nainstaloval jsem xmrig, a chtěl těžit. po pár dnech mi PC nevidí WIFI síť od O2, i když jiná zařízení se k wifi připojí. PC vidí i třeba když spustím hotspot z telefonu. Na internet je PC připojene přes kabel. nějaké další problémy (zpomalení apod) se nezdá.
Projel jsem Kaspersky antivirem a snažil jsem se vyčistit.
Jediné co se změnilo byla instalace xmrig, tak jestli něco neudělal on.
prosím o kontrolu děkuji
Kód: Vybrat vše
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-06-2021
Ran by ordinace_2 (administrator) on PC-HLAVNI (ATComputers ALZA) (09-06-2021 10:55:49)
Running from C:\Users\ordinace_2\Desktop
Loaded Profiles: ordinace_2 & MSSQL$DATA
Platform: Windows 10 Pro Version 20H2 19042.1023 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\Adobe Installer.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe <2>
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <2>
(Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <27>
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(HP) [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(Ing. Karel Rubáš, HoboSoft® -> HoboSoft® Ing. Karel Rubáš) D:\hobosoft\Stomatolog\Bin\Stomat.bin
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_48973fc6c96c696a\RstMwService.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\avp.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\avpui.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\plugins_nms.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_tray.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksdeui.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.DATA\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20920.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20920.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SIRONA Dental Systems GmbH) [File not signed] C:\Program Files\Sirona\SIDEXIS4\OptionsManager3G.exe
(SIRONA Dental Systems GmbH) [File not signed] C:\Program Files\Sirona\SIDEXIS4\Sidexis4.exe
(Sirona Dental Systems GmbH) [File not signed] C:\Program Files\Sirona\SIDEXIS4\XG\NGPIMan.exe
(Sirona Dental, Inc.) [File not signed] [File is in use] C:\Program Files (x86)\Schick Technologies\Shared Files\MarconiService.exe
(Sirona Dental, Inc.) [File not signed] C:\Program Files (x86)\Schick Technologies\Shared Files\MarconiMonitor.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Value Added Tehnologies Co.,Ltd) [File not signed] C:\EasyDent4\File Server\FileServer.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [FileServer] => C:\EasyDent4\File Server\FileBackUp.exe [36864 2007-03-12] (Value Added Technologies Co.,Ltd) [File not signed]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [779448 2021-05-05] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-03-10] (Adobe Inc. -> )
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5296352 2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [330040 2014-02-12] (Hewlett-Packard Company -> Hewlett-Packard Company)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\ProgramData\Autodesk\Genuine Service\x64\GenuineService.exe [2913648 2021-05-10] (Autodesk, Inc. -> Autodesk)
HKU\S-1-5-21-1930677817-3247307296-2436609557-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [5549280 2021-05-28] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1930677817-3247307296-2436609557-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [5549280 2021-05-28] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1930677817-3247307296-2436609557-1001\...\Policies\Explorer: []
HKU\S-1-5-21-1930677817-3247307296-2436609557-1001\...\MountPoints2: {11298201-a8bd-11eb-8eed-c38db3d2b80d} - "G:\HiSuiteDownLoader.exe"
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65160 2021-05-28] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\91.0.4472.77\Installer\chrmstp.exe [2021-05-27] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2021-05-28] (Adobe Inc. -> Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Monitor.lnk [2021-01-28]
ShortcutTarget: Wireless Monitor.lnk -> C:\Program Files (x86)\Schick Technologies\Shared Files\MarconiMonitor.exe (Sirona Dental, Inc.) [File not signed]
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0CF5E128-68CF-4E63-BD79-318DFB66A2DA} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [89840 2014-10-19] (Hewlett-Packard Company -> Hewlett Packard)
Task: {2459DC5E-A2B3-45BC-B169-1E58E627DC1A} - System32\Tasks\AMHelper => C:\Program Files (x86)\Zemana\AntiMalware\AntiMalware.exe [682008 2021-03-30] (Zemana D.O.O. Sarajevo -> Zemana Ltd.)
Task: {24E65DB6-FB51-49A6-A2A2-AAFA430309F1} - System32\Tasks\AMSkipUAC => C:\Program Files (x86)\Zemana\AntiMalware\AntiMalware.exe [682008 2021-03-30] (Zemana D.O.O. Sarajevo -> Zemana Ltd.)
Task: {25DA87CD-C4A8-416A-858A-C364C4DDD7E1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {2BAEAB6D-83C9-43F9-A285-2D52FF9D7808} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {661FAF78-FC45-440E-B99B-94C11DF770C5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-01-16] (Google LLC -> Google LLC)
Task: {678C843C-A0EA-4911-9449-DA9200FFC4EC} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [743488 2021-06-09] (Kaspersky Lab JSC -> AO Kaspersky Lab)
Task: {7F339252-B2E1-49E2-BD7B-B21C38ECEF06} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {AB0D4E7E-B353-4850-98F6-B41326A97BE3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-01-16] (Google LLC -> Google LLC)
Task: {F4714F2A-5BFD-4CF0-AEFF-789C56669DA3} - System32\Tasks\kpm_tray.exe => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_tray.exe [622168 2021-04-28] (Kaspersky Lab JSC -> AO Kaspersky Lab)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{783d6656-b6d5-4145-b63a-99cafed18757}: [NameServer] 10.0.1.138
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\ordinace_2\AppData\Local\Microsoft\Edge\User Data\Default [2021-06-09]
Edge Extension: (Outlook) - C:\Users\ordinace_2\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2021-01-16]
Edge Extension: (Word) - C:\Users\ordinace_2\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2021-01-16]
Edge Extension: (Excel) - C:\Users\ordinace_2\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2021-01-16]
Edge Extension: (PowerPoint) - C:\Users\ordinace_2\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2021-01-16]
Edge HKU\S-1-5-21-1930677817-3247307296-2436609557-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => not found
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2021-05-05] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files (x86)\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-06-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files (x86)\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-06-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2021-05-05] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default [2021-06-09]
CHR Extension: (Prezentace) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-01-16]
CHR Extension: (Ochrana Kaspersky) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-06-09]
CHR Extension: (Podepisovací komponenta Signer) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\alldahcdhngmcjagmefklhhecboiigni [2021-02-03]
CHR Extension: (Dokumenty) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-01-16]
CHR Extension: (Disk Google) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-01-16]
CHR Extension: (YouTube) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-01-16]
CHR Extension: (Adobe Acrobat) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-16]
CHR Extension: (Tabulky) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-01-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-05-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-01]
CHR Extension: (Gmail) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-16]
CHR Extension: (Chrome Media Router) - C:\Users\ordinace_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-05-31]
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [842424 2021-05-05] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AVP21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\avp.exe [384280 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [File not signed]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-05-10] (HP Inc. -> HP Inc.)
S3 klvssbridge64_21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\x64\vssbridge64.exe [479280 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 kpm_launch_service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe [357272 2021-04-28] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 KSDE5.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe [646520 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MSSQL$DATA; C:\Program Files\Microsoft SQL Server\MSSQL12.DATA\MSSQL\Binn\sqlservr.exe [370368 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393304 2021-06-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 SQLAgent$DATA; C:\Program Files\Microsoft SQL Server\MSSQL12.DATA\MSSQL\Binn\SQLAGENT.EXE [613056 2015-06-10] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13261608 2021-05-28] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.4-0\NisSrv.exe [2644760 2021-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.4-0\MsMpEng.exe [136656 2021-06-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 amsdk; C:\Windows\system32\drivers\amsdk.sys [232792 2021-06-08] (Zemana D.O.O. Sarajevo -> Copyright 2018.)
R3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [250032 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupdisk; C:\Windows\system32\DRIVERS\klbackupdisk.sys [110336 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [211704 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [126216 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [41656 2021-02-19] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R1 klflt; C:\Windows\system32\DRIVERS\klflt.sys [514840 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [657696 2021-05-08] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1439456 2021-05-08] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys [253736 2021-06-09] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1042712 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [98040 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [112392 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [112904 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [85256 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [96008 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\drivers\kltap.sys [55592 2021-02-19] (AnchorFree Inc -> The OpenVPN Project)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [263888 2021-06-09] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [309104 2021-06-09] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [115744 2021-06-09] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [224880 2021-06-09] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S4 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [155912 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [327936 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [300808 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S4 RsFx0300; C:\Windows\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R3 rtwlane_13; C:\Windows\System32\drivers\rtwlane_13.sys [3717120 2019-12-07] (Microsoft Windows -> Realtek Semiconductor Corporation)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [49560 2021-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [425208 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [76008 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
U2 sqlserveragent; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-06-09 10:55 - 2021-06-09 10:56 - 000027669 _____ C:\Users\ordinace_2\Desktop\FRST.txt
2021-06-09 10:55 - 2021-06-09 10:56 - 000000000 ____D C:\FRST
2021-06-09 10:54 - 2021-06-09 09:44 - 002300416 _____ (Farbar) C:\Users\ordinace_2\Desktop\FRST64.exe
2021-06-09 09:57 - 2021-06-09 09:57 - 000000000 ____D C:\Users\ordinace_2\AppData\Local\Kaspersky Lab
2021-06-09 09:44 - 2021-06-09 09:44 - 002300416 _____ (Farbar) C:\Users\ordinace_2\Downloads\FRST64.exe
2021-06-09 09:43 - 2021-06-09 09:43 - 000309104 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2021-06-09 09:42 - 2021-06-09 09:42 - 000263888 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys
2021-06-09 09:42 - 2021-06-09 09:42 - 000224880 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys
2021-06-09 09:42 - 2021-06-09 09:42 - 000115744 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
2021-06-09 09:42 - 2021-06-09 09:42 - 000003392 _____ C:\Windows\system32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2021-06-09 09:42 - 2021-06-09 09:42 - 000003192 _____ C:\Windows\system32\Tasks\kpm_tray.exe
2021-06-09 09:42 - 2021-06-09 09:42 - 000001234 _____ C:\Users\Public\Desktop\Kaspersky Password Manager.lnk
2021-06-09 09:42 - 2021-06-09 09:42 - 000001170 _____ C:\Users\Public\Desktop\Kaspersky VPN.lnk
2021-06-09 09:42 - 2021-06-09 09:42 - 000000000 ____D C:\Users\Default\AppData\Local\Kaspersky Lab
2021-06-09 09:42 - 2021-06-09 09:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN
2021-06-09 09:42 - 2021-06-09 09:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager
2021-06-09 09:42 - 2021-06-09 09:42 - 000000000 ____D C:\Program Files\Common Files\AV
2021-06-09 09:41 - 2021-06-09 09:42 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2021-06-09 09:41 - 2021-06-09 09:42 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2021-06-09 09:41 - 2021-06-09 09:41 - 000002173 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2021-06-09 09:41 - 2021-06-09 09:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2021-06-09 09:41 - 2021-02-19 21:09 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2021-06-09 09:41 - 2021-02-19 21:08 - 001042712 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2021-06-09 09:41 - 2021-02-19 21:08 - 000514840 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2021-06-09 09:39 - 2021-06-09 09:39 - 002765696 _____ (Kaspersky) C:\Users\ordinace_2\Downloads\kav21.3.10.391cs_25685.exe
2021-06-08 22:42 - 2021-06-09 09:55 - 118751232 _____ C:\Windows\system32\config\SOFTWARE
2021-06-08 22:39 - 2021-06-08 22:42 - 000000000 ____D C:\Windows\Microsoft Antimalware
2021-06-08 15:56 - 2021-06-08 15:56 - 002270385 _____ C:\Users\ordinace_2\Downloads\Majner.Fr.47.pdf
2021-06-08 15:54 - 2021-06-08 15:55 - 002270385 _____ C:\Users\ordinace_2\Documents\Majner.Fr.47.pdf
2021-06-08 15:10 - 2021-06-08 15:10 - 000037291 _____ C:\Users\ordinace_2\Downloads\stáhnout.htm
2021-06-08 15:09 - 2021-06-09 10:56 - 000109342 _____ C:\Windows\ZAM.krnl.trace
2021-06-08 15:09 - 2021-06-08 15:09 - 000232792 _____ (Copyright 2018.) C:\Windows\system32\Drivers\amsdk.sys
2021-06-08 15:09 - 2021-06-08 15:09 - 000003556 _____ C:\Windows\system32\Tasks\AMHelper
2021-06-08 15:09 - 2021-06-08 15:09 - 000002676 _____ C:\Windows\system32\Tasks\AMSkipUAC
2021-06-08 15:09 - 2021-06-08 15:09 - 000001340 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
2021-06-08 15:09 - 2021-06-08 15:09 - 000000000 ____D C:\Users\ordinace_2\AppData\Local\Zemana
2021-06-08 15:09 - 2021-06-08 15:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2021-06-08 15:09 - 2021-06-08 15:09 - 000000000 ____D C:\Program Files (x86)\Zemana
2021-06-08 15:08 - 2021-06-08 15:24 - 000000000 ____D C:\Users\ordinace_2\AppData\Local\AMSDK
2021-06-08 15:08 - 2021-06-08 15:08 - 013922376 _____ (Zemana Ltd. ) C:\Users\ordinace_2\Downloads\AntiMalware_Setup.exe
2021-06-08 11:55 - 2021-06-08 11:55 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-06-08 11:55 - 2021-06-08 11:55 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2021-06-08 11:55 - 2021-06-08 11:55 - 002260480 _____ (The ICU Project) C:\Windows\system32\icu.dll
2021-06-08 11:55 - 2021-06-08 11:55 - 001864192 _____ (The ICU Project) C:\Windows\SysWOW64\icu.dll
2021-06-08 11:55 - 2021-06-08 11:55 - 001823792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-06-08 11:55 - 2021-06-08 11:55 - 001393496 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-06-08 11:55 - 2021-06-08 11:55 - 001314120 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-06-08 11:55 - 2021-06-08 11:55 - 000657464 _____ C:\Windows\system32\WindowManagementAPI.dll
2021-06-08 11:55 - 2021-06-08 11:55 - 000568832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2021-06-08 11:55 - 2021-06-08 11:55 - 000468440 _____ C:\Windows\SysWOW64\WindowManagementAPI.dll
2021-06-08 11:55 - 2021-06-08 11:55 - 000451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2021-06-08 11:55 - 2021-06-08 11:55 - 000423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2021-06-08 11:55 - 2021-06-08 11:55 - 000223744 _____ C:\Windows\SysWOW64\TpmTool.exe
2021-06-08 11:55 - 2021-06-08 11:55 - 000097280 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-06-08 11:55 - 2021-06-08 11:55 - 000011327 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-06-08 11:54 - 2021-06-08 11:54 - 000563712 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2021-06-08 11:54 - 2021-06-08 11:54 - 000287232 _____ C:\Windows\system32\CoreMas.dll
2021-06-08 11:54 - 2021-06-08 11:54 - 000272384 _____ C:\Windows\system32\TpmTool.exe
2021-06-08 11:21 - 2021-06-08 11:21 - 000000000 ____D C:\Users\ordinace_2\Documents\FeedbackHub
2021-06-07 13:52 - 2021-06-07 13:52 - 000536385 _____ C:\Users\ordinace_2\Documents\Zrušení_smlouvy1200124794 podepsaná.pdf
2021-06-07 13:52 - 2021-06-07 13:52 - 000514857 _____ C:\Users\ordinace_2\Documents\změna správce ps podepsaná.pdf
2021-06-07 13:51 - 2021-06-07 13:51 - 000442325 _____ C:\Users\ordinace_2\Documents\změna správce ps.pdf
2021-06-07 13:50 - 2021-06-07 13:50 - 000463851 _____ C:\Users\ordinace_2\Documents\Zrušení_smlouvy1200124794.pdf
2021-06-07 09:32 - 2021-06-07 09:32 - 000000036 _____ C:\Windows\SysWOW64\id.dat
2021-06-04 13:53 - 2021-06-04 14:24 - 000000000 ____D C:\ProgramData\bitmonero
2021-06-04 13:53 - 2021-06-04 13:53 - 000000000 ____D C:\Users\ordinace_2\Documents\Monero
2021-06-04 13:53 - 2021-06-04 13:53 - 000000000 ____D C:\ProgramData\.shared-ringdb
2021-06-04 13:52 - 2021-06-07 07:49 - 000000000 ____D C:\Users\ordinace_2\AppData\Roaming\monero-wallet-gui
2021-06-04 13:40 - 2021-06-04 13:40 - 000000000 ____D C:\Users\ordinace_2\AppData\Roaming\Ledger Live
2021-06-04 13:40 - 2021-06-04 13:40 - 000000000 ____D C:\Users\ordinace_2\AppData\Local\ledger-live-desktop-updater
2021-06-04 12:34 - 2021-06-04 12:34 - 000000000 ____D C:\Users\ordinace_2\Downloads\Nová složka
2021-06-04 12:34 - 2021-06-04 12:34 - 000000000 ____D C:\Users\ordinace_2\Downloads\hk
2021-06-04 11:43 - 2021-06-04 11:43 - 000335602 _____ C:\Users\ordinace_2\Documents\VoZP kompenzace sestry.pdf
2021-06-03 16:49 - 2021-06-03 19:50 - 000000000 ____D C:\Users\ordinace_2\AppData\Roaming\MultiDoge
2021-06-03 16:46 - 2021-06-03 16:46 - 000164640 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2021-06-03 16:46 - 2021-06-03 16:46 - 000000000 ____D C:\Users\ordinace_2\AppData\Roaming\Sun
2021-06-03 16:46 - 2021-06-03 16:46 - 000000000 ____D C:\Users\ordinace_2\AppData\LocalLow\Sun
2021-06-03 16:46 - 2021-06-03 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2021-06-03 16:46 - 2021-06-03 16:46 - 000000000 ____D C:\Program Files (x86)\Java
2021-06-03 16:18 - 2021-06-04 09:48 - 000000000 ____D C:\Users\ordinace_2\Documents\Doge
2021-05-28 07:58 - 2021-05-28 07:58 - 000065160 _____ (Adobe Systems Inc) C:\Windows\system32\AdobePDF.dll
2021-05-28 07:58 - 2021-05-28 07:58 - 000035992 _____ (Adobe Systems Inc.) C:\Windows\system32\AdobePDFUI.dll
2021-05-12 14:14 - 2021-05-12 14:14 - 001687040 _____ C:\Windows\system32\libcrypto.dll
2021-05-12 14:14 - 2021-05-12 14:14 - 001163776 _____ C:\Windows\system32\MBR2GPT.EXE
2021-05-12 14:14 - 2021-05-12 14:14 - 000700928 _____ C:\Windows\system32\FsNVSDeviceSource.dll
2021-05-12 14:14 - 2021-05-12 14:14 - 000165888 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-05-12 14:14 - 2021-05-12 14:14 - 000157184 _____ C:\Windows\system32\uwfcsp.dll
2021-05-12 14:14 - 2021-05-12 14:14 - 000153600 _____ C:\Windows\system32\uwfcfgmgmt.dll
2021-05-12 14:14 - 2021-05-12 14:14 - 000060928 _____ C:\Windows\system32\runexehelper.exe
2021-05-12 14:14 - 2021-05-12 14:14 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe
2021-05-11 07:55 - 2021-05-11 07:55 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-06-09 10:54 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-06-09 10:41 - 2020-09-29 11:30 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-06-09 10:08 - 2021-03-10 17:39 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-06-09 10:03 - 2020-09-29 11:36 - 001976050 _____ C:\Windows\system32\PerfStringBackup.INI
2021-06-09 10:03 - 2020-05-26 10:29 - 000815972 _____ C:\Windows\system32\perfh005.dat
2021-06-09 10:03 - 2020-05-26 10:29 - 000184358 _____ C:\Windows\system32\perfc005.dat
2021-06-09 10:03 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2021-06-09 09:56 - 2021-03-10 17:50 - 000000000 ___RD C:\Users\ordinace_2\Creative Cloud Files
2021-06-09 09:56 - 2021-01-16 16:46 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-06-09 09:56 - 2021-01-16 10:20 - 000000000 __SHD C:\Users\ordinace_2\IntelGraphicsProfiles
2021-06-09 09:56 - 2020-09-29 11:30 - 000008192 ___SH C:\DumpStack.log.tmp
2021-06-09 09:56 - 2020-09-29 11:30 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-06-09 09:56 - 2020-09-29 11:30 - 000000000 ____D C:\Intel
2021-06-09 09:55 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2021-06-09 09:41 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2021-06-09 09:41 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2021-06-09 09:38 - 2021-03-10 17:38 - 000000000 ____D C:\Program Files\Adobe
2021-06-09 02:27 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2021-06-08 16:34 - 2020-09-29 11:35 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-06-08 15:58 - 2021-03-10 17:56 - 000002121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2021-06-08 15:58 - 2021-03-10 17:56 - 000002110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2021-06-08 12:38 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\NDF
2021-06-08 12:03 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-06-08 12:01 - 2020-09-29 11:30 - 000490264 _____ C:\Windows\system32\FNTCACHE.DAT
2021-06-08 12:00 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lv-LV
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\et-EE
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-06-08 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2021-06-08 11:57 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2021-06-08 11:47 - 2021-01-16 12:27 - 000000000 ___HD C:\$WinREAgent
2021-06-08 11:23 - 2021-03-10 17:38 - 000000000 ____D C:\Program Files\Common Files\Adobe
2021-06-07 10:36 - 2021-04-06 13:02 - 000000000 ____D C:\Program Files (x86)\Autodesk
2021-06-07 10:36 - 2021-04-06 12:51 - 000000000 ____D C:\ProgramData\Autodesk
2021-06-07 10:36 - 2021-04-06 12:50 - 000000000 ____D C:\Users\ordinace_2\AppData\Local\Autodesk
2021-06-07 10:34 - 2021-04-06 12:53 - 000000000 ____D C:\Program Files\Autodesk
2021-06-07 10:33 - 2021-04-06 12:51 - 000000000 ____D C:\Users\ordinace_2\AppData\Roaming\Autodesk Installer
2021-06-07 10:31 - 2021-04-06 12:51 - 000000000 ____D C:\Users\ordinace_2\AppData\Roaming\Autodesk
2021-06-07 10:22 - 2021-01-28 16:52 - 000000000 ____D C:\Users\ordinace_2\AppData\Local\D3DSCache
2021-06-05 21:27 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-06-05 17:23 - 2020-09-29 11:30 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-06-05 14:23 - 2021-01-16 17:59 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-06-05 14:23 - 2021-01-16 17:59 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-05-29 07:29 - 2021-01-16 10:22 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1930677817-3247307296-2436609557-1001
2021-05-29 07:29 - 2021-01-16 10:22 - 000000000 ___RD C:\Users\ordinace_2\OneDrive
2021-05-29 07:29 - 2021-01-16 10:19 - 000002387 _____ C:\Users\ordinace_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-05-27 01:59 - 2021-01-16 15:40 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-05-27 01:59 - 2021-01-16 15:40 - 000002213 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-05-12 18:22 - 2019-12-07 11:51 - 000000000 ____D C:\Windows\system32\OpenSSH
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lt-LT
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2021-05-12 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\DiagTrack
2021-05-12 18:21 - 2021-01-16 10:19 - 000000000 ____D C:\Users\ordinace_2
2021-05-12 14:16 - 2019-12-07 11:54 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2021-05-12 14:07 - 2021-01-16 17:56 - 000000000 ____D C:\Windows\system32\MRT
2021-05-12 14:05 - 2021-04-06 12:53 - 000000000 ____D C:\Program Files\dotnet
2021-05-12 14:05 - 2021-01-16 17:56 - 132732536 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-05-12 14:05 - 2020-09-29 11:34 - 000000000 ____D C:\ProgramData\Package Cache
2021-05-11 07:54 - 2021-04-14 09:12 - 000000000 ____D C:\Windows\system32\Tasks\HP
==================== Files in the root of some directories ========
2021-03-10 17:57 - 2021-03-10 17:57 - 000000000 _____ () C:\Users\ordinace_2\AppData\Local\oobelibMkey.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================