VIRY.CZ

Zdravím vás borci, mám tu Pc otce po přeinstalaci(přechodu) z win 8 na win 10, dlouho se mu načítá win, tak jsem chtěl vypnout zbytečné věci přes hijackthis, ale nějak mi to hlásí na stránkách chybu, tak jsem se tu dočetl, že používáte jakýsi jiný nástroj FRST, v tom však neumím číst. Prosím o pomoc, co vypnout případně zda je tam nějaká havěť? děkuji

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:44:45, on 3. 7. 2024
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.19041.4355)
Boot mode: Normal

Running processes:
C:\Windows\jmesoft\hotkey.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe
C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\SysWOW64\NOTEPAD.EXE
C:\Users\Zdeněk\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=40139
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: (no name) - {13D67BB7-DB5F-48AA-884D-7A5D94168509} - (no file)
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\126.0.2592.87\BHO\ie_to_edge_bho.dll
O4 - HKLM\..\Run: [jmekey] C:\windows\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [jmesoft] C:\Windows\jmesoft\ServiceLoader.exe
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [Bonus.SSR.FR11] "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Programy\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [AvastBrowserAutoLaunch_5ADE220B7E001118BA50867901C48CF4] "C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe" --check-run=src=logon --onboarding-at-startup --auto-launch-at-startup --profile-directory="Default"
O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_99D998405AD991EB6B6A63613EEE74F3] "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Zdeněk\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE"
O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Zdeněk\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Zdeněk\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
O4 - HKCU\..\RunOnce: [Uninstall 24.111.0602.0003] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Zdeněk\AppData\Local\Microsoft\OneDrive\24.111.0602.0003"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Download selected with FDM - file://C:/Program Files (x86)/FreeDownloadManager.ORG/Free Download Manager/dlselected.htm
O8 - Extra context menu item: Download with FDM - file://C:/Program Files (x86)/FreeDownloadManager.ORG/Free Download Manager/dllink.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://juniper.net/dana-cached/sc/Juni ... Client.cab
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\System32\DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atiesrxx.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Tools (avast! Tools) - AVAST Software - C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
O23 - Service: Avast Secure Browser Elevation Service (AvastSecureBrowserElevationService) (AvastSecureBrowserElevationService) - Gen Digital Inc. - C:\Program Files (x86)\AVAST Software\Browser\Application\126.0.25497.127\elevation_service.exe
O23 - Service: AvastWscReporter - AVAST Software - C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_5df5dbf - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\GameInputSvc.exe,-101 (GameInputSvc) - Unknown owner - C:\WINDOWS\System32\GameInputSvc.exe (file missing)
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files (x86)\Google\Chrome\Application\126.0.6478.127\elevation_service.exe
O23 - Service: GoogleUpdater InternalService 128.0.6537.0 (GoogleUpdaterInternalService128.0.6537.0) (GoogleUpdaterInternalService128.0.6537.0) - Google LLC - C:\Program Files (x86)\Google\GoogleUpdater\128.0.6537.0\updater.exe
O23 - Service: GoogleUpdater Service 128.0.6537.0 (GoogleUpdaterService128.0.6537.0) (GoogleUpdaterService128.0.6537.0) - Google LLC - C:\Program Files (x86)\Google\GoogleUpdater\128.0.6537.0\updater.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe
O23 - Service: JME Keyboard Driver (JME Keyboard) - Unknown owner - C:\Windows\jmesoft\Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15485 bytes

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01.07.2024
Ran by Zdeněk (administrator) on ZDENEK-PC (LENOVO 90C2001DCK) (03-07-2024 15:12:48)
Running from C:\Users\Zdeněk\Downloads\FRST64.exe
Loaded Profiles: Zdeněk
Platform: Microsoft Windows 10 Home Version 22H2 19045.4529 (X64) Language: Angličtina (Spojené státy) -> Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4>
(C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(C:\Program Files (x86)\Citrix\ICA Client\concentr.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe
(C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe
(C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe ->) (Logitech, Inc. -> ) C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AVAST Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(C:\Windows\jmesoft\Service.exe ->) () [File not signed] C:\Windows\jmesoft\JME_LOAD.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atieclxx.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <22>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Lenovo) [File not signed] C:\Windows\jmesoft\hotkey.exe
(Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe <3>
(services.exe ->) () [File not signed] C:\Windows\jmesoft\Service.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atiesrxx.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(services.exe ->) (CyberLink -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(svchost.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe <5>
(svchost.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [366488 2023-11-14] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [jmekey] => C:\windows\jmesoft\hotkey.exe [118784 2013-07-24] (Lenovo) [File not signed]
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-08-17] () [File not signed]
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-12-05] (CyberLink -> CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1298504 2014-11-08] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [925960 2011-08-18] (ABBYY SOLUTIONS LIMITED -> ABBYY.) [File not signed]
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [556136 2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [403048 2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1069296 2018-03-27] (Seznam.cz, a.s. -> )
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1706224 2021-04-28] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Programy\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd -> Disc Soft Ltd)
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\szninstall.exe [1069296 2018-03-27] (Seznam.cz, a.s. -> )
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Zdeněk\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] (Seznam.cz, a.s. -> )
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Run: [AvastBrowserAutoLaunch_5ADE220B7E001118BA50867901C48CF4] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [3153984 2024-06-26] (Avast Software s.r.o. -> Gen Digital Inc.)
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Run: [MicrosoftEdgeAutoLaunch_99D998405AD991EB6B6A63613EEE74F3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3883472 2024-07-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [437248 2014-09-12] (ZONER software, a.s. -> ZONER software)
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Zdeněk\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Zdeněk\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" [69866528 2024-07-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\RunOnce: [Uninstall 24.111.0602.0003] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Zdeněk\AppData\Local\Microsoft\OneDrive\24.111.0602.0003" [0 2024-07-03] () <==== ATTENTION [zero byte File/Folder]
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\MountPoints2: {20c5418c-69a9-11e5-825e-c03fd5e54c03} - "F:\setup.exe"
HKLM\...\Windows x64\Print Processors\Canon MG5200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAE.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5200 series: C:\WINDOWS\system32\CNMLMAE.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\92.2.11577.159\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\126.0.6478.127\Installer\chrmstp.exe [2024-06-27] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\126.0.25497.127\Installer\chrmstp.exe [2024-07-02] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\88.0.7844.104\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\Users\Zdeněk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-10-10]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {19C9469A-F7EB-46BE-A9A7-292C40A59F21} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)
Task: {4AA9BFAC-C2D1-45D9-A261-F9BE00C5EAF1} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [5043608 2023-11-14] (Avast Software s.r.o. -> AVAST Software)
Task: {6211F774-ED0B-4283-87F0-CEAD6B71BF71} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [3153984 2024-06-26] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {71AA46D5-72F1-471F-BE82-B5D8AACBFB91} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [3153984 2024-06-26] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {8FB07936-606E-421E-8311-6770CFAEADEC} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe -> C:\Program Files\Common Files\AV\avast! Antivirus\/backup /iavs
Task: {1DB6F2F4-E774-4E1B-BCC6-19993EF4002E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2144664 2023-08-02] (Avast Software s.r.o. -> Avast Software)
Task: {E7773354-11DC-4169-98A0-43A3A4C3CC44} - System32\Tasks\AvastBrowserProtectS-1-5-21-3454477439-342108614-1476946386-1001 => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1690008 2024-04-23] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {8FB18C3F-6352-492A-A87D-6B5ADFCEBF31} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2022-12-13] (Avast Software s.r.o. -> AVAST Software)
Task: {5459EE38-0C5D-400B-8830-80B166A7C8DC} - System32\Tasks\AvastUpdateTaskMachineCore1d6abbb2be4063d => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2022-12-13] (Avast Software s.r.o. -> AVAST Software)
Task: {21CFF0D4-9A39-4BEB-9C44-B285E702E069} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2022-12-13] (Avast Software s.r.o. -> AVAST Software)
Task: {B52C1974-EE4E-4480-A9FF-B4EE332487BC} - System32\Tasks\FreeDownloadManagerNetworkMonitor => C:\Program Files (x86)\FreeDownloadManager.ORG\Free Download Manager\winwfpmonitor.exe [693448 2017-02-17] (Softdeluxe Ltd. -> FreeDownloadManager.org)
Task: {41C3334F-DD1B-4316-8BE6-A9CAAB80AAC3} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6537.0{B573C967-9FEF-4828-BDE0-13B60C4C735F} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6537.0\updater.exe [4623976 2024-06-13] (Google LLC -> Google LLC)
Task: {D467E823-7E1E-471F-A38C-D611488E6B5B} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [35584 2014-07-30] (LENOVO -> )
Task: {5EFB9E7C-DB13-40AD-A42A-E2EA25194714} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => "%ProgramFiles%\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe" (No File)
Task: {90C6E7C6-367A-42E3-B00D-C5C9EB4C1DD6} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [17184 2014-05-30] (LENOVO -> Lenovo)
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (No File)
Task: {6D188E13-F873-4A9D-BB46-65E5066081E7} - System32\Tasks\Norton Product InstallerIdle => C:\Users\ZDENK~1\AppData\Local\Temp\in364BB553\1927CDD6_stp\SymInstallStub.exe -> C:\Users\ZDENK~1\AppData\Local\Temp\in364BB553\1927CDD6_stp\\/partnerid=afterdld /productlist=nss /staging=false /affid=afterdld12_16_49 /delay=0 /launchedby=4 <==== ATTENTION
Task: {8568E347-8F68-4993-895B-EA0167FEFCA9} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [95192 2013-03-09] (CyberLink Corp. -> CyberLink Corp.)
Task: {7AFB7417-459B-4675-97F7-4D4BEF78004E} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {24825A75-9D4D-4D23-AFB0-D0ABCD0ABB89} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {73E9BAB4-0AA9-4ECF-BC7E-22015B25FA48} - System32\Tasks\SweetLabs App Platform => C:\Users\Zdeněk\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe [7931928 2022-12-19] (Pokki, Inc. -> Pokki) <==== ATTENTION
Task: {CAEB823F-A40E-4F64-8E16-B17355090BFD} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe [53248 2013-10-25] () [File not signed]

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Norton Product InstallerIdle.job => C:\Users\ZDENK~1\AppData\Local\Temp\in364BB553\1927CDD6_stp\SymInstallStub.exe <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{D7F36ED6-9E53-4FA1-B89C-A8C1B460C4A5}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{D7F36ED6-9E53-4FA1-B89C-A8C1B460C4A5}: [DhcpDomain] Home

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Zdeněk\AppData\Local\Microsoft\Edge\User Data\Default [2024-07-03]
Edge Extension: (Dokumenty Google offline) - C:\Users\Zdeněk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-18]
Edge Extension: (Edge relevant text changes) - C:\Users\Zdeněk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-16]

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-01-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-09-05] (Google) [File not signed]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1579.3\npAvastBrowserUpdate3.dll [2022-12-13] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1579.3\npAvastBrowserUpdate3.dll [2022-12-13] (Avast Software s.r.o. -> AVAST Software)

Chrome:
=======
CHR Profile: C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default [2024-07-03]
CHR Notifications: Default -> hxxps://mail.google.com; hxxps://www.eximtours.cz; hxxps://www.kosik.cz; hxxps://www.kupi.cz; hxxps://www.megaknihy.cz; hxxps://www.netflix.com; hxxps://www.slevomat.cz; hxxps://www.youtube.com
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxps://www.netflix.com/browse","hxxps://www.eb ... xtensions/"
CHR NewTab: Default -> Not-active:"chrome-extension://olfeabkoenfaoljndfecamgilllcpiak/speeddial/newTab.html"
CHR DefaultSearchURL: Default -> hxxps://search.seznam.cz/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> seznam.cz
CHR DefaultNewTabURL: Default -> hxxps://search.seznam.cz/?sourceid=chromechoice
CHR DefaultSuggestURL: Default -> hxxps://suggest.seznam.cz/fulltext_ff?phrase={searchTerms}
CHR Session Restore: Default -> is enabled.
CHR Extension: (I don't care about cookies) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2024-07-01]
CHR Extension: (Dokumenty Google offline) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-02]
CHR Extension: (AdBlock - nejlepší blokátor reklam) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2024-06-27]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Seznam.cz) - C:\Users\Zdeněk\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2023-08-07]
CHR HKU\S-1-5-21-3454477439-342108614-1476946386-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-3454477439-342108614-1476946386-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-3454477439-342108614-1476946386-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY SOLUTIONS LIMITED -> ABBYY)
S4 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-10-10] (Adobe Systems) [File not signed]
S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [9003928 2023-11-14] (Avast Software s.r.o. -> AVAST Software)
S4 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2022-12-13] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [735640 2023-11-14] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [1140120 2023-11-14] (Avast Software s.r.o. -> AVAST Software)
S4 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [191120 2022-12-13] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\126.0.25497.127\elevation_service.exe [1773352 2024-06-26] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-07-29] (Avast Software s.r.o. -> AVAST Software)
S4 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (Shanghai Comet Network Technology -> www.BitComet.com)
S3 Disc Soft Lite Bus Service; C:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd -> Disc Soft Ltd)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [File not signed]
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-08-17] () [File not signed]
S4 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-07-30] (LENOVO -> LENOVO INCORPORATED.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] (CyberLink -> )
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [31528 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [240688 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [393904 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297984 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [96072 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [26616 2023-12-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39752 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [276856 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [561888 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105352 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80528 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [952856 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [710144 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [213296 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319672 2023-11-14] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2015-10-03] (Disc Soft Ltd -> Disc Soft Ltd)
R3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [103656 2013-10-21] (Genesys Logic,INC. -> GenesysLogic)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80160 2015-02-13] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.)
R1 NEOFLTR_817_41041; C:\windows\system32\Drivers\NEOFLTR_817_41041.SYS [108344 2015-12-18] (Juniper Networks, Inc. -> Pulse Secure, LLC)
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74048 2021-04-28] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] (CyberLink -> "CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-07-03 15:05 - 2024-07-03 15:10 - 000078138 _____ C:\Users\Zdeněk\Downloads\Addition.txt
2024-07-03 14:53 - 2024-07-03 15:19 - 000030535 _____ C:\Users\Zdeněk\Downloads\FRST.txt
2024-07-03 14:53 - 2024-07-03 15:15 - 000000000 ____D C:\FRST
2024-07-03 14:50 - 2024-07-03 14:50 - 002395648 _____ (Farbar) C:\Users\Zdeněk\Downloads\FRST64.exe
2024-07-03 14:50 - 2024-07-03 14:50 - 002395648 _____ (Farbar) C:\Users\Zdeněk\Downloads\FRST64 (1).exe
2024-07-03 14:40 - 2024-07-03 14:40 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\Safer-Networking Ltd
2024-07-03 14:39 - 2024-07-03 14:39 - 018583328 _____ (Safer-Networking Ltd. ) C:\Users\Zdeněk\Downloads\SpybotIdentityMonitor-4.1-setup.exe
2024-07-03 14:39 - 2024-07-03 14:39 - 000001491 _____ C:\Users\Public\Desktop\Spybot Identity Monitor.lnk
2024-07-03 14:39 - 2024-07-03 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot Identity Monitor
2024-07-03 14:39 - 2024-07-03 14:39 - 000000000 ____D C:\Program Files (x86)\Safer-Networking Ltd
2024-07-03 14:34 - 2024-07-03 14:34 - 000388608 _____ (Trend Micro Inc.) C:\Users\Zdeněk\Downloads\hijackthis.exe
2024-07-01 12:13 - 2024-07-01 12:13 - 000182100 _____ C:\Users\Zdeněk\Downloads\1908 František Josef Foto 27.juni 1908.webp
2024-06-28 14:49 - 2024-06-28 14:50 - 000229278 _____ C:\Users\Zdeněk\Downloads\35 H 1908 Rakousko prožkoumat.webp
2024-06-28 14:17 - 2024-06-28 14:17 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\cache
2024-06-28 14:11 - 2024-06-28 14:16 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\AMD
2024-06-28 14:11 - 2024-06-28 14:11 - 000000000 ____D C:\ProgramData\Propagation
2024-06-28 10:11 - 2024-06-29 23:23 - 000002202 _____ C:\WINDOWS\system32\Tasks\StartCN
2024-06-28 10:11 - 2024-06-29 23:23 - 000002122 _____ C:\WINDOWS\system32\Tasks\StartDVR
2024-06-28 10:11 - 2024-06-28 10:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2024-06-28 10:07 - 2024-06-28 10:07 - 000000000 _____ C:\WINDOWS\system32\spu_storage.bin
2024-06-28 10:06 - 2024-06-28 10:06 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2024-06-28 10:03 - 2020-10-29 13:39 - 001783920 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2024-06-28 10:03 - 2020-10-29 13:39 - 001783920 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-06-28 10:03 - 2020-10-29 13:39 - 001593456 _____ (AMD) C:\WINDOWS\system32\coinst_20.10.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 001374320 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-06-28 10:03 - 2020-10-29 13:39 - 001374320 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-06-28 10:03 - 2020-10-29 13:39 - 001085360 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 001085360 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000944208 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000944208 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000736880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000621168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000496752 _____ C:\WINDOWS\system32\GameManager64.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000493168 _____ C:\WINDOWS\system32\dgtrayicon.exe
2024-06-28 10:03 - 2020-10-29 13:39 - 000456304 _____ C:\WINDOWS\system32\atieah64.exe
2024-06-28 10:03 - 2020-10-29 13:39 - 000380016 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000245360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000046704 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2024-06-28 10:03 - 2020-10-29 13:39 - 000043632 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 064809072 _____ C:\WINDOWS\system32\amd_comgr.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 053684848 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 004630640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 004141168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 001341552 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000941168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000768624 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000553584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000489584 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000383600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000380016 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000198312 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000167400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000134768 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000122480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000120432 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-06-28 10:03 - 2020-10-29 13:38 - 000070256 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2024-06-28 10:03 - 2020-10-29 13:37 - 000546800 _____ C:\WINDOWS\system32\amdmiracast.dll
2024-06-28 10:03 - 2020-10-29 13:37 - 000135928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2024-06-28 10:03 - 2020-10-29 13:37 - 000130232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2024-06-28 10:03 - 2020-10-29 13:37 - 000120264 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2024-06-28 10:03 - 2020-10-29 12:29 - 000154384 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin
2024-06-28 10:03 - 2020-10-29 12:29 - 000125488 _____ C:\WINDOWS\system32\kapp_ci.sbin
2024-06-28 10:03 - 2020-10-29 12:29 - 000121168 _____ C:\WINDOWS\system32\kapp_si.sbin
2024-06-26 18:36 - 2024-06-26 18:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2024-06-26 18:35 - 2024-06-26 18:35 - 000000000 ____D C:\Program Files\ATI Technologies
2024-06-26 18:25 - 2024-06-26 18:25 - 000000000 ____D C:\ProgramData\ATI
2024-06-26 18:20 - 2024-06-26 18:20 - 000000000 ____D C:\Users\Default\AppData\Roaming\ATI
2024-06-26 18:20 - 2024-06-26 18:20 - 000000000 ____D C:\Users\Default\AppData\Local\ATI
2024-06-19 17:21 - 2024-06-19 17:34 - 000000000 ____D C:\WINDOWS\Minidump
2024-06-19 17:21 - 2024-06-19 17:33 - 000829444 _____ C:\WINDOWS\Minidump\061924-41781-01.dmp
2024-06-19 17:21 - 2024-06-19 17:21 - 393197472 _____ C:\WINDOWS\MEMORY.DMP
2024-06-18 12:10 - 2024-06-18 12:24 - 3291686912 _____ C:\Users\Zdeněk\Downloads\HBCD_PE_x64.iso
2024-06-12 17:16 - 2024-06-12 17:16 - 000000000 ___HD C:\$WinREAgent
2024-06-11 10:50 - 2024-06-11 10:50 - 000247446 _____ C:\Users\Zdeněk\Downloads\priloha_670330173_1_vyhlaseni-popisu-veci---vyhlaseni-popisu-veci_sig--1-.pdf
2024-06-10 22:20 - 2024-06-10 22:20 - 000239565 _____ C:\Users\Zdeněk\Downloads\IMG_0004.pdf
2024-06-10 21:59 - 2024-06-10 21:59 - 000000000 ___RD C:\Users\Zdeněk\Documents\Scanned Documents
2024-06-10 21:59 - 2024-06-10 21:59 - 000000000 ____D C:\Users\Zdeněk\Documents\Fax
2024-06-09 16:44 - 2024-06-09 16:45 - 000308884 _____ C:\Users\Zdeněk\Downloads\10 kronen 1908 4 blok.webp
2024-06-09 14:47 - 2024-06-09 14:47 - 000073150 _____ C:\Users\Zdeněk\Downloads\11 asi vada 9 ky 1908 10 h.webp
2024-06-06 12:27 - 2024-06-06 12:27 - 000000000 ____D C:\Users\Zdeněk\Documents\Nová složka
2024-06-05 11:29 - 2024-06-05 11:29 - 000541669 _____ C:\Users\Zdeněk\Downloads\Prikopa Zdenek 2.pdf
2024-06-04 18:24 - 2024-06-04 18:24 - 000220533 _____ C:\Users\Zdeněk\Downloads\leitmeritz-litomerice-ca-1900 1902.jpeg

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-07-03 15:18 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-07-03 15:08 - 2023-12-24 18:27 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-07-03 14:35 - 2015-09-10 11:20 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\VirtualStore
2024-07-03 14:34 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-07-03 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-07-03 14:18 - 2023-12-24 18:30 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-07-03 14:18 - 2023-12-24 18:30 - 000002285 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-07-03 14:15 - 2023-12-24 19:23 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3454477439-342108614-1476946386-1001
2024-07-03 14:15 - 2023-12-24 19:22 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3454477439-342108614-1476946386-1001
2024-07-03 14:15 - 2023-12-24 18:38 - 000002431 _____ C:\Users\Zdeněk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-07-03 14:14 - 2017-10-05 18:40 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\AVAST Software
2024-07-02 12:54 - 2018-04-05 10:06 - 000002509 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2024-07-01 23:03 - 2023-12-24 18:56 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2024-07-01 12:22 - 2015-10-03 10:39 - 000000000 ____D C:\Users\Zdeněk\AppData\Roaming\Microsoft\Word
2024-07-01 12:12 - 2015-10-04 10:06 - 000000000 ____D C:\Users\Zdeněk\AppData\Roaming\Microsoft\Proof
2024-07-01 10:54 - 2023-11-27 10:38 - 000000000 ___RD C:\Users\Zdeněk\Documents\články 4 2023 listopad
2024-06-29 23:23 - 2023-12-24 22:23 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{44D7D1F1-4CF8-4F3A-AED5-20C80206A5B3}
2024-06-29 23:23 - 2023-12-24 22:23 - 000003420 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{28854108-B9EE-45B5-B9BF-7737DF3F751A}
2024-06-29 23:23 - 2023-12-24 18:56 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-06-29 23:23 - 2023-12-24 18:56 - 000002318 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3454477439-342108614-1476946386-500
2024-06-29 23:23 - 2023-12-24 18:56 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2024-06-29 21:17 - 2015-09-10 11:20 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\Packages
2024-06-28 14:14 - 2023-12-24 19:03 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\D3DSCache
2024-06-28 14:08 - 2023-12-24 18:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-06-28 14:08 - 2023-12-24 18:16 - 000008192 ___SH C:\DumpStack.log.tmp
2024-06-28 10:11 - 2015-01-08 20:32 - 000000000 ____D C:\Program Files\AMD
2024-06-28 10:10 - 2015-01-08 20:32 - 000000000 ____D C:\ProgramData\Package Cache
2024-06-28 10:08 - 2023-12-24 19:10 - 000000000 ____D C:\AMD
2024-06-28 10:07 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-06-27 18:23 - 2023-12-04 04:52 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-06-27 18:23 - 2015-09-16 10:03 - 000002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-06-27 18:23 - 2015-09-16 10:03 - 000002271 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-06-26 23:05 - 2023-12-24 18:38 - 000000000 ____D C:\Users\Zdeněk
2024-06-19 18:05 - 2015-09-10 11:19 - 000000000 ____D C:\Users\Zdeněk\AppData\Local\SweetLabs App Platform
2024-06-17 12:08 - 2023-12-24 19:03 - 000000000 ____D C:\ProgramData\Packages
2024-06-17 12:03 - 2023-12-24 18:54 - 002184384 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-06-17 12:03 - 2015-01-08 21:22 - 001105102 _____ C:\WINDOWS\system32\perfh005.dat
2024-06-17 12:03 - 2015-01-08 21:22 - 000242420 _____ C:\WINDOWS\system32\perfc005.dat
2024-06-17 11:57 - 2015-09-16 10:05 - 000000000 ____D C:\ProgramData\AVAST Software
2024-06-16 18:19 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-06-16 18:16 - 2023-12-24 18:27 - 000296024 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-06-16 18:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-06-16 18:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-06-16 18:12 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-06-16 18:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-06-16 18:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-06-16 18:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-06-16 18:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-06-16 18:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-06-16 18:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-06-13 13:16 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-06-12 17:59 - 2023-12-24 18:31 - 003017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-06-12 17:11 - 2023-12-24 22:12 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-06-12 17:01 - 2023-12-24 22:12 - 199048176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-06-09 14:50 - 2016-12-08 16:41 - 000000681 ____H C:\Users\Zdeněk\Downloads\.picasa.ini

==================== Files in the root of some directories ========

2016-10-11 16:46 - 2019-02-09 22:30 - 000004608 _____ () C:\Users\Zdeněk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-01-17 20:13 - 2023-06-30 17:47 - 000004096 ____H () C:\Users\Zdeněk\AppData\Local\keyfile3.drm
2018-04-07 20:01 - 2023-12-08 18:23 - 000007605 _____ () C:\Users\Zdeněk\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01.07.2024
Ran by Zdeněk (03-07-2024 15:33:31)
Running from C:\Users\Zdeněk\Downloads
Microsoft Windows 10 Home Version 22H2 19045.4529 (X64) (2023-12-24 16:58:04)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3454477439-342108614-1476946386-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3454477439-342108614-1476946386-503 - Limited - Disabled)
Guest (S-1-5-21-3454477439-342108614-1476946386-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3454477439-342108614-1476946386-1005 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-3454477439-342108614-1476946386-504 - Limited - Disabled)
Zdeněk (S-1-5-21-3454477439-342108614-1476946386-1001 - Administrator - Enabled) => C:\Users\Zdeněk

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 11 (HKLM-x32\...\{F1100000-0008-0000-0003-074957833700}) (Version: 11.0.289 - ABBYY)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 23.008.20458 - Adobe)
Adobe AIR (HKLM-x32\...\{0274D240-4D1D-4FDA-9A36-09F0BECD288F}) (Version: 19.0.0.190 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)
Adobe Bridge 1.0 (HKLM-x32\...\{B74D4E10-1033-0000-0000-000000000001}) (Version: 001.000.000 - Adobe Systems) Hidden
Adobe Common File Installer (HKLM-x32\...\{8EDBA74D-0686-4C99-BFDD-F894678E5B39}) (Version: 1.00.0000 - Adobe System Incorporated) Hidden
Adobe Help Center 1.0 (HKLM-x32\...\{E9787678-1033-0000-8E67-000000000001}) (Version: 001.000.000 - Adobe Systems) Hidden
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601053}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Adobe Stock Photos 1.0 (HKLM-x32\...\{786C5747-1033-0000-B58E-000000000001}) (Version: 001.000.000 - Adobe Systems) Hidden
AMD Accelerated Video Transcoding (HKLM\...\{4F5D091B-621D-4A6F-D334-0419927C83BB}) (Version: 13.30.100.40622 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{CE17D25A-5975-4B49-3B89-6EAFE4FF7245}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2020.0821.1329.24282 - Advanced Micro Devices, Inc.)
AnyBurn (HKLM-x32\...\AnyBurn) (Version: 3.3 - Power Software Ltd)
Apowersoft Online Launcher verze 1.4.6 (HKLM-x32\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.4.6 - APOWERSOFT LIMITED)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 23.11.6090 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 126.0.25497.127 - Autoři prohlížeče Avast Secure Browser)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1579.3 - AVAST Software) Hidden
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1065.0 - AVAST Software) Hidden
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.18.170105 - )
BitComet 1.42 (HKLM-x32\...\BitComet_x64) (Version: 1.42 - CometNetwork)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.)
calibre (HKLM-x32\...\{B5D724AD-AC50-46B4-AAA7-62EF18F0CDFE}) (Version: 1.44.0 - Kovid Goyal)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version: - Canon Inc.)
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version: - )
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.6.0 - Canon Inc.)
Catalyst Control Center - Branding (HKLM-x32\...\{11087D24-567D-7D88-69C6-D7A08B5F4C47}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center - Branding (HKLM-x32\...\{4125B98C-DFC6-E7A0-FD44-C7F538557811}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.10.01075 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{F4C97B53-97C8-43B6-A6A1-97CE0286BAE0}) (Version: 4.10.01075 - Cisco Systems, Inc.) Hidden
Citrix Authentication Manager (HKLM-x32\...\{204954A5-5592-49E3-8F8A-063714C5AD2B}) (Version: 11.0.0.47877 - Citrix Systems, Inc.) Hidden
Citrix Receiver (HDX Flash Redirection) (HKLM-x32\...\{5375EB2C-3A95-4912-B74C-DE4392F2705C}) (Version: 14.9.0.2539 - Citrix Systems, Inc.) Hidden
Citrix Receiver 4.9 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.9.0.2539 - Citrix Systems, Inc.)
Citrix Receiver Inside (HKLM-x32\...\{97509D48-ABF9-46DA-8511-FE505CB6B714}) (Version: 4.9.0.65534 - Citrix Systems, Inc.) Hidden
Citrix Receiver(Aero) (HKLM-x32\...\{5DE4679A-0127-4667-A335-C6682AD3041D}) (Version: 14.9.0.2539 - Citrix Systems, Inc.) Hidden
Citrix Receiver(DV) (HKLM-x32\...\{8B18A5A8-7826-43FE-A315-233CF64A138E}) (Version: 14.9.0.2539 - Citrix Systems, Inc.) Hidden
Citrix Receiver(USB) (HKLM-x32\...\{EEC18678-1ECF-4491-AEF8-1918836B1336}) (Version: 14.9.0.2539 - Citrix Systems, Inc.) Hidden
Citrix Web Helper (HKLM-x32\...\{E8C6F559-A4E2-4BAA-B31A-7A5D7A1ADF64}) (Version: 4.9.0.2528 - Citrix Systems, Inc.) Hidden
CyberLink PowerDirector 10 (HKLM\...\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4002 - CyberLink Corp.) Hidden
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4002 - CyberLink Corp.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Dependency Package Update (HKLM\...\{0788641D-D31A-478D-BB34-C41564AE9F93}) (Version: 1.6.26.00 - Lenovo Inc.) Hidden
Dependency Package Update (HKLM\...\{5252431C-288E-409D-ADCF-24407E0E6F70}) (Version: 1.6.25.00 - Lenovo Inc.) Hidden
Dependency Package Update (HKLM\...\{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}) (Version: 1.6.29.00 - Lenovo Inc.) Hidden
DPMigrateTool (HKLM-x32\...\{C069F819-2396-4F87-84FF-7CA842784793}) (Version: 1.0.0.7 - lenovo)
Driver & Application Installation (HKLM-x32\...\{BFECCF2A-F094-4066-8BFA-29CCBB7F6602}) (Version: 6.13.0621 - Lenovo)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Free Download Manager (HKLM-x32\...\{43781dff-e0df-49ce-a6d2-47da96a485e7}}_is1) (Version: - FreeDownloadManager.ORG)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.1.2.2 - Genesys Logic)
Google Earth (HKLM-x32\...\{A2264E8F-1649-11E3-8BED-B8AC6F98CCE3}) (Version: 7.1.2.2019 - Google)
Google Earth Pro (HKLM\...\{3470AD08-85F2-4B1D-8487-FC4750732087}) (Version: 7.3.6.9796 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 126.0.6478.127 - Google LLC)
Host App Service (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\SweetLabs_AP) (Version: 0.269.9.263 - Pokki) <==== ATTENTION
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1050 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{BCCACFE6-91A0-4F32-80A0-ADC0CA048C7B}) (Version: 1.1.1.1 - Intel Corporation) Hidden
Intel(R) Trusted Execution Engine Driver (HKLM\...\{3685B5E8-A0A8-494B-B035-B221547A4B63}) (Version: 1.0.0.1050 - Intel Corporation) Hidden
Juniper Networks Setup Client 64-bit Activex Control (HKLM\...\Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 - Juniper Networks)
Juniper Networks Setup Client Activex Control (HKLM-x32\...\Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 - Juniper Networks)
Lenovo Assistant (HKLM-x32\...\{B2DE4F30-B8C7-49C0-85B9-2F37A5290F00}) (Version: 2.0.0.29 - Lenovo)
Lenovo Blacksilk USB Keyboard Driver (HKLM-x32\...\{B266E062-D6C5-485B-B426-51B152B041A6}) (Version: V1.6.13.0724 - Lenovo)
Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.26.00 - Lenovo Group Limited)
Lenovo Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.7408 - CyberLink Corp.) Hidden
Lenovo Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.7408 - CyberLink Corp.)
Lenovo PowerDVD10 (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.7104.52 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.7104.52 - CyberLink Corp.)
Lenovo Rescue System (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 4.0.0.1901 - CyberLink Corp.) Hidden
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 4.0.0.1901 - CyberLink Corp.)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
LWS Facebook (HKLM-x32\...\{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}) (Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (HKLM-x32\...\{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}) (Version: 13.51.827.0 - Logitech) Hidden
LWS Help_main (HKLM-x32\...\{1651216E-E7AD-4250-92A1-FB8ED61391C9}) (Version: 13.51.828.0 - Logitech) Hidden
LWS Launcher (HKLM-x32\...\{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}) (Version: 13.51.828.0 - Logitech) Hidden
LWS Motion Detection (HKLM-x32\...\{71E66D3F-A009-44AB-8784-75E2819BA4BA}) (Version: 13.51.815.0 - Logitech) Hidden
LWS Pictures And Video (HKLM-x32\...\{08610298-29AE-445B-B37D-EFBE05802967}) (Version: 13.51.815.0 - Logitech) Hidden
LWS Twitter (HKLM-x32\...\{174A3B31-4C43-43DD-866F-73C9DB887B48}) (Version: 13.30.1346.0 - Logitech) Hidden
LWS Webcam Software (HKLM-x32\...\{8937D274-C281-42E4-8CDB-A0B2DF979189}) (Version: 13.51.815.0 - Logitech) Hidden
LWS WLM Plugin (HKLM-x32\...\{9DAEA76B-E50F-4272-A595-0124E826553D}) (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (HKLM-x32\...\{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}) (Version: 13.31.1038.0 - Logitech) Hidden
Mariáš 3.4 (HKLM-x32\...\{6F42ECD9-A1E6-4FFC-B16D-768F1D70AD30}) (Version: 3.4.0 - Ganttsoft)
Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0001.00 - Lenovo Group Limited) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 126.0.2592.87 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 126.0.2592.81 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\OneDriveSetup.exe) (Version: 24.116.0609.0005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (HKLM\...\{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (HKLM\...\{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215 (HKLM-x32\...\{69BCE4AC-9572-3271-A2FB-9423BDA36A43}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215 (HKLM-x32\...\{BBF2AC74-720C-3CB3-8291-5E34039232FA}) (Version: 14.0.24215 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
Microsoft Visual C++ 2017 x64 Additional Runtime - 14.14.26429 (HKLM\...\{B12F584A-DE7A-3EE3-8EC4-8A64DBC0F2A7}) (Version: 14.14.26429 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.14.26429 (HKLM\...\{03EBF679-E886-38AD-8E70-28658449F7F9}) (Version: 14.14.26429 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32\...\{5C38E4A7-9778-4C51-8021-61759600D96A}) (Version: 14.9.0.2539 - Citrix Systems, Inc.) Hidden
Online Video Converter version 1.0.6 (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\{628BF902-EB66-4BDB-97CB-AE4AAAAA5A7F}_is1) (Version: 1.0.6 - APOWERSOFT LIMITED)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Prohlížeč Seznam.cz (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Seznam Browser) (Version: 3.5.0 - Seznam.cz a.s.)
Pulse Secure Application Manager (HKLM-x32\...\Neoteris_Secure_Application_Manager) (Version: 8.1.7.41041 - Pulse Secure, LLC)
Pulse Secure Citrix Services Client (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Juniper_Citrix_Services) (Version: 8.1.7.41041 - Pulse Secure, LLC)
Pulse Secure Setup Client (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\Juniper_Setup_Client) (Version: 8.1.7.61533 - Pulse Secure, LLC)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.18.621.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7106 - Realtek Semiconductor Corp.)
Řazení fotek (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\8d859145f8a7cb44) (Version: 2.1.0.6 - Řazení fotek)
Sada Compatibility Pack pro systém Office 2007 (HKLM-x32\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Samsung Kies3 (HKLM-x32\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.)
Self-service Plug-in (HKLM-x32\...\{C7E328BE-E4FF-4D07-B848-1179C42C8AD4}) (Version: 4.9.0.2528 - Citrix Systems, Inc.) Hidden
Seznam Software (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\SeznamInstall) (Version: 2.1.32 - Seznam.cz)
Spybot Identity Monitor (HKLM-x32\...\{DEE2C8BC-083E-48D8-A934-7B547D87E85C}_is1) (Version: 4.1 - Safer-Networking Ltd.)
Start Menu (HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\SweetLabs_Start_Menu) (Version: 0.269.9.263 - Pokki) <==== ATTENTION
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.52a - Ghisler Software GmbH)
UESDK (HKLM-x32\...\{EB3F6640-58AE-4886-B8BA-466B6939A933}_is1) (Version: 1.0.0.3 - Lenovo)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation)
WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
Zoner Photo Studio 17 (HKLM\...\ZonerPhotoStudio17_CZ_is1) (Version: 17.0.1.1 - ZONER software)

Packages:
=========

Dailymotion -> C:\Program Files\WindowsApps\DailymotionSA.Dailymotion_2.0.1.21_x64__6dqnvyezrysvy [2023-12-24] (Dailymotion SA)
Evernote -> C:\Program Files\WindowsApps\Evernote.Evernote_10.94.3.0_x64__q4d96b2w5wcc2 [2024-06-28] (Evernote) [Startup Task]
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2403.25.0_x64__k1h2ywk1493x8 [2024-04-10] (LENOVO INC.)
Live TV -> C:\Program Files\WindowsApps\FilmOnLiveTVFree.FilmOnLiveTVFree_1.3.6.98_x64__zx03kxexxb716 [2023-12-24] (FilmOn TV Inc.)
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2023-12-24] (Microsoft Corporation) [MS Ad]
MSN Gurmánský svět -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2023-12-26] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2023-12-24] (Microsoft Corporation) [MS Ad]
PowerDVD for Lenovo Idea -> C:\Program Files\WindowsApps\CyberLinkCorp.id.PowerDVDforLenovoIdea_1.1.2618.24808_x86__hgg5mn3xps74a [2023-12-24] (CYBERLINK COM CORPORATION)
Solitaire v češtině -> C:\Program Files\WindowsApps\TREECARDGAMES.KLONDIKESOLITAIRECOLLECTIONFREE_5.3.3.0_x64__n666hb6ddc5jp [2023-12-25] (TreeCardGames)
The Weather Channel for Lenovo -> C:\Program Files\WindowsApps\Weather.TheWeatherChannelforLenovo_2015.1013.1.0_x64__t3yemqpq4kp7p [2023-12-24] (The Weather Channel.)
Translator -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2023-12-24] (Microsoft Corporation)
TripAdvisor Hotels Flights Restaurants -> C:\Program Files\WindowsApps\TripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2023-12-26] (TripAdvisor LLC)
Vyhledávání na webu z Microsoft Bingu -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.92.0_x64__8wekyb3d8bbwe [2024-04-12] (Microsoft Corporation)
Zinio -> C:\Program Files\WindowsApps\ZinioLLC.Zinio_2.1.0.317_x64__0q6dqzpp40p2e [2023-12-24] (Zinio LLC)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3454477439-342108614-1476946386-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-11-14] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-11-14] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-11-14] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2011-08-18] (ABBYY SOLUTIONS LIMITED -> ABBYY.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-11-14] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2023-11-14] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2011-08-18] (ABBYY SOLUTIONS LIMITED -> ABBYY.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Zdeněk\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Webové servery ve službě MSN\target.lnk -> hxxp://www.msnusers.co
ShortcutWithArgument: C:\Users\Zdeněk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome\Horizon TV.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mbbikimpipgiijlggnjmobkgkondegfj
ShortcutWithArgument: C:\Users\Zdeněk\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b38c8a402571e3e7\Seznam.cz.lnk -> C:\Users\Zdeněk\AppData\Roaming\Seznam Browser\Seznam.cz.exe (Seznam.cz) -> --user-data-dir="C:\Users\Zdeněk\AppData\Local\Seznam.cz\User Data" --profile-directory=Default --app-id=ckjpageadhfekbilpnlbcjgbflimllbk

==================== Loaded Modules (Whitelisted) =============

2020-07-14 17:32 - 2020-07-14 17:32 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2015-01-08 20:35 - 2011-05-17 23:27 - 000028672 _____ () [File not signed] C:\Windows\jmesoft\hidhook.dll
2024-06-26 19:01 - 2024-06-26 19:01 - 000031232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\A4.Foundation\92d112cb560aa45231a04d7d1789e054\A4.Foundation.ni.dll
2024-06-26 19:01 - 2024-06-26 19:01 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\c150710939dec98abaf2e833f0c0a287\AEM.Actions.CCAA.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\153180b20b9467f633bb8f0331ecc3f3\AEM.Plugin.EEU.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\ddb422bf646827c8f074eb77d5d4ada3\AEM.Plugin.Hotkeys.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.4adf1574#\8b98401ac1dc72fedca6eacc2126c7bf\AEM.Plugin.Audio.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000315904 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\c1da36c69abf752a5b058c30d44e7213\AEM.Plugin.Source.Kit.Server.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000014848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\236b438d9f064834152f24cd1a940fdf\AEM.Plugin.WinMessages.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\508107ad66059087e20e6e7877bff410\AEM.Plugin.REG.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\8df0565c52656b6b663250d46f9a55c6\AEM.Plugin.GD.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\f076c7cad7a6e838cce37ab678a4fce3\AEM.Server.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000267776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\AEM.Server\6831c89a147301761766e2aa47b5edda\AEM.Server.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000055808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Foundation\9add44cea87d91209b649418d3e1854e\APM.Foundation.ni.dll
2024-06-26 19:09 - 2024-06-26 19:09 - 000122880 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ATICCCom\a9f5cc9dae1f223176d2104a9c61d79f\ATICCCom.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000204288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\e1e79d82ae3eef4d6563225bc7ac9f1e\CCC.Implementation.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000128000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\ce2c5fa10279eb1ecfc867688610f889\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\d0bcd480e7d372a317895c1647188c96\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000045568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\27941c279731b2c32f941911e4bf9324\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000107008 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\f1de4cd325e14146e54115ac1d9418c3\CLI.Aspect.TransCode.Graphics.Shared.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000209920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4542c692#\75fb48e35fdba999d7f3208ac81e0439\CLI.Aspect.DeviceCRT.Graphics.Shared.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\973337b3d585ddad9132e1c62702d9aa\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll
2024-06-26 19:05 - 2024-06-26 19:05 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\13830a5bc28458228fc0ea05366e2684\CLI.Aspect.FPS.Graphics.Shared.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000364544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\d32c8ae8c15aa1e9a4a653121aa110cc\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\e71c2fc2774c8720d3710cd964aa6c3b\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll
2024-06-26 19:06 - 2024-06-26 19:06 - 000745984 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\75ba511d239434878e5e35cd4ea12c69\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000449536 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\bcd36d1c06ef5de62f8fa39fa706fab5\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll
2024-06-26 19:05 - 2024-06-26 19:05 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\cb8eb0387ed402451da21e418b12d4fc\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000157696 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a0ae52bc#\0cad5b2c2c4a12400ce62b98e9aae7f2\CLI.Aspect.DeviceLCD.Graphics.Shared.ni.dll
2024-06-26 19:05 - 2024-06-26 19:05 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\dc5ff789af1a890427bb47a407902c0c\CLI.Aspect.FPS.Graphics.Runtime.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\38954b554151f04cc315296cef123988\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000462336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\cb6eb3965757cae32141d6272f6b9dbf\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000086528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ae5e117c#\8462669c8474b556e6c57e0a06681fb4\CLI.Aspect.DisplaysColour2.Graphics.Shared.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000067072 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\7433ea40604eaa3538a8ea5e2d500332\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll
2024-06-26 19:06 - 2024-06-26 19:06 - 000340992 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\08fe4ae050d186b3a6f349f7f32ebd18\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\e6cc37a52f5e0fe76450cc412dae150b\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll
2024-06-26 19:05 - 2024-06-26 19:05 - 000276480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\155e8857d661bba75a2c4d12fd56b70d\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll
2024-06-26 19:06 - 2024-06-26 19:06 - 003313664 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\ca09585e342406f543b4c44bcb92dc87\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000047616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\4ea0113dae004ac3e62b46037987fcf2\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\bc216a7513dbf2b6f8fa12be30e6fbab\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000051200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\814459d293bbe2c19a0cfc845b5e6920\CLI.Caste.A4.Runtime.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\7cd03cfac4052e405d2d220fea26dbf2\CLI.Caste.A4.Shared.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\a1af5d05bfd06e3c23421b8af81a3618\CLI.Caste.A4.Dashboard.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\6528cd72e4516dcc1954cf5de531accf\CLI.Caste.Fuel.Shared.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000311296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\0dfdd446d4f39c9aa065f2ed14ac2b03\CLI.Caste.Fuel.Runtime.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\a90407fd12e3786c10856c411f6728e8\CLI.Caste.Fuel.Dashboard.ni.dll
2024-06-26 19:05 - 2024-06-26 19:05 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\8ee4bd1729925ceda78cd9f31e17b87d\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 001555968 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\bbb5400a796431919028bb976c989405\CLI.Caste.Graphics.Dashboard.Shared.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000587776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\ffa3bea49d2b65840bde6b1ae4caa745\CLI.Caste.Graphics.Dashboard.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\1b35261433ba380188b7fc31557ca184\CLI.Caste.HydraVision.Runtime.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\7041ff3c359683294804f06f904d6f4c\CLI.Caste.HydraVision.Shared.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\eaa52fa1a85448491e2187ecfa6ce35a\CLI.Caste.HydraVision.Dashboard.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\f80755fc66bdb33933a4e9b892761c6d\CLI.Caste.Platform.Shared.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000044032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\448e87c0c1da109b939583c03578a870\CLI.Caste.Platform.Runtime.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\d307edb92ec25a82460559bda6f3e76d\CLI.Caste.Platform.Dashboard.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\03eb0c4e2e1405be605594ebed7c38f6\CLI.Component.Runtime.Shared.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000173568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\11daa07bb09dd1ff1adbdb53b8913305\CLI.Component.Dashboard.ProfileManager2.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\2a47ca709c1e22b4b26f4ab7f1fbdf11\CLI.Component.Runtime.Shared.Private.ni.dll
2024-06-26 19:09 - 2024-06-26 19:09 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\7b80019c295b9e4930196179ce9e6a85\CLI.Component.Runtime.Extension.EEU.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 001609728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\80be475d27f0ed5a74e04f27052642d2\CLI.Component.Dashboard.Shared.Private.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000018432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\f248737d3d1e2c5d34e7fb67114f76ce\CLI.Component.Client.Shared.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\cae65adb9c21cbf8334469f063a6966d\CLI.Component.Dashboard.Shared.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000089600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\346a388620c697170654b28ddb9c6894\CLI.Foundation.Private.ni.dll
2024-06-26 19:09 - 2024-06-26 19:09 - 000061440 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\9337bad027bb3c5c0dcd5bae677ac9a4\CLI.Foundation.XManifest.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000091136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\aa7cdc7f6abba52c62b2e6f3aa4e216c\CLI.Foundation.CoreAudioAPI.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 001080320 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\43ccbd6504284e5ada1f5620a3ff67bf\CLI.Foundation.Client.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000301568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\ff69b89a1a16a493f2c1e707d7c65b98\CLI.Foundation.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\0ddd5582e9a0517d8c97a92cbdd047d5\DEM.Foundation.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000115200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\e5c4d1388c4d7d6c48533666df803c5a\DEM.Graphics.I0601.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\6d14ff10ec00a01e0529b5b36d86ab75\DEM.Graphics.ni.dll
2024-06-26 19:07 - 2024-06-26 19:07 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\fef05dc9e802a013264aff3be3ae831c\Fuel.Foundation.ni.dll
2024-06-26 19:09 - 2024-06-26 19:09 - 000297472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\34b022673838c0a7ee5e076cc5ac5821\LOG.Foundation.Implementation.ni.dll
2024-06-26 19:01 - 2024-06-26 19:01 - 000150016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\7b66219ddb7fa4822b5888f90c0673e7\LOG.Foundation.Private.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\214a584c45c3b8b12b3cb5fc282b8aa8\LOG.Foundation.Implementation.Private.ni.dll
2024-06-26 19:01 - 2024-06-26 19:01 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\eaf46ce9e54f1f70e6508efa130f8102\LOG.Foundation.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\b31515f432c137518f52fd48b8a7548a\MOM.Foundation.ni.dll
2024-06-26 19:11 - 2024-06-26 19:11 - 000401920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\53ec8c1aa840c40a90a46054a55aea69\MOM.Implementation.ni.dll
2024-06-26 19:01 - 2024-06-26 19:01 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\8bd8e997137cb1da5927532cd5f957be\NEWAEM.Foundation.ni.dll
2020-08-21 13:19 - 2020-08-21 13:19 - 001562624 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\WVR\OpenVR\bin\win64\driver_amdwvr.dll
2024-06-26 19:01 - 2024-06-26 19:01 - 000897024 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\15264afc3bb700dd7a60ce84ce654dd0\ADL.Foundation.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 000256000 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\APM.Server\64cab4c5fb468230f4d115533463543f\APM.Server.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000298496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9b707b25#\2fb474f8c6b6762de978327514d07ef0\CLI.Aspect.DeviceProperty.Graphics.Runtime.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 001654272 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.aa59351a#\7834e022caa588bc112101e999b42db2\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 006336512 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e6d9f3a8#\23377c7c1c2a5f1ab66613238910b620\CLI.Aspect.DeviceDFP.Graphics.Dashboard.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 008028160 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\5e421be84d0e0b32607c81f5190b4d59\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 001160192 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Combine7332395e#\0c869f08246700cbbfe7e840d4378529\CLI.Combined.Graphics.Aspects2.Runtime.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000136704 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\e842a8f06e3a1d436ffc390f1ac7ca8d\CLI.Component.Client.Shared.Private.ni.dll
2024-06-26 19:09 - 2024-06-26 19:09 - 000235008 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\9b97fac1221f7ca873021fec4e7f0814\CLI.Component.Runtime.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000929280 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\e58171d444476218fbc9bbbaac863bcf\CLI.Component.Dashboard.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000016896 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0703\a72d8b50a7a391989b6b83a86d1d7da3\DEM.Graphics.I0703.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000013312 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0706\3b2b7400d1e4ed31a81e179e418caf55\DEM.Graphics.I0706.ni.dll
2024-06-26 19:05 - 2024-06-26 19:05 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\7c0f050578aae8e1ba4944a7238a4c0f\DEM.Graphics.I0709.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000012288 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\fa86a7eaf73720b6703e1daff9ebbd6e\DEM.Graphics.I0712.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000018432 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\c8419184398493ebd745a30980a90ea4\DEM.Graphics.I0804.ni.dll
2024-06-26 19:09 - 2024-06-26 19:09 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0805\f560ba7c645c7cde9d2627e1bbe42c01\DEM.Graphics.I0805.ni.dll
2024-06-26 19:09 - 2024-06-26 19:09 - 000010752 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0812\1f92219c9195e99403f3f314fc4e6b29\DEM.Graphics.I0812.ni.dll
2024-06-26 19:04 - 2024-06-26 19:04 - 000014336 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0912\04e53beeae2fe32d7ed518aeca5f4dba\DEM.Graphics.I0912.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 000035840 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\d553825db4bcb1732d1a345eec99b777\DEM.Graphics.I1010.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 001139200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\b01b1a6e127a31923f62755a3ead37ba\Localization.Foundation.Private.ni.dll
2024-06-26 19:11 - 2024-06-26 19:11 - 000244736 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\c8a8c06c0b741bde2036734f673cf3bb\ResourceManagement.Foundation.Implementation.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\53c42929182de38662b7d6c27bde61df\ResourceManagement.Foundation.Private.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\db9fa303f6775d551644264cab21278c\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll
2024-06-26 19:02 - 2024-06-26 19:02 - 002845696 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\8b3c878a10d532e03cc98a332c4ebb55\CLI.Caste.Graphics.Shared.ni.dll
2024-06-26 19:08 - 2024-06-26 19:08 - 003267072 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\0855d25eb167407129ee7aebcda7eee5\CLI.Caste.Graphics.Runtime.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 000335360 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\0d07db04ba8e1890ebbf5922fa1ed053\Microsoft.WindowsAPICodePack.ni.dll
2024-06-26 19:03 - 2024-06-26 19:03 - 002582016 _____ (Microsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\19f801fd14e56438535e961a5cf7bf89\Microsoft.WindowsAPICodePack.Shell.ni.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000039424 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000413696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000519168 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 001431040 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 001180672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000135680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll
2020-08-21 13:28 - 2020-08-21 13:28 - 006010880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 006345216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 001078272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 004000256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 003802624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000171008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 001083904 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000329728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000376320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 092323328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 005560832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000188416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 002888704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000287232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000329216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000089088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000312320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2020-07-14 17:32 - 2020-07-14 17:32 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2020-08-21 13:28 - 2020-08-21 13:28 - 000085504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-3454477439-342108614-1476946386-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=40139
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {03B63C99-8764-4D14-AF45-C17DDC97E9DF} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {2CBDD8F0-22E5-44EC-BE9E-BBC0161D6AE8} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {4DD7D5EC-798E-43D7-9AA1-51E0D4AA4B2A} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {52A0B566-157D-44B4-91E0-2659BDB5BDB8} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {8BEADCFE-6733-4514-B554-BF5D931EA157} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {AD8481DE-527A-4959-9341-AAF04E265960} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {C48496B8-595A-4D00-8158-EB1428349946} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {E9596CA0-273A-42EB-A940-D1CACF10FC13} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_40139
SearchScopes: HKU\S-1-5-21-3454477439-342108614-1476946386-1001 -> {F9D3E921-78B6-4023-A9ED-40F51FC39F70} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_40139
BHO-x32: No Name -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> No File
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-08-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\cez.cz -> hxxps://www.cez.cz

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2019-01-04 11:47 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\TXE Components\TCS\;C:\Program Files\Intel\TXE Components\TCS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Calibre2\;C:\Program Files (x86)\Common Files\Adobe\AGL;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\Services: ABBYY.Licensing.FineReader.Professional.11.0 => 2
MSCONFIG\Services: Adobe LM Service => 3
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: avast => 2
MSCONFIG\Services: avastm => 3
MSCONFIG\Services: BITCOMET_HELPER_SERVICE => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Lenovo System Agent Service => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: W32Time => 3
MSCONFIG\Services: WSearch => 2
MSCONFIG\Services: wuauserv => 3
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XboxGipSvc => 3
HKLM\...\StartupApproved\Run32: => "CLMLServer"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR11"
HKLM\...\StartupApproved\Run32: => "seznam-listicka-distribuce"
HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "cz.seznam.software.autoupdate"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "cz.seznam.software.szndesktop"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_5ADE220B7E001118BA50867901C48CF4"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "Zoner Photo Studio Autoupdate"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_99D998405AD991EB6B6A63613EEE74F3"
HKU\S-1-5-21-3454477439-342108614-1476946386-1001\...\StartupApproved\Run: => "OneDrive"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{CF6AA11F-BA37-4119-AC26-062A23747B9A}C:\users\zdeněk\downloads\teamviewerportable\app\teamviewer\teamviewer.exe] => (Allow) C:\users\zdeněk\downloads\teamviewerportable\app\teamviewer\teamviewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{4938A114-5558-40C9-8A27-00D8883391B8}C:\users\zdeněk\downloads\teamviewerportable\app\teamviewer\teamviewer.exe] => (Allow) C:\users\zdeněk\downloads\teamviewerportable\app\teamviewer\teamviewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{72793D98-BEE9-41DF-B82B-172356E2E776}C:\program files (x86)\calibre2\calibre.exe] => (Block) C:\program files (x86)\calibre2\calibre.exe () [File not signed]
FirewallRules: [TCP Query User{5AC5251D-13B1-492C-A42F-3EA4CD7A08FF}C:\program files (x86)\calibre2\calibre.exe] => (Block) C:\program files (x86)\calibre2\calibre.exe () [File not signed]
FirewallRules: [{AD773A2D-1AAF-405C-A0B9-7E9B6A9A955D}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{13CC5874-B825-4727-887B-CBD715F11C30}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{7A405DEB-46DF-4BB4-9F71-C9EC43A87E3B}] => (Allow) C:\Program Files\Zoner\Photo Studio 17\Program32\MediaServer.exe (ZONER software, a.s. -> ZONER software)
FirewallRules: [UDP Query User{2B5B3E7D-71DF-401E-AD0A-83BA75DB3FB0}C:\program files\bitcomet\bitcomet.exe] => (Block) C:\program files\bitcomet\bitcomet.exe (Xing Wang -> www.BitComet.com)
FirewallRules: [TCP Query User{D86352D7-B34F-4675-9BD3-17499A5834E6}C:\program files\bitcomet\bitcomet.exe] => (Block) C:\program files\bitcomet\bitcomet.exe (Xing Wang -> www.BitComet.com)
FirewallRules: [{C07ED69E-89D0-47D3-B59C-D19747787C9D}] => (Allow) C:\Users\Zdeněk\AppData\Local\Apowersoft\Online Video Converter\Online Video Converter.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{A2072C1A-2D05-449A-9F99-147C22693F7E}] => (Allow) C:\Users\Zdeněk\AppData\Local\Apowersoft\Online Video Converter\Online Video Converter.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{95E14045-FA05-43FC-8980-C1E91E851CDA}] => (Allow) C:\Users\Zdeněk\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{421DE5CA-0181-4ADF-B370-B1BF2B36CE2C}] => (Allow) C:\Users\Zdeněk\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{6A32F29D-BAC1-47B8-ADA4-F056398C6839}] => (Allow) C:\Program Files (x86)\FreeDownloadManager.ORG\Free Download Manager\fdm.exe (Softdeluxe Ltd. -> FreeDownloadManager.org)
FirewallRules: [{FADB5409-BD6D-4BD0-9DA0-9040E37015C3}] => (Allow) C:\Program Files (x86)\FreeDownloadManager.ORG\Free Download Manager\fdm.exe (Softdeluxe Ltd. -> FreeDownloadManager.org)
FirewallRules: [UDP Query User{A3B3BE84-E934-4345-8D01-DC31C3FBA629}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [TCP Query User{5D8E5D05-4B17-4C42-B871-8A2C0ECF67A4}C:\totalcmd\totalcmd64.exe] => (Allow) C:\totalcmd\totalcmd64.exe (Ghisler Software GmbH -> Ghisler Software GmbH)
FirewallRules: [{DD62562F-2D68-4815-87E1-CBA052CB5410}] => (Allow) C:\Program Files\BitComet\BitComet.exe (Xing Wang -> www.BitComet.com)
FirewallRules: [{6C77F0AB-CF1C-47BF-B44A-8E589D336D0E}] => (Allow) C:\Program Files\BitComet\BitComet.exe (Xing Wang -> www.BitComet.com)
FirewallRules: [{C68B9D0A-21F7-43EC-A864-A382F1139E42}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe => No File
FirewallRules: [{87648E03-EFA3-45C3-9906-B8DD5F427893}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe => No File
FirewallRules: [{CA727DF4-8C77-4E6F-AD43-F9AE06B4D5A1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe => No File
FirewallRules: [{D05F578C-4846-4893-8F21-C3BF8E954BB5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe => No File
FirewallRules: [{115E8313-99C9-4DF3-9E07-0ECC13D199BE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe => No File
FirewallRules: [{8C5C7666-F283-417A-9A29-0B32E47D54F7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe => No File
FirewallRules: [{8760EBFC-392C-482A-9B56-EF6E27D0E2A5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [{BEA3E604-47E3-4A2C-822C-7F58D0756374}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
FirewallRules: [UDP Query User{067AB23A-B6B5-4937-B0AB-1ECC71AA42A8}C:\program files (x86)\citrix\ica client\wfica32.exe] => (Allow) C:\program files (x86)\citrix\ica client\wfica32.exe (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FirewallRules: [TCP Query User{E030A0DD-9138-42DE-9C16-CC148B4BD613}C:\program files (x86)\citrix\ica client\wfica32.exe] => (Allow) C:\program files (x86)\citrix\ica client\wfica32.exe (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FirewallRules: [{CE368163-0E6A-4315-9DAF-93227CF9E056}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{CF9CB9C1-E991-4DEB-94DB-D71F8282FAF3}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{530C824E-D710-49BC-A0FE-02FC2F55279E}] => (Allow) C:\Program Files\CyberLink\PowerDirector10\PDR10.EXE (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{A84570BD-8213-44CA-A2C5-879E20E1B778}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.122.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5F360AF4-D1F6-4AE3-AB1F-161538CE1FF3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.122.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{285C6814-5275-4359-BE9E-46A510FD6BE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.122.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B903F92D-11A4-4560-83E8-DE75B2F3066D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.122.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A9DA80EE-E947-42B8-96D1-4F5315D60C96}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{7646A910-E7C0-49BB-9040-AA6C28741600}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.81\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C8B49C9E-D110-4B0A-A38A-4EEE2DC68857}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> Gen Digital Inc.)

==================== Restore Points =========================

29-06-2024 18:02:43 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (07/03/2024 03:34:05 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/03/2024 03:34:05 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/03/2024 03:24:07 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/03/2024 03:24:07 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/03/2024 03:15:12 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/03/2024 03:15:12 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/03/2024 03:04:06 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0

Error: (07/03/2024 03:04:06 PM) (Source: sbprotect) (EventID: 0) (User: )
Description: Event-ID 0


System errors:
=============
Error: (07/03/2024 02:34:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NMPJ99VJBWV-Microsoft.YourPhone.

Error: (07/03/2024 02:12:36 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (07/02/2024 07:30:23 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (07/02/2024 12:45:09 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (07/01/2024 06:00:00 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (07/01/2024 10:01:44 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931

Error: (06/30/2024 10:06:57 PM) (Source: DCOM) (EventID: 10010) (User: Zdenek-PC)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (06/30/2024 06:00:01 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931


Windows Defender:
================Event[0]:

Date: 2023-12-24 17:56:33
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o načtení bezpečnostních informací a pokusí se o obnovení poslední známé funkční verze.
Bezpečnostní informace, které se měly načíst: Aktuální
Kód chyby: 0x80070003
Popis chyby: The system cannot find the path specified.
Verze bezpečnostních informací: 0.0.0.0;0.0.0.0
Verze modulu: 0.0.0.0

CodeIntegrity:
===============
Date: 2024-07-03 14:10:17
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2024-07-02 12:49:10
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: LENOVO O07KT49AUS 12/18/2014
Motherboard: LENOVO Aptio CRB
Processor: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz
Percentage of memory in use: 65%
Total physical RAM: 8084.55 MB
Available physical RAM: 2791.71 MB
Total Virtual: 19871.7 MB
Available Virtual: 12048.14 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:905.25 GB) (Free:456.06 GB) (Model: WDC WD10EZEX-08M2NA0) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (SPS) (CDROM) (Total:7.77 GB) (Free:0 GB) UDF

\\?\Volume{9e7852fe-95f4-440b-9e09-3a652e86bdbe}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.7 GB) NTFS
\\?\Volume{2ee00a71-e0d1-46e6-9501-36bdaa21942d}\ (PBR_DRV) (Fixed) (Total:24.41 GB) (Free:12.96 GB) NTFS
\\?\Volume{89da29b1-426d-48b0-a4de-bcd82e018745}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 9F437DC7)

Partition: GPT.

==================== End of Addition.txt =======================

Ahoj,
- vycisti PC s Adwcleanerom - log sem
- vycisti PC s Ccleanerom, vcetne registrov
Restart a napis, aky je stav

Ahoj,

díky moc za tipy. Níže posílám log z Adw. Projel jsem to i tím CCc. Přijde mi, že se nabíhání o trochu zrychlilo, co se týče do přihlášení uživatele. Mohlo by to být ještě o něco rychlejší. Máme ještě nějaké možnosti, kromě nové instalace? Děkuju
Jinak mohli by jste prosím mému otci vysvětlit, nakolik zpomaluje následné načítání plochy, která je posetá bez jediného místa různými wordy a obrázky, které určitě přesahují i do strany mimo monitor. Chtěl bych dodat otci motivaci, aby si to přeskládal do složek, ale má jen samé chabé výmluvy.

Moc děkuji Sh1ra

Ahoj,
velkost uzivatelskeho adresara plocha/desktop ovplyvnuje rychlost nacitania po starte.
Velkost adresara by nemala presahovat 1-2GB
Subory ulozit inam a pouzit zastupcov na plochu - link

Otec je na 36GB a ty složky v kterých to je, jsou mimo obrazovku tak děkuju za rady, vypadá to, že jsme našli hlavní příčinu. Začal nad tím uvažovat a rozmýšlet tak to vypadá, že to i zabralo. moc děkuju a přeju krásné dny

To ma tesi
Pozdravujem obidvoch a prajem pekne leto