nezapíná se šetřič obrazovky

[Hynek88]

Zdravím,
musím zapínat ručně přes "přizpůsobit" a chvíli to automaticky funguje, ale pak zas ne, mám novou oled panasonic, tak mám strach, aby se mně nevypálil ten stálej obraz, když zaspím...

čili podezření na ňákou havěť, děkujji za případné řešení

tady je log z frsit

frst:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-12-2021
Ran by PC (administrator) on DESKTOP-3CTVH0E (27-12-2021 08:50:09)
Running from C:\Users\PC\Desktop
Loaded Profiles: PC
Platform: Microsoft Windows 10 Home Version 20H2 19042.1415 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Windows\System\HsMgr64.exe
() [File not signed] C:\Windows\SysWOW64\HsMgr.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(BitTorrent Inc -> BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe
(CMedia) [File not signed] C:\Program Files\ASUS Xonar Essence ST Audio\Customapp\AsusAudioCenter.exe
(Fine spol. s r.o. -> ALTAP) C:\Program Files (x86)\Altap Salamander\salamand.exe
(Fine spol. s r.o. -> ALTAP) C:\Program Files (x86)\Altap Salamander\utils\salmon.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Learsy) [File not signed] C:\Program Files (x86)\MuralPix\MpAgent.exe
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\NVDisplay.Container.exe <2>
(SOKNO S.R.L. -> ) C:\Program Files (x86)\SpeedFan\speedfan.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-06-18] (Intel CASE -> Intel Corporation)
HKLM\...\Run: [Cmaudio8788] => C:\Windows\Syswow64\cmicnfgp.dll [13463552 2021-03-23] (C-Media Corporation) [File not signed]
HKLM\...\Run: [Cmaudio8788GX] => C:\Windows\syswow64\HsMgr.exe [200704 2021-03-23] () [File not signed]
HKLM\...\Run: [Cmaudio8788GX64] => C:\Windows\system\HsMgr64.exe [282112 2021-03-23] () [File not signed]
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech -> Logitech Inc.)
HKLM-x32\...\Run: [MuralPixAgent] => C:\Program Files (x86)\MuralPix\MpAgent.exe [102400 2006-12-30] (Learsy) [File not signed]
HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\...\Run: [Steam] => D:\Steam\steam.exe [4267944 2021-11-19] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\SysWOW64\MuralPix.scr [106496 2006-12-30] (Learsy) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\89.1.22.67\Installer\chrmstp.exe [2021-03-24] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Speedfan Startup.lnk [2021-03-28]
ShortcutTarget: Speedfan Startup.lnk -> C:\Windows\System32\schtasks.exe (Microsoft Windows -> Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1D270147-DD55-4E70-9FBD-5177E19A1EE4} - System32\Tasks\Speedfan Startup => C:\Program Files (x86)\SpeedFan\speedfan.exe [8166536 2016-06-29] (SOKNO S.R.L. -> ) -> /c start "Speedfan Startup" "C:\Program Files (x86)\SpeedFan\speedfan.exe"
Task: {245C00F1-4F62-45A7-8912-5462346337B6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {64FD2F43-3CE3-4B5D-B1F9-0B98D24FBDAA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6764ACC0-D2FF-4FC5-B863-AFD2E4ACC7C4} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-24] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {70DC0CDE-E0DF-45EF-A0A4-8C0BBBEC3A49} - System32\Tasks\Mozilla\Firefox Default Browser Agent 9388B6559483FD17 => C:\Mozilla Firefox\default-browser-agent.exe do-task "9388B6559483FD17"
Task: {84392BDD-768C-451A-8CC1-AD20964E8B96} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AD832861-8F4D-40EA-9E60-EA5695937BB5} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe /s (No File)
Task: {CB8F38C0-7092-4929-9F17-68A95257FB64} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DB80F053-886E-486B-BB16-8ECFB2E732C8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.5.1 172.21.1.1 172.21.1.2
Tcpip\..\Interfaces\{154e81dd-97c9-424e-bd8c-4ca78f603f95}: [DhcpNameServer] 192.168.5.1 172.21.1.1 172.21.1.2

FireFox:
========
FF DefaultProfile: cmv64535.default-1617030860948
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\c5xkfvmc.default-1616169207305 [2021-12-25]
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\16rhk66j.default-1483610832811 [2021-12-25]
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\cmv64535.default-1617030860948 [2021-12-27]
FF Homepage: Mozilla\Firefox\Profiles\cmv64535.default-1617030860948 -> hxxp://www.panzernet.net/panzernet/start.php
FF Session Restore: Mozilla\Firefox\Profiles\cmv64535.default-1617030860948 -> is enabled.
FF Notifications: Mozilla\Firefox\Profiles\cmv64535.default-1617030860948 -> hxxps://www.opensubtitles.org
FF Extension: (Dark Reader) - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\cmv64535.default-1617030860948\Extensions\addon@darkreader.org.xpi [2021-12-08]
FF Extension: (uBlock Origin) - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\cmv64535.default-1617030860948\Extensions\uBlock0@raymondhill.net.xpi [2021-12-23]
FF Extension: (Northern Lake FT by MaDonna) - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\cmv64535.default-1617030860948\Extensions\{fcebb804-5eb9-43d9-a12a-30f6ca1b9b1b}.xpi [2021-06-02]
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
StartMenuInternet: Firefox-9388B6559483FD17 - C:\Mozilla Firefox\firefox.exe

Brave:
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2021-12-27]
BRA Notifications: Default -> hxxps://www.megaknihy.cz; hxxps://www.tipsport.cz
BRA DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}&t=brave
BRA DefaultSearchKeyword: Default -> :d
BRA DefaultSuggestURL: Default -> hxxps://ac.duckduckgo.com/ac/?q={searchTerms}&type=list
BRA Extension: (DuckDuckGo) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2021-10-01]
BRA Extension: (Dark Reader) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2021-12-07]
BRA Profile: C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\Guest Profile [2021-07-18]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2021-10-02]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2021-12-27]
BRA Extension: (Brave NTP sponsored images) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\efkihffiamafhbhefjaljejgdpkelpal [2021-12-27]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2021-09-14]
BRA Extension: (Brave Ad Block Updater (CZE, SVK: EasyList Czech and Slovak)) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\omkkefoeihpbpebhhbhmjekpnegokpbj [2021-12-27]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\PC\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2021-12-23]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
S3 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-24] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-24] (Brave Software, Inc. -> BraveSoftware Inc.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
S3 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-06-18] (Intel CASE -> )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [452576 2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [901088 2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
S3 PrintNotify; C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll [3596288 2021-03-24] (Microsoft Corporation) [File not signed]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R3 cmudaxp; C:\Windows\system32\drivers\cmudaxp.sys [2735616 2021-03-23] (C-MEDIA ELECTRONICS INC. -> C-Media Inc)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
S3 MZ_USBAUDIO; C:\Windows\system32\drivers\mz_usbaudio.sys [144896 2013-05-14] (DandM Holdings Inc. -> D&M Holdings Inc.)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
R1 steamxbox; C:\Windows\System32\drivers\steamxbox.sys [232792 2021-09-05] (Valve Corp. -> Valve Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48536 2021-12-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [435432 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-16] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-27 08:50 - 2021-12-27 08:50 - 000015339 _____ C:\Users\PC\Desktop\FRST.txt
2021-12-27 08:49 - 2021-12-27 08:50 - 000000000 ____D C:\FRST
2021-12-27 08:49 - 2021-12-27 08:49 - 002311168 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2021-12-27 08:43 - 2021-12-27 08:44 - 000000000 ____D C:\foto3
2021-12-25 12:54 - 2021-12-25 12:54 - 000000000 ____D C:\Users\PC\AppData\Roaming\NVIDIA
2021-12-16 05:28 - 2021-12-16 05:28 - 000000000 ____D C:\Windows\SystemTemp
2021-12-15 21:37 - 2021-12-15 21:37 - 000223744 _____ C:\Windows\SysWOW64\TpmTool.exe
2021-12-15 21:37 - 2021-12-15 21:37 - 000011979 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-12-15 21:36 - 2021-12-15 21:36 - 000272384 _____ C:\Windows\system32\TpmTool.exe
2021-12-15 21:36 - 2021-12-15 21:36 - 000162816 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-12-15 21:29 - 2021-12-15 21:29 - 000000000 ___HD C:\$WinREAgent
2021-12-13 15:17 - 2021-12-27 08:42 - 000000000 ____D C:\Mozilla Firefox

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-12-27 08:51 - 2021-03-24 20:19 - 000000000 ____D C:\Users\PC\AppData\Roaming\uTorrent
2021-12-27 08:49 - 2021-03-24 16:47 - 000000000 ____D C:\Users\PC\AppData\LocalLow\Mozilla
2021-12-27 08:49 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-27 08:43 - 2021-03-29 16:14 - 000000000 ____D C:\ProgramData\Mozilla
2021-12-27 08:40 - 2020-09-27 06:50 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-12-27 00:00 - 2021-03-24 11:19 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2021-12-26 12:46 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2021-12-26 08:55 - 2021-03-24 11:34 - 000000000 ____D C:\Users\PC\AppData\Local\D3DSCache
2021-12-26 07:38 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2021-12-26 07:15 - 2021-03-23 15:56 - 001605602 _____ C:\Windows\system32\PerfStringBackup.INI
2021-12-26 07:15 - 2019-12-07 15:41 - 000682184 _____ C:\Windows\system32\perfh005.dat
2021-12-26 07:15 - 2019-12-07 15:41 - 000137000 _____ C:\Windows\system32\perfc005.dat
2021-12-26 07:15 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2021-12-26 07:13 - 2021-11-22 05:17 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-12-26 07:09 - 2021-03-24 08:57 - 000000000 ____D C:\ProgramData\NVIDIA
2021-12-26 07:09 - 2020-09-27 08:51 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-12-26 07:09 - 2020-09-27 06:50 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-26 00:42 - 2019-12-07 10:03 - 000524288 _____ C:\Windows\system32\config\BBI
2021-12-26 00:12 - 2021-08-02 07:05 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2021-12-26 00:11 - 2021-03-23 15:55 - 000000000 ____D C:\Users\PC\AppData\Local\Packages
2021-12-26 00:11 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-25 16:18 - 2021-03-24 20:23 - 000000000 ____D C:\Users\PC\AppData\Local\CrashDumps
2021-12-16 15:04 - 2020-09-27 08:51 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-12-16 15:01 - 2020-09-27 06:50 - 000459456 _____ C:\Windows\system32\FNTCACHE.DAT
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lv-LV
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lt-LT
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\et-EE
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\es-MX
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Provisioning
2021-12-16 05:28 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2021-12-15 21:28 - 2021-03-24 08:31 - 000000000 ____D C:\Windows\system32\MRT
2021-12-15 21:27 - 2021-03-24 08:31 - 137938848 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-12-06 21:25 - 2021-03-24 21:44 - 000000000 ____D C:\Users\PC\AppData\Roaming\foobar2000

==================== Files in the root of some directories ========

2021-03-24 08:36 - 2021-03-24 08:36 - 000000600 _____ () C:\Users\PC\AppData\Roaming\winscp.rnd
2021-03-25 16:30 - 2021-03-25 16:31 - 000007597 _____ () C:\Users\PC\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

addition:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-12-2021
Ran by PC (27-12-2021 08:51:34)
Running from C:\Users\PC\Desktop
Microsoft Windows 10 Home Version 20H2 19042.1415 (X64) (2021-03-23 14:52:24)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1091510603-4126540304-2273175986-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1091510603-4126540304-2273175986-503 - Limited - Disabled)
Guest (S-1-5-21-1091510603-4126540304-2273175986-501 - Limited - Disabled)
PC (S-1-5-21-1091510603-4126540304-2273175986-1001 - Administrator - Enabled) => C:\Users\PC
WDAGUtilityAccount (S-1-5-21-1091510603-4126540304-2273175986-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - )
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 21.007.20099 - Adobe Systems Incorporated)
Altap Salamander 4.0 (x86) (HKLM-x32\...\Altap Salamander 4.0 (x86)) (Version: 4.0 - ALTAP)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
ASUS Xonar Essence ST Audio (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392008788}) (Version: - ASUSTeK Computer Inc.)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 89.1.22.67 - Autoři prohlížeče Brave)
CDisplayEx 1.10.33 (HKLM\...\CDisplayEx_is1) (Version: - Progdigy Software S.A.R.L.)
Fallout 4 - Čeština (HKLM-x32\...\{128B0EF8-7109-4709-A619-57607BE524BB}) (Version: 1.0.1 - prekladyher.eu)
foobar2000 v1.6.4 (HKLM-x32\...\foobar2000) (Version: 1.6.4 - Peter Pawlowski)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.64.5328 - GOM & Company)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1156 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{F46EF80D-07F0-4E56-B9B3-8EDB759B52D8}) (Version: 5.0.10.2850 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Kontrola stavu osobního počítače s Windows (HKLM\...\{88EC8D4A-54AB-4A7F-BDE9-4AD906D9D11F}) (Version: 3.2.2110.14001 - Microsoft Corporation)
LibreOffice 7.0.1.2 (HKLM\...\{B98796CE-B0AD-498E-81E4-986FA3BB20B9}) (Version: 7.0.1.2 - The Document Foundation)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Malwarebytes Anti-Malware verze 1.80.2.1012 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.80.2.1012 - Malwarebytes Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\...\OneDriveSetup.exe) (Version: 21.030.0211.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{659502b7-dea8-4adc-99c4-64f141a83c2d}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30133 (HKLM-x32\...\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}) (Version: 14.29.30133.0 - Microsoft Corporation)
Mozilla Firefox (x64 cs) (HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\...\Mozilla Firefox 95.0 (x64 cs)) (Version: 95.0 - Mozilla)
Mozilla Firefox 87.0 (x64 cs) (HKLM\...\Mozilla Firefox 87.0 (x64 cs)) (Version: 87.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 87.0 - Mozilla)
MpcStar 7.0 (HKLM-x32\...\MpcStar) (Version: 7.0 - www.mpcstar.com)
MuralPix 1.07 (HKLM-x32\...\MuralPix) (Version: - )
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.1.2 - Notepad++ Team)
NVIDIA Ovladače grafiky 496.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 496.49 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Panzer Corps 2 (HKLM-x32\...\1698452155_is1) (Version: 1.02.01.01 - GOG.com)
Panzer Corps 2 Bonus scenarios (HKLM-x32\...\1545797396_is1) (Version: 1.02.01.01 - GOG.com)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
USB Audio (HKLM\...\{B500C5BD-165A-4F93-ADAB-BA9E3C071B6C}) (Version: 2.0.1 - Marantz)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
Vortex (HKLM\...\57979c68-f490-55b8-8fed-8b017a5af2fe) (Version: 1.4.14 - Black Tree Gaming Ltd.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.66 - Nullsoft, Inc)
Wooky 3.0.2.2 (HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\...\Wooky) (Version: 3.0.2.2 - Mobilbonus, s.r.o.)

Packages:
=========
7-Zip File Manager (Unofficial) -> C:\Program Files\WindowsApps\HaukeGtze.7-ZipFileManagerUnofficial_1.2106.1.0_x64__6bk20wvc8rfx2 [2021-12-02] (Hauke Hasselberg)
Hidden City: Hidden Object Adventure -> C:\Program Files\WindowsApps\828B5831.HiddenCityMysteryofShadows_1.45.4501.0_x86__ytsefhwckbdv6 [2021-12-10] (G5 Entertainment AB)
Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_4.1.11220.0_x64__8wekyb3d8bbwe [2021-12-15] (Microsoft Studios) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.11.12030.0_x64__8wekyb3d8bbwe [2021-12-10] (Microsoft Studios) [MS Ad]
Microsoft Treasure Hunt -> C:\Program Files\WindowsApps\Microsoft.MicrosoftTreasureHunt_2.2.5200.0_x86__8wekyb3d8bbwe [2021-10-13] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-11-07] (NVIDIA Corp.)
RAR Opener -> C:\Program Files\WindowsApps\DeviceDoctor.RAROpener_1.3.48.0_x64__mkdtfchztkfbm [2021-10-13] (Tiny Opener)
Rozšíření pro video MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-09-18] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1091510603-4126540304-2273175986-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation - pGFX -> Intel Corporation)
CustomCLSID: HKU\S-1-5-21-1091510603-4126540304-2273175986-1001_Classes\CLSID\{C78B614F-F3EA-11D2-94A1-00E0292A01E3}\InprocServer32 -> C:\Program Files (x86)\Altap Salamander\utils\salextx64.dll (Fine spol. s r.o. -> ALTAP)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2021-07-16] (Notepad++ -> )
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll [2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2015-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_44dc4eefedc0d082\nvshext.dll [2021-10-21] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll [2016-02-09] (Malwarebytes Corporation -> Malwarebytes Corporation)
ContextMenuHandlers4_S-1-5-21-1091510603-4126540304-2273175986-1001: [Fb2kShellExt] -> {511D48AF-9E45-4CB8-8F02-9C1BE4BC3CF8} => C:\Program Files (x86)\foobar2000\ShellExt64.dll [2019-12-02] (Piotr Pawłowski -> Peter Pawlowski) [File not signed]

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32-x32: [VIDC.FFDS] => ff_vfw.dll

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Software Deals.lnk -> C:\ProgramData\Ashampoo\YourDeals.exe () -> hxxp://linktarget.ashampoo.com/linktarget/?target=marketplace&edition=eid=13472&utm_medium=desktop&x-pos=Metro

==================== Loaded Modules (Whitelisted) =============

2021-03-23 16:26 - 2021-03-23 16:25 - 000143360 ____N () [File not signed] C:\Program Files\ASUS Xonar Essence ST Audio\Customapp\VmixP8.dll
2021-03-24 11:19 - 2021-12-26 07:10 - 000192512 _____ () [File not signed] C:\Users\PC\AppData\Local\Temp\sfamcc00001.dll
2021-12-06 15:12 - 2021-12-26 07:10 - 000158720 _____ () [File not signed] C:\Users\PC\AppData\Local\Temp\sfareca00001.dll
2021-03-23 16:26 - 2021-03-23 16:25 - 000430080 ____N (C-Media Electronics Inc.) [File not signed] C:\Program Files\ASUS Xonar Essence ST Audio\CustomApp\cmdevice.dll
2021-03-23 16:26 - 2021-03-23 16:26 - 000122880 ____N (C-Media Electronics Inc.) [File not signed] C:\Windows\System\HsSrv64.dll
2015-05-22 00:59 - 2015-05-22 00:59 - 001202688 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Intel\iCLS Client\LIBEAY32.dll
2015-05-22 00:59 - 2015-05-22 00:59 - 000306688 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Intel\iCLS Client\ssleay32.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

SearchScopes: HKU\S-1-5-21-1091510603-4126540304-2273175986-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 10:14 - 2021-08-02 07:00 - 000000855 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT
HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\Control Panel\Desktop\\Wallpaper -> C:\foto1\infierno_hell_red_background_1321x932_desktop_1321x932_hd-wallpaper-169171.jpg
DNS Servers: 192.168.5.1 - 172.21.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "ISCT Tray"
HKLM\...\StartupApproved\Run: => "Cmaudio8788"
HKLM\...\StartupApproved\Run: => "Start WingMan Profiler"
HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{1B38B56F-40FA-445E-A85F-A19EDC28BC0D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7EFDB021-F8CA-4192-BB38-BAD2560F818F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FAB62E66-85BA-48F1-B647-9DA88CEAA711}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EA034265-458D-4C38-B6FB-DEA5FD5CDEE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F90BB8CE-5792-4A16-A9A6-C3B723697507}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{E6AA9AA5-9D34-4A16-BB9A-CD7BCF591160}] => (Allow) D:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{86C8FDBC-3C48-4227-A827-A3E40126E6D8}] => (Allow) D:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9BED10CE-BC62-4E7A-BA7F-31B3C26574C2}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{286814D8-B567-46CB-979C-F75E7CF505E1}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{344689AA-FCEF-4FDE-B2ED-91FBBB141AD4}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{6122EF37-CDFD-460A-95C2-CCA56BE1007B}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{41BA48C4-2FD8-4098-9313-5C1E761D4810}] => (Allow) C:\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D3709EB1-28E6-4601-BB3B-D726507856E4}] => (Allow) C:\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7D665E76-7152-4C21-B0EA-E2405AAC03AC}] => (Block) D:\Steam\steamapps\common\Fallout 4\Fallout4.exe (Bethesda Softworks) [File not signed]
FirewallRules: [{1F8A86D2-9C65-427C-9FCE-98794E0F0E90}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{A1CAE3BA-67CD-4E85-91FC-409334F4D6D4}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{7189F30F-F1F6-4535-A7E4-4DA4F3C4E3F4}] => (Allow) D:\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks) [File not signed]
FirewallRules: [{8DF363F0-78F8-48F6-BD39-211B85F2F33D}] => (Allow) D:\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks) [File not signed]
FirewallRules: [{40642B31-D916-4F00-8157-9965E5D35737}] => (Allow) D:\Steam\steamapps\common\Xenonauts\Xenonauts.exe () [File not signed]
FirewallRules: [{CDB3D726-A12A-46C2-8152-A7286E671071}] => (Allow) D:\Steam\steamapps\common\Xenonauts\Xenonauts.exe () [File not signed]
FirewallRules: [{E974110C-73CB-47F8-A2B8-61400BB352A1}] => (Allow) D:\Steam\steamapps\common\Project CARS 2\pCARS2.exe (Slightly Mad Studios Ltd) [File not signed]
FirewallRules: [{295B1D99-D292-417A-BA5B-FEC52C9E18BB}] => (Allow) D:\Steam\steamapps\common\Project CARS 2\pCARS2.exe (Slightly Mad Studios Ltd) [File not signed]
FirewallRules: [TCP Query User{866C3C38-49B6-4EB7-8D7F-1926F0E2C9C1}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{16B0A46E-1501-481F-A303-C986C7B678D5}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{3D9B0C25-D1D1-49BE-8825-464432B7156F}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [File not signed]
FirewallRules: [{549A2148-E64C-4D31-ABEC-7F313315CFFA}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [File not signed]

==================== Restore Points =========================

09-12-2021 16:05:06 Naplánovaný kontrolní bod
15-12-2021 21:31:01 Instalační služba modulů systému Windows
24-12-2021 09:14:56 Naplánovaný kontrolní bod
26-12-2021 07:37:39 Instalační služba modulů systému Windows

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (12/19/2021 06:21:13 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program identity_helper.exe verze 96.0.1054.62 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2754

Čas spuštění: 01d7f4fcbe64a13f

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.62\identity_helper.exe

ID hlášení: a86466af-94fa-4878-a009-9e771bcf472e

Úplný název balíčku s chybou: Microsoft.MicrosoftEdge.Stable_96.0.1054.57_neutral__8wekyb3d8bbwe

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (12/16/2021 04:03:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program identity_helper.exe verze 96.0.1054.57 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 2364

Čas spuštění: 01d7f28e10fe0b87

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.57\identity_helper.exe

ID hlášení: 1cb07d08-3b21-4d03-8618-886a17e7adc5

Úplný název balíčku s chybou: Microsoft.MicrosoftEdge.Stable_96.0.1054.53_neutral__8wekyb3d8bbwe

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (12/15/2021 09:29:27 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač.
.


Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (12/13/2021 03:17:23 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (12/12/2021 05:56:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program identity_helper.exe verze 96.0.1054.53 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1524

Čas spuštění: 01d7ef791ec0c6c2

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.53\identity_helper.exe

ID hlášení: 6c28ae40-109e-4eb5-afcf-abb5d266a0e5

Úplný název balíčku s chybou: Microsoft.MicrosoftEdge.Stable_96.0.1054.43_neutral__8wekyb3d8bbwe

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (12/03/2021 07:31:34 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program identity_helper.exe verze 96.0.1054.41 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1d28

Čas spuštění: 01d7e80f56765ebe

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.41\identity_helper.exe

ID hlášení: 07215caf-9490-42e6-8735-3316e6e20941

Úplný název balíčku s chybou: Microsoft.MicrosoftEdge.Stable_96.0.1054.34_neutral__8wekyb3d8bbwe

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (12/01/2021 03:30:46 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (H:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (12/01/2021 03:30:46 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na (C:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)


System errors:
=============
Error: (12/26/2021 12:41:02 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

Error: (12/26/2021 12:40:51 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

Error: (12/26/2021 12:25:32 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

Error: (12/26/2021 12:25:21 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

Error: (12/26/2021 12:10:32 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

Error: (12/26/2021 12:10:21 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

Error: (12/26/2021 11:57:12 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca

Error: (12/26/2021 11:57:01 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3CTVH0E)
Description: Nelze spustit server DCOM: Microsoft.MicrosoftEdge_44.19041.1266.0_neutral__8wekyb3d8bbwe!MicrosoftEdge jako Není k dispozici/Není k dispozici. Došlo k chybě:
2147942402
při provádění příkazu:
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca


Windows Defender:
================
Date: 2021-12-25 15:15:07
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {B89A7E85-FAC8-4686-8749-0C92BED7D1C8}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-12-24 16:57:11
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {2F0E8B93-0423-401D-9377-E6B7688BCCC7}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-12-23 17:32:58
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {261EC122-EC39-4BE1-B00E-0DF9812A1791}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-12-21 15:56:00
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {8D85532D-0AD4-4488-B6DB-91573C495E10}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2021-12-21 15:38:46
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {4B3C54D1-3E98-45C1-9A42-6FA93C601A9A}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

==================== Memory info ===========================

BIOS: American Megatrends Inc. P2.80 07/01/2013
Motherboard: ASRock Z77 Extreme6
Processor: Intel(R) Core(TM) i5-3450 CPU @ 3.10GHz
Percentage of memory in use: 20%
Total physical RAM: 16268.1 MB
Available physical RAM: 12958.83 MB
Total Virtual: 18700.1 MB
Available Virtual: 13722.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.28 GB) (Free:179.63 GB) NTFS
Drive d: (Nový svazek) (Fixed) (Total:931.5 GB) (Free:404.4 GB) NTFS
Drive h: () (Fixed) (Total:465.76 GB) (Free:426.75 GB) NTFS

\\?\Volume{de8f403c-78c6-4da3-98dd-7c65f59081c4}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{f65d7f54-4dcf-4e60-95b6-df53b1a403eb}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 232.9 GB) (Disk ID: 0BA592B7)

Partition: GPT.

==========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: A345F4C7)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

[Rudy]

Zdravím!
Zkuste aktualizovat ovladač zákl. desky (chipsetu). Neinstaloval jste nějaký nový hardware?

[Hynek88]

jo, měnil sem grafiku

tak zakl. deska aktualizována...

ale mám dva monitory samsung led a panasonic oled a jsou duplikovány a kdyz zapnu samsung tak ten panasonic se dycky tak nejak prepina (i kdyz je ve stand by režimu) a samsung zhasne na pul vteriny... a panasonic cvakne...

sammsung je z dvi a panasonic hdmi

ale kolikrát ani ten samsung nezapnu a šetřič stejně nejede auto, ještě sem zapomněl, že to mám přes muralpix

[Rudy]

Zkuste ještě reinstal (aktualizaci) ovladače grafiky. Podruhé se ptám, zda jste neinstaloval nějaký nový hardware?

[Hynek88]

no dyť řikám, že novou grafiku

omlouvám se, 660ti za 1050ti, zkusím reinstal ovladače... edit: ovladač aktualizován

a nepomohlo by vyčištění dle toho logu z frst? odstranil sem microsoft edge, možná stále šrotuje někde na pozadí... nebo ňáká havěť...

[Rudy]

Ještě jsem neviděl havěť, která by způsobovala tento jev. Ale prosím, zkusíme. Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Předpokládám, že s původní grafikou se tento jev, neprojevoval.

[Hynek88]

jo tak to nevím, tu 660ti sem měnil jen kvuli tomu, ze ji odesel hdmi vystup,,,

------
ale pockat--- je taky možný, že to dělá bezdrátovej logitech f710, zapojoval jsem jen když sem paril fallouta, ale tedka sem si vsiml, ze je ten vysilac stale zapojen... ???!
------

log:
# -------------------------------
# Malwarebytes AdwCleaner 8.3.1.0
# -------------------------------
# Build: 11-18-2021
# Database: 2021-12-02.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 12-27-2021
# Duration: 00:00:05
# OS: Windows 10 Home
# Scanned: 32024
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [1495 octets] - [13/09/2021 16:34:57]
AdwCleaner[C00].txt - [1665 octets] - [13/09/2021 16:37:34]
AdwCleaner[S01].txt - [1528 octets] - [13/09/2021 16:38:27]
AdwCleaner[C01].txt - [1718 octets] - [13/09/2021 16:38:37]
AdwCleaner[S02].txt - [1650 octets] - [26/12/2021 00:39:50]
AdwCleaner[C02].txt - [1840 octets] - [26/12/2021 00:40:09]
AdwCleaner[S03].txt - [1772 octets] - [27/12/2021 14:00:12]
AdwCleaner[C03].txt - [1962 octets] - [27/12/2021 14:00:20]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S04].txt ##########

[Rudy]

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
Task: {AD832861-8F4D-40EA-9E60-EA5695937BB5} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe /s (No File)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
SearchScopes: HKU\S-1-5-21-1091510603-4126540304-2273175986-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[Hynek88]

pc při tom fixu nedojede, zamrzne, musím restartovat,

log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 11-12-2021
Ran by PC (27-12-2021 16:48:23) Run:2
Running from C:\Users\PC\Desktop
Loaded Profiles: PC
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
Task: {AD832861-8F4D-40EA-9E60-EA5695937BB5} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe /s (No File)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
SearchScopes: HKU\S-1-5-21-1091510603-4126540304-2273175986-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AD832861-8F4D-40EA-9E60-EA5695937BB5}" => not found
"C:\Windows\System32\Tasks\MSIAfterburner" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MSIAfterburner" => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => not found
HKU\S-1-5-21-1091510603-4126540304-2273175986-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found

=========== EmptyTemp: ==========

BITS transfer queue => 0 B

[Rudy]

Tam bude nějaká chyba. Příkazem přes přík. řádek

sfc /scannow

spusťte sken systémových souborů a jejich případnou opravu.

[Hynek88]

tak dokonáno,

co teď?

[Rudy]

Zkuste znovu mazání ve FRST se stejným skriptem.

[Hynek88]

nic, furt se to seká - píše, že to maže "DOMstore" a zamrzne

to abych smazal vsechny ty adresare s temp soubarama rucne

zajimavý je, že po minutě, na kdy je nastaven ten šetřič, tak zčerná obrazovka ))

[Rudy]

Nezbude nic jiného, než obnova systému j datu, kdy korektně fungoval. Pokud nemáte bod obnovy, pak jen oprava pomocí windows repair: https://www.slunecnice.cz/sw/windows-repair/ . Pro ten druhý případ doporučuji provést zálohu dat.

[Hynek88]

ok,

ještě počkám,

mám podezření, že ten šetřič sabotuje ten bezdrátovej gamepad...

tak zatím díky!