\Downloads\Alcohol120_trial_2.1.1.2201 (1).exe"
2024-05-13 12:19 - 2024-05-13 12:21 - 000444672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-05-13 09:30 - 2024-05-13 12:39 - 000000000 ____D C:\Users\Radov\Desktop\Viry.cz
2024-05-13 09:06 - 2024-05-13 09:06 - 000000000 ___HD C:\$WinREAgent
2024-05-13 04:34 - 2024-05-13 04:34 - 000000000 ____D C:\Users\Radov\AppData\Local\Backup
2024-05-12 22:17 - 2024-05-12 22:17 - 000088050 _____ C:\Users\Radov\Desktop\návod k pračce.pdf
2024-05-10 15:36 - 2024-05-13 09:38 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\MMC
2024-05-09 23:09 - 2024-05-09 23:09 - 000000034 _____ C:\WINDOWS\WTRDCTM.INI
2024-05-09 23:07 - 2024-05-09 23:08 - 000000000 ____D C:\ProgramData\LangSoft
2024-05-09 23:07 - 2024-05-09 23:07 - 000000636 _____ C:\Users\Radov\Desktop\Slovník.lnk
2024-05-09 23:07 - 2024-05-09 23:07 - 000000636 _____ C:\Users\Radov\Desktop\PC Translator 2010.lnk
2024-05-09 23:07 - 2024-05-09 23:07 - 000000636 _____ C:\Users\Radov\Desktop\DicMan.lnk
2024-05-09 23:07 - 2024-05-09 23:07 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Translator
2024-05-09 23:07 - 2024-05-09 23:07 - 000000000 ____D C:\Users\Public\Documents\Radov
2024-05-09 23:06 - 2024-05-09 23:08 - 000000000 ____D C:\Users\Radov\AppData\Roaming\LangSoft
2024-05-08 22:03 - 2024-05-08 22:03 - 000000000 ____D C:\Users\Radov\AppData\Local\Avast Software
2024-05-08 21:39 - 2024-05-08 21:39 - 000000000 ___HD C:\OneDriveTemp
2024-05-08 21:33 - 2024-05-08 21:33 - 000000000 ____D C:\Users\Radov\AppData\Local\OneDrive
2024-05-08 21:31 - 2024-05-08 21:31 - 000000000 ____D C:\ProgramData\PLUG
2024-05-08 20:50 - 2024-05-08 20:50 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2024-05-08 20:50 - 2024-05-08 20:50 - 000002076 _____ C:\Users\Public\Desktop\Avast Premium Security.lnk
2024-05-08 14:04 - 2024-05-08 14:05 - 000000000 ____D C:\Users\Radov\Documents\PC Translator 2010 CZ
2024-05-08 14:03 - 2024-05-08 14:03 - 000000000 ____D C:\Users\Radov\Documents\Milionář
2024-05-08 14:00 - 2024-05-08 14:00 - 000000000 ____D C:\Users\Radov\Documents\Viry.cz
2024-05-08 13:32 - 2024-05-08 13:37 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-05-08 13:31 - 2024-05-08 13:31 - 000000000 ____D C:\Program Files\RUXIM
2024-05-08 05:04 - 2024-05-13 09:12 - 000007633 _____ C:\Users\Radov\AppData\Local\Resmon.ResmonCfg
2024-05-08 00:12 - 2024-05-08 00:12 - 000000000 ____D C:\WINDOWS\system32\o2
2024-05-08 00:11 - 2024-05-08 00:10 - 000314776 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2024-05-08 00:09 - 2024-05-08 00:09 - 000888600 _____ (Google LLC) C:\Users\Public\Documents\gcapi.dll
2024-05-08 00:08 - 2024-05-08 00:08 - 000264032 _____ (AVAST Software) C:\Users\Radov\Downloads\avast_premium_security_setup_online.exe
2024-05-08 00:07 - 2024-05-13 12:20 - 000000000 ____D C:\ProgramData\Avast Software
2024-05-08 00:07 - 2024-05-09 13:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2024-05-08 00:07 - 2024-05-08 21:33 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Avast Software
2024-05-08 00:07 - 2024-05-08 00:11 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2024-05-08 00:07 - 2024-05-08 00:09 - 000000000 ____D C:\Program Files\Avast Software
2024-05-08 00:07 - 2024-05-08 00:07 - 000050976 _____ (Avast Software) C:\WINDOWS\system32\icarus_rvrt.exe
2024-05-08 00:07 - 2024-05-08 00:07 - 000002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Cleanup Premium.lnk
2024-05-08 00:07 - 2024-05-08 00:07 - 000002185 _____ C:\Users\Public\Desktop\Avast Cleanup Premium.lnk
2024-05-08 00:07 - 2024-05-08 00:07 - 000000000 ____D C:\Users\Radov\AppData\Local\CEF
2024-05-08 00:05 - 2024-05-08 00:05 - 001544016 _____ (Avast Software) C:\Users\Radov\Downloads\avast_cleanup_online_setup.exe
2024-05-07 23:09 - 2024-05-07 23:43 - 726181888 _____ C:\Users\Radov\Downloads\Kour.avi
2024-05-07 13:46 - 2024-05-07 13:46 - 001315800 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2024-05-07 13:44 - 2024-05-07 13:44 - 001096040 _____ C:\WINDOWS\system32\AmRdrIco.icl
2024-05-07 13:44 - 2024-05-07 13:44 - 000155904 _____ () C:\WINDOWS\system32\Drivers\AmUStorU.sys
2024-05-07 13:42 - 2024-05-07 13:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2024-05-07 13:42 - 2024-05-07 13:42 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2024-05-07 13:42 - 2018-03-24 01:05 - 000138120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2024-05-07 13:42 - 2017-12-09 00:25 - 000798520 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-05-07 13:42 - 2017-12-09 00:25 - 000490808 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-05-07 13:42 - 2017-12-09 00:24 - 000928568 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-05-07 13:42 - 2017-12-09 00:24 - 000591672 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-05-07 13:39 - 2024-05-07 13:39 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2024-05-07 13:38 - 2024-05-07 13:38 - 019855144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2024-05-07 13:38 - 2024-05-07 13:38 - 016496768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2024-05-07 13:38 - 2024-05-07 13:38 - 013571520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2024-05-07 13:38 - 2024-05-07 13:38 - 011132384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 040278616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 035188992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 012967056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 011001504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 004318112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 003939624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 003719096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001985112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439135.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001683712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439135.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001153752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001138720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 001065888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000998432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000950016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000902096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2024-05-07 13:37 - 2024-05-07 13:37 - 000054272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2024-05-07 13:06 - 2024-05-07 13:06 - 000002035 _____ C:\Users\Radov\Desktop\SimCity.lnk
2024-05-07 12:52 - 2024-05-09 13:08 - 000002956 _____ C:\WINDOWS\system32\Tasks\BlueStacksHelper_nxt
2024-05-07 12:52 - 2024-05-07 12:52 - 000006875 _____ C:\Users\Radov\-1.14-windows.xml
2024-05-07 12:52 - 2024-05-07 12:52 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5.lnk
2024-05-07 12:52 - 2024-05-07 12:52 - 000002091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 5 Multi-Instance Manager.lnk
2024-05-07 12:52 - 2024-05-07 12:52 - 000002079 _____ C:\Users\Public\Desktop\BlueStacks 5 Multi-Instance Manager.lnk
2024-05-07 12:52 - 2024-05-07 12:52 - 000001975 _____ C:\Users\Public\Desktop\BlueStacks 5.lnk
2024-05-07 12:51 - 2024-05-12 17:37 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2024-05-07 12:51 - 2024-05-07 12:51 - 000002000 _____ C:\Users\Public\Desktop\BlueStacks X.lnk
2024-05-07 12:51 - 2024-05-07 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks X
2024-05-07 12:51 - 2024-05-07 12:51 - 000000000 ____D C:\Program Files\BlueStacks_nxt
2024-05-07 12:50 - 2024-05-07 12:51 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2024-05-07 12:49 - 2024-05-07 12:54 - 000000000 ____D C:\Users\Radov\AppData\Local\BlueStacksSetup
2024-05-07 12:49 - 2024-05-07 12:51 - 000000000 ____D C:\Users\Radov\AppData\Local\BlueStacks
2024-05-07 12:49 - 2024-05-07 12:49 - 000000000 ____D C:\Users\Public\BlueStacks
2024-05-07 12:34 - 2024-05-07 12:34 - 000000000 ____D C:\Users\Radov\AppData\Local\NVIDIA
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files\MSBuild
2024-05-07 11:44 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-05-07 11:33 - 2024-05-07 11:33 - 000001590 _____ C:\Users\Radov\Desktop\Yuri's Revenge.lnk
2024-05-07 10:57 - 2024-05-07 10:57 - 000001568 _____ C:\Users\Public\Desktop\Red Alert 2.lnk
2024-05-07 10:52 - 2024-05-07 10:52 - 000000000 ____D C:\Westwood
2024-05-07 04:49 - 2024-05-11 00:56 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-05-07 04:49 - 2024-05-07 04:49 - 000000000 ____D C:\WINDOWS\InboxApps
2024-05-07 04:19 - 2024-05-07 04:19 - 000020861 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-05-07 04:11 - 2024-05-07 04:11 - 000020861 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-05-07 03:19 - 2024-05-08 13:39 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2024-05-07 00:26 - 2024-05-08 13:48 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Westwood
2024-05-07 00:06 - 2024-05-08 13:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Westwood
2024-05-06 23:52 - 2024-05-06 23:52 - 000001253 _____ C:\Users\Public\Desktop\Alcohol 120%.lnk
2024-05-06 23:52 - 2024-05-06 23:52 - 000000000 ____D C:\Users\Radov\AppData\Local\BrightData
2024-05-06 23:52 - 2024-05-06 23:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
2024-05-06 23:50 - 2024-05-06 23:50 - 000000000 ____D C:\ProgramData\BrightData
2024-05-06 23:23 - 2024-05-06 23:28 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Šablony
2024-05-06 23:23 - 2024-05-06 23:24 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Office
2024-05-06 23:23 - 2024-05-06 23:23 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Word
2024-05-06 23:23 - 2024-05-06 23:23 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Doplňky
2024-05-06 23:23 - 2024-05-06 23:23 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Document Building Blocks
2024-05-06 22:59 - 2024-05-06 22:59 - 000000000 ____D C:\Program Files (x86)\Alcohol Soft
2024-05-06 22:28 - 2024-05-08 05:05 - 000002618 _____ C:\WINDOWS\system32\Tasks\Driver Booster Update
2024-05-06 22:28 - 2024-05-08 05:01 - 000002810 _____ C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Radov)
2024-05-06 22:28 - 2024-05-06 22:35 - 000000000 ____D C:\ProgramData\{150F4013-6884-4350-8DDC-6BFCB4C5DC15}
2024-05-06 22:28 - 2024-05-06 22:29 - 000002356 _____ C:\Users\Public\Desktop\Driver Booster 11.lnk
2024-05-06 22:28 - 2024-05-06 22:29 - 000000000 ____D C:\ProgramData\iTop VPN
2024-05-06 22:28 - 2024-05-06 22:29 - 000000000 ____D C:\ProgramData\iTop
2024-05-06 22:28 - 2024-05-06 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 11
2024-05-06 22:27 - 2024-05-06 22:29 - 000000000 ____D C:\ProgramData\ProductData
2024-05-06 22:26 - 2024-05-06 22:27 - 000000000 ____D C:\Users\Radov\AppData\LocalLow\IObit
2024-05-06 22:26 - 2024-05-06 22:26 - 000000000 ____D C:\Program Files (x86)\IObit
2024-05-06 22:25 - 2024-05-13 09:33 - 000000000 ____D C:\Users\Radov\AppData\Roaming\IObit
2024-05-06 22:25 - 2024-05-06 22:30 - 000000000 ____D C:\ProgramData\IObit
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Users\Radov\Desktop\Red alert 2
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Users\Radov\AppData\Roaming\WinRAR
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-06 21:43 - 2024-05-06 21:43 - 000000000 ____D C:\Program Files\WinRAR
2024-05-06 21:39 - 2024-05-07 11:35 - 000000777 _____ C:\Users\Public\Desktop\Yuri's Revenge CnCNet.lnk
2024-05-06 21:37 - 2024-05-07 23:09 - 000000000 ____D C:\Users\Radov\Desktop\CNcNet a Red Alert 2
2024-05-06 21:37 - 2024-05-07 07:54 - 000000575 _____ C:\Users\Radov\Documents\ax_files.xml
2024-05-06 21:35 - 2024-05-07 04:56 - 000000000 ____D C:\ProgramData\Alcohol Soft
2024-05-06 21:26 - 2024-05-06 23:45 - 000207344 _____ (Duplex Secure Ltd) C:\WINDOWS\system32\Drivers\sptd2.sys
2024-05-06 21:21 - 2024-05-06 21:21 - 000000762 _____ C:\Users\Radov\Desktop\Dokumenty – zástupce.lnk
2024-05-06 21:11 - 2024-05-06 21:11 - 000000000 ____D C:\Users\Radov\Documents\Rozhodčí
2024-05-06 21:05 - 2024-05-06 21:06 - 000000000 ____D C:\Users\Radov\AppData\Local\Comms
2024-05-06 20:57 - 2024-05-06 20:57 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2024-05-06 20:51 - 2024-05-11 00:56 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-05-06 20:51 - 2024-05-11 00:56 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-05-06 20:50 - 2024-05-06 20:50 - 000000000 ____D C:\Program Files\Google
2024-05-06 20:50 - 2024-05-06 20:50 - 000000000 ____D C:\Program Files\Crashpad
2024-05-06 20:48 - 2024-05-06 20:57 - 000000000 ____D C:\Program Files (x86)\Google
2024-05-06 20:48 - 2024-05-06 20:52 - 000000000 ____D C:\Users\Radov\AppData\Local\Google
2024-05-06 20:45 - 2024-05-07 13:31 - 000000000 ____D C:\Users\Radov\Desktop\Radovan Noga
2024-05-06 20:41 - 2024-05-06 20:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2024-05-06 20:40 - 2024-05-07 11:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-05-06 20:40 - 2024-05-06 20:40 - 000000000 ____D C:\WINDOWS\PCHEALTH
2024-05-06 20:40 - 2024-05-06 20:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Works
2024-05-06 20:40 - 2024-05-06 20:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2024-05-06 20:39 - 2024-05-06 20:07 - 000000000 ____D C:\Windows.old
2024-05-06 20:38 - 2024-05-06 20:40 - 000000000 ____D C:\WINDOWS\SHELLNEW
2024-05-06 20:38 - 2024-05-06 20:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2024-05-06 20:38 - 2024-05-06 20:38 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2024-05-06 20:38 - 2024-05-06 20:38 - 000000000 ____D C:\Users\Radov\AppData\Local\Microsoft Help
2024-05-06 20:38 - 2024-05-06 20:38 - 000000000 ____D C:\Program Files\Microsoft Office
2024-05-06 20:35 - 2024-05-12 11:33 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1176658507-1449335258-861927326-1001
2024-05-06 20:35 - 2024-05-06 20:35 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Spelling
2024-05-06 20:34 - 2024-05-13 09:47 - 000000000 ____D C:\Users\Radov\AppData\Local\D3DSCache
2024-05-06 20:33 - 2024-05-13 08:46 - 000000000 ___RD C:\Users\Radov\OneDrive
2024-05-06 20:33 - 2024-05-12 11:33 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1176658507-1449335258-861927326-1001
2024-05-06 20:32 - 2024-05-06 20:34 - 000000000 ____D C:\Users\Radov\Documents\Office_2007_cz_Enterprise
2024-05-06 20:31 - 2024-05-06 20:36 - 000000000 ____D C:\Users\Radov\Documents\Dokumenty
2024-05-06 20:30 - 2024-05-06 20:30 - 000000436 _____ C:\Users\Radov\Desktop\Tento počítač – zástupce.lnk
2024-05-06 20:30 - 2024-05-06 20:30 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\InputMethod
2024-05-06 20:29 - 2024-05-07 05:08 - 000000000 ____D C:\Users\Radov\AppData\Local\PlaceholderTileLogoFolder
2024-05-06 20:28 - 2024-05-06 20:28 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2024-05-06 20:27 - 2024-05-06 20:53 - 000000000 ____D C:\Users\Radov\AppData\Local\PackageStaging
2024-05-06 20:26 - 2024-05-08 13:34 - 000000000 ____D C:\ProgramData\Packages
2024-05-06 20:26 - 2024-05-07 22:20 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-05-06 20:26 - 2024-05-06 21:50 - 000000000 ____D C:\Users\Radov\AppData\Local\VirtualStore
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ___RD C:\Users\Radov\3D Objects
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Network
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Adobe
2024-05-06 20:26 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Local\Publishers
2024-05-06 20:25 - 2024-05-11 17:28 - 000000000 ____D C:\Users\Radov\AppData\Local\Packages
2024-05-06 20:25 - 2024-05-06 21:32 - 000000000 ____D C:\Users\Radov\AppData\Local\ConnectedDevicesPlatform
2024-05-06 20:25 - 2024-05-06 20:25 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\Crypto
2024-05-06 20:25 - 2024-05-06 20:25 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Vault
2024-05-06 20:22 - 2018-03-24 01:02 - 005952392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 002596320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 001767824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000633224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000451040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000123840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2024-05-06 20:22 - 2018-03-24 01:02 - 000083072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2024-05-06 20:22 - 2018-03-21 13:22 - 008114212 _____ C:\WINDOWS\system32\nvcoproc.bin
2024-05-06 20:21 - 2024-05-13 12:26 - 000000000 ____D C:\ProgramData\NVIDIA
2024-05-06 20:21 - 2024-05-08 13:48 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-05-06 20:21 - 2024-05-07 13:39 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-05-06 20:21 - 2024-05-07 13:39 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2024-05-06 20:21 - 2018-03-24 01:50 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2024-05-06 20:21 - 2017-11-09 04:43 - 000540784 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-05-06 20:21 - 2017-11-09 04:43 - 000446392 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-05-06 20:20 - 2024-05-07 13:45 - 000131664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2024-05-06 20:20 - 2024-05-07 13:37 - 004633920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2024-05-06 20:20 - 2024-05-07 13:37 - 001690952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2024-05-06 20:20 - 2024-05-07 13:37 - 000048407 _____ C:\WINDOWS\system32\nvinfo.pb
2024-05-06 20:20 - 2017-11-09 04:38 - 001997752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438813.dll
2024-05-06 20:20 - 2017-11-09 04:38 - 001682544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438813.dll
2024-05-06 20:19 - 2024-05-06 20:19 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\SystemCertificates
2024-05-06 20:18 - 2024-05-13 09:54 - 000000000 ____D C:\Users\Radov
2024-05-06 20:18 - 2024-05-12 11:33 - 000002377 _____ C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-05-06 20:18 - 2024-05-06 20:26 - 000000000 ____D C:\Users\Radov\AppData\Roaming\Microsoft\Windows
2024-05-06 20:18 - 2024-05-06 20:18 - 000000020 ___SH C:\Users\Radov\ntuser.ini
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Šablony
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Soubory cookie
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Poslední
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Okolní tiskárny
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Okolní síť
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Nabídka Start
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Dokumenty
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Documents\Obrázky
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Documents\Hudba
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Documents\Filmy
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\Data aplikací
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 _SHDL C:\Users\Radov\AppData\Local\Data aplikací
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\Protect
2024-05-06 20:18 - 2024-05-06 20:18 - 000000000 ___SD C:\Users\Radov\AppData\Roaming\Microsoft\Credentials
2024-05-06 20:14 - 2024-05-12 19:24 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-05-06 20:13 - 2024-05-06 20:13 - 000000000 ____D C:\Program Files\MsEdgeCrashpad
2024-05-06 20:12 - 2024-05-09 13:08 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-05-06 20:12 - 2024-05-09 13:08 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-05-06 20:06 - 2024-05-13 12:26 - 001693820 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Public\Documents\Obrázky
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Public\Documents\Hudba
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Public\Documents\Filmy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Šablony
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Poslední
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Okolní síť
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Dokumenty
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Documents\Obrázky
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Documents\Hudba
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Documents\Filmy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\Data aplikací
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Šablony
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Plocha
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Dokumenty
2024-05-06 20:00 - 2024-05-06 20:00 - 000000000 _SHDL C:\ProgramData\Data aplikací
2024-05-06 19:48 - 2024-05-06 19:48 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2024-05-06 19:47 - 2024-05-13 12:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-05-06 19:47 - 2024-05-06 22:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-05-06 19:42 - 2024-05-13 12:19 - 000008192 ___SH C:\DumpStack.log.tmp
2024-05-06 19:42 - 2024-05-13 12:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-05-06 19:42 - 2024-05-06 19:42 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2024-05-06 19:05 - 2024-05-08 13:48 - 000000000 ___DC C:\WINDOWS\Panther
2024-05-06 12:00 - 2024-05-06 12:00 - 001172840 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2024-05-06 12:00 - 2024-05-06 12:00 - 000123840 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2024-05-04 21:42 - 2024-05-04 21:44 - 000000000 ____D C:\AdwCleaner
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-05-13 12:42 - 2024-01-12 16:20 - 000000000 ____D C:\FRST
2024-05-13 12:27 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-05-13 12:26 - 2019-12-07 16:41 - 000716932 _____ C:\WINDOWS\system32\perfh005.dat
2024-05-13 12:26 - 2019-12-07 16:41 - 000145110 _____ C:\WINDOWS\system32\perfc005.dat
2024-05-13 12:26 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-05-13 12:24 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-05-13 12:18 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2024-05-13 12:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files\Windows Portable Devices
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2024-05-13 12:12 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-05-13 12:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-05-13 12:12 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2024-05-13 12:10 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-05-13 11:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-05-11 17:30 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-05-09 23:09 - 2021-08-27 10:24 - 000000000 ____D C:\TRANSLAT
2024-05-08 05:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2024-05-08 00:11 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-05-07 11:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2024-05-07 11:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2024-05-07 04:51 - 2019-12-07 16:41 - 000000000 ____D C:\WINDOWS\SysWOW64\cs
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2024-05-07 04:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2024-05-07 04:50 - 2019-12-07 16:42 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2024-05-07 04:50 - 2019-12-07 16:41 - 000000000 ____D C:\WINDOWS\system32\cs
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Keywords
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Com
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-05-07 04:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2024-05-07 04:49 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-05-07 04:49 - 2019-12-07 16:44 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemApps
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\IME
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2024-05-07 04:49 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-05-07 04:42 - 2019-12-07 16:44 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2024-05-07 04:42 - 2019-12-07 16:44 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2024-05-07 04:42 - 2019-12-07 11:15 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2024-05-07 04:42 - 2019-12-07 11:14 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2024-05-06 22:35 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2024-05-06 20:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-05-06 20:41 - 2019-12-07 11:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2024-05-06 20:39 - 2019-12-07 11:18 - 000000000 ____D C:\WINDOWS\Setup
2024-05-06 20:39 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-05-06 20:38 - 2019-12-07 11:14 - 000000167 _____ C:\WINDOWS\win.ini
2024-05-06 20:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Help
2024-05-06 20:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2024-05-06 20:09 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2024-05-06 20:08 - 2019-12-07 16:42 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2024-05-06 20:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\spool
2024-05-06 20:00 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT
==================== Files in the root of some directories ========
2024-05-08 05:04 - 2024-05-13 09:12 - 000007633 _____ () C:\Users\Radov\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
Ran by Radov (13-05-2024 12:51:46)
Running from C:\Users\Radov\Desktop\Viry.cz
Microsoft Windows 10 Home Version 22H2 19045.4355 (X64) (2024-05-06 18:07:36)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-1176658507-1449335258-861927326-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1176658507-1449335258-861927326-503 - Limited - Disabled)
Guest (S-1-5-21-1176658507-1449335258-861927326-501 - Limited - Disabled)
Radov (S-1-5-21-1176658507-1449335258-861927326-1001 - Administrator - Enabled) => C:\Users\Radov
WDAGUtilityAccount (S-1-5-21-1176658507-1449335258-861927326-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Alcohol 120% (HKLM-x32\...\Alcohol 120) (Version: 2.1.1.2201 - Alcohol Soft)
Avast Cleanup Premium (HKLM\...\Avast Cleanup) (Version: 23.4.15807.16040 - Avast Software)
Avast Premium Security (HKLM\...\Avast Antivirus) (Version: 24.4.6112 - Avast Software)
BlueStacks 5 (HKLM\...\BlueStacks_nxt) (Version: 5.5.0.1083 - BlueStack Systems, Inc.)
BlueStacks X (HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\BlueStacks X) (Version: 0.13.2.5 - BlueStack Systems, Inc.)
CnCNet5 Yuri's Revenge (HKLM-x32\...\{D22A250A-085F-415E-959E-8DB49F4E4CCA}_is1) (Version: 1.0 - cncnet.org)
Command & Conquer Red Alert 2 (HKLM-x32\...\Red Alert 2) (Version: - )
Command && Conquer Red Alert 2 - Yuri's Revenge (HKLM-x32\...\Yuri's Revenge) (Version: - )
Driver Booster 11 (HKLM-x32\...\Driver Booster_is1) (Version: 11.1.0 - IObit)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 124.0.6367.201 - Google LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.97 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 124.0.2478.97 - Microsoft Corporation)
Microsoft Office Access MUI (Czech) 2007 (HKLM-x32\...\{90120000-0015-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Excel MUI (Czech) 2007 (HKLM-x32\...\{90120000-0016-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (HKLM-x32\...\{90120000-00BA-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (HKLM-x32\...\{90120000-0044-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (HKLM-x32\...\{90120000-00A1-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (HKLM-x32\...\{90120000-001A-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (HKLM-x32\...\{90120000-0018-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (HKLM-x32\...\{90120000-001F-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (HKLM-x32\...\{90120000-001F-041B-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (HKLM-x32\...\{90120000-002C-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (HKLM-x32\...\{90120000-0019-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Czech) 2007 (HKLM\...\{90120000-002A-0405-1000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (HKLM-x32\...\{90120000-006E-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (HKLM-x32\...\{90120000-001B-0405-0000-0000000FF1CE}) (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\OneDriveSetup.exe) (Version: 24.086.0428.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
NVIDIA Ovladač 3D Vision 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.35 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.35 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.13.7500 - NVIDIA Corporation) Hidden
PC Translator (HKLM-x32\...\PC Translator) (Version: - )
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{B9A7A138-BFD5-4C73-A269-F78CCA28150E}) (Version: 8.94.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Westwood Shared Internet Components (HKLM-x32\...\WOLAPI) (Version: - )
WinRAR 6.02 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.02.0 - win.rar GmbH)
Packages:
=========
Vyhledávání na webu z Microsoft Bingu -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.92.0_x64__8wekyb3d8bbwe [2024-05-07] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2210608 2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2-x32: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxShlex.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxShlEx64.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2024-05-07 13:42 - 2018-03-24 01:05 - 000880024 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2024-05-07 13:42 - 2018-03-24 01:05 - 000343728 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO-x32: WebTransBHO Class -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> C:\ProgramData\LangSoft\WebIE.dll [2024-05-09] () [File not signed]
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll [2024-05-09] () [File not signed]
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\Control Panel\Desktop\\Wallpaper -> c:\users\radov\appdata\local\microsoft\windows\themes\roamedthemefiles\desktopbackground\image(2).jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1176658507-1449335258-861927326-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_1E8A3F8A520F78AE9D69B9F5C6F80EDE"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{C9F6108D-FCD8-4891-A7F8-148595B75042}C:\westwood\ra2\gamemd-spawn.exe] => (Allow) C:\westwood\ra2\gamemd-spawn.exe (Westwood Studios) [File not signed]
FirewallRules: [UDP Query User{F14282B4-7123-4B21-A0B4-99232CE92113}C:\westwood\ra2\gamemd-spawn.exe] => (Allow) C:\westwood\ra2\gamemd-spawn.exe (Westwood Studios) [File not signed]
FirewallRules: [{BB3F6CEB-040B-457C-91E9-B65E54F542D0}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Bluestack Systems, Inc -> Bluestack Systems, Inc.)
FirewallRules: [{DC9C7261-453E-4DD1-A597-4AEE7F67E1C4}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe (Bluestack Systems, Inc -> Bluestack Systems, Inc.)
FirewallRules: [{66BD0524-168F-414D-BC21-7180E9A13CE8}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Bluestack Systems, Inc -> BlueStack Systems)
FirewallRules: [{FC17B1B2-B6CC-4F99-BB2A-6A0FBC0EC8BD}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{C865817B-CDD0-4D06-ADD4-302D79508A27}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EC77F675-654C-4140-AC46-EE6042CD1C72}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{BDC2C553-B219-4693-BEF5-A1AF5E96EE1D}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{D9F4CE74-8998-4E76-B45A-C36522EFE3AC}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{8C497011-E22C-4163-B389-5E37D31B43C1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{979294B6-52CA-403A-95FB-2ED7F3905771}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{215B6513-7C79-4F27-BC0B-EC31040A0A7B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{13DB5011-047D-452E-81CD-07237902DFDB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{052C5DED-7F95-4D0C-A253-571234419157}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
09-05-2024 20:11:38 Naplánovaný kontrolní bod
13-05-2024 09:05:23 Instalační služba modulů systému Windows
13-05-2024 09:13:31 Instalační služba modulů systému Windows
==================== Faulty Device Manager Devices ============
Name: Řadič jednoduché komunikace pro sběrnici PCI
Description: Řadič jednoduché komunikace pro sběrnici PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (05/13/2024 12:17:50 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]
Error: (05/13/2024 08:44:28 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\WINDOWS\system32\sysmain.dll (kód chyby Win32 126).
Error: (05/10/2024 11:28:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x2cb4
Čas spuštění chybující aplikace: 0x01daa3148f34bca7
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 6b02b7fc-b4e5-4365-9178-1fd27777e844
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/10/2024 08:20:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x21b0
Čas spuštění chybující aplikace: 0x01daa30412004e22
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 1895cf3a-46ed-4c30-a39b-456ee5af1ad2
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/10/2024 03:32:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program svchost.exe verze 10.0.19041.3636 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: ba8
Čas spuštění: 01daa201ce34e5ca
Čas ukončení: 4294967295
Cesta k aplikaci: C:\Windows\System32\svchost.exe
ID hlášení: b210d1fc-ba40-4d99-ad42-dac6dcef4d5c
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Unknown
Error: (05/10/2024 09:17:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x2bf0
Čas spuštění chybující aplikace: 0x01daa2a5204b2be0
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 441c5a46-64f0-4f3e-943f-709909496fc8
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/09/2024 09:31:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000a417f
ID chybujícího procesu: 0x2be8
Čas spuštění chybující aplikace: 0x01daa24394b1a66e
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\Program Files\BlueStacks_nxt\HD-Player.exe
ID zprávy: 8fcd95f1-b2ab-40d6-b87a-190d64f57456
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (05/09/2024 08:02:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HD-Player.exe, verze: 5.5.0.1083, časové razítko: 0x61c2ce6f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.19041.3636, časové razítko: 0x81cf5d89
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000007286e
ID chybujícího procesu: 0x2904
Čas spuštění chybující aplikace: 0x01daa22cd25f6256
Cesta k chybující aplikaci: C:\Program Files\BlueStacks_nxt\HD-Player.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 63450795-9259-4d4f-8b3b-d9269a92370b
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (05/13/2024 12:24:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Aktualizace Google (gupdate) neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.
Error: (05/13/2024 12:24:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Služba Aktualizace Google (gupdate) bylo dosaženo časového limitu (30000 ms).
Error: (05/13/2024 12:17:26 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba aswbIDSAgent se po přijetí pokynu pro vypnutí neukončila správně.
Error: (05/13/2024 09:33:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avast Cleanup byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.
Error: (05/13/2024 09:33:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Brightdata Service (win_alcohol.soft) byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.
Error: (05/13/2024 09:33:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA Display Container LS byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1000 milisekund: Restartovat službu.
Error: (05/13/2024 09:33:07 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba StarWind AE Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Error: (05/13/2024 09:33:07 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Alcohol Virtual AHCI Controller Management Service byla neočekávaně ukončena. Tento stav nastal již 1krát.
Windows Defender:
================
Date: 2024-05-07 23:38:46
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {83CC893C-514B-44FE-BAEB-D899275B9FDE}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-05-07 22:40:16
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {7DBF78F8-7396-4436-A2E8-E6FD959A8584}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-05-06 23:56:58
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/Keygen
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: file:_C:\Users\Radov\Desktop\Nová složka\Red Alert 2 +Yr+Patch+Keygen\Keygen.exe
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: DESKTOP-OHUR8ME\Radov
Název procesu: C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe
Verze bezpečnostních informací: AV: 1.409.724.0, AS: 1.409.724.0, NIS: 1.409.724.0
Verze modulu: AM: 1.1.24030.4, NIS: 1.1.24030.4
Date: 2024-05-06 22:52:05
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Backdoor:MSIL/AsyncRat!pz
Závažnost: Vážné
Kategorie: Zadní vrátka
Cesta: file:_C:\Users\Radov\Downloads\Alcohol 120%.exe; webfile:_C:\Users\Radov\Downloads\Alcohol 120%.exe|https://data4.sdilej.cz/sdilej_free.php ... 3206987717
Původ detekce: Internet
Typ detekce: Konkrétní
Zdroj detekce: Soubory ke stažení a přílohy
Uživatel: DESKTOP-OHUR8ME\Radov
Název procesu: Unknown
Verze bezpečnostních informací: AV: 1.409.723.0, AS: 1.409.723.0, NIS: 1.409.723.0
Verze modulu: AM: 1.1.24030.4, NIS: 1.1.24030.4
Date: 2024-05-06 20:31:05
Description:
Antivirová ochrana v programu Microsoft Defender zjistil malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: HackTool:Win32/AutoKMS
Závažnost: Vysoké
Kategorie: Nástroj
Cesta: containerfile:_F:\Microsoft Toolkit.exe; file:_F:\Microsoft Toolkit.exe->[SAResource]->[MSILRES:?.?.resources]
Původ detekce: Místní počítač
Typ detekce: Konkrétní
Zdroj detekce: Ochrana v reálném čase
Uživatel: DESKTOP-OHUR8ME\Radov
Název procesu: C:\Windows\explorer.exe
Verze bezpečnostních informací: AV: 1.303.25.0, AS: 1.303.25.0, NIS: 1.303.25.0
Verze modulu: AM: 1.1.16400.2, NIS: 1.1.16400.2
CodeIntegrity:
===============
Date: 2024-05-13 12:26:26
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: AMI 7.14 10/21/2011
Motherboard: Foxconn 2ABF
Processor: Intel(R) Pentium(R) CPU G630 @ 2.70GHz
Percentage of memory in use: 37%
Total physical RAM: 8172.86 MB
Available physical RAM: 5137.59 MB
Total Virtual: 9452.86 MB
Available Virtual: 6343.7 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:930.49 GB) (Free:800.65 GB) (Model: HGST HTS721010A9E630) NTFS
\\?\Volume{f2f5692b-6b93-4e2f-95c1-079c69dcf335}\ (Obnovení) (Fixed) (Total:0.29 GB) (Free:0.08 GB) NTFS
\\?\Volume{24506013-4698-4b5e-a0b5-392ddb0d55a3}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{1920aee1-58a6-4688-969e-0e7947164b12}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 37A0AD4E)
Partition: GPT.
==================== End of Addition.txt =======================