Problém s rychlostí internetu a PC
Napsal: 08 bře 2025 16:58
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-03-2025
Ran by marti (administrator) on MY_PC_MZ (Dell Inc. OptiPlex Tower Plus 7010) (08-03-2025 16:51:47)
Running from C:\Portableapps\PortableApps\FRST64\FRST64.exe
Loaded Profiles: marti
Platform: Microsoft Windows 11 Pro Version 24H2 26100.3323 (X64) Language: Angličtina (Spojené státy) -> Čeština (Česko)
Default browser: "C:\Program Files\AVG\Browser\Application\AVGBrowser.exe" --single-argument %1
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.258.498.0_x64__zpdnekdrzrea0\Spotify.exe <8>
(AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGUI.exe <5>
(C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe ->) (InterPromo GMBH -> ) C:\Program Files\4KDownload\4kvideodownloaderplus\crashpad_handler.exe
(C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe ->) (InterPromo GMBH -> The Qt Company Ltd.) C:\Program Files\4KDownload\4kvideodownloaderplus\QtWebEngineProcess.exe <2>
(C:\Program Files\AVG\Antivirus\AVGSvc.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.18526.20144\OfficeClickToRun.exe
(C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe ->) (IndiLogic LLC -> ) C:\Program Files\Dell\Dell Peripheral Manager\DPMCrashHandler.exe <2>
(C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe ->) (IndiLogic LLC -> Dell Inc.) C:\Program Files\Dell\Dell Peripheral Manager\DPM.exe
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DellOptimizer\Dell.Optimizer.DthProxy\Dell.Optimizer.DthProxy.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DellOptimizer\DellOptimizer.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.Update.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\TeamViewer\TeamViewer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\133.0.3065.92\msedgewebview2.exe <6>
(C:\Program Files\TeamViewer\TeamViewer.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe <2>
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_x64.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25012.107.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25012.107.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\KeyboardManagerEngine\PowerToys.KeyboardManagerEngine.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.AlwaysOnTop.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.Awake.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.ColorPickerUI.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.CropAndLock.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.FancyZones.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.PowerLauncher.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\WinUI3Apps\PowerToys.AdvancedPaste.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\WinUI3Apps\PowerToys.Peek.UI.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_helper.exe
(EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelManagementandSecurityStatus_2405.6.0.0_x64__8j3eq9eme6ctt\PrivacyIconClientGui\PrivacyIconClient.exe
(Elaborate Bytes AG -> Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(explorer.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Browser\Application\AVGBrowser.exe <44>
(explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (InterPromo GMBH -> InterPromo GMBH) C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.025.0209.0001\Microsoft.SharePoint.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2>
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe
(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesSvc64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <16>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe <2>
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\afwServ.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(services.exe ->) (CODE SECTOR PTY LTD -> ) C:\Program Files\TeraCopy\TeraCopyService.exe
(services.exe ->) (Dell Inc. -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(services.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Technologies Inc. -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TrustedDevice\Dell.TrustedDevice.Service.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (IndiLogic LLC -> Dell Inc.) C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_80dcb7b409148fed\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_cde08185192dc86d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6514d10de2313c47\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_1ba1a3d98a7c36a2\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_b966ea70c5407e74\WMIRegistrationService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.025.0209.0001\FileSyncHelper.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(services.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe <3>
(services.exe ->) (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy) C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd) C:\Windows\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesAudioService.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesSysSvc64.exe
(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25012.50.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.235.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.1301.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
Failed to access process -> vmmemCmZygote
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesSvc64.exe [5332192 2023-10-03] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [464712 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [11859680 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [105280 2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5007376 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [f.lux] => C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe [1533560 2024-08-08] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\25.025.0209.0001\Microsoft.SharePoint.exe [1026088 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [4K Video Downloader+] => C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe [163874392 2025-02-14] (InterPromo GMBH -> InterPromo GMBH)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\MountPoints2: {09663097-8c8e-11ee-8568-806e6f6e6963} - "D:\startdvd.exe"
HKLM\...\Windows x64\Print Processors\shj2mPC: C:\Windows\System32\spool\prtprocs\x64\shj2mpc.dll [91216 2022-01-24] (联想图像(天津)科技有限公司 -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\shj2m Langmon: C:\WINDOWS\system32\shj2mlm.dll [70224 2022-01-24] (联想图像(天津)科技有限公司 -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{48F69C39-1356-4A7B-A899-70E3539D4982}] -> C:\Program Files\AVG\Browser\Application\131.0.27894.265\Installer\chrmstp.exe [2025-01-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2024-05-20]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02FD46C2-A0A6-45F4-B2E9-74ECD8A7B371} - System32\Tasks\Abelssoft\Abelssoft File Organizer_117 => C:\Program Files (x86)\File Organizer\AbLauncher.exe -minimized -autorun (No File)
Task: {BC40998C-577C-42E1-A782-B199AA4174E5} - System32\Tasks\AVG Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVG\Browser\Application\AVGBrowser.exe [3311400 2025-01-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {0344A4EF-A185-4371-AAAA-57A649FC4DE0} - System32\Tasks\AVG Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVG\Browser\Application\AVGBrowser.exe [3311400 2025-01-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {C1924652-8415-436A-B043-5BDF269FD515} - System32\Tasks\AVG\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [5251400 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {93817188-DCFF-4A27-BD1E-3E3399CAE1BE} - System32\Tasks\AVG\AVG Antivirus Patcher => C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe [8425288 2024-12-16] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {5A06F312-316B-4A79-8A9A-17C8654F7BCE} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2385856 2024-05-20] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {6D600834-3C38-42D2-9D3D-BF3303355F99} - System32\Tasks\AVGBrowserProtectS-1-5-21-395296610-1484778253-2832174162-1001 => C:\Program Files\AVG\Browser\Application\AVGBrowserProtect.exe [1690040 2024-05-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {EC2180EC-8618-418F-A08E-DA9A5C262384} - System32\Tasks\AVGUpdateTaskMachineCore => C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {41D5B6A2-47D7-4CE2-A078-38D4465A5B65} - System32\Tasks\AVGUpdateTaskMachineUA => C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {EA7B3D1F-87DB-4C71-B3AA-0F5C912C1D35} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)
Task: {6900CDCA-041A-41AB-BDC6-8E144E143B53} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "fe2736fc-7faf-4a21-af05-fcf1de64db46" --version "6.29.11342" --silent
Task: {1FB0C7CA-EEBC-41D0-AEF1-7D8EDC12D5DF} - System32\Tasks\CCleanerSkipUAC - marti => "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) (No File)
Task: {BAB5AA4F-8D15-4C4D-B121-1399D4E3DA5A} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [1000776 2024-12-19] (Dell Technologies Inc. -> Dell Inc.) -> C:\Program Files\Dell\SupportAssistAgent\bin\AutoUpdate
Task: {056B2132-8D30-4CC7-930F-D3D2423F50E8} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B7B05A3-871D-4DD4-8935-06D7CEED59C4} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E7BCD10-33E9-4F67-9780-AE6F583378D0} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1D487CC-0CDB-44D2-865C-841634BBF8FE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {7427E023-C115-4B0B-95AD-599217C69EA4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {389BF253-E895-40F9-9BDE-EC708C9DD3FA} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD6E0F87-D16E-42A8-B151-46FE41D1D298} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [194672 2025-02-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {0DEE7D8C-6BC3-4FD2-A1ED-C3C647ED3010} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4488592 2025-01-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0D364AA5-392E-473E-9B8D-C6DA832DCDAC} - System32\Tasks\Microsoft\Windows\PLA\coresess => {FF679DA1-8FF2-4474-9C9E-52BBD409B557} C:\WINDOWS\system32\pla.dll [1667072 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
Task: {CEA9BF3D-32B8-4A7D-90CA-435422A52FC7} - System32\Tasks\Microsoft\Windows\PLA\esifumdfsess => {FF679DA1-8FF2-4474-9C9E-52BBD409B557} C:\WINDOWS\system32\pla.dll [1667072 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
Task: {6B1F56A9-3773-499A-93E8-9A74144443D0} - System32\Tasks\Microsoft\Windows\PLA\helpersess => {FF679DA1-8FF2-4474-9C9E-52BBD409B557} C:\WINDOWS\system32\pla.dll [1667072 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {0280E691-B1B5-4DFC-960E-213DDC38E313} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [34880 2025-03-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {0B500E88-F4C8-4278-B6E8-1EBD2C8E536D} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4222496 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {1AF61FF2-7A60-4E4F-9CED-9D3959624566} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-395296610-1484778253-2832174162-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4222496 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {6ACE6FED-1DA9-4F3B-9422-D849D8D4EE93} - System32\Tasks\OneDrive Startup Task-S-1-5-21-395296610-1484778253-2832174162-1001 => C:\Program Files\Microsoft OneDrive\25.025.0209.0001\OneDriveLauncher.exe [669224 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {A45E949D-AD03-4DF7-9FAD-FD522BA9C096} - System32\Tasks\PowerToys\Autorun for marti => C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe [1231928 2024-12-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {C091BACF-44B3-40BF-828E-27974D76B0E1} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [140405056 2024-08-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files (x86)\Samsung\Samsung Magician\\--disable-gpu-sandbox /AUTOHIDE
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1eb15bc2-5702-440b-96f2-a83215909e37}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-04]
Edge Extension: (Dokumenty Google offline) - C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-01]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-05-19]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
FireFox:
========
FF DefaultProfile: dxv2geju.default
FF ProfilePath: C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default [2025-03-08]
FF DownloadDir: E:\Downloads
FF Homepage: Mozilla\Firefox\Profiles\dxv2geju.default -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\dxv2geju.default -> hxxps://www.aliexpress.com; hxxps://web.whatsapp.com
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2024-05-19]
FF Extension: (DeepL: AI překladač a editor textů) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\firefox-extension@deepl.com.xpi [2024-11-07]
FF Extension: (Language: Čeština (Czech)) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2025-03-07]
FF Extension: (Save as PDF) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\save-as-pdf-ff@pdfcrowd.com.xpi [2024-05-20]
FF Extension: (yt-dlp downloader) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\yt_dlp_firefox@tyilo.com.xpi [2024-06-02]
FF Extension: (Gesturefy) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{506e023c-7f2b-40a3-8066-bc5deb40aebe}.xpi [2024-08-06]
FF Extension: (Copy/Paste and Save tabs list) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{a596357b-5d1f-4e04-ba81-4013c6d7d34e}.xpi [2024-07-02]
FF Extension: (Video DownloadHelper) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-01-31]
FF Extension: (No Name) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-03-05]
FF Extension: (DownThemAll!) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2024-10-24]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.13\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.13\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @update.avgbrowser.com/AVG Browser;version=3 -> C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\npAvgBrowserUpdate3.dll [2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
FF Plugin-x32: @update.avgbrowser.com/AVG Browser;version=9 -> C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\npAvgBrowserUpdate3.dll [2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Chrome:
=======
CHR Profile: C:\Users\marti\AppData\Local\Google\Chrome\User Data\Default [2025-02-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\marti\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-05-21]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\marti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-05-21]hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5328200 2024-05-20] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
S2 avg; C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [815432 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [2446152 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [1266504 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [7405896 2025-02-12] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgm; C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
S3 AVGSecureBrowserElevationService; C:\Program Files\AVG\Browser\Application\131.0.27894.265\elevation_service.exe [1910136 2025-01-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVGWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2024-05-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13617384 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
R2 CMigrationService; C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe [763200 2024-08-23] (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [460176 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [154512 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [482704 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [59616 2025-01-31] (Dell Inc. -> )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22240 2024-09-26] (Dell Technologies Inc. -> Dell INC.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [51648 2024-11-13] (Dell Technologies Inc. -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [154544 2024-11-14] (Dell Technologies Inc. -> Dell)
R2 DellTrustedDevice; c:\Program Files\Dell\TrustedDevice\Dell.TrustedDevice.Service.exe [153800 2025-02-01] (Dell Technologies Inc. -> Dell)
R2 DPMService; C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe [2013048 2024-03-13] (IndiLogic LLC -> Dell Inc.)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.025.0209.0001\FileSyncHelper.exe [3532816 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2500072 2024-11-25] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-03-04] (HP Inc. -> HP Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_c25dbc60ad3b371a\lib\PlatformLicenseManagerService.exe [742904 2024-09-08] (Intel Corporation -> Intel(R) Corporation)
S3 IntelCstService; C:\WINDOWS\System32\DriverStore\FileRepository\icst_service.inf_amd64_498370087736dc57\intel_cst_service_standalone.exe [36156568 2023-09-13] (Intel Corporation -> Intel Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe [2778760 2022-10-13] (Intel Corporation -> Intel Corporation)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [13004248 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe [1505416 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.025.0209.0001\OneDriveUpdaterService.exe [3879976 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
R2 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [460096 2024-08-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559344 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [149832 2024-12-19] (Dell Technologies Inc. -> Dell Inc.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [21826352 2025-02-17] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 TeraCopyService.exe; C:\Program Files\TeraCopy\TeraCopyService.exe [317664 2023-06-29] (CODE SECTOR PTY LTD -> )
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [763024 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R2 WavesAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesAudioService.exe [160992 2023-10-03] (Waves Inc -> Waves Audio Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe [3236728 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe [133704 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [235088 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [383056 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [296016 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [84560 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [28280 2024-11-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [28728 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [275024 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [550992 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [98360 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [69712 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [955960 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [1424952 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [204344 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [381488 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 DellBV; C:\WINDOWS\system32\DRIVERS\DellBV.sys [156208 2024-04-01] (Dell Inc -> Dell)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [44472 2024-11-12] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 DPMDriver; C:\WINDOWS\System32\drivers\DPMDriver.sys [139680 2022-12-08] (IndiLogic LLC -> Dell Inc.)
R1 dtdsel; C:\WINDOWS\System32\DRIVERS\dtdsel.sys [136248 2024-04-01] (Dell Inc -> Dell)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_7e337195b92a35b6\e1d.sys [611936 2023-08-31] (Intel Corporation -> Intel Corporation)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-24] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-24] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1617096 2024-05-06] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88776 2022-06-23] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_cf69bf74fab8a0f5\ipf_acpi.sys [87176 2022-10-13] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_cpu.sys [80520 2022-10-13] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_lf.sys [443528 2022-10-13] (Intel Corporation -> Intel Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [140744 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
R2 Mrvdp; C:\WINDOWS\system32\drivers\mrvdp.sys [58112 2021-10-13] (Paramount Software UK Ltd -> Windows (R) Win 7 DDK provider)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [246200 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [256520 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1051944 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [195560 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R3 VClone; C:\WINDOWS\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S3 vkrnlintvsc; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsc.inf_amd64_ae7c1fb85fc0224e\vkrnlintvsc.sys [79168 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
R3 vkrnlintvsp; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsp.inf_amd64_bfd0794b3c810858\vkrnlintvsp.sys [91576 2025-01-15] (Microsoft Windows -> Microsoft Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602520 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 WiManHu; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_ed5a224638687261\WiManHu\WiManHu.sys [217400 2024-09-08] (Intel Corporation -> Intel Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-03-08 16:49 - 2025-03-08 16:52 - 000000000 ____D C:\FRST
2025-03-08 16:46 - 2025-03-08 16:46 - 000678580 _____ C:\WINDOWS\system32\perfh005.dat
2025-03-08 16:46 - 2025-03-08 16:46 - 000145416 _____ C:\WINDOWS\system32\perfc005.dat
2025-03-06 19:46 - 2025-03-07 23:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2025-03-06 09:21 - 2025-03-06 09:22 - 000000000 ____D C:\WINDOWS\Windows.SystemToast.PresenceSensing.OnlookerDetection
2025-03-05 16:38 - 2025-03-08 06:12 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-03-05 16:34 - 2025-03-05 16:34 - 000070484 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-03-05 16:34 - 2025-03-05 16:34 - 000070484 _____ C:\WINDOWS\system32\ctac.json
2025-02-21 14:18 - 2025-02-21 14:26 - 000000130 _____ C:\Users\marti\AppData\LocalLow\24c7cb4dfbaa0319bba74211228f35bc56cb8a4687650425a857782996334f36
2025-02-21 14:18 - 2025-02-21 14:18 - 000000026 _____ C:\Users\marti\AppData\LocalLow\f7d30e88a6694af4be2ad4083dc9ad2cf1eb6da29bfd1cb63f9faa3a03d61ecb
2025-02-21 14:18 - 2025-02-21 14:18 - 000000026 _____ C:\Users\marti\AppData\LocalLow\9d82fd06ec339d1ae944315a6090e3fcb56f25f503d142cc791f3bb472b06d86
2025-02-19 16:13 - 2025-02-19 16:13 - 000000000 ____D C:\Users\marti\CrossDevice
2025-02-19 16:13 - 2025-02-19 16:13 - 000000000 ____D C:\ProgramData\CrossDevice
2025-02-17 07:41 - 2025-02-17 07:41 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-02-17 07:27 - 2025-03-06 19:38 - 000481192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-02-16 12:42 - 2025-02-16 13:35 - 000000000 ____D C:\ProgramData\TEMP
2025-02-16 12:42 - 2025-02-16 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Command Line Tools
2025-02-16 12:42 - 2025-02-16 12:42 - 000000000 ____D C:\Program Files (x86)\Bluetooth Command Line Tools
2025-02-15 18:36 - 2025-02-15 18:36 - 000100256 _____ C:\Users\marti\AppData\LocalLow\1abe83bf3928e1733c9a72893744cb4dce4d5fc00f5e02eccfea9dd76651b233
2025-02-15 18:36 - 2025-02-15 18:36 - 000000026 _____ C:\Users\marti\AppData\LocalLow\1094370e758ef6a9dd4514cf644ab9298cee63d028d8d6225c81d83c12605d91
2025-02-15 13:59 - 2025-02-15 19:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Downloader HD
2025-02-15 13:59 - 2025-02-15 19:00 - 000000000 ____D C:\Program Files (x86)\Youtube Downloader HD
2025-02-14 21:19 - 2025-02-14 21:19 - 000000000 ____D C:\ProgramData\Realtek
2025-02-14 21:19 - 2025-02-14 21:19 - 000000000 ____D C:\Program Files (x86)\TP-Link
2025-02-14 20:24 - 2025-02-14 20:24 - 000000000 ____D C:\Users\marti\AppData\Roaming\4kdownload.com
2025-02-08 05:56 - 2025-02-08 05:56 - 000000000 ____D C:\Program Files (x86)\DummyDir
2025-02-06 06:59 - 2025-02-06 21:13 - 000000000 ____D C:\Users\marti\AppData\Roaming\FreeFileSync
2025-02-06 06:59 - 2025-02-06 06:59 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2025-02-06 06:59 - 2025-02-06 06:59 - 000000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealTimeSync.lnk
2025-02-06 06:59 - 2025-02-06 06:59 - 000000000 ____D C:\Program Files\FreeFileSync
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-03-08 16:47 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-03-08 16:46 - 2025-01-26 07:33 - 000000466 _____ C:\Users\marti\AppData\LocalLow\da65008ffc7068591cc0826318ffb1cd2e25947a56a0835b592c008e33e07619
2025-03-08 16:46 - 2024-10-24 02:27 - 001603798 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-08 16:46 - 2024-05-20 21:46 - 000000000 ____D C:\Users\marti\AppData\Local\AVG
2025-03-08 16:46 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-08 16:46 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2025-03-08 16:44 - 2024-05-19 21:06 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-03-08 16:43 - 2024-12-16 20:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\PowerToys
2025-03-08 16:43 - 2023-11-26 20:05 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2025-03-08 16:42 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Registration
2025-03-08 16:41 - 2024-10-24 02:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-08 16:41 - 2024-10-24 02:25 - 000012702 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-03-08 16:41 - 2024-05-24 15:08 - 000000661 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2025-03-08 16:41 - 2024-05-20 21:45 - 000000000 ____D C:\ProgramData\AVG
2025-03-08 16:41 - 2024-05-20 21:30 - 000000000 ____D C:\Program Files\TeamViewer
2025-03-08 16:41 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-03-08 16:41 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-08 16:41 - 2023-11-26 20:00 - 000012288 ___SH C:\DumpStack.log.tmp
2025-03-08 07:28 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-08 06:32 - 2023-11-26 20:00 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-03-07 23:58 - 2024-05-21 16:20 - 000000666 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-03-07 23:58 - 2024-05-20 17:04 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-03-07 23:58 - 2024-05-19 21:03 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-03-07 23:16 - 2024-05-20 17:23 - 000000000 ____D C:\Users\marti\.VirtualBox
2025-03-07 22:39 - 2025-01-26 07:33 - 000735436 _____ C:\Users\marti\AppData\LocalLow\5ee1420138684b3400e6382f3ff220b00804414f6f221e5d8766d9690a8fdab1
2025-03-07 20:40 - 2025-02-05 10:22 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-395296610-1484778253-2832174162-1001
2025-03-07 20:40 - 2024-10-24 02:28 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-395296610-1484778253-2832174162-1001
2025-03-07 20:40 - 2024-10-24 02:28 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-03-07 20:40 - 2024-05-19 21:19 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-07 20:40 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-07 14:36 - 2024-10-24 02:28 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-03-07 14:36 - 2024-10-24 02:28 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-03-07 14:36 - 2024-10-24 02:28 - 000003294 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2025-03-07 14:36 - 2024-10-24 02:28 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-03-07 14:36 - 2024-10-24 02:28 - 000002952 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-03-07 14:36 - 2024-10-24 02:28 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - marti
2025-03-07 14:36 - 2024-10-24 02:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2025-03-07 14:31 - 2024-05-19 21:28 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Word
2025-03-07 11:17 - 2024-05-19 21:03 - 000001298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-03-07 11:16 - 2024-10-24 02:16 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-03-06 19:54 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2025-03-06 09:22 - 2024-04-01 09:03 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2025-03-06 09:21 - 2024-10-24 12:10 - 000000000 ____D C:\Program Files\Hyper-V
2025-03-06 09:21 - 2024-04-01 09:03 - 000000000 ____D C:\WINDOWS\InboxApps
2025-03-06 09:21 - 2024-04-01 09:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-03-06 09:21 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2025-03-06 09:01 - 2024-05-21 17:06 - 000000000 ____D C:\Users\marti\AppData\Roaming\TeraCopy
2025-03-06 07:12 - 2024-06-01 05:41 - 000000000 ____D C:\Users\marti\AppData\Local\ElevatedDiagnostics
2025-03-05 21:09 - 2024-11-23 06:17 - 000000130 _____ C:\Users\marti\AppData\LocalLow\f4cddfc501fe11bcfd874eb674fd1b0110f128bed6871a548cf83ab181b52fc7
2025-03-05 17:06 - 2024-04-01 08:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2025-03-05 16:34 - 2024-10-24 02:19 - 003346432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-03-04 19:51 - 2024-08-29 20:06 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-03-04 19:49 - 2024-10-24 02:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-03-02 21:21 - 2025-01-20 22:20 - 000000000 ____D C:\Users\marti\AppData\Roaming\avidemux
2025-03-02 19:09 - 2024-05-20 17:16 - 000000000 ____D C:\Users\marti\AppData\Roaming\vlc
2025-03-02 19:08 - 2025-01-20 22:27 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Avidemux 2.8 VC++ 64bits
2025-03-02 06:39 - 2023-11-26 20:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2025-03-02 06:39 - 2023-11-26 20:04 - 000000000 ____D C:\Program Files\Dell
2025-03-02 06:39 - 2023-11-26 20:03 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-02 06:38 - 2023-11-26 20:03 - 000000000 ____D C:\Program Files\dotnet
2025-03-01 06:55 - 2024-05-19 20:15 - 000000000 ____D C:\Users\marti\AppData\Local\D3DSCache
2025-02-28 08:02 - 2024-05-19 20:15 - 000000000 ____D C:\Users\marti\AppData\Local\Packages
2025-02-27 18:20 - 2024-11-22 21:32 - 000000298 _____ C:\Users\marti\AppData\LocalLow\4dc2fef2ec692101bff0c2cbb2b26f2a148593fb24bf997e04c5738491292f9e
2025-02-26 21:57 - 2024-05-20 22:03 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\PowerPoint
2025-02-25 20:49 - 2024-05-20 21:37 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2025-02-23 18:04 - 2024-05-24 05:50 - 000000000 ____D C:\Users\marti\AppData\Local\CrashDumps
2025-02-21 15:54 - 2024-06-02 22:31 - 000000000 ____D C:\Users\marti\AppData\Roaming\TeamViewer
2025-02-21 14:33 - 2024-11-22 21:32 - 000095533 _____ C:\Users\marti\AppData\LocalLow\f3d74d1306019f8f7aded30c90eb618dbf5a4e1571a3503edaf011b2ea997295
2025-02-21 14:18 - 2024-11-22 21:32 - 000170536 _____ C:\Users\marti\AppData\LocalLow\d5e314518cb799af79a4b8ac6da3af13048156917ab0052cc186ce25178c516c
2025-02-19 16:13 - 2024-10-24 02:24 - 000000000 ____D C:\Users\marti
2025-02-17 07:42 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-17 07:42 - 2023-11-26 20:05 - 000000000 ____D C:\Program Files\Microsoft Office
2025-02-16 14:47 - 2024-11-24 06:41 - 000000130 _____ C:\Users\marti\AppData\LocalLow\09401114998b03a2a1396f324890b24aba7c964759f0f0c683714894802c7910
2025-02-16 14:41 - 2024-10-18 06:04 - 000000000 ___DC C:\WINDOWS\Panther
2025-02-16 14:41 - 2024-05-19 21:28 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Office
2025-02-16 13:29 - 2025-01-29 18:12 - 000000130 _____ C:\Users\marti\AppData\LocalLow\9c91dfe78216cc23cace9ec39c03a2f20725e9be0c461fea4651b84c796efba8
2025-02-16 13:27 - 2025-01-29 18:12 - 000055525 _____ C:\Users\marti\AppData\LocalLow\871dc63eac86bf5071a564af3d320e1d95d2169ca65ed510ff7c8d1b514bf3e5
2025-02-15 18:20 - 2025-01-21 19:19 - 000000130 _____ C:\Users\marti\AppData\LocalLow\319e796ca5b119fb6613d8c77ba5c73822d43c370ea44a351aeb5b42d1af6947
2025-02-14 21:19 - 2023-11-26 20:10 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2025-02-13 18:05 - 2024-05-21 15:51 - 000055064 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2025-02-12 20:07 - 2024-11-20 05:53 - 000316232 _____ (Gen Digital Inc.) C:\WINDOWS\system32\avgBoot.exe
2025-02-12 20:07 - 2024-10-24 02:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2025-02-12 20:07 - 2024-05-20 21:45 - 000383056 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys
2025-02-12 20:07 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-02-12 20:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-02-12 18:26 - 2024-05-20 21:45 - 001424952 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSP.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000955960 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000550992 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgNetHub.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000381488 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000296016 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsh.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000275024 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000235088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgArPot.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000098360 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000084560 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbuniv.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000069712 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000028728 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgKbd.sys
2025-02-12 17:34 - 2024-05-19 21:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 17:31 - 2024-05-19 21:05 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-08 11:09 - 2025-01-31 17:02 - 000000000 ____D C:\Users\marti\AppData\Roaming\Kodi
==================== Files in the root of some directories ========
2024-10-28 18:23 - 2024-08-27 21:46 - 019170563 _____ () C:\Users\marti\yt-dlp.exe
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Ran by marti (administrator) on MY_PC_MZ (Dell Inc. OptiPlex Tower Plus 7010) (08-03-2025 16:51:47)
Running from C:\Portableapps\PortableApps\FRST64\FRST64.exe
Loaded Profiles: marti
Platform: Microsoft Windows 11 Pro Version 24H2 26100.3323 (X64) Language: Angličtina (Spojené státy) -> Čeština (Česko)
Default browser: "C:\Program Files\AVG\Browser\Application\AVGBrowser.exe" --single-argument %1
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.258.498.0_x64__zpdnekdrzrea0\Spotify.exe <8>
(AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGUI.exe <5>
(C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe ->) (InterPromo GMBH -> ) C:\Program Files\4KDownload\4kvideodownloaderplus\crashpad_handler.exe
(C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe ->) (InterPromo GMBH -> The Qt Company Ltd.) C:\Program Files\4KDownload\4kvideodownloaderplus\QtWebEngineProcess.exe <2>
(C:\Program Files\AVG\Antivirus\AVGSvc.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.18526.20144\OfficeClickToRun.exe
(C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe ->) (IndiLogic LLC -> ) C:\Program Files\Dell\Dell Peripheral Manager\DPMCrashHandler.exe <2>
(C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe ->) (IndiLogic LLC -> Dell Inc.) C:\Program Files\Dell\Dell Peripheral Manager\DPM.exe
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DellOptimizer\Dell.Optimizer.DthProxy\Dell.Optimizer.DthProxy.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DellOptimizer\DellOptimizer.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.Update.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\TeamViewer\TeamViewer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\133.0.3065.92\msedgewebview2.exe <6>
(C:\Program Files\TeamViewer\TeamViewer.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe <2>
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_x64.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25012.107.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25012.107.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\KeyboardManagerEngine\PowerToys.KeyboardManagerEngine.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.AlwaysOnTop.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.Awake.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.ColorPickerUI.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.CropAndLock.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.FancyZones.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.PowerLauncher.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\WinUI3Apps\PowerToys.AdvancedPaste.exe
(C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\WinUI3Apps\PowerToys.Peek.UI.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_helper.exe
(EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelManagementandSecurityStatus_2405.6.0.0_x64__8j3eq9eme6ctt\PrivacyIconClientGui\PrivacyIconClient.exe
(Elaborate Bytes AG -> Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(explorer.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Browser\Application\AVGBrowser.exe <44>
(explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (InterPromo GMBH -> InterPromo GMBH) C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.025.0209.0001\Microsoft.SharePoint.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2>
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
(explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe
(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesSvc64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <16>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe <2>
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\afwServ.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(services.exe ->) (CODE SECTOR PTY LTD -> ) C:\Program Files\TeraCopy\TeraCopyService.exe
(services.exe ->) (Dell Inc. -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(services.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Technologies Inc. -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TrustedDevice\Dell.TrustedDevice.Service.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (IndiLogic LLC -> Dell Inc.) C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_80dcb7b409148fed\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_cde08185192dc86d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6514d10de2313c47\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_1ba1a3d98a7c36a2\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_b966ea70c5407e74\WMIRegistrationService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.025.0209.0001\FileSyncHelper.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(services.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe <3>
(services.exe ->) (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy) C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd) C:\Windows\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesAudioService.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesSysSvc64.exe
(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25012.50.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.235.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.1301.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
Failed to access process -> vmmemCmZygote
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_04ff63d068f8c626\RtkAudUService64.exe [1961360 2023-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesSvc64.exe [5332192 2023-10-03] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [464712 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [11859680 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [105280 2020-02-23] (Elaborate Bytes AG -> Elaborate Bytes AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5007376 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [f.lux] => C:\Users\marti\AppData\Local\FluxSoftware\Flux\flux.exe [1533560 2024-08-08] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\25.025.0209.0001\Microsoft.SharePoint.exe [1026088 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\Run: [4K Video Downloader+] => C:\Program Files\4KDownload\4kvideodownloaderplus\4kvideodownloaderplus.exe [163874392 2025-02-14] (InterPromo GMBH -> InterPromo GMBH)
HKU\S-1-5-21-395296610-1484778253-2832174162-1001\...\MountPoints2: {09663097-8c8e-11ee-8568-806e6f6e6963} - "D:\startdvd.exe"
HKLM\...\Windows x64\Print Processors\shj2mPC: C:\Windows\System32\spool\prtprocs\x64\shj2mpc.dll [91216 2022-01-24] (联想图像(天津)科技有限公司 -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\shj2m Langmon: C:\WINDOWS\system32\shj2mlm.dll [70224 2022-01-24] (联想图像(天津)科技有限公司 -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{48F69C39-1356-4A7B-A899-70E3539D4982}] -> C:\Program Files\AVG\Browser\Application\131.0.27894.265\Installer\chrmstp.exe [2025-01-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2024-05-20]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02FD46C2-A0A6-45F4-B2E9-74ECD8A7B371} - System32\Tasks\Abelssoft\Abelssoft File Organizer_117 => C:\Program Files (x86)\File Organizer\AbLauncher.exe -minimized -autorun (No File)
Task: {BC40998C-577C-42E1-A782-B199AA4174E5} - System32\Tasks\AVG Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVG\Browser\Application\AVGBrowser.exe [3311400 2025-01-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {0344A4EF-A185-4371-AAAA-57A649FC4DE0} - System32\Tasks\AVG Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVG\Browser\Application\AVGBrowser.exe [3311400 2025-01-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {C1924652-8415-436A-B043-5BDF269FD515} - System32\Tasks\AVG\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [5251400 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {93817188-DCFF-4A27-BD1E-3E3399CAE1BE} - System32\Tasks\AVG\AVG Antivirus Patcher => C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus.exe [8425288 2024-12-16] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {5A06F312-316B-4A79-8A9A-17C8654F7BCE} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2385856 2024-05-20] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {6D600834-3C38-42D2-9D3D-BF3303355F99} - System32\Tasks\AVGBrowserProtectS-1-5-21-395296610-1484778253-2832174162-1001 => C:\Program Files\AVG\Browser\Application\AVGBrowserProtect.exe [1690040 2024-05-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {EC2180EC-8618-418F-A08E-DA9A5C262384} - System32\Tasks\AVGUpdateTaskMachineCore => C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {41D5B6A2-47D7-4CE2-A078-38D4465A5B65} - System32\Tasks\AVGUpdateTaskMachineUA => C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Task: {EA7B3D1F-87DB-4C71-B3AA-0F5C912C1D35} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)
Task: {6900CDCA-041A-41AB-BDC6-8E144E143B53} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "fe2736fc-7faf-4a21-af05-fcf1de64db46" --version "6.29.11342" --silent
Task: {1FB0C7CA-EEBC-41D0-AEF1-7D8EDC12D5DF} - System32\Tasks\CCleanerSkipUAC - marti => "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) (No File)
Task: {BAB5AA4F-8D15-4C4D-B121-1399D4E3DA5A} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [1000776 2024-12-19] (Dell Technologies Inc. -> Dell Inc.) -> C:\Program Files\Dell\SupportAssistAgent\bin\AutoUpdate
Task: {056B2132-8D30-4CC7-930F-D3D2423F50E8} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B7B05A3-871D-4DD4-8935-06D7CEED59C4} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E7BCD10-33E9-4F67-9780-AE6F583378D0} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1D487CC-0CDB-44D2-865C-841634BBF8FE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28752616 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {7427E023-C115-4B0B-95AD-599217C69EA4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {389BF253-E895-40F9-9BDE-EC708C9DD3FA} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312440 2025-02-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD6E0F87-D16E-42A8-B151-46FE41D1D298} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [194672 2025-02-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {0DEE7D8C-6BC3-4FD2-A1ED-C3C647ED3010} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4488592 2025-01-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {0D364AA5-392E-473E-9B8D-C6DA832DCDAC} - System32\Tasks\Microsoft\Windows\PLA\coresess => {FF679DA1-8FF2-4474-9C9E-52BBD409B557} C:\WINDOWS\system32\pla.dll [1667072 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
Task: {CEA9BF3D-32B8-4A7D-90CA-435422A52FC7} - System32\Tasks\Microsoft\Windows\PLA\esifumdfsess => {FF679DA1-8FF2-4474-9C9E-52BBD409B557} C:\WINDOWS\system32\pla.dll [1667072 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
Task: {6B1F56A9-3773-499A-93E8-9A74144443D0} - System32\Tasks\Microsoft\Windows\PLA\helpersess => {FF679DA1-8FF2-4474-9C9E-52BBD409B557} C:\WINDOWS\system32\pla.dll [1667072 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {0280E691-B1B5-4DFC-960E-213DDC38E313} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [34880 2025-03-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {0B500E88-F4C8-4278-B6E8-1EBD2C8E536D} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4222496 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {1AF61FF2-7A60-4E4F-9CED-9D3959624566} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-395296610-1484778253-2832174162-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4222496 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {6ACE6FED-1DA9-4F3B-9422-D849D8D4EE93} - System32\Tasks\OneDrive Startup Task-S-1-5-21-395296610-1484778253-2832174162-1001 => C:\Program Files\Microsoft OneDrive\25.025.0209.0001\OneDriveLauncher.exe [669224 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {A45E949D-AD03-4DF7-9FAD-FD522BA9C096} - System32\Tasks\PowerToys\Autorun for marti => C:\Users\marti\AppData\Local\PowerToys\PowerToys.exe [1231928 2024-12-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {C091BACF-44B3-40BF-828E-27974D76B0E1} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [140405056 2024-08-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files (x86)\Samsung\Samsung Magician\\--disable-gpu-sandbox /AUTOHIDE
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1eb15bc2-5702-440b-96f2-a83215909e37}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-04]
Edge Extension: (Dokumenty Google offline) - C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-01]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\marti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-05-19]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
FireFox:
========
FF DefaultProfile: dxv2geju.default
FF ProfilePath: C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default [2025-03-08]
FF DownloadDir: E:\Downloads
FF Homepage: Mozilla\Firefox\Profiles\dxv2geju.default -> hxxps://www.seznam.cz/
FF Notifications: Mozilla\Firefox\Profiles\dxv2geju.default -> hxxps://www.aliexpress.com; hxxps://web.whatsapp.com
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2024-05-19]
FF Extension: (DeepL: AI překladač a editor textů) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\firefox-extension@deepl.com.xpi [2024-11-07]
FF Extension: (Language: Čeština (Czech)) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2025-03-07]
FF Extension: (Save as PDF) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\save-as-pdf-ff@pdfcrowd.com.xpi [2024-05-20]
FF Extension: (yt-dlp downloader) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\yt_dlp_firefox@tyilo.com.xpi [2024-06-02]
FF Extension: (Gesturefy) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{506e023c-7f2b-40a3-8066-bc5deb40aebe}.xpi [2024-08-06]
FF Extension: (Copy/Paste and Save tabs list) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{a596357b-5d1f-4e04-ba81-4013c6d7d34e}.xpi [2024-07-02]
FF Extension: (Video DownloadHelper) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-01-31]
FF Extension: (No Name) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2025-03-05]
FF Extension: (DownThemAll!) - C:\Users\marti\AppData\Roaming\Mozilla\Firefox\Profiles\dxv2geju.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2024-10-24]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2024-12-04] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files (x86)\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-12-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.13\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.13\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @update.avgbrowser.com/AVG Browser;version=3 -> C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\npAvgBrowserUpdate3.dll [2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
FF Plugin-x32: @update.avgbrowser.com/AVG Browser;version=9 -> C:\Program Files (x86)\AVG\Browser\Update\1.8.1693.6\npAvgBrowserUpdate3.dll [2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
Chrome:
=======
CHR Profile: C:\Users\marti\AppData\Local\Google\Chrome\User Data\Default [2025-02-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\marti\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-05-21]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\marti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-05-21]hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5328200 2024-05-20] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
S2 avg; C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [815432 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [2446152 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [1266504 2025-02-12] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [7405896 2025-02-12] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgm; C:\Program Files (x86)\AVG\Browser\Update\AVGBrowserUpdate.exe [209736 2024-05-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
S3 AVGSecureBrowserElevationService; C:\Program Files\AVG\Browser\Application\131.0.27894.265\elevation_service.exe [1910136 2025-01-08] (AVG Technologies USA, LLC -> Gen Digital Inc.)
R2 AVGWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2024-05-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13617384 2025-02-08] (Microsoft Corporation -> Microsoft Corporation)
R2 CMigrationService; C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe [763200 2024-08-23] (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [460176 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [154512 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [482704 2024-07-15] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [59616 2025-01-31] (Dell Inc. -> )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22240 2024-09-26] (Dell Technologies Inc. -> Dell INC.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [51648 2024-11-13] (Dell Technologies Inc. -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [154544 2024-11-14] (Dell Technologies Inc. -> Dell)
R2 DellTrustedDevice; c:\Program Files\Dell\TrustedDevice\Dell.TrustedDevice.Service.exe [153800 2025-02-01] (Dell Technologies Inc. -> Dell)
R2 DPMService; C:\Program Files\Dell\Dell Peripheral Manager\DPMService.exe [2013048 2024-03-13] (IndiLogic LLC -> Dell Inc.)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.025.0209.0001\FileSyncHelper.exe [3532816 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2500072 2024-11-25] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-03-04] (HP Inc. -> HP Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_c25dbc60ad3b371a\lib\PlatformLicenseManagerService.exe [742904 2024-09-08] (Intel Corporation -> Intel(R) Corporation)
S3 IntelCstService; C:\WINDOWS\System32\DriverStore\FileRepository\icst_service.inf_amd64_498370087736dc57\intel_cst_service_standalone.exe [36156568 2023-09-13] (Intel Corporation -> Intel Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_uf.exe [2778760 2022-10-13] (Intel Corporation -> Intel Corporation)
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [13004248 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe [1505416 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.025.0209.0001\OneDriveUpdaterService.exe [3879976 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
R2 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [460096 2024-08-23] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559344 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [149832 2024-12-19] (Dell Technologies Inc. -> Dell Inc.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [21826352 2025-02-17] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 TeraCopyService.exe; C:\Program Files\TeraCopy\TeraCopyService.exe [317664 2023-06-29] (CODE SECTOR PTY LTD -> )
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [763024 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R2 WavesAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo12de.inf_amd64_f4d6230909497f9a\WavesAudioService.exe [160992 2023-10-03] (Waves Inc -> Waves Audio Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe [3236728 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe [133704 2024-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [235088 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [383056 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [296016 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [84560 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [28280 2024-11-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [28728 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [275024 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [550992 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [98360 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [69712 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [955960 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [1424952 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [204344 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [381488 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 DellBV; C:\WINDOWS\system32\DRIVERS\DellBV.sys [156208 2024-04-01] (Dell Inc -> Dell)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [44472 2024-11-12] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 DPMDriver; C:\WINDOWS\System32\drivers\DPMDriver.sys [139680 2022-12-08] (IndiLogic LLC -> Dell Inc.)
R1 dtdsel; C:\WINDOWS\System32\DRIVERS\dtdsel.sys [136248 2024-04-01] (Dell Inc -> Dell)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_7e337195b92a35b6\e1d.sys [611936 2023-08-31] (Intel Corporation -> Intel Corporation)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-24] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-24] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1617096 2024-05-06] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88776 2022-06-23] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_cf69bf74fab8a0f5\ipf_acpi.sys [87176 2022-10-13] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_cpu.sys [80520 2022-10-13] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_cf5beef3831571d4\ipf_lf.sys [443528 2022-10-13] (Intel Corporation -> Intel Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [140744 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
R2 Mrvdp; C:\WINDOWS\system32\drivers\mrvdp.sys [58112 2021-10-13] (Paramount Software UK Ltd -> Windows (R) Win 7 DDK provider)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [246200 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [256520 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1051944 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [195560 2024-10-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
R3 VClone; C:\WINDOWS\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S3 vkrnlintvsc; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsc.inf_amd64_ae7c1fb85fc0224e\vkrnlintvsc.sys [79168 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
R3 vkrnlintvsp; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsp.inf_amd64_bfd0794b3c810858\vkrnlintvsp.sys [91576 2025-01-15] (Microsoft Windows -> Microsoft Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602520 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 WiManHu; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_ed5a224638687261\WiManHu\WiManHu.sys [217400 2024-09-08] (Intel Corporation -> Intel Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-10-24] (Microsoft Windows -> Microsoft Corporation)
U3 AVG Business Console Client Antivirus Service; no ImagePath
U3 avgArDisk; no ImagePath
U3 avgBcc; no ImagePath
U3 avgbdisk; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-03-08 16:49 - 2025-03-08 16:52 - 000000000 ____D C:\FRST
2025-03-08 16:46 - 2025-03-08 16:46 - 000678580 _____ C:\WINDOWS\system32\perfh005.dat
2025-03-08 16:46 - 2025-03-08 16:46 - 000145416 _____ C:\WINDOWS\system32\perfc005.dat
2025-03-06 19:46 - 2025-03-07 23:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2025-03-06 09:21 - 2025-03-06 09:22 - 000000000 ____D C:\WINDOWS\Windows.SystemToast.PresenceSensing.OnlookerDetection
2025-03-05 16:38 - 2025-03-08 06:12 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-03-05 16:34 - 2025-03-05 16:34 - 000070484 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-03-05 16:34 - 2025-03-05 16:34 - 000070484 _____ C:\WINDOWS\system32\ctac.json
2025-02-21 14:18 - 2025-02-21 14:26 - 000000130 _____ C:\Users\marti\AppData\LocalLow\24c7cb4dfbaa0319bba74211228f35bc56cb8a4687650425a857782996334f36
2025-02-21 14:18 - 2025-02-21 14:18 - 000000026 _____ C:\Users\marti\AppData\LocalLow\f7d30e88a6694af4be2ad4083dc9ad2cf1eb6da29bfd1cb63f9faa3a03d61ecb
2025-02-21 14:18 - 2025-02-21 14:18 - 000000026 _____ C:\Users\marti\AppData\LocalLow\9d82fd06ec339d1ae944315a6090e3fcb56f25f503d142cc791f3bb472b06d86
2025-02-19 16:13 - 2025-02-19 16:13 - 000000000 ____D C:\Users\marti\CrossDevice
2025-02-19 16:13 - 2025-02-19 16:13 - 000000000 ____D C:\ProgramData\CrossDevice
2025-02-17 07:41 - 2025-02-17 07:41 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-02-17 07:27 - 2025-03-06 19:38 - 000481192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-02-16 12:42 - 2025-02-16 13:35 - 000000000 ____D C:\ProgramData\TEMP
2025-02-16 12:42 - 2025-02-16 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Command Line Tools
2025-02-16 12:42 - 2025-02-16 12:42 - 000000000 ____D C:\Program Files (x86)\Bluetooth Command Line Tools
2025-02-15 18:36 - 2025-02-15 18:36 - 000100256 _____ C:\Users\marti\AppData\LocalLow\1abe83bf3928e1733c9a72893744cb4dce4d5fc00f5e02eccfea9dd76651b233
2025-02-15 18:36 - 2025-02-15 18:36 - 000000026 _____ C:\Users\marti\AppData\LocalLow\1094370e758ef6a9dd4514cf644ab9298cee63d028d8d6225c81d83c12605d91
2025-02-15 13:59 - 2025-02-15 19:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Downloader HD
2025-02-15 13:59 - 2025-02-15 19:00 - 000000000 ____D C:\Program Files (x86)\Youtube Downloader HD
2025-02-14 21:19 - 2025-02-14 21:19 - 000000000 ____D C:\ProgramData\Realtek
2025-02-14 21:19 - 2025-02-14 21:19 - 000000000 ____D C:\Program Files (x86)\TP-Link
2025-02-14 20:24 - 2025-02-14 20:24 - 000000000 ____D C:\Users\marti\AppData\Roaming\4kdownload.com
2025-02-08 05:56 - 2025-02-08 05:56 - 000000000 ____D C:\Program Files (x86)\DummyDir
2025-02-06 06:59 - 2025-02-06 21:13 - 000000000 ____D C:\Users\marti\AppData\Roaming\FreeFileSync
2025-02-06 06:59 - 2025-02-06 06:59 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2025-02-06 06:59 - 2025-02-06 06:59 - 000000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealTimeSync.lnk
2025-02-06 06:59 - 2025-02-06 06:59 - 000000000 ____D C:\Program Files\FreeFileSync
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-03-08 16:47 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-03-08 16:46 - 2025-01-26 07:33 - 000000466 _____ C:\Users\marti\AppData\LocalLow\da65008ffc7068591cc0826318ffb1cd2e25947a56a0835b592c008e33e07619
2025-03-08 16:46 - 2024-10-24 02:27 - 001603798 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-08 16:46 - 2024-05-20 21:46 - 000000000 ____D C:\Users\marti\AppData\Local\AVG
2025-03-08 16:46 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-08 16:46 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2025-03-08 16:44 - 2024-05-19 21:06 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-03-08 16:43 - 2024-12-16 20:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\PowerToys
2025-03-08 16:43 - 2023-11-26 20:05 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2025-03-08 16:42 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Registration
2025-03-08 16:41 - 2024-10-24 02:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-08 16:41 - 2024-10-24 02:25 - 000012702 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-03-08 16:41 - 2024-05-24 15:08 - 000000661 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2025-03-08 16:41 - 2024-05-20 21:45 - 000000000 ____D C:\ProgramData\AVG
2025-03-08 16:41 - 2024-05-20 21:30 - 000000000 ____D C:\Program Files\TeamViewer
2025-03-08 16:41 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-03-08 16:41 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-08 16:41 - 2023-11-26 20:00 - 000012288 ___SH C:\DumpStack.log.tmp
2025-03-08 07:28 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-08 06:32 - 2023-11-26 20:00 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-03-07 23:58 - 2024-05-21 16:20 - 000000666 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-03-07 23:58 - 2024-05-20 17:04 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-03-07 23:58 - 2024-05-19 21:03 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-03-07 23:16 - 2024-05-20 17:23 - 000000000 ____D C:\Users\marti\.VirtualBox
2025-03-07 22:39 - 2025-01-26 07:33 - 000735436 _____ C:\Users\marti\AppData\LocalLow\5ee1420138684b3400e6382f3ff220b00804414f6f221e5d8766d9690a8fdab1
2025-03-07 20:40 - 2025-02-05 10:22 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-395296610-1484778253-2832174162-1001
2025-03-07 20:40 - 2024-10-24 02:28 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-395296610-1484778253-2832174162-1001
2025-03-07 20:40 - 2024-10-24 02:28 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-03-07 20:40 - 2024-05-19 21:19 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-07 20:40 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-07 14:36 - 2024-10-24 02:28 - 000003568 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-03-07 14:36 - 2024-10-24 02:28 - 000003344 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-03-07 14:36 - 2024-10-24 02:28 - 000003294 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2025-03-07 14:36 - 2024-10-24 02:28 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-03-07 14:36 - 2024-10-24 02:28 - 000002952 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-03-07 14:36 - 2024-10-24 02:28 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - marti
2025-03-07 14:36 - 2024-10-24 02:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2025-03-07 14:31 - 2024-05-19 21:28 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Word
2025-03-07 11:17 - 2024-05-19 21:03 - 000001298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-03-07 11:16 - 2024-10-24 02:16 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-03-06 19:54 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2025-03-06 09:22 - 2024-04-01 09:03 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-03-06 09:22 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2025-03-06 09:21 - 2024-10-24 12:10 - 000000000 ____D C:\Program Files\Hyper-V
2025-03-06 09:21 - 2024-04-01 09:03 - 000000000 ____D C:\WINDOWS\InboxApps
2025-03-06 09:21 - 2024-04-01 09:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-03-06 09:21 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-03-06 09:21 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2025-03-06 09:01 - 2024-05-21 17:06 - 000000000 ____D C:\Users\marti\AppData\Roaming\TeraCopy
2025-03-06 07:12 - 2024-06-01 05:41 - 000000000 ____D C:\Users\marti\AppData\Local\ElevatedDiagnostics
2025-03-05 21:09 - 2024-11-23 06:17 - 000000130 _____ C:\Users\marti\AppData\LocalLow\f4cddfc501fe11bcfd874eb674fd1b0110f128bed6871a548cf83ab181b52fc7
2025-03-05 17:06 - 2024-04-01 08:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2025-03-05 16:34 - 2024-10-24 02:19 - 003346432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-03-04 19:51 - 2024-08-29 20:06 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-03-04 19:49 - 2024-10-24 02:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-03-02 21:21 - 2025-01-20 22:20 - 000000000 ____D C:\Users\marti\AppData\Roaming\avidemux
2025-03-02 19:09 - 2024-05-20 17:16 - 000000000 ____D C:\Users\marti\AppData\Roaming\vlc
2025-03-02 19:08 - 2025-01-20 22:27 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Avidemux 2.8 VC++ 64bits
2025-03-02 06:39 - 2023-11-26 20:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2025-03-02 06:39 - 2023-11-26 20:04 - 000000000 ____D C:\Program Files\Dell
2025-03-02 06:39 - 2023-11-26 20:03 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-02 06:38 - 2023-11-26 20:03 - 000000000 ____D C:\Program Files\dotnet
2025-03-01 06:55 - 2024-05-19 20:15 - 000000000 ____D C:\Users\marti\AppData\Local\D3DSCache
2025-02-28 08:02 - 2024-05-19 20:15 - 000000000 ____D C:\Users\marti\AppData\Local\Packages
2025-02-27 18:20 - 2024-11-22 21:32 - 000000298 _____ C:\Users\marti\AppData\LocalLow\4dc2fef2ec692101bff0c2cbb2b26f2a148593fb24bf997e04c5738491292f9e
2025-02-26 21:57 - 2024-05-20 22:03 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\PowerPoint
2025-02-25 20:49 - 2024-05-20 21:37 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2025-02-23 18:04 - 2024-05-24 05:50 - 000000000 ____D C:\Users\marti\AppData\Local\CrashDumps
2025-02-21 15:54 - 2024-06-02 22:31 - 000000000 ____D C:\Users\marti\AppData\Roaming\TeamViewer
2025-02-21 14:33 - 2024-11-22 21:32 - 000095533 _____ C:\Users\marti\AppData\LocalLow\f3d74d1306019f8f7aded30c90eb618dbf5a4e1571a3503edaf011b2ea997295
2025-02-21 14:18 - 2024-11-22 21:32 - 000170536 _____ C:\Users\marti\AppData\LocalLow\d5e314518cb799af79a4b8ac6da3af13048156917ab0052cc186ce25178c516c
2025-02-19 16:13 - 2024-10-24 02:24 - 000000000 ____D C:\Users\marti
2025-02-17 07:42 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-17 07:42 - 2023-11-26 20:05 - 000000000 ____D C:\Program Files\Microsoft Office
2025-02-16 14:47 - 2024-11-24 06:41 - 000000130 _____ C:\Users\marti\AppData\LocalLow\09401114998b03a2a1396f324890b24aba7c964759f0f0c683714894802c7910
2025-02-16 14:41 - 2024-10-18 06:04 - 000000000 ___DC C:\WINDOWS\Panther
2025-02-16 14:41 - 2024-05-19 21:28 - 000000000 ____D C:\Users\marti\AppData\Roaming\Microsoft\Office
2025-02-16 13:29 - 2025-01-29 18:12 - 000000130 _____ C:\Users\marti\AppData\LocalLow\9c91dfe78216cc23cace9ec39c03a2f20725e9be0c461fea4651b84c796efba8
2025-02-16 13:27 - 2025-01-29 18:12 - 000055525 _____ C:\Users\marti\AppData\LocalLow\871dc63eac86bf5071a564af3d320e1d95d2169ca65ed510ff7c8d1b514bf3e5
2025-02-15 18:20 - 2025-01-21 19:19 - 000000130 _____ C:\Users\marti\AppData\LocalLow\319e796ca5b119fb6613d8c77ba5c73822d43c370ea44a351aeb5b42d1af6947
2025-02-14 21:19 - 2023-11-26 20:10 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2025-02-13 18:05 - 2024-05-21 15:51 - 000055064 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2025-02-12 20:07 - 2024-11-20 05:53 - 000316232 _____ (Gen Digital Inc.) C:\WINDOWS\system32\avgBoot.exe
2025-02-12 20:07 - 2024-10-24 02:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVG
2025-02-12 20:07 - 2024-05-20 21:45 - 000383056 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys
2025-02-12 20:07 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-02-12 20:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-02-12 18:26 - 2024-05-20 21:45 - 001424952 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSP.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000955960 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000550992 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgNetHub.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000381488 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000296016 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbidsh.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000275024 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000235088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgArPot.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000098360 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000084560 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgbuniv.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000069712 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2025-02-12 18:26 - 2024-05-20 21:45 - 000028728 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\avgKbd.sys
2025-02-12 17:34 - 2024-05-19 21:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 17:31 - 2024-05-19 21:05 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-08 11:09 - 2025-01-31 17:02 - 000000000 ____D C:\Users\marti\AppData\Roaming\Kodi
==================== Files in the root of some directories ========
2024-10-28 18:23 - 2024-08-27 21:46 - 019170563 _____ () C:\Users\marti\yt-dlp.exe
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================