Je v tom sajrajt
Napsal: 21 dub 2025 08:30
Ahoj, asi jsem si tam něco natáhnul. Ani FRST jsem nemohl stáhnout. Prosím pomůžete mi se toho zbavit? Je možné aby se mi to dostalo do NASu samo od sebe? S NASkou problém nemám jen pro jistotu se ptám.
FRST LOG
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-04-2025
Ran by Robert (administrator) on DESKTOP-EC0CQAC (LENOVO 20W4008QCK) (21-04-2025 08:47:52)
Running from C:\Users\Robert\Desktop\FRST64.exe
Loaded Profiles: Robert
Platform: Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(SmartDisplayAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe
(C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_809f877e731b908b\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_809f877e731b908b\igfxEMN.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\tphkload.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\FN189C~1.INF\driver\shtctky.exe
(DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\tphkload.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\FN189C~1.INF\driver\tposd.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation) [File not signed] C:\Users\Robert\AppData\Roaming\Adobe\LogTransport2\BMLFJMJNHGHGHMDK.exe <4>
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_809f877e731b908b\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_897ea327b3fe52f7\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_2c7653f29a37d3f4\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_84147fa7a978ce4e\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_64c76657d20bdb6c\AS\IAS\IntelAudioService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\tphkload.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\ibmpmsvc.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\SmartStandby.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_5d23f3d1b4649e1b\x64\LITSSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_15da36fcaef0532a\RtkAudUService64.exe <3>
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (WDKTestCert sarakelyan,130722862255941761 -> Synaptics Incorporated.) C:\Windows\System32\DriverStore\FileRepository\synawudfbiousbuwp.inf_amd64_0a328caa48d41753\SynRpcServer.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25031.45.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.5100.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wscript.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\Run: [MicrosoftEdgeAutoLaunch_A9F6DCE4ABADF4F51CF45CD7129E3C6C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4419624 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5012288 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\135.0.7049.96\Installer\chrmstp.exe [2025-04-16] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {F9FFBAD8-40B4-4193-957E-57B560E56389} - System32\Tasks\BMLFJMJNHGHGHMDK_run => C:\Users\Robert\AppData\Roaming\Adobe\LogTransport2\BMLFJMJNHGHGHMDK.exe [95648 2025-04-20] (Microsoft Corporation) [File not signed] <==== ATTENTION
Task: {E9AE75BF-F096-42F4-85A1-640F209E5B5B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem137.0.7129.0{1E9B4D49-5D8D-4862-A673-7F0EF828117D} => C:\Program Files (x86)\Google\GoogleUpdater\137.0.7129.0\updater.exe [7375968 2025-04-17] (Google LLC -> Google LLC)
Task: {EABB8C52-E3E2-4923-98CC-C9F41A843AFB} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-348134008-3669429990-2405808313-1000 => C:\Users\Robert\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [88584 2024-05-17] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {C75347AB-F64F-4079-9308-957F46387B2D} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [129880 2025-02-26] (Lenovo -> Lenovo)
Task: {F50F01DC-3084-4666-9862-6B4C1CB4A115} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\WINDOWS\SysWOW64\PowerMgrInst.exe [67408 2025-02-26] (Lenovo -> )
Task: {18FD1406-2EBD-4A53-A44B-3F5C8F1881C9} - System32\Tasks\Lenovo\SmartStandby\Daily analysis => C:\Windows\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\AutonomicMgr.exe [76640 2024-05-09] (Lenovo -> )
Task: {A6D8A19B-9F4D-44E3-A683-33B2DFC59810} - System32\Tasks\Lenovo\SmartStandby\Uninstall Monitor => C:\WINDOWS\system32\SmartStandbyInst.exe [45912 2024-05-09] (Lenovo -> )
Task: {C920CF69-F72A-426E-8FB3-856358E5B14E} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-04-16] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {E724211B-98E4-4BC4-B095-87B00B381741} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {0592107C-4408-4C16-B710-75DD6CA9F958} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {5014C81E-CF85-44B0-8316-25B15649D9C8} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {AD587160-D234-4A8D-BF93-067D31A2879A} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {C507AC32-29A4-42CE-8C09-105BCEE4A46B} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {EE87D050-BB33-4E6C-943C-50C91EB42A50} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {E9223D50-2175-4D41-BFFC-0B0C4664F40D} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.0.0.190\x64\IdleScheduleEventAction.exe [143768 2025-04-16] (Lenovo -> )
Task: {C9AB2E8C-903B-46ED-B536-0647C130A5C1} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {3F411951-8609-4013-B65F-150FD530B20C} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {72DE212B-C891-41A0-9EC3-665B143ECE82} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {777A2ADF-E7C4-4AA5-944D-1E9A732918FE} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107936 2025-04-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {0E38424F-3F8C-4446-96B5-CC5E2063A86D} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [68328 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {E03BBFFD-D5A6-4FC2-AB47-627A369130BC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107936 2025-04-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {74A09291-DC80-4C27-90B6-7A16722C9683} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {91732E80-E9EE-4376-A1C3-688A92807553} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {1A37D3CD-13FA-479F-980A-727239CB9848} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [204400 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {6C0A2C4E-EADD-495B-A328-BA75084E73B6} - System32\Tasks\Microsoft\Windows\AccountHealth\RecoverabilityToastTask => {B7F5B442-EBF8-46CD-9F0B-D8E45ED43492} C:\WINDOWS\system32\AccountHealth.dll [258048 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {DE0CE9D6-5754-4E22-9FB5-D53201630A17} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs (No File)
Task: {64D789D9-EECD-4F4E-B4C4-B1466905B8C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AFA4A06A-392A-48B9-A975-DD75236B47F4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7216411B-9740-4416-A3A5-CD6AC72F0135} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D9453C3A-CC73-4E43-84B5-AF45B2F5DE00} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {399355BA-56DB-4F3F-9451-243DFEED7F4F} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223808 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {05324EE4-A380-42C5-9224-793CE0E63C98} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-348134008-3669429990-2405808313-1000 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223808 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {A964EC2E-396D-4044-BBD8-254C32C0B0AC} - System32\Tasks\OneDrive Startup Task-S-1-5-21-348134008-3669429990-2405808313-1000 => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\OneDriveLauncher.exe [674624 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDEAF88A-7ACC-4880-9FF9-1CA2E691D58C} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_15da36fcaef0532a\RtkAudUService64.exe [1981272 2024-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {C835480B-D973-42EB-8F9D-6D4637B23E35} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
Task: {3C4FAE5B-02F7-4B02-A0F6-2CEEFEE54877} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{7202196d-07a4-4c80-8336-28b4b82e805b}: [NameServer] 1.1.1.1
Tcpip\..\Interfaces\{7202196d-07a4-4c80-8336-28b4b82e805b}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{72051672-1b02-11f0-99ab-806e6f6e6963}: [NameServer] 1.1.1.1
Tcpip\..\Interfaces\{ea92d9f4-e9ea-4735-835b-900d22a1402e}: [NameServer] 1.1.1.1,8.8.8.8
Edge:
=======
Edge Profile: C:\Users\Robert\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-21]
Edge Extension: (Dokumenty Google offline) - C:\Users\Robert\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-16]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\Robert\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-16]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default [2025-04-21]
CHR Notifications: Default -> hxxps://web.whatsapp.com; hxxps://www.wondershare.com
CHR HomePage: Default -> hxxps://www.google.com/
CHR Session Restore: Default -> is enabled.
CHR Extension: (Rozšíření Synology Image Assistant) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aadgfjmilhfblodmkgilohhjlakchfmg [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Tinkercad) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhggmehigifnpflipbkdfcjiacpcgidn [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (GPX Viewer, Reader) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcoebkjfbobjheeoclnjkfgginlaefnb [2025-04-16]hxxp://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Material Simple Dark Grey) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookepigabmicjpgfnmncjiplegcacdbm [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-04-21]
CHR HomePage: Profile 1 -> hxxps://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxp://google.com/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Norton Password Manager) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\admmjipmmciaobhojoghlmleefbicajg [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Sudoku) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\agdhembpgcpfegeigidembjopfhghnpj [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Causality Games) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\femoooemgmjaebeodbbikbkmhlafenpl [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Full Screen Weather) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fkkaebihfmbofclegkcfkkemepfehibg [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Cut the Rope) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gkddaofiamhgfjmaccfcfpfolpgbeomj [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (FormApps Extension) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Equalizer for YouTube™) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oggiagogblgafoilijjdhcmflgekfmja [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\Robert\AppData\Local\Google\Chrome\User Data\System Profile [2025-04-18]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13862104 2025-04-08] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe [2549352 2024-08-16] (Dolby Laboratories, Inc. -> Dolby Laboratories)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncHelper.exe [3543888 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [479656 2022-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 IBMPMSVC; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\ibmpmsvc.exe [1037168 2024-10-14] (Lenovo -> Lenovo)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_64c76657d20bdb6c\AS\IAS\IntelAudioService.exe [532328 2024-08-08] (Intel Corporation -> Intel)
S4 LenovoBrightCtrl; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_5d23f3d1b4649e1b\x64\BrightnessControl.exe [157016 2025-01-28] (Lenovo -> Lenovo.)
R2 LenovoSmartStandby; C:\WINDOWS\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\SmartStandby.exe [341336 2024-05-09] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe [34816 2025-02-20] (Lenovo -> Lenovo)
R2 LITSSVC; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_5d23f3d1b4649e1b\x64\LITSSvc.exe [1143128 2025-01-28] (Lenovo -> Lenovo.)
S2 LPlatSvc; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\LPlatSvc.exe [916344 2024-10-14] (Lenovo -> Lenovo)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NativePushService; C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe [594320 2023-05-06] (Wondershare Technology Group Co.,Ltd -> Wondershare)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.051.0317.0003\OneDriveUpdaterService.exe [3891536 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SynHsaService; C:\WINDOWS\System32\DriverStore\FileRepository\synawudfbiousbuwp.inf_amd64_0a328caa48d41753\SynRpcServer.exe [192128 2023-08-25] (WDKTestCert sarakelyan,130722862255941761 -> Synaptics Incorporated.)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256368 2022-12-15] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [22178608 2025-03-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 TPHKLOAD; C:\WINDOWS\System32\DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\TPHKLOAD.exe [316928 2025-02-24] (Lenovo -> Lenovo)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [107624 2018-12-06] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 dg; C:\Intel\dg.exe [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AKCCID; C:\WINDOWS\System32\drivers\AKCCID.sys [77272 2023-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Generic)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_fcfdc62bfce8f55f\e1d.sys [613088 2024-09-10] (Intel Corporation -> Intel Corporation)
R3 GlPciSD; C:\WINDOWS\System32\drivers\GlPciSD.sys [240904 2024-05-13] (GENESYS LOGIC, INC. -> Genesys Logic)
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_d0e63c4e3754f42f\iaLPSS2_GPIO2_TGL.sys [128152 2020-08-09] (Intel Corporation -> Intel Corporation)
R3 IBMPMDRV; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\ibmpmdrv.sys [56696 2024-10-14] (Lenovo -> Lenovo)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_3483c60a14224d09\IntcUSB.sys [938344 2024-08-08] (Intel Corporation -> Intel(R) Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
R1 PMDRVS; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\pmdrvs.sys [42336 2024-10-14] (Lenovo -> Lenovo)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-16] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-04-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [605576 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
R3 WiManH; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_7976829cdaa6ca7e\WiManH\WiManH.sys [184248 2024-12-02] (Intel Corporation -> Intel Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_bdb09ebda2834009\wini3ctarget.sys [75168 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
S3 LenovoDiagnosticsDriver; \??\C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\4.0.0.15\LenovoDiagnosticsDriver.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-21 08:47 - 2025-04-21 08:48 - 000031224 _____ C:\Users\Robert\Desktop\FRST.txt
2025-04-21 08:47 - 2025-04-21 08:44 - 002404864 _____ (Farbar) C:\Users\Robert\Desktop\FRST64.exe
2025-04-21 08:40 - 2025-04-21 08:48 - 000000000 ____D C:\FRST
2025-04-21 08:40 - 2025-04-21 08:40 - 002297344 _____ (Farbar) C:\Users\Robert\Downloads\FRST64.exe
2025-04-21 07:07 - 2025-04-21 07:07 - 000714490 _____ C:\WINDOWS\system32\perfh005.dat
2025-04-21 07:07 - 2025-04-21 07:07 - 000153652 _____ C:\WINDOWS\system32\perfc005.dat
2025-04-20 21:20 - 2025-04-20 21:50 - 000000000 ____D C:\Users\Robert\AppData\Roaming\obs-studio
2025-04-20 21:20 - 2025-04-20 21:20 - 000000000 ____D C:\ProgramData\obs-studio
2025-04-20 21:19 - 2025-04-20 21:19 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2025-04-20 21:19 - 2025-04-20 21:19 - 000000000 ____D C:\ProgramData\obs-studio-hook
2025-04-20 21:19 - 2025-04-20 21:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2025-04-20 21:19 - 2025-04-20 21:19 - 000000000 ____D C:\Program Files\obs-studio
2025-04-20 21:18 - 2025-04-20 21:18 - 156196264 _____ (OBS Project) C:\Users\Robert\Downloads\OBS-Studio-31.0.2-Windows-Installer.exe
2025-04-20 21:06 - 2025-04-20 21:10 - 000000000 ____D C:\Users\Robert\AppData\Local\Sony
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Roaming\VEGAS Pro
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Roaming\VEGAS
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Roaming\MAGIX
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Local\VEGAS Pro
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Local\MAGIX
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\ProgramData\VEGAS Pro
2025-04-20 21:05 - 2025-04-20 21:10 - 000000000 ____D C:\ProgramData\Magix
2025-04-20 21:05 - 2025-04-20 21:05 - 000001118 _____ C:\Users\Public\Desktop\VEGAS Pro 15.0.lnk
2025-04-20 21:03 - 2025-04-20 21:03 - 000003310 _____ C:\WINDOWS\system32\Tasks\BMLFJMJNHGHGHMDK_run
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\AlibabaProtect
2025-04-20 19:57 - 2025-04-20 21:05 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Sony
2025-04-20 19:57 - 2025-04-20 21:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS
2025-04-20 19:57 - 2025-04-20 19:57 - 000000000 ____D C:\Users\Robert\AppData\Local\VEGAS
2025-04-20 19:44 - 2025-04-20 19:44 - 000005866 _____ C:\Users\Robert\AppData\LocalLow\183fe6247284088bf5e3cb9f4cf38746039fa07f000070dabdfab908a343a64e
2025-04-20 19:44 - 2025-04-20 19:44 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\a8b141efd5a28a0535a4b1cef38c232052f69977de70ef5ac15dddb5a77f531f
2025-04-20 19:27 - 2025-04-20 19:27 - 000000000 ____D C:\Users\Robert\AppData\Roaming\TeamViewer
2025-04-20 19:12 - 2025-04-20 19:23 - 000000000 ____D C:\Users\Robert\AppData\Local\TeamViewer
2025-04-20 19:12 - 2025-04-20 19:12 - 000000889 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer.lnk
2025-04-20 19:12 - 2025-04-20 19:12 - 000000877 _____ C:\Users\Public\Desktop\TeamViewer.lnk
2025-04-20 19:05 - 2025-04-20 19:05 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\MMC
2025-04-20 08:50 - 2025-04-20 08:51 - 011622546 _____ C:\Users\Robert\Desktop\mb_manual_ga-h81m-s2v.pdf
2025-04-20 08:30 - 2025-04-20 08:33 - 000035240 _____ C:\Users\Robert\AppData\LocalLow\b15d3a108baf677bad705d2193ceb1d29295e9ae5672296ad2f6ec14fa4d226f
2025-04-20 08:30 - 2025-04-20 08:33 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\9efc7b77bc60a484afa1dbca8105b35ad2d2bcddf61075a21cfb283050ad9d1e
2025-04-19 19:38 - 2025-04-20 21:13 - 000000000 ____D C:\Users\Robert\AppData\Local\Adobe
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\Roaming\com.adobe.dunamis
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\LocalLow\Adobe
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\Local\SolidDocuments
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\.ms-ad
2025-04-19 19:36 - 2025-04-20 21:14 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-04-19 19:34 - 2025-04-19 19:34 - 000100661 _____ C:\Users\Robert\Downloads\michaela-pohlova-shopping_list.pdf
2025-04-19 09:19 - 2025-04-19 09:19 - 000000000 ____D C:\Users\Robert\AppData\Local\Sony Corporation
2025-04-19 09:18 - 2025-04-19 09:18 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PS Remote Play.lnk
2025-04-19 09:18 - 2025-04-19 09:18 - 000002081 _____ C:\Users\Public\Desktop\PS Remote Play.lnk
2025-04-19 07:28 - 2025-04-19 07:28 - 000000000 ____D C:\WINDOWS\system32\%userprofile%
2025-04-18 22:36 - 2025-04-18 22:36 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2025-04-18 22:27 - 2025-04-18 22:28 - 000000000 ____D C:\Users\Robert\Documents\Witcher 2
2025-04-18 22:27 - 2025-04-18 22:27 - 000000000 ____D C:\Users\Robert\AppData\Local\The Witcher 2
2025-04-18 22:25 - 2025-03-27 23:40 - 4234857752 _____ C:\Users\Robert\Desktop\Zaklinac - Andrzej Sapkowski (Audioknihy komplet 01-08) (2).rar
2025-04-18 22:22 - 2025-04-14 18:14 - 000603822 _____ C:\Users\Robert\Documents\impressa-s9-s90-s95.pdf
2025-04-18 22:22 - 2025-04-14 18:14 - 000523493 _____ C:\Users\Robert\Documents\S7_S8_S9_instructions.pdf
2025-04-18 22:22 - 2025-02-22 15:16 - 004165367 _____ C:\Users\Robert\Documents\BN94 06301V UE32F5000AK.pdf
2025-04-18 22:21 - 2025-03-26 08:03 - 1274542565 _____ C:\Users\Robert\Desktop\Foto tábor.rar
2025-04-18 22:19 - 2025-04-18 22:19 - 000000000 ____D C:\Users\Robert\Desktop\cloudclone
2025-04-18 22:18 - 2025-04-18 22:19 - 000000000 ____D C:\Users\Robert\Desktop\lyzak
2025-04-18 22:18 - 2025-04-18 22:18 - 000085515 _____ C:\Users\Robert\AppData\LocalLow\34f6b2483462849a0a6b86842dbaed8595c9b1ea24a510ce6cabb8d612885e8b
2025-04-18 22:18 - 2025-04-18 22:18 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\4fca0a34b497acffbb870a4cea576f3ac71f00928c3146fe3d0d2dac45c9d5fb
2025-04-18 22:18 - 2025-04-18 22:18 - 000000000 ____D C:\Users\Robert\Desktop\zdroje jarda
2025-04-18 22:18 - 2025-04-14 19:53 - 000010049 _____ C:\Users\Robert\Desktop\komponenty.xlsx
2025-04-18 22:18 - 2025-04-11 20:26 - 001687344 _____ (Akeo Consulting) C:\Users\Robert\Desktop\rufus-4.7.exe
2025-04-18 21:27 - 2025-04-18 21:27 - 000000000 ____D C:\Users\Robert\AppData\LocalLow\Apoapsis Studios
2025-04-18 21:18 - 2025-04-18 21:18 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Apoapsis Studios
2025-04-18 21:17 - 2025-04-18 22:32 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-04-18 21:17 - 2025-04-18 21:17 - 000000222 _____ C:\Users\Robert\Desktop\Airport CEO.url
2025-04-18 21:06 - 2025-04-18 21:16 - 000000000 ____D C:\Users\Robert\AppData\Local\Steam
2025-04-18 21:06 - 2025-04-18 21:06 - 000001032 _____ C:\Users\Public\Desktop\Steam.lnk
2025-04-18 21:06 - 2025-04-18 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2025-04-18 20:39 - 2025-04-18 20:39 - 000000277 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2025-04-18 20:39 - 2025-04-18 20:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lenovo
2025-04-17 23:09 - 2025-04-17 23:09 - 000001304 _____ C:\Users\Public\Desktop\Wondershare Video Converter Ultimate.lnk
2025-04-17 23:09 - 2025-04-17 23:09 - 000000000 ____D C:\Users\Robert\Documents\Wondershare MediaServer
2025-04-17 23:09 - 2025-04-17 23:09 - 000000000 ____D C:\Users\Robert\AppData\Roaming\TransferSupport
2025-04-17 23:09 - 2025-04-17 23:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2025-04-17 22:55 - 2025-04-17 22:55 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2025-04-17 22:49 - 2025-04-17 22:49 - 000000000 ____D C:\Users\Robert\AppData\Local\CEF
2025-04-17 22:47 - 2025-04-17 23:11 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Wondershare
2025-04-17 22:47 - 2025-04-17 23:11 - 000000000 ____D C:\Users\Robert\AppData\Local\Wondershare
2025-04-17 22:46 - 2025-04-20 20:41 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\d184b3a61bf4be513cbb771b07df842ddf56f91b67d9cbe187f53880ca9b5c5d
2025-04-17 22:46 - 2025-04-20 20:38 - 000015661 _____ C:\Users\Robert\AppData\LocalLow\7c20ed46f96c41e8f4707573a4b5f44f7b40b89f3834b85911e9c253e71a658b
2025-04-17 22:21 - 2025-04-17 22:44 - 000000000 ____D C:\Users\Robert\AppData\Roaming\XnViewMP
2025-04-17 22:21 - 2025-04-17 22:24 - 000001719 _____ C:\Users\Robert\Desktop\XnView MP.lnk
2025-04-17 22:21 - 2025-04-17 22:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView MP
2025-04-17 22:13 - 2025-04-17 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO® 64
2025-04-17 22:13 - 2025-04-17 22:13 - 000000871 _____ C:\Users\Robert\Desktop\HWiNFO® 64.lnk
2025-04-17 22:13 - 2025-04-17 22:13 - 000000000 ____D C:\Users\Robert\AppData\Local\NEO
2025-04-17 22:09 - 2025-04-17 22:09 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\cf805d2f713496e708d42cbe5b9db8431a0ba71406dfe310e335188ebe737739
2025-04-17 22:08 - 2025-04-17 22:09 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Office
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Word
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\UProof
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Proof
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\AddIns
2025-04-17 22:07 - 2025-04-18 20:34 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\6c24cb48ad07e609b202da5bed0daad6e1f9cb902cb99c540bf998f0f78f497e
2025-04-17 22:07 - 2025-04-17 22:07 - 000052818 _____ C:\Users\Robert\AppData\LocalLow\37f22b22f7257f250884789ed6922f2c0f52d958a7a44f0a052c7a8a4540db4f
2025-04-17 22:07 - 2025-04-17 22:07 - 000005862 _____ C:\Users\Robert\AppData\LocalLow\31a05236bf63c1322dc2ad96fbc5fce66984281a7cc297635054f13ce385aba4
2025-04-17 22:07 - 2025-04-17 22:07 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\8222ed2b145f79e157d837f2f36fe58b0d2479c19d62a4eaf36319ae4a5db9ee
2025-04-17 22:03 - 2025-04-19 07:28 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-04-17 22:03 - 2025-04-19 07:28 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-17 22:03 - 2025-04-19 07:28 - 000000000 ___RD C:\Users\Default\OneDrive
2025-04-17 22:02 - 2025-04-17 22:02 - 000002573 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes (new).lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002517 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2025-04-17 22:02 - 2025-04-17 22:02 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-04-17 21:57 - 2025-04-17 21:57 - 000000000 ____D C:\Users\Robert\AppData\Local\PeerDistRepub
2025-04-17 21:50 - 2025-04-17 21:50 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\8c90dfe160aa4d7986b18c7fec0883014fca29eb8008c982dfaa42b780933236
2025-04-17 21:49 - 2025-04-17 22:03 - 000014087 _____ C:\Users\Robert\AppData\LocalLow\c471a3f3b88ab9b37460e73f6bb1a3e7a513a2a2866fad587ff56ef5a1ad7e6c
2025-04-17 21:49 - 2025-04-17 21:49 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\bef33e67af07b07688c0a6330e732d016df14dc5824def44f89868a00efa36c8
2025-04-17 21:41 - 2025-04-17 22:06 - 000000000 ____D C:\Users\Robert\AppData\Local\GHISLER
2025-04-17 21:40 - 2025-04-17 21:41 - 000000000 ____D C:\Users\Robert\AppData\Roaming\GHISLER
2025-04-17 21:40 - 2025-04-17 21:40 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2025-04-17 21:02 - 2025-04-17 21:02 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\d1cf5ddacfbcfdb200ecab8573d5a879b9c9dd1809e72636b96abe744dc5c1e5
2025-04-17 21:00 - 2025-04-21 07:10 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\a3a6c18d987c7026cb89a58f4d73379ce458cdf838ed4dfaa757a98133f4ec8d
2025-04-17 21:00 - 2025-04-20 09:52 - 000279747 _____ C:\Users\Robert\AppData\LocalLow\71526115fc7e468c232d42ae5088250ec4121a38b5a1f96fec9ed5b3ee8a45d1
2025-04-17 21:00 - 2025-04-17 22:12 - 000034391 _____ C:\Users\Robert\AppData\LocalLow\f511570017ef7913fd75e88e11a01911f88862b19fe7eb34b26890e8259721ee
2025-04-17 21:00 - 2025-04-17 21:00 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\266bd9807d399cce2d446c97a504eb63b8c3c3e0ddf6d49dc9bc016827c2d997
2025-04-16 23:08 - 2025-04-16 23:08 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\4b82d73b83a4ced6b7d0997eb3aaaa99b450d9ee2aa3cc29116e303d1eae60a8
2025-04-16 23:06 - 2025-04-16 23:08 - 000228253 _____ C:\Users\Robert\AppData\LocalLow\b6f4b85779ab477df2ad80f8c96aa6c6bb8e0e80917194fb28985c5a92e096e7
2025-04-16 23:06 - 2025-04-16 23:08 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\6bb4f2f9d65f7bda2d90f51ccff4729b5ddfdde019641b39e1f05d5a804c8ed9
2025-04-16 22:58 - 2025-04-18 20:39 - 000000000 ____D C:\WINDOWS\system32\Tasks\TVT
2025-04-16 22:58 - 2025-04-16 22:58 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2025-04-16 22:58 - 2025-04-16 22:58 - 000000000 ____D C:\Users\Robert\AppData\Local\LenovoServiceBridge
2025-04-16 22:46 - 2025-04-16 22:46 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\77e2aeb7d287c591e83df060bd0791395599662b0525d26ab77b624e9c5ab91c
2025-04-16 22:46 - 2025-04-16 22:46 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\542c1e7e7a3f794d97a241f547580e15b32e73702c3ce8d5d387f920a571694b
2025-04-16 22:46 - 2025-04-16 22:46 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\f68745aa7a9338028522371f61f4006042b0b517326f372ba707e936d2a1fab0
2025-04-16 22:42 - 2025-04-17 21:42 - 000013429 _____ C:\Users\Robert\AppData\LocalLow\abdfbee3f482f410934d1e17c2f7f6fa1d3b379b2a07284ffda6ea337445c922
2025-04-16 22:42 - 2025-04-16 22:42 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\6bdad7e2b2f0e006a1b2964609240b6498c71fd5a1aeb1e97866f9a43779a743
2025-04-16 22:41 - 2025-04-21 07:03 - 000000000 __SHD C:\Users\Robert\IntelGraphicsProfiles
2025-04-16 22:41 - 2025-04-16 22:41 - 000000000 ____D C:\Users\Robert\AppData\LocalLow\Intel
2025-04-16 22:35 - 2025-04-16 22:35 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2025-04-16 22:34 - 2025-04-16 22:34 - 000003366 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2025-04-16 22:34 - 2025-04-16 22:34 - 000000591 _____ C:\WINDOWS\system32\regtest.txt
2025-04-16 22:34 - 2024-09-02 23:38 - 005232560 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw10.sys
2025-04-16 22:34 - 2024-09-02 23:38 - 001499056 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter10.dll
2025-04-16 22:34 - 2024-04-24 23:42 - 006167496 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2025-04-16 22:33 - 2023-03-07 00:05 - 000058680 _____ () C:\WINDOWS\system32\Drivers\AlcGener2.sys
2025-04-16 22:26 - 2025-04-16 22:26 - 000000000 ____D C:\Users\Robert\AppData\Local\Comms
2025-04-16 22:22 - 2025-04-16 22:22 - 000000000 ____D C:\WINDOWS\system32\AccountHealthAssets
2025-04-16 22:20 - 2024-10-10 01:17 - 000982184 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2025-04-16 22:20 - 2024-10-10 01:17 - 000786856 _____ (Intel) C:\WINDOWS\system32\libvpl.dll
2025-04-16 22:20 - 2024-10-10 01:17 - 000671568 _____ (Intel) C:\WINDOWS\SysWOW64\libvpl.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 027986912 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 020710984 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 002118192 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 002118192 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 002041904 _____ C:\WINDOWS\system32\ze_intel_gpu_raytracing.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 001676360 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 001676360 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 001465880 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 001308208 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000797616 _____ C:\WINDOWS\system32\ze_loader.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000740824 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000624728 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000613760 _____ C:\WINDOWS\SysWOW64\IntelControlLib32.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000563760 _____ C:\WINDOWS\system32\ze_tracing_layer.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000483704 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000430104 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2025-04-16 22:19 - 2024-10-10 01:15 - 000339720 _____ C:\WINDOWS\system32\ControlLib.dll
2025-04-16 22:19 - 2024-10-10 01:15 - 000281536 _____ C:\WINDOWS\SysWOW64\ControlLib32.dll
2025-04-16 22:17 - 2024-05-13 09:38 - 003192872 _____ (Genesys Logic) C:\WINDOWS\system32\GLCRIcon.dll
2025-04-16 22:17 - 2024-05-13 09:38 - 000240904 _____ (Genesys Logic) C:\WINDOWS\system32\Drivers\GlPciSD.sys
2025-04-16 21:59 - 2025-04-16 21:59 - 000029042 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-16 21:59 - 2025-04-16 21:59 - 000029042 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-16 21:59 - 2025-04-16 21:59 - 000000998 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2025-04-16 21:58 - 2025-04-16 21:58 - 000070484 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-04-16 21:58 - 2025-04-16 21:58 - 000070484 _____ C:\WINDOWS\system32\ctac.json
2025-04-16 21:53 - 2025-04-16 22:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-04-16 21:50 - 2022-11-16 18:30 - 020194536 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPRes.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 004454120 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnh.exe
2025-04-16 21:50 - 2022-11-16 18:30 - 004043464 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCpl.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 001124552 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 000812728 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2025-04-16 21:50 - 2022-11-16 18:30 - 000436424 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnhService.exe
2025-04-16 21:50 - 2022-11-16 18:30 - 000331448 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 000254184 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPHelper.exe
2025-04-16 21:50 - 2022-11-16 18:30 - 000050360 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2025-04-16 21:49 - 2025-04-19 07:21 - 000000000 ____D C:\Users\Robert\AppData\Local\Lenovo
2025-04-16 21:49 - 2025-04-16 22:58 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2025-04-16 21:49 - 2025-04-16 21:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Lenovo
2025-04-16 21:49 - 2025-04-16 21:49 - 000000000 ____D C:\WINDOWS\system32\Lenovo
2025-04-16 21:49 - 2025-02-26 17:45 - 005624152 _____ (Lenovo Group Limited) C:\WINDOWS\SysWOW64\PWMTR32V.dll
2025-04-16 21:49 - 2025-02-26 17:45 - 002352480 _____ (Lenovo Group Limited) C:\WINDOWS\SysWOW64\EasyResume.exe
2025-04-16 21:49 - 2025-02-26 17:45 - 000174928 _____ (Lenovo) C:\WINDOWS\SysWOW64\InstHelper.dll
2025-04-16 21:49 - 2025-02-26 17:45 - 000104784 _____ (Lenovo) C:\WINDOWS\SysWOW64\EventLogger.dll
2025-04-16 21:49 - 2025-02-26 17:45 - 000067408 _____ () C:\WINDOWS\SysWOW64\PowerMgrInst.exe
2025-04-16 21:49 - 2024-05-09 20:29 - 000045912 _____ () C:\WINDOWS\system32\SmartStandbyInst.exe
2025-04-16 21:48 - 2025-04-16 21:48 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-04-16 21:48 - 2025-04-16 21:48 - 000000000 ____D C:\Users\Robert\AppData\Local\Google
2025-04-16 21:47 - 2025-04-16 21:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2025-04-16 21:47 - 2022-12-15 03:59 - 003265400 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TbtBusDrv.sys
2025-04-16 21:47 - 2022-12-15 03:59 - 000256368 _____ (Intel Corporation) C:\WINDOWS\TbtP2pShortcutService.exe
2025-04-16 21:46 - 2025-04-19 07:28 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-348134008-3669429990-2405808313-1000
2025-04-16 21:46 - 2025-04-19 07:28 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-348134008-3669429990-2405808313-1000
2025-04-16 21:46 - 2025-04-16 21:46 - 000000000 ___RD C:\Users\Robert\OneDrive
2025-04-16 21:45 - 2025-04-18 22:37 - 000000000 ____D C:\Users\Robert\AppData\Local\PlaceholderTileLogoFolder
2025-04-16 21:45 - 2025-04-16 22:41 - 000000000 ____D C:\Users\Robert\AppData\Local\Publishers
2025-04-16 21:45 - 2023-08-25 03:54 - 003784936 _____ (Synaptics Incorporated.) C:\WINDOWS\system32\AuthenticateFAM_SecureFP_UI.dll
2025-04-16 21:45 - 2023-08-25 03:54 - 003759336 _____ (Synaptics Incorporated.) C:\WINDOWS\SysWOW64\AuthenticateFAM_SecureFP_UI.dll
2025-04-16 21:45 - 2023-08-25 03:54 - 000504552 _____ (Synaptics Incorporated.) C:\WINDOWS\system32\AuthenticateFAM_SecureFP.dll
2025-04-16 21:45 - 2023-08-25 03:54 - 000371944 _____ (Synaptics Incorporated.) C:\WINDOWS\SysWOW64\AuthenticateFAM_SecureFP.dll
2025-04-16 21:44 - 2025-04-20 19:22 - 000000000 ____D C:\Users\Robert\AppData\Local\Packages
2025-04-16 21:44 - 2025-04-20 19:12 - 000000000 ____D C:\Users\Robert\AppData\Local\D3DSCache
2025-04-16 21:44 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Adobe
2025-04-16 21:44 - 2025-04-17 22:25 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Spelling
2025-04-16 21:44 - 2025-04-17 21:48 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\Credentials
2025-04-16 21:44 - 2025-04-17 21:43 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows
2025-04-16 21:44 - 2025-04-16 22:26 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\Protect
2025-04-16 21:44 - 2025-04-16 21:44 - 000000020 ___SH C:\Users\Robert\ntuser.ini
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Šablony
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Soubory cookie
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Poslední
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Okolní tiskárny
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Okolní síť
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Nabídka Start
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Dokumenty
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Documents\Obrázky
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Documents\Hudba
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Documents\Filmy
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Data aplikací
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\AppData\Local\Data aplikací
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\SystemCertificates
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\Crypto
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Vault
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Network
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Local\VirtualStore
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Local\ConnectedDevicesPlatform
2025-04-16 21:44 - 2022-11-13 23:47 - 015824744 _____ C:\WINDOWS\system32\RsDMFT_Assets.dll
2025-04-16 21:44 - 2022-11-13 23:47 - 014798200 _____ C:\WINDOWS\system32\RsEyeContactCorrection_Assets.dll
2025-04-16 21:44 - 2022-11-13 23:46 - 013371816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RsDMFT64.dll
2025-04-16 21:43 - 2025-04-21 07:07 - 001692324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-16 21:41 - 2025-04-21 07:09 - 000001460 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Obrázky
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Hudba
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Filmy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Šablony
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Poslední
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Okolní síť
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Dokumenty
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Obrázky
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Hudba
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Filmy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Data aplikací
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Šablony
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Plocha
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Dokumenty
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Data aplikací
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Documents and Settings
2025-04-16 21:36 - 2025-04-21 07:48 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-16 21:36 - 2025-04-21 07:03 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-16 21:36 - 2025-04-21 07:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-16 21:36 - 2025-04-19 17:47 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-16 21:36 - 2025-04-19 07:23 - 000370032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-16 21:36 - 2025-04-16 22:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-04-16 21:36 - 2025-04-16 21:41 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{EAD36AA6-B97F-4539-9438-03FC2682609F}
2025-04-16 21:36 - 2025-04-16 21:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{8969E11F-6533-4D70-9C19-2621E0D91B94}
2025-04-16 21:36 - 2025-04-16 21:36 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2025-04-16 21:36 - 2025-04-16 21:36 - 000000000 ____D C:\WINDOWS\system32\config\BFS
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-21 08:49 - 2017-07-04 09:05 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-21 08:40 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\INF
2025-04-21 08:20 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\ServiceState
2025-04-21 07:44 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-21 07:41 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-21 07:21 - 2017-07-04 09:05 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-21 07:09 - 2017-07-04 09:05 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-21 07:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-04-21 07:03 - 2017-07-04 09:05 - 000000000 __SHD C:\Intel
2025-04-21 07:03 - 2017-07-04 09:05 - 000000000 ____D C:\Program Files\TeamViewer
2025-04-20 22:22 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-04-20 21:05 - 2017-07-04 09:05 - 000000000 ____D C:\ProgramData\VEGAS
2025-04-20 21:05 - 2017-07-04 09:05 - 000000000 ____D C:\Program Files\VEGAS
2025-04-18 22:36 - 2024-09-06 05:59 - 001175072 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2025-04-18 22:36 - 2024-09-06 05:59 - 000780720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2025-04-18 22:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2025-04-18 22:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\MUI
2025-04-17 22:48 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-04-17 22:17 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-04-17 21:48 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WebThreatDefSvc
2025-04-16 22:36 - 2024-04-01 09:26 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2025-04-16 22:34 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-04-16 22:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\spool
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-04-16 22:22 - 2024-04-01 18:31 - 000000000 ___SD C:\WINDOWS\system32\AppV
2025-04-16 22:22 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-16 22:22 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-04-16 22:22 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-04-16 22:18 - 2024-04-01 09:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2025-04-16 22:18 - 2024-04-01 09:26 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2025-04-16 21:52 - 2024-04-01 09:21 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2025-04-16 21:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2025-04-16 21:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2025-04-16 21:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
==================== Files in the root of some directories ========
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Symantec
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
ADDITION.TXT
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-04-2025
Ran by Robert (21-04-2025 08:50:25)
Running from C:\Users\Robert\Desktop
Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) (2025-04-16 19:38:45)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-348134008-3669429990-2405808313-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-348134008-3669429990-2405808313-503 - Limited - Disabled)
Guest (S-1-5-21-348134008-3669429990-2405808313-501 - Limited - Disabled)
Robert (S-1-5-21-348134008-3669429990-2405808313-1000 - Administrator - Enabled) => C:\Users\Robert
WDAGUtilityAccount (S-1-5-21-348134008-3669429990-2405808313-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 135.0.7049.96 - Google LLC)
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.24 - Martin Malik, REALiX s.r.o.)
Lenovo Service Bridge (HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 5.0.2.17 - Lenovo)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.08.03.59 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.3.21.0 - Lenovo Group Ltd.)
Microsoft 365 - cs-cz (HKLM\...\O365EduCloudRetail - cs-cz) (Version: 16.0.18623.20178 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 135.0.3179.85 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 135.0.3179.85 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.051.0317.0003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.23.27820 (HKLM-x32\...\{86BE78D9-65A1-4E69-86F8-C1F5281F8553}) (Version: 14.23.27820 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.23.27820 (HKLM-x32\...\{00AC3934-26B4-406E-807C-1692AC7329EC}) (Version: 14.23.27820 - Microsoft Corporation) Hidden
MSVCRT Redists (HKLM\...\{52116C70-79F9-11E6-9541-BB95F5A309BD}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
MSVCRT Redists (HKLM\...\{E5637EB0-7FC4-11E7-B61D-95BE57594EAC}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.3 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20178 - Microsoft Corporation) Hidden
PS Remote Play (HKLM-x32\...\{40C31EAB-247D-49F2-935E-7A432817B644}) (Version: 8.0.0.14120 - Sony Interactive Entertainment Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.64.3 - TeamViewer)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
VEGAS Pro 15.0 (HKLM\...\{E0F91FB0-7FC4-11E7-B8E9-95BE57594EAC}) (Version: 15.0.177 - VEGAS)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
Wondershare NativePush(Build 1.0.0.8) (HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\Wondershare NativePush_is1) (Version: - Wondershare Software)
Wondershare Video Converter Ultimate(Build 10.4.1.188) (HKLM-x32\...\Video Converter Ultimate_is1) (Version: 10.4.1.188 - Wondershare Software)
XnView MP (x64) (HKLM\...\XnView MP (x64)_is1) (Version: 1.8.8.0 - Pierre-e Gougelet)
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-04-16] (INTEL CORP) [Startup Task]
AppUp.ThunderboltControlCenter -> C:\Program Files\WindowsApps\AppUp.ThunderboltControlCenter_1.0.37.0_x64__8j3eq9eme6ctt [2025-04-16] (INTEL CORP)
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-16] (Microsoft Windows)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.26.3000.0_x64__rz1tebttyb220 [2025-04-16] (Dolby Laboratories)
Dolby Digital Plus decoder for PC OEMs -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyDigitalPlusDecoderOEM_1.1.285.0_x64__rz1tebttyb220 [2025-04-16] (Dolby Laboratories)
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2501.20.0_x64__k1h2ywk1493x8 [2025-04-16] (LENOVO INC.)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe [2025-04-17] (Microsoft Corporation)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-04-17] ()
PrebootManager -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynapticsUtilities_1.1.18.0_x64__807d65c4rvak2 [2025-04-16] (Synaptics Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.50.323.0_x64__dt26b99r8h8gj [2025-04-16] (Realtek Semiconductor Corp)
Synaptics TouchPad Control Panel -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynapticsControlPanel_19005.19110.0.0_x64__807d65c4rvak2 [2025-04-16] (Synaptics Incorporated)
Synaptics Trackpoint Control Panel -> C:\Program Files\WindowsApps\SynapticsIncorporated.241916F58D6E7_19005.19110.0.0_x64__807d65c4rvak2 [2025-04-16] (Synaptics Incorporated)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-348134008-3669429990-2405808313-1000_Classes\CLSID\{04271989-C4D2-E3AC-E5DF-56422E561943} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-348134008-3669429990-2405808313-1000_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-348134008-3669429990-2405808313-1000_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [IXnView] -> {A5D35F9F-6A11-4EAA-B70B-7BB6FE32663A} => C:\Program Files\XnViewMP\XnViewShellExt64.dll [2025-03-28] (Pierre GOUGELET -> )
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Robert - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Michaela - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
==================== Loaded Modules (Whitelisted) =============
2025-04-17 22:48 - 2016-07-21 10:54 - 000137728 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2025-04-17 22:48 - 2017-09-12 10:34 - 001506304 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2025-04-17 22:48 - 2017-09-12 10:36 - 000708608 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 09:26 - 2025-04-20 20:15 - 000009941 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 download.bleepingcomputer.com
127.0.0.1 www.bleepingcomputer.com
127.0.0.1 bleepingcomputer.com
127.0.0.1 www.fullindir.cafe
127.0.0.1 fullindir.cafe
127.0.0.1 www.fullprogramlarindir.net
127.0.0.1 fullprogramlarindir.net
127.0.0.1 www.buyurindir.net
127.0.0.1 buyurindir.net
127.0.0.1 www.warezturkey.org
127.0.0.1 warezturkey.org
127.0.0.1 www.warezturkey.net
127.0.0.1 warezturkey.net
127.0.0.1 www.tnctr.com
127.0.0.1 tnctr.com
127.0.0.1 tb.rg-adguard.net
127.0.0.1 rufus.ie
127.0.0.1 www.rufus.ie
127.0.0.1 download.sysinternals.com
127.0.0.1 data-cdn.mbamupdates.com
127.0.0.1 download.cnet.com
127.0.0.1 cnet.com
127.0.0.1 www.cnet.com
127.0.0.1 prod.downloadnow.com
127.0.0.1 www.pandasecurity.com
127.0.0.1 pandasecurity.com
127.0.0.1 www.adaware.com
127.0.0.1 adaware.com
127.0.0.1 sdl.adaware.com
127.0.0.1 www.nano-av.com
There are 293 more lines.
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Intel;C:\Intel\m;C:\Intel\logs;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\Robert\AppData\Local\Microsoft\WindowsApps;
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Robert\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\11348772234367442116\133894817047152598.jpg
DNS Servers: 1.1.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection (13) I219-V -> e1d.sys
Wi-Fi: Intel(R) Wi-Fi 6 AX201 160MHz -> Netwtw10.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_A9F6DCE4ABADF4F51CF45CD7129E3C6C"
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\StartupApproved\Run: => "OneDrive"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{635A048F-41C7-4A01-80F6-64EFE5EC3A48}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25060.205.3499.6849_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F9B27D0B-2124-450C-A059-7BB1B84C2EE2}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25060.205.3499.6849_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9929DDA7-1A42-4651-B8D5-4F66BBEA833E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F4629C20-BBE5-4BC0-8E77-7CA589BFF6BB}] => (Allow) C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [{5CBFAD92-F77C-4910-B915-3EA52FFF906D}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.85\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{33C798EB-FEE7-4223-B6C6-E8300D597810}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)
FirewallRules: [{7AE83D4A-4EFD-427D-B8E5-625565A1B9A8}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)
FirewallRules: [{0D64533A-C45E-4940-A571-831E539F5ED9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{C4B25082-77B6-4A0B-9047-2FCD4EC12778}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F1170423-1B2A-4263-BF98-E9796D8438F4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FC91FD90-0298-4966-BDCA-37951F9C57F0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A6D004A1-55B9-4A1E-80F3-38BED8497B4A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Airport CEO\Airport CEO.exe () [File not signed]
FirewallRules: [{469116F2-C586-4712-A8AF-ECBB4BDC37A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Airport CEO\Airport CEO.exe () [File not signed]
FirewallRules: [TCP Query User{0D878514-98FC-42C8-AA8F-0674735F1C9E}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [UDP Query User{82DE9701-077C-4D94-9B5C-73986AA37E2C}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [{CDC9AE13-5854-4F65-83C6-1DC4C5455E91}] => (Allow) C:\Program Files (x86)\Sony\PS Remote Play\RemotePlay.exe (Sony Interactive Entertainment Inc. -> Sony Interactive Entertainment Inc.)
FirewallRules: [{E6A73698-45DE-4C1C-8D57-4F1C6988E9A8}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5593D14A-B5EF-488F-AFFE-4D26A42828D7}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4AA54631-E167-4F2D-9C21-2FBCD2F09FE4}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{57068959-DEC9-4BE8-87E6-D17A3277C569}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4F098826-9454-4040-8B28-5E75F3444FDB}] => (Allow) C:\Intel\i2.exe => No File
FirewallRules: [{B60990DF-E6CF-4644-A0F0-6802E7056916}] => (Allow) C:\Intel\i4.exe => No File
FirewallRules: [{A0533739-BC28-4E29-883D-6ACAFA69FACC}] => (Allow) C:\Intel\i2.exe => No File
FirewallRules: [{5F20DE9E-7D51-4D9A-A686-85F5B6194686}] => (Allow) C:\Intel\q.exe => No File
FirewallRules: [{789B9F14-F391-448F-8C78-03255D009A1B}] => (Allow) C:\Intel\q.exe => No File
FirewallRules: [{5E6C2FC9-EC7C-41B0-87B2-57F01190852D}] => (Allow) C:\Intel\i1.exe => No File
FirewallRules: [{31EB8F86-4EC6-43FB-A806-516A93EBB74F}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{95350907-9448-4D66-A529-79D392C1C28D}] => (Allow) C:\Intel\i3.exe => No File
FirewallRules: [{7EC93EE9-32B7-4AE5-9E6F-28252ABCCB65}] => (Allow) C:\Intel\i3.exe => No File
FirewallRules: [{D970F018-6A94-4986-B608-418795A76CFA}] => (Allow) C:\Intel\i4.exe => No File
FirewallRules: [{5AD64AE2-5BD8-4E6F-9681-564BDD506CD8}] => (Allow) C:\Intel\i1.exe => No File
FirewallRules: [{F27C5807-E592-42E9-B884-916D08640085}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{9A4C4C26-0AA9-49C3-A4B8-257A1669121C}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{554B5070-7985-4D8D-970D-935A7851D9D0}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{03736EFE-B314-4F0F-97F7-C01A0EEA0D6F}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{311BF76D-5551-4AB5-99A1-483AD2F271B8}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{CF531EF1-A627-4E30-B2D7-758F74236123}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{AE88E30A-634A-42AB-A51D-CE3C1D0C34EC}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{787699FE-9588-4573-A95F-001327982E12}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{EDA78B22-A4AD-4897-8C86-79FC370DC2E9}] => (Allow) C:\Intel\m\llm.exe => No File
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:476.2 GB) (Free:396.95 GB) (83%)
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (04/21/2025 08:03:17 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-EC0CQAC)
Description: Název chybující aplikace: BMLFJMJNHGHGHMDK.exe, verze: 10.0.26100.1150, časové razítko: 0x23bbb5d4
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000140003be2
ID chybujícího procesu: 0x3758
Čas spuštění chybující aplikace: 0x1dbb27aaef19bb3
Cesta k chybující aplikaci: C:\Users\Robert\AppData\Roaming\Adobe\LogTransport2\BMLFJMJNHGHGHMDK.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: 698d3fe8-4967-4bf4-8f43-f0a50271ecca
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (04/21/2025 07:03:09 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\DESKTOP-EC0CQAC$ přes https://NTC-KeyId-23f4e22ad3be374a44977 ... s/Aik/scep se nepovedla:
GetCACaps
Metoda: GET(15ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (04/17/2025 08:55:19 PM) (Source: DPTF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17
Error: (04/16/2025 09:44:11 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=2
Error: (04/16/2025 09:41:30 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent
Error: (04/16/2025 09:40:38 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu Windows Defender na SECURITY_PRODUCT_STATE_ON došlo k chybě.
Error: (04/16/2025 09:38:56 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\WIN-SAK7ARI4AOQ$ přes https://NTC-KeyId-23f4e22ad3be374a44977 ... s/Aik/scep se nepovedla:
GetCACaps
Metoda: GET(0ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (04/16/2025 09:38:55 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro Místní systém přes https://NTC-KeyId-23f4e22ad3be374a44977 ... s/Aik/scep se nepovedla:
GetCACaps
Metoda: GET(0ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
System errors:
=============
Error: (04/21/2025 08:03:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba WinRing0_1_2_0 neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Error: (04/21/2025 07:12:20 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba WinRing0_1_2_0 neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Error: (04/21/2025 07:11:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (04/21/2025 07:11:35 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (04/21/2025 07:11:25 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9N0866FS04W8-DolbyLaboratories.DolbyAccess.
Error: (04/20/2025 10:22:23 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.
Error: (04/20/2025 10:22:23 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.
Error: (04/20/2025 09:12:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba WinRing0_1_2_0 neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Windows Defender:
================
Date: 2025-04-21 07:34:04
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-21 07:27:11
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-21 07:16:56
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-20 20:59:46
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: VirTool:Win32/Vbinder.gen!G
Severity: Severe
Category: Tool
Path: file:_C:\Intel\i1.exe; file:_C:\Intel\i2.exe; file:_C:\Intel\i3.exe; file:_C:\Intel\i4.exe
Detection Origin: Local machine
Detection Type: Generic
Detection Source: Real-Time Protection
Process Name: C:\Program Files\totalcmd\TOTALCMD64.EXE
Security intelligence Version: AV: 1.427.348.0, AS: 1.427.348.0, NIS: 1.427.348.0
Engine Version: AM: 1.1.25030.1, NIS: 1.1.25030.1
Date: 2025-04-20 20:59:13
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: VirTool:Win32/Vbinder.gen!G
Severity: Severe
Category: Tool
Path: file:_C:\Intel\i1.exe; file:_C:\Intel\i2.exe; file:_C:\Intel\i3.exe; file:_C:\Intel\i4.exe
Detection Origin: Local machine
Detection Type: Generic
Detection Source: Real-Time Protection
Process Name: C:\Program Files\totalcmd\TOTALCMD64.EXE
Security intelligence Version: AV: 1.427.348.0, AS: 1.427.348.0, NIS: 1.427.348.0
Engine Version: AM: 1.1.25030.1, NIS: 1.1.25030.1
CodeIntegrity:
===============
Date: 2025-04-21 07:16:12
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_84147fa7a978ce4e\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO N34ET65W (1.65 ) 02/07/2025
Motherboard: LENOVO 20W4008QCK
Processor: 11th Gen Intel(R) Core(TM) i5-1135G7 @ 2.40GHz
Percentage of memory in use: 43%
Total physical RAM: 16107.05 MB
Available physical RAM: 9023.88 MB
Total Virtual: 19051.05 MB
Available Virtual: 11408.94 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:476.2 GB) (Free:396.95 GB) (Model: SKHynix_HFS512GDE9X081N) NTFS
Drive e: (lojza) (Removable) (Total:14.55 GB) (Free:14.46 GB) NTFS
\\?\Volume{b148aa00-f56d-48be-8126-25ca6e141c08}\ () (Fixed) (Total:0.63 GB) (Free:0.07 GB) NTFS
\\?\Volume{f6f69a02-6878-431e-902a-318c2344ecbe}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: BB712021)
Partition: GPT.
==========================================================
Disk: 1 (Size: 14.6 GB) (Disk ID: 140D9572)
Partition 1: (Active) - (Size=14.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
FRST LOG
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-04-2025
Ran by Robert (administrator) on DESKTOP-EC0CQAC (LENOVO 20W4008QCK) (21-04-2025 08:47:52)
Running from C:\Users\Robert\Desktop\FRST64.exe
Loaded Profiles: Robert
Platform: Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(SmartDisplayAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe
(C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_809f877e731b908b\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_809f877e731b908b\igfxEMN.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\tphkload.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\FN189C~1.INF\driver\shtctky.exe
(DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\tphkload.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\FN189C~1.INF\driver\tposd.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation) [File not signed] C:\Users\Robert\AppData\Roaming\Adobe\LogTransport2\BMLFJMJNHGHGHMDK.exe <4>
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_809f877e731b908b\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_897ea327b3fe52f7\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_2c7653f29a37d3f4\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_84147fa7a978ce4e\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_64c76657d20bdb6c\AS\IAS\IntelAudioService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\tphkload.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\ibmpmsvc.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\SmartStandby.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_5d23f3d1b4649e1b\x64\LITSSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_15da36fcaef0532a\RtkAudUService64.exe <3>
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (WDKTestCert sarakelyan,130722862255941761 -> Synaptics Incorporated.) C:\Windows\System32\DriverStore\FileRepository\synawudfbiousbuwp.inf_amd64_0a328caa48d41753\SynRpcServer.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25031.45.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.5100.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wscript.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\Run: [MicrosoftEdgeAutoLaunch_A9F6DCE4ABADF4F51CF45CD7129E3C6C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4419624 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5012288 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\135.0.7049.96\Installer\chrmstp.exe [2025-04-16] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {F9FFBAD8-40B4-4193-957E-57B560E56389} - System32\Tasks\BMLFJMJNHGHGHMDK_run => C:\Users\Robert\AppData\Roaming\Adobe\LogTransport2\BMLFJMJNHGHGHMDK.exe [95648 2025-04-20] (Microsoft Corporation) [File not signed] <==== ATTENTION
Task: {E9AE75BF-F096-42F4-85A1-640F209E5B5B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem137.0.7129.0{1E9B4D49-5D8D-4862-A673-7F0EF828117D} => C:\Program Files (x86)\Google\GoogleUpdater\137.0.7129.0\updater.exe [7375968 2025-04-17] (Google LLC -> Google LLC)
Task: {EABB8C52-E3E2-4923-98CC-C9F41A843AFB} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-348134008-3669429990-2405808313-1000 => C:\Users\Robert\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [88584 2024-05-17] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {C75347AB-F64F-4079-9308-957F46387B2D} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [129880 2025-02-26] (Lenovo -> Lenovo)
Task: {F50F01DC-3084-4666-9862-6B4C1CB4A115} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\WINDOWS\SysWOW64\PowerMgrInst.exe [67408 2025-02-26] (Lenovo -> )
Task: {18FD1406-2EBD-4A53-A44B-3F5C8F1881C9} - System32\Tasks\Lenovo\SmartStandby\Daily analysis => C:\Windows\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\AutonomicMgr.exe [76640 2024-05-09] (Lenovo -> )
Task: {A6D8A19B-9F4D-44E3-A683-33B2DFC59810} - System32\Tasks\Lenovo\SmartStandby\Uninstall Monitor => C:\WINDOWS\system32\SmartStandbyInst.exe [45912 2024-05-09] (Lenovo -> )
Task: {C920CF69-F72A-426E-8FB3-856358E5B14E} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-04-16] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {E724211B-98E4-4BC4-B095-87B00B381741} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {0592107C-4408-4C16-B710-75DD6CA9F958} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {5014C81E-CF85-44B0-8316-25B15649D9C8} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {AD587160-D234-4A8D-BF93-067D31A2879A} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {C507AC32-29A4-42CE-8C09-105BCEE4A46B} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {EE87D050-BB33-4E6C-943C-50C91EB42A50} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {E9223D50-2175-4D41-BFFC-0B0C4664F40D} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.0.0.190\x64\IdleScheduleEventAction.exe [143768 2025-04-16] (Lenovo -> )
Task: {C9AB2E8C-903B-46ED-B536-0647C130A5C1} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\ScheduleEventAction.exe [278016 2025-02-20] (Lenovo -> Lenovo)
Task: {3F411951-8609-4013-B65F-150FD530B20C} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {72DE212B-C891-41A0-9EC3-665B143ECE82} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {777A2ADF-E7C4-4AA5-944D-1E9A732918FE} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107936 2025-04-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {0E38424F-3F8C-4446-96B5-CC5E2063A86D} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [68328 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {E03BBFFD-D5A6-4FC2-AB47-627A369130BC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107936 2025-04-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {74A09291-DC80-4C27-90B6-7A16722C9683} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {91732E80-E9EE-4376-A1C3-688A92807553} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315544 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {1A37D3CD-13FA-479F-980A-727239CB9848} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [204400 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {6C0A2C4E-EADD-495B-A328-BA75084E73B6} - System32\Tasks\Microsoft\Windows\AccountHealth\RecoverabilityToastTask => {B7F5B442-EBF8-46CD-9F0B-D8E45ED43492} C:\WINDOWS\system32\AccountHealth.dll [258048 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {DE0CE9D6-5754-4E22-9FB5-D53201630A17} - System32\Tasks\Microsoft\Windows\UPnP\Microsoft UPnP Manager1 => C:\Intel\e.vbs (No File)
Task: {64D789D9-EECD-4F4E-B4C4-B1466905B8C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AFA4A06A-392A-48B9-A975-DD75236B47F4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7216411B-9740-4416-A3A5-CD6AC72F0135} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D9453C3A-CC73-4E43-84B5-AF45B2F5DE00} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {399355BA-56DB-4F3F-9451-243DFEED7F4F} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223808 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {05324EE4-A380-42C5-9224-793CE0E63C98} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-348134008-3669429990-2405808313-1000 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223808 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {A964EC2E-396D-4044-BBD8-254C32C0B0AC} - System32\Tasks\OneDrive Startup Task-S-1-5-21-348134008-3669429990-2405808313-1000 => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\OneDriveLauncher.exe [674624 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDEAF88A-7ACC-4880-9FF9-1CA2E691D58C} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_15da36fcaef0532a\RtkAudUService64.exe [1981272 2024-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {C835480B-D973-42EB-8F9D-6D4637B23E35} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
Task: {3C4FAE5B-02F7-4B02-A0F6-2CEEFEE54877} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{7202196d-07a4-4c80-8336-28b4b82e805b}: [NameServer] 1.1.1.1
Tcpip\..\Interfaces\{7202196d-07a4-4c80-8336-28b4b82e805b}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Tcpip\..\Interfaces\{72051672-1b02-11f0-99ab-806e6f6e6963}: [NameServer] 1.1.1.1
Tcpip\..\Interfaces\{ea92d9f4-e9ea-4735-835b-900d22a1402e}: [NameServer] 1.1.1.1,8.8.8.8
Edge:
=======
Edge Profile: C:\Users\Robert\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-21]
Edge Extension: (Dokumenty Google offline) - C:\Users\Robert\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-16]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\Robert\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-16]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default [2025-04-21]
CHR Notifications: Default -> hxxps://web.whatsapp.com; hxxps://www.wondershare.com
CHR HomePage: Default -> hxxps://www.google.com/
CHR Session Restore: Default -> is enabled.
CHR Extension: (Rozšíření Synology Image Assistant) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aadgfjmilhfblodmkgilohhjlakchfmg [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Tinkercad) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhggmehigifnpflipbkdfcjiacpcgidn [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (GPX Viewer, Reader) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcoebkjfbobjheeoclnjkfgginlaefnb [2025-04-16]hxxp://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Material Simple Dark Grey) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookepigabmicjpgfnmncjiplegcacdbm [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-04-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-04-21]
CHR HomePage: Profile 1 -> hxxps://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxp://google.com/"
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Norton Password Manager) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\admmjipmmciaobhojoghlmleefbicajg [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Sudoku) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\agdhembpgcpfegeigidembjopfhghnpj [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Causality Games) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\femoooemgmjaebeodbbikbkmhlafenpl [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Full Screen Weather) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fkkaebihfmbofclegkcfkkemepfehibg [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Dokumenty Google offline) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Cut the Rope) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gkddaofiamhgfjmaccfcfpfolpgbeomj [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (FormApps Extension) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Equalizer for YouTube™) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\oggiagogblgafoilijjdhcmflgekfmja [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Hlídač Shopů) - C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\plmlonggbfebcjelncogcnclagkmkikk [2025-04-18]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\Robert\AppData\Local\Google\Chrome\User Data\System Profile [2025-04-18]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13862104 2025-04-08] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe [2549352 2024-08-16] (Dolby Laboratories, Inc. -> Dolby Laboratories)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncHelper.exe [3543888 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [479656 2022-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 IBMPMSVC; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\ibmpmsvc.exe [1037168 2024-10-14] (Lenovo -> Lenovo)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_64c76657d20bdb6c\AS\IAS\IntelAudioService.exe [532328 2024-08-08] (Intel Corporation -> Intel)
S4 LenovoBrightCtrl; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_5d23f3d1b4649e1b\x64\BrightnessControl.exe [157016 2025-01-28] (Lenovo -> Lenovo.)
R2 LenovoSmartStandby; C:\WINDOWS\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\SmartStandby.exe [341336 2024-05-09] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.3.21.0\LenovoVantageService.exe [34816 2025-02-20] (Lenovo -> Lenovo)
R2 LITSSVC; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_5d23f3d1b4649e1b\x64\LITSSvc.exe [1143128 2025-01-28] (Lenovo -> Lenovo.)
S2 LPlatSvc; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\LPlatSvc.exe [916344 2024-10-14] (Lenovo -> Lenovo)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NativePushService; C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe [594320 2023-05-06] (Wondershare Technology Group Co.,Ltd -> Wondershare)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.051.0317.0003\OneDriveUpdaterService.exe [3891536 2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SynHsaService; C:\WINDOWS\System32\DriverStore\FileRepository\synawudfbiousbuwp.inf_amd64_0a328caa48d41753\SynRpcServer.exe [192128 2023-08-25] (WDKTestCert sarakelyan,130722862255941761 -> Synaptics Incorporated.)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256368 2022-12-15] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [22178608 2025-03-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 TPHKLOAD; C:\WINDOWS\System32\DriverStore\FileRepository\fn.inf_amd64_ab53c856f440d1ac\driver\TPHKLOAD.exe [316928 2025-02-24] (Lenovo -> Lenovo)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [107624 2018-12-06] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 dg; C:\Intel\dg.exe [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AKCCID; C:\WINDOWS\System32\drivers\AKCCID.sys [77272 2023-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Generic)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_fcfdc62bfce8f55f\e1d.sys [613088 2024-09-10] (Intel Corporation -> Intel Corporation)
R3 GlPciSD; C:\WINDOWS\System32\drivers\GlPciSD.sys [240904 2024-05-13] (GENESYS LOGIC, INC. -> Genesys Logic)
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_d0e63c4e3754f42f\iaLPSS2_GPIO2_TGL.sys [128152 2020-08-09] (Intel Corporation -> Intel Corporation)
R3 IBMPMDRV; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\ibmpmdrv.sys [56696 2024-10-14] (Lenovo -> Lenovo)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_3483c60a14224d09\IntcUSB.sys [938344 2024-08-08] (Intel Corporation -> Intel(R) Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
R1 PMDRVS; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_54015d614dafb853\x64\pmdrvs.sys [42336 2024-10-14] (Lenovo -> Lenovo)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-16] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-04-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [605576 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
R3 WiManH; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_7976829cdaa6ca7e\WiManH\WiManH.sys [184248 2024-12-02] (Intel Corporation -> Intel Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_bdb09ebda2834009\wini3ctarget.sys [75168 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
S3 LenovoDiagnosticsDriver; \??\C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\4.0.0.15\LenovoDiagnosticsDriver.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-21 08:47 - 2025-04-21 08:48 - 000031224 _____ C:\Users\Robert\Desktop\FRST.txt
2025-04-21 08:47 - 2025-04-21 08:44 - 002404864 _____ (Farbar) C:\Users\Robert\Desktop\FRST64.exe
2025-04-21 08:40 - 2025-04-21 08:48 - 000000000 ____D C:\FRST
2025-04-21 08:40 - 2025-04-21 08:40 - 002297344 _____ (Farbar) C:\Users\Robert\Downloads\FRST64.exe
2025-04-21 07:07 - 2025-04-21 07:07 - 000714490 _____ C:\WINDOWS\system32\perfh005.dat
2025-04-21 07:07 - 2025-04-21 07:07 - 000153652 _____ C:\WINDOWS\system32\perfc005.dat
2025-04-20 21:20 - 2025-04-20 21:50 - 000000000 ____D C:\Users\Robert\AppData\Roaming\obs-studio
2025-04-20 21:20 - 2025-04-20 21:20 - 000000000 ____D C:\ProgramData\obs-studio
2025-04-20 21:19 - 2025-04-20 21:19 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2025-04-20 21:19 - 2025-04-20 21:19 - 000000000 ____D C:\ProgramData\obs-studio-hook
2025-04-20 21:19 - 2025-04-20 21:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2025-04-20 21:19 - 2025-04-20 21:19 - 000000000 ____D C:\Program Files\obs-studio
2025-04-20 21:18 - 2025-04-20 21:18 - 156196264 _____ (OBS Project) C:\Users\Robert\Downloads\OBS-Studio-31.0.2-Windows-Installer.exe
2025-04-20 21:06 - 2025-04-20 21:10 - 000000000 ____D C:\Users\Robert\AppData\Local\Sony
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Roaming\VEGAS Pro
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Roaming\VEGAS
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Roaming\MAGIX
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Local\VEGAS Pro
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\Users\Robert\AppData\Local\MAGIX
2025-04-20 21:06 - 2025-04-20 21:06 - 000000000 ____D C:\ProgramData\VEGAS Pro
2025-04-20 21:05 - 2025-04-20 21:10 - 000000000 ____D C:\ProgramData\Magix
2025-04-20 21:05 - 2025-04-20 21:05 - 000001118 _____ C:\Users\Public\Desktop\VEGAS Pro 15.0.lnk
2025-04-20 21:03 - 2025-04-20 21:03 - 000003310 _____ C:\WINDOWS\system32\Tasks\BMLFJMJNHGHGHMDK_run
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\ProgramData\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH C:\Program Files (x86)\AlibabaProtect
2025-04-20 19:57 - 2025-04-20 21:05 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Sony
2025-04-20 19:57 - 2025-04-20 21:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS
2025-04-20 19:57 - 2025-04-20 19:57 - 000000000 ____D C:\Users\Robert\AppData\Local\VEGAS
2025-04-20 19:44 - 2025-04-20 19:44 - 000005866 _____ C:\Users\Robert\AppData\LocalLow\183fe6247284088bf5e3cb9f4cf38746039fa07f000070dabdfab908a343a64e
2025-04-20 19:44 - 2025-04-20 19:44 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\a8b141efd5a28a0535a4b1cef38c232052f69977de70ef5ac15dddb5a77f531f
2025-04-20 19:27 - 2025-04-20 19:27 - 000000000 ____D C:\Users\Robert\AppData\Roaming\TeamViewer
2025-04-20 19:12 - 2025-04-20 19:23 - 000000000 ____D C:\Users\Robert\AppData\Local\TeamViewer
2025-04-20 19:12 - 2025-04-20 19:12 - 000000889 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer.lnk
2025-04-20 19:12 - 2025-04-20 19:12 - 000000877 _____ C:\Users\Public\Desktop\TeamViewer.lnk
2025-04-20 19:05 - 2025-04-20 19:05 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\MMC
2025-04-20 08:50 - 2025-04-20 08:51 - 011622546 _____ C:\Users\Robert\Desktop\mb_manual_ga-h81m-s2v.pdf
2025-04-20 08:30 - 2025-04-20 08:33 - 000035240 _____ C:\Users\Robert\AppData\LocalLow\b15d3a108baf677bad705d2193ceb1d29295e9ae5672296ad2f6ec14fa4d226f
2025-04-20 08:30 - 2025-04-20 08:33 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\9efc7b77bc60a484afa1dbca8105b35ad2d2bcddf61075a21cfb283050ad9d1e
2025-04-19 19:38 - 2025-04-20 21:13 - 000000000 ____D C:\Users\Robert\AppData\Local\Adobe
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\Roaming\com.adobe.dunamis
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\LocalLow\Adobe
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\Local\SolidDocuments
2025-04-19 19:38 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\.ms-ad
2025-04-19 19:36 - 2025-04-20 21:14 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-04-19 19:34 - 2025-04-19 19:34 - 000100661 _____ C:\Users\Robert\Downloads\michaela-pohlova-shopping_list.pdf
2025-04-19 09:19 - 2025-04-19 09:19 - 000000000 ____D C:\Users\Robert\AppData\Local\Sony Corporation
2025-04-19 09:18 - 2025-04-19 09:18 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PS Remote Play.lnk
2025-04-19 09:18 - 2025-04-19 09:18 - 000002081 _____ C:\Users\Public\Desktop\PS Remote Play.lnk
2025-04-19 07:28 - 2025-04-19 07:28 - 000000000 ____D C:\WINDOWS\system32\%userprofile%
2025-04-18 22:36 - 2025-04-18 22:36 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2025-04-18 22:27 - 2025-04-18 22:28 - 000000000 ____D C:\Users\Robert\Documents\Witcher 2
2025-04-18 22:27 - 2025-04-18 22:27 - 000000000 ____D C:\Users\Robert\AppData\Local\The Witcher 2
2025-04-18 22:25 - 2025-03-27 23:40 - 4234857752 _____ C:\Users\Robert\Desktop\Zaklinac - Andrzej Sapkowski (Audioknihy komplet 01-08) (2).rar
2025-04-18 22:22 - 2025-04-14 18:14 - 000603822 _____ C:\Users\Robert\Documents\impressa-s9-s90-s95.pdf
2025-04-18 22:22 - 2025-04-14 18:14 - 000523493 _____ C:\Users\Robert\Documents\S7_S8_S9_instructions.pdf
2025-04-18 22:22 - 2025-02-22 15:16 - 004165367 _____ C:\Users\Robert\Documents\BN94 06301V UE32F5000AK.pdf
2025-04-18 22:21 - 2025-03-26 08:03 - 1274542565 _____ C:\Users\Robert\Desktop\Foto tábor.rar
2025-04-18 22:19 - 2025-04-18 22:19 - 000000000 ____D C:\Users\Robert\Desktop\cloudclone
2025-04-18 22:18 - 2025-04-18 22:19 - 000000000 ____D C:\Users\Robert\Desktop\lyzak
2025-04-18 22:18 - 2025-04-18 22:18 - 000085515 _____ C:\Users\Robert\AppData\LocalLow\34f6b2483462849a0a6b86842dbaed8595c9b1ea24a510ce6cabb8d612885e8b
2025-04-18 22:18 - 2025-04-18 22:18 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\4fca0a34b497acffbb870a4cea576f3ac71f00928c3146fe3d0d2dac45c9d5fb
2025-04-18 22:18 - 2025-04-18 22:18 - 000000000 ____D C:\Users\Robert\Desktop\zdroje jarda
2025-04-18 22:18 - 2025-04-14 19:53 - 000010049 _____ C:\Users\Robert\Desktop\komponenty.xlsx
2025-04-18 22:18 - 2025-04-11 20:26 - 001687344 _____ (Akeo Consulting) C:\Users\Robert\Desktop\rufus-4.7.exe
2025-04-18 21:27 - 2025-04-18 21:27 - 000000000 ____D C:\Users\Robert\AppData\LocalLow\Apoapsis Studios
2025-04-18 21:18 - 2025-04-18 21:18 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Apoapsis Studios
2025-04-18 21:17 - 2025-04-18 22:32 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-04-18 21:17 - 2025-04-18 21:17 - 000000222 _____ C:\Users\Robert\Desktop\Airport CEO.url
2025-04-18 21:06 - 2025-04-18 21:16 - 000000000 ____D C:\Users\Robert\AppData\Local\Steam
2025-04-18 21:06 - 2025-04-18 21:06 - 000001032 _____ C:\Users\Public\Desktop\Steam.lnk
2025-04-18 21:06 - 2025-04-18 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2025-04-18 20:39 - 2025-04-18 20:39 - 000000277 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2025-04-18 20:39 - 2025-04-18 20:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lenovo
2025-04-17 23:09 - 2025-04-17 23:09 - 000001304 _____ C:\Users\Public\Desktop\Wondershare Video Converter Ultimate.lnk
2025-04-17 23:09 - 2025-04-17 23:09 - 000000000 ____D C:\Users\Robert\Documents\Wondershare MediaServer
2025-04-17 23:09 - 2025-04-17 23:09 - 000000000 ____D C:\Users\Robert\AppData\Roaming\TransferSupport
2025-04-17 23:09 - 2025-04-17 23:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2025-04-17 22:55 - 2025-04-17 22:55 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2025-04-17 22:49 - 2025-04-17 22:49 - 000000000 ____D C:\Users\Robert\AppData\Local\CEF
2025-04-17 22:47 - 2025-04-17 23:11 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Wondershare
2025-04-17 22:47 - 2025-04-17 23:11 - 000000000 ____D C:\Users\Robert\AppData\Local\Wondershare
2025-04-17 22:46 - 2025-04-20 20:41 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\d184b3a61bf4be513cbb771b07df842ddf56f91b67d9cbe187f53880ca9b5c5d
2025-04-17 22:46 - 2025-04-20 20:38 - 000015661 _____ C:\Users\Robert\AppData\LocalLow\7c20ed46f96c41e8f4707573a4b5f44f7b40b89f3834b85911e9c253e71a658b
2025-04-17 22:21 - 2025-04-17 22:44 - 000000000 ____D C:\Users\Robert\AppData\Roaming\XnViewMP
2025-04-17 22:21 - 2025-04-17 22:24 - 000001719 _____ C:\Users\Robert\Desktop\XnView MP.lnk
2025-04-17 22:21 - 2025-04-17 22:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView MP
2025-04-17 22:13 - 2025-04-17 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO® 64
2025-04-17 22:13 - 2025-04-17 22:13 - 000000871 _____ C:\Users\Robert\Desktop\HWiNFO® 64.lnk
2025-04-17 22:13 - 2025-04-17 22:13 - 000000000 ____D C:\Users\Robert\AppData\Local\NEO
2025-04-17 22:09 - 2025-04-17 22:09 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\cf805d2f713496e708d42cbe5b9db8431a0ba71406dfe310e335188ebe737739
2025-04-17 22:08 - 2025-04-17 22:09 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Office
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Word
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\UProof
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Proof
2025-04-17 22:08 - 2025-04-17 22:08 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\AddIns
2025-04-17 22:07 - 2025-04-18 20:34 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\6c24cb48ad07e609b202da5bed0daad6e1f9cb902cb99c540bf998f0f78f497e
2025-04-17 22:07 - 2025-04-17 22:07 - 000052818 _____ C:\Users\Robert\AppData\LocalLow\37f22b22f7257f250884789ed6922f2c0f52d958a7a44f0a052c7a8a4540db4f
2025-04-17 22:07 - 2025-04-17 22:07 - 000005862 _____ C:\Users\Robert\AppData\LocalLow\31a05236bf63c1322dc2ad96fbc5fce66984281a7cc297635054f13ce385aba4
2025-04-17 22:07 - 2025-04-17 22:07 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\8222ed2b145f79e157d837f2f36fe58b0d2479c19d62a4eaf36319ae4a5db9ee
2025-04-17 22:03 - 2025-04-19 07:28 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-04-17 22:03 - 2025-04-19 07:28 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-17 22:03 - 2025-04-19 07:28 - 000000000 ___RD C:\Users\Default\OneDrive
2025-04-17 22:02 - 2025-04-17 22:02 - 000002573 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes (new).lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002517 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000002483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2025-04-17 22:02 - 2025-04-17 22:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office
2025-04-17 22:02 - 2025-04-17 22:02 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-04-17 21:57 - 2025-04-17 21:57 - 000000000 ____D C:\Users\Robert\AppData\Local\PeerDistRepub
2025-04-17 21:50 - 2025-04-17 21:50 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\8c90dfe160aa4d7986b18c7fec0883014fca29eb8008c982dfaa42b780933236
2025-04-17 21:49 - 2025-04-17 22:03 - 000014087 _____ C:\Users\Robert\AppData\LocalLow\c471a3f3b88ab9b37460e73f6bb1a3e7a513a2a2866fad587ff56ef5a1ad7e6c
2025-04-17 21:49 - 2025-04-17 21:49 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\bef33e67af07b07688c0a6330e732d016df14dc5824def44f89868a00efa36c8
2025-04-17 21:41 - 2025-04-17 22:06 - 000000000 ____D C:\Users\Robert\AppData\Local\GHISLER
2025-04-17 21:40 - 2025-04-17 21:41 - 000000000 ____D C:\Users\Robert\AppData\Roaming\GHISLER
2025-04-17 21:40 - 2025-04-17 21:40 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2025-04-17 21:02 - 2025-04-17 21:02 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\d1cf5ddacfbcfdb200ecab8573d5a879b9c9dd1809e72636b96abe744dc5c1e5
2025-04-17 21:00 - 2025-04-21 07:10 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\a3a6c18d987c7026cb89a58f4d73379ce458cdf838ed4dfaa757a98133f4ec8d
2025-04-17 21:00 - 2025-04-20 09:52 - 000279747 _____ C:\Users\Robert\AppData\LocalLow\71526115fc7e468c232d42ae5088250ec4121a38b5a1f96fec9ed5b3ee8a45d1
2025-04-17 21:00 - 2025-04-17 22:12 - 000034391 _____ C:\Users\Robert\AppData\LocalLow\f511570017ef7913fd75e88e11a01911f88862b19fe7eb34b26890e8259721ee
2025-04-17 21:00 - 2025-04-17 21:00 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\266bd9807d399cce2d446c97a504eb63b8c3c3e0ddf6d49dc9bc016827c2d997
2025-04-16 23:08 - 2025-04-16 23:08 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\4b82d73b83a4ced6b7d0997eb3aaaa99b450d9ee2aa3cc29116e303d1eae60a8
2025-04-16 23:06 - 2025-04-16 23:08 - 000228253 _____ C:\Users\Robert\AppData\LocalLow\b6f4b85779ab477df2ad80f8c96aa6c6bb8e0e80917194fb28985c5a92e096e7
2025-04-16 23:06 - 2025-04-16 23:08 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\6bb4f2f9d65f7bda2d90f51ccff4729b5ddfdde019641b39e1f05d5a804c8ed9
2025-04-16 22:58 - 2025-04-18 20:39 - 000000000 ____D C:\WINDOWS\system32\Tasks\TVT
2025-04-16 22:58 - 2025-04-16 22:58 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2025-04-16 22:58 - 2025-04-16 22:58 - 000000000 ____D C:\Users\Robert\AppData\Local\LenovoServiceBridge
2025-04-16 22:46 - 2025-04-16 22:46 - 000002264 _____ C:\Users\Robert\AppData\LocalLow\77e2aeb7d287c591e83df060bd0791395599662b0525d26ab77b624e9c5ab91c
2025-04-16 22:46 - 2025-04-16 22:46 - 000000130 _____ C:\Users\Robert\AppData\LocalLow\542c1e7e7a3f794d97a241f547580e15b32e73702c3ce8d5d387f920a571694b
2025-04-16 22:46 - 2025-04-16 22:46 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\f68745aa7a9338028522371f61f4006042b0b517326f372ba707e936d2a1fab0
2025-04-16 22:42 - 2025-04-17 21:42 - 000013429 _____ C:\Users\Robert\AppData\LocalLow\abdfbee3f482f410934d1e17c2f7f6fa1d3b379b2a07284ffda6ea337445c922
2025-04-16 22:42 - 2025-04-16 22:42 - 000000026 _____ C:\Users\Robert\AppData\LocalLow\6bdad7e2b2f0e006a1b2964609240b6498c71fd5a1aeb1e97866f9a43779a743
2025-04-16 22:41 - 2025-04-21 07:03 - 000000000 __SHD C:\Users\Robert\IntelGraphicsProfiles
2025-04-16 22:41 - 2025-04-16 22:41 - 000000000 ____D C:\Users\Robert\AppData\LocalLow\Intel
2025-04-16 22:35 - 2025-04-16 22:35 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2025-04-16 22:34 - 2025-04-16 22:34 - 000003366 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2025-04-16 22:34 - 2025-04-16 22:34 - 000000591 _____ C:\WINDOWS\system32\regtest.txt
2025-04-16 22:34 - 2024-09-02 23:38 - 005232560 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw10.sys
2025-04-16 22:34 - 2024-09-02 23:38 - 001499056 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter10.dll
2025-04-16 22:34 - 2024-04-24 23:42 - 006167496 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2025-04-16 22:33 - 2023-03-07 00:05 - 000058680 _____ () C:\WINDOWS\system32\Drivers\AlcGener2.sys
2025-04-16 22:26 - 2025-04-16 22:26 - 000000000 ____D C:\Users\Robert\AppData\Local\Comms
2025-04-16 22:22 - 2025-04-16 22:22 - 000000000 ____D C:\WINDOWS\system32\AccountHealthAssets
2025-04-16 22:20 - 2024-10-10 01:17 - 000982184 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2025-04-16 22:20 - 2024-10-10 01:17 - 000786856 _____ (Intel) C:\WINDOWS\system32\libvpl.dll
2025-04-16 22:20 - 2024-10-10 01:17 - 000671568 _____ (Intel) C:\WINDOWS\SysWOW64\libvpl.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 027986912 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 020710984 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 002118192 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 002118192 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 002041904 _____ C:\WINDOWS\system32\ze_intel_gpu_raytracing.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 001676360 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 001676360 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-04-16 22:20 - 2024-10-10 01:16 - 001465880 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 001308208 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000797616 _____ C:\WINDOWS\system32\ze_loader.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000740824 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000624728 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000613760 _____ C:\WINDOWS\SysWOW64\IntelControlLib32.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000563760 _____ C:\WINDOWS\system32\ze_tracing_layer.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000483704 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2025-04-16 22:20 - 2024-10-10 01:16 - 000430104 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2025-04-16 22:19 - 2024-10-10 01:15 - 000339720 _____ C:\WINDOWS\system32\ControlLib.dll
2025-04-16 22:19 - 2024-10-10 01:15 - 000281536 _____ C:\WINDOWS\SysWOW64\ControlLib32.dll
2025-04-16 22:17 - 2024-05-13 09:38 - 003192872 _____ (Genesys Logic) C:\WINDOWS\system32\GLCRIcon.dll
2025-04-16 22:17 - 2024-05-13 09:38 - 000240904 _____ (Genesys Logic) C:\WINDOWS\system32\Drivers\GlPciSD.sys
2025-04-16 21:59 - 2025-04-16 21:59 - 000029042 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-16 21:59 - 2025-04-16 21:59 - 000029042 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-16 21:59 - 2025-04-16 21:59 - 000000998 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2025-04-16 21:58 - 2025-04-16 21:58 - 000070484 _____ C:\WINDOWS\SysWOW64\ctac.json
2025-04-16 21:58 - 2025-04-16 21:58 - 000070484 _____ C:\WINDOWS\system32\ctac.json
2025-04-16 21:53 - 2025-04-16 22:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-04-16 21:50 - 2022-11-16 18:30 - 020194536 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPRes.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 004454120 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnh.exe
2025-04-16 21:50 - 2022-11-16 18:30 - 004043464 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCpl.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 001124552 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 000812728 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2025-04-16 21:50 - 2022-11-16 18:30 - 000436424 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnhService.exe
2025-04-16 21:50 - 2022-11-16 18:30 - 000331448 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2025-04-16 21:50 - 2022-11-16 18:30 - 000254184 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPHelper.exe
2025-04-16 21:50 - 2022-11-16 18:30 - 000050360 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2025-04-16 21:49 - 2025-04-19 07:21 - 000000000 ____D C:\Users\Robert\AppData\Local\Lenovo
2025-04-16 21:49 - 2025-04-16 22:58 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo
2025-04-16 21:49 - 2025-04-16 21:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Lenovo
2025-04-16 21:49 - 2025-04-16 21:49 - 000000000 ____D C:\WINDOWS\system32\Lenovo
2025-04-16 21:49 - 2025-02-26 17:45 - 005624152 _____ (Lenovo Group Limited) C:\WINDOWS\SysWOW64\PWMTR32V.dll
2025-04-16 21:49 - 2025-02-26 17:45 - 002352480 _____ (Lenovo Group Limited) C:\WINDOWS\SysWOW64\EasyResume.exe
2025-04-16 21:49 - 2025-02-26 17:45 - 000174928 _____ (Lenovo) C:\WINDOWS\SysWOW64\InstHelper.dll
2025-04-16 21:49 - 2025-02-26 17:45 - 000104784 _____ (Lenovo) C:\WINDOWS\SysWOW64\EventLogger.dll
2025-04-16 21:49 - 2025-02-26 17:45 - 000067408 _____ () C:\WINDOWS\SysWOW64\PowerMgrInst.exe
2025-04-16 21:49 - 2024-05-09 20:29 - 000045912 _____ () C:\WINDOWS\system32\SmartStandbyInst.exe
2025-04-16 21:48 - 2025-04-16 21:48 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-04-16 21:48 - 2025-04-16 21:48 - 000000000 ____D C:\Users\Robert\AppData\Local\Google
2025-04-16 21:47 - 2025-04-16 21:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2025-04-16 21:47 - 2022-12-15 03:59 - 003265400 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TbtBusDrv.sys
2025-04-16 21:47 - 2022-12-15 03:59 - 000256368 _____ (Intel Corporation) C:\WINDOWS\TbtP2pShortcutService.exe
2025-04-16 21:46 - 2025-04-19 07:28 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-348134008-3669429990-2405808313-1000
2025-04-16 21:46 - 2025-04-19 07:28 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-348134008-3669429990-2405808313-1000
2025-04-16 21:46 - 2025-04-16 21:46 - 000000000 ___RD C:\Users\Robert\OneDrive
2025-04-16 21:45 - 2025-04-18 22:37 - 000000000 ____D C:\Users\Robert\AppData\Local\PlaceholderTileLogoFolder
2025-04-16 21:45 - 2025-04-16 22:41 - 000000000 ____D C:\Users\Robert\AppData\Local\Publishers
2025-04-16 21:45 - 2023-08-25 03:54 - 003784936 _____ (Synaptics Incorporated.) C:\WINDOWS\system32\AuthenticateFAM_SecureFP_UI.dll
2025-04-16 21:45 - 2023-08-25 03:54 - 003759336 _____ (Synaptics Incorporated.) C:\WINDOWS\SysWOW64\AuthenticateFAM_SecureFP_UI.dll
2025-04-16 21:45 - 2023-08-25 03:54 - 000504552 _____ (Synaptics Incorporated.) C:\WINDOWS\system32\AuthenticateFAM_SecureFP.dll
2025-04-16 21:45 - 2023-08-25 03:54 - 000371944 _____ (Synaptics Incorporated.) C:\WINDOWS\SysWOW64\AuthenticateFAM_SecureFP.dll
2025-04-16 21:44 - 2025-04-20 19:22 - 000000000 ____D C:\Users\Robert\AppData\Local\Packages
2025-04-16 21:44 - 2025-04-20 19:12 - 000000000 ____D C:\Users\Robert\AppData\Local\D3DSCache
2025-04-16 21:44 - 2025-04-19 19:38 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Adobe
2025-04-16 21:44 - 2025-04-17 22:25 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Spelling
2025-04-16 21:44 - 2025-04-17 21:48 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\Credentials
2025-04-16 21:44 - 2025-04-17 21:43 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Windows
2025-04-16 21:44 - 2025-04-16 22:26 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\Protect
2025-04-16 21:44 - 2025-04-16 21:44 - 000000020 ___SH C:\Users\Robert\ntuser.ini
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Šablony
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Soubory cookie
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Poslední
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Okolní tiskárny
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Okolní síť
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Nabídka Start
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Dokumenty
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Documents\Obrázky
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Documents\Hudba
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Documents\Filmy
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\Data aplikací
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 _SHDL C:\Users\Robert\AppData\Local\Data aplikací
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\SystemCertificates
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ___SD C:\Users\Robert\AppData\Roaming\Microsoft\Crypto
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Vault
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Roaming\Microsoft\Network
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Local\VirtualStore
2025-04-16 21:44 - 2025-04-16 21:44 - 000000000 ____D C:\Users\Robert\AppData\Local\ConnectedDevicesPlatform
2025-04-16 21:44 - 2022-11-13 23:47 - 015824744 _____ C:\WINDOWS\system32\RsDMFT_Assets.dll
2025-04-16 21:44 - 2022-11-13 23:47 - 014798200 _____ C:\WINDOWS\system32\RsEyeContactCorrection_Assets.dll
2025-04-16 21:44 - 2022-11-13 23:46 - 013371816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RsDMFT64.dll
2025-04-16 21:43 - 2025-04-21 07:07 - 001692324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-16 21:41 - 2025-04-21 07:09 - 000001460 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Obrázky
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Hudba
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Filmy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Šablony
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Soubory cookie
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Poslední
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Okolní tiskárny
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Okolní síť
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Nabídka Start
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Dokumenty
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Obrázky
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Hudba
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Filmy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\Data aplikací
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Šablony
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Plocha
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Nabídka Start
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Dokumenty
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\ProgramData\Data aplikací
2025-04-16 21:38 - 2025-04-16 21:38 - 000000000 _SHDL C:\Documents and Settings
2025-04-16 21:36 - 2025-04-21 07:48 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-16 21:36 - 2025-04-21 07:03 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-16 21:36 - 2025-04-21 07:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-16 21:36 - 2025-04-19 17:47 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-16 21:36 - 2025-04-19 07:23 - 000370032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-16 21:36 - 2025-04-16 22:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-04-16 21:36 - 2025-04-16 21:41 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{EAD36AA6-B97F-4539-9438-03FC2682609F}
2025-04-16 21:36 - 2025-04-16 21:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{8969E11F-6533-4D70-9C19-2621E0D91B94}
2025-04-16 21:36 - 2025-04-16 21:36 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2025-04-16 21:36 - 2025-04-16 21:36 - 000000000 ____D C:\WINDOWS\system32\config\BFS
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2025-04-21 08:49 - 2017-07-04 09:05 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-21 08:40 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\INF
2025-04-21 08:20 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\ServiceState
2025-04-21 07:44 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-21 07:41 - 2017-07-04 09:05 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-21 07:21 - 2017-07-04 09:05 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-21 07:09 - 2017-07-04 09:05 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-21 07:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-04-21 07:03 - 2017-07-04 09:05 - 000000000 __SHD C:\Intel
2025-04-21 07:03 - 2017-07-04 09:05 - 000000000 ____D C:\Program Files\TeamViewer
2025-04-20 22:22 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-04-20 21:05 - 2017-07-04 09:05 - 000000000 ____D C:\ProgramData\VEGAS
2025-04-20 21:05 - 2017-07-04 09:05 - 000000000 ____D C:\Program Files\VEGAS
2025-04-18 22:36 - 2024-09-06 05:59 - 001175072 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2025-04-18 22:36 - 2024-09-06 05:59 - 000780720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2025-04-18 22:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2025-04-18 22:36 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\MUI
2025-04-17 22:48 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-04-17 22:17 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-04-17 21:48 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WebThreatDefSvc
2025-04-16 22:36 - 2024-04-01 09:26 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2025-04-16 22:34 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-04-16 22:25 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\spool
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2025-04-16 22:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-04-16 22:22 - 2024-04-01 18:31 - 000000000 ___SD C:\WINDOWS\system32\AppV
2025-04-16 22:22 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-16 22:22 - 2024-04-01 18:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2025-04-16 22:22 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-04-16 22:22 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2025-04-16 22:18 - 2024-04-01 09:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2025-04-16 22:18 - 2024-04-01 09:26 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2025-04-16 21:52 - 2024-04-01 09:21 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2025-04-16 21:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2025-04-16 21:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2025-04-16 21:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
==================== Files in the root of some directories ========
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files\Symantec
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\AlibabaProtect
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Avast Software
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\AVG
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Awesome Miner
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Bitdefender
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\CryptoTab Browser
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\ESET
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\HitmanPro.Alert
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\HP Sure Sense
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\IOBit
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Kaspersky Lab
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Malwarebytes
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\McAfee
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\McAfee.com
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Net Protector 202A
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Norton Security
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\ReasonLabs
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\SMADAV
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Sophos
2025-04-20 20:14 - 2025-04-20 20:14 - 000000002 __RSH () C:\Program Files (x86)\Symantec
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
ADDITION.TXT
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-04-2025
Ran by Robert (21-04-2025 08:50:25)
Running from C:\Users\Robert\Desktop
Microsoft Windows 11 Pro Version 24H2 26100.3775 (X64) (2025-04-16 19:38:45)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-348134008-3669429990-2405808313-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-348134008-3669429990-2405808313-503 - Limited - Disabled)
Guest (S-1-5-21-348134008-3669429990-2405808313-501 - Limited - Disabled)
Robert (S-1-5-21-348134008-3669429990-2405808313-1000 - Administrator - Enabled) => C:\Users\Robert
WDAGUtilityAccount (S-1-5-21-348134008-3669429990-2405808313-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 135.0.7049.96 - Google LLC)
HWiNFO® 64 (HKLM\...\HWiNFO® 64_is1) (Version: 8.24 - Martin Malik, REALiX s.r.o.)
Lenovo Service Bridge (HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 5.0.2.17 - Lenovo)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.08.03.59 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.3.21.0 - Lenovo Group Ltd.)
Microsoft 365 - cs-cz (HKLM\...\O365EduCloudRetail - cs-cz) (Version: 16.0.18623.20178 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 135.0.3179.85 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 135.0.3179.85 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.051.0317.0003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.23.27820 (HKLM-x32\...\{86BE78D9-65A1-4E69-86F8-C1F5281F8553}) (Version: 14.23.27820 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.23.27820 (HKLM-x32\...\{00AC3934-26B4-406E-807C-1692AC7329EC}) (Version: 14.23.27820 - Microsoft Corporation) Hidden
MSVCRT Redists (HKLM\...\{52116C70-79F9-11E6-9541-BB95F5A309BD}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
MSVCRT Redists (HKLM\...\{E5637EB0-7FC4-11E7-B61D-95BE57594EAC}) (Version: 1.0 - MAGIX Computer Products Intl. Co.) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.3 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20178 - Microsoft Corporation) Hidden
PS Remote Play (HKLM-x32\...\{40C31EAB-247D-49F2-935E-7A432817B644}) (Version: 8.0.0.14120 - Sony Interactive Entertainment Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.64.3 - TeamViewer)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.51 - Ghisler Software GmbH)
VEGAS Pro 15.0 (HKLM\...\{E0F91FB0-7FC4-11E7-B8E9-95BE57594EAC}) (Version: 15.0.177 - VEGAS)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
Wondershare NativePush(Build 1.0.0.8) (HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\Wondershare NativePush_is1) (Version: - Wondershare Software)
Wondershare Video Converter Ultimate(Build 10.4.1.188) (HKLM-x32\...\Video Converter Ultimate_is1) (Version: 10.4.1.188 - Wondershare Software)
XnView MP (x64) (HKLM\...\XnView MP (x64)_is1) (Version: 1.8.8.0 - Pierre-e Gougelet)
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-04-16] (INTEL CORP) [Startup Task]
AppUp.ThunderboltControlCenter -> C:\Program Files\WindowsApps\AppUp.ThunderboltControlCenter_1.0.37.0_x64__8j3eq9eme6ctt [2025-04-16] (INTEL CORP)
Balíček prostředí funkcí systému Windows -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-16] (Microsoft Windows)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.26.3000.0_x64__rz1tebttyb220 [2025-04-16] (Dolby Laboratories)
Dolby Digital Plus decoder for PC OEMs -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyDigitalPlusDecoderOEM_1.1.285.0_x64__rz1tebttyb220 [2025-04-16] (Dolby Laboratories)
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2501.20.0_x64__k1h2ywk1493x8 [2025-04-16] (LENOVO INC.)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.296.0_x64__8wekyb3d8bbwe [2025-04-17] (Microsoft Corporation)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-04-17] ()
PrebootManager -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynapticsUtilities_1.1.18.0_x64__807d65c4rvak2 [2025-04-16] (Synaptics Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.50.323.0_x64__dt26b99r8h8gj [2025-04-16] (Realtek Semiconductor Corp)
Synaptics TouchPad Control Panel -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynapticsControlPanel_19005.19110.0.0_x64__807d65c4rvak2 [2025-04-16] (Synaptics Incorporated)
Synaptics Trackpoint Control Panel -> C:\Program Files\WindowsApps\SynapticsIncorporated.241916F58D6E7_19005.19110.0.0_x64__807d65c4rvak2 [2025-04-16] (Synaptics Incorporated)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-348134008-3669429990-2405808313-1000_Classes\CLSID\{04271989-C4D2-E3AC-E5DF-56422E561943} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-348134008-3669429990-2405808313-1000_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-348134008-3669429990-2405808313-1000_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [IXnView] -> {A5D35F9F-6A11-4EAA-B70B-7BB6FE32663A} => C:\Program Files\XnViewMP\XnViewShellExt64.dll [2025-03-28] (Pierre GOUGELET -> )
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.051.0317.0003\FileSyncShell64.dll [2025-04-19] (Microsoft Corporation -> Microsoft Corporation)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Robert - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Michaela - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
==================== Loaded Modules (Whitelisted) =============
2025-04-17 22:48 - 2016-07-21 10:54 - 000137728 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2025-04-17 22:48 - 2017-09-12 10:34 - 001506304 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2025-04-17 22:48 - 2017-09-12 10:36 - 000708608 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-04-01 09:26 - 2025-04-20 20:15 - 000009941 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 download.bleepingcomputer.com
127.0.0.1 www.bleepingcomputer.com
127.0.0.1 bleepingcomputer.com
127.0.0.1 www.fullindir.cafe
127.0.0.1 fullindir.cafe
127.0.0.1 www.fullprogramlarindir.net
127.0.0.1 fullprogramlarindir.net
127.0.0.1 www.buyurindir.net
127.0.0.1 buyurindir.net
127.0.0.1 www.warezturkey.org
127.0.0.1 warezturkey.org
127.0.0.1 www.warezturkey.net
127.0.0.1 warezturkey.net
127.0.0.1 www.tnctr.com
127.0.0.1 tnctr.com
127.0.0.1 tb.rg-adguard.net
127.0.0.1 rufus.ie
127.0.0.1 www.rufus.ie
127.0.0.1 download.sysinternals.com
127.0.0.1 data-cdn.mbamupdates.com
127.0.0.1 download.cnet.com
127.0.0.1 cnet.com
127.0.0.1 www.cnet.com
127.0.0.1 prod.downloadnow.com
127.0.0.1 www.pandasecurity.com
127.0.0.1 pandasecurity.com
127.0.0.1 www.adaware.com
127.0.0.1 adaware.com
127.0.0.1 sdl.adaware.com
127.0.0.1 www.nano-av.com
There are 293 more lines.
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Intel;C:\Intel\m;C:\Intel\logs;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\Robert\AppData\Local\Microsoft\WindowsApps;
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Robert\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\11348772234367442116\133894817047152598.jpg
DNS Servers: 1.1.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: Intel(R) Ethernet Connection (13) I219-V -> e1d.sys
Wi-Fi: Intel(R) Wi-Fi 6 AX201 160MHz -> Netwtw10.sys
Síťové připojení Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_A9F6DCE4ABADF4F51CF45CD7129E3C6C"
HKU\S-1-5-21-348134008-3669429990-2405808313-1000\...\StartupApproved\Run: => "OneDrive"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{635A048F-41C7-4A01-80F6-64EFE5EC3A48}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25060.205.3499.6849_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F9B27D0B-2124-450C-A059-7BB1B84C2EE2}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25060.205.3499.6849_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9929DDA7-1A42-4651-B8D5-4F66BBEA833E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F4629C20-BBE5-4BC0-8E77-7CA589BFF6BB}] => (Allow) C:\Users\Robert\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [{5CBFAD92-F77C-4910-B915-3EA52FFF906D}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\135.0.3179.85\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{33C798EB-FEE7-4223-B6C6-E8300D597810}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)
FirewallRules: [{7AE83D4A-4EFD-427D-B8E5-625565A1B9A8}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)
FirewallRules: [{0D64533A-C45E-4940-A571-831E539F5ED9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{C4B25082-77B6-4A0B-9047-2FCD4EC12778}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F1170423-1B2A-4263-BF98-E9796D8438F4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FC91FD90-0298-4966-BDCA-37951F9C57F0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A6D004A1-55B9-4A1E-80F3-38BED8497B4A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Airport CEO\Airport CEO.exe () [File not signed]
FirewallRules: [{469116F2-C586-4712-A8AF-ECBB4BDC37A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Airport CEO\Airport CEO.exe () [File not signed]
FirewallRules: [TCP Query User{0D878514-98FC-42C8-AA8F-0674735F1C9E}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [UDP Query User{82DE9701-077C-4D94-9B5C-73986AA37E2C}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe => No File
FirewallRules: [{CDC9AE13-5854-4F65-83C6-1DC4C5455E91}] => (Allow) C:\Program Files (x86)\Sony\PS Remote Play\RemotePlay.exe (Sony Interactive Entertainment Inc. -> Sony Interactive Entertainment Inc.)
FirewallRules: [{E6A73698-45DE-4C1C-8D57-4F1C6988E9A8}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5593D14A-B5EF-488F-AFFE-4D26A42828D7}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4AA54631-E167-4F2D-9C21-2FBCD2F09FE4}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{57068959-DEC9-4BE8-87E6-D17A3277C569}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4F098826-9454-4040-8B28-5E75F3444FDB}] => (Allow) C:\Intel\i2.exe => No File
FirewallRules: [{B60990DF-E6CF-4644-A0F0-6802E7056916}] => (Allow) C:\Intel\i4.exe => No File
FirewallRules: [{A0533739-BC28-4E29-883D-6ACAFA69FACC}] => (Allow) C:\Intel\i2.exe => No File
FirewallRules: [{5F20DE9E-7D51-4D9A-A686-85F5B6194686}] => (Allow) C:\Intel\q.exe => No File
FirewallRules: [{789B9F14-F391-448F-8C78-03255D009A1B}] => (Allow) C:\Intel\q.exe => No File
FirewallRules: [{5E6C2FC9-EC7C-41B0-87B2-57F01190852D}] => (Allow) C:\Intel\i1.exe => No File
FirewallRules: [{31EB8F86-4EC6-43FB-A806-516A93EBB74F}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{95350907-9448-4D66-A529-79D392C1C28D}] => (Allow) C:\Intel\i3.exe => No File
FirewallRules: [{7EC93EE9-32B7-4AE5-9E6F-28252ABCCB65}] => (Allow) C:\Intel\i3.exe => No File
FirewallRules: [{D970F018-6A94-4986-B608-418795A76CFA}] => (Allow) C:\Intel\i4.exe => No File
FirewallRules: [{5AD64AE2-5BD8-4E6F-9681-564BDD506CD8}] => (Allow) C:\Intel\i1.exe => No File
FirewallRules: [{F27C5807-E592-42E9-B884-916D08640085}] => (Allow) C:\Intel\c.exe => No File
FirewallRules: [{9A4C4C26-0AA9-49C3-A4B8-257A1669121C}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{554B5070-7985-4D8D-970D-935A7851D9D0}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{03736EFE-B314-4F0F-97F7-C01A0EEA0D6F}] => (Allow) C:\Intel\m\xrm.exe => No File
FirewallRules: [{311BF76D-5551-4AB5-99A1-483AD2F271B8}] => (Allow) C:\Intel\m\nmb.exe => No File
FirewallRules: [{CF531EF1-A627-4E30-B2D7-758F74236123}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{AE88E30A-634A-42AB-A51D-CE3C1D0C34EC}] => (Allow) C:\Intel\m\llm.exe => No File
FirewallRules: [{787699FE-9588-4573-A95F-001327982E12}] => (Allow) C:\Intel\m\txr.exe => No File
FirewallRules: [{EDA78B22-A4AD-4897-8C86-79FC370DC2E9}] => (Allow) C:\Intel\m\llm.exe => No File
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:476.2 GB) (Free:396.95 GB) (83%)
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (04/21/2025 08:03:17 AM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-EC0CQAC)
Description: Název chybující aplikace: BMLFJMJNHGHGHMDK.exe, verze: 10.0.26100.1150, časové razítko: 0x23bbb5d4
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000140003be2
ID chybujícího procesu: 0x3758
Čas spuštění chybující aplikace: 0x1dbb27aaef19bb3
Cesta k chybující aplikaci: C:\Users\Robert\AppData\Roaming\Adobe\LogTransport2\BMLFJMJNHGHGHMDK.exe
Cesta k chybujícímu modulu: unknown
ID sestavy: 698d3fe8-4967-4bf4-8f43-f0a50271ecca
Celý název chybujícího balíčku:
ID chybující aplikace relativní vzhledem k balíčku:
Error: (04/21/2025 07:03:09 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\DESKTOP-EC0CQAC$ přes https://NTC-KeyId-23f4e22ad3be374a44977 ... s/Aik/scep se nepovedla:
GetCACaps
Metoda: GET(15ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (04/17/2025 08:55:19 PM) (Source: DPTF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17
Error: (04/16/2025 09:44:11 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=2
Error: (04/16/2025 09:41:30 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0x80004005
Argument příkazového řádku:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent
Error: (04/16/2025 09:40:38 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Při aktualizaci stavu Windows Defender na SECURITY_PRODUCT_STATE_ON došlo k chybě.
Error: (04/16/2025 09:38:56 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro WORKGROUP\WIN-SAK7ARI4AOQ$ přes https://NTC-KeyId-23f4e22ad3be374a44977 ... s/Aik/scep se nepovedla:
GetCACaps
Metoda: GET(0ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (04/16/2025 09:38:55 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: Inicializace registrace certifikátu SCEP pro Místní systém přes https://NTC-KeyId-23f4e22ad3be374a44977 ... s/Aik/scep se nepovedla:
GetCACaps
Metoda: GET(0ms)
Fáze: GetCACaps
Nelze rozpoznat název nebo adresu serveru. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
System errors:
=============
Error: (04/21/2025 08:03:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba WinRing0_1_2_0 neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Error: (04/21/2025 07:12:20 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba WinRing0_1_2_0 neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Error: (04/21/2025 07:11:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (04/21/2025 07:11:35 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (04/21/2025 07:11:25 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x80073d02): 9N0866FS04W8-DolbyLaboratories.DolbyAccess.
Error: (04/20/2025 10:22:23 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.
Error: (04/20/2025 10:22:23 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT AUTHORITY)
Description: Služba přidružení zařízení zjistila chybu zjišťování koncového bodu.
Error: (04/20/2025 09:12:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba WinRing0_1_2_0 neuspěla při spuštění v důsledku následující chyby:
Systém nemůže nalézt uvedený soubor.
Windows Defender:
================
Date: 2025-04-21 07:34:04
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-21 07:27:11
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-21 07:16:56
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2025-04-20 20:59:46
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: VirTool:Win32/Vbinder.gen!G
Severity: Severe
Category: Tool
Path: file:_C:\Intel\i1.exe; file:_C:\Intel\i2.exe; file:_C:\Intel\i3.exe; file:_C:\Intel\i4.exe
Detection Origin: Local machine
Detection Type: Generic
Detection Source: Real-Time Protection
Process Name: C:\Program Files\totalcmd\TOTALCMD64.EXE
Security intelligence Version: AV: 1.427.348.0, AS: 1.427.348.0, NIS: 1.427.348.0
Engine Version: AM: 1.1.25030.1, NIS: 1.1.25030.1
Date: 2025-04-20 20:59:13
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Name: VirTool:Win32/Vbinder.gen!G
Severity: Severe
Category: Tool
Path: file:_C:\Intel\i1.exe; file:_C:\Intel\i2.exe; file:_C:\Intel\i3.exe; file:_C:\Intel\i4.exe
Detection Origin: Local machine
Detection Type: Generic
Detection Source: Real-Time Protection
Process Name: C:\Program Files\totalcmd\TOTALCMD64.EXE
Security intelligence Version: AV: 1.427.348.0, AS: 1.427.348.0, NIS: 1.427.348.0
Engine Version: AM: 1.1.25030.1, NIS: 1.1.25030.1
CodeIntegrity:
===============
Date: 2025-04-21 07:16:12
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_84147fa7a978ce4e\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO N34ET65W (1.65 ) 02/07/2025
Motherboard: LENOVO 20W4008QCK
Processor: 11th Gen Intel(R) Core(TM) i5-1135G7 @ 2.40GHz
Percentage of memory in use: 43%
Total physical RAM: 16107.05 MB
Available physical RAM: 9023.88 MB
Total Virtual: 19051.05 MB
Available Virtual: 11408.94 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:476.2 GB) (Free:396.95 GB) (Model: SKHynix_HFS512GDE9X081N) NTFS
Drive e: (lojza) (Removable) (Total:14.55 GB) (Free:14.46 GB) NTFS
\\?\Volume{b148aa00-f56d-48be-8126-25ca6e141c08}\ () (Fixed) (Total:0.63 GB) (Free:0.07 GB) NTFS
\\?\Volume{f6f69a02-6878-431e-902a-318c2344ecbe}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: BB712021)
Partition: GPT.
==========================================================
Disk: 1 (Size: 14.6 GB) (Disk ID: 140D9572)
Partition 1: (Active) - (Size=14.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
