Mám notebook - 4 roky - poslední dobou se začalo stávat, že u nějaké relativně nenáročné hry, kterou dříve zvládal levou zadní, po cca 10 minutách zničehonic spadnóu FPS ze 120 na 1 FPS... a po chvilce se to zvedne na 17 a tam to zůstane. Je možné, že GPU odchází a zkrátka se to přehřeje, nebo je něco špatně softwarově, netuším.
Moc díky za případnou radu.
Log:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09-09-2024
Ran by jansi (administrator) on LAPTOP-GJHB15HA (LENOVO 81Y4) (09-09-2024 23:41:15)
Running from C:\Users\jansi\Desktop\FRST64.exe
Loaded Profiles: jansi
Platform: Microsoft Windows 10 Home Version 22H2 19045.4780 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(DeviceSettingsSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(LenovoGamingSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <8>
(C:\Program Files\Microsoft OneDrive\OneDrive.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.161.0811.0001\Microsoft.SharePoint.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Discord Inc. -> Discord Inc.) C:\Users\jansi\AppData\Local\Discord\app-1.0.9162\Discord.exe <8>
(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_7d126bda2f653af7\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_7d126bda2f653af7\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_7d126bda2f653af7\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_7d126bda2f653af7\FnHotkeyUtility.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <30>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2408.1001.14.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mspaint.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e6980897e3126266\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e6980897e3126266\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0b214be229a13e84\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_c98d5e0dfc88ac2f\RstMwService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82b77f8c4618e2d0\esif_uf.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_7d126bda2f653af7\LenovoUtilityService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_baf4968b8adddd64\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2406.13.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\fodhelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.4769_none_7deee68c7ca4a09a\TiWorker.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [1085224 2020-06-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [138214768 2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919200 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Run: [Discord] => C:\Users\jansi\AppData\Local\Discord\Update.exe [1525032 2022-08-08] (Discord Inc. -> GitHub)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\jansi\AppData\Local\Microsoft\Teams\Update.exe [2593752 2024-08-01] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [36733928 2024-08-15] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Run: [Opera Stable] => C:\Users\jansi\AppData\Local\Programs\Opera\opera.exe [1592224 2024-08-13] (Opera Norway AS -> Opera Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\128.0.6613.120\Installer\chrmstp.exe [2024-09-06] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {6FE82984-0452-47AD-A581-AC1331F13FC8} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC)
Task: {7BC18782-5DDB-4053-9754-181A5A1136C4} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\Windows\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {01D1EAAA-08DD-48E8-AE61-E70066863B62} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\Windows\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {CF8605A1-256F-45EF-BFB9-37DA3B76D0D5} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\Windows\System32\reg.exe [77312 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {BF444507-C6EC-4871-B936-2A269F9A8BF6} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\03f30b8b-c921-4538-b970-c5560a967404 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {55366313-6EAB-448F-AA7B-31296BF3D37C} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\300dfcf7-8a2b-498b-abea-112a6943a09f => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {4863F75A-B12C-40F8-8730-30BE64196926} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\6d406086-b6d8-40d9-ba10-90d137102d72 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {5A989855-7C21-451E-8B0C-5F4C51F16037} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\bf6370f1-c4ad-4974-92c9-67b17ae9e0ce => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {C9E408F0-ABAF-4100-A10B-78E5267128A7} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\d848b1c1-bf42-411d-882d-5754ad459399 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {CB5F9657-4677-4678-9DFC-651C36C49C2D} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\Windows\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {32ECB68D-CCC0-400F-8B04-16EC04217ED2} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\Windows\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [188656 2024-04-07] (Lenovo -> Lenovo Group Ltd.)
Task: {CFBBAD41-852D-4027-8AD3-316DB347CBE8} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\Windows\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {CA7DFC6B-932E-4A4C-9926-06A6C7AD28FA} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {D7E7AC1D-A08A-4859-AF6E-595A2D2D4A11} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {C518137B-7315-4AF1-ACF3-AE6F1D3E8038} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {855ADF9C-8B74-407A-8FF2-43F189096107} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {2BECB369-D4E0-4910-8E7E-419DA9FB39CC} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {942692D2-CE4D-4066-9B2F-677A48EB1E36} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {EE7A4842-E394-49E7-B268-236D47FFA66C} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {D37F7B99-837D-4E8B-B14E-6373E4991D33} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {D96E9F9C-D116-4728-8D93-093228DDDF68} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {3EB17CE2-6686-424D-9ACA-9F190DF0AEAA} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe NotificationCenter (No File)
Task: {1C08095F-8EEB-418F-9E51-AE237E677AB7} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {BAB2CCFF-2819-4012-A0A7-9385BB1AD6B6} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {A9E815F9-A83F-4FCA-9464-926D13E297A3} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo)
Task: {B169B504-9181-4289-A0FA-498D7CCCBFB3} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\uninstall.exe [345448 2024-07-16] (Lenovo -> Lenovo)
Task: {F99BFE28-7BB3-4777-A23B-BCF11A6916D1} - System32\Tasks\Microsoft Office 15 Sync Maintenance for LAPTOP-GJHB15HA-jansi LAPTOP-GJHB15HA => C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE [469640 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {51949B23-FF66-41B3-A2B5-F29A8E17FE93} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1642672 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {22CC2DEF-5A87-496D-A1B6-F2487F57EA08} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB548DAE-9F85-4771-BF00-FCBBA305A050} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {2A92DEE0-64C7-41A4-8918-A7C96F5D8ABF} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {29E0DC60-B7B2-489B-B1DD-927CAD455E29} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {173DD52B-FCBF-48F4-B8BC-BB4E2AB8E8A8} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [187024 2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {AFDAE683-77B9-4C0C-87ED-3BE3C2DD067F} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4464024 2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {47C93822-0BC7-47D2-ACE4-75956EF8731B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [375416 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {3EF7E6CA-903F-4CB9-AFBC-FAA76B704103} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [375416 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {2F83DA54-7C29-4AFD-B82B-B1C6ED791523} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AF6477CC-CEB5-44AE-B0F9-D08D87A4692D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7681117B-0B14-487A-A792-F88D175366A4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8999BA8E-8C0F-4096-8524-3FFB7BE45F52} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1AD2EA9E-0761-4453-8AAC-5E9A04C334DC} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {824CA663-3504-45A1-993D-FBA6FE8B931E} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FD0C4BC0-039D-479C-99D8-431D2E92E0FA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {D9943CE1-F8B0-4211-B2F1-B210B2333E32} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {09CA557B-AAB0-4A4D-890A-5AC124FEF238} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {99E415D5-26F2-44ED-92FB-D84E7BDA664D} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E34680E4-0BD5-4B70-829C-D08FD74F5DEE} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3D4DA836-B797-4AAF-ADD8-470DDDB01F34} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0177B2E4-CE79-49D1-A151-B5423C17EAE0} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1196CC0E-2E0B-4289-90E1-8D9F83223975} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {BE325882-44DD-4DA6-A7D0-EFF2BBCD2854} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-326222577-4199568582-691447999-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {4900ED8D-CECB-4D2E-8A77-E0334EE0786D} - System32\Tasks\Opera scheduled Autoupdate 1696869776 => C:\Users\jansi\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5770656 2024-08-06] (Opera Norway AS -> Opera Software)
Task: {4F2E3F68-41E8-4FE5-BDDF-4CB2C97C251C} - System32\Tasks\RTXVoice_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA RTX Voice\NVIDIA RTX Voice.exe [5133296 2020-04-08] (NVIDIA Corporation -> Nvidia Corporation) -> C:\Program Files\NVIDIA Corporation\NVIDIA RTX Voice\-minimized
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{20728b5b-d2e1-4359-b921-73d76d82310f}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{86d8c783-8838-4eb0-88bf-1c89db13e6a3}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge Profile: C:\Users\jansi\AppData\Local\Microsoft\Edge\User Data\Default [2024-09-06]
Edge Extension: (Dokumenty Google offline) - C:\Users\jansi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-16]
Edge Extension: (Edge relevant text changes) - C:\Users\jansi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\jansi\AppData\Local\Google\Chrome\User Data\Default [2024-09-09]
CHR Notifications: Default -> hxxps://www.netflix.com
CHR Extension: (uBlock Origin) - C:\Users\jansi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-08-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\jansi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-09-06]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\jansi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-10-03]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [2568840 2024-05-30] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
R2 Bonjour Service; C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2023-07-11] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14042624 2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe [1928648 2020-05-19] (Dolby Laboratories, Inc. -> Dolby Laboratories)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [811496 2022-10-27] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [954704 2024-03-18] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [381416 2024-05-07] (Epic Games Inc. -> Epic Games, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncHelper.exe [3522976 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\Windows\System32\FMService64.exe [390400 2020-05-21] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 ImControllerService; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
R2 LenovoFnAndFunctionKeys; C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_7d126bda2f653af7\LenovoUtilityService.exe [168776 2024-04-01] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe [34664 2024-07-16] (Lenovo -> Lenovo)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8965728 2024-08-17] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-08-17] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 NGS; C:\ProgramData\Nexon\NGS\NGService.exe [3189352 2023-08-06] (NEXON Korea Corporation. -> NEXON Korea Corporation)
S3 OfficeSvcManagerAddons; C:\Windows\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [22384 2023-11-19] (Microsoft Windows -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.161.0811.0001\OneDriveUpdaterService.exe [3863568 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
R2 UDCService; C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72432 2024-04-07] (Lenovo -> Lenovo Group Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_baf4968b8adddd64\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_baf4968b8adddd64\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2022-09-12] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R3 FBNetFilter; C:\Windows\System32\drivers\FBNetFlt.sys [60784 2023-12-06] (Lenovo -> Lenovo)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2024-08-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239568 2024-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKsl49783655; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E2DB6FB9-2142-4334-8F91-EC356AAC0DDF}\MpKslDrv.sys [271640 2024-09-09] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-08-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602504 2024-08-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105864 2024-08-08] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-09-09 23:41 - 2024-09-09 23:41 - 000032493 _____ C:\Users\jansi\Desktop\FRST.txt
2024-09-09 23:40 - 2024-09-09 23:41 - 000000000 ____D C:\FRST
2024-09-09 22:52 - 2024-09-09 22:52 - 002397696 _____ (Farbar) C:\Users\jansi\Desktop\FRST64.exe
2024-09-08 15:58 - 2024-09-08 15:58 - 000300677 _____ C:\Users\jansi\Downloads\WhatsApp Image 2024-08-29 at 12.19.46.jpeg
2024-09-06 15:01 - 2024-09-06 15:01 - 076273736 _____ C:\Users\jansi\Downloads\memedalesdawson.mp4
2024-09-04 21:24 - 2024-09-04 21:24 - 000000000 ____D C:\Users\jansi\AppData\LocalLow\StripedPandaStudios
2024-09-04 09:57 - 2024-09-04 09:57 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-09-03 00:03 - 2024-09-03 00:03 - 005620768 _____ C:\Users\jansi\Downloads\An8-sJxQzAg0WXR2sW-LQpLfh9fopzuNdqAeM8JYCCVs5FyNTrKPb4Qe-aQlsnOseID51vEm07hnkFGAtNDcBTRM.mp4
2024-09-02 23:49 - 2024-09-03 00:09 - 2109734445 _____ C:\Users\jansi\Documents\srpen.mp4
2024-09-02 23:41 - 2024-09-02 23:41 - 007137306 _____ C:\Users\jansi\Downloads\Can I be your_Rap beats_background music _background video.mp4
2024-09-02 23:41 - 2024-09-02 23:41 - 000233152 _____ C:\Users\jansi\Downloads\Can I be your_Rap beats_background music _background video.mp4.sfk
2024-09-02 23:00 - 2024-09-02 23:00 - 000329106 _____ C:\Users\jansi\Downloads\FIRE WHOOSH TRANSITION SOUND EFFECTS.mp4
2024-09-02 23:00 - 2024-09-02 23:00 - 000005128 _____ C:\Users\jansi\Downloads\FIRE WHOOSH TRANSITION SOUND EFFECTS.mp4.sfk
2024-09-02 22:58 - 2024-09-02 22:58 - 000948328 _____ C:\Users\jansi\Downloads\green screen transition animated fire.mp4
2024-09-02 22:58 - 2024-09-02 22:58 - 000019656 _____ C:\Users\jansi\Downloads\green screen transition animated fire.mp4.sfk
2024-09-01 01:18 - 2024-09-01 01:20 - 181865258 _____ C:\Users\jansi\Documents\short dd.mp4
2024-09-01 01:15 - 2024-09-01 01:15 - 000375002 _____ C:\Users\jansi\Downloads\Suspense - Sound Effect (HD).mp4
2024-09-01 01:15 - 2024-09-01 01:15 - 000029776 _____ C:\Users\jansi\Downloads\Suspense - Sound Effect (HD).mp4.sfk
2024-09-01 01:03 - 2024-09-01 01:03 - 000146101 _____ C:\Users\jansi\Downloads\videoplayback (8).mp4
2024-09-01 01:03 - 2024-09-01 01:03 - 000002944 _____ C:\Users\jansi\Downloads\videoplayback (8).mp4.sfk
2024-08-31 20:00 - 2024-08-31 20:01 - 169382343 _____ C:\Users\jansi\Documents\zdenek2.mp4
2024-08-27 23:18 - 2024-08-27 23:18 - 088855483 _____ C:\Users\jansi\Downloads\Poškození_brýlí_Hlavák.mp4
2024-08-21 23:28 - 2024-08-21 23:28 - 096980950 _____ C:\Users\jansi\Downloads\pachatel.mp4
2024-08-17 23:37 - 2024-09-06 22:39 - 000000000 ____D C:\Users\jansi\AppData\Local\Malwarebytes
2024-08-17 23:36 - 2024-08-17 23:36 - 000002104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-08-17 23:36 - 2024-08-17 23:36 - 000002092 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-08-17 23:36 - 2024-08-17 23:36 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-08-17 23:36 - 2024-08-17 23:36 - 000000000 ____D C:\Program Files\Malwarebytes
2024-08-17 23:35 - 2024-08-17 23:35 - 002596072 _____ (Malwarebytes) C:\Users\jansi\Downloads\MBSetup (3).exe
2024-08-14 11:27 - 2024-08-14 11:27 - 000000000 ___HD C:\$WinREAgent
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-09-09 23:38 - 2022-10-03 12:12 - 000000000 ____D C:\Program Files (x86)\Steam
2024-09-09 23:38 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-09-09 23:37 - 2022-10-03 13:19 - 000000000 ____D C:\Users\jansi\AppData\Local\Discord
2024-09-09 22:37 - 2022-10-03 13:19 - 000000000 ____D C:\Users\jansi\AppData\Roaming\discord
2024-09-09 21:58 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2024-09-09 21:57 - 2023-11-16 01:04 - 000005244 _____ C:\Windows\system32\Tasks\Microsoft Office 15 Sync Maintenance for LAPTOP-GJHB15HA-jansi LAPTOP-GJHB15HA
2024-09-09 19:43 - 2020-05-06 20:33 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-09-09 17:39 - 2022-09-12 20:43 - 000000000 ____D C:\ProgramData\NVIDIA
2024-09-09 17:37 - 2022-09-12 20:30 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-09-09 17:37 - 2022-09-12 20:30 - 000003516 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-09-08 22:37 - 2022-10-03 12:07 - 000000000 ____D C:\Users\jansi\AppData\Local\D3DSCache
2024-09-08 21:28 - 2022-10-28 03:09 - 000000000 ____D C:\Users\jansi\AppData\Roaming\obs-studio
2024-09-07 12:31 - 2023-01-17 10:59 - 000002285 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-09-07 12:31 - 2022-10-05 04:00 - 000000000 ____D C:\Windows\SystemTemp
2024-09-07 12:31 - 2022-09-12 20:30 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-09-07 02:36 - 2022-10-04 12:40 - 000000000 ____D C:\Users\jansi\Documents\Projekty Vegas
2024-09-06 22:46 - 2022-09-12 21:21 - 000685078 _____ C:\Windows\system32\perfh005.dat
2024-09-06 22:46 - 2022-09-12 21:21 - 000137842 _____ C:\Windows\system32\perfc005.dat
2024-09-06 22:46 - 2020-05-06 20:41 - 001605606 _____ C:\Windows\system32\PerfStringBackup.INI
2024-09-06 22:46 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2024-09-06 22:39 - 2023-02-25 13:32 - 000000000 ____D C:\Users\jansi\AppData\Roaming\Microsoft\Teams
2024-09-06 22:39 - 2022-10-03 12:08 - 000000000 ___RD C:\Users\jansi\OneDrive
2024-09-06 22:39 - 2022-10-03 12:07 - 000000000 __SHD C:\Users\jansi\IntelGraphicsProfiles
2024-09-06 22:39 - 2022-09-12 20:40 - 000000000 ___HD C:\Intel
2024-09-06 22:39 - 2020-05-06 20:33 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-09-06 22:38 - 2020-05-06 20:33 - 000008192 ___SH C:\DumpStack.log.tmp
2024-09-06 22:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2024-09-06 22:38 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2024-09-06 21:34 - 2022-10-03 13:19 - 000002254 _____ C:\Users\jansi\Desktop\Discord.lnk
2024-09-06 21:33 - 2023-02-24 23:03 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-09-06 21:32 - 2022-10-03 12:01 - 000000000 ____D C:\Users\jansi
2024-09-06 16:01 - 2022-10-03 12:11 - 000002258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-09-06 16:01 - 2022-10-03 12:11 - 000002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-09-05 23:45 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-09-04 22:42 - 2022-10-04 00:30 - 000000000 ____D C:\Users\jansi\AppData\Local\CrashDumps
2024-09-04 09:56 - 2022-09-12 20:34 - 000000000 ____D C:\Program Files\Microsoft Office
2024-08-30 17:51 - 2024-02-17 18:58 - 000284224 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy_4.dll
2024-08-30 17:51 - 2022-10-26 19:32 - 000124344 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2024-08-30 17:51 - 2022-10-26 19:32 - 000075192 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2024-08-30 17:51 - 2022-10-04 11:37 - 000210360 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2024-08-30 17:51 - 2022-10-03 12:24 - 002799144 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2024-08-30 17:51 - 2022-10-03 12:24 - 000783912 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2024-08-30 17:51 - 2022-10-03 12:24 - 000243240 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2024-08-30 17:51 - 2022-10-03 12:24 - 000149032 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2024-08-29 22:35 - 2023-02-23 19:14 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-08-29 22:35 - 2023-02-23 19:14 - 000002141 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-08-29 22:35 - 2022-10-03 12:09 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-326222577-4199568582-691447999-1003
2024-08-24 23:42 - 2022-09-12 20:33 - 000000000 ____D C:\ProgramData\Lenovo
2024-08-19 22:08 - 2022-10-27 17:36 - 000000000 ____D C:\Users\jansi\AppData\Roaming\EasyAntiCheat
2024-08-17 23:46 - 2023-09-23 23:08 - 000000000 ____D C:\Users\jansi\AppData\LocalLow\Unity
2024-08-17 23:36 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-08-16 19:07 - 2022-10-05 03:59 - 000000000 ____D C:\Users\jansi\AppData\Roaming\Microsoft\Paint
2024-08-15 02:09 - 2023-02-15 04:07 - 000000000 ____D C:\Users\jansi\AppData\Roaming\Microsoft\WordPad
2024-08-15 02:09 - 2022-11-09 05:28 - 000000000 ____D C:\Users\jansi\AppData\Local\Notepad
2024-08-15 02:08 - 2020-05-06 20:33 - 000545088 _____ C:\Windows\system32\FNTCACHE.DAT
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\schemas
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2024-08-15 02:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2024-08-14 11:37 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2024-08-14 11:33 - 2020-05-06 20:36 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-08-14 11:19 - 2022-10-05 03:35 - 000000000 ____D C:\Windows\system32\MRT
2024-08-14 11:16 - 2022-10-05 03:35 - 197093640 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-08-13 01:08 - 2023-10-09 18:43 - 000004266 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1696869776
2024-08-13 01:08 - 2023-10-09 18:42 - 000001397 _____ C:\Users\jansi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
==================== Files in the root of some directories ========
2022-11-09 05:28 - 2023-10-29 02:10 - 000000002 _____ () C:\Users\jansi\AppData\Roaming\ExplorerFavorites.txt
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-09-2024
Ran by jansi (09-09-2024 23:42:34)
Running from C:\Users\jansi\Desktop
Microsoft Windows 10 Home Version 22H2 19045.4780 (X64) (2022-10-03 09:52:46)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-326222577-4199568582-691447999-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-326222577-4199568582-691447999-503 - Limited - Disabled)
Guest (S-1-5-21-326222577-4199568582-691447999-501 - Limited - Disabled)
jansi (S-1-5-21-326222577-4199568582-691447999-1003 - Administrator - Enabled) => C:\Users\jansi
WDAGUtilityAccount (S-1-5-21-326222577-4199568582-691447999-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Photoshop 2022 (HKLM-x32\...\PHSP_23_1) (Version: 23.1.0.143 - Adobe Inc.)
Audacity 3.2.2 (HKLM\...\Audacity_is1) (Version: 3.2.2 - Audacity Team)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Discord (HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Discord) (Version: 1.0.9006 - Discord Inc.)
Documentation Manager (HKLM\...\{51C5ED88-53DF-49F4-9855-0E9949AC7522}) (Version: 23.40.0.4 - Intel Corporation) Hidden
Epic Games Launcher (HKLM-x32\...\{AEB35C6C-B6D4-4AA0-8452-DE699737B5F6}) (Version: 1.3.82.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{19695986-25CE-41AC-9C6F-54794653EDBA}) (Version: 2.0.36.0 - Epic Games, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 128.0.6613.120 - Google LLC)
Intel(R) Chipset Device Software (HKLM\...\{44C34709-F068-4CBC-8A71-515EDBC3B2A6}) (Version: 10.1.18383.8213 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{afad3740-3061-4b48-a9ab-6f1435cb3dd6}) (Version: 10.1.18383.8213 - Intel(R) Corporation)
Intel® Software Installer (HKLM-x32\...\{778be45a-dd41-4bf6-8f9d-409a995d76b2}) (Version: 23.40.0.4 - Intel Corporation) Hidden
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.1.22.0 - Lenovo Group Ltd.)
Malwarebytes version 5.1.8.123 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.8.123 - Malwarebytes)
Microsoft 365 Apps for enterprise - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.17928.20114 - Microsoft Corporation)
Microsoft Access MUI (English) 2013 (HKLM\...\{90150000-0015-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (HKLM\...\{90150000-0117-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (HKLM\...\{90150000-0090-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 128.0.2739.67 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 128.0.2739.67 - Microsoft Corporation)
Microsoft Excel MUI (English) 2013 (HKLM\...\{90150000-0016-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation)
Microsoft Groove MUI (English) 2013 (HKLM\...\{90150000-00BA-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (HKLM\...\{90150000-0044-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (English) 2013 (HKLM\...\{90150000-00E1-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (HKLM\...\{90150000-00E2-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Proofing (English) 2013 (HKLM\...\{90150000-002C-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (HKLM\...\{90150000-0115-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.161.0811.0001 - Microsoft Corporation)
Microsoft OneNote MUI (English) 2013 (HKLM\...\{90150000-00A1-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (HKLM\...\{90150000-001A-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (HKLM\...\{90150000-0018-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (HKLM\...\{90150000-0019-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Teams classic (HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Teams) (Version: 1.7.00.20652 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810 (HKLM\...\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33810 (HKLM\...\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33810 (HKLM-x32\...\{5EA6C998-D5AC-4ED9-89C3-9F25B17CCD3D}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33810 (HKLM-x32\...\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Word MUI (English) 2013 (HKLM\...\{90150000-001B-0409-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
MSVCRT Redists (HKLM\...\{38F580C0-EA75-11ED-A5E3-00155D0BF153}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
MSVCRT Redists (HKLM\...\{E83D6FA1-B27C-11E9-B0DB-A5146957F833}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.120 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.120 - NVIDIA Corporation)
NVIDIA NVIDIA RTX Voice Driver 1.0.0.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_RTXVoice.Driver) (Version: 1.0.0.2 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 512.59 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 512.59 - NVIDIA Corporation)
NVIDIA RTX Voice Application (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_RTXVoice) (Version: 0.5.12.6 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 28.0.3 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20114 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.13127.20616 - Microsoft Corporation) Hidden
Opera Stable 112.0.5197.53 (HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\Opera 112.0.5197.53) (Version: 112.0.5197.53 - Opera Software)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamlabs Desktop 1.11.2 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 1.11.2 - General Workings, Inc.)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.5.0.30767 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation)
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
VEGAS Deep Learning Models (HKLM\...\{2221E177-782E-41B2-B71B-D720C2983D18}) (Version: 19.3.0.0 - MAGIX Software GmbH) Hidden
VEGAS Deep Learning Models (HKLM\...\MX.{2221E177-782E-41B2-B71B-D720C2983D18}) (Version: 19.3.0.0 - MAGIX Software GmbH)
VEGAS Pro 17.0 (HKLM\...\{E649B5F0-B27C-11E9-B856-A5146957F833}) (Version: 17.0.284 - VEGAS)
VEGAS Pro 19.0 (HKLM\...\{35BD6030-EA75-11ED-A43B-00155D0BF153}) (Version: 19.0.651 - VEGAS)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment)
WinRAR 6.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH)
Chrome apps:
============
Disk Google (HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\1c783ffbc17dc2a97aeddf930f998526) (Version: 1.0 - Google\Chrome)
Tabulky (HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\bdf6304f717fed7d46e5adf393ef9800) (Version: 1.0 - Google\Chrome)
Packages:
=========
AV1 Video Extension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.2.1293.0_x64__8wekyb3d8bbwe [2024-06-07] (Microsoft Corporation)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-03-25] (Disney)
Dolby Audio -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudio_3.20602.609.0_x64__rz1tebttyb220 [2022-09-12] (Dolby Laboratories)
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2406.36.0_x64__k1h2ywk1493x8 [2024-07-17] (LENOVO INC.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.6.12.0_x64__5grkq8ppsgwt4 [2024-04-02] (LENOVO INC) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-10-04] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-10-04] (Microsoft Corporation) [MS Ad]
Microsoft Teams (work or school) -> C:\Program Files\WindowsApps\MSTeams_23306.3315.2560.6525_x64__8wekyb3d8bbwe [2023-12-12] (Microsoft) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-24] (NVIDIA Corp.)
Ovládací centrum grafiky Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5587.0_x64__8j3eq9eme6ctt [2024-08-06] (INTEL CORP) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.14.221.0_x64__dt26b99r8h8gj [2022-09-12] (Realtek Semiconductor Corp)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2023-08-23] (Microsoft Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0 [2024-08-28] (Spotify AB) [Startup Task]
Vyhledávání na webu z Microsoft Bingu -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-07-22] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-326222577-4199568582-691447999-1003_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\jansi\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.24151.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-326222577-4199568582-691447999-1003_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\jansi\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-10-28] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-10-28] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-10-28] (Adobe Inc. -> )
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-10-28] (Adobe Inc. -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-08-17] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.161.0811.0001\FileSyncShell64.dll [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_baf4968b8adddd64\nvshext.dll [2022-04-21] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-10-28] (Adobe Inc. -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-08-17] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2022-03-03] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\jansi\Desktop\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\jansi\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_agimnkijcaahngcdmfeangaknmldooml\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
HKU\S-1-5-21-326222577-4199568582-691447999-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> DefaultScope {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-08-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2013-07-13] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-326222577-4199568582-691447999-1003\...\sharepoint.com -> hxxps://ujak-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\jansi\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\8319356934563354534\133703876232816459.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Wi-Fi: Intel(R) Wireless-AC 9560 -> Netwtw10.sys
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{A3C08F66-ECF4-454D-9653-F097D3D43516}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{164D7A97-D891-4454-BB52-6590FB75DBA7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{864E6AC0-DEDD-477D-8685-73D6CBB882E1}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => No File
FirewallRules: [{12CA09B3-24CB-4043-B7B6-DFBCEA2A387D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{222F96A7-5E18-423F-A4ED-FF7671D1C1D6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5E549553-5C00-45D3-9082-B5BCD50E6CA6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{05385DAA-D571-48D8-9F0A-CFB7AA0080CC}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F518C0FE-B48A-428D-8700-9263CB7EB762}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [File not signed]
FirewallRules: [{61AF3BC4-EF96-4ECC-99D1-E8A755489AEC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [File not signed]
FirewallRules: [{FECFB073-D5ED-41C1-B445-672492874CB1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\Goose Goose Duck.exe (Gaggle Studios, Inc. -> Unity Technologies ApS)
FirewallRules: [{7613BB28-B5B3-4D4A-823E-B1BD2B7ADC8C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\Goose Goose Duck.exe (Gaggle Studios, Inc. -> Unity Technologies ApS)
FirewallRules: [{418E1C62-EA3E-4787-A892-D5C1CF878A6D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe () [File not signed]
FirewallRules: [{56C1BEE1-4DAC-400B-83F2-DDAA17FD7928}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe () [File not signed]
FirewallRules: [{F8DE0FDC-51FB-4D01-8A93-71E1DF732E91}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pummel Party\PummelParty.exe () [File not signed]
FirewallRules: [{32B317E8-6757-4714-8D1D-DF7290CDFC58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pummel Party\PummelParty.exe () [File not signed]
FirewallRules: [{A3C750C8-F5AE-4889-A197-155B36A22AA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fall Guys\FallGuys_client.exe () [File not signed]
FirewallRules: [{A92CCDDC-7EF5-4652-92BF-41810AEF4093}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fall Guys\FallGuys_client.exe () [File not signed]
FirewallRules: [{D60E75E5-4B71-4BB5-AB63-30D2BA3E238C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fall Guys\FallGuys_client_game.exe () [File not signed]
FirewallRules: [{2887393B-39F1-44AC-AAE8-7FEC88B2574E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fall Guys\FallGuys_client_game.exe () [File not signed]
FirewallRules: [{5E5112B0-B9D9-4914-8704-80F0A515EF25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{89216586-66B8-442D-8B4C-7C726C2A85ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{B534E9FD-7B1A-46F2-962F-C8C93139C2CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\GGDLauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{02BF7DAC-B1C1-4318-98F9-872C5DC8781A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\GGDLauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{F88C0DFD-CBF8-45F5-AEFE-7A5290952855}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0F7E8001-ACAC-4E90-A24A-D120FE14F208}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0DE9DEF0-2D97-48A4-AF01-8049A15BC15E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [{3F54ED8B-E765-4A73-8365-3143380F75D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [{ED8FE410-C82C-4B8D-9DEB-9DABCDF5D2B0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [File not signed]
FirewallRules: [{E7401975-AD40-4C8D-95DB-C9AD61FCD9F9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [File not signed]
FirewallRules: [TCP Query User{66DDC793-E136-440D-A7D5-8674BADEEA52}C:\program files (x86)\steam\steamapps\common\bulanci\bulanci.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bulanci\bulanci.exe (SleepTeam s.r.o.) [File not signed]
FirewallRules: [UDP Query User{9D7934E2-0DA5-4948-BED9-F7D869C20215}C:\program files (x86)\steam\steamapps\common\bulanci\bulanci.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bulanci\bulanci.exe (SleepTeam s.r.o.) [File not signed]
FirewallRules: [{C007B2DD-E236-43BC-956A-20A2781D20A3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D334DA6C-1B63-4C69-9849-574B9182BD46}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6EE46289-DEE5-44A5-AFDC-3FA445C51BD9}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{54800E12-C096-4659-AB79-C20BBE98E873}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [UDP Query User{1FD6D731-A64C-4E46-8478-E09FD8DAB740}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [TCP Query User{D6698D5A-3486-447B-B5C6-B20F0ACCC6C2}C:\program files (x86)\warcraft iii\_retail_\x86_64\warcraft iii.exe] => (Allow) C:\program files (x86)\warcraft iii\_retail_\x86_64\warcraft iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc)
FirewallRules: [UDP Query User{4FAC32C3-4A24-4923-82B4-71DD863D3CBC}C:\program files (x86)\warcraft iii\_retail_\x86_64\warcraft iii.exe] => (Allow) C:\program files (x86)\warcraft iii\_retail_\x86_64\warcraft iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc)
FirewallRules: [TCP Query User{E0E3D9FE-A743-44CC-9628-313AD3016C36}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [UDP Query User{EFF5D1A6-59F0-4F67-8BB3-889A6EB29177}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [{BC69CE0D-2C1F-4E9B-B951-79F913281981}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Party Animals\PartyAnimals.exe () [File not signed]
FirewallRules: [{F72DE8F6-B557-44F7-8EE3-03553ABF01B8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Party Animals\PartyAnimals.exe () [File not signed]
FirewallRules: [{469BDD91-9D43-4183-924D-F6A832EEE6D0}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7A63534A-F0CC-4046-924C-CBECEA5C4291}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E8D5DF49-B326-4DC5-8630-15F3574082C5}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{82569516-1FB3-4D8A-A72F-8DF8A2E541EE}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BF0B752D-C24B-426C-8985-C382FEF1AC6A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0D38441E-21E0-4924-978D-FD1975DFE34E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E0DCC1A6-5C74-45D5-A8E6-99963E18D11D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{9AC50D84-C3DC-4416-8123-B341EDDB89DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{71AE21E6-ABCD-4B2D-9CBF-8CB9DB0183AA}] => (Allow) C:\Program Files\WindowsApps\MSTeams_23306.3315.2560.6525_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6B938904-7186-4360-8551-CF669D11EBB9}] => (Allow) C:\Program Files\WindowsApps\MSTeams_23306.3315.2560.6525_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{76200014-5769-4EA7-8163-1166B587CCF8}C:\users\jansi\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\jansi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{FF3FB979-62D2-4BAA-8130-35F02634018E}C:\users\jansi\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\jansi\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{F4E77D95-B184-4AD0-81E0-818065557B44}] => (Block) C:\Program Files\Adobe\Adobe Photoshop 2022\Photoshop.exe (Adobe Inc. -> Adobe) [File not signed]
FirewallRules: [{41A52B85-EAF1-415B-B818-AE316C49A61D}] => (Block) C:\Program Files\Adobe\Adobe Photoshop 2022\Photoshop.exe (Adobe Inc. -> Adobe) [File not signed]
FirewallRules: [TCP Query User{8B2FC6A2-761B-4049-81B2-F73759692107}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{FEBD083B-8F7B-430D-8C23-DFE3AA781CE6}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
FirewallRules: [{AC0AFC02-873A-44BA-B447-A271571BCD0C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{23EC589B-3934-4BC7-88C5-ED7730EB0157}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F30FA053-C69F-4520-AB9C-D9DFCF2E2DC8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F8E376B1-FAF5-4525-982A-7AF72436DF0A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C248946D-E5BD-482C-94F7-27E9FD074B5E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A70BCC5A-77AB-4AE1-B0B5-E9A20CD7DDE8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{5D49AEC5-D26C-487B-B333-E879B4E5424E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D4B33363-1CDC-47E8-81A1-53C2C59C582C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1DB95C3C-993A-486D-829D-6D4C181272B7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C941B50D-C370-48C4-AACF-037CB61DDEE5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.245.454.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{06C40463-D53E-4A95-ACBB-8F9813A23050}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dale&Dawson\DDSS.exe () [File not signed]
FirewallRules: [{E2AFF10A-4141-4255-94C7-253598F0C10D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dale&Dawson\DDSS.exe () [File not signed]
FirewallRules: [{36DFE4A4-D5F0-4137-BF5B-932EA1C0D83B}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\128.0.2739.67\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{419F95B7-738C-451E-9240-3F3EA9232014}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{74BC6229-BC35-4FCA-BBF0-B68D300065BA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F561F1FC-72C2-4A56-9690-F80F88459F9B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2D4BFEC9-931D-44D5-B9D1-4AA773F325AA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.127.3200.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B9124194-FE7B-402A-8AC4-CA8D8C5914DD}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
06-09-2024 01:12:19 Naplánovaný kontrolní bod
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (09/09/2024 05:39:43 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/08/2024 09:28:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program chrome.exe verze 128.0.6613.120 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 11e0
Čas spuštění: 01db00aa24c16df2
Čas ukončení: 4294967295
Cesta k aplikaci: C:\Program Files\Google\Chrome\Application\chrome.exe
ID hlášení: 55aaa57b-be2d-47ba-80b0-2eb468169e24
Úplný název balíčku s chybou:
ID aplikace relativní podle balíčku s chybou:
Typ zablokování: Top level window is idle
Error: (09/08/2024 01:00:12 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/08/2024 05:57:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-GJHB15HA.local already in use; will try LAPTOP-GJHB15HA-2.local instead
Error: (09/08/2024 05:57:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister 16 LAPTOP-GJHB15HA.local. AAAA FE80:0000:0000:0000:6678:4DCB:B8BA:1AE0
Error: (09/08/2024 05:57:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from FE80:0000:0000:0000:6678:4DCB:B8BA:1AE0:5353 4 LAPTOP-GJHB15HA.local. Addr 192.168.0.164
Error: (09/08/2024 05:57:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Ignoring response received before we even began probing: 16 LAPTOP-GJHB15HA.local. AAAA FE80:0000:0000:0000:6678:4DCB:B8BA:1AE0
Error: (09/08/2024 05:57:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Ignoring response received before we even began probing: 16 LAPTOP-GJHB15HA.local. AAAA FE80:0000:0000:0000:6678:4DCB:B8BA:1AE0
System errors:
=============
Error: (09/09/2024 09:58:06 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1040) (User: LAPTOP-GJHB15HA)
Description: Jazykovou sadu pro sk-SK nelze odinstalovat, protože není nainstalována.
Error: (09/09/2024 06:00:00 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Error: (09/09/2024 05:39:53 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Error: (09/09/2024 05:36:54 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba GoogleUpdater Service 130.0.6679.0 (GoogleUpdaterService130.0.6679.0) skončila s následující chybou specifickou pro službu:
%%75045
Error: (09/09/2024 05:36:54 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Služba GoogleUpdater InternalService 130.0.6679.0 (GoogleUpdaterInternalService130.0.6679.0) skončila s následující chybou specifickou pro službu:
%%75045
Error: (09/08/2024 10:14:35 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1040) (User: LAPTOP-GJHB15HA)
Description: Jazykovou sadu pro sk-SK nelze odinstalovat, protože není nainstalována.
Error: (09/08/2024 06:00:00 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Error: (09/08/2024 01:00:19 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Windows Defender:
================
Date: 2024-09-09 21:57:50
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {928044FD-E3B1-4E7D-93DB-6C1888753B25}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-09-08 22:14:09
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {8C7A08D1-DD10-4ECE-A008-53DAC83A5B63}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-09-08 00:23:31
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {FA5925C5-F2AE-4E70-9101-E727F5487CDE}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-09-06 01:07:15
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {817EFE09-1377-4DD7-9129-7981E589C84B}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2024-08-21 23:05:59
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {0B4C0CB4-89E0-4C2B-ABC7-76496AB6A3D6}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Event[0]:
Date: 2023-12-06 21:02:04
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.401.1716.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.23100.2009
Kód chyby: 0x80240009
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.
Date: 2023-11-29 00:16:06
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.401.1348.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.23100.2009
Kód chyby: 0x80240438
Popis chyby: Při zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře.
CodeIntegrity:
===============
Date: 2024-09-08 22:37:46
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Users\jansi\AppData\Local\Discord\app-1.0.9162\Discord.exe) attempted to load \Device\HarddiskVolume3\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO EGCN38WW 05/23/2022
Motherboard: LENOVO INVALID
Processor: Intel(R) Core(TM) i5-10300H CPU @ 2.50GHz
Percentage of memory in use: 59%
Total physical RAM: 16251.8 MB
Available physical RAM: 6600.53 MB
Total Virtual: 49159.71 MB
Available Virtual: 35827.4 MB
==================== Drives ================================
Drive c: (Windows-SSD) (Fixed) (Total:475.69 GB) (Free:82.97 GB) (Model: KBG40ZNT512G TOSHIBA MEMORY) NTFS
\\?\Volume{10955332-6226-4f18-be39-7ffb66577f35}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.4 GB) NTFS
\\?\Volume{ec251ed3-d38b-4b54-acc2-6d54150bb2c4}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: CF68ED92)
Partition: GPT.
==================== End of Addition.txt =======================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu logu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119314
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {6FE82984-0452-47AD-A581-AC1331F13FC8} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC)
R2 Bonjour Service; C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2023-07-11] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> DefaultScope {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
FirewallRules: [{864E6AC0-DEDD-477D-8685-73D6CBB882E1}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => No File
FirewallRules: [{5E5112B0-B9D9-4914-8704-80F0A515EF25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{89216586-66B8-442D-8B4C-7C726C2A85ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{0DE9DEF0-2D97-48A4-AF01-8049A15BC15E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [{3F54ED8B-E765-4A73-8365-3143380F75D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [TCP Query User{54800E12-C096-4659-AB79-C20BBE98E873}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [UDP Query User{1FD6D731-A64C-4E46-8478-E09FD8DAB740}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [TCP Query User{E0E3D9FE-A743-44CC-9628-313AD3016C36}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [UDP Query User{EFF5D1A6-59F0-4F67-8BB3-889A6EB29177}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [TCP Query User{8B2FC6A2-761B-4049-81B2-F73759692107}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{FEBD083B-8F7B-430D-8C23-DFE3AA781CE6}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu
Po restartu počítače se mi log sám neobjevil, ale předpokládám, že mám poslat přepsaný fixlog
Fix result of Farbar Recovery Scan Tool (x64) Version: 09-09-2024
Ran by jansi (10-09-2024 21:31:42) Run:1
Running from C:\Users\jansi\Desktop
Loaded Profiles: jansi
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {6FE82984-0452-47AD-A581-AC1331F13FC8} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC)
R2 Bonjour Service; C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2023-07-11] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> DefaultScope {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
FirewallRules: [{864E6AC0-DEDD-477D-8685-73D6CBB882E1}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => No File
FirewallRules: [{5E5112B0-B9D9-4914-8704-80F0A515EF25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{89216586-66B8-442D-8B4C-7C726C2A85ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{0DE9DEF0-2D97-48A4-AF01-8049A15BC15E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [{3F54ED8B-E765-4A73-8365-3143380F75D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [TCP Query User{54800E12-C096-4659-AB79-C20BBE98E873}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [UDP Query User{1FD6D731-A64C-4E46-8478-E09FD8DAB740}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [TCP Query User{E0E3D9FE-A743-44CC-9628-313AD3016C36}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [UDP Query User{EFF5D1A6-59F0-4F67-8BB3-889A6EB29177}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [TCP Query User{8B2FC6A2-761B-4049-81B2-F73759692107}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{FEBD083B-8F7B-430D-8C23-DFE3AA781CE6}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6FE82984-0452-47AD-A581-AC1331F13FC8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6FE82984-0452-47AD-A581-AC1331F13FC8}" => removed successfully
C:\Windows\System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7}" => removed successfully
HKLM\System\CurrentControlSet\Services\Bonjour Service => removed successfully
Bonjour Service => service removed successfully
"HKU\S-1-5-21-326222577-4199568582-691447999-1003\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages" => removed successfully
"HKU\S-1-5-21-326222577-4199568582-691447999-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-326222577-4199568582-691447999-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{864E6AC0-DEDD-477D-8685-73D6CBB882E1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5E5112B0-B9D9-4914-8704-80F0A515EF25}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89216586-66B8-442D-8B4C-7C726C2A85ED}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0DE9DEF0-2D97-48A4-AF01-8049A15BC15E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3F54ED8B-E765-4A73-8365-3143380F75D9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{54800E12-C096-4659-AB79-C20BBE98E873}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1FD6D731-A64C-4E46-8478-E09FD8DAB740}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E0E3D9FE-A743-44CC-9628-313AD3016C36}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EFF5D1A6-59F0-4F67-8BB3-889A6EB29177}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B2FC6A2-761B-4049-81B2-F73759692107}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FEBD083B-8F7B-430D-8C23-DFE3AA781CE6}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 1202641784 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1569809537 B
Windows/system/drivers => 111569051 B
Edge => 0 B
Chrome => 1817852598 B
Firefox => 0 B
Opera => 6775845 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 192486570 B
systemprofile32 => 251947993 B
LocalService => 252018311 B
NetworkService => 252881993 B
jansi => 333810036 B
RecycleBin => 318831 B
EmptyTemp: => 5.6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 21:35:34 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 09-09-2024
Ran by jansi (10-09-2024 21:31:42) Run:1
Running from C:\Users\jansi\Desktop
Loaded Profiles: jansi
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {6FE82984-0452-47AD-A581-AC1331F13FC8} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC)
R2 Bonjour Service; C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2023-07-11] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-326222577-4199568582-691447999-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> DefaultScope {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
SearchScopes: HKU\S-1-5-21-326222577-4199568582-691447999-1003 -> {4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} URL =
BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File
FirewallRules: [{864E6AC0-DEDD-477D-8685-73D6CBB882E1}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => No File
FirewallRules: [{5E5112B0-B9D9-4914-8704-80F0A515EF25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{89216586-66B8-442D-8B4C-7C726C2A85ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bulanci\Launcher.exe => No File
FirewallRules: [{0DE9DEF0-2D97-48A4-AF01-8049A15BC15E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [{3F54ED8B-E765-4A73-8365-3143380F75D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe => No File
FirewallRules: [TCP Query User{54800E12-C096-4659-AB79-C20BBE98E873}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [UDP Query User{1FD6D731-A64C-4E46-8478-E09FD8DAB740}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe => No File
FirewallRules: [TCP Query User{E0E3D9FE-A743-44CC-9628-313AD3016C36}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [UDP Query User{EFF5D1A6-59F0-4F67-8BB3-889A6EB29177}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe => No File
FirewallRules: [TCP Query User{8B2FC6A2-761B-4049-81B2-F73759692107}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
FirewallRules: [UDP Query User{FEBD083B-8F7B-430D-8C23-DFE3AA781CE6}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6FE82984-0452-47AD-A581-AC1331F13FC8}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6FE82984-0452-47AD-A581-AC1331F13FC8}" => removed successfully
C:\Windows\System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{2DA439E5-DCD4-450A-9009-0EC0C61606D7}" => removed successfully
HKLM\System\CurrentControlSet\Services\Bonjour Service => removed successfully
Bonjour Service => service removed successfully
"HKU\S-1-5-21-326222577-4199568582-691447999-1003\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages" => removed successfully
"HKU\S-1-5-21-326222577-4199568582-691447999-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-326222577-4199568582-691447999-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4F5567EB-B95C-4CFF-9009-FFE8F72EAC1C} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{864E6AC0-DEDD-477D-8685-73D6CBB882E1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5E5112B0-B9D9-4914-8704-80F0A515EF25}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89216586-66B8-442D-8B4C-7C726C2A85ED}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0DE9DEF0-2D97-48A4-AF01-8049A15BC15E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3F54ED8B-E765-4A73-8365-3143380F75D9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{54800E12-C096-4659-AB79-C20BBE98E873}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1FD6D731-A64C-4E46-8478-E09FD8DAB740}C:\users\jansi\appdata\local\discord\app-1.0.9013\discord.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E0E3D9FE-A743-44CC-9628-313AD3016C36}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EFF5D1A6-59F0-4F67-8BB3-889A6EB29177}C:\program files (x86)\steam\steamapps\common\kartrider drift\kartdrift\binaries\win64\kartdrift-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B2FC6A2-761B-4049-81B2-F73759692107}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FEBD083B-8F7B-430D-8C23-DFE3AA781CE6}C:\program files (x86)\steam\steamapps\common\deceit 2\deceit2\binaries\win64\deceit2game-win64-shipping.exe" => removed successfully
=========== EmptyTemp: ==========
FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 1202641784 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1569809537 B
Windows/system/drivers => 111569051 B
Edge => 0 B
Chrome => 1817852598 B
Firefox => 0 B
Opera => 6775845 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 192486570 B
systemprofile32 => 251947993 B
LocalService => 252018311 B
NetworkService => 252881993 B
jansi => 333810036 B
RecycleBin => 318831 B
EmptyTemp: => 5.6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 21:35:34 ====
-
Rudy
- Site Admin
- Příspěvky: 119314
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Někdy se stane, že se log neobjeví. Potřebný soubor je ale vždy k dispozici v adresáři, v němž je FRST. Log je správný. Bylo smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu
Vyzkouším "v akci" a dám vědět. Akorát to stihnu nejdříve zítra/pozítří večer.
Každopádně děkuju moc.
Každopádně děkuju moc.
-
Rudy
- Site Admin
- Příspěvky: 119314
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Není zač a dejte vědět. 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu
Vypadá to, že to zabralo. Hrozně moc děkuji!
-
Rudy
- Site Admin
- Příspěvky: 119314
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Rádo se stalo!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?