VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-11-2024
Ran by cisla (administrator) on LEON (LENOVO 83A1) (07-11-2024 11:54:46)
Running from C:\Users\cisla\Downloads\FRST64.exe
Loaded Profiles: cisla
Platform: Microsoft Windows 11 Home Version 23H2 22631.4317 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(DeviceSettingsSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(IdeaNotebookAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(MultimediaAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(SettingsWidgetAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(SmartDisplayAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaRpcServer.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaServerPartner.exe
(C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaRpcServer.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaToast.exe
(C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceAIService\SmartAppearanceSVC.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceAIService\FaceBeautify.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe
(C:\ProgramData\Lenovo\Vantage\Addins\BatteryWidgetAddin\2.1.0.250\BatteryWidgetHost\BatteryWidgetHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.56\msedgewebview2.exe <12>
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(CANON INC. -> CANON INC.) C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask.exe
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\24.2.1.44\x64\AppProvisioningPlugin.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e75a3d1c39bebe3f\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_c747b6aac9406fd7\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c747b6aac9406fd7\ipf_helper.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\FnHotkeyUtility.exe
(explorer.exe ->) (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc) C:\Users\cisla\AppData\Local\Akamai\netsession_win.exe <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <23>
(Gen Digital Inc. -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Lenovo -> Lenovo) C:\ProgramData\Lenovo\Vantage\Addins\BatteryWidgetAddin\2.1.0.250\BatteryWidgetHost\BatteryWidgetHost.exe
(LNBITSSvc.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\AutoModeDetect.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <18>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e75a3d1c39bebe3f\DAX3API.exe
(services.exe ->) (Gen Digital Inc. -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
(services.exe ->) (Intel Corporation -> ) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_564a6f565b40bd5f\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_3ea1838906a8645a\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c747b6aac9406fd7\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_ab7d4ea1d12c01d4\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_6fa60c4b09f4675e\AS\IAS\IntelAudioService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\lenovo\UDC\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaRpcServer.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceAIService\SmartAppearanceSVC.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\LNBITSSvc.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WPS\1.23.177.1\mc-fw-host.exe <2>
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Elevoc Technology Co.,Ltd.) C:\Windows\System32\ElevocInstallDriver\ElevocControlService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe <2>
(sihost.exe ->) (20E7E2C9-A2A9-4A02-BB29-6FCFB9E042BB -> Lenovo) C:\Program Files\WindowsApps\E0469640.SmartAppearance_2.3.54.0_x64__5grkq8ppsgwt4\PackageLauncher\PackageLauncher.exe
(svchost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WPS\1.23.177.1\neo\mc-neo-host.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.1.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.22088.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.22088.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\PrintDialog\PrintDialog.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.4312_none_e950c5ee42d877a4\TiWorker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" (No File)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1871344 2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Canon Toner Status] => C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask.exe [2306376 2022-12-22] (CANON INC. -> CANON INC.)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [MicrosoftEdgeAutoLaunch_1AFAB11DD32C917D338A47D084CD5890] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3856456 2024-10-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919312 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [Akamai NetSession Interface] => C:\Users\cisla\AppData\Local\Akamai\netsession_win.exe [4327744 2012-05-26] (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45227312 2024-10-15] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\MountPoints2: {8b8c9ed9-8148-11ef-af1c-b81ea4ddc728} - "F:\setup.EXE" /AUTORUN
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [831488 2024-09-25] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65096 2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {C7069CFE-072D-48FF-B56B-D2E5D2D5A0DD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1574856 2024-09-25] (Adobe Inc. -> Adobe Inc.)
Task: {5BC29A20-A368-4D33-8110-EE71AB23D1B5} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [829408 2024-10-15] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3415EC2B-44FE-4D93-B6D3-42EA229004A1} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5983536 2024-10-15] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "f9720d96-94bc-40f6-a03e-b2a6b9a62f50" --version "6.29.11342" --silent
Task: {ED3149BD-AF18-4FC2-BFED-993DA98BDE5F} - System32\Tasks\CCleanerSkipUAC - cisla => C:\Program Files\CCleaner\CCleaner.exe [39090480 2024-10-15] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {35749B48-F69C-4D48-AC3A-98E4A8D4FBD4} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\Windows\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {DB7670AF-0D17-481C-815D-9713EF2FBD00} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\Windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {38F8EB50-6177-451D-A701-CCFB5C573F79} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\bc97fce5-dd94-4ee8-b744-f896c5de9f10 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {1AC0FA12-DCC0-4927-A1F3-DDF41EFBFB47} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\cd96f326-cdc0-4edd-a2c7-4fc531819a2a => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {655EEAD8-10BB-41C7-9FB1-CA287D3ADFB9} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\cdcb6116-add6-45f2-824d-bff597000e17 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {A49F5E2C-811D-400E-85B1-B94B7A02528E} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\f542bd3c-68a0-4079-964e-69c25dd9d0a3 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {4AA7CFCE-A0E1-43F9-AF0F-8FF29649EC02} - System32\Tasks\Lenovo\Lenovo MigrationAssistant start event task => C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe [291216 2020-11-11] (Lenovo -> )
Task: {4FD40EC7-F709-47BD-BDDE-7BD7ABEBEE84} - System32\Tasks\Lenovo\LenovoNowLauncher => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.exe [3556248 2024-08-27] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/task
Task: {7A5B34A7-08AF-42C2-BBB3-B1C73FD4C586} - System32\Tasks\Lenovo\LenovoNowQuarterlyLaunch => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [2357656 2024-08-27] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/QuarterlyLaunch
Task: {22264729-5BE8-420B-AE94-6FFEF0CFB7B7} - System32\Tasks\Lenovo\LenovoNowTask => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [2357656 2024-08-27] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\$(EventData)
Task: {72C2358E-AD93-4F62-945E-3373CDAB50F3} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\Windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {0D24E881-6C55-4DB0-89C3-9650F94ACF85} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\Windows\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [188656 2024-04-07] (Lenovo -> Lenovo Group Ltd.)
Task: {24D74432-3D42-4A40-8311-97FF712C1B65} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\Windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {5D160576-21B2-4CC4-96C5-AC565E48A525} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {9241E31E-F2CE-4565-8FD0-77454D7E726F} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {BD9849B9-DB96-4FD6-91C9-437409B46DA8} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {C72124B9-317D-4B36-A6A6-411D1E5442DA} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {96CDA3CC-7435-4FB1-82F5-A9AF992EF936} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {EBD51C26-C7B9-4F22-A85B-4B0FDC9C6E06} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {5193500E-C7E5-43FC-8BC6-3F906F4B0AF5} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\3.13.53.0\ScheduleEventAction.exe LenovoBoostAddin.Prompt (No File)
Task: {454A72C7-FD34-4D5A-89E0-D9125B2EF091} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {E7540CDC-5A30-4244-885C-EE32C0479CAF} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {ADCE61E6-EBE9-44D3-9260-5A4B6CEE19C2} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {4230F79E-0195-42CC-A68C-535975B7FBB5} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {981A9B9B-33BF-47C4-83A6-B8E131A193E5} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.0.0.174\ScheduleEventAction.exe [17816 2024-08-30] (Lenovo -> Lenovo)
Task: {96F96B5F-12F9-456A-AF7F-80365CC8A82E} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {49CFA0C6-44DF-4A98-8D03-A515307A097F} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\uninstall.exe [340968 2024-09-12] (Lenovo -> Lenovo)
Task: {14218C10-A1E3-47E8-8260-03EDFB2D081D} - System32\Tasks\McAfee Sustainability => C:\Program Files\McAfee\WPS\1.7.209.1\sustainability\mc-sustainability.exe (No File)
Task: {F4D9AAE6-4F65-436D-8EC1-E29FAEB94A53} - System32\Tasks\McAfee\DAD.WPS.Execute.Updates => "C:\Program Files\McAfee\WPS\1.7.209.1\dad\mc-dad.exe" (No File)
Task: {46F9629D-8EDD-46B8-A4F1-3EF7E5542FF5} - System32\Tasks\McAfee\WPS\McAfee Anti-tracker notification => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {A5DC5534-561A-442D-BCF4-35A2E9F99D5A} - System32\Tasks\McAfee\WPS\McAfee Anti-Tracker Scanner => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {9491E0F3-C995-4FC7-AFCD-ECF6B160D9BF} - System32\Tasks\McAfee\WPS\McAfee Cloud Configuration Check => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {DF2E6879-6C5F-4244-B7FE-FF98B15630F7} - System32\Tasks\McAfee\WPS\McAfee Health Check => C:\Program Files\McAfee\WPS\1.23.177.1\sustainability\mc-sustainability.exe [956640 2024-10-11] (McAfee, LLC -> McAfee, LLC)
Task: {90F9C75B-AD94-4172-B8C4-98A88EFF0F5D} - System32\Tasks\McAfee\WPS\McAfee Hotfix => C:\Program Files\McAfee\wps\1.23.177.1\dad\mc-dad.exe [2649184 2024-10-11] (McAfee, LLC -> McAfee, LLC)
Task: {95B12615-F4F8-4AF6-B42A-422CCFE5A8AC} - System32\Tasks\McAfee\WPS\McAfee Message Check => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {D677F8D5-1099-475F-A29A-433EF2A0C982} - System32\Tasks\McAfee\WPS\McAfee PC Optimizer Task => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {7D2106D1-5DF2-42FC-B760-8C7ED1387618} - System32\Tasks\McAfee\WPS\McAfee restart of PC => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {7DA732E6-771E-49D2-8A75-3A2F8121447F} - System32\Tasks\McAfee\WPS\McAfee Scheduled AV Scan => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {7A7BC14E-1031-444F-B4AD-21CC18B69162} - System32\Tasks\McAfee\WPS\McAfee Scheduled Tracker Remover => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {F3A7C694-A5DA-43B6-94E8-7F4FE1F9993F} - System32\Tasks\McAfee\wps\McAfee Updater => {81A7CB63-BB07-4DAD-8E72-07B3A9BB08E2} C:\Program Files\McAfee\wps\1.23.177.1\mc-update.exe [3306208 2024-10-11] (McAfee, LLC -> McAfee, LLC)
Task: {1BCB0DF5-E4D0-40D2-B8C7-DDD03F450796} - System32\Tasks\McAfee\WPS\McAfee Virus Definition Update => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {9EA35E18-8007-42AB-A5DA-8F2F9EC3BDAA} - System32\Tasks\McAfee\WPS\McAfee Windows Notification Token => \\?\C:\Program Files\McAfee\WPS\1.23.177.1\mc-wns-client\mc-wns-client.exe [902920 2024-10-11] (McAfee, LLC -> )
Task: {53AE99FB-B67C-4F4D-836D-4FF73BFD0977} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28616920 2024-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {FBAD8F62-D821-406C-B587-214DBEF4BD15} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28616920 2024-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {A1FA6A37-92AB-40F4-84AA-D880955D7DF0} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {8419B1CF-801B-431E-B6E9-690566985C52} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {BAF73232-58D9-4861-85A6-AFAC96FC0C07} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187328 2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {1F230A61-BB47-4B37-9A24-7836E8CF98DF} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1028543237-3615343512-139710770-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671808 2024-10-29] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {A10CA48C-CA32-4ED3-9098-5120278317DF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34368 2024-10-29] (Mozilla Corporation -> Mozilla Foundation)
Task: {77923206-51F0-4524-98C4-E75BAB2B4E8A} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209176 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {018DECF3-FD8B-4F87-95E3-0E8BC2BAB85F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1028543237-3615343512-139710770-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209176 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{87e90eae-7490-4be5-a2a9-c70cef405e42}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{87e90eae-7490-4be5-a2a9-c70cef405e42}\D414254594E4D25374: [DhcpNameServer] 217.168.208.20 217.168.208.21
Tcpip\..\Interfaces\{8a6e0681-3c43-4790-85fb-251b763f7535}: [DhcpNameServer] 150.205.1.3

Edge:
=======
Edge Profile: C:\Users\cisla\AppData\Local\Microsoft\Edge\User Data\Default [2024-11-07]
Edge Notifications: Default -> hxxps://csm9hc6071bc73evnf70.enhanceprotocol.co.in
Edge Extension: (Dokumenty Google offline) - C:\Users\cisla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-18]
Edge Extension: (Edge relevant text changes) - C:\Users\cisla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-09-25]

FireFox:
========
FF DefaultProfile: rbo8ewqg.default
FF ProfilePath: C:\Users\cisla\AppData\Roaming\Mozilla\Firefox\Profiles\rbo8ewqg.default [2024-09-30]
FF ProfilePath: C:\Users\cisla\AppData\Roaming\Mozilla\Firefox\Profiles\bnucw899.default-release [2024-11-07]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-09-19]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-09-25] (Adobe Inc. -> Adobe Inc.)
R2 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1087792 2024-10-15] (Gen Digital Inc. -> Piriform Software Ltd)
S4 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13861072 2024-10-14] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e75a3d1c39bebe3f\DAX3API.exe [2363432 2023-05-18] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 dptftcs; C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_3ea1838906a8645a\ipfsvc.exe [546416 2023-03-30] (Intel Corporation -> Intel Corporation)
R2 ElevocService; C:\Windows\system32\ElevocInstallDriver\ElevocControlService.exe [416536 2023-08-24] (Microsoft Windows Hardware Compatibility Publisher -> Elevoc Technology Co.,Ltd.)
S4 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncHelper.exe [3525136 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
R2 ImControllerService; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
S2 Intel(R) Platform License Manager Service; C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2024-09-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_6fa60c4b09f4675e\AS\IAS\IntelAudioService.exe [531048 2024-09-14] (Intel Corporation -> Intel)
R2 ipfsvc; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c747b6aac9406fd7\ipf_uf.exe [3095632 2024-09-14] (Intel Corporation -> Intel Corporation)
R2 Lenovo Smart Appearance Intelligent Sensing Aware Service; C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaRpcServer.exe [156576 2023-08-14] (Lenovo -> Lenovo)
R2 LenovoFnAndFunctionKeys; C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe [178656 2024-08-21] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe [34256 2024-09-12] (Lenovo -> Lenovo)
R2 LITSSVC; C:\Windows\System32\LNBITSSvc.exe [1586536 2024-06-10] (Lenovo -> Lenovo)
S4 luminati_net_updater_win_formatfactory_pcfreetime_com; C:\Program Files (x86)\FormatFactory\net_updater64.exe [11520504 2023-12-14] (Bright Data Ltd -> BrightData Ltd.)
R2 mc-fw-host; C:\Program Files\McAfee\WPS\1.23.177.1\mc-fw-host.exe [2583168 2024-10-11] (McAfee, LLC -> McAfee, LLC)
S3 mc-wps-secdashboardservice; C:\Program Files\McAfee\WPS\mok\mc-wps-secdashboardservice.exe [1143600 2024-10-23] (McAfee, LLC -> McAfee, LLC)
S3 mc-wps-update; C:\Program Files\McAfee\wps\1.23.177.1\mc-update.exe [3306208 2024-10-11] (McAfee, LLC -> McAfee, LLC)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [923064 2024-10-31] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.186.0915.0004\OneDriveUpdaterService.exe [3869200 2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
R2 SmartAppearanceAISVC; C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceAIService\SmartAppearanceSVC.exe [87968 2023-08-14] (Lenovo -> Lenovo)
R2 UDCService; C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72432 2024-04-07] (Lenovo -> Lenovo Group Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcxHdAudio; C:\Windows\System32\drivers\AcxHdAudio.sys [561152 2024-09-25] (Microsoft Windows -> Microsoft Corporation)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [544768 2023-05-26] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [184320 2023-05-26] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [106496 2023-05-26] (Microsoft Corporation) [File not signed]
R0 fse; C:\Windows\System32\drivers\fse.sys [218488 2024-09-30] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_6f8ae740d22247ce\iaLPSS2_GPIO2_ADL.sys [141288 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_563fbcd35feb69a6\iaLPSS2_I2C_ADL.sys [211432 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_spi_adl.inf_amd64_bdfb46f9ce8fefd9\iaLPSS2_SPI_ADL.sys [162792 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_uart2_adl.inf_amd64_cf101fc7906bfd11\iaLPSS2_UART2_ADL.sys [317016 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\Windows\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_6c5069814f317858\ipf_acpi.sys [89568 2024-09-14] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c747b6aac9406fd7\ipf_cpu.sys [89680 2024-09-14] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_c747b6aac9406fd7\ipf_lf.sys [504424 2024-09-14] (Intel Corporation -> Intel Corporation)
S3 LenovoDiagnosticsDriver; C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\3.6.0.15\LenovoDiagnosticsDriver.sys [52624 2024-10-27] (Microsoft Windows Hardware Compatibility Publisher -> Lenovo Group Limited (R))
S0 mfeelam; C:\Windows\System32\DRIVERS\mfeelam.sys [19440 2024-10-11] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, LLC)
R0 mfesec; C:\Windows\System32\DRIVERS\mfesec.sys [75912 2024-10-11] (McAfee, LLC -> McAfee, LLC)
S3 polarbear-split-tunneling; C:\Program Files\McAfee\WPS\1.23.177.1\vpn\Drivers\x64\SplitTunnelingDriver.sys [29176 2024-10-11] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 rt68cx21; C:\Windows\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_16d0e5f2b3759518\rt68cx21x64.sys [845256 2024-08-21] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [51192 2024-10-11] (OpenVPN Inc. -> The OpenVPN Project)
S3 vmbusproxy; C:\Windows\system32\drivers\vmbusproxy.sys [94208 2024-09-25] (Microsoft Windows -> )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22104 2024-10-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [606624 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-23] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-11-07 11:54 - 2024-11-07 11:55 - 000037130 _____ C:\Users\cisla\Downloads\FRST.txt
2024-11-07 11:54 - 2024-11-07 11:54 - 002398720 _____ (Farbar) C:\Users\cisla\Downloads\FRST64.exe
2024-11-07 11:54 - 2024-11-07 11:54 - 000000000 ____D C:\FRST
2024-11-07 11:40 - 2024-11-07 11:40 - 000043750 _____ C:\Users\cisla\Downloads\dopis-jeziskovi---vzor-i-pdf-sablona-k-vytisknuti-mily-jezisku.webp
2024-11-07 11:21 - 2024-11-07 11:21 - 000225500 _____ C:\Users\cisla\Downloads\UPO24505468-1.pdf
2024-11-07 11:19 - 2024-11-07 11:19 - 000225500 _____ C:\Users\cisla\Downloads\UPO24505468.pdf
2024-11-07 08:57 - 2024-11-07 08:57 - 044186403 _____ C:\Users\cisla\Downloads\prilohy_170612.zip
2024-11-07 06:32 - 2024-11-07 06:32 - 000507559 _____ C:\Users\cisla\Downloads\3525_241030162213_001-1.pdf
2024-11-07 06:30 - 2024-11-07 06:30 - 000415646 _____ C:\Users\cisla\Downloads\1152420298_1.pdf
2024-11-07 06:29 - 2024-11-07 06:29 - 000069918 _____ C:\Users\cisla\Downloads\priloha_1435411013_0_00201894_dad_0810_2404123568.pdf
2024-11-05 07:01 - 2024-11-05 07:01 - 000636196 _____ C:\Users\cisla\Downloads\12. SP a předlužení.pdf
2024-11-04 07:26 - 2024-11-04 07:26 - 000069952 _____ C:\Users\cisla\Downloads\Faktura 2024-011.pdf
2024-11-01 09:00 - 2024-11-01 09:00 - 000096399 _____ C:\Users\cisla\Downloads\DPHDP3-9004210743-20241101-085601.pdf
2024-11-01 09:00 - 2024-11-01 09:00 - 000004581 _____ C:\Users\cisla\Downloads\DPHDP3-9004210743-20241101-085601-28567081-potvrzeni.p7s
2024-10-31 07:52 - 2024-10-31 07:52 - 000038918 _____ C:\Users\cisla\Downloads\potvrzen.pdf
2024-10-31 06:56 - 2024-10-31 06:56 - 004840546 _____ C:\Users\cisla\Downloads\KS_Truhlářství Grohman_nábytek ZŠ.pdf
2024-10-31 06:30 - 2024-10-31 06:30 - 000614689 _____ C:\Users\cisla\Downloads\1152419739_1-1.pdf
2024-10-31 06:28 - 2024-10-31 06:28 - 000614689 _____ C:\Users\cisla\Downloads\1152419739_1.pdf
2024-10-31 06:26 - 2024-10-31 06:26 - 000507559 _____ C:\Users\cisla\Downloads\3525_241030162213_001.pdf
2024-10-30 07:58 - 2024-10-30 07:58 - 000693828 _____ C:\Windows\system32\perfh005.dat
2024-10-30 07:58 - 2024-10-30 07:58 - 000143682 _____ C:\Windows\system32\perfc005.dat
2024-10-29 17:51 - 2024-11-07 06:27 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-10-29 10:21 - 2024-10-30 07:20 - 000000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2024-10-29 08:52 - 2024-10-29 08:52 - 001192693 _____ C:\Users\cisla\Downloads\HP_Závazná objednávka automobilu_248320323.pdf
2024-10-29 08:52 - 2024-10-29 08:52 - 000830817 _____ C:\Users\cisla\Downloads\Výše skutečně uhrazené ceny na VZMR_Automobil obecní policie.pdf
2024-10-29 07:49 - 2024-10-29 07:49 - 000054704 _____ C:\Users\cisla\Downloads\P2_Izolace terasy - NOVÁ KONSTRUKCE.pdf
2024-10-29 07:47 - 2024-10-29 07:47 - 000248374 _____ C:\Users\cisla\Downloads\Rozpocet Ropicka_B.pdf
2024-10-29 07:41 - 2024-10-29 07:41 - 011768068 _____ C:\Users\cisla\Downloads\HP_HAPASTAV_SML_3_2024.pdf
2024-10-29 07:39 - 2024-10-29 07:39 - 003855006 _____ C:\Users\cisla\Downloads\HP_HAPASTAV_SML_D1_3_2024.pdf
2024-10-29 07:38 - 2024-10-29 07:38 - 000797006 _____ C:\Users\cisla\Downloads\HP_HAPASTAV_PP_3_2024.pdf
2024-10-29 07:37 - 2024-10-29 07:37 - 000214589 _____ C:\Users\cisla\Downloads\VZMR_3_2024_HAPASTAV_Výše skutečně uhrazené ceny za plnění veřejné zakázky.pdf
2024-10-27 10:57 - 2024-10-27 10:58 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Publisher Building Blocks
2024-10-27 10:57 - 2024-10-27 10:57 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Publisher
2024-10-25 08:58 - 2024-10-25 08:58 - 000512753 _____ C:\Users\cisla\Downloads\Priloha c. 4_Soupis praci_23102024.xlsx
2024-10-25 08:56 - 2024-10-25 08:57 - 000284382 _____ C:\Users\cisla\Downloads\Vyzva k podani nabidek a ZD.pdf
2024-10-25 06:46 - 2024-10-25 06:46 - 002393090 _____ C:\Users\cisla\Downloads\slevomat-cz-voucher-.pdf
2024-10-25 06:46 - 2024-10-25 06:46 - 000321570 _____ C:\Users\cisla\Downloads\slevomat-cz-voucher-omladnete-o-par-let-pomoci-neinvazivniho-osetreni-7581276120D-684 (1).pdf
2024-10-25 06:41 - 2024-10-25 06:41 - 002405530 _____ C:\Users\cisla\Downloads\slevomat-cz-voucher-omladnete-o-par-let-pomoci-neinvazivniho-osetreni-7581276120D-684.pdf
2024-10-25 06:36 - 2024-10-25 06:36 - 000555415 _____ C:\Users\cisla\Downloads\Faktura_CZ_24523911.pdf
2024-10-25 05:55 - 2024-10-25 05:55 - 000006088 _____ C:\Users\cisla\Downloads\platba_e3cf4345-8cf2-43a6-9012-d02e2042ddc4.pdf
2024-10-25 05:54 - 2024-10-25 05:54 - 000165454 _____ C:\Users\cisla\Downloads\DPHKH1-0007951264-20241025-065407.pdf
2024-10-25 05:53 - 2024-10-25 05:53 - 000099996 _____ C:\Users\cisla\Downloads\DPHDP3-0007951264-20241025-065258.pdf
2024-10-25 05:40 - 2024-10-25 05:40 - 000617591 _____ C:\Users\cisla\Downloads\1152418927_1.pdf
2024-10-23 09:23 - 2024-10-23 09:34 - 000000298 _____ C:\Users\cisla\AppData\LocalLow\2d80f582381c44c865fd9e8e27ac844e6c7b00b0d3c0e9b69a55b369e1853383
2024-10-23 09:23 - 2024-10-23 09:23 - 000032382 _____ C:\Users\cisla\AppData\LocalLow\897f03072020ffe6a861429e41e5228659e097df2818ea8037a4c5bd8426ccb5
2024-10-23 09:16 - 2024-10-23 09:16 - 000434337 _____ C:\Users\cisla\Downloads\SCAN0050.PDF
2024-10-22 15:24 - 2024-10-22 15:24 - 000000000 ____D C:\Program Files\Common Files\McAfee
2024-10-22 10:55 - 2024-10-22 10:55 - 000012536 _____ C:\Users\cisla\Downloads\19329-Makeblock-mTiny-Discover-kit-mapy-Muj-svet-a-Hledani-pokladu.webp
2024-10-22 10:55 - 2024-10-22 10:55 - 000012536 _____ C:\Users\cisla\Documents\19329-Makeblock-mTiny-Discover-kit-mapy-Muj-svet-a-Hledani-pokladu.webp
2024-10-22 10:29 - 2024-10-23 09:34 - 000000298 _____ C:\Users\cisla\AppData\LocalLow\3a320a53e298c65994944589b86f741f340445dd273095332097e58569de6ed3
2024-10-22 10:29 - 2024-10-23 09:23 - 000031358 _____ C:\Users\cisla\AppData\LocalLow\273dc04f270a99f4cf11c8d5c1cddf0d76d577a37fce623991fca84d3f429553
2024-10-22 10:25 - 2024-10-22 10:25 - 000584123 _____ C:\Users\cisla\Downloads\2964466841.pdf
2024-10-22 10:23 - 2024-10-22 10:23 - 000072514 _____ C:\Users\cisla\Downloads\DAVÍDEK-DKE_DBP_2102400196.pdf
2024-10-22 10:21 - 2024-10-22 10:21 - 000085865 _____ C:\Users\cisla\Downloads\SKM_C250i24052813200-2.pdf
2024-10-22 08:03 - 2024-10-22 08:03 - 000073465 _____ C:\Users\cisla\Downloads\Dobropis.pdf
2024-10-22 06:52 - 2024-10-22 06:52 - 000234652 _____ C:\Users\cisla\Downloads\Faktura_0014102396_4594607400_2440421339.PDF
2024-10-22 06:47 - 2024-10-22 06:47 - 000131815 _____ C:\Users\cisla\Downloads\Plán_záloh_160005808432.PDF
2024-10-22 06:45 - 2024-10-22 06:45 - 000133414 _____ C:\Users\cisla\Downloads\Plán_záloh_160005808433.PDF
2024-10-22 06:36 - 2024-10-22 06:36 - 000212756 _____ C:\Users\cisla\Downloads\Příloha.zip
2024-10-22 06:21 - 2024-10-22 06:21 - 000016733 _____ C:\Users\cisla\Downloads\ROZVRH 2024 - 2025 (1).xlsx
2024-10-21 10:41 - 2024-10-21 10:41 - 009431843 _____ C:\Users\cisla\Downloads\prilohy_68202.zip
2024-10-21 10:07 - 2024-10-21 10:07 - 000062721 _____ C:\Users\cisla\Downloads\BYP00056_20241011_123229.pdf
2024-10-18 14:26 - 2024-10-18 14:26 - 000001147 _____ C:\Users\cisla\Desktop\Format Factory.lnk
2024-10-18 14:26 - 2024-10-18 14:26 - 000000000 ____D C:\Users\cisla\Documents\FormatFactory
2024-10-18 14:26 - 2024-10-18 14:26 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2024-10-18 14:26 - 2024-10-18 14:26 - 000000000 ____D C:\Users\cisla\AppData\Local\FTMod
2024-10-18 14:25 - 2024-10-18 14:25 - 000000000 ____D C:\Users\cisla\AppData\Local\BrightData
2024-10-18 14:25 - 2024-10-18 14:25 - 000000000 ____D C:\ProgramData\BrightData
2024-10-18 14:24 - 2024-10-18 14:26 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2024-10-18 14:24 - 2024-10-18 14:24 - 000000000 ____D C:\Users\cisla\AppData\Local\Free_Time_Co.,_Ltd
2024-10-18 14:23 - 2024-10-18 14:23 - 106377944 _____ (Free Time Co., Ltd) C:\Users\cisla\Downloads\FFSetup5.17.0.0.exe
2024-10-18 14:14 - 2024-10-18 14:14 - 000021931 _____ C:\Users\cisla\AppData\LocalLow\6d35d70a850742924fdb91e6ac1540211fd6eef16d2dfe8914f44ccc3d1e1e02
2024-10-18 14:14 - 2024-10-18 14:14 - 000000026 _____ C:\Users\cisla\AppData\LocalLow\9e1b02abbea81c645b66e7a00689c2ddc61b7f0bb24a7daf6e00030cac52a8ff
2024-10-18 07:02 - 2024-10-18 07:02 - 000375618 _____ C:\Users\cisla\Downloads\Prodejní Faktura 6282452817.pdf
2024-10-18 07:01 - 2024-10-18 07:01 - 000384152 _____ C:\Users\cisla\Downloads\Prodejní Dobropis 4282450319.pdf
2024-10-18 07:00 - 2024-10-18 07:00 - 000287072 _____ C:\Users\cisla\Downloads\20240379-1.pdf
2024-10-17 12:20 - 2024-10-17 12:20 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\3fb6d720096196411101d21270342b1f43e708eda77d8822863d5ad971a73b3f
2024-10-15 07:33 - 2024-10-15 07:33 - 048293704 _____ C:\Users\cisla\Downloads\winmfscanutilityv12102.exe
2024-10-15 07:33 - 2024-10-15 07:33 - 000000000 ____D C:\Users\cisla\Downloads\winmfscanutilityv12102
2024-10-15 07:33 - 2023-06-12 14:37 - 000096000 _____ C:\Windows\SysWOW64\CNC1772DMF.TBL
2024-10-15 07:33 - 2023-06-12 14:37 - 000015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCAMF.dll
2024-10-15 07:31 - 2024-10-15 07:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon
2024-10-15 07:31 - 2024-10-15 07:33 - 000000000 ____D C:\Program Files (x86)\Canon
2024-10-15 07:31 - 2024-10-15 07:31 - 007052068 _____ C:\Users\cisla\Downloads\tonerstatusver240 (1).zip
2024-10-15 07:31 - 2024-10-15 07:31 - 000000000 ____D C:\Users\cisla\Downloads\tonerstatusver240 (1)
2024-10-15 07:30 - 2024-10-15 07:30 - 007052068 _____ C:\Users\cisla\Downloads\tonerstatusver240.zip
2024-10-15 07:14 - 2024-10-15 07:14 - 000265663 _____ C:\Users\cisla\Downloads\SCAN0038-1.PDF
2024-10-15 07:13 - 2024-10-22 08:41 - 000070660 _____ C:\Users\cisla\Downloads\Dobropis D000000001.pdf
2024-10-15 07:06 - 2024-10-15 07:06 - 000265663 _____ C:\Users\cisla\Downloads\SCAN0038.PDF
2024-10-15 06:55 - 2024-10-15 06:55 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\a9d5dbc6fa031988e824f007c9be4f83d2ab57722b13acb82a9bd7ee1de51d22
2024-10-15 06:38 - 2024-10-15 06:38 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\aef7c0398d83c51e42ec35b5e51c9fe2a3d0c8e069ce3f87cc51ba1f73913fed
2024-10-15 06:35 - 2024-10-15 06:35 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\79b72b34444899f1645d439fea93f46ef9d7a5c253221d14f620bb67dfedc700
2024-10-15 06:27 - 2024-10-15 06:27 - 074217560 _____ C:\Users\cisla\Downloads\GPlus_UFRII_Driver_V310_32_64_00 (1).exe
2024-10-15 06:19 - 2024-10-15 06:19 - 000000000 ____D C:\Users\cisla\AppData\Local\ElevatedDiagnostics
2024-10-15 06:13 - 2024-10-15 06:13 - 000000000 ____D C:\Users\cisla\Downloads\GPlus_UFRII_Driver_V310_32_64_00
2024-10-15 06:12 - 2024-10-15 06:12 - 074217560 _____ C:\Users\cisla\Downloads\GPlus_UFRII_Driver_V310_32_64_00.exe
2024-10-15 05:40 - 2024-10-15 05:40 - 029474912 _____ C:\Users\cisla\Downloads\win-laser-nw-dsu-v120.exe
2024-10-15 05:40 - 2024-10-15 05:40 - 000000000 ____D C:\Users\cisla\Downloads\win-laser-nw-dsu-v120
2024-10-15 05:30 - 2024-10-29 09:15 - 000361369 _____ C:\Users\cisla\AppData\LocalLow\ef3390dd2e6ef53ee598801f406dfec0b8978f7a96472d3f820b5f1c9dd0e7dc
2024-10-15 05:30 - 2024-10-29 09:15 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\a9cf3f2ef3c89bf853665387bd161e0f85c168ed2581a48005f5cb5fd536e58a
2024-10-15 05:30 - 2024-10-29 09:13 - 000012335 _____ C:\Users\cisla\AppData\LocalLow\9db3974e903d97c7a2e997d706a34003edf0f53a5705d4374ddcf7a451013d07
2024-10-15 05:27 - 2024-10-30 08:00 - 000025478 _____ C:\Users\cisla\AppData\LocalLow\a158987a3e8b6705f0fa2bc6a86e9aee70e41f0841beb36e86fd8cbd32e21f42
2024-10-15 05:27 - 2024-10-15 05:27 - 000000026 _____ C:\Users\cisla\AppData\LocalLow\06d31d806875ecaef7220645e1a41decd64bb0650d5a7d29e691cb8bc6cab36d
2024-10-15 05:24 - 2024-10-15 05:24 - 000479605 _____ C:\Users\cisla\Downloads\NAB-025-24-07462.pdf
2024-10-14 08:40 - 2019-05-20 05:15 - 000026001 _____ C:\Users\cisla\Documents\MUD_system_prohlaseni.pdf
2024-10-14 08:38 - 2024-10-14 08:38 - 000030144 _____ C:\Users\cisla\AppData\LocalLow\dbb17a6be212ef685ba97fbba526dd2acf51c2e342e255cd4905a3ef0d0cc239
2024-10-14 08:38 - 2024-10-14 08:38 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\1200a7146be44de5d7e4933bba92fbf62e200cae64fc37f56462371d1d9f7ebc
2024-10-14 08:30 - 2024-10-14 08:30 - 000319276 _____ C:\Users\cisla\Downloads\Vyjádření o existenci SEK (296848-24)-1.pdf
2024-10-14 08:27 - 2024-10-14 08:27 - 000319276 _____ C:\Users\cisla\Downloads\Vyjádření o existenci SEK (296848-24).pdf
2024-10-14 08:27 - 2024-10-14 08:27 - 000272393 _____ C:\Users\cisla\Downloads\Situační výkres (296848-24).pdf
2024-10-14 08:15 - 2024-11-07 11:08 - 000212035 _____ C:\Users\cisla\AppData\LocalLow\56d00d88f258c6b9d5eafaa2ad53cf54b204f1342ea5a3a062980e0752dc4571
2024-10-14 08:15 - 2024-11-07 11:08 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\c128e33a9d0746f9675aa6bfa95c9e8ed1e9dd7821e0d9f8303aee95d2127b63
2024-10-14 08:03 - 2024-10-14 08:03 - 000109785 _____ C:\Users\cisla\Downloads\Sdělení TELIN - 1100171746.pdf
2024-10-14 08:02 - 2024-10-14 08:02 - 000491185 _____ C:\Users\cisla\Downloads\Situační výkres TPS - 0201791455.pdf
2024-10-14 08:02 - 2024-10-14 08:02 - 000490397 _____ C:\Users\cisla\Downloads\Situační výkres TELIN - 1100171746.pdf
2024-10-14 08:02 - 2024-10-14 08:02 - 000108501 _____ C:\Users\cisla\Downloads\Sdělení TPS - 0201791455.pdf
2024-10-14 08:01 - 2024-10-14 08:01 - 000182449 _____ C:\Users\cisla\Downloads\Podmínky ochrany sítě ČEZd-1.pdf
2024-10-14 08:01 - 2024-10-14 08:01 - 000141044 _____ C:\Users\cisla\Downloads\Sdělení ČEZd - 0102226987.pdf
2024-10-14 08:00 - 2024-10-14 08:00 - 000710497 _____ C:\Users\cisla\Downloads\Situační výkres ČEZd - 0102226987.pdf
2024-10-14 07:59 - 2024-10-14 07:59 - 000490722 _____ C:\Users\cisla\Downloads\Situační výkres ICT - 0700902333.pdf
2024-10-14 07:59 - 2024-10-14 07:59 - 000109837 _____ C:\Users\cisla\Downloads\Sdělení ICT - 0700902333.pdf
2024-10-14 07:37 - 2024-10-14 07:37 - 000472165 _____ C:\Users\cisla\Downloads\Situační výkres TELIN - 1100171724.pdf
2024-10-14 07:36 - 2024-10-14 07:36 - 000109600 _____ C:\Users\cisla\Downloads\Sdělení TELIN - 1100171724.pdf
2024-10-14 07:34 - 2024-10-14 07:34 - 000472954 _____ C:\Users\cisla\Downloads\Situační výkres TPS - 0201791432.pdf
2024-10-14 07:33 - 2024-10-14 07:33 - 000108269 _____ C:\Users\cisla\Downloads\Sdělení TPS - 0201791432.pdf
2024-10-14 07:32 - 2024-10-14 07:32 - 000472649 _____ C:\Users\cisla\Downloads\Situační výkres ICT - 0700902311.pdf
2024-10-14 07:31 - 2024-10-14 07:31 - 000109597 _____ C:\Users\cisla\Downloads\Sdělení ICT - 0700902311.pdf
2024-10-14 07:28 - 2024-10-14 07:28 - 000775640 _____ C:\Users\cisla\Downloads\Situační výkres ČEZd - 0102226957.pdf
2024-10-14 07:28 - 2024-10-14 07:28 - 000140869 _____ C:\Users\cisla\Downloads\Sdělení ČEZd - 0102226957.pdf
2024-10-14 07:27 - 2024-10-14 07:27 - 000182449 _____ C:\Users\cisla\Downloads\Podmínky ochrany sítě ČEZd.pdf
2024-10-14 06:47 - 2024-11-07 09:27 - 000734344 _____ C:\Users\cisla\AppData\LocalLow\35ec8d41791c76c2d05dc6a57e43bcbbb169f70b337c7482440f818e7be1f37a
2024-10-14 06:47 - 2024-11-04 07:33 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\05f2a2e91a42453168eb85ad8e2fad3c54f0b463b70edca88e2ab4c571fe91a5
2024-10-14 06:47 - 2024-10-29 10:27 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\fc18fb27e101ce15521508b9f0ffba6ed4c603de490a2eca8b1bed3acfb3658d
2024-10-14 06:47 - 2024-10-14 06:47 - 000011216 _____ C:\Users\cisla\AppData\LocalLow\afc07dade3268a7e5b6bd06d2348351514f31c3c11faa0bd3029eb09bc20a838
2024-10-14 06:41 - 2024-09-14 17:26 - 002115152 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 002115152 _____ C:\Windows\system32\vulkaninfo.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 001673296 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 001673296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 001462872 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 001462872 _____ C:\Windows\system32\vulkan-1.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 001305280 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 001305280 _____ C:\Windows\SysWOW64\vulkan-1.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000783824 _____ (Intel) C:\Windows\system32\libvpl.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000668456 _____ (Intel) C:\Windows\SysWOW64\libvpl.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000538304 _____ C:\Windows\system32\ze_tracing_layer.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000510032 _____ C:\Windows\system32\ze_loader.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000334928 _____ C:\Windows\system32\ze_validation_layer.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 027983848 _____ (Intel Corporation) C:\Windows\system32\mfxplugin64_hw.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 020707920 _____ (Intel Corporation) C:\Windows\SysWOW64\mfxplugin32_hw.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000979152 _____ (Intel Corporation) C:\Windows\system32\libmfxhw64.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000737992 _____ (Intel Corporation) C:\Windows\SysWOW64\libmfxhw32.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000621928 _____ (Intel Corporation) C:\Windows\system32\intel_gfx_api-x64.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000562336 _____ C:\Windows\SysWOW64\IntelControlLib32.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000480816 _____ (Intel Corporation) C:\Windows\SysWOW64\intel_gfx_api-x86.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000328448 _____ C:\Windows\system32\ControlLib.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000274416 _____ C:\Windows\SysWOW64\ControlLib32.dll
2024-10-14 06:37 - 2024-10-14 06:37 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-10-14 06:31 - 2024-10-14 06:31 - 000479210 _____ C:\Users\cisla\Downloads\1152417441_1-1.pdf
2024-10-14 06:30 - 2024-10-14 06:30 - 000479210 _____ C:\Users\cisla\Downloads\1152417441_1.pdf
2024-10-14 06:29 - 2024-10-14 06:29 - 000281731 _____ C:\Users\cisla\Downloads\Vyt_sklad_22-1_Zlončice.pdf
2024-10-11 11:01 - 2024-10-11 11:15 - 1581577532 _____ C:\Users\cisla\Downloads\Nepotvrzeno 270957.crdownload
2024-10-11 11:00 - 2024-10-11 11:19 - 2547798879 _____ C:\Users\cisla\Downloads\Nepotvrzeno 710626.crdownload
2024-10-11 11:00 - 2024-10-11 11:15 - 1581577532 _____ C:\Users\cisla\Downloads\Nepotvrzeno 753194.crdownload
2024-10-11 10:59 - 2024-10-11 11:14 - 1581577532 _____ C:\Users\cisla\Downloads\Nepotvrzeno 228164.crdownload
2024-10-11 09:55 - 2024-10-11 09:55 - 000051192 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tap0901.sys
2024-10-10 10:37 - 2024-10-10 10:37 - 000001525 _____ C:\Users\cisla\Documents\priloha_1418392131_0_DetailZpravy.html
2024-10-10 10:36 - 2024-10-10 10:36 - 000203159 _____ C:\Users\cisla\Downloads\reklamace.pdf
2024-10-09 07:45 - 2024-10-09 07:45 - 000243164 _____ C:\Users\cisla\Downloads\fa p.Davídek.pdf
2024-10-09 06:13 - 2024-10-09 06:13 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Document Building Blocks
2024-10-09 06:11 - 2024-10-09 06:11 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Bibliography
2024-10-09 06:09 - 2024-10-09 06:09 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\QuickStyles
2024-10-09 05:47 - 2024-10-09 05:47 - 000082150 _____ C:\Users\cisla\Downloads\OP-31618_2024-1.pdf
2024-10-09 05:39 - 2024-10-09 05:39 - 000119676 _____ C:\Users\cisla\Downloads\03.1 výztuž patek.pdf
2024-10-08 13:21 - 2024-10-08 13:21 - 006625248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2024-10-08 10:30 - 2024-10-08 10:30 - 000002584 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes (new).lnk

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-11-07 11:51 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SystemTemp
2024-11-07 11:51 - 2022-05-07 06:22 - 000000000 ____D C:\Windows\INF
2024-11-07 11:50 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-11-07 11:09 - 2024-09-30 06:12 - 000005149 _____ C:\Users\cisla\Desktop\Léky.odt
2024-11-07 11:07 - 2024-09-25 08:15 - 000000000 ____D C:\Users\cisla\Desktop\2024
2024-11-07 09:57 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-11-07 09:57 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\AppReadiness
2024-11-07 06:27 - 2022-05-25 20:05 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-11-06 08:07 - 2024-09-25 06:59 - 000000000 ____D C:\Users\cisla\AppData\Local\CrashDumps
2024-11-06 06:50 - 2022-05-25 20:06 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-11-06 06:50 - 2022-05-25 20:06 - 000003516 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-11-04 07:47 - 2024-10-07 08:51 - 000000000 ____D C:\Záloha Profit
2024-11-04 07:47 - 2024-09-29 18:03 - 000000000 ____D C:\ProgramData\firebird
2024-11-04 06:44 - 2022-05-25 20:06 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-11-01 07:25 - 2024-09-25 06:57 - 000000000 ____D C:\Users\cisla\AppData\Local\Packages
2024-10-31 07:36 - 2024-10-07 06:25 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Excel
2024-10-30 09:26 - 2024-09-30 07:07 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\UProof
2024-10-30 08:36 - 2024-09-29 17:43 - 000000000 ____D C:\Program Files\CCleaner
2024-10-30 08:29 - 2024-09-25 06:57 - 000000000 ____D C:\Users\cisla\AppData\Local\D3DSCache
2024-10-30 08:11 - 2024-09-30 06:27 - 000000000 ____D C:\Users\cisla\Documents\zaloha_cc
2024-10-30 07:58 - 2024-03-14 14:51 - 001629502 _____ C:\Windows\system32\PerfStringBackup.INI
2024-10-30 07:54 - 2024-09-29 17:50 - 000002776 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-10-30 07:54 - 2024-09-25 06:59 - 000003126 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1028543237-3615343512-139710770-1001
2024-10-30 07:53 - 2024-10-03 06:33 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-10-30 07:53 - 2024-09-30 06:50 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-10-30 07:53 - 2022-05-25 20:05 - 000012288 ___SH C:\DumpStack.log.tmp
2024-10-30 07:53 - 2022-05-25 20:05 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-10-30 07:53 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\ServiceState
2024-10-30 07:52 - 2024-09-25 06:16 - 000000000 ____D C:\Users\cisla
2024-10-30 07:52 - 2022-05-07 06:17 - 000786432 _____ C:\Windows\system32\config\BBI
2024-10-30 07:51 - 2024-03-14 14:52 - 000000000 ____D C:\Windows\system32\ElevocConfig
2024-10-30 07:50 - 2024-09-29 17:50 - 000002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-10-30 07:50 - 2024-09-25 07:04 - 000000000 ____D C:\ProgramData\Package Cache
2024-10-30 07:16 - 2024-09-30 07:07 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Word
2024-10-30 06:42 - 2024-09-30 06:50 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-10-29 17:38 - 2024-03-14 14:37 - 000001623 _____ C:\Windows\system32\config\VSMIDK
2024-10-29 09:14 - 2024-10-07 09:17 - 000003584 _____ C:\Windows\storelibdebug.txt
2024-10-29 07:45 - 2024-10-07 07:04 - 000000000 ____D C:\Stavitel
2024-10-27 10:41 - 2024-09-30 07:07 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Office
2024-10-24 15:52 - 2024-09-30 08:01 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-10-23 11:20 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\LiveKernelReports
2024-10-23 09:32 - 2022-05-25 20:05 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-10-20 10:39 - 2024-03-14 14:42 - 000000000 ____D C:\Program Files\Microsoft Office
2024-10-20 10:39 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-10-18 15:09 - 2024-09-29 17:43 - 000000666 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2024-10-16 18:30 - 2024-09-29 17:43 - 000003936 _____ C:\Windows\system32\Tasks\CCleaner Update
2024-10-16 18:30 - 2024-09-29 17:43 - 000003380 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2024-10-14 06:42 - 2024-03-14 14:53 - 000000000 ____D C:\Windows\TempInst
2024-10-11 17:36 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-10-11 17:19 - 2024-09-25 06:45 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2024-10-11 17:19 - 2022-05-25 20:05 - 000498072 _____ C:\Windows\system32\FNTCACHE.DAT
2024-10-11 17:19 - 2022-05-07 07:10 - 000000000 ____D C:\Windows\system32\OpenSSH
2024-10-11 17:19 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SystemResources
2024-10-11 17:19 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\Sgrm
2024-10-11 17:19 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\oobe
2024-10-11 17:19 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\appraiser
2024-10-11 17:18 - 2022-05-07 06:24 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-10-11 17:18 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SystemApps
2024-10-11 17:18 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\ShellExperiences
2024-10-11 17:18 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\Provisioning
2024-10-11 17:18 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\IME
2024-10-11 17:18 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\bcastdvr
2024-10-11 17:18 - 2022-05-07 06:17 - 000000000 ____D C:\Windows\servicing
2024-10-11 09:55 - 2024-03-14 14:55 - 000075912 _____ (McAfee, LLC) C:\Windows\system32\Drivers\mfesec.sys
2024-10-11 09:55 - 2024-03-14 14:55 - 000019440 _____ (McAfee, LLC) C:\Windows\system32\Drivers\mfeelam.sys
2024-10-11 09:55 - 2022-05-07 06:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-10-09 08:47 - 2024-09-30 06:36 - 000000000 ____D C:\Windows\system32\MRT
2024-10-09 08:45 - 2024-09-30 06:36 - 201324920 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-10-09 08:44 - 2022-05-07 06:17 - 000000000 ____D C:\Windows\CbsTemp
2024-10-09 08:42 - 2022-05-25 20:08 - 003213312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-11-2024
Ran by cisla (07-11-2024 11:55:28)
Running from C:\Users\cisla\Downloads
Microsoft Windows 11 Home Version 23H2 22631.4317 (X64) (2024-09-25 05:08:40)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1028543237-3615343512-139710770-500 - Administrator - Disabled)
cisla (S-1-5-21-1028543237-3615343512-139710770-1001 - Administrator - Enabled) => C:\Users\cisla
DefaultAccount (S-1-5-21-1028543237-3615343512-139710770-503 - Limited - Disabled)
Guest (S-1-5-21-1028543237-3615343512-139710770-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1028543237-3615343512-139710770-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 19.008.20071 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601102}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Canon MF Scan Utility (HKLM-x32\...\Canon_MF_Scan_Utility) (Version: 1.21.0.2 - CANON INC.)
CCleaner (HKLM\...\CCleaner) (Version: 6.29 - Piriform)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
Lenovo Migration Assistant (HKLM\...\Lenovo Migration Assistant_is1) (Version: 2.1.4.6 - Lenovo)
Lenovo Now (HKLM-x32\...\Lenovo Now) (Version: 4.0.2.39 - Lenovo Group Ltd.)
Lenovo Smart Appearance Components (HKLM-x32\...\{13E9CBF6-6E32-40D0-874A-018DFEFB0851}_is1) (Version: 2.3.54.0 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.2.24.0 - Lenovo Group Ltd.)
McAfee (HKLM\...\McAfee.WPS) (Version: 1.23.177.1 - McAfee, LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 130.0.2849.68 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 130.0.2849.56 - Microsoft Corporation)
Microsoft Office Professional Plus 2021 - cs-cz (HKLM\...\ProPlus2021Retail - cs-cz) (Version: 16.0.18025.20160 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.186.0915.0004 - Microsoft Corporation)
Microsoft OneNote - cs-cz (HKLM\...\OneNoteFreeRetail - cs-cz) (Version: 16.0.18025.20160 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33816 (HKLM-x32\...\{77169412-f642-45e7-b533-0c6f48de12f9}) (Version: 14.40.33816.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33816 (HKLM\...\{5904914B-9FC8-44C2-AE48-5C7F30A603EC}) (Version: 14.40.33816 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33816 (HKLM\...\{560D2DA4-096E-4868-B22A-DA6418FDE6FB}) (Version: 14.40.33816 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 132.0 (x64 cs)) (Version: 132.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 131.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18025.20126 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18025.20160 - Microsoft Corporation) Hidden
PROFIT 2024.05 (HKLM\...\{670A9A20-E29D-40C3-9937-2AFF89C3AC82}_is1) (Version: - LPsoft)
RTS Stavitel+ 2015 (HKLM-x32\...\RTS Stavitel +_is1) (Version: 2015 - RTS, a.s.)
Toner Status (HKLM-x32\...\{6E9A516A-6189-4502-80FD-51BE28989CEB}) (Version: 2.4.0.0 - CANON INC.)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.975 - McAfee, LLC)

Packages:
=========

AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5635.0_x64__8j3eq9eme6ctt [2024-10-09] (INTEL CORP) [Startup Task]
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.24.2820.0_x64__rz1tebttyb220 [2024-10-07] (Dolby Laboratories)
Dolby Audio -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudio_3.30201.210.0_x64__rz1tebttyb220 [2024-09-25] (Dolby Laboratories)
Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.23306.1292.0_x64__8wekyb3d8bbwe [2024-10-09] (Microsoft Corporation)
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2409.29.0_x64__k1h2ywk1493x8 [2024-10-15] (LENOVO INC.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.6.12.0_x64__5grkq8ppsgwt4 [2024-09-30] (LENOVO INC) [Startup Task]
Lenovo Smart Appearance -> C:\Program Files\WindowsApps\E0469640.SmartAppearance_2.3.54.0_x64__5grkq8ppsgwt4 [2024-10-09] (LENOVO INC) [Startup Task]
McAfee -> C:\Program Files\McAfee\wps\1.23.177.1 [2024-10-22] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-09-30] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_54.20907.567.0_x64__8wekyb3d8bbwe [2024-10-09] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.2.2331.0_x64__8wekyb3d8bbwe [2024-09-30] (Microsoft Corporation)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.1.0.0_x64__8wekyb3d8bbwe [2024-10-25] (Microsoft Corporation)
Microsoft.MPEG2VideoExtension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2024-09-30] (Microsoft Corporation)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.181.0_x64__8wekyb3d8bbwe [2024-10-31] (Microsoft Corporation) [Startup Task]
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24101.35.0_x64__cw5n1h2txyewy [2024-11-05] (Microsoft Windows) [Startup Task]
Power Automate -> C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_11.2410.202.0_x64__8wekyb3d8bbwe [2024-10-23] (Microsoft Corporation) [Startup Task]
Widgets Platform Runtime -> C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.1.0_x64__8wekyb3d8bbwe [2024-10-29] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.AccountsService_cw5n1h2txyewy [2024-10-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-10-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.IrisService_cw5n1h2txyewy [2024-10-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.TwinSxS_cw5n1h2txyewy [2024-10-11] (Microsoft Windows)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1028543237-3615343512-139710770-1001_Classes\CLSID\{efd4e8f5-6e0e-9405-4ec4-9c673447cfee}\localserver32 -> C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaToast.exe (Lenovo -> Lenovo)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2024-01-04] (Free Time) [File not signed]
ContextMenuHandlers1: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.23.177.1\mc-ctxmnu.dll [2024-10-11] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2024-01-04] (Free Time) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.186.0915.0004\FileSyncShell64.dll [2024-10-30] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.23.177.1\mc-ctxmnu.dll [2024-10-11] (McAfee, LLC -> McAfee, LLC)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2024-10-15 07:31 - 2022-09-28 10:06 - 000003072 _____ (CANON INC.) [File not signed] C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask_CS.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mc-fw-host => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 06:24 - 2024-11-07 11:52 - 000000822 _____ C:\Windows\system32\drivers\etc\hosts

2024-10-29 10:21 - 2024-10-30 07:20 - 000000374 _____ C:\Windows\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1028543237-3615343512-139710770-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\cisla\AppData\Local\Lenovo\DataMigration\wallpaper.jpeg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
McAfee VPN: TAP-Windows Adapter V9 -> tap0901.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Wi-Fi: Realtek 8822CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys

vms_vsf: Hyper-V Virtual Switch Extension Filter
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Canon Toner Status"
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{8DD79B9C-86E4-491A-B9F3-E7F28FCF0538}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B357E34A-3626-4F36-9476-8D37189A32D3}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA1E0EBF-4F8A-4852-B49B-C6BABB4BCCFC}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\MigrationAssistant.exe (Lenovo -> )
FirewallRules: [{F4441E86-4D7C-45B5-94AE-819C3A5DC56B}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\MigrationAssistant.exe (Lenovo -> )
FirewallRules: [{FBDDB594-EE1F-4188-BB6F-1EE07B5AEFA3}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe (Lenovo -> )
FirewallRules: [{C9A32E25-75C6-460C-81E2-11754ABE1F0C}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe (Lenovo -> )
FirewallRules: [{02DD97F8-2811-4351-BBCD-5C974FA90AD7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BED302EB-9898-48F7-A01B-3F5234D9DD06}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{E0620E1B-CC12-44E6-B3E7-B4AC18426B99}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{94688B3B-AFE5-4325-8E27-349BB09CCA1A}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7BE31168-5368-457E-9AE3-855AE832B526}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{02D655D8-36B4-4719-BDAC-298D7DF37E66}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{3EF28706-29FF-42A8-858A-096DFECAECAF}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.56\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

04-11-2024 07:02:11 Windows Update
04-11-2024 07:02:11 Windows Update
07-11-2024 09:57:12 Windows Update

==================== Faulty Device Manager Devices ============

Name: Intel(R) Dynamic Tuning Technology Updater Component
Description: Intel(R) Dynamic Tuning Technology Updater Component
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (11/07/2024 06:27:11 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: ESIF(1.0.11901.2113) TYPE: ERROR MODULE: IPF TIME 686101903 ms

[<IPFSRV>AuthMgr_EsifEventRegister@ipfsrv_authmgr.c#1995]<686101903 ms>:
Unauthorized EsifEventRegister: NA (-1) [3649940C-B779-464D-87D3-45EB8F243A3A]

Error: (11/07/2024 06:27:09 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: ESIF(1.0.11901.2113) TYPE: ERROR MODULE: IPF TIME 686099875 ms

[<IPFSRV>AuthMgr_EsifPrimitive@ipfsrv_authmgr.c#1899]<686099875 ms>:
Unauthorized EsifPrimitive: SET_PROC_NUMBER_OFFLINE_CORES (153)

Error: (11/07/2024 06:27:09 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: ESIF(1.0.11901.2113) TYPE: ERROR MODULE: IPF TIME 686099735 ms

[<IPFSRV>AuthMgr_EsifEventUnregister@ipfsrv_authmgr.c#2041]<686099735 ms>:
Unauthorized EsifEventUnregister: NA (-1) [3649940C-B779-464D-87D3-45EB8F243A3A]

Error: (11/06/2024 08:07:06 AM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x5308
Čas spuštění chybující aplikace: 0x0x1db301a7d2c2202
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: 8aab26ce-cecd-416a-974a-3a386d626c39
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/06/2024 08:00:25 AM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x31b0
Čas spuštění chybující aplikace: 0x0x1db30198e127a3e
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: d1e18c6d-6f23-4de3-98cf-25eefde17a63
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/06/2024 07:55:21 AM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x324c
Čas spuštění chybující aplikace: 0x0x1db3018d8ecef3f
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: de6df666-85bc-4406-9422-74db6795f719
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/06/2024 07:50:16 AM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x2d40
Čas spuštění chybující aplikace: 0x0x1db30182322528f
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: fa62de7a-8689-449a-9fb4-e9aa497a8d23
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/06/2024 07:45:11 AM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x4af8
Čas spuštění chybující aplikace: 0x0x1db30176d59f516
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: 0ee7a18b-378a-4320-b7ae-2bded4370f9f
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (11/05/2024 07:25:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.

Error: (11/04/2024 04:29:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.

Error: (11/04/2024 07:02:51 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.

Error: (11/04/2024 07:02:44 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience.

Error: (11/04/2024 07:02:33 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NMPJ99VJBWV-Microsoft.YourPhone.

Error: (11/01/2024 01:06:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NMPJ99VJBWV-Microsoft.YourPhone.

Error: (11/01/2024 01:06:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.

Error: (11/01/2024 07:52:47 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.


CodeIntegrity:
===============
Date: 2024-11-07 11:51:00
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\WPS\1.23.177.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements.

Date: 2024-11-07 09:58:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\WPS\1.23.177.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: LENOVO MCCN28WW 08/01/2024
Motherboard: LENOVO LNVNB161216
Processor: 13th Gen Intel(R) Core(TM) i5-13420H
Percentage of memory in use: 58%
Total physical RAM: 16107.87 MB
Available physical RAM: 6626.72 MB
Total Virtual: 17195.87 MB
Available Virtual: 3178.88 MB

==================== Drives ================================

Drive c: (Windows-SSD) (Fixed) (Total:474.72 GB) (Free:290.68 GB) (Model: UMIS RPJTJ512MKP1QDY) (Protected) NTFS

\\?\Volume{d23afa31-d40d-4aee-991e-f7e5177d5ecb}\ (WINRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.27 GB) NTFS
\\?\Volume{4f28fc82-1592-454a-8f08-06ae7af33f6a}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: C57D1BB9)

Partition: GPT.

==================== End of Addition.txt =======================

Ahoj,
nevidim tam vaznejsie problemy - preventivne prescanuj s Adwcleanerom

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build: 03-04-2024
# Database: 2024-10-23.4 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 11-11-2024
# Duration: 00:00:04
# OS: Windows 11 (Build 22631.4317)
# Scanned: 32103
# Detected: 5


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

Preinstalled.LenovoIMController Folder C:\ProgramData\LENOVO\IMCONTROLLER
Preinstalled.LenovoIMController Folder C:\Users\cisla\AppData\Local\LENOVO\IMCONTROLLER
Preinstalled.LenovoIMController Folder C:\Windows\LENOVO\IMCONTROLLER
Preinstalled.LenovoIMController Folder C:\Windows\System32\Tasks\LENOVO\IMCONTROLLER
Preinstalled.LenovoIMController Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Lenovo Dependency Package_is1



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Ještě ... na mě tu začalo vyskakovat tohle...

Najdene polozky v Adwcleaner nechaj zmazat/karantena
Restart
Skontroluj PC s defenderom a MBAM

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 11/11/2024
Scan Time: 12:02 PM
Log File: 616614a8-a01c-11ef-ac42-fc5ceec5741b.json

-Software Information-
Version: 5.2.1.144
Components Version: 1.0.5088
Update Package Version: 1.0.91596
License: Trial

-System Information-
OS: Windows 11 (Build 22631.4391)
CPU: x64
File System: NTFS
User: Leon\cisla

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 214264
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 3 min, 36 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Všude čisto ... a stále to vyskakuje

Vloz oba aktualne logy FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-11-2024 02
Ran by cisla (administrator) on LEON (LENOVO 83A1) (11-11-2024 13:05:26)
Running from C:\Users\cisla\Downloads\FRST64.exe
Loaded Profiles: cisla
Platform: Microsoft Windows 11 Home Version 23H2 22631.4391 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\McAfee\WPS\1.23.177.1\mc-fw-host.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WPS\1.23.177.1\vpn\mc-vpn.exe
(C:\Program Files\McAfee\WPS\1.23.177.1\vpn\mc-vpn.exe ->) (McAfee, LLC -> ) C:\Program Files\McAfee\WPS\1.23.177.1\vpn\Bins\x64\wireguard.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.28801.70.0_x64__cw5n1h2txyewy\WidgetBoard.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.56\msedgewebview2.exe <8>
(drivers\lenovo\UDC\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\24.2.1.44\x64\AppProvisioningPlugin.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_2f053d359177fc47\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_2f053d359177fc47\ipf_helper.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\FnHotkeyUtility.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <20>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(services.exe ->) (Gen Digital Inc. -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_3ea1838906a8645a\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_2f053d359177fc47\ipf_uf.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\lenovo\UDC\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WPS\1.23.177.1\mc-fw-host.exe <2>
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Elevoc Technology Co.,Ltd.) C:\Windows\System32\ElevocInstallDriver\ElevocControlService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.181.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.28801.70.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1871344 2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Canon Toner Status] => C:\Program Files (x86)\Canon\OIPTonerStatus\CnTnrStsTask.exe [2306376 2022-12-22] (CANON INC. -> CANON INC.)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [MicrosoftEdgeAutoLaunch_1AFAB11DD32C917D338A47D084CD5890] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3856464 2024-11-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919312 2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [Akamai NetSession Interface] => C:\Users\cisla\AppData\Local\Akamai\netsession_win.exe [4327744 2012-05-26] (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45227312 2024-10-15] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\MountPoints2: {8b8c9ed9-8148-11ef-af1c-b81ea4ddc728} - "F:\setup.EXE" /AUTORUN
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [831488 2024-09-25] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65096 2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {15D964C3-3B2D-46A0-B571-091FB57980DF} - \Lenovo\ImController\TimeBasedEvents\3d99a3b5-a021-48a3-98a2-1502f96a1b19 -> No File <==== ATTENTION
Task: {35749B48-F69C-4D48-AC3A-98E4A8D4FBD4} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {86EA2F42-8379-4F42-BCDF-28911DDE6B00} - \Lenovo\ImController\TimeBasedEvents\08472a9a-c396-4de0-af97-8647f4def07f -> No File <==== ATTENTION
Task: {A0C46750-2437-4328-8EAA-1EFE31E88B35} - \Lenovo\ImController\TimeBasedEvents\42797ab4-fa3a-403c-9de9-dc04f65232bc -> No File <==== ATTENTION
Task: {A70CFAAD-0B9A-4589-99C6-E4170D6B37E7} - \Lenovo\ImController\TimeBasedEvents\caea50fd-14ab-4332-b90d-858b37737e06 -> No File <==== ATTENTION
Task: {DB7670AF-0D17-481C-815D-9713EF2FBD00} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {C7069CFE-072D-48FF-B56B-D2E5D2D5A0DD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1574856 2024-09-25] (Adobe Inc. -> Adobe Inc.)
Task: {5BC29A20-A368-4D33-8110-EE71AB23D1B5} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [829408 2024-10-15] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {3415EC2B-44FE-4D93-B6D3-42EA229004A1} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5983536 2024-10-15] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "f9720d96-94bc-40f6-a03e-b2a6b9a62f50" --version "6.29.11342" --silent
Task: {ED3149BD-AF18-4FC2-BFED-993DA98BDE5F} - System32\Tasks\CCleanerSkipUAC - cisla => C:\Program Files\CCleaner\CCleaner.exe [39090480 2024-10-15] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {4AA7CFCE-A0E1-43F9-AF0F-8FF29649EC02} - System32\Tasks\Lenovo\Lenovo MigrationAssistant start event task => C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe [291216 2020-11-11] (Lenovo -> )
Task: {4FD40EC7-F709-47BD-BDDE-7BD7ABEBEE84} - System32\Tasks\Lenovo\LenovoNowLauncher => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.exe [3556248 2024-08-27] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/task
Task: {7A5B34A7-08AF-42C2-BBB3-B1C73FD4C586} - System32\Tasks\Lenovo\LenovoNowQuarterlyLaunch => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [2357656 2024-08-27] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/QuarterlyLaunch
Task: {22264729-5BE8-420B-AE94-6FFEF0CFB7B7} - System32\Tasks\Lenovo\LenovoNowTask => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [2357656 2024-08-27] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\$(EventData)
Task: {72C2358E-AD93-4F62-945E-3373CDAB50F3} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\Windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {0D24E881-6C55-4DB0-89C3-9650F94ACF85} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\Windows\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [188656 2024-04-07] (Lenovo -> Lenovo Group Ltd.)
Task: {24D74432-3D42-4A40-8311-97FF712C1B65} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\Windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {5D160576-21B2-4CC4-96C5-AC565E48A525} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {9241E31E-F2CE-4565-8FD0-77454D7E726F} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {BD9849B9-DB96-4FD6-91C9-437409B46DA8} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {C72124B9-317D-4B36-A6A6-411D1E5442DA} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {96CDA3CC-7435-4FB1-82F5-A9AF992EF936} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {EBD51C26-C7B9-4F22-A85B-4B0FDC9C6E06} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {5193500E-C7E5-43FC-8BC6-3F906F4B0AF5} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\3.13.53.0\ScheduleEventAction.exe LenovoBoostAddin.Prompt (No File)
Task: {454A72C7-FD34-4D5A-89E0-D9125B2EF091} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {E7540CDC-5A30-4244-885C-EE32C0479CAF} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {ADCE61E6-EBE9-44D3-9260-5A4B6CEE19C2} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {4230F79E-0195-42CC-A68C-535975B7FBB5} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {981A9B9B-33BF-47C4-83A6-B8E131A193E5} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.0.0.181\x64\IdleScheduleEventAction.exe [143768 2024-11-01] (Lenovo -> )
Task: {96F96B5F-12F9-456A-AF7F-80365CC8A82E} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\ScheduleEventAction.exe [30056 2024-09-12] (Lenovo -> Lenovo)
Task: {49CFA0C6-44DF-4A98-8D03-A515307A097F} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\uninstall.exe [340968 2024-09-12] (Lenovo -> Lenovo)
Task: {14218C10-A1E3-47E8-8260-03EDFB2D081D} - System32\Tasks\McAfee Sustainability => C:\Program Files\McAfee\WPS\1.7.209.1\sustainability\mc-sustainability.exe (No File)
Task: {F4D9AAE6-4F65-436D-8EC1-E29FAEB94A53} - System32\Tasks\McAfee\DAD.WPS.Execute.Updates => "C:\Program Files\McAfee\WPS\1.7.209.1\dad\mc-dad.exe" (No File)
Task: {46F9629D-8EDD-46B8-A4F1-3EF7E5542FF5} - System32\Tasks\McAfee\WPS\McAfee Anti-tracker notification => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {A5DC5534-561A-442D-BCF4-35A2E9F99D5A} - System32\Tasks\McAfee\WPS\McAfee Anti-Tracker Scanner => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {9491E0F3-C995-4FC7-AFCD-ECF6B160D9BF} - System32\Tasks\McAfee\WPS\McAfee Cloud Configuration Check => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {DF2E6879-6C5F-4244-B7FE-FF98B15630F7} - System32\Tasks\McAfee\WPS\McAfee Health Check => C:\Program Files\McAfee\WPS\1.23.177.1\sustainability\mc-sustainability.exe [956640 2024-10-11] (McAfee, LLC -> McAfee, LLC)
Task: {90F9C75B-AD94-4172-B8C4-98A88EFF0F5D} - System32\Tasks\McAfee\WPS\McAfee Hotfix => C:\Program Files\McAfee\wps\1.23.177.1\dad\mc-dad.exe [2649184 2024-10-11] (McAfee, LLC -> McAfee, LLC)
Task: {95B12615-F4F8-4AF6-B42A-422CCFE5A8AC} - System32\Tasks\McAfee\WPS\McAfee Message Check => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {D677F8D5-1099-475F-A29A-433EF2A0C982} - System32\Tasks\McAfee\WPS\McAfee PC Optimizer Task => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {7D2106D1-5DF2-42FC-B760-8C7ED1387618} - System32\Tasks\McAfee\WPS\McAfee restart of PC => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {7DA732E6-771E-49D2-8A75-3A2F8121447F} - System32\Tasks\McAfee\WPS\McAfee Scheduled AV Scan => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {7A7BC14E-1031-444F-B4AD-21CC18B69162} - System32\Tasks\McAfee\WPS\McAfee Scheduled Tracker Remover => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {F3A7C694-A5DA-43B6-94E8-7F4FE1F9993F} - System32\Tasks\McAfee\wps\McAfee Updater => {81A7CB63-BB07-4DAD-8E72-07B3A9BB08E2} C:\Program Files\McAfee\wps\1.23.177.1\mc-update.exe [3306208 2024-10-11] (McAfee, LLC -> McAfee, LLC)
Task: {1BCB0DF5-E4D0-40D2-B8C7-DDD03F450796} - System32\Tasks\McAfee\WPS\McAfee Virus Definition Update => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {9EA35E18-8007-42AB-A5DA-8F2F9EC3BDAA} - System32\Tasks\McAfee\WPS\McAfee Windows Notification Token => \\?\C:\Program Files\McAfee\WPS\1.23.177.1\mc-wns-client\mc-wns-client.exe [902920 2024-10-11] (McAfee, LLC -> )
Task: {53AE99FB-B67C-4F4D-836D-4FF73BFD0977} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28616920 2024-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {FBAD8F62-D821-406C-B587-214DBEF4BD15} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28616920 2024-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {A1FA6A37-92AB-40F4-84AA-D880955D7DF0} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {8419B1CF-801B-431E-B6E9-690566985C52} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-10-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {BAF73232-58D9-4861-85A6-AFAC96FC0C07} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187328 2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {7A8FB9CD-6B79-4001-88B8-C99ABAF22A24} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B0A6C570-B8E0-4D4E-AFA1-E0E6692AACD2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2F73246C-9431-4014-9EDA-D929DDFE5E93} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2E4D8E8F-191E-4552-88C2-B4E3E0C5BA36} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1F230A61-BB47-4B37-9A24-7836E8CF98DF} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1028543237-3615343512-139710770-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671808 2024-11-11] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {A10CA48C-CA32-4ED3-9098-5120278317DF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34368 2024-11-11] (Mozilla Corporation -> Mozilla Foundation)
Task: {B0F51845-E6EB-4765-A6C7-80B56A6DBA60} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209168 2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {018DECF3-FD8B-4F87-95E3-0E8BC2BAB85F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1028543237-3615343512-139710770-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209168 2024-11-11] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{87e90eae-7490-4be5-a2a9-c70cef405e42}: [DhcpNameServer] 217.168.208.20 217.168.208.21
Tcpip\..\Interfaces\{87e90eae-7490-4be5-a2a9-c70cef405e42}\441667D2537486A7D2C6F63616C6E2D616879636F6D6E236A7: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{8a6e0681-3c43-4790-85fb-251b763f7535}: [DhcpNameServer] 150.205.1.3
Tcpip\..\Interfaces\{a230d696-ea94-4d58-a2d0-3bca64a9b8ae}: [NameServer] 172.17.3.1

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\cisla\AppData\Local\Microsoft\Edge\User Data\Default [2024-11-11]
Edge Notifications: Default -> hxxps://csm9hc6071bc73evnf70.enhanceprotocol.co.in
Edge Extension: (Dokumenty Google offline) - C:\Users\cisla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-11-11]
Edge Extension: (Edge relevant text changes) - C:\Users\cisla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-09-25]

FireFox:
========
FF DefaultProfile: rbo8ewqg.default
FF ProfilePath: C:\Users\cisla\AppData\Roaming\Mozilla\Firefox\Profiles\rbo8ewqg.default [2024-11-11]
FF ProfilePath: C:\Users\cisla\AppData\Roaming\Mozilla\Firefox\Profiles\bnucw899.default-release [2024-11-11]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-09-19]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-09-25] (Adobe Inc. -> Adobe Inc.)
R2 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1087792 2024-10-15] (Gen Digital Inc. -> Piriform Software Ltd)
S4 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13861072 2024-10-14] (Microsoft Corporation -> Microsoft Corporation)
S2 DolbyDAXAPI; C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e75a3d1c39bebe3f\DAX3API.exe [2363432 2023-05-18] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 dptftcs; C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_3ea1838906a8645a\ipfsvc.exe [546416 2023-03-30] (Intel Corporation -> Intel Corporation)
R2 ElevocService; C:\Windows\system32\ElevocInstallDriver\ElevocControlService.exe [416536 2023-08-24] (Microsoft Windows Hardware Compatibility Publisher -> Elevoc Technology Co.,Ltd.)
S4 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncHelper.exe [3524624 2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
S2 Intel(R) Platform License Manager Service; C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2024-09-14] (Intel Corporation -> Intel(R) Corporation)
S2 IntelAudioService; C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_6fa60c4b09f4675e\AS\IAS\IntelAudioService.exe [531048 2024-09-14] (Intel Corporation -> Intel)
R2 ipfsvc; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_2f053d359177fc47\ipf_uf.exe [3102784 2024-09-23] (Intel Corporation -> Intel Corporation)
S4 Lenovo Smart Appearance Intelligent Sensing Aware Service; C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaRpcServer.exe [156576 2023-08-14] (Lenovo -> Lenovo)
R2 LenovoFnAndFunctionKeys; C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe [178656 2024-08-21] (Lenovo -> Lenovo)
S2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\LenovoVantageService.exe [34256 2024-09-12] (Lenovo -> Lenovo)
S2 LITSSVC; C:\Windows\System32\LNBITSSvc.exe [1586536 2024-06-10] (Lenovo -> Lenovo)
S4 luminati_net_updater_win_formatfactory_pcfreetime_com; C:\Program Files (x86)\FormatFactory\net_updater64.exe [11520504 2023-12-14] (Bright Data Ltd -> BrightData Ltd.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9424792 2024-11-11] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-11-11] (Malwarebytes Inc. -> Malwarebytes)
R2 mc-fw-host; C:\Program Files\McAfee\WPS\1.23.177.1\mc-fw-host.exe [2583168 2024-10-11] (McAfee, LLC -> McAfee, LLC)
S3 mc-wps-secdashboardservice; C:\Program Files\McAfee\WPS\mok\mc-wps-secdashboardservice.exe [1143600 2024-10-23] (McAfee, LLC -> McAfee, LLC)
S3 mc-wps-update; C:\Program Files\McAfee\wps\1.23.177.1\mc-update.exe [3306208 2024-10-11] (McAfee, LLC -> McAfee, LLC)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [923064 2024-10-31] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.201.1006.0005\OneDriveUpdaterService.exe [3869216 2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
S4 SmartAppearanceAISVC; C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceAIService\SmartAppearanceSVC.exe [87968 2023-08-14] (Lenovo -> Lenovo)
R2 UDCService; C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72432 2024-04-07] (Lenovo -> Lenovo Group Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AcxHdAudio; C:\Windows\System32\drivers\AcxHdAudio.sys [561152 2024-11-11] (Microsoft Windows -> Microsoft Corporation)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [544768 2023-05-26] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [184320 2023-05-26] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [106496 2023-05-26] (Microsoft Corporation) [File not signed]
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [158640 2024-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 fse; C:\Windows\System32\drivers\fse.sys [218592 2024-11-11] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_6f8ae740d22247ce\iaLPSS2_GPIO2_ADL.sys [141288 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_563fbcd35feb69a6\iaLPSS2_I2C_ADL.sys [211432 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_spi_adl.inf_amd64_bdfb46f9ce8fefd9\iaLPSS2_SPI_ADL.sys [162792 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_uart2_adl.inf_amd64_cf101fc7906bfd11\iaLPSS2_UART2_ADL.sys [317016 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\Windows\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_ae922086c6ddc6b8\ipf_acpi.sys [89664 2024-09-23] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_2f053d359177fc47\ipf_cpu.sys [89664 2024-09-23] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_2f053d359177fc47\ipf_lf.sys [504896 2024-09-23] (Intel Corporation -> Intel Corporation)
S3 LenovoDiagnosticsDriver; C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\3.6.0.15\LenovoDiagnosticsDriver.sys [52624 2024-10-27] (Microsoft Windows Hardware Compatibility Publisher -> Lenovo Group Limited (R))
R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [232000 2024-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2024-11-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\DRIVERS\farflt11.sys [234168 2024-11-11] (Malwarebytes Inc. -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [80448 2024-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239568 2024-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [189776 2024-11-11] (Malwarebytes Inc. -> Malwarebytes)
S0 mfeelam; C:\Windows\System32\DRIVERS\mfeelam.sys [19440 2024-10-11] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, LLC)
R0 mfesec; C:\Windows\System32\DRIVERS\mfesec.sys [75912 2024-10-11] (McAfee, LLC -> McAfee, LLC)
S3 polarbear-split-tunneling; C:\Program Files\McAfee\WPS\1.23.177.1\vpn\Drivers\x64\SplitTunnelingDriver.sys [29176 2024-10-11] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 rt68cx21; C:\Windows\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_16d0e5f2b3759518\rt68cx21x64.sys [845256 2024-08-21] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [51192 2024-10-11] (OpenVPN Inc. -> The OpenVPN Project)
S3 vmbusproxy; C:\Windows\system32\drivers\vmbusproxy.sys [94208 2024-09-25] (Microsoft Windows -> )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22104 2024-10-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [606624 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
R3 wintun; C:\Windows\system32\DRIVERS\wintun.sys [29680 2024-11-11] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-11-11 13:05 - 2024-11-11 13:05 - 000000000 ____D C:\Users\cisla\Downloads\FRST-OlderVersion
2024-11-11 12:10 - 2024-11-11 12:10 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\MMC
2024-11-11 12:07 - 2024-11-11 12:07 - 000692356 _____ C:\Windows\system32\perfh005.dat
2024-11-11 12:07 - 2024-11-11 12:07 - 000143226 _____ C:\Windows\system32\perfc005.dat
2024-11-11 12:06 - 2024-11-11 12:06 - 000001227 _____ C:\Users\cisla\Downloads\Malwarebytes Scan Report 2024-11-11 110202.txt
2024-11-11 12:05 - 2024-11-11 13:04 - 000238986 _____ C:\Users\cisla\AppData\LocalLow\e77c6813fac432efe1e878416a08dc9a9a4df959eb3228aa5382dd89fab1a0d1
2024-11-11 12:05 - 2024-11-11 12:37 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\77230261d146292765414c858f8e132b255bc3447940e6c199b716a45626d9c0
2024-11-11 12:05 - 2024-11-11 12:35 - 000059122 _____ C:\Users\cisla\AppData\LocalLow\dd5f29904ff3ee02fe8b859c4baadea613aca8a46478adef06a3b9a7c7002131
2024-11-11 12:05 - 2024-11-11 12:05 - 000000026 _____ C:\Users\cisla\AppData\LocalLow\54655c9b6cf33290ffc0f496aa813f1c5eae0055456bfb592764f7e51bf5edda
2024-11-11 11:58 - 2024-11-11 11:58 - 000234168 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt11.sys
2024-11-11 11:58 - 2024-11-11 11:58 - 000189776 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2024-11-11 10:17 - 2024-11-11 10:17 - 000026650 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-11-11 10:16 - 2024-11-11 10:16 - 000026650 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2024-11-11 09:20 - 2024-11-11 12:59 - 000000000 ____D C:\Users\cisla\AppData\Local\Malwarebytes
2024-11-11 09:20 - 2024-11-11 09:20 - 000002104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-11-11 09:20 - 2024-11-11 09:20 - 000002092 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-11-11 09:19 - 2024-11-11 09:19 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-11-11 09:19 - 2024-11-11 09:19 - 000000000 ____D C:\Program Files\Malwarebytes
2024-11-11 09:18 - 2024-11-11 09:18 - 002744320 _____ (Malwarebytes) C:\Users\cisla\Downloads\MBSetup.exe
2024-11-11 09:12 - 2024-11-11 09:12 - 008790880 _____ (Malwarebytes) C:\Users\cisla\Desktop\adwcleaner.exe
2024-11-11 08:11 - 2024-11-11 08:11 - 000714279 _____ C:\Users\cisla\Downloads\rozhodnutí zadavatele-1.pdf
2024-11-11 06:55 - 2024-11-11 06:55 - 000995787 _____ C:\Users\cisla\Downloads\f2.zip
2024-11-11 06:51 - 2024-11-11 06:51 - 000888572 _____ C:\Users\cisla\Downloads\foto2 (1).zip
2024-11-11 06:50 - 2024-11-11 06:50 - 003604228 _____ C:\Users\cisla\Downloads\foto.zip
2024-11-11 06:50 - 2024-11-11 06:50 - 000888572 _____ C:\Users\cisla\Downloads\foto2.zip
2024-11-11 06:21 - 2024-11-11 09:30 - 000000000 ____D C:\AdwCleaner
2024-11-11 06:21 - 2024-11-11 06:21 - 008790880 _____ (Malwarebytes) C:\Users\cisla\Downloads\AdwCleaner.exe
2024-11-07 11:55 - 2024-11-07 11:55 - 000031434 _____ C:\Users\cisla\Downloads\Addition.txt
2024-11-07 11:54 - 2024-11-11 13:05 - 002400768 _____ (Farbar) C:\Users\cisla\Downloads\FRST64.exe
2024-11-07 11:54 - 2024-11-11 13:05 - 000033031 _____ C:\Users\cisla\Downloads\FRST.txt
2024-11-07 11:54 - 2024-11-11 13:05 - 000000000 ____D C:\FRST
2024-11-07 11:21 - 2024-11-07 11:21 - 000225500 _____ C:\Users\cisla\Downloads\UPO24505468-1.pdf
2024-11-07 11:19 - 2024-11-07 11:19 - 000225500 _____ C:\Users\cisla\Downloads\UPO24505468.pdf
2024-11-07 08:57 - 2024-11-07 08:57 - 044186403 _____ C:\Users\cisla\Downloads\prilohy_170612.zip
2024-11-07 06:32 - 2024-11-07 06:32 - 000507559 _____ C:\Users\cisla\Downloads\3525_241030162213_001-1.pdf
2024-11-07 06:30 - 2024-11-07 06:30 - 000415646 _____ C:\Users\cisla\Downloads\1152420298_1.pdf
2024-11-07 06:29 - 2024-11-07 06:29 - 000069918 _____ C:\Users\cisla\Downloads\priloha_1435411013_0_00201894_dad_0810_2404123568.pdf
2024-11-05 07:01 - 2024-11-05 07:01 - 000636196 _____ C:\Users\cisla\Downloads\12. SP a předlužení.pdf
2024-11-04 07:26 - 2024-11-04 07:26 - 000069952 _____ C:\Users\cisla\Downloads\Faktura 2024-011.pdf
2024-11-01 09:00 - 2024-11-01 09:00 - 000096399 _____ C:\Users\cisla\Downloads\DPHDP3-9004210743-20241101-085601.pdf
2024-11-01 09:00 - 2024-11-01 09:00 - 000004581 _____ C:\Users\cisla\Downloads\DPHDP3-9004210743-20241101-085601-28567081-potvrzeni.p7s
2024-10-31 07:52 - 2024-10-31 07:52 - 000038918 _____ C:\Users\cisla\Downloads\potvrzen.pdf
2024-10-31 06:56 - 2024-10-31 06:56 - 004840546 _____ C:\Users\cisla\Downloads\KS_Truhlářství Grohman_nábytek ZŠ.pdf
2024-10-31 06:30 - 2024-10-31 06:30 - 000614689 _____ C:\Users\cisla\Downloads\1152419739_1-1.pdf
2024-10-31 06:28 - 2024-10-31 06:28 - 000614689 _____ C:\Users\cisla\Downloads\1152419739_1.pdf
2024-10-31 06:26 - 2024-10-31 06:26 - 000507559 _____ C:\Users\cisla\Downloads\3525_241030162213_001.pdf
2024-10-29 17:51 - 2024-11-11 11:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-10-29 10:21 - 2024-10-30 07:20 - 000000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2024-10-29 08:52 - 2024-10-29 08:52 - 001192693 _____ C:\Users\cisla\Downloads\HP_Závazná objednávka automobilu_248320323.pdf
2024-10-29 08:52 - 2024-10-29 08:52 - 000830817 _____ C:\Users\cisla\Downloads\Výše skutečně uhrazené ceny na VZMR_Automobil obecní policie.pdf
2024-10-29 07:49 - 2024-10-29 07:49 - 000054704 _____ C:\Users\cisla\Downloads\P2_Izolace terasy - NOVÁ KONSTRUKCE.pdf
2024-10-29 07:47 - 2024-10-29 07:47 - 000248374 _____ C:\Users\cisla\Downloads\Rozpocet Ropicka_B.pdf
2024-10-29 07:41 - 2024-10-29 07:41 - 011768068 _____ C:\Users\cisla\Downloads\HP_HAPASTAV_SML_3_2024.pdf
2024-10-29 07:39 - 2024-10-29 07:39 - 003855006 _____ C:\Users\cisla\Downloads\HP_HAPASTAV_SML_D1_3_2024.pdf
2024-10-29 07:38 - 2024-10-29 07:38 - 000797006 _____ C:\Users\cisla\Downloads\HP_HAPASTAV_PP_3_2024.pdf
2024-10-29 07:37 - 2024-10-29 07:37 - 000214589 _____ C:\Users\cisla\Downloads\VZMR_3_2024_HAPASTAV_Výše skutečně uhrazené ceny za plnění veřejné zakázky.pdf
2024-10-27 10:57 - 2024-10-27 10:58 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Publisher Building Blocks
2024-10-27 10:57 - 2024-10-27 10:57 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Publisher
2024-10-25 08:58 - 2024-10-25 08:58 - 000512753 _____ C:\Users\cisla\Downloads\Priloha c. 4_Soupis praci_23102024.xlsx
2024-10-25 08:56 - 2024-10-25 08:57 - 000284382 _____ C:\Users\cisla\Downloads\Vyzva k podani nabidek a ZD.pdf
2024-10-25 06:46 - 2024-10-25 06:46 - 002393090 _____ C:\Users\cisla\Downloads\slevomat-cz-voucher-.pdf
2024-10-25 06:46 - 2024-10-25 06:46 - 000321570 _____ C:\Users\cisla\Downloads\slevomat-cz-voucher-omladnete-o-par-let-pomoci-neinvazivniho-osetreni-7581276120D-684 (1).pdf
2024-10-25 06:41 - 2024-10-25 06:41 - 002405530 _____ C:\Users\cisla\Downloads\slevomat-cz-voucher-omladnete-o-par-let-pomoci-neinvazivniho-osetreni-7581276120D-684.pdf
2024-10-25 06:36 - 2024-10-25 06:36 - 000555415 _____ C:\Users\cisla\Downloads\Faktura_CZ_24523911.pdf
2024-10-25 05:55 - 2024-10-25 05:55 - 000006088 _____ C:\Users\cisla\Downloads\platba_e3cf4345-8cf2-43a6-9012-d02e2042ddc4.pdf
2024-10-25 05:54 - 2024-10-25 05:54 - 000165454 _____ C:\Users\cisla\Downloads\DPHKH1-0007951264-20241025-065407.pdf
2024-10-25 05:53 - 2024-10-25 05:53 - 000099996 _____ C:\Users\cisla\Downloads\DPHDP3-0007951264-20241025-065258.pdf
2024-10-25 05:40 - 2024-10-25 05:40 - 000617591 _____ C:\Users\cisla\Downloads\1152418927_1.pdf
2024-10-23 09:23 - 2024-10-23 09:34 - 000000298 _____ C:\Users\cisla\AppData\LocalLow\2d80f582381c44c865fd9e8e27ac844e6c7b00b0d3c0e9b69a55b369e1853383
2024-10-23 09:23 - 2024-10-23 09:23 - 000032382 _____ C:\Users\cisla\AppData\LocalLow\897f03072020ffe6a861429e41e5228659e097df2818ea8037a4c5bd8426ccb5
2024-10-23 09:16 - 2024-10-23 09:16 - 000434337 _____ C:\Users\cisla\Downloads\SCAN0050.PDF
2024-10-22 15:24 - 2024-10-22 15:24 - 000000000 ____D C:\Program Files\Common Files\McAfee
2024-10-22 10:55 - 2024-10-22 10:55 - 000012536 _____ C:\Users\cisla\Downloads\19329-Makeblock-mTiny-Discover-kit-mapy-Muj-svet-a-Hledani-pokladu.webp
2024-10-22 10:55 - 2024-10-22 10:55 - 000012536 _____ C:\Users\cisla\Documents\19329-Makeblock-mTiny-Discover-kit-mapy-Muj-svet-a-Hledani-pokladu.webp
2024-10-22 10:29 - 2024-10-23 09:34 - 000000298 _____ C:\Users\cisla\AppData\LocalLow\3a320a53e298c65994944589b86f741f340445dd273095332097e58569de6ed3
2024-10-22 10:29 - 2024-10-23 09:23 - 000031358 _____ C:\Users\cisla\AppData\LocalLow\273dc04f270a99f4cf11c8d5c1cddf0d76d577a37fce623991fca84d3f429553
2024-10-22 10:25 - 2024-10-22 10:25 - 000584123 _____ C:\Users\cisla\Downloads\2964466841.pdf
2024-10-22 10:23 - 2024-10-22 10:23 - 000072514 _____ C:\Users\cisla\Downloads\DAVÍDEK-DKE_DBP_2102400196.pdf
2024-10-22 10:21 - 2024-10-22 10:21 - 000085865 _____ C:\Users\cisla\Downloads\SKM_C250i24052813200-2.pdf
2024-10-22 08:03 - 2024-10-22 08:03 - 000073465 _____ C:\Users\cisla\Downloads\Dobropis.pdf
2024-10-22 06:52 - 2024-10-22 06:52 - 000234652 _____ C:\Users\cisla\Downloads\Faktura_0014102396_4594607400_2440421339.PDF
2024-10-22 06:47 - 2024-10-22 06:47 - 000131815 _____ C:\Users\cisla\Downloads\Plán_záloh_160005808432.PDF
2024-10-22 06:45 - 2024-10-22 06:45 - 000133414 _____ C:\Users\cisla\Downloads\Plán_záloh_160005808433.PDF
2024-10-22 06:36 - 2024-10-22 06:36 - 000212756 _____ C:\Users\cisla\Downloads\Příloha.zip
2024-10-22 06:21 - 2024-10-22 06:21 - 000016733 _____ C:\Users\cisla\Downloads\ROZVRH 2024 - 2025 (1).xlsx
2024-10-21 10:41 - 2024-10-21 10:41 - 009431843 _____ C:\Users\cisla\Downloads\prilohy_68202.zip
2024-10-21 10:07 - 2024-10-21 10:07 - 000062721 _____ C:\Users\cisla\Downloads\BYP00056_20241011_123229.pdf
2024-10-18 14:26 - 2024-10-18 14:26 - 000001147 _____ C:\Users\cisla\Desktop\Format Factory.lnk
2024-10-18 14:26 - 2024-10-18 14:26 - 000000000 ____D C:\Users\cisla\Documents\FormatFactory
2024-10-18 14:26 - 2024-10-18 14:26 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2024-10-18 14:26 - 2024-10-18 14:26 - 000000000 ____D C:\Users\cisla\AppData\Local\FTMod
2024-10-18 14:25 - 2024-10-18 14:25 - 000000000 ____D C:\Users\cisla\AppData\Local\BrightData
2024-10-18 14:25 - 2024-10-18 14:25 - 000000000 ____D C:\ProgramData\BrightData
2024-10-18 14:24 - 2024-10-18 14:26 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2024-10-18 14:24 - 2024-10-18 14:24 - 000000000 ____D C:\Users\cisla\AppData\Local\Free_Time_Co.,_Ltd
2024-10-18 14:23 - 2024-10-18 14:23 - 106377944 _____ (Free Time Co., Ltd) C:\Users\cisla\Downloads\FFSetup5.17.0.0.exe
2024-10-18 14:14 - 2024-10-18 14:14 - 000021931 _____ C:\Users\cisla\AppData\LocalLow\6d35d70a850742924fdb91e6ac1540211fd6eef16d2dfe8914f44ccc3d1e1e02
2024-10-18 14:14 - 2024-10-18 14:14 - 000000026 _____ C:\Users\cisla\AppData\LocalLow\9e1b02abbea81c645b66e7a00689c2ddc61b7f0bb24a7daf6e00030cac52a8ff
2024-10-18 07:02 - 2024-10-18 07:02 - 000375618 _____ C:\Users\cisla\Downloads\Prodejní Faktura 6282452817.pdf
2024-10-18 07:01 - 2024-10-18 07:01 - 000384152 _____ C:\Users\cisla\Downloads\Prodejní Dobropis 4282450319.pdf
2024-10-18 07:00 - 2024-10-18 07:00 - 000287072 _____ C:\Users\cisla\Downloads\20240379-1.pdf
2024-10-17 12:20 - 2024-10-17 12:20 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\3fb6d720096196411101d21270342b1f43e708eda77d8822863d5ad971a73b3f
2024-10-15 07:33 - 2024-10-15 07:33 - 048293704 _____ C:\Users\cisla\Downloads\winmfscanutilityv12102.exe
2024-10-15 07:33 - 2024-10-15 07:33 - 000000000 ____D C:\Users\cisla\Downloads\winmfscanutilityv12102
2024-10-15 07:33 - 2023-06-12 14:37 - 000096000 _____ C:\Windows\SysWOW64\CNC1772DMF.TBL
2024-10-15 07:33 - 2023-06-12 14:37 - 000015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCAMF.dll
2024-10-15 07:31 - 2024-10-15 07:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon
2024-10-15 07:31 - 2024-10-15 07:33 - 000000000 ____D C:\Program Files (x86)\Canon
2024-10-15 07:31 - 2024-10-15 07:31 - 007052068 _____ C:\Users\cisla\Downloads\tonerstatusver240 (1).zip
2024-10-15 07:31 - 2024-10-15 07:31 - 000000000 ____D C:\Users\cisla\Downloads\tonerstatusver240 (1)
2024-10-15 07:30 - 2024-10-15 07:30 - 007052068 _____ C:\Users\cisla\Downloads\tonerstatusver240.zip
2024-10-15 07:14 - 2024-10-15 07:14 - 000265663 _____ C:\Users\cisla\Downloads\SCAN0038-1.PDF
2024-10-15 07:13 - 2024-10-22 08:41 - 000070660 _____ C:\Users\cisla\Downloads\Dobropis D000000001.pdf
2024-10-15 07:06 - 2024-10-15 07:06 - 000265663 _____ C:\Users\cisla\Downloads\SCAN0038.PDF
2024-10-15 06:55 - 2024-10-15 06:55 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\a9d5dbc6fa031988e824f007c9be4f83d2ab57722b13acb82a9bd7ee1de51d22
2024-10-15 06:38 - 2024-10-15 06:38 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\aef7c0398d83c51e42ec35b5e51c9fe2a3d0c8e069ce3f87cc51ba1f73913fed
2024-10-15 06:35 - 2024-10-15 06:35 - 000002264 _____ C:\Users\cisla\AppData\LocalLow\79b72b34444899f1645d439fea93f46ef9d7a5c253221d14f620bb67dfedc700
2024-10-15 06:27 - 2024-10-15 06:27 - 074217560 _____ C:\Users\cisla\Downloads\GPlus_UFRII_Driver_V310_32_64_00 (1).exe
2024-10-15 06:19 - 2024-10-15 06:19 - 000000000 ____D C:\Users\cisla\AppData\Local\ElevatedDiagnostics
2024-10-15 06:13 - 2024-10-15 06:13 - 000000000 ____D C:\Users\cisla\Downloads\GPlus_UFRII_Driver_V310_32_64_00
2024-10-15 06:12 - 2024-10-15 06:12 - 074217560 _____ C:\Users\cisla\Downloads\GPlus_UFRII_Driver_V310_32_64_00.exe
2024-10-15 05:40 - 2024-10-15 05:40 - 029474912 _____ C:\Users\cisla\Downloads\win-laser-nw-dsu-v120.exe
2024-10-15 05:40 - 2024-10-15 05:40 - 000000000 ____D C:\Users\cisla\Downloads\win-laser-nw-dsu-v120
2024-10-15 05:30 - 2024-10-29 09:15 - 000361369 _____ C:\Users\cisla\AppData\LocalLow\ef3390dd2e6ef53ee598801f406dfec0b8978f7a96472d3f820b5f1c9dd0e7dc
2024-10-15 05:30 - 2024-10-29 09:15 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\a9cf3f2ef3c89bf853665387bd161e0f85c168ed2581a48005f5cb5fd536e58a
2024-10-15 05:30 - 2024-10-29 09:13 - 000012335 _____ C:\Users\cisla\AppData\LocalLow\9db3974e903d97c7a2e997d706a34003edf0f53a5705d4374ddcf7a451013d07
2024-10-15 05:27 - 2024-11-11 12:01 - 000025478 _____ C:\Users\cisla\AppData\LocalLow\a158987a3e8b6705f0fa2bc6a86e9aee70e41f0841beb36e86fd8cbd32e21f42
2024-10-15 05:27 - 2024-10-15 05:27 - 000000026 _____ C:\Users\cisla\AppData\LocalLow\06d31d806875ecaef7220645e1a41decd64bb0650d5a7d29e691cb8bc6cab36d
2024-10-15 05:24 - 2024-10-15 05:24 - 000479605 _____ C:\Users\cisla\Downloads\NAB-025-24-07462.pdf
2024-10-14 08:40 - 2019-05-20 05:15 - 000026001 _____ C:\Users\cisla\Documents\MUD_system_prohlaseni.pdf
2024-10-14 08:38 - 2024-11-11 12:11 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\1200a7146be44de5d7e4933bba92fbf62e200cae64fc37f56462371d1d9f7ebc
2024-10-14 08:38 - 2024-11-11 12:10 - 000032382 _____ C:\Users\cisla\AppData\LocalLow\dbb17a6be212ef685ba97fbba526dd2acf51c2e342e255cd4905a3ef0d0cc239
2024-10-14 08:30 - 2024-10-14 08:30 - 000319276 _____ C:\Users\cisla\Downloads\Vyjádření o existenci SEK (296848-24)-1.pdf
2024-10-14 08:27 - 2024-10-14 08:27 - 000319276 _____ C:\Users\cisla\Downloads\Vyjádření o existenci SEK (296848-24).pdf
2024-10-14 08:27 - 2024-10-14 08:27 - 000272393 _____ C:\Users\cisla\Downloads\Situační výkres (296848-24).pdf
2024-10-14 08:15 - 2024-11-11 10:18 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\c128e33a9d0746f9675aa6bfa95c9e8ed1e9dd7821e0d9f8303aee95d2127b63
2024-10-14 08:15 - 2024-11-11 10:17 - 000215392 _____ C:\Users\cisla\AppData\LocalLow\56d00d88f258c6b9d5eafaa2ad53cf54b204f1342ea5a3a062980e0752dc4571
2024-10-14 08:03 - 2024-10-14 08:03 - 000109785 _____ C:\Users\cisla\Downloads\Sdělení TELIN - 1100171746.pdf
2024-10-14 08:02 - 2024-10-14 08:02 - 000491185 _____ C:\Users\cisla\Downloads\Situační výkres TPS - 0201791455.pdf
2024-10-14 08:02 - 2024-10-14 08:02 - 000490397 _____ C:\Users\cisla\Downloads\Situační výkres TELIN - 1100171746.pdf
2024-10-14 08:02 - 2024-10-14 08:02 - 000108501 _____ C:\Users\cisla\Downloads\Sdělení TPS - 0201791455.pdf
2024-10-14 08:01 - 2024-10-14 08:01 - 000182449 _____ C:\Users\cisla\Downloads\Podmínky ochrany sítě ČEZd-1.pdf
2024-10-14 08:01 - 2024-10-14 08:01 - 000141044 _____ C:\Users\cisla\Downloads\Sdělení ČEZd - 0102226987.pdf
2024-10-14 08:00 - 2024-10-14 08:00 - 000710497 _____ C:\Users\cisla\Downloads\Situační výkres ČEZd - 0102226987.pdf
2024-10-14 07:59 - 2024-10-14 07:59 - 000490722 _____ C:\Users\cisla\Downloads\Situační výkres ICT - 0700902333.pdf
2024-10-14 07:59 - 2024-10-14 07:59 - 000109837 _____ C:\Users\cisla\Downloads\Sdělení ICT - 0700902333.pdf
2024-10-14 07:37 - 2024-10-14 07:37 - 000472165 _____ C:\Users\cisla\Downloads\Situační výkres TELIN - 1100171724.pdf
2024-10-14 07:36 - 2024-10-14 07:36 - 000109600 _____ C:\Users\cisla\Downloads\Sdělení TELIN - 1100171724.pdf
2024-10-14 07:34 - 2024-10-14 07:34 - 000472954 _____ C:\Users\cisla\Downloads\Situační výkres TPS - 0201791432.pdf
2024-10-14 07:33 - 2024-10-14 07:33 - 000108269 _____ C:\Users\cisla\Downloads\Sdělení TPS - 0201791432.pdf
2024-10-14 07:32 - 2024-10-14 07:32 - 000472649 _____ C:\Users\cisla\Downloads\Situační výkres ICT - 0700902311.pdf
2024-10-14 07:31 - 2024-10-14 07:31 - 000109597 _____ C:\Users\cisla\Downloads\Sdělení ICT - 0700902311.pdf
2024-10-14 07:28 - 2024-10-14 07:28 - 000775640 _____ C:\Users\cisla\Downloads\Situační výkres ČEZd - 0102226957.pdf
2024-10-14 07:28 - 2024-10-14 07:28 - 000140869 _____ C:\Users\cisla\Downloads\Sdělení ČEZd - 0102226957.pdf
2024-10-14 07:27 - 2024-10-14 07:27 - 000182449 _____ C:\Users\cisla\Downloads\Podmínky ochrany sítě ČEZd.pdf
2024-10-14 06:47 - 2024-11-11 10:06 - 000883731 _____ C:\Users\cisla\AppData\LocalLow\35ec8d41791c76c2d05dc6a57e43bcbbb169f70b337c7482440f818e7be1f37a
2024-10-14 06:47 - 2024-11-11 10:06 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\05f2a2e91a42453168eb85ad8e2fad3c54f0b463b70edca88e2ab4c571fe91a5
2024-10-14 06:47 - 2024-10-29 10:27 - 000000130 _____ C:\Users\cisla\AppData\LocalLow\fc18fb27e101ce15521508b9f0ffba6ed4c603de490a2eca8b1bed3acfb3658d
2024-10-14 06:47 - 2024-10-14 06:47 - 000011216 _____ C:\Users\cisla\AppData\LocalLow\afc07dade3268a7e5b6bd06d2348351514f31c3c11faa0bd3029eb09bc20a838
2024-10-14 06:41 - 2024-09-14 17:26 - 002115152 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 002115152 _____ C:\Windows\system32\vulkaninfo.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 001673296 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 001673296 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2024-10-14 06:41 - 2024-09-14 17:26 - 001462872 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 001462872 _____ C:\Windows\system32\vulkan-1.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 001305280 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 001305280 _____ C:\Windows\SysWOW64\vulkan-1.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000783824 _____ (Intel) C:\Windows\system32\libvpl.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000668456 _____ (Intel) C:\Windows\SysWOW64\libvpl.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000538304 _____ C:\Windows\system32\ze_tracing_layer.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000510032 _____ C:\Windows\system32\ze_loader.dll
2024-10-14 06:41 - 2024-09-14 17:26 - 000334928 _____ C:\Windows\system32\ze_validation_layer.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 027983848 _____ (Intel Corporation) C:\Windows\system32\mfxplugin64_hw.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 020707920 _____ (Intel Corporation) C:\Windows\SysWOW64\mfxplugin32_hw.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000979152 _____ (Intel Corporation) C:\Windows\system32\libmfxhw64.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000737992 _____ (Intel Corporation) C:\Windows\SysWOW64\libmfxhw32.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000621928 _____ (Intel Corporation) C:\Windows\system32\intel_gfx_api-x64.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000562336 _____ C:\Windows\SysWOW64\IntelControlLib32.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000480816 _____ (Intel Corporation) C:\Windows\SysWOW64\intel_gfx_api-x86.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000328448 _____ C:\Windows\system32\ControlLib.dll
2024-10-14 06:40 - 2024-09-14 17:26 - 000274416 _____ C:\Windows\SysWOW64\ControlLib32.dll
2024-10-14 06:37 - 2024-10-14 06:37 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-10-14 06:31 - 2024-10-14 06:31 - 000479210 _____ C:\Users\cisla\Downloads\1152417441_1-1.pdf
2024-10-14 06:30 - 2024-10-14 06:30 - 000479210 _____ C:\Users\cisla\Downloads\1152417441_1.pdf
2024-10-14 06:29 - 2024-10-14 06:29 - 000281731 _____ C:\Users\cisla\Downloads\Vyt_sklad_22-1_Zlončice.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-11-11 13:05 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SystemTemp
2024-11-11 13:04 - 2024-09-25 06:59 - 000000000 ____D C:\Users\cisla\AppData\Local\CrashDumps
2024-11-11 12:22 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-11-11 12:14 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-11-11 12:07 - 2024-03-14 14:51 - 001629502 _____ C:\Windows\system32\PerfStringBackup.INI
2024-11-11 12:07 - 2022-05-07 06:22 - 000000000 ____D C:\Windows\INF
2024-11-11 12:00 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\AppReadiness
2024-11-11 11:58 - 2024-10-03 06:33 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-11-11 11:58 - 2024-09-30 06:50 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-11-11 11:58 - 2024-03-14 14:37 - 000001623 _____ C:\Windows\system32\config\VSMIDK
2024-11-11 11:58 - 2022-05-25 20:05 - 000498088 _____ C:\Windows\system32\FNTCACHE.DAT
2024-11-11 11:58 - 2022-05-25 20:05 - 000012288 ___SH C:\DumpStack.log.tmp
2024-11-11 11:58 - 2022-05-25 20:05 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ___SD C:\Windows\system32\UNP
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ___RD C:\Windows\PrintDialog
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SysWOW64\setup
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\SystemResources
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\ShellExperiences
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\Sgrm
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\setup
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\oobe
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\HealthAttestationClient
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\Dism
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\appraiser
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\ShellExperiences
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\ShellComponents
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\ServiceState
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\DiagTrack
2024-11-11 11:58 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\bcastdvr
2024-11-11 11:58 - 2022-05-07 06:17 - 000786432 _____ C:\Windows\system32\config\BBI
2024-11-11 11:58 - 2022-05-07 06:17 - 000000000 ____D C:\Windows\servicing
2024-11-11 11:56 - 2024-09-25 06:57 - 000000000 ____D C:\Users\cisla\AppData\Local\D3DSCache
2024-11-11 11:56 - 2022-05-25 20:05 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-11-11 10:20 - 2022-05-07 06:25 - 000077312 _____ (Khronos Group) C:\Windows\SysWOW64\opencl.dll
2024-11-11 10:20 - 2022-05-07 06:24 - 000118784 _____ (Khronos Group) C:\Windows\system32\opencl.dll
2024-11-11 10:20 - 2022-05-07 06:17 - 000000000 ____D C:\Windows\CbsTemp
2024-11-11 10:13 - 2024-09-29 17:43 - 000000000 ____D C:\Program Files\CCleaner
2024-11-11 10:11 - 2024-09-30 06:27 - 000000000 ____D C:\Users\cisla\Documents\zaloha_cc
2024-11-11 10:09 - 2024-09-29 17:50 - 000002776 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-11-11 10:09 - 2024-09-25 06:59 - 000003126 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1028543237-3615343512-139710770-1001
2024-11-11 09:59 - 2024-09-29 17:50 - 000002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-11-11 09:59 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-11-11 09:31 - 2024-09-30 06:50 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-11-11 09:30 - 2024-09-25 06:58 - 000000000 ____D C:\Users\cisla\AppData\Local\Lenovo
2024-11-11 09:30 - 2024-03-14 14:42 - 000000000 ____D C:\Windows\system32\Tasks\Lenovo
2024-11-11 09:30 - 2024-03-14 14:42 - 000000000 ____D C:\ProgramData\Lenovo
2024-11-11 09:30 - 2024-03-14 14:41 - 000000000 ____D C:\Windows\Lenovo
2024-11-11 09:20 - 2022-05-07 06:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-11-11 08:51 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\system32\AppLocker
2024-11-11 07:26 - 2024-09-25 08:15 - 000000000 ____D C:\Users\cisla\Desktop\2024
2024-11-11 07:05 - 2024-09-25 06:57 - 000000000 ____D C:\Users\cisla\AppData\Local\Packages
2024-11-11 06:14 - 2022-05-25 20:06 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-11-11 06:13 - 2022-05-25 20:06 - 000003640 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-11-11 06:13 - 2022-05-25 20:06 - 000003516 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-11-07 11:09 - 2024-09-30 06:12 - 000005149 _____ C:\Users\cisla\Desktop\Léky.odt
2024-11-04 07:47 - 2024-10-07 08:51 - 000000000 ____D C:\Záloha Profit
2024-11-04 07:47 - 2024-09-29 18:03 - 000000000 ____D C:\ProgramData\firebird
2024-10-31 07:36 - 2024-10-07 06:25 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Excel
2024-10-30 09:26 - 2024-09-30 07:07 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\UProof
2024-10-30 07:52 - 2024-09-25 06:16 - 000000000 ____D C:\Users\cisla
2024-10-30 07:51 - 2024-03-14 14:52 - 000000000 ____D C:\Windows\system32\ElevocConfig
2024-10-30 07:50 - 2024-09-25 07:04 - 000000000 ____D C:\ProgramData\Package Cache
2024-10-30 07:16 - 2024-09-30 07:07 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Word
2024-10-29 09:14 - 2024-10-07 09:17 - 000003584 _____ C:\Windows\storelibdebug.txt
2024-10-29 07:45 - 2024-10-07 07:04 - 000000000 ____D C:\Stavitel
2024-10-27 10:41 - 2024-09-30 07:07 - 000000000 ____D C:\Users\cisla\AppData\Roaming\Microsoft\Office
2024-10-24 15:52 - 2024-09-30 08:01 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-10-23 11:20 - 2022-05-07 06:24 - 000000000 ____D C:\Windows\LiveKernelReports
2024-10-23 09:32 - 2022-05-25 20:05 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-10-20 10:39 - 2024-03-14 14:42 - 000000000 ____D C:\Program Files\Microsoft Office
2024-10-20 10:39 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-10-18 15:09 - 2024-09-29 17:43 - 000000666 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2024-10-16 18:30 - 2024-09-29 17:43 - 000003936 _____ C:\Windows\system32\Tasks\CCleaner Update
2024-10-16 18:30 - 2024-09-29 17:43 - 000003380 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2024-10-14 06:42 - 2024-03-14 14:53 - 000000000 ____D C:\Windows\TempInst

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2024 02
Ran by cisla (11-11-2024 13:06:19)
Running from C:\Users\cisla\Downloads
Microsoft Windows 11 Home Version 23H2 22631.4391 (X64) (2024-09-25 05:08:40)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1028543237-3615343512-139710770-500 - Administrator - Disabled)
cisla (S-1-5-21-1028543237-3615343512-139710770-1001 - Administrator - Enabled) => C:\Users\cisla
DefaultAccount (S-1-5-21-1028543237-3615343512-139710770-503 - Limited - Disabled)
Guest (S-1-5-21-1028543237-3615343512-139710770-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1028543237-3615343512-139710770-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 19.008.20071 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601102}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Canon MF Scan Utility (HKLM-x32\...\Canon_MF_Scan_Utility) (Version: 1.21.0.2 - CANON INC.)
CCleaner (HKLM\...\CCleaner) (Version: 6.29 - Piriform)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
Lenovo Migration Assistant (HKLM\...\Lenovo Migration Assistant_is1) (Version: 2.1.4.6 - Lenovo)
Lenovo Now (HKLM-x32\...\Lenovo Now) (Version: 4.0.2.39 - Lenovo Group Ltd.)
Lenovo Smart Appearance Components (HKLM-x32\...\{13E9CBF6-6E32-40D0-874A-018DFEFB0851}_is1) (Version: 2.3.54.0 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.2.24.0 - Lenovo Group Ltd.)
Malwarebytes version 5.2.1.144 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.2.1.144 - Malwarebytes)
McAfee (HKLM\...\McAfee.WPS) (Version: 1.23.177.1 - McAfee, LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 130.0.2849.80 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 130.0.2849.56 - Microsoft Corporation)
Microsoft Office Professional Plus 2021 - cs-cz (HKLM\...\ProPlus2021Retail - cs-cz) (Version: 16.0.18025.20160 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.201.1006.0005 - Microsoft Corporation)
Microsoft OneNote - cs-cz (HKLM\...\OneNoteFreeRetail - cs-cz) (Version: 16.0.18025.20160 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33816 (HKLM-x32\...\{77169412-f642-45e7-b533-0c6f48de12f9}) (Version: 14.40.33816.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33816 (HKLM\...\{5904914B-9FC8-44C2-AE48-5C7F30A603EC}) (Version: 14.40.33816 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33816 (HKLM\...\{560D2DA4-096E-4868-B22A-DA6418FDE6FB}) (Version: 14.40.33816 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 132.0.1 (x64 cs)) (Version: 132.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 131.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18025.20126 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18025.20160 - Microsoft Corporation) Hidden
PROFIT 2024.05 (HKLM\...\{670A9A20-E29D-40C3-9937-2AFF89C3AC82}_is1) (Version: - LPsoft)
RTS Stavitel+ 2015 (HKLM-x32\...\RTS Stavitel +_is1) (Version: 2015 - RTS, a.s.)
Toner Status (HKLM-x32\...\{6E9A516A-6189-4502-80FD-51BE28989CEB}) (Version: 2.4.0.0 - CANON INC.)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.975 - McAfee, LLC)

Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-11] (INTEL CORP) [Startup Task]
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.24.2820.0_x64__rz1tebttyb220 [2024-10-07] (Dolby Laboratories)
Dolby Audio -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudio_3.30201.210.0_x64__rz1tebttyb220 [2024-09-25] (Dolby Laboratories)
Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.23306.1292.0_x64__8wekyb3d8bbwe [2024-10-09] (Microsoft Corporation)
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2409.29.0_x64__k1h2ywk1493x8 [2024-10-15] (LENOVO INC.)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.6.12.0_x64__5grkq8ppsgwt4 [2024-09-30] (LENOVO INC) [Startup Task]
Lenovo Smart Appearance -> C:\Program Files\WindowsApps\E0469640.SmartAppearance_2.3.54.0_x64__5grkq8ppsgwt4 [2024-10-09] (LENOVO INC) [Startup Task]
McAfee -> C:\Program Files\McAfee\wps\1.23.177.1 [2024-10-22] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-09-30] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_54.20907.567.0_x64__8wekyb3d8bbwe [2024-10-09] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-11-11] (Microsoft Windows)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1028543237-3615343512-139710770-1001_Classes\CLSID\{efd4e8f5-6e0e-9405-4ec4-9c673447cfee}\localserver32 -> C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\IntelligentSensingAwareService\LsaToast.exe (Lenovo -> Lenovo)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2024-01-04] (Free Time) [File not signed]
ContextMenuHandlers1: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.23.177.1\mc-ctxmnu.dll [2024-10-11] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-11-11] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2024-01-04] (Free Time) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.201.1006.0005\FileSyncShell64.dll [2024-11-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-11-11] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.23.177.1\mc-ctxmnu.dll [2024-10-11] (McAfee, LLC -> McAfee, LLC)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============
==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mc-fw-host => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-10-08] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 06:24 - 2024-11-11 10:55 - 000000822 _____ C:\Windows\system32\drivers\etc\hosts

2024-10-29 10:21 - 2024-10-30 07:20 - 000000374 _____ C:\Windows\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1028543237-3615343512-139710770-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\cisla\AppData\Local\Lenovo\DataMigration\wallpaper.jpeg
DNS Servers: 172.17.3.1 - 217.168.208.20
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
McAfee VPN: TAP-Windows Adapter V9 -> tap0901.sys
McAfee_VPN: PolarBear Tunnel -> wintun.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
Wi-Fi: Realtek 8822CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys

vms_vsf: Hyper-V Virtual Switch Extension Filter
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Canon Toner Status"
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{8DD79B9C-86E4-491A-B9F3-E7F28FCF0538}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B357E34A-3626-4F36-9476-8D37189A32D3}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1105.3082.1600_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EA1E0EBF-4F8A-4852-B49B-C6BABB4BCCFC}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\MigrationAssistant.exe (Lenovo -> )
FirewallRules: [{F4441E86-4D7C-45B5-94AE-819C3A5DC56B}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\MigrationAssistant.exe (Lenovo -> )
FirewallRules: [{FBDDB594-EE1F-4188-BB6F-1EE07B5AEFA3}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe (Lenovo -> )
FirewallRules: [{C9A32E25-75C6-460C-81E2-11754ABE1F0C}] => (Allow) C:\Program Files\Lenovo\Lenovo Migration Assistant\Lenovo Migration Assistant Srv.exe (Lenovo -> )
FirewallRules: [{02DD97F8-2811-4351-BBCD-5C974FA90AD7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BED302EB-9898-48F7-A01B-3F5234D9DD06}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{E0620E1B-CC12-44E6-B3E7-B4AC18426B99}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{94688B3B-AFE5-4325-8E27-349BB09CCA1A}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7BE31168-5368-457E-9AE3-855AE832B526}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{02D655D8-36B4-4719-BDAC-298D7DF37E66}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{3EF28706-29FF-42A8-858A-096DFECAECAF}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.56\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

04-11-2024 07:02:11 Windows Update
04-11-2024 07:02:11 Windows Update
07-11-2024 09:57:12 Windows Update
11-11-2024 06:31:52 Windows Update
11-11-2024 06:31:58 Windows Update
11-11-2024 07:53:26 Instalační služba modulů systému Windows
11-11-2024 09:30:49 AdwCleaner_BeforeCleaning_11/11/2024_09:30:48

==================== Faulty Device Manager Devices ============
Name: Intel(R) Dynamic Tuning Technology Updater Component
Description: Intel(R) Dynamic Tuning Technology Updater Component
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: ========================

Application errors:
==================
Error: (11/11/2024 01:03:55 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x3a4c
Čas spuštění chybující aplikace: 0x0x1db3431c842c56d
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: fb3ca76d-b3ef-407e-af49-c62092398089
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/11/2024 12:58:49 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x63c
Čas spuštění chybující aplikace: 0x0x1db3431119ae8b6
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: 16d30e54-9a9a-4bb1-8f59-5598affc8373
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/11/2024 12:53:44 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0xf08
Čas spuštění chybující aplikace: 0x0x1db34305b5b547e
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: 6457aae5-d0aa-4ee3-bd94-d549011da6f2
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/11/2024 12:48:38 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x3b8c
Čas spuštění chybující aplikace: 0x0x1db342fa54e8dfe
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: d90df607-07cb-4578-bc68-5b80e6f61763
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/11/2024 12:43:32 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x162c
Čas spuštění chybující aplikace: 0x0x1db342eef2b50bd
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: 474002b3-8430-4eea-a78f-01a98125d899
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/11/2024 12:38:24 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x2fa8
Čas spuštění chybující aplikace: 0x0x1db342e374efc7c
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: d3ddbbd9-6e64-4f58-9c2c-6b5c122e353b
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/11/2024 12:33:17 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x3e10
Čas spuštění chybující aplikace: 0x0x1db342d806d93ce
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: 476fd243-c52f-428b-a5ed-c3d08717e929
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (11/11/2024 12:28:11 PM) (Source: Application Error) (EventID: 1000) (User: LEON)
Description: Název chybující aplikace: Bubbles.scr, verze: 10.0.22621.3527, časové razítko: 0xbaca1bc3
Název chybujícího modulu: igd12um64xel.dll, verze: 31.0.101.5333, časové razítko: 0x65d59823
Kód výjimky: 0xc00000fd
Posun chyby: 0x0000000000139287
ID chybujícího procesu: 0x0x438c
Čas spuštění chybující aplikace: 0x0x1db342cc9cf810c
Cesta k chybující aplikaci: C:\Windows\system32\Bubbles.scr
Cesta k chybujícímu modulu: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_66034d73dd0364ba\igd12um64xel.dll
ID zprávy: b666bfd2-93c9-4012-aa36-4e0ed4b09779
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (11/11/2024 12:24:58 PM) (Source: DCOM) (EventID: 10010) (User: LEON)
Description: Server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/11/2024 12:21:18 PM) (Source: NetBT) (EventID: 4311) (User: )
Description: Inicializace se nezdařila, protože ovladač zařízení nemohl být vytvořen.
K identifikaci rozhraní, jehož inicializace se nezdařila, lze použít
řetězec %2. Je reprezentován adresou MAC tohoto rozhraní nebo globálně
jedinečným identifikátorem (GUID), pokud nemohlo rozhraní NetBT
získat adresu MAC podle identifikátoru GUID. Pokud nebyla k dispozici adresa MAC
ani identifikátor GUID, je řetězec reprezentován názvem zařízení clusteru.

Error: (11/11/2024 12:21:18 PM) (Source: NetBT) (EventID: 4311) (User: )
Description: Inicializace se nezdařila, protože ovladač zařízení nemohl být vytvořen.
K identifikaci rozhraní, jehož inicializace se nezdařila, lze použít
řetězec %2. Je reprezentován adresou MAC tohoto rozhraní nebo globálně
jedinečným identifikátorem (GUID), pokud nemohlo rozhraní NetBT
získat adresu MAC podle identifikátoru GUID. Pokud nebyla k dispozici adresa MAC
ani identifikátor GUID, je řetězec reprezentován názvem zařízení clusteru.

Error: (11/11/2024 12:21:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba McAfee WebAdvisor byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1 milisekund: Restartovat službu.

Error: (11/11/2024 12:21:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Universal Device Client Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (11/11/2024 12:21:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Lokátor vzdáleného volání procedur (RPC) byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (11/11/2024 12:21:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Adaptér výkonu rozhraní WMI byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 120000 milisekund: Restartovat službu.

Error: (11/11/2024 12:21:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Graphics Command Center Service byla neočekávaně ukončena. Tento stav nastal již 1krát.


Windows Defender:
================
Date: 2024-11-11 09:53:31
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {48EBBD7F-4156-4AD2-88ED-DB04890E8D2E}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

CodeIntegrity:
===============
Date: 2024-11-11 12:10:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchos

Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >> •Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Scan Tool (x64) Version: 10-11-2024 02
Ran by cisla (11-11-2024 14:10:33) Run:1
Running from C:\Users\cisla\Desktop
Loaded Profiles: cisla
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\...\MountPoints2: {8b8c9ed9-8148-11ef-af1c-b81ea4ddc728} - "F:\setup.EXE" /AUTORUN
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [831488 2024-09-25] (Microsoft Windows -> Microsoft Corporation)
Task: {15D964C3-3B2D-46A0-B571-091FB57980DF} - \Lenovo\ImController\TimeBasedEvents\3d99a3b5-a021-48a3-98a2-1502f96a1b19 -> No File <==== ATTENTION
Task: {35749B48-F69C-4D48-AC3A-98E4A8D4FBD4} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {86EA2F42-8379-4F42-BCDF-28911DDE6B00} - \Lenovo\ImController\TimeBasedEvents\08472a9a-c396-4de0-af97-8647f4def07f -> No File <==== ATTENTION
Task: {A0C46750-2437-4328-8EAA-1EFE31E88B35} - \Lenovo\ImController\TimeBasedEvents\42797ab4-fa3a-403c-9de9-dc04f65232bc -> No File <==== ATTENTION
Task: {A70CFAAD-0B9A-4589-99C6-E4170D6B37E7} - \Lenovo\ImController\TimeBasedEvents\caea50fd-14ab-4332-b90d-858b37737e06 -> No File <==== ATTENTION
Task: {DB7670AF-0D17-481C-815D-9713EF2FBD00} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Edge Notifications: Default -> hxxps://csm9hc6071bc73evnf70.enhanceprotocol.co.in



EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
HKU\S-1-5-21-1028543237-3615343512-139710770-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b8c9ed9-8148-11ef-af1c-b81ea4ddc728} => removed successfully
"HKU\S-1-5-21-1028543237-3615343512-139710770-1001\Control Panel\Desktop\\SCRNSAVE.EXE" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{15D964C3-3B2D-46A0-B571-091FB57980DF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{15D964C3-3B2D-46A0-B571-091FB57980DF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\3d99a3b5-a021-48a3-98a2-1502f96a1b19" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{35749B48-F69C-4D48-AC3A-98E4A8D4FBD4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35749B48-F69C-4D48-AC3A-98E4A8D4FBD4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Monitor" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{86EA2F42-8379-4F42-BCDF-28911DDE6B00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86EA2F42-8379-4F42-BCDF-28911DDE6B00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\08472a9a-c396-4de0-af97-8647f4def07f" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A0C46750-2437-4328-8EAA-1EFE31E88B35}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0C46750-2437-4328-8EAA-1EFE31E88B35}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\42797ab4-fa3a-403c-9de9-dc04f65232bc" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A70CFAAD-0B9A-4589-99C6-E4170D6B37E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A70CFAAD-0B9A-4589-99C6-E4170D6B37E7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\TimeBasedEvents\caea50fd-14ab-4332-b90d-858b37737e06" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DB7670AF-0D17-481C-815D-9713EF2FBD00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB7670AF-0D17-481C-815D-9713EF2FBD00}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
"Edge Notifications" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12693688 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 1884057 B
Edge => 0 B
Firefox => 217974177 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 10508 B
systemprofile32 => 10508 B
LocalService => 15446 B
NetworkService => 15446 B
cisla => 27643118 B

RecycleBin => 9280832393 B
EmptyTemp: => 8.9 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 14:10:53 ====

Malo by byt cisto

Zdá se že dobrý. Moc děkuji!!

Rado sa stalo