Dlouhé vypínání - prosím o kontrolu logu
Napsal: 22 črc 2024 22:30
Dobrý večer, již delší dobu jsem zpozornil, že se mi PC vypíná klidně i 5 minut a to nemá žádné aktualizace.
Dříve to nedělalo.
Vůbec netuším, co to může způsobovat.
Mohu o zkontrolování logu ? Děkuji
FRST LOG
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21.07.2024
Ran by Martin (administrator) on DESKTOP-69LFJ66 (22-07-2024 23:38:22)
Running from C:\Users\Martin\Desktop\FRST64.exe
Loaded Profiles: Martin & postgres
Platform: Microsoft Windows 10 Home Version 22H2 19045.4651 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
(C:\Program Files (x86)\Bright VPN\net_updater32.exe ->) (BrightData Ltd.) [File not signed] C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\brightdata.exe
(C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.911.1\DropboxCrashHandler.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe ->) (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.5\bin\postgres.exe <7>
(C:\Program Files\WindowsApps\DuckDuckGo.DesktopBrowser_0.85.5.0_x64__ya2fgkz3nks94\WindowsBrowser\DuckDuckGo.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\DuckDuckGo\Martin\WebView2\msedgewebview2.exe <7>
(C:\Users\Martin\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\111.0.5168.61\opera_crashreporter.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <8>
(explorer.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe
(explorer.exe ->) (Bright Data Ltd -> Bright Data Ltd.) C:\Program Files (x86)\Bright VPN\Bright VPN.exe <3>
(explorer.exe ->) (Duck Duck Go, Inc. -> DuckDuckGo) C:\Program Files\WindowsApps\DuckDuckGo.DesktopBrowser_0.85.5.0_x64__ya2fgkz3nks94\WindowsBrowser\DuckDuckGo.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe <2>
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\opera.exe <21>
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe <2>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <58>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMSvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\1.00.39\LightingService.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(services.exe ->) (Bright Data Ltd -> BrightData Ltd.) C:\Program Files (x86)\Bright VPN\net_updater32.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (Locktime Software s.r.o. -> Locktime Software) C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe
(services.exe ->) (Mediafour Corporation -> Mediafour Corporation) C:\Program Files\Mediafour\MacDrive 10\MacDrive10Service.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvaki.inf_amd64_e95973c445ab118d\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\FANRGBHEADER\FanLEDCtrl.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\LightingService\1.00.39\AsRogAuraGpuDllServer.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(svchost.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe
(svchost.exe ->) (D922F830-2E44-498C-84F8-05D8FB2F43B6 -> ) C:\Program Files\WindowsApps\61442BareBonesDev.PowerPlanner_2402.21.5.0_x64__5ga7fac6nanaa\PowerPlannerUWP.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [519912 2017-12-01] (Acronis International GmbH -> )
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9246656 2018-01-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [MacDrive 10 helper] => C:\Program Files\Mediafour\MacDrive 10\MDHelper.exe [299872 2017-09-28] (Mediafour Corporation -> Mediafour Corporation)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2017-12-01] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [3770736 2017-12-01] (Acronis International GmbH -> )
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [Speechtech TTS 32-bit preload] => C:\Program Files (x86)\Speechtech TTS\TTSGui.exe [2636616 2020-08-05] (SpeechTech, s.r.o. -> SpeechTech, s.r.o. (www.speechtech.cz))
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9248144 2024-07-09] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [731240 2018-12-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [40412984 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Discord] => C:\Users\Martin\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG -> Nero AG)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [upjers Home] => C:\Users\Martin\AppData\Local\Programs\upjers-playground2\upjers Home.exe [123847840 2022-12-12] (upjers GmbH -> upjers GmbH)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [NetLimiter] => C:\Program Files\Locktime Software\NetLimiter 4\nlclientapp.exe [301240 2022-04-03] (Locktime Software s.r.o. -> Locktime Software)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [MicrosoftEdgeAutoLaunch_B808638226F52F22B08BF8F7E5687BBA] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3883472 2024-07-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Bright VPN] => C:\Program Files (x86)\Bright VPN\Bright VPN.exe [117925400 2024-05-21] (Bright Data Ltd -> Bright Data Ltd.)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Opera Stable] => C:\Users\Martin\AppData\Local\Programs\Opera\opera.exe [1595296 2024-07-10] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Opera Browser Assistant] => C:\Users\Martin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4049312 2024-07-18] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [GoogleUpdaterTaskUser128.0.6597.0] => C:\Users\Martin\AppData\Local\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\MountPoints2: {c75b6ffe-132a-11e9-88c9-0c9d9262121a} - "F:\setup.exe"
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\MountPoints2: {c75b7132-132a-11e9-88c9-0c9d9262121a} - "G:\setup.exe"
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\MountPoints2: {c75b7991-132a-11e9-88c9-0c9d9262121a} - "E:\Setup.exe"
HKU\S-1-5-21-1952709571-807798404-1509361630-1004\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKLM\...\Windows x64\Print Processors\Canon MG3600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCT.DLL [30208 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MP630 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9C.DLL [27648 2009-12-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\sxj2mPC: C:\Windows\System32\spool\prtprocs\x64\sxj2mpc.dll [43520 2014-02-20] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3600 series: C:\Windows\system32\CNMLMCT.DLL [406528 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP630 series: C:\Windows\system32\CNMLM9C.DLL [279040 2009-12-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\sxj2m Langmon: C:\Windows\system32\sxj2mlm.dll [34304 2013-12-10] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\Windows\system32\PEPrinterMonitor.dll [285232 2022-11-08] (Wondershare Technology Co.,Ltd -> Wondershare Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\126.0.25558.127\Installer\chrmstp.exe [2024-07-12] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\126.1.67.134\Installer\chrmstp.exe [2024-07-17] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2022-12-04]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2022-12-04]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2022-12-04]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2022-12-04]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1A288958-77C2-4BFB-9E20-FBD1FE166F4F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1558984 2024-06-25] (Adobe Inc. -> Adobe Inc.)
Task: {83AA25FB-D41D-4CCA-9083-32583CE84DDD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {9226B98D-FF26-4311-835E-77B86A525C1E} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\LightingService\1.00.39\AsRogAuraGpuDllServer.exe [280536 2018-02-06] (ASUSTeK Computer Inc. -> )
Task: {848B3368-4FCD-44F7-AC25-D1B75021B74C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2072536 2017-07-16] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {E5AB2829-5A65-4444-8A9B-8F138EBE1235} - System32\Tasks\ASUS\ASUS FanLEDCtrl => C:\Program Files (x86)\ASUS\AI Suite III\FANRGBHEADER\FanLEDCtrl.exe [1147352 2017-07-17] (ASUSTeK Computer Inc. -> )
Task: {D2BE4863-3C41-4066-AB7A-BE5065ADA6C9} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3153984 2024-07-03] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {5ACFD095-3D94-4C66-B8F6-512D65607C86} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3153984 2024-07-03] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {D136D764-CFF6-42BA-A8DE-BC30718F3654} - System32\Tasks\AvastBrowserProtectS-1-5-21-1952709571-807798404-1509361630-1003 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1690008 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {A8EBDE1A-E946-47A9-929E-C4D03F2E65CC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {61EC7A49-6C41-4015-B336-3BBAB2C0E963} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {70E3C379-1355-4D57-B6BC-A95044F31F3F} - System32\Tasks\Avira_FallbackUpdater => C:\Windows\System32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start AviraFallbackUpdater Delayed=false
Task: {FE7E30C3-8514-42D6-80C2-96D8578F8B30} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {FE7E30C3-8514-42D6-80C2-96D8578F8B30} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {FE7E30C3-8514-42D6-80C2-96D8578F8B30} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {6EE07F9F-4C5F-4D27-A9BF-EB6E488F3CF8} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [259040 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {42A2B12D-B0B7-4528-A9F5-F0132CF27F2C} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1775072 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {827AFED3-C59F-4DDA-8783-4EF2735F845F} - System32\Tasks\Avira_Security_Update => C:\Windows\System32\net.exe [59904 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {994295FD-03A6-4B3C-B4FB-B080B7CEC77D} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [36867824 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {770185CC-8963-46E1-B5E1-E14F8DDB375B} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{D9D34763-CA92-403D-B9A2-2E8012CDE552} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {D1B5D5A6-694A-48B7-8C35-357DC58B4841} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{503DAD2A-1E0B-4709-BFEF-7EB0AF7BDC5A} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {FFDBEB67-97B3-4162-91C7-1EADF9A76214} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {15A2D49B-E0A4-4BE5-9B18-222C9709D1DE} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703544 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "edd56fdf-212d-4bc6-a2cd-de4b39e7b6ac" --version "6.11.10455" --silent
Task: {380B9784-3DE9-46E5-8694-624FFE75B26B} - System32\Tasks\CCleanerSkipUAC - Martin => C:\Program Files\CCleaner\CCleaner.exe [34159416 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {5D51B336-0D0E-458B-B9F0-D0994E69C190} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B544DB84-6AD2-4F16-A279-3CFF829FAFBA} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {BC445D10-90AF-4437-B385-C5A2E4868B75} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6597.0{20468240-50F7-4747-92B3-E35F51646EF4} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC)
Task: {68F1FE10-F8F3-45F2-ABF6-6DA33A65D485} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser128.0.6597.0{5A526F45-6C3F-48F1-BB46-17858D7D6EB4} => C:\Users\Martin\AppData\Local\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC)
Task: {2CCAC4DB-5B8A-45E6-9714-34355ADA3830} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2022-05-12] () [File not signed]
Task: {469617FA-C60A-45BA-B85C-5EDE48AD6BF7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {147BDCF9-D51C-4D8C-BD2C-EC65F6C5C75A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5AF2D388-E0F4-4106-A8B4-B70C717E1326} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {92A36390-FAD1-4DA2-B3FD-A5E2DBF9A244} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0D912E79-CEFB-456A-A677-9A687B471F67} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677448 2024-07-10] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {9DC5890F-AC81-438E-B5B3-3F3CD703F544} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1952709571-807798404-1509361630-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677448 2024-07-10] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {E74878F9-D41E-4A6B-8BFE-F71983B65CD8} - System32\Tasks\NCH Software\VideoPadDowngrade => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [10993640 2021-09-30] (NCH Software, Inc. -> NCH Software)
Task: {7D9581B1-B8B9-4E3E-8F26-2B487CACA152} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1277480 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D130115F-F259-42B2-9E5D-7D2E7FC41403} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3347496 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D92D331C-C16B-49EE-B8B3-B40308F6127F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646696 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {24532F69-11D2-4796-927C-179D00116809} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {72408013-2C2E-4FD2-8F78-16C6C85B694B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C80C8DD1-7EA3-4F24-BDE5-68A4AAEF0236} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {89B2FFE7-1E8A-45D4-A88C-714978D7CF9D} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6031F183-AD0D-412A-AB49-83D560B28389} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4027C948-E968-47D2-B017-4A1EF33A93DC} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C639C631-8BD0-483F-AED9-A8681A609F5F} - System32\Tasks\Opera scheduled assistant Autoupdate 1720005510 => C:\Users\Martin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5749664 2024-07-04] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Martin\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {EA562655-8D57-4820-9B09-4ADEC8603A15} - System32\Tasks\Opera scheduled Autoupdate 1720005505 => C:\Users\Martin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5749664 2024-07-04] (Opera Norway AS -> Opera Software)
Task: {AED8C40E-6018-4F9B-88DC-48B1036643E1} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [49544 2018-04-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {66BA1A9F-46DA-44E2-9E70-06D495F50986} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [69512 2018-04-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {1714B6BF-B482-44AC-954A-D930A02FCB85} - System32\Tasks\VivaldiUpdateCheck-f757fe48a687763e => C:\Users\Martin\AppData\Local\Vivaldi\Application\update_notifier.exe [3694216 2024-07-17] (Vivaldi Technologies AS -> Vivaldi Technologies AS) -> C:\Users\Martin\AppData\Local\Vivaldi\Application\--from-scheduler
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.48.31.69 93.99.200.155
Tcpip\..\Interfaces\{744231fc-53c1-4c85-94e3-11298048c25a}: [DhcpNameServer] 77.48.31.69 93.99.200.155
Tcpip\..\Interfaces\{883c3a9e-efd9-4b96-bcb7-1911c521d092}: [DhcpNameServer] 172.18.0.1 172.18.0.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default [2024-07-22]
Edge DownloadDir: Default -> E:\BMW\VLOGY 2024\Španělsko\hl. kamera
Edge Extension: (Dokumenty Google offline) - C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-06]
Edge Extension: (Edge relevant text changes) - C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
FireFox:
========
FF DefaultProfile: 9p3kkt99.68-edition-default
FF DefaultProfile: dzgrn46h.default
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Waterfox\Profiles\9p3kkt99.68-edition-default [2024-06-02]
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Waterfox\Profiles\i5xwoqol.default-release [2024-07-21]
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Netscape\Navigator\Profiles\nri3tgj1.default [2024-05-29]
FF Extension: (No Name) - C:\Program Files (x86)\Netscape\Navigator 9\extensions\netscape9migrator@flock.com [not found]
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default [2024-07-22]
FF DownloadDir: E:
FF Homepage: Mozilla\Firefox\Profiles\dzgrn46h.default -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\dzgrn46h.default -> hxxps://www.kupi.cz; hxxps://drive.google.com; hxxps://www.betano.cz
FF Extension: (SetupVPN - Lifetime Free VPN) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\@setupvpncom.xpi [2024-06-25]
FF Extension: (Komponenta I.CA PKI Service) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\icapkiservice@ica.cz.xpi [2021-07-23]
FF Extension: (Avira Password Manager) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\passwordmanager@avira.com.xpi [2023-07-31]
FF Extension: (Block Site) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\{07046613-1993-4b66-9dd1-9dd1ce581cb7}.xpi [2020-07-13]
FF Extension: (Whoer VPN) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\{ee47f82c-1872-4053-badf-cc675093f81e}.xpi [2020-07-14]
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-06-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll [No File]
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2016-04-14] (CANON INC.) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default [2024-07-22]
CHR DownloadDir: E:\
CHR Extension: (Torrent Scanner) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2024-01-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-21]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR HKU\S-1-5-21-1952709571-807798404-1509361630-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-1952709571-807798404-1509361630-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR DefaultProfile: Default
Brave:
=======
BRA Profile: C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-07-19]
BRA Extension: (Torrent Scanner) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2024-07-08]
BRA Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-07-08]
BRA Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-07-08]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-07-19]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-07-19]
BRA Extension: (Brave NTP background images) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-07-08]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-07-19]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-07-19]
BRA Extension: (Brave NTP sponsored images) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2024-07-19]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-07-11]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2024-07-08]
BRA Extension: (Brave Ads Resources) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2024-07-08]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-07-19]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-07-08]
BRA Extension: (Brave Ad Block Updater (EasyList Czech and Slovak (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2024-07-08]
Vivaldi:
=======
VIV Profile: C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default [2024-07-19]
VIV Extension: (Torrent Scanner) - C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2024-07-12]
VIV Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-07-12]
VIV Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-07-12]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2723872 2017-12-01] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1133728 2017-12-01] (Acronis International GmbH -> )
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-06-25] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6096688 2018-05-10] (Acronis International GmbH -> )
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. -> Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe [382424 2018-02-06] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMSvc.exe [975832 2017-06-01] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\126.0.25558.127\elevation_service.exe [1773352 2024-07-03] (Avast Software s.r.o. -> Gen Digital Inc.)
S2 AviraFallbackUpdater; C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe [6738360 2024-04-25] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3003584 2024-01-22] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [398816 2024-04-23] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [265544 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [295752 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8402648 2019-12-08] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\126.1.67.134\elevation_service.exe [2688024 2024-07-17] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-07-09] (Dropbox, Inc -> Dropbox, Inc.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3644008 2018-12-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\203.4.4857\DropboxElevationService.exe [1659288 2024-07-09] (Dropbox, Inc -> Dropbox, Inc.)
S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-18] (Hewlett-Packard Co.) [File not signed]
S3 I.CA Maintenance Service; C:\Program Files (x86)\I.CA\I.CA Maintenance\ICAMaintenance.exe [283904 2019-08-02] (Prvni certifikacni autorita, a.s. -> I.CA, a.s.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [445432 2021-04-19] (Canon Inc. -> )
R2 LightingService; C:\Program Files (x86)\LightingService\1.00.39\LightingService.exe [1244632 2018-02-06] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R2 luminati_net_updater_win_brightvpn_com; C:\Program Files (x86)\Bright VPN\net_updater32.exe [9792504 2024-06-24] (Bright Data Ltd -> BrightData Ltd.)
R2 MacDrive10Service; C:\Program Files\Mediafour\MacDrive 10\MacDrive10Service.exe [223088 2018-03-21] (Mediafour Corporation -> Mediafour Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpDefenderCoreService.exe [1377416 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2017-12-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2017-12-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1706080 2017-12-01] (Acronis International GmbH -> )
S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2007-01-15] (Nero AG) [File not signed]
R2 nlsvc; C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe [20152 2022-04-03] (Locktime Software s.r.o. -> Locktime Software)
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG -> Nero AG)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_e95973c445ab118d\Display.NvContainer\NVDisplay.Container.exe [1275440 2024-04-12] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557144 2021-10-02] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3475672 2021-10-02] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2022-07-20] (Even Balance, Inc. -> )
R2 postgresql-x64-9.5; C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe [94208 2016-08-09] (PostgreSQL Global Development Group) [File not signed]
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [6101488 2024-04-01] (Rockstar Games, Inc. -> Rockstar Games)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7003048 2017-12-01] (Acronis International GmbH -> )
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16971576 2023-03-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\NisSrv.exe [3236728 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MsMpEng.exe [133688 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2017-06-01] (ASUSTeK Computer Inc. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 CBDisk; C:\WINDOWS\system32\drivers\CBDisk.sys [70344 2015-06-09] (EldoS Corporation -> EldoS Corporation)
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [138760 2021-01-14] (ADAPP SASU -> Dokan Project)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2019-01-08] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2019-01-08] (Disc Soft Ltd -> Disc Soft Ltd)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [564304 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [379664 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [182032 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 GLCKIO; C:\Program Files (x86)\ASUS\AURA\690b33e1-0462-4e84-9bea-c7552b45432a.sys [14976 2022-12-17] (ASUSTeK Computer Inc. -> )
R2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R0 MDAPFS; C:\Windows\System32\Drivers\MDAPFS.sys [458728 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDAPFSCT; C:\Windows\System32\Drivers\MDAPFSCT.sys [47872 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDDISK; C:\Windows\System32\Drivers\MDDISK.sys [37744 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDFSYSNT; C:\Windows\System32\Drivers\MDFSYSNT.sys [320672 2019-11-04] (Other World Computing, Inc -> Other World Computing)
R0 MDMOUNT; C:\Windows\System32\Drivers\MDMOUNT.sys [29000 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDRAID; C:\WINDOWS\System32\drivers\MDRAID.sys [205576 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 nldrv; C:\WINDOWS\System32\drivers\nldrv.sys [194736 2022-04-03] (Locktime Software s.r.o. -> Locktime Software)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [50248 2020-12-01] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R3 RtsUpx; C:\Windows\system32\drivers\RtsUpx.sys [30328 2018-11-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-10-09] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1310552 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [213336 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [690520 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2020-10-31] (Microsoft Corporation) [File not signed]
S3 usbscan; C:\WINDOWS\system32\DRIVERS\usbscan.sys [49152 2020-10-31] (Microsoft Corporation) [File not signed]
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [326416 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21968 2024-07-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602520 2024-07-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-07-09] (Microsoft Windows -> Microsoft Corporation)
S3 GPU-Z-v2; \??\C:\Users\Martin\AppData\Local\Temp\GPU-Z-v2.sys [X] <==== ATTENTION
S2 NPF; \??\C:\WINDOWS\SysWOW64\drivers\npf64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-07-22 16:15 - 2024-07-22 16:15 - 002337948 _____ C:\WINDOWS\Minidump\072224-26562-01.dmp
2024-07-22 04:45 - 2024-07-22 04:45 - 002935596 _____ C:\WINDOWS\Minidump\072224-25609-01.dmp
2024-07-21 14:45 - 2024-07-21 14:45 - 000011707 _____ C:\Users\Martin\Downloads\g7zSt21D.torrent.part
2024-07-21 07:49 - 2024-07-21 07:49 - 003664332 _____ C:\WINDOWS\Minidump\072124-32953-01.dmp
2024-07-19 04:38 - 2024-07-19 04:38 - 002699028 _____ C:\WINDOWS\Minidump\071924-29984-01.dmp
2024-07-17 04:33 - 2024-07-17 04:34 - 003308100 _____ C:\WINDOWS\Minidump\071724-29718-01.dmp
2024-07-12 12:11 - 2024-07-18 16:14 - 000002435 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2024-07-12 12:11 - 2024-07-18 16:14 - 000002398 _____ C:\Users\Martin\Desktop\Vivaldi.lnk
2024-07-12 12:11 - 2024-07-18 16:14 - 000000000 ____D C:\Users\Martin\AppData\Local\Vivaldi
2024-07-12 12:11 - 2024-07-12 12:11 - 000003846 _____ C:\WINDOWS\system32\Tasks\VivaldiUpdateCheck-f757fe48a687763e
2024-07-12 01:38 - 2024-07-12 01:38 - 000000000 ____D C:\WINDOWS\system32\compatrel
2024-07-12 01:22 - 2024-07-12 01:22 - 000021724 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-07-12 01:21 - 2024-07-12 01:21 - 000021724 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-07-12 01:15 - 2024-07-12 01:15 - 000000000 ___HD C:\$WinREAgent
2024-07-11 10:29 - 2024-07-11 10:29 - 000002398 _____ C:\Users\Martin\Desktop\DuckDuckGo.lnk
2024-07-11 09:47 - 2024-07-11 09:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2024-07-11 00:41 - 2024-07-22 04:44 - 000000000 ____D C:\Program Files\Waterfox
2024-07-10 00:07 - 2024-07-12 01:38 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-07-09 20:21 - 2024-07-09 20:21 - 000024695 _____ C:\Users\Martin\Downloads\priloha_1383696803_1_pruvodka.pdf
2024-07-09 20:19 - 2024-07-09 20:19 - 000465375 _____ C:\Users\Martin\Downloads\priloha_1383696803_0_vypis.pdf
2024-07-09 20:14 - 2024-07-09 20:14 - 000256837 _____ C:\Users\Martin\Downloads\priloha_1374811545_0_240508417.pdf
2024-07-09 20:13 - 2024-07-09 20:13 - 000275527 _____ C:\Users\Martin\Downloads\priloha_1374811750_0_240508418.pdf
2024-07-09 13:02 - 2024-07-09 13:02 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2024-07-08 15:37 - 2024-07-08 16:04 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Factorio
2024-07-08 15:37 - 2024-07-08 15:37 - 000000834 _____ C:\Users\Public\Desktop\Factorio.lnk
2024-07-08 15:37 - 2024-07-08 15:37 - 000000834 _____ C:\ProgramData\Desktop\Factorio.lnk
2024-07-08 15:37 - 2024-07-08 15:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Factorio [GOG.com]
2024-07-08 13:22 - 2024-07-17 21:59 - 000002364 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-07-08 13:22 - 2024-07-17 21:59 - 000002323 _____ C:\Users\Public\Desktop\Brave.lnk
2024-07-08 13:22 - 2024-07-17 21:59 - 000002323 _____ C:\ProgramData\Desktop\Brave.lnk
2024-07-08 13:22 - 2024-07-08 13:22 - 000000000 ____D C:\Users\Martin\AppData\Local\BraveSoftware
2024-07-08 13:21 - 2024-07-08 13:21 - 000000000 ____D C:\Program Files\BraveSoftware
2024-07-08 13:18 - 2024-07-08 13:19 - 000000000 ____D C:\Program Files (x86)\Avant Browser
2024-07-03 13:18 - 2024-07-19 16:17 - 000004562 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1720005510
2024-07-03 13:18 - 2024-07-10 08:35 - 000004278 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1720005505
2024-07-03 13:18 - 2024-07-10 08:35 - 000001434 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2024-07-03 13:18 - 2024-07-03 13:18 - 000001438 _____ C:\Users\Martin\Desktop\Prohlížeč Opera.lnk
2024-07-03 13:18 - 2024-07-03 13:18 - 000000000 ____D C:\Users\Martin\AppData\Local\Opera Software
2024-07-02 12:34 - 2024-07-02 12:34 - 000184347 _____ C:\Users\Martin\Downloads\Vypis z uctu 2451926143 za 06-2024.pdf
2024-06-29 16:30 - 2024-06-29 16:30 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\360 Browser
2024-06-29 16:29 - 2024-06-29 16:30 - 000002368 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\360 Browser.lnk
2024-06-29 16:29 - 2024-06-29 16:30 - 000002366 _____ C:\Users\Martin\Desktop\360 Browser.lnk
2024-06-29 16:29 - 2024-06-29 16:29 - 000000000 ____D C:\Users\Martin\AppData\Local\360Browser
2024-06-23 21:52 - 2024-06-23 21:52 - 000020691 _____ C:\Users\Martin\Downloads\[SkT]Barvy_zla _Červená___Colors_of_Evil _Red_(2024)(CZ_EN)[WebRip][1080p].torrent
2024-06-23 21:48 - 2024-06-23 21:48 - 000020817 _____ C:\Users\Martin\Downloads\[SkT]Odznak_Vysočina_S03E06_(CZ)[WEB-DL][1080p]_=_CSFD_47%.torrent
2024-06-23 21:48 - 2024-06-23 21:48 - 000010930 _____ C:\Users\Martin\Downloads\[SkT]Odznak_Vysočina_S03E05_(CZ)[WEB-DL][1080p]_=_CSFD_46%.torrent
2024-06-23 15:51 - 2024-06-23 15:51 - 000040533 _____ C:\Users\Martin\Downloads\claim-report.pdf
2024-06-23 14:44 - 2024-06-23 14:44 - 000130667 _____ C:\Users\Martin\Downloads\Smlouva_02711868.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-07-22 23:39 - 2023-04-02 16:14 - 000054056 _____ C:\Users\Martin\Desktop\FRST.txt
2024-07-22 23:39 - 2020-01-19 20:57 - 000000000 ____D C:\FRST
2024-07-22 23:38 - 2019-01-08 12:43 - 000000000 ____D C:\Users\Martin\AppData\Roaming\uTorrent
2024-07-22 23:34 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-07-22 23:22 - 2021-02-10 14:35 - 002396672 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2024-07-22 23:18 - 2021-12-19 02:56 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-07-22 23:15 - 2024-05-21 19:58 - 000000000 ____D C:\Users\Martin\AppData\Roaming\bright-vpn
2024-07-22 20:06 - 2019-01-08 12:42 - 000000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2024-07-22 19:29 - 2020-11-01 02:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-07-22 17:46 - 2019-02-08 11:59 - 000000000 ____D C:\Program Files\CCleaner
2024-07-22 16:21 - 2020-11-01 15:15 - 001701888 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-07-22 16:21 - 2019-12-07 16:41 - 000720062 _____ C:\WINDOWS\system32\perfh005.dat
2024-07-22 16:21 - 2019-12-07 16:41 - 000146176 _____ C:\WINDOWS\system32\perfc005.dat
2024-07-22 16:21 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-07-22 16:18 - 2018-11-18 19:48 - 000000000 ____D C:\ProgramData\NVIDIA
2024-07-22 16:16 - 2022-09-13 12:46 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Dropbox
2024-07-22 16:16 - 2022-09-13 12:46 - 000000000 ____D C:\Users\Martin\AppData\Local\Dropbox
2024-07-22 16:15 - 2023-08-03 04:47 - 000000000 ____D C:\WINDOWS\Minidump
2024-07-22 16:15 - 2022-06-08 19:23 - 000000000 ____D C:\Program Files\TeamViewer
2024-07-22 16:15 - 2020-11-01 02:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-07-21 18:08 - 2024-05-21 19:58 - 000002400 _____ C:\Users\Martin\Desktop\Maxthon.lnk
2024-07-21 14:48 - 2024-06-02 16:34 - 000000975 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox.lnk
2024-07-21 11:18 - 2021-05-05 21:11 - 000000000 ____D C:\ProgramData\Wondershare Filmora
2024-07-21 11:18 - 2021-05-05 21:11 - 000000000 ____D C:\Program Files\Wondershare Filmora
2024-07-21 07:49 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-07-21 07:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-07-20 20:38 - 2020-06-05 08:48 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-07-20 20:38 - 2020-06-05 08:48 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-07-20 20:38 - 2020-06-05 08:48 - 000002274 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2024-07-20 10:36 - 2021-07-30 22:57 - 000002166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2024-07-20 10:35 - 2024-04-18 16:48 - 000003866 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA{503DAD2A-1E0B-4709-BFEF-7EB0AF7BDC5A}
2024-07-20 10:35 - 2024-04-18 16:48 - 000003742 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore{D9D34763-CA92-403D-B9A2-2E8012CDE552}
2024-07-19 16:16 - 2024-04-11 17:58 - 000000527 _____ C:\Users\Martin\.vivaldi_reporting_data
2024-07-18 19:42 - 2022-06-11 22:27 - 000000000 ____D C:\Users\Martin\Desktop\viidea
2024-07-18 04:32 - 2020-04-23 19:52 - 000002548 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-07-18 04:32 - 2020-04-23 19:52 - 000002511 _____ C:\Users\Martin\Desktop\Google Chrome.lnk
2024-07-15 17:02 - 2019-01-12 03:30 - 000000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2024-07-15 00:17 - 2020-10-31 14:00 - 000000000 ____D C:\Users\Martin
2024-07-13 16:10 - 2021-12-11 16:40 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1952709571-807798404-1509361630-1003
2024-07-13 16:10 - 2020-11-01 02:31 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1952709571-807798404-1509361630-1003
2024-07-13 16:10 - 2020-10-31 14:00 - 000002425 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-07-12 21:58 - 2021-05-18 20:18 - 000000000 ____D C:\Users\postgres
2024-07-12 01:40 - 2019-12-07 11:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2024-07-12 01:39 - 2020-11-01 02:26 - 000574000 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-07-12 01:38 - 2023-12-14 00:46 - 000000000 ____D C:\WINDOWS\InboxApps
2024-07-12 01:38 - 2020-11-01 02:25 - 000008192 ___SH C:\DumpStack.log.tmp
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-07-12 01:38 - 2019-01-08 12:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-07-12 01:24 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-07-12 01:21 - 2020-11-01 02:26 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-07-12 00:12 - 2024-05-28 17:06 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2024-07-11 18:48 - 2020-11-01 02:31 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-07-11 18:48 - 2020-11-01 02:31 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-07-11 10:29 - 2019-01-08 11:51 - 000000000 ____D C:\Users\Martin\AppData\Local\Packages
2024-07-11 09:47 - 2022-09-13 12:46 - 000000000 ____D C:\Program Files (x86)\Dropbox
2024-07-10 18:52 - 2018-05-10 09:03 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-07-10 18:47 - 2018-05-10 09:03 - 194135240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-07-10 08:34 - 2019-01-08 12:06 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-07-09 08:21 - 2018-05-10 08:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-07-04 14:12 - 2019-01-09 02:10 - 000000000 ____D C:\Users\Martin\Documents\Euro Truck Simulator 2
2024-07-04 10:04 - 2019-01-08 12:24 - 000000000 ____D C:\Users\Martin\AppData\Local\D3DSCache
2024-07-03 15:38 - 2021-05-05 19:09 - 000000000 ____D C:\Program Files (x86)\HitPaw
2024-07-03 13:17 - 2022-09-23 12:11 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Opera Software
2024-07-01 07:56 - 2021-09-08 15:59 - 000000000 ____D C:\ProgramData\CanonIJPLM
2024-06-30 08:18 - 2023-04-05 05:23 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-06-30 08:18 - 2023-04-05 05:23 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-06-30 08:18 - 2023-04-05 05:23 - 000002061 _____ C:\ProgramData\Desktop\Adobe Acrobat.lnk
2024-06-29 14:36 - 2022-06-22 14:13 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-06-24 05:46 - 2024-05-21 19:58 - 000000000 ____D C:\Program Files (x86)\Bright VPN
2024-06-24 00:11 - 2022-09-13 12:46 - 000000940 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2024-06-24 00:11 - 2022-09-13 12:46 - 000000936 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2024-06-24 00:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-06-23 15:35 - 2024-02-18 23:58 - 000000000 ____D C:\Users\Martin\Desktop\Knihy 17.2
2024-06-23 13:10 - 2019-03-22 19:19 - 000000000 ____D C:\Users\Martin\AppData\Local\ElevatedDiagnostics
2024-06-23 12:41 - 2022-09-13 12:46 - 000004000 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2024-06-23 12:41 - 2022-09-13 12:46 - 000003768 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
==================== Files in the root of some directories ========
2022-04-18 02:06 - 2022-04-18 02:06 - 000000048 ____H () C:\Program Files (x86)\rjl5kdxjp8.dat
2021-05-25 20:28 - 2021-05-25 20:28 - 000000208 _____ () C:\Users\Martin\AppData\Roaming\DESKTOP-69LFJ66.MTBF.txt
2022-08-09 18:21 - 2023-07-22 14:29 - 003354624 _____ () C:\Users\Martin\AppData\Roaming\emp.bin
2019-03-28 23:14 - 2021-01-19 02:31 - 000000002 _____ () C:\Users\Martin\AppData\Roaming\ExplorerFavorites.txt
2019-03-22 15:08 - 2002-08-29 19:33 - 000319488 _____ () C:\Users\Martin\AppData\Roaming\MafiaSetup.exe
2024-03-27 20:58 - 2024-03-27 20:58 - 000000249 _____ () C:\Users\Martin\AppData\Roaming\MelonLoader.Installer.cfg
2019-09-16 23:26 - 2019-09-16 23:26 - 000000027 _____ () C:\Users\Martin\AppData\Local\.sdpl-system-config4
2024-03-13 20:59 - 2024-03-13 20:59 - 000001480 _____ () C:\Users\Martin\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2022-03-15 15:35 - 2022-03-15 15:35 - 000006144 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2023-08-06 16:19 - 2023-08-06 16:20 - 001065984 _____ () C:\Users\Martin\AppData\Local\file__0.localstorage
2021-02-01 10:06 - 2024-02-23 23:49 - 000000205 _____ () C:\Users\Martin\AppData\Local\oobelibMkey.log
2019-07-28 01:07 - 2019-07-28 01:07 - 000000017 _____ () C:\Users\Martin\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Dříve to nedělalo.
Vůbec netuším, co to může způsobovat.
Mohu o zkontrolování logu ? Děkuji
FRST LOG
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21.07.2024
Ran by Martin (administrator) on DESKTOP-69LFJ66 (22-07-2024 23:38:22)
Running from C:\Users\Martin\Desktop\FRST64.exe
Loaded Profiles: Martin & postgres
Platform: Microsoft Windows 10 Home Version 22H2 19045.4651 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe
(C:\Program Files (x86)\Bright VPN\net_updater32.exe ->) (BrightData Ltd.) [File not signed] C:\ProgramData\BrightData\6cca5f7f15056f66a3211bbbd92076486a2361bb\brightdata.exe
(C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.911.1\DropboxCrashHandler.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe ->) (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.5\bin\postgres.exe <7>
(C:\Program Files\WindowsApps\DuckDuckGo.DesktopBrowser_0.85.5.0_x64__ya2fgkz3nks94\WindowsBrowser\DuckDuckGo.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\DuckDuckGo\Martin\WebView2\msedgewebview2.exe <7>
(C:\Users\Martin\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\111.0.5168.61\opera_crashreporter.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <8>
(explorer.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.WebAppHost.exe
(explorer.exe ->) (Bright Data Ltd -> Bright Data Ltd.) C:\Program Files (x86)\Bright VPN\Bright VPN.exe <3>
(explorer.exe ->) (Duck Duck Go, Inc. -> DuckDuckGo) C:\Program Files\WindowsApps\DuckDuckGo.DesktopBrowser_0.85.5.0_x64__ya2fgkz3nks94\WindowsBrowser\DuckDuckGo.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe <2>
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Martin\AppData\Local\Programs\Opera\opera.exe <21>
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe <2>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <58>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMSvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\1.00.39\LightingService.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(services.exe ->) (Bright Data Ltd -> BrightData Ltd.) C:\Program Files (x86)\Bright VPN\net_updater32.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (Locktime Software s.r.o. -> Locktime Software) C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe
(services.exe ->) (Mediafour Corporation -> Mediafour Corporation) C:\Program Files\Mediafour\MacDrive 10\MacDrive10Service.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvaki.inf_amd64_e95973c445ab118d\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\FANRGBHEADER\FanLEDCtrl.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\LightingService\1.00.39\AsRogAuraGpuDllServer.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(svchost.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe
(svchost.exe ->) (D922F830-2E44-498C-84F8-05D8FB2F43B6 -> ) C:\Program Files\WindowsApps\61442BareBonesDev.PowerPlanner_2402.21.5.0_x64__5ga7fac6nanaa\PowerPlannerUWP.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [519912 2017-12-01] (Acronis International GmbH -> )
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9246656 2018-01-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [MacDrive 10 helper] => C:\Program Files\Mediafour\MacDrive 10\MDHelper.exe [299872 2017-09-28] (Mediafour Corporation -> Mediafour Corporation)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2017-12-01] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [3770736 2017-12-01] (Acronis International GmbH -> )
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [Speechtech TTS 32-bit preload] => C:\Program Files (x86)\Speechtech TTS\TTSGui.exe [2636616 2020-08-05] (SpeechTech, s.r.o. -> SpeechTech, s.r.o. (www.speechtech.cz))
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9248144 2024-07-09] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [731240 2018-12-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [40412984 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Discord] => C:\Users\Martin\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG -> Nero AG)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [upjers Home] => C:\Users\Martin\AppData\Local\Programs\upjers-playground2\upjers Home.exe [123847840 2022-12-12] (upjers GmbH -> upjers GmbH)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [NetLimiter] => C:\Program Files\Locktime Software\NetLimiter 4\nlclientapp.exe [301240 2022-04-03] (Locktime Software s.r.o. -> Locktime Software)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [MicrosoftEdgeAutoLaunch_B808638226F52F22B08BF8F7E5687BBA] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3883472 2024-07-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Bright VPN] => C:\Program Files (x86)\Bright VPN\Bright VPN.exe [117925400 2024-05-21] (Bright Data Ltd -> Bright Data Ltd.)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Opera Stable] => C:\Users\Martin\AppData\Local\Programs\Opera\opera.exe [1595296 2024-07-10] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [Opera Browser Assistant] => C:\Users\Martin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4049312 2024-07-18] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\Run: [GoogleUpdaterTaskUser128.0.6597.0] => C:\Users\Martin\AppData\Local\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC)
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\MountPoints2: {c75b6ffe-132a-11e9-88c9-0c9d9262121a} - "F:\setup.exe"
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\MountPoints2: {c75b7132-132a-11e9-88c9-0c9d9262121a} - "G:\setup.exe"
HKU\S-1-5-21-1952709571-807798404-1509361630-1003\...\MountPoints2: {c75b7991-132a-11e9-88c9-0c9d9262121a} - "E:\Setup.exe"
HKU\S-1-5-21-1952709571-807798404-1509361630-1004\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\94.0.1.0\GoogleDriveFS.exe [60982376 2024-07-20] (Google LLC -> Google, Inc.)
HKLM\...\Windows x64\Print Processors\Canon MG3600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCT.DLL [30208 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MP630 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9C.DLL [27648 2009-12-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\sxj2mPC: C:\Windows\System32\spool\prtprocs\x64\sxj2mpc.dll [43520 2014-02-20] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3600 series: C:\Windows\system32\CNMLMCT.DLL [406528 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP630 series: C:\Windows\system32\CNMLM9C.DLL [279040 2009-12-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\sxj2m Langmon: C:\Windows\system32\sxj2mlm.dll [34304 2013-12-10] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\Windows\system32\PEPrinterMonitor.dll [285232 2022-11-08] (Wondershare Technology Co.,Ltd -> Wondershare Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\126.0.25558.127\Installer\chrmstp.exe [2024-07-12] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\126.1.67.134\Installer\chrmstp.exe [2024-07-17] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2022-12-04]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2022-12-04]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2022-12-04]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2022-12-04]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\PDFelement9\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1A288958-77C2-4BFB-9E20-FBD1FE166F4F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1558984 2024-06-25] (Adobe Inc. -> Adobe Inc.)
Task: {83AA25FB-D41D-4CCA-9083-32583CE84DDD} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {9226B98D-FF26-4311-835E-77B86A525C1E} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\LightingService\1.00.39\AsRogAuraGpuDllServer.exe [280536 2018-02-06] (ASUSTeK Computer Inc. -> )
Task: {848B3368-4FCD-44F7-AC25-D1B75021B74C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2072536 2017-07-16] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {E5AB2829-5A65-4444-8A9B-8F138EBE1235} - System32\Tasks\ASUS\ASUS FanLEDCtrl => C:\Program Files (x86)\ASUS\AI Suite III\FANRGBHEADER\FanLEDCtrl.exe [1147352 2017-07-17] (ASUSTeK Computer Inc. -> )
Task: {D2BE4863-3C41-4066-AB7A-BE5065ADA6C9} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3153984 2024-07-03] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {5ACFD095-3D94-4C66-B8F6-512D65607C86} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3153984 2024-07-03] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {D136D764-CFF6-42BA-A8DE-BC30718F3654} - System32\Tasks\AvastBrowserProtectS-1-5-21-1952709571-807798404-1509361630-1003 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1690008 2024-05-08] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {A8EBDE1A-E946-47A9-929E-C4D03F2E65CC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {61EC7A49-6C41-4015-B336-3BBAB2C0E963} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {70E3C379-1355-4D57-B6BC-A95044F31F3F} - System32\Tasks\Avira_FallbackUpdater => C:\Windows\System32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start AviraFallbackUpdater Delayed=false
Task: {FE7E30C3-8514-42D6-80C2-96D8578F8B30} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {FE7E30C3-8514-42D6-80C2-96D8578F8B30} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {FE7E30C3-8514-42D6-80C2-96D8578F8B30} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {6EE07F9F-4C5F-4D27-A9BF-EB6E488F3CF8} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [259040 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {42A2B12D-B0B7-4528-A9F5-F0132CF27F2C} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1775072 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {827AFED3-C59F-4DDA-8783-4EF2735F845F} - System32\Tasks\Avira_Security_Update => C:\Windows\System32\net.exe [59904 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {994295FD-03A6-4B3C-B4FB-B080B7CEC77D} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [36867824 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {770185CC-8963-46E1-B5E1-E14F8DDB375B} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{D9D34763-CA92-403D-B9A2-2E8012CDE552} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {D1B5D5A6-694A-48B7-8C35-357DC58B4841} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{503DAD2A-1E0B-4709-BFEF-7EB0AF7BDC5A} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {FFDBEB67-97B3-4162-91C7-1EADF9A76214} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {15A2D49B-E0A4-4BE5-9B18-222C9709D1DE} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703544 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "edd56fdf-212d-4bc6-a2cd-de4b39e7b6ac" --version "6.11.10455" --silent
Task: {380B9784-3DE9-46E5-8694-624FFE75B26B} - System32\Tasks\CCleanerSkipUAC - Martin => C:\Program Files\CCleaner\CCleaner.exe [34159416 2023-04-26] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {5D51B336-0D0E-458B-B9F0-D0994E69C190} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B544DB84-6AD2-4F16-A279-3CFF829FAFBA} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {BC445D10-90AF-4437-B385-C5A2E4868B75} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6597.0{20468240-50F7-4747-92B3-E35F51646EF4} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC)
Task: {68F1FE10-F8F3-45F2-ABF6-6DA33A65D485} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser128.0.6597.0{5A526F45-6C3F-48F1-BB46-17858D7D6EB4} => C:\Users\Martin\AppData\Local\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC)
Task: {2CCAC4DB-5B8A-45E6-9714-34355ADA3830} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2022-05-12] () [File not signed]
Task: {469617FA-C60A-45BA-B85C-5EDE48AD6BF7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {147BDCF9-D51C-4D8C-BD2C-EC65F6C5C75A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5AF2D388-E0F4-4106-A8B4-B70C717E1326} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {92A36390-FAD1-4DA2-B3FD-A5E2DBF9A244} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0D912E79-CEFB-456A-A677-9A687B471F67} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677448 2024-07-10] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {9DC5890F-AC81-438E-B5B3-3F3CD703F544} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1952709571-807798404-1509361630-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677448 2024-07-10] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {E74878F9-D41E-4A6B-8BFE-F71983B65CD8} - System32\Tasks\NCH Software\VideoPadDowngrade => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [10993640 2021-09-30] (NCH Software, Inc. -> NCH Software)
Task: {7D9581B1-B8B9-4E3E-8F26-2B487CACA152} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1277480 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D130115F-F259-42B2-9E5D-7D2E7FC41403} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3347496 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D92D331C-C16B-49EE-B8B3-B40308F6127F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646696 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {24532F69-11D2-4796-927C-179D00116809} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {72408013-2C2E-4FD2-8F78-16C6C85B694B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C80C8DD1-7EA3-4F24-BDE5-68A4AAEF0236} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {89B2FFE7-1E8A-45D4-A88C-714978D7CF9D} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6031F183-AD0D-412A-AB49-83D560B28389} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4027C948-E968-47D2-B017-4A1EF33A93DC} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-04-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C639C631-8BD0-483F-AED9-A8681A609F5F} - System32\Tasks\Opera scheduled assistant Autoupdate 1720005510 => C:\Users\Martin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5749664 2024-07-04] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\Martin\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {EA562655-8D57-4820-9B09-4ADEC8603A15} - System32\Tasks\Opera scheduled Autoupdate 1720005505 => C:\Users\Martin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5749664 2024-07-04] (Opera Norway AS -> Opera Software)
Task: {AED8C40E-6018-4F9B-88DC-48B1036643E1} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [49544 2018-04-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {66BA1A9F-46DA-44E2-9E70-06D495F50986} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [69512 2018-04-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {1714B6BF-B482-44AC-954A-D930A02FCB85} - System32\Tasks\VivaldiUpdateCheck-f757fe48a687763e => C:\Users\Martin\AppData\Local\Vivaldi\Application\update_notifier.exe [3694216 2024-07-17] (Vivaldi Technologies AS -> Vivaldi Technologies AS) -> C:\Users\Martin\AppData\Local\Vivaldi\Application\--from-scheduler
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.48.31.69 93.99.200.155
Tcpip\..\Interfaces\{744231fc-53c1-4c85-94e3-11298048c25a}: [DhcpNameServer] 77.48.31.69 93.99.200.155
Tcpip\..\Interfaces\{883c3a9e-efd9-4b96-bcb7-1911c521d092}: [DhcpNameServer] 172.18.0.1 172.18.0.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default [2024-07-22]
Edge DownloadDir: Default -> E:\BMW\VLOGY 2024\Španělsko\hl. kamera
Edge Extension: (Dokumenty Google offline) - C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-06]
Edge Extension: (Edge relevant text changes) - C:\Users\Martin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
FireFox:
========
FF DefaultProfile: 9p3kkt99.68-edition-default
FF DefaultProfile: dzgrn46h.default
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Waterfox\Profiles\9p3kkt99.68-edition-default [2024-06-02]
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Waterfox\Profiles\i5xwoqol.default-release [2024-07-21]
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Netscape\Navigator\Profiles\nri3tgj1.default [2024-05-29]
FF Extension: (No Name) - C:\Program Files (x86)\Netscape\Navigator 9\extensions\netscape9migrator@flock.com [not found]
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default [2024-07-22]
FF DownloadDir: E:
FF Homepage: Mozilla\Firefox\Profiles\dzgrn46h.default -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\dzgrn46h.default -> hxxps://www.kupi.cz; hxxps://drive.google.com; hxxps://www.betano.cz
FF Extension: (SetupVPN - Lifetime Free VPN) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\@setupvpncom.xpi [2024-06-25]
FF Extension: (Komponenta I.CA PKI Service) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\icapkiservice@ica.cz.xpi [2021-07-23]
FF Extension: (Avira Password Manager) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\passwordmanager@avira.com.xpi [2023-07-31]
FF Extension: (Block Site) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\{07046613-1993-4b66-9dd1-9dd1ce581cb7}.xpi [2020-07-13]
FF Extension: (Whoer VPN) - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dzgrn46h.default\Extensions\{ee47f82c-1872-4053-badf-cc675093f81e}.xpi [2020-07-14]
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-06-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll [No File]
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2016-04-14] (CANON INC.) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default [2024-07-22]
CHR DownloadDir: E:\
CHR Extension: (Torrent Scanner) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2024-01-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-21]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR HKU\S-1-5-21-1952709571-807798404-1509361630-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-1952709571-807798404-1509361630-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR DefaultProfile: Default
Brave:
=======
BRA Profile: C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-07-19]
BRA Extension: (Torrent Scanner) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2024-07-08]
BRA Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-07-08]
BRA Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-07-08]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-07-19]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-07-19]
BRA Extension: (Brave NTP background images) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-07-08]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-07-19]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-07-19]
BRA Extension: (Brave NTP sponsored images) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2024-07-19]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-07-11]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2024-07-08]
BRA Extension: (Brave Ads Resources) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iejekkikpddbbockoldagmfcdbffomfc [2024-07-08]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-07-19]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-07-08]
BRA Extension: (Brave Ad Block Updater (EasyList Czech and Slovak (plaintext))) - C:\Users\Martin\AppData\Local\BraveSoftware\Brave-Browser\User Data\oegebjahecghlckbhkmojgnpcgdeajdi [2024-07-08]
Vivaldi:
=======
VIV Profile: C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default [2024-07-19]
VIV Extension: (Torrent Scanner) - C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2024-07-12]
VIV Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-07-12]
VIV Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\Martin\AppData\Local\Vivaldi\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-07-12]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2723872 2017-12-01] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1133728 2017-12-01] (Acronis International GmbH -> )
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-06-25] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6096688 2018-05-10] (Acronis International GmbH -> )
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. -> Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe [382424 2018-02-06] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMSvc.exe [975832 2017-06-01] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-05-28] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\126.0.25558.127\elevation_service.exe [1773352 2024-07-03] (Avast Software s.r.o. -> Gen Digital Inc.)
S2 AviraFallbackUpdater; C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe [6738360 2024-04-25] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3003584 2024-01-22] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [398816 2024-04-23] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [265544 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [295752 2024-06-05] (Avira Operations GmbH -> Avira Operations GmbH)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8402648 2019-12-08] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\126.1.67.134\elevation_service.exe [2688024 2024-07-17] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2024-04-18] (Brave Software, Inc. -> BraveSoftware Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-09-13] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-07-09] (Dropbox, Inc -> Dropbox, Inc.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3644008 2018-12-17] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\203.4.4857\DropboxElevationService.exe [1659288 2024-07-09] (Dropbox, Inc -> Dropbox, Inc.)
S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-18] (Hewlett-Packard Co.) [File not signed]
S3 I.CA Maintenance Service; C:\Program Files (x86)\I.CA\I.CA Maintenance\ICAMaintenance.exe [283904 2019-08-02] (Prvni certifikacni autorita, a.s. -> I.CA, a.s.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [445432 2021-04-19] (Canon Inc. -> )
R2 LightingService; C:\Program Files (x86)\LightingService\1.00.39\LightingService.exe [1244632 2018-02-06] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R2 luminati_net_updater_win_brightvpn_com; C:\Program Files (x86)\Bright VPN\net_updater32.exe [9792504 2024-06-24] (Bright Data Ltd -> BrightData Ltd.)
R2 MacDrive10Service; C:\Program Files\Mediafour\MacDrive 10\MacDrive10Service.exe [223088 2018-03-21] (Mediafour Corporation -> Mediafour Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpDefenderCoreService.exe [1377416 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2017-12-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2017-12-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1706080 2017-12-01] (Acronis International GmbH -> )
S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2007-01-15] (Nero AG) [File not signed]
R2 nlsvc; C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe [20152 2022-04-03] (Locktime Software s.r.o. -> Locktime Software)
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG -> Nero AG)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_e95973c445ab118d\Display.NvContainer\NVDisplay.Container.exe [1275440 2024-04-12] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557144 2021-10-02] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3475672 2021-10-02] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2022-07-20] (Even Balance, Inc. -> )
R2 postgresql-x64-9.5; C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe [94208 2016-08-09] (PostgreSQL Global Development Group) [File not signed]
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [6101488 2024-04-01] (Rockstar Games, Inc. -> Rockstar Games)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7003048 2017-12-01] (Acronis International GmbH -> )
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16971576 2023-03-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\NisSrv.exe [3236728 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MsMpEng.exe [133688 2024-07-09] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2017-06-01] (ASUSTeK Computer Inc. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 CBDisk; C:\WINDOWS\system32\drivers\CBDisk.sys [70344 2015-06-09] (EldoS Corporation -> EldoS Corporation)
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [138760 2021-01-14] (ADAPP SASU -> Dokan Project)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2019-01-08] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2019-01-08] (Disc Soft Ltd -> Disc Soft Ltd)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [564304 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [379664 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [182032 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 GLCKIO; C:\Program Files (x86)\ASUS\AURA\690b33e1-0462-4e84-9bea-c7552b45432a.sys [14976 2022-12-17] (ASUSTeK Computer Inc. -> )
R2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R0 MDAPFS; C:\Windows\System32\Drivers\MDAPFS.sys [458728 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDAPFSCT; C:\Windows\System32\Drivers\MDAPFSCT.sys [47872 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDDISK; C:\Windows\System32\Drivers\MDDISK.sys [37744 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDFSYSNT; C:\Windows\System32\Drivers\MDFSYSNT.sys [320672 2019-11-04] (Other World Computing, Inc -> Other World Computing)
R0 MDMOUNT; C:\Windows\System32\Drivers\MDMOUNT.sys [29000 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 MDRAID; C:\WINDOWS\System32\drivers\MDRAID.sys [205576 2019-11-04] (Mediafour Corporation -> Other World Computing)
R0 nldrv; C:\WINDOWS\System32\drivers\nldrv.sys [194736 2022-04-03] (Locktime Software s.r.o. -> Locktime Software)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [50248 2020-12-01] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R3 RtsUpx; C:\Windows\system32\drivers\RtsUpx.sys [30328 2018-11-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-10-09] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1310552 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [213336 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [690520 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24064 2020-10-31] (Microsoft Corporation) [File not signed]
S3 usbscan; C:\WINDOWS\system32\DRIVERS\usbscan.sys [49152 2020-10-31] (Microsoft Corporation) [File not signed]
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [326416 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2018-05-10] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21968 2024-07-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602520 2024-07-09] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-07-09] (Microsoft Windows -> Microsoft Corporation)
S3 GPU-Z-v2; \??\C:\Users\Martin\AppData\Local\Temp\GPU-Z-v2.sys [X] <==== ATTENTION
S2 NPF; \??\C:\WINDOWS\SysWOW64\drivers\npf64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-07-22 16:15 - 2024-07-22 16:15 - 002337948 _____ C:\WINDOWS\Minidump\072224-26562-01.dmp
2024-07-22 04:45 - 2024-07-22 04:45 - 002935596 _____ C:\WINDOWS\Minidump\072224-25609-01.dmp
2024-07-21 14:45 - 2024-07-21 14:45 - 000011707 _____ C:\Users\Martin\Downloads\g7zSt21D.torrent.part
2024-07-21 07:49 - 2024-07-21 07:49 - 003664332 _____ C:\WINDOWS\Minidump\072124-32953-01.dmp
2024-07-19 04:38 - 2024-07-19 04:38 - 002699028 _____ C:\WINDOWS\Minidump\071924-29984-01.dmp
2024-07-17 04:33 - 2024-07-17 04:34 - 003308100 _____ C:\WINDOWS\Minidump\071724-29718-01.dmp
2024-07-12 12:11 - 2024-07-18 16:14 - 000002435 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2024-07-12 12:11 - 2024-07-18 16:14 - 000002398 _____ C:\Users\Martin\Desktop\Vivaldi.lnk
2024-07-12 12:11 - 2024-07-18 16:14 - 000000000 ____D C:\Users\Martin\AppData\Local\Vivaldi
2024-07-12 12:11 - 2024-07-12 12:11 - 000003846 _____ C:\WINDOWS\system32\Tasks\VivaldiUpdateCheck-f757fe48a687763e
2024-07-12 01:38 - 2024-07-12 01:38 - 000000000 ____D C:\WINDOWS\system32\compatrel
2024-07-12 01:22 - 2024-07-12 01:22 - 000021724 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-07-12 01:21 - 2024-07-12 01:21 - 000021724 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-07-12 01:15 - 2024-07-12 01:15 - 000000000 ___HD C:\$WinREAgent
2024-07-11 10:29 - 2024-07-11 10:29 - 000002398 _____ C:\Users\Martin\Desktop\DuckDuckGo.lnk
2024-07-11 09:47 - 2024-07-11 09:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2024-07-11 00:41 - 2024-07-22 04:44 - 000000000 ____D C:\Program Files\Waterfox
2024-07-10 00:07 - 2024-07-12 01:38 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-07-09 20:21 - 2024-07-09 20:21 - 000024695 _____ C:\Users\Martin\Downloads\priloha_1383696803_1_pruvodka.pdf
2024-07-09 20:19 - 2024-07-09 20:19 - 000465375 _____ C:\Users\Martin\Downloads\priloha_1383696803_0_vypis.pdf
2024-07-09 20:14 - 2024-07-09 20:14 - 000256837 _____ C:\Users\Martin\Downloads\priloha_1374811545_0_240508417.pdf
2024-07-09 20:13 - 2024-07-09 20:13 - 000275527 _____ C:\Users\Martin\Downloads\priloha_1374811750_0_240508418.pdf
2024-07-09 13:02 - 2024-07-09 13:02 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2024-07-08 15:37 - 2024-07-08 16:04 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Factorio
2024-07-08 15:37 - 2024-07-08 15:37 - 000000834 _____ C:\Users\Public\Desktop\Factorio.lnk
2024-07-08 15:37 - 2024-07-08 15:37 - 000000834 _____ C:\ProgramData\Desktop\Factorio.lnk
2024-07-08 15:37 - 2024-07-08 15:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Factorio [GOG.com]
2024-07-08 13:22 - 2024-07-17 21:59 - 000002364 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-07-08 13:22 - 2024-07-17 21:59 - 000002323 _____ C:\Users\Public\Desktop\Brave.lnk
2024-07-08 13:22 - 2024-07-17 21:59 - 000002323 _____ C:\ProgramData\Desktop\Brave.lnk
2024-07-08 13:22 - 2024-07-08 13:22 - 000000000 ____D C:\Users\Martin\AppData\Local\BraveSoftware
2024-07-08 13:21 - 2024-07-08 13:21 - 000000000 ____D C:\Program Files\BraveSoftware
2024-07-08 13:18 - 2024-07-08 13:19 - 000000000 ____D C:\Program Files (x86)\Avant Browser
2024-07-03 13:18 - 2024-07-19 16:17 - 000004562 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1720005510
2024-07-03 13:18 - 2024-07-10 08:35 - 000004278 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1720005505
2024-07-03 13:18 - 2024-07-10 08:35 - 000001434 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2024-07-03 13:18 - 2024-07-03 13:18 - 000001438 _____ C:\Users\Martin\Desktop\Prohlížeč Opera.lnk
2024-07-03 13:18 - 2024-07-03 13:18 - 000000000 ____D C:\Users\Martin\AppData\Local\Opera Software
2024-07-02 12:34 - 2024-07-02 12:34 - 000184347 _____ C:\Users\Martin\Downloads\Vypis z uctu 2451926143 za 06-2024.pdf
2024-06-29 16:30 - 2024-06-29 16:30 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\360 Browser
2024-06-29 16:29 - 2024-06-29 16:30 - 000002368 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\360 Browser.lnk
2024-06-29 16:29 - 2024-06-29 16:30 - 000002366 _____ C:\Users\Martin\Desktop\360 Browser.lnk
2024-06-29 16:29 - 2024-06-29 16:29 - 000000000 ____D C:\Users\Martin\AppData\Local\360Browser
2024-06-23 21:52 - 2024-06-23 21:52 - 000020691 _____ C:\Users\Martin\Downloads\[SkT]Barvy_zla _Červená___Colors_of_Evil _Red_(2024)(CZ_EN)[WebRip][1080p].torrent
2024-06-23 21:48 - 2024-06-23 21:48 - 000020817 _____ C:\Users\Martin\Downloads\[SkT]Odznak_Vysočina_S03E06_(CZ)[WEB-DL][1080p]_=_CSFD_47%.torrent
2024-06-23 21:48 - 2024-06-23 21:48 - 000010930 _____ C:\Users\Martin\Downloads\[SkT]Odznak_Vysočina_S03E05_(CZ)[WEB-DL][1080p]_=_CSFD_46%.torrent
2024-06-23 15:51 - 2024-06-23 15:51 - 000040533 _____ C:\Users\Martin\Downloads\claim-report.pdf
2024-06-23 14:44 - 2024-06-23 14:44 - 000130667 _____ C:\Users\Martin\Downloads\Smlouva_02711868.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-07-22 23:39 - 2023-04-02 16:14 - 000054056 _____ C:\Users\Martin\Desktop\FRST.txt
2024-07-22 23:39 - 2020-01-19 20:57 - 000000000 ____D C:\FRST
2024-07-22 23:38 - 2019-01-08 12:43 - 000000000 ____D C:\Users\Martin\AppData\Roaming\uTorrent
2024-07-22 23:34 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-07-22 23:22 - 2021-02-10 14:35 - 002396672 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2024-07-22 23:18 - 2021-12-19 02:56 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-07-22 23:15 - 2024-05-21 19:58 - 000000000 ____D C:\Users\Martin\AppData\Roaming\bright-vpn
2024-07-22 20:06 - 2019-01-08 12:42 - 000000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2024-07-22 19:29 - 2020-11-01 02:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-07-22 17:46 - 2019-02-08 11:59 - 000000000 ____D C:\Program Files\CCleaner
2024-07-22 16:21 - 2020-11-01 15:15 - 001701888 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-07-22 16:21 - 2019-12-07 16:41 - 000720062 _____ C:\WINDOWS\system32\perfh005.dat
2024-07-22 16:21 - 2019-12-07 16:41 - 000146176 _____ C:\WINDOWS\system32\perfc005.dat
2024-07-22 16:21 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-07-22 16:18 - 2018-11-18 19:48 - 000000000 ____D C:\ProgramData\NVIDIA
2024-07-22 16:16 - 2022-09-13 12:46 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Dropbox
2024-07-22 16:16 - 2022-09-13 12:46 - 000000000 ____D C:\Users\Martin\AppData\Local\Dropbox
2024-07-22 16:15 - 2023-08-03 04:47 - 000000000 ____D C:\WINDOWS\Minidump
2024-07-22 16:15 - 2022-06-08 19:23 - 000000000 ____D C:\Program Files\TeamViewer
2024-07-22 16:15 - 2020-11-01 02:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-07-21 18:08 - 2024-05-21 19:58 - 000002400 _____ C:\Users\Martin\Desktop\Maxthon.lnk
2024-07-21 14:48 - 2024-06-02 16:34 - 000000975 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox.lnk
2024-07-21 11:18 - 2021-05-05 21:11 - 000000000 ____D C:\ProgramData\Wondershare Filmora
2024-07-21 11:18 - 2021-05-05 21:11 - 000000000 ____D C:\Program Files\Wondershare Filmora
2024-07-21 07:49 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-07-21 07:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-07-20 20:38 - 2020-06-05 08:48 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-07-20 20:38 - 2020-06-05 08:48 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-07-20 20:38 - 2020-06-05 08:48 - 000002274 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2024-07-20 10:36 - 2021-07-30 22:57 - 000002166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2024-07-20 10:35 - 2024-04-18 16:48 - 000003866 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA{503DAD2A-1E0B-4709-BFEF-7EB0AF7BDC5A}
2024-07-20 10:35 - 2024-04-18 16:48 - 000003742 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore{D9D34763-CA92-403D-B9A2-2E8012CDE552}
2024-07-19 16:16 - 2024-04-11 17:58 - 000000527 _____ C:\Users\Martin\.vivaldi_reporting_data
2024-07-18 19:42 - 2022-06-11 22:27 - 000000000 ____D C:\Users\Martin\Desktop\viidea
2024-07-18 04:32 - 2020-04-23 19:52 - 000002548 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-07-18 04:32 - 2020-04-23 19:52 - 000002511 _____ C:\Users\Martin\Desktop\Google Chrome.lnk
2024-07-15 17:02 - 2019-01-12 03:30 - 000000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2024-07-15 00:17 - 2020-10-31 14:00 - 000000000 ____D C:\Users\Martin
2024-07-13 16:10 - 2021-12-11 16:40 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1952709571-807798404-1509361630-1003
2024-07-13 16:10 - 2020-11-01 02:31 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1952709571-807798404-1509361630-1003
2024-07-13 16:10 - 2020-10-31 14:00 - 000002425 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-07-12 21:58 - 2021-05-18 20:18 - 000000000 ____D C:\Users\postgres
2024-07-12 01:40 - 2019-12-07 11:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2024-07-12 01:39 - 2020-11-01 02:26 - 000574000 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-07-12 01:38 - 2023-12-14 00:46 - 000000000 ____D C:\WINDOWS\InboxApps
2024-07-12 01:38 - 2020-11-01 02:25 - 000008192 ___SH C:\DumpStack.log.tmp
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-07-12 01:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-07-12 01:38 - 2019-01-08 12:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-07-12 01:24 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-07-12 01:21 - 2020-11-01 02:26 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-07-12 00:12 - 2024-05-28 17:06 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2024-07-11 18:48 - 2020-11-01 02:31 - 000003638 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-07-11 18:48 - 2020-11-01 02:31 - 000003514 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-07-11 10:29 - 2019-01-08 11:51 - 000000000 ____D C:\Users\Martin\AppData\Local\Packages
2024-07-11 09:47 - 2022-09-13 12:46 - 000000000 ____D C:\Program Files (x86)\Dropbox
2024-07-10 18:52 - 2018-05-10 09:03 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-07-10 18:47 - 2018-05-10 09:03 - 194135240 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-07-10 08:34 - 2019-01-08 12:06 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-07-09 08:21 - 2018-05-10 08:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-07-04 14:12 - 2019-01-09 02:10 - 000000000 ____D C:\Users\Martin\Documents\Euro Truck Simulator 2
2024-07-04 10:04 - 2019-01-08 12:24 - 000000000 ____D C:\Users\Martin\AppData\Local\D3DSCache
2024-07-03 15:38 - 2021-05-05 19:09 - 000000000 ____D C:\Program Files (x86)\HitPaw
2024-07-03 13:17 - 2022-09-23 12:11 - 000000000 ____D C:\Users\Martin\AppData\Roaming\Opera Software
2024-07-01 07:56 - 2021-09-08 15:59 - 000000000 ____D C:\ProgramData\CanonIJPLM
2024-06-30 08:18 - 2023-04-05 05:23 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-06-30 08:18 - 2023-04-05 05:23 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-06-30 08:18 - 2023-04-05 05:23 - 000002061 _____ C:\ProgramData\Desktop\Adobe Acrobat.lnk
2024-06-29 14:36 - 2022-06-22 14:13 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-06-24 05:46 - 2024-05-21 19:58 - 000000000 ____D C:\Program Files (x86)\Bright VPN
2024-06-24 00:11 - 2022-09-13 12:46 - 000000940 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2024-06-24 00:11 - 2022-09-13 12:46 - 000000936 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2024-06-24 00:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-06-23 15:35 - 2024-02-18 23:58 - 000000000 ____D C:\Users\Martin\Desktop\Knihy 17.2
2024-06-23 13:10 - 2019-03-22 19:19 - 000000000 ____D C:\Users\Martin\AppData\Local\ElevatedDiagnostics
2024-06-23 12:41 - 2022-09-13 12:46 - 000004000 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2024-06-23 12:41 - 2022-09-13 12:46 - 000003768 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
==================== Files in the root of some directories ========
2022-04-18 02:06 - 2022-04-18 02:06 - 000000048 ____H () C:\Program Files (x86)\rjl5kdxjp8.dat
2021-05-25 20:28 - 2021-05-25 20:28 - 000000208 _____ () C:\Users\Martin\AppData\Roaming\DESKTOP-69LFJ66.MTBF.txt
2022-08-09 18:21 - 2023-07-22 14:29 - 003354624 _____ () C:\Users\Martin\AppData\Roaming\emp.bin
2019-03-28 23:14 - 2021-01-19 02:31 - 000000002 _____ () C:\Users\Martin\AppData\Roaming\ExplorerFavorites.txt
2019-03-22 15:08 - 2002-08-29 19:33 - 000319488 _____ () C:\Users\Martin\AppData\Roaming\MafiaSetup.exe
2024-03-27 20:58 - 2024-03-27 20:58 - 000000249 _____ () C:\Users\Martin\AppData\Roaming\MelonLoader.Installer.cfg
2019-09-16 23:26 - 2019-09-16 23:26 - 000000027 _____ () C:\Users\Martin\AppData\Local\.sdpl-system-config4
2024-03-13 20:59 - 2024-03-13 20:59 - 000001480 _____ () C:\Users\Martin\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2022-03-15 15:35 - 2022-03-15 15:35 - 000006144 _____ () C:\Users\Martin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2023-08-06 16:19 - 2023-08-06 16:20 - 001065984 _____ () C:\Users\Martin\AppData\Local\file__0.localstorage
2021-02-01 10:06 - 2024-02-23 23:49 - 000000205 _____ () C:\Users\Martin\AppData\Local\oobelibMkey.log
2019-07-28 01:07 - 2019-07-28 01:07 - 000000017 _____ () C:\Users\Martin\AppData\Local\resmon.resmoncfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================