VIRY.CZ

Dobrý den,
prosím o pomoc. Když pustím internet, tak se mi stránky extrémně pomalu načítají. Po spuštění notebooku se navíc prakticky okamžitě rozjede chlazení a pracuje neustále naplno. Log přikládám níže. Moc děkuji. Petr


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-02-2025
Ran by motoc (administrator) on DESKTOP-RC8GTKU (FUJITSU CLIENT COMPUTING LIMITED LIFEBOOK A359) (15-02-2025 21:03:08)
Running from C:\Users\motoc\Desktop\FRST64.exe
Loaded Profiles: motoc
Platform: Microsoft Windows 11 Home Version 23H2 22631.4890 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\AntiTrack\x86\ATTray.exe
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe ->) (Avast Software s.r.o. -> Avast Software) C:\Program Files\Avast Software\SecureLine VPN\WireGuard\wireguardtun.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.1301.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\133.0.3065.59\msedgewebview2.exe <8>
(DriverStore\FileRepository\cui_dch.inf_amd64_405d2b89ed51239d\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_405d2b89ed51239d\igfxEM.exe
(explorer.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\BreachGuard\bgui.exe <4>
(explorer.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe <4>
(explorer.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe <4>
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\AntiTrack\x86\ATServiceHost.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\BreachGuard\bgsvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (FUJITSU CLIENT COMPUTING LIMITED -> Fujitsu Client Computing Limited) C:\Windows\System32\DriverStore\FileRepository\fuj02e3.inf_amd64_922627d7b8e63cb3\fuj02e3-utility.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_dd349ca1e8d98184\LMS.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_405d2b89ed51239d\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_f1d17c336f913b5a\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_f1d17c336f913b5a\IntelCpHeciSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\updater-ws.exe
(services.exe ->) (pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\ws.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f043f909bedcd504\RtkAudUService64.exe <2>
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2506.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.235.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.1301.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_f043f909bedcd504\RtkAudUService64.exe [1369624 2021-10-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [427816 2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\...\Run: [TuneupUI.exe] => C:\Program Files\Avast Software\Cleanup\TuneupUI.exe [6676264 2024-12-17] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\...\Run: [Avast BreachGuard] => C:\Program Files\Avast Software\BreachGuard\bgui.exe [8062248 2024-11-19] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM-x32\...\Run: [AvastAntiTrack] => C:\Program Files\Avast Software\AntiTrack\x86\ATTray.exe [240936 2025-02-05] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\motoc\AppData\Local\Microsoft\Teams\Update.exe [2594000 2025-02-02] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\MountPoints2: {c4cf76d1-0c64-11ee-b716-f8ac65c34b4f} - "E:\HonorSuiteOnlineInstaller.exe"
HKLM\...\Print\Monitors\PDF Architect 7 Monitor: C:\WINDOWS\system32\spool\DRIVERS\x64\pdf architect_pdfpmon_v.4.12.26.3.dll [932984 2020-09-08] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [196096 2023-06-06] (pdfforge GmbH) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\133.0.6943.99\Installer\chrmstp.exe [2025-02-13] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2024-03-31]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\motoc\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2021-06-08]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2025-02-11]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {057A23A7-8EC7-4647-9337-4CBA4A58E231} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2024-12-18] (Adobe Inc. -> Adobe Inc.)
Task: {92041C6E-FECB-4659-897E-881EDEB030F0} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [8400680 2024-12-16] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {DAFB0574-3FFA-4AAA-B80F-5CB73C33E7D0} - System32\Tasks\Avast Software\Avast BreachGuard Crash Reporter => C:\Program Files\Avast Software\BreachGuard\AvBugReport.exe [5977384 2024-11-19] (Avast Software s.r.o. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 135 --path "C:\ProgramData\Avast Software\BreachGuard\log" --logpath "C:\ProgramData\Avast Software\BreachGuard\log" --configpath "C:\Program Files\Avast Software\BreachGuard\Setup" --programpath "C:\Program Files\Avast Software\BreachGuard" --guid 359102fc-0 (the data entry has 26 more characters).
Task: {74E5C8CA-CFE1-4FE8-B3F1-13D1C17DC497} - System32\Tasks\Avast Software\Avast BreachGuard Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-bg\icarus.exe [8199464 2024-10-28] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {022D9FB7-FFB6-4DE7-9D0B-15037CAFA8DA} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [5979944 2024-12-17] (Avast Software s.r.o. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup" --configpath "C:\ProgramData\Avast Software\Cleanup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\Cle (the data entry has 53 more characters).
Task: {DEB682E2-6A5C-4638-AFD7-95921CA0BF09} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [8289064 2024-12-04] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {6A6DB389-80DF-4F6B-8F9C-2EF0EB772AEF} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5214504 2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {63171BA8-5A05-4E85-9081-79D669C23A34} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [6077736 2025-02-06] (Avast Software s.r.o. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramDat (the data entry has 80 more characters).
Task: {5AABC514-D436-4F46-BADE-7E5EF36BBCC9} - System32\Tasks\Avast Software\Avast SecureLine VPN Emergency Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [3954984 2025-02-06] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {36F471A7-71DA-443D-BF2E-6578A253A745} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [8289064 2025-01-30] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {55E65B52-A202-400A-AC7A-F06300B92160} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2564904 2024-11-19] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {D97E7956-3B39-44CC-A5F2-A6CFEA5475CE} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem134.0.6985.0{226279DD-3D36-40BE-8586-383BE0D6495E} => C:\Program Files (x86)\Google\GoogleUpdater\134.0.6985.0\updater.exe [5672544 2025-02-12] (Google LLC -> Google LLC)
Task: {8DA5E508-74E9-4989-82E0-862F6AFE9267} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {1640285A-4EF3-438F-94D6-C13BEDC71A50} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {3B750AE7-1485-4569-AB97-2B3A23DC6AD0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {480602D0-E21E-4DF3-9A40-417F562FD044} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {24D80356-0478-4A97-98E1-6853CEDA3786} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UIEOrchestrator => C:\WINDOWS\system32\UIEOrchestrator.exe [336824 2025-01-30] (Microsoft Windows -> )
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E3631CA2-1062-4637-BDEF-3BF95DFBFD5C} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-167618358-2509036446-3095998357-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [683072 2025-02-08] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {9427F181-B295-4A3D-A324-FE90124D7903} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-02-08] (Mozilla Corporation -> Mozilla Foundation)
Task: {C274AC4C-FC7C-42F0-92AA-E38AF8784912} - System32\Tasks\OneDrive Startup Task-S-1-5-21-167618358-2509036446-3095998357-1001 => C:\Users\motoc\AppData\Local\Microsoft\OneDrive\25.005.0112.0003\OneDriveLauncher.exe [447032 2025-02-05] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{061e9c54-a237-4923-b964-fe0f5dc97be0}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{41766173-7453-6f66-7477-617265415357}: [NameServer] 100.126.0.1
Tcpip\..\Interfaces\{4e5693c0-d379-4b1d-b61a-0c2f8248bdb0}: [NameServer] 100.124.140.1
Tcpip\..\Interfaces\{befcbffa-4dff-4aef-a7ab-3205c368580c}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{befcbffa-4dff-4aef-a7ab-3205c368580c}: [DhcpDomain] lan
Tcpip\..\Interfaces\{befcbffa-4dff-4aef-a7ab-3205c368580c}\84F4E4F42502D4167696364302C4964756025374: [DhcpNameServer] 192.168.98.86

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\motoc\AppData\Local\Microsoft\Edge\User Data\Default [2025-02-02]
Edge Extension: (Dokumenty Google offline) - C:\Users\motoc\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-12]
Edge Extension: (Edge relevant text changes) - C:\Users\motoc\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

FireFox:
========
FF DefaultProfile: 9s0l49fw.default
FF ProfilePath: C:\Users\motoc\AppData\Roaming\Mozilla\Firefox\Profiles\1vc37api.default-release-1 [2025-02-15]
FF Homepage: Mozilla\Firefox\Profiles\1vc37api.default-release-1 -> hxxps://www.webnode.com/cs/login
FF ProfilePath: C:\Users\motoc\AppData\Roaming\Mozilla\Firefox\Profiles\9s0l49fw.default [2021-08-22]
FF ProfilePath: C:\Users\motoc\AppData\Roaming\Mozilla\Firefox\Profiles\yjd9ab2z.default-release-1616182874953 [2025-02-02]
FF Homepage: Mozilla\Firefox\Profiles\yjd9ab2z.default-release-1616182874953 -> hxxps://moto-racing8.cms.webnode.cz/
FF Notifications: Mozilla\Firefox\Profiles\yjd9ab2z.default-release-1616182874953 -> hxxps://www.eva.cz; hxxps://idm.de; hxxps://drive.google.com; hxxps://aukro.cz; hxxps://www.4camping.cz; hxxps://www.slevomat.cz; hxxps://www.ceskyraj.com; hxxps://www.instagram.com
FF HKLM\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Extension: (PDF Architect 7 Creator) - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi [2019-10-02]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-01-29] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.18 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.19 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.20 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.21 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)

Chrome:
=======
CHR Profile: C:\Users\motoc\AppData\Local\Google\Chrome\User Data\Default [2025-02-11]
CHR Extension: (Dokumenty Google offline) - C:\Users\motoc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\motoc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-01-12]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2024-12-18] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7381288 2025-01-25] (Avast Software s.r.o. -> AVAST Software)
R2 Avast BreachGuard Service; C:\Program Files\Avast Software\BreachGuard\bgsvc.exe [8750376 2024-11-19] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [778536 2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2372904 2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1229608 2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastATServiceHost; C:\Program Files\Avast Software\AntiTrack\x86\ATServiceHost.exe [240936 2025-02-05] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2021-06-02] (Avast Software s.r.o. -> AVAST Software)
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [18960168 2024-12-17] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 FBIOSDRVService; C:\WINDOWS\System32\DriverStore\FileRepository\fbiosdrv.inf_amd64_786576a02cd0bf13\fbiosdrv-service.exe [154688 2024-03-28] (FUJITSU CLIENT COMPUTING LIMITED -> FUJITSU CLIENT COMPUTING LIMITED)
R2 Fuj02e3DriverUtilityService; C:\WINDOWS\System32\DriverStore\FileRepository\fuj02e3.inf_amd64_922627d7b8e63cb3\fuj02e3-utility.exe [177760 2024-03-28] (FUJITSU CLIENT COMPUTING LIMITED -> Fujitsu Client Computing Limited)
R3 PDF Architect 7; C:\Program Files\PDF Architect 7\ws.exe [2579752 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 7 Creator; C:\Program Files\PDF Architect 7\creator\common\creator-ws.exe [692008 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 7 Update Service; C:\Program Files\PDF Architect 7\updater-ws.exe [1832232 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [13032232 2025-02-06] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [2909208 2022-05-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [128376 2022-05-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [235088 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [383056 2025-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [296016 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [84560 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [28280 2024-11-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [28728 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [275024 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [550992 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [98360 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [69712 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [955960 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1424952 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [204344 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [53904 2021-03-19] (AVAST Software s.r.o. -> The OpenVPN Project)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [381488 2025-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [85776 2025-02-06] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
R3 aswWintun; C:\WINDOWS\System32\drivers\aswWintun.sys [40832 2024-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
R3 aswWireGuard; C:\WINDOWS\System32\drivers\aswWireguard.sys [174864 2024-11-14] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [File not signed]
R3 FBIOSDRV; C:\WINDOWS\System32\DriverStore\FileRepository\fbiosdrv.inf_amd64_786576a02cd0bf13\FBIOSDRV.sys [58536 2024-03-28] (FUJITSU CLIENT COMPUTING LIMITED -> FUJITSU CLIENT COMPUTING LIMITED)
R3 fuj02e3; C:\WINDOWS\System32\DriverStore\FileRepository\fuj02e3.inf_amd64_922627d7b8e63cb3\fuj02e3.sys [60112 2024-03-28] (FUJITSU CLIENT COMPUTING LIMITED -> Fujitsu Client Computing Limited)
R3 GabiAcpi; C:\WINDOWS\System32\drivers\GabiAcpi.sys [47840 2021-08-30] (FUJITSU CLIENT COMPUTING LIMITED -> Fujitsu Client Computing Limited)
R3 iaLPSS2_GPIO2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_skl.inf_amd64_2a35efc43f1a612e\iaLPSS2_GPIO2_ICL.sys [132872 2020-04-27] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_skl.inf_amd64_363c7132639e12a6\iaLPSS2_I2C_ICL.sys [200456 2020-04-27] (Intel Corporation -> Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [48536 2022-05-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [438544 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [90384 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-02-15 21:03 - 2025-02-15 21:04 - 000027646 _____ C:\Users\motoc\Desktop\FRST.txt
2025-02-15 21:02 - 2025-02-15 21:03 - 000000000 ____D C:\FRST
2025-02-15 19:41 - 2025-02-15 19:41 - 002403840 _____ (Farbar) C:\Users\motoc\Desktop\FRST64.exe
2025-02-13 17:05 - 2025-02-13 17:05 - 000727012 _____ C:\WINDOWS\system32\perfh005.dat
2025-02-13 17:05 - 2025-02-13 17:05 - 000151244 _____ C:\WINDOWS\system32\perfc005.dat
2025-02-13 17:01 - 2025-02-13 17:01 - 000488008 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-02-11 19:06 - 2025-02-11 19:06 - 000000000 ____D C:\WINDOWS\Panther
2025-02-11 18:59 - 2025-02-11 18:59 - 000000714 _____ C:\Users\Public\Desktop\PDFCreator.lnk
2025-02-11 18:59 - 2025-02-11 18:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2025-02-08 07:44 - 2025-02-11 19:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-02-05 22:07 - 2025-02-11 18:59 - 000003164 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-167618358-2509036446-3095998357-1001
2025-02-05 17:55 - 2025-02-05 17:57 - 000000000 ____D C:\Users\motoc\AppData\Local\Avast AntiTrack
2025-02-05 17:55 - 2025-02-05 17:55 - 000001217 _____ C:\Users\Public\Desktop\Avast AntiTrack.lnk
2025-02-05 17:55 - 2025-02-05 17:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast AntiTrack
2025-02-02 20:22 - 2025-02-02 20:22 - 000002414 _____ C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams classic (work or school).lnk
2025-01-30 19:06 - 2025-01-30 19:06 - 000027135 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-01-30 19:05 - 2025-01-30 19:05 - 000027135 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-01-20 21:36 - 2025-01-20 21:36 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2025-01-17 21:24 - 2025-02-15 19:54 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-01-17 21:24 - 2025-02-15 19:54 - 000003374 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d717fd41048f01
2025-01-17 21:24 - 2025-02-15 19:54 - 000003062 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-167618358-2509036446-3095998357-1001
2025-01-17 21:24 - 2025-02-15 19:54 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-167618358-2509036446-3095998357-1001
2025-01-17 21:24 - 2025-02-15 19:54 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2025-01-17 21:24 - 2025-02-13 19:52 - 000003542 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-01-17 21:24 - 2025-02-13 17:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-01-17 21:24 - 2025-02-08 18:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-01-17 21:24 - 2025-01-17 21:24 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2025-01-17 21:24 - 2025-01-17 21:24 - 000011433 _____ C:\WINDOWS\diagerr.xml
2025-01-17 21:24 - 2025-01-17 21:24 - 000000020 ___SH C:\Users\motoc\ntuser.ini
2025-01-17 21:24 - 2025-01-17 21:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\Vidmore
2025-01-17 21:24 - 2025-01-17 21:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2025-01-17 21:24 - 2025-01-17 21:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2025-01-17 21:23 - 2025-02-13 17:05 - 001718028 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-01-17 21:20 - 2025-02-02 19:50 - 000316200 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-01-17 21:20 - 2025-01-17 21:20 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network
2025-01-17 21:19 - 2025-01-17 21:19 - 000000000 ____D C:\WINDOWS\system32\config\BFS
2025-01-17 21:18 - 2025-02-13 17:01 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-01-17 21:07 - 2025-01-17 21:18 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Crypto
2025-01-17 21:07 - 2025-01-17 21:07 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\SystemCertificates
2025-01-17 21:07 - 2025-01-17 21:07 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Network
2025-01-17 21:05 - 2025-01-17 21:18 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2025-01-17 21:04 - 2025-01-17 21:25 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Windows
2025-01-17 21:04 - 2025-01-17 21:25 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Spelling
2025-01-17 21:04 - 2025-01-17 21:24 - 000000000 ____D C:\Users\motoc
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Šablony
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Soubory cookie
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Poslední
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Okolní tiskárny
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Okolní síť
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Nabídka Start
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Dokumenty
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Documents\Obrázky
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Documents\Hudba
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Documents\Filmy
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\Data aplikací
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2025-01-17 21:04 - 2025-01-17 21:04 - 000000000 _SHDL C:\Users\motoc\AppData\Local\Data aplikací
2025-01-17 21:01 - 2025-01-17 21:05 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2025-01-17 20:59 - 2025-02-13 17:01 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-01-17 20:59 - 2025-02-02 19:49 - 000000000 ____D C:\WINDOWS\InboxApps
2025-01-17 20:59 - 2025-01-17 20:59 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2025-01-17 20:51 - 2025-01-17 20:51 - 000060462 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-01-17 20:49 - 2025-01-17 20:49 - 000060462 _____ C:\WINDOWS\system32\ctac.json
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\WINDOWS\addins
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\Program Files\Reference Assemblies
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\Program Files\MSBuild
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2025-01-17 20:44 - 2025-01-17 20:44 - 000000000 ____D C:\Program Files (x86)\MSBuild
2025-01-17 20:30 - 2025-01-17 20:30 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2025-01-17 18:39 - 2025-02-11 19:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-01-17 18:39 - 2025-02-08 18:00 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-01-17 18:39 - 2025-01-17 18:39 - 000002230 _____ C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox — anonymní prohlížení.lnk
2025-01-17 18:39 - 2025-01-17 18:39 - 000001061 _____ C:\Users\Public\Desktop\Firefox.lnk
2025-01-16 21:06 - 2025-01-16 21:06 - 000147377 _____ C:\Users\motoc\Desktop\Daňové potvrzení za rok 2024.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-02-15 21:00 - 2020-09-08 21:16 - 000000000 ____D C:\Users\motoc\Documents\PR-Racing
2025-02-15 20:55 - 2022-02-11 18:21 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-02-15 20:54 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-02-15 20:29 - 2020-09-09 19:22 - 000000000 ____D C:\Users\motoc\AppData\Local\CrashDumps
2025-02-15 20:29 - 2020-09-08 21:30 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Word
2025-02-15 20:29 - 2020-09-08 21:30 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Šablony
2025-02-15 19:39 - 2020-11-24 21:39 - 000000000 ____D C:\Users\motoc\AppData\Local\D3DSCache
2025-02-15 18:55 - 2020-09-08 21:06 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Excel
2025-02-15 18:51 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-02-15 18:49 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2025-02-15 17:42 - 2023-01-17 05:12 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-02-15 17:42 - 2023-01-17 05:12 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-02-14 20:13 - 2021-06-02 20:09 - 000000000 ____D C:\Users\motoc\AppData\Local\Avast Software
2025-02-13 19:41 - 2020-09-08 21:30 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Proof
2025-02-13 17:33 - 2025-01-12 12:41 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-02-13 17:33 - 2025-01-12 12:41 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-02-13 17:33 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-02-13 17:32 - 2021-03-19 16:05 - 000000000 ____D C:\ProgramData\Package Cache
2025-02-13 17:17 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2025-02-13 17:05 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2025-02-13 17:02 - 2020-09-08 19:20 - 000000000 __SHD C:\Users\motoc\IntelGraphicsProfiles
2025-02-13 17:01 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-13 17:01 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ServiceState
2025-02-13 17:01 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-02-13 17:01 - 2022-05-07 06:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-02-13 17:01 - 2021-03-13 12:35 - 000012288 ___SH C:\DumpStack.log.tmp
2025-02-13 17:01 - 2020-09-08 19:23 - 000000000 ____D C:\ProgramData\Avast Software
2025-02-12 18:04 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-02-12 17:48 - 2020-09-09 16:30 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 17:46 - 2020-09-09 16:29 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 19:03 - 2022-05-05 17:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2025-02-11 19:03 - 2022-05-05 17:13 - 000000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2025-02-11 19:00 - 2024-10-02 20:19 - 000001379 _____ C:\Users\Public\Desktop\Skype.lnk
2025-02-11 19:00 - 2024-10-02 20:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2025-02-11 18:59 - 2020-09-08 21:08 - 000000000 ____D C:\Program Files\PDFCreator
2025-02-11 18:43 - 2021-06-29 18:44 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Teams
2025-02-11 18:43 - 2021-06-29 18:44 - 000000000 ____D C:\Users\motoc\AppData\Local\SquirrelTemp
2025-02-11 18:43 - 2020-09-08 21:06 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Office
2025-02-09 21:40 - 2022-10-13 18:44 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-02-09 21:40 - 2022-10-13 18:44 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2025-02-05 22:07 - 2021-03-13 12:15 - 000002377 _____ C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-02-05 17:55 - 2021-03-19 16:05 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2025-02-05 17:55 - 2020-09-08 19:24 - 000000000 ____D C:\Program Files\Avast Software
2025-02-02 19:52 - 2023-03-21 19:59 - 000000000 ____D C:\Users\motoc\AppData\Local\AvastAntiTrackPremium
2025-02-02 19:52 - 2020-09-08 19:20 - 000000000 ____D C:\Users\motoc\AppData\Local\Packages
2025-02-02 19:51 - 2022-05-07 06:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-02-02 19:51 - 2020-09-08 19:28 - 000002088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2025-02-02 19:51 - 2020-09-08 19:28 - 000002076 _____ C:\Users\Public\Desktop\Avast Premium Security.lnk
2025-02-02 19:51 - 2020-09-08 19:24 - 000383056 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\UUS
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-02-02 19:49 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-01-30 19:09 - 2022-05-07 06:25 - 000077312 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2025-01-30 19:09 - 2022-05-07 06:24 - 000118784 _____ (Khronos Group) C:\WINDOWS\system32\opencl.dll
2025-01-25 17:44 - 2020-10-25 11:12 - 000275024 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-01-25 17:44 - 2020-09-17 19:53 - 000053048 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2025-01-25 17:44 - 2020-09-08 19:24 - 001424952 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000955960 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000550992 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000381488 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000296016 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000235088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000098360 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000084560 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000069712 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-01-25 17:44 - 2020-09-08 19:24 - 000028728 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-01-20 21:37 - 2020-09-08 19:22 - 000000000 ___RD C:\Users\motoc\OneDrive
2025-01-18 19:17 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-01-18 19:08 - 2020-09-08 19:15 - 000000000 ____D C:\ProgramData\Packages
2025-01-18 19:07 - 2020-09-30 14:44 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2025-01-18 19:06 - 2020-09-08 19:22 - 000000000 ____D C:\Users\motoc\AppData\Local\PlaceholderTileLogoFolder
2025-01-17 21:40 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
2025-01-17 21:36 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\appcompat
2025-01-17 21:25 - 2020-09-08 19:20 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-01-17 21:24 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Windows NT
2025-01-17 21:21 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-01-17 21:19 - 2022-05-07 06:24 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2025-01-17 21:18 - 2024-08-19 19:05 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor 24
2025-01-17 21:18 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2025-01-17 21:18 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2025-01-17 21:18 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\spool
2025-01-17 21:18 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-01-17 21:18 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-01-17 21:18 - 2022-01-08 21:29 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2025-01-17 21:18 - 2021-08-11 18:07 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2025-01-17 21:18 - 2020-09-09 15:11 - 000000000 ____D C:\Program Files\UNP
2025-01-17 21:18 - 2020-09-09 05:03 - 000000000 ____D C:\WINDOWS\OEM
2025-01-17 21:18 - 2020-09-09 04:39 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2025-01-17 21:18 - 2020-09-08 21:46 - 000000000 ____D C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2025-01-17 21:18 - 2020-09-08 21:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2025-01-17 21:18 - 2020-09-08 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoner Media Explorer 6
2025-01-17 21:18 - 2020-09-08 21:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 7
2025-01-17 21:18 - 2020-09-08 21:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2025-01-17 21:18 - 2020-09-08 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2025-01-17 21:18 - 2020-09-08 20:57 - 000000000 ____D C:\WINDOWS\SHELLNEW
2025-01-17 21:18 - 2020-09-08 20:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2025-01-17 21:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2025-01-17 21:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2025-01-17 21:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2025-01-17 21:14 - 2022-05-07 06:28 - 000000000 ____D C:\WINDOWS\Setup
2025-01-17 21:09 - 2022-05-07 06:24 - 000000000 __RHD C:\Users\Public\Libraries
2025-01-17 21:04 - 2022-05-07 06:24 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2025-01-17 20:59 - 2022-05-07 11:14 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-01-17 20:59 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\SysWOW64\cs
2025-01-17 20:59 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\system32\cs
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\WUModels
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemApps
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\id-ID
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\schemas
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Provisioning
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\IME
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\BrowserCore
2025-01-17 20:59 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\System
2025-01-17 20:57 - 2022-05-07 11:14 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2025-01-17 20:57 - 2022-05-07 11:14 - 000024383 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2025-01-17 20:57 - 2022-05-07 06:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2025-01-17 20:57 - 2022-05-07 06:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2025-01-17 20:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\OCR
2025-01-17 20:44 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2025-01-17 20:44 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\MUI
2025-01-17 20:43 - 2022-05-07 11:14 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2025-01-17 20:43 - 2022-05-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\system32\winrm
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\system32\WCN
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\system32\slmgr
2025-01-17 20:43 - 2022-05-07 11:05 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2025-01-17 20:43 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Windows Defender
2025-01-17 20:43 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2025-01-17 18:38 - 2020-09-08 19:23 - 000000000 ____D C:\Programy

==================== Files in the root of some directories ========

2021-07-25 15:44 - 2024-10-20 02:36 - 000004096 ____H () C:\Users\motoc\AppData\Local\keyfile3.drm

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================





Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-02-2025
Ran by motoc (15-02-2025 21:07:07)
Running from C:\Users\motoc\Desktop
Microsoft Windows 11 Home Version 23H2 22631.4890 (X64) (2025-01-17 20:24:37)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-167618358-2509036446-3095998357-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-167618358-2509036446-3095998357-503 - Limited - Disabled)
Guest (S-1-5-21-167618358-2509036446-3095998357-501 - Limited - Disabled)
motoc (S-1-5-21-167618358-2509036446-3095998357-1001 - Administrator - Enabled) => C:\Users\motoc
WDAGUtilityAccount (S-1-5-21-167618358-2509036446-3095998357-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1029-1033-7760-BC15014EA700}) (Version: 24.005.20399 - Adobe)
Adobe Photoshop 7.0 CE (HKLM-x32\...\Adobe Photoshop 7.0 CE) (Version: 7.0 CE - Adobe Systems, Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601108}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Avast AntiTrack (HKLM-x32\...\AvastAntiTrackPremium) (Version: 4.0.5195.10390 - Avast Software)
Avast BreachGuard (HKLM\...\AvastBreachGuard) (Version: 24.2.2290.8582 - Avast Software)
Avast Cleanup Premium (HKLM\...\Avast Cleanup) (Version: 24.3.17165.19178 - Avast Software)
Avast Premium Security (HKLM\...\Avast Antivirus) (Version: 24.12.9725.2387 - Gen Digital Inc.)
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 25.1.11083.14496 - Avast Software)
DeepL (HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\https%3a##appdownload.deepl.com#windows#0install#deepl.xml) (Version: - DeepL SE)
Google Chrome (HKLM\...\{1CD044BA-170D-33A9-8042-5ED71E1414F1}) (Version: 133.0.6943.99 - Google LLC)
K-Lite Codec Pack 18.8.0 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 18.8.0 - KLCP)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\{D1DFC3CA-167D-3471-A61D-E98243965164}) (Version: 133.0.3065.69 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 133.0.3065.59 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\OneDriveSetup.exe) (Version: 25.005.0112.0003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 x64 ENU (HKLM\...\{8424B163-D1E0-48B7-88A2-C7A61767B3D7}) (Version: 4.0.8482.1 - Microsoft Corporation)
Microsoft Teams classic (HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\Teams) (Version: 1.8.00.1362 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34438 (HKLM-x32\...\{ba10fda9-f731-441f-a999-000bbb7ceec2}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34438 (HKLM\...\{E528AD94-12D7-42C4-91A3-908BE28E9BD2}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34438 (HKLM\...\{2E15F519-4FDA-4834-B4EE-7EFCE7D8D4EE}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.42.34438 (HKLM-x32\...\{A5592FEF-F948-4BA6-A066-8BBFC2DC7EE1}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34438 (HKLM-x32\...\{5D0C4511-3CA1-4FF8-A4BA-C0E1957ABEEA}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Movavi Video Editor 24 (HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\Movavi Video Editor 24) (Version: 24.6.1 - Movavi)
Mozilla Firefox (x64 cs) (HKLM\...\Mozilla Firefox 135.0 (x64 cs)) (Version: 135.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 134.0.1 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
PDF Architect 7 (HKLM-x32\...\PDF Architect 7) (Version: 7.1.13.1755 - pdfforge GmbH)
PDF Architect 7 Create Module (HKLM\...\{B600CC13-8F68-4D44-8867-93490894FAE5}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 Edit Module (HKLM\...\{BA2C2671-B379-4101-A21C-4C549671FC8D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 View Module (HKLM\...\{E947A304-6110-4CFE-98AD-E6909072E87D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{505A4441-AF5C-4A87-BA05-E68CAD7FEA73}) (Version: 5.3.3 - Avanquest pdfforge GmbH)
Sada Compatibility Pack pro systém Office 2007 (HKLM-x32\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Skype 8.136 (HKLM-x32\...\{BA258463-CD06-4733-AFC4-011B5983E5AB}) (Version: 8.136.0.203 - Skype Technologies S.A.)
Skype verze 8.136 (HKLM-x32\...\Skype_is1) (Version: 8.136 - Skype Technologies S.A.) Hidden
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.21 - VideoLAN)
WhatsApp (HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\WhatsApp) (Version: 2.2310.5 - WhatsApp)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
Zoner Media Explorer 6 (HKLM-x32\...\{766D51EF-3F9E-490F-8490-0F24910F18BC}) (Version: 6.0.4000.2 - ZONER software)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2025-02-09] ()
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-12-24] (Microsoft Corporation)
Doplněk pro Fotky -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-12-27] (Microsoft Corporation)
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2021-03-13] (INTEL CORP)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-03-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-03-13] (Microsoft Corporation) [MS Ad]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-01-18] (Microsoft Corp.)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.235.0_x64__8wekyb3d8bbwe [2025-01-23] (Microsoft Corporation)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.29.256.0_x64__dt26b99r8h8gj [2021-11-25] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0 [2025-02-13] (Spotify AB) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2506.4.0_x64__cv1g1gvanyjgm [2025-02-15] (WhatsApp Inc.) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\motoc\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\motoc\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.24313.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> "C:\Users\motoc\AppData\Local\0install.net\implementations\sha256new_7ATQFYMYISD5LU42STURHNI33TRSMJBHVQPLEAO3EX4R5WPI6GTQ\DeepL.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\motoc\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [PDFArchitect7_ManagerExt] -> {21989F59-B260-4302-90C3-E51740E03639} => C:\Program Files\PDF Architect 7\context-menu.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL [2022-10-04] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]
ContextMenuHandlers1-x32: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Media Explorer 6\Program\ShellExt6.dll [2003-10-20] (ZONER software) [File not signed]
ContextMenuHandlers2-x32: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Media Explorer 6\Program\ShellExt6.dll [2003-10-20] (ZONER software) [File not signed]
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]
ContextMenuHandlers4-x32: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Media Explorer 6\Program\ShellExt6.dll [2003-10-20] (ZONER software) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-01-25] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]
ContextMenuHandlers6-x32: [ZONERMenu] -> {BCAFD618-3FAE-4EFE-BF4E-4C43A7E1320B} => C:\Program Files (x86)\Zoner\Media Explorer 6\Program\ShellExt6.dll [2003-10-20] (ZONER software) [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [vidc.DIVX] => C:\Windows\SysWOW64\DivX.dll [692736 2005-08-09] (DivXNetworks) [File not signed]
HKLM\...\Drivers32: [vidc.yv12] => C:\Windows\SysWOW64\DivX.dll [692736 2005-08-09] (DivXNetworks) [File not signed]

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\motoc\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Webové servery ve službě MSN\target.lnk -> hxxp://www.msnusers.co

==================== Loaded Modules (Whitelisted) =============

2020-09-08 21:09 - 2023-06-06 21:39 - 000196096 _____ (pdfforge GmbH) [File not signed] C:\WINDOWS\System32\pdfcmon.dll
2018-12-10 09:29 - 2018-12-10 09:29 - 000438272 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Program Files\PDF Architect 7\libcurl.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
BHO-x32: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
Toolbar: HKLM - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
Toolbar: HKLM-x32 - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2020-09-09 04:39 - 2020-09-09 04:38 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-167618358-2509036446-3095998357-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\motoc\Documents\293798571_10158405173631956_5175425852345646284_n.jpg
DNS Servers: 100.126.0.1 - 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Wi-Fi: Intel(R) Dual Band Wireless-AC 7265 -> Netwtw04.sys
SecureLine: Avast SecureLine Wintun Adapter -> aswWintun.sys
Avast SecureLine VPN WireGuard: Avast SecureLine WireGuard Adapter -> aswWireguard.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\StartupApproved\StartupFolder: => "DeepL auto-start.lnk"
HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\StartupApproved\Run: => "OneDriveSetup"
HKU\S-1-5-21-167618358-2509036446-3095998357-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{0F88857E-B2DE-45D3-81E6-C62D8C005E32}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F6CA9F40-43EE-44B1-B011-0193591683F1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B246E298-E99F-42CC-9855-7CCFA0784DAF}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5943DCC2-2CF9-483F-8B24-6C5559404CBE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1EE1154C-8B73-4B16-9E46-BFB256D3923E}] => (Allow) C:\Program Files (x86)\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe => No File
FirewallRules: [{01162C41-E57E-4563-A044-A3925E553841}] => (Allow) C:\Program Files (x86)\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe => No File
FirewallRules: [{BD49E52C-091B-4351-8659-C7068FD3F3C7}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMSInstallInit.exe => No File
FirewallRules: [{CC372A1E-9E74-491D-A597-E5817FC790D0}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMSInstallInit.exe => No File
FirewallRules: [{1112F99E-BC2F-47F8-9E19-A0F1669B6D3C}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PSST.exe => No File
FirewallRules: [{2823F03C-B95C-4AB8-AE8E-6D3118BDDC7D}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PSST.exe => No File
FirewallRules: [{4CAB93F1-4EEB-4429-80C0-CDCD234542A0}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMC.exe => No File
FirewallRules: [{ECAF8963-74CB-4582-A540-0485B4A78AFF}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMC.exe => No File
FirewallRules: [{53CB2173-AC88-44D4-BDBE-74E495B2B495}] => (Allow) C:\Users\motoc\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => No File
FirewallRules: [{0DB29881-2D50-4FDE-8C3C-DD59A3C7D76D}] => (Allow) C:\Users\motoc\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => No File
FirewallRules: [{DCEB217E-8763-4AC0-8AF1-1A64EE010BBC}] => (Allow) C:\Program Files\Avast Software\BreachGuard\bgui.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{6913A899-0CF0-4AA4-84E4-85C25D7B642A}] => (Allow) C:\Program Files\Avast Software\BreachGuard\bgui.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{CEC17A65-9CA6-4A04-8D4F-41D61854C49A}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{AE0187C0-035C-40DD-A350-733EE8BDFAE1}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{D1041C95-29E4-4EDE-A6AC-86B48BCA9714}] => (Allow) LPort=50053
FirewallRules: [{9D9AEAA6-47BB-4F57-BC5C-813426431ABD}] => (Allow) LPort=50053
FirewallRules: [{FE737DA3-5014-4DC9-8648-7EFCB242DC1E}] => (Allow) LPort=53016
FirewallRules: [{F612B9AA-F553-4B7E-A9B7-148F4488B3ED}] => (Allow) LPort=53015
FirewallRules: [{B5960884-02DC-4CD9-99E0-F6C3366D7640}] => (Allow) LPort=53014
FirewallRules: [{883887DA-DC4B-4FE8-887D-9351C4F65F19}] => (Allow) LPort=43013
FirewallRules: [{980FBF7B-0BB7-481D-BC29-411D190442DA}] => (Allow) LPort=43012
FirewallRules: [{B844001F-1B05-4690-A7B7-81939E1C435D}] => (Allow) LPort=33011
FirewallRules: [{4388E90E-4430-42A0-8080-3A6BE97FD113}] => (Allow) LPort=33010
FirewallRules: [{1583220C-D554-4AD8-84E0-441B0A457FCE}] => (Allow) LPort=33009
FirewallRules: [{9735AE54-0389-41AC-AF4B-86F04000A410}] => (Allow) LPort=23008
FirewallRules: [{BC36872D-627A-4278-99F0-01D58DE2DCAC}] => (Allow) LPort=23007
FirewallRules: [{F5AEADD6-BFD1-4AE6-8ED2-DED7E8BD8B91}] => (Allow) LPort=53016
FirewallRules: [{0967901E-3EE7-4742-8156-65B8847C4836}] => (Allow) LPort=53015
FirewallRules: [{2D2F034E-5944-4CBF-BAAD-44CF726E32F5}] => (Allow) LPort=53014
FirewallRules: [{E4791CAC-7FAA-4A60-B9F9-6A032A1F9F56}] => (Allow) LPort=43013
FirewallRules: [{8E95657E-8C35-460B-B3B8-E0A7AF9770CF}] => (Allow) LPort=43012
FirewallRules: [{66E25F3E-B3A5-4DCC-918D-C7F3BA6B830E}] => (Allow) LPort=33011
FirewallRules: [{54072713-ECA2-4EDB-BB64-302BC911A75B}] => (Allow) LPort=33010
FirewallRules: [{8B3ECC61-FF4C-46AE-AE20-D962A60C8802}] => (Allow) LPort=33009
FirewallRules: [{91A5D564-F614-4892-8BC8-6373D5F7534C}] => (Allow) LPort=23008
FirewallRules: [{E6AF4620-F785-428F-8CAA-415BFABC54F7}] => (Allow) LPort=23007
FirewallRules: [{11EAA9DF-D8F4-479D-830A-6CD4D6117359}] => (Allow) LPort=57218
FirewallRules: [{BD2CC05E-718C-4F50-B5C0-DB5E0746E94F}] => (Allow) LPort=57217
FirewallRules: [{554F7214-261C-4A55-855C-31229760C48E}] => (Allow) LPort=57216
FirewallRules: [{54A03ABE-4F26-440E-BB1B-C1C59465E08C}] => (Allow) LPort=57215
FirewallRules: [{12CA7558-2A82-4140-9505-D52EFE2FE136}] => (Allow) LPort=57214
FirewallRules: [{5DD08ED9-ED12-4C48-80B2-A9AD7AB3023B}] => (Allow) LPort=57213
FirewallRules: [{738E870C-C978-4890-9855-D8DA99A9884E}] => (Allow) LPort=57212
FirewallRules: [{08143EC1-2709-435F-82B9-AC5C6E4C386A}] => (Allow) LPort=57211
FirewallRules: [{DBD9D05B-4FE1-41AE-8B70-5F68ADDF1559}] => (Allow) LPort=57210
FirewallRules: [{53C2C3F2-08BA-4C3C-925D-B6D89C6E91B5}] => (Allow) LPort=57209
FirewallRules: [{26D725D0-C29F-4ADF-B1CA-AE9F75A21999}] => (Allow) LPort=57218
FirewallRules: [{096B505C-153C-48B4-9732-8368B6982144}] => (Allow) LPort=57217
FirewallRules: [{4B78D1BB-87FA-4A70-94E6-2E0D38E7EB5E}] => (Allow) LPort=57216
FirewallRules: [{93558228-415D-4F85-A62F-DDF94543AB17}] => (Allow) LPort=57215
FirewallRules: [{960012AD-E663-4525-97B8-93DBDE75A6A6}] => (Allow) LPort=57214
FirewallRules: [{1A22EFCF-114C-4E5C-9B9C-A4CF3DE26973}] => (Allow) LPort=57213
FirewallRules: [{5D2B4F54-7DDD-45F6-A883-986D6597B26D}] => (Allow) LPort=57212
FirewallRules: [{7BB50DC3-FBA0-4452-9DBF-C4F598E5AFA2}] => (Allow) LPort=57211
FirewallRules: [{5F23BA21-A77D-4360-AF8C-B3C79734C20C}] => (Allow) LPort=57210
FirewallRules: [{EFF8EC12-61D3-4588-A0FB-BC61A19A8FEA}] => (Allow) LPort=57209
FirewallRules: [{7094B255-5183-47E7-A851-BB252AE3D184}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{7F1FFB70-391A-4BF1-BC40-595BA6C65962}] => (Allow) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{21762B59-A6F4-4D62-A222-363D0D46D19A}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{3C876755-DE1D-4A9F-B763-EB9443038938}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{DCC3D256-8417-49E6-B301-CCA70039B73B}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{D4625A42-0B08-4052-B311-AD29257AF626}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{5CEF56DB-D028-4249-BA8A-E6B8038F4E51}] => (Block) C:\users\motoc\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2D11CBE6-18C3-4AA3-9824-0F4ACD63BAB0}] => (Block) C:\users\motoc\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{6013EC46-09AE-4ADF-B772-553E1F52A1CE}C:\users\motoc\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\motoc\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{959AD749-D4D4-46BD-AEE5-6549DE18020B}C:\users\motoc\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\motoc\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0BB2371F-E24E-401D-9B8E-ACE8C99067C1}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => No File
FirewallRules: [{452C6CAD-A94E-4876-A90A-1E69ABACC6DC}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => No File
FirewallRules: [{C81B93C4-9475-406B-A7BA-BB5BEA60ED61}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => No File
FirewallRules: [{5AF07F76-C7F6-485A-91CF-4C07722788A8}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => No File
FirewallRules: [{F7E5CF98-1A1C-43F3-A34F-533C31FFC52D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{88953168-32A7-485F-B032-C74D9EB96175}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D0BCB8A2-711E-41CA-801F-315729447F02}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24334.1103.3302.5694_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FD084EF6-BF21-4249-8980-555614D23161}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D63CA73F-AF84-442D-BFE2-6C0852A064E5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1E4A0441-C773-4D69-8A08-C349B92BC664}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F3615F0D-F14E-4795-8442-E746DD347D1F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3203.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7D059094-8C69-4B45-BBC6-2E906BEE9DD9}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{32053DFA-AF75-42D3-AB9A-E7C8D7279B3F}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7BE34279-9232-4B81-A703-630B2604E9AF}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\133.0.3065.59\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E1CE39F0-19C0-43F4-AD8E-9FA18E7DD6CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CE5100F6-0273-4749-A597-98458500AB77}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{BB4DD472-C871-4CD4-8E0D-B944449E613B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1F0D9EF8-FE81-4EED-97D4-F3B47E5AD645}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C3790B7F-FF4F-4B65-B4EA-618EF947F875}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{3A47906E-B126-4832-A22C-3A8C23FE2EC6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{92739E61-97C1-4D08-9AA6-B7368CE647DB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DB8C0E8D-36EB-4C78-A26C-16C66FDDEB1E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1864FFAB-BF63-4166-A01F-27C5F126C850}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{654B2B09-A470-456B-AE4A-91DA94B84126}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.257.463.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{71F2116F-96A5-42BA-BB4E-AE8C9B07E940}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

14-02-2025 18:57:59 Windows Update

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (02/15/2025 08:29:40 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-RC8GTKU)
Description: Název chybující aplikace: WINWORD.EXE, verze: 11.0.8411.0, časové razítko: 0x532a603f
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.22621.3593, časové razítko: 0x84b62951
Kód výjimky: 0xc0000409
Posun chyby: 0x0009e3bb
ID chybujícího procesu: 0x0xd90
Čas spuštění chybující aplikace: 0x0x1db7e46e572f12e
Cesta k chybující aplikaci: C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
Cesta k chybujícímu modulu: C:\WINDOWS\System32\ucrtbase.dll
ID zprávy: 2eb31a65-29f6-4af1-9efa-24f762f276b6
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/13/2025 05:32:53 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..

Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (02/13/2025 05:32:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač..

Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (02/13/2025 05:01:46 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5960,R,98) SRUJet: Při otevírání souboru protokolu C:\WINDOWS\system32\SRU\SRU00047.log došlo k chybě -1811 (0xfffff8ed).

Error: (02/13/2025 05:01:18 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: ATServiceHost.exe, verze: 3.0.0.5195, časové razítko: 0x65ab0000
Název chybujícího modulu: KERNELBASE.dll, verze: 10.0.22621.4830, časové razítko: 0x2a1800c3
Kód výjimky: 0xe0434352
Posun chyby: 0x0014d4f2
ID chybujícího procesu: 0x0x1710
Čas spuštění chybující aplikace: 0x0x1db7caf9ea38fb5
Cesta k chybující aplikaci: C:\Program Files\Avast Software\AntiTrack\x86\ATServiceHost.exe
Cesta k chybujícímu modulu: C:\WINDOWS\System32\KERNELBASE.dll
ID zprávy: 624ccad9-ad99-479a-b82a-888181aed0f8
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/13/2025 05:01:18 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..

Error: (02/13/2025 05:01:18 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.]

Error: (02/13/2025 05:01:18 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému..


System errors:
=============
Error: (02/15/2025 05:42:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Uživatelská služba nabízených oznámení Windows_1051d0 byla nečekaně ukončena. Stalo se to 3 krát. Následující opravná akce bude spuštěna za 4000 milisekund: Restartovat službu.

Error: (02/15/2025 05:41:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Uživatelská služba nabízených oznámení Windows_1051d0 byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 2000 milisekund: Restartovat službu.

Error: (02/15/2025 05:40:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Uživatelská služba nabízených oznámení Windows_1051d0 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1000 milisekund: Restartovat službu.

Error: (02/14/2025 07:24:00 PM) (Source: NetBT) (EventID: 4311) (User: )
Description: Inicializace se nezdařila, protože ovladač zařízení nemohl být vytvořen.
K identifikaci rozhraní, jehož inicializace se nezdařila, lze použít
řetězec %2. Je reprezentován adresou MAC tohoto rozhraní nebo globálně
jedinečným identifikátorem (GUID), pokud nemohlo rozhraní NetBT
získat adresu MAC podle identifikátoru GUID. Pokud nebyla k dispozici adresa MAC
ani identifikátor GUID, je řetězec reprezentován názvem zařízení clusteru.

Error: (02/14/2025 07:24:00 PM) (Source: NetBT) (EventID: 4311) (User: )
Description: Inicializace se nezdařila, protože ovladač zařízení nemohl být vytvořen.
K identifikaci rozhraní, jehož inicializace se nezdařila, lze použít
řetězec %2. Je reprezentován adresou MAC tohoto rozhraní nebo globálně
jedinečným identifikátorem (GUID), pokud nemohlo rozhraní NetBT
získat adresu MAC podle identifikátoru GUID. Pokud nebyla k dispozici adresa MAC
ani identifikátor GUID, je řetězec reprezentován názvem zařízení clusteru.

Error: (02/14/2025 07:03:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NKSQGP7F2NH-5319275A.WhatsAppDesktop.

Error: (02/13/2025 07:37:01 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-RC8GTKU)
Description: Server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/13/2025 05:46:21 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-RC8GTKU)
Description: Server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} se v daném časovém limitu neregistroval u služby DCOM.


==================== Memory info ===========================

BIOS: FUJITSU // Insyde Software Corp. Version 1.06 06/08/2020
Motherboard: FUJITSU FJNBB67
Processor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Percentage of memory in use: 62%
Total physical RAM: 8055.32 MB
Available physical RAM: 2994.06 MB
Total Virtual: 19831.32 MB
Available Virtual: 14198.12 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:472.15 GB) (Free:320.27 GB) (Model: WDC PC SA530 SDASB8Y-512G-1016) (Protected) NTFS

\\?\Volume{22f999e8-eacb-4aef-9008-1529b7339d20}\ () (Fixed) (Total:0.66 GB) (Free:0.07 GB) NTFS
\\?\Volume{ab0ae2f8-28aa-48f7-be61-0f6ece1131e5}\ () (Fixed) (Total:3 GB) (Free:2.44 GB) NTFS
\\?\Volume{1ca255a1-e612-47f6-8d44-2aae687242a6}\ () (Fixed) (Total:1 GB) (Free:0.97 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 476.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
ask: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {1640285A-4EF3-438F-94D6-C13BEDC71A50} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {3B750AE7-1485-4569-AB97-2B3A23DC6AD0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {480602D0-E21E-4DF3-9A40-417F562FD044} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
ask: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {1640285A-4EF3-438F-94D6-C13BEDC71A50} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {3B750AE7-1485-4569-AB97-2B3A23DC6AD0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {480602D0-E21E-4DF3-9A40-417F562FD044} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
C:\DumpStack.log.tmp
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\motoc\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> "C:\Users\motoc\AppData\Local\0install.net\implementations\sha256new_7ATQFYMYISD5LU42STURHNI33TRSMJBHVQPLEAO3EX4R5WPI6GTQ\DeepL.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> "C:\Users\motoc\AppData\Local\0install.net\implementations\sha256new_7ATQFYMYISD5LU42STURHNI33TRSMJBHVQPLEAO3EX4R5WPI6GTQ\DeepL.exe" -ToastActivated => No File
FirewallRules: [{CEC17A65-9CA6-4A04-8D4F-41D61854C49A}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{AE0187C0-035C-40DD-A350-733EE8BDFAE1}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{0BB2371F-E24E-401D-9B8E-ACE8C99067C1}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => No File
FirewallRules: [{452C6CAD-A94E-4876-A90A-1E69ABACC6DC}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => No File
FirewallRules: [{C81B93C4-9475-406B-A7BA-BB5BEA60ED61}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => No File
FirewallRules: [{5AF07F76-C7F6-485A-91CF-4C07722788A8}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => No File
FirewallRules: [{F7E5CF98-1A1C-43F3-A34F-533C31FFC52D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 15-02-2025
Ran by motoc (16-02-2025 08:53:14) Run:1
Running from C:\Users\motoc\Desktop
Loaded Profiles: motoc
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
ask: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {1640285A-4EF3-438F-94D6-C13BEDC71A50} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {3B750AE7-1485-4569-AB97-2B3A23DC6AD0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {480602D0-E21E-4DF3-9A40-417F562FD044} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
ask: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {1640285A-4EF3-438F-94D6-C13BEDC71A50} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (No File)
Task: {3B750AE7-1485-4569-AB97-2B3A23DC6AD0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {480602D0-E21E-4DF3-9A40-417F562FD044} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
C:\DumpStack.log.tmp
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\motoc\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> "C:\Users\motoc\AppData\Local\0install.net\implementations\sha256new_7ATQFYMYISD5LU42STURHNI33TRSMJBHVQPLEAO3EX4R5WPI6GTQ\DeepL.exe" -ToastActivated => No File
CustomCLSID: HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> "C:\Users\motoc\AppData\Local\0install.net\implementations\sha256new_7ATQFYMYISD5LU42STURHNI33TRSMJBHVQPLEAO3EX4R5WPI6GTQ\DeepL.exe" -ToastActivated => No File
FirewallRules: [{CEC17A65-9CA6-4A04-8D4F-41D61854C49A}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{AE0187C0-035C-40DD-A350-733EE8BDFAE1}] => (Allow) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\CefSharp.BrowserSubprocess.exe => No File
FirewallRules: [{0BB2371F-E24E-401D-9B8E-ACE8C99067C1}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => No File
FirewallRules: [{452C6CAD-A94E-4876-A90A-1E69ABACC6DC}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => No File
FirewallRules: [{C81B93C4-9475-406B-A7BA-BB5BEA60ED61}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => No File
FirewallRules: [{5AF07F76-C7F6-485A-91CF-4C07722788A8}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => No File
FirewallRules: [{F7E5CF98-1A1C-43F3-A34F-533C31FFC52D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9} => removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
ask: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1640285A-4EF3-438F-94D6-C13BEDC71A50}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1640285A-4EF3-438F-94D6-C13BEDC71A50}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3B750AE7-1485-4569-AB97-2B3A23DC6AD0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B750AE7-1485-4569-AB97-2B3A23DC6AD0}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{480602D0-E21E-4DF3-9A40-417F562FD044}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{480602D0-E21E-4DF3-9A40-417F562FD044}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0F10DCF-44AD-40E8-9370-FB5DA59F93FB}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
ask: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File) => Error: No automatic fix found for this entry.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1640285A-4EF3-438F-94D6-C13BEDC71A50}" => not found
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B750AE7-1485-4569-AB97-2B3A23DC6AD0}" => not found
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{480602D0-E21E-4DF3-9A40-417F562FD044}" => not found
"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => not found
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000} => removed successfully
HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c} => removed successfully
HKU\S-1-5-21-167618358-2509036446-3095998357-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c} => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CEC17A65-9CA6-4A04-8D4F-41D61854C49A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AE0187C0-035C-40DD-A350-733EE8BDFAE1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0BB2371F-E24E-401D-9B8E-ACE8C99067C1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{452C6CAD-A94E-4876-A90A-1E69ABACC6DC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C81B93C4-9475-406B-A7BA-BB5BEA60ED61}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5AF07F76-C7F6-485A-91CF-4C07722788A8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F7E5CF98-1A1C-43F3-A34F-533C31FFC52D}" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 786432 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 46417107 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 2243216 B
Edge => 0 B
Chrome => 94202174 B

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 16-02-2025 08:58:54)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 08:58:54 ====

Smazáno. Nastala nějaká změna?

Ano, v tuto chvíli to běží pěkně. Bylo tam něco nebezpečného? Je to tedy nyní i z vašeho pohledu dobré?

Byly tam pouze zbytečnosti, které zpomalovaly chod. Mělo by to být OK.

Dobře. Moc děkuji. Můžete vlákno uzavřít. Obratem posílám příspěvek na provoz fora.
Hezký den

Za příspěvek děkujeme a vy nemáte zač!